@atlascrew/apparatus 0.9.0

package/dist/tarpit.js

@@ -0,0 +1,126 @@
+import { logger } from "./logger.js";
+import { broadcastTarpit } from "./sse-broadcast.js";
+import { isValidIpLiteral, normalizeIp } from "./utils/ip.js";
+import { cfg } from "./config.js";
+import { loadTarpitStateSync, writeTarpitState } from "./persistence/tarpit-state.js";
+import { markPersistenceHydrated, markPersistenceWrite, registerPersistenceStore } from "./persistence/status.js";
+const TRAP_PATHS = ["/wp-admin", "/.env", "/.git", "/admin.php"];
+export const blockedIps = new Set();
+const TARPIT_STORE_KEY = "tarpitState";
+// Track when IPs were trapped for time-in-tarpit calculation
+const trapTimes = new Map();
+let tarpitPersistQueue = Promise.resolve(true);
+registerPersistenceStore(TARPIT_STORE_KEY, cfg.tarpitStatePath);
+for (const entry of loadTarpitStateSync(cfg.tarpitStatePath)) {
+    blockedIps.add(entry.ip);
+    trapTimes.set(entry.ip, entry.trappedAt);
+}
+markPersistenceHydrated(TARPIT_STORE_KEY);
+function snapshotTarpitState() {
+    return Array.from(blockedIps).map((ip) => ({
+        ip,
+        trappedAt: trapTimes.get(ip) || Date.now(),
+    }));
+}
+function persistTarpitStateQueued() {
+    tarpitPersistQueue = tarpitPersistQueue.then(() => writeTarpitState(cfg.tarpitStatePath, snapshotTarpitState()), () => writeTarpitState(cfg.tarpitStatePath, snapshotTarpitState()));
+    void tarpitPersistQueue.then((persisted) => {
+        markPersistenceWrite(TARPIT_STORE_KEY, persisted);
+        if (!persisted) {
+            logger.warn("Tarpit state persisted in memory only due to write failure");
+        }
+    });
+}
+export function tarpitListHandler(_req, res) {
+    const now = Date.now();
+    const trapped = Array.from(blockedIps).map(ip => ({
+        ip,
+        trappedAt: trapTimes.get(ip) || now,
+        duration: Math.floor((now - (trapTimes.get(ip) || now)) / 1000)
+    }));
+    res.json({
+        count: trapped.length,
+        trapPaths: TRAP_PATHS,
+        trapped
+    });
+}
+export function tarpitReleaseHandler(req, res) {
+    const ip = normalizeIp(req.body?.ip);
+    if (ip && ip !== "unknown" && blockedIps.has(ip)) {
+        blockedIps.delete(ip);
+        trapTimes.delete(ip);
+        persistTarpitStateQueued();
+        logger.info({ ip }, "Tarpit: IP released");
+        broadcastTarpit('released', ip);
+        res.json({ status: "released", ip });
+    }
+    else if (ip && ip !== "unknown") {
+        res.status(404).json({ error: "IP not in tarpit" });
+    }
+    else {
+        // Clear all - broadcast for each
+        const ips = Array.from(blockedIps);
+        const count = blockedIps.size;
+        blockedIps.clear();
+        trapTimes.clear();
+        persistTarpitStateQueued();
+        ips.forEach(ip => broadcastTarpit('released', ip));
+        logger.info({ count }, "Tarpit: All IPs released");
+        res.json({ status: "cleared", count });
+    }
+}
+export function tarpitTrapHandler(req, res) {
+    const ip = normalizeIp(req.body?.ip);
+    if (!ip || ip === "unknown" || !isValidIpLiteral(ip)) {
+        return res.status(400).json({ error: "Invalid ip" });
+    }
+    if (!blockedIps.has(ip)) {
+        blockedIps.add(ip);
+        trapTimes.set(ip, Date.now());
+        persistTarpitStateQueued();
+        logger.warn({ ip }, "Tarpit: IP trapped via control API");
+        broadcastTarpit("trapped", ip);
+    }
+    return res.json({ status: "trapped", ip, count: blockedIps.size });
+}
+export function tarpitMiddleware(req, res, next) {
+    const ip = normalizeIp(req.ip || req.socket.remoteAddress);
+    // If IP is already flagged, Tarpit them
+    if (blockedIps.has(ip)) {
+        return enterTarpit(res);
+    }
+    // Check if they hit a Trap Route
+    if (TRAP_PATHS.some(path => req.path.startsWith(path))) {
+        if (!ip || ip === "unknown") {
+            logger.warn({ path: req.path }, "Honeypot Triggered with unknown IP; entering one-shot tarpit.");
+            return enterTarpit(res);
+        }
+        logger.warn({ ip, path: req.path }, "Honeypot Triggered! Activating Tarpit.");
+        blockedIps.add(ip);
+        trapTimes.set(ip, Date.now());
+        persistTarpitStateQueued();
+        broadcastTarpit('trapped', ip);
+        return enterTarpit(res);
+    }
+    next();
+}
+function enterTarpit(res) {
+    // Send 200 OK headers to keep them happy
+    res.writeHead(200, {
+        "Content-Type": "text/html",
+        "Transfer-Encoding": "chunked"
+    });
+    // Send 1 byte every 10 seconds
+    const interval = setInterval(() => {
+        if (!res.writableEnded) {
+            res.write(" ");
+        }
+        else {
+            clearInterval(interval);
+        }
+    }, 10000);
+    // Stop on disconnect or finish
+    res.on("close", () => clearInterval(interval));
+    res.on("finish", () => clearInterval(interval));
+}
+//# sourceMappingURL=tarpit.js.map

package/dist/tarpit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tarpit.js","sourceRoot":"","sources":["../src/tarpit.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtF,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAElH,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;AAC5C,MAAM,gBAAgB,GAAG,aAAa,CAAC;AAEvC,6DAA6D;AAC7D,MAAM,SAAS,GAAwB,IAAI,GAAG,EAAE,CAAC;AACjD,IAAI,kBAAkB,GAAqB,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAEjE,wBAAwB,CAAC,gBAAgB,EAAE,GAAG,CAAC,eAAe,CAAC,CAAC;AAEhE,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;IAC3D,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;AAC7C,CAAC;AACD,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;AAE1C,SAAS,mBAAmB;IACxB,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,EAAE;QACF,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE;KAC7C,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,wBAAwB;IAC7B,kBAAkB,GAAG,kBAAkB,CAAC,IAAI,CACxC,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,CAAC,EAClE,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,CAAC,CACrE,CAAC;IAEF,KAAK,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QACvC,oBAAoB,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QAC9E,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,GAAa;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,EAAE;QACF,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG;QACnC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;KAClE,CAAC,CAAC,CAAC;IACJ,GAAG,CAAC,IAAI,CAAC;QACL,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,SAAS,EAAE,UAAU;QACrB,OAAO;KACV,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAY,EAAE,GAAa;IAC5D,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,EAAE,IAAI,EAAE,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/C,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrB,wBAAwB,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC;QAC3C,eAAe,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,EAAE,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACJ,iCAAiC;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC;QAC9B,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,SAAS,CAAC,KAAK,EAAE,CAAC;QAClB,wBAAwB,EAAE,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,0BAA0B,CAAC,CAAC;QACnD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAY,EAAE,GAAa;IACzD,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,EAAE,CAAC;QACnD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACtB,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnB,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9B,wBAAwB,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,oCAAoC,CAAC,CAAC;QAC1D,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC5E,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAE3D,wCAAwC;IACxC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACrB,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,iCAAiC;IACjC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,+DAA+D,CAAC,CAAC;YACjG,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,wCAAwC,CAAC,CAAC;QAC9E,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnB,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9B,wBAAwB,EAAE,CAAC;QAC3B,eAAe,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,IAAI,EAAE,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,GAAa;IAC9B,yCAAyC;IACzC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;QACf,cAAc,EAAE,WAAW;QAC3B,mBAAmB,EAAE,SAAS;KACjC,CAAC,CAAC;IAEH,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9B,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;YACrB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACJ,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC,EAAE,KAAK,CAAC,CAAC;IAEV,+BAA+B;IAC/B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/tool-executor.js

@@ -0,0 +1,315 @@
+import { allocateMemorySpike, clearMemorySpike, scheduleCrash, stopCpuSpike, triggerCpuSpike } from "./chaos.js";
+import { broadcastClusterAttack, broadcastClusterStop, stopClusterAttack } from "./cluster.js";
+import { setMtdPrefix } from "./mtd.js";
+import { spawn } from "child_process";
+import path from "path";
+import { cfg } from "./config.js";
+const MAX_PROCESS_TIMEOUT_MS = 60_000; // 1 minute cap for external tools
+const MAX_OUTPUT_BUFFER = 10_000; // 10KB cap for log collection
+function isSafeTarget(url) {
+    if (cfg.demoMode)
+        return true;
+    try {
+        const parsed = new URL(url);
+        const host = parsed.hostname.toLowerCase();
+        // Block localhost and RFC 1918 private ranges unless in demo mode
+        if (host === "localhost" || host === "127.0.0.1" || host === "::1")
+            return false;
+        if (/^(10\.|172\.(1[6-9]|2[0-9]|3[0-1])\.|192\.168\.)/.test(host))
+            return false;
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export const TOOL_ACTIONS = [
+    "chaos.cpu",
+    "chaos.memory",
+    "cluster.attack",
+    "mtd.rotate",
+    "delay",
+    "chaos.crash",
+    "k6.run",
+    "nuclei.run",
+];
+const DEFAULT_CLUSTER_TARGET = "http://127.0.0.1:8090/echo";
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function cancellableSleep(ms, shouldCancel) {
+    const startedAt = Date.now();
+    while (Date.now() - startedAt < ms) {
+        if (shouldCancel?.()) {
+            throw new Error("Execution cancelled");
+        }
+        const remaining = ms - (Date.now() - startedAt);
+        await sleep(Math.min(remaining, 100));
+    }
+}
+function toPositiveInt(input, fallback, min, max) {
+    const parsed = Number(input);
+    if (!Number.isFinite(parsed))
+        return fallback;
+    return Math.min(max, Math.max(min, Math.trunc(parsed)));
+}
+function parseTargetUrl(value) {
+    if (typeof value !== "string" || !value)
+        return DEFAULT_CLUSTER_TARGET;
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error("cluster.attack target must be a valid URL");
+    }
+    if (!["http:", "https:"].includes(parsed.protocol)) {
+        throw new Error("cluster.attack target must use http/https");
+    }
+    return parsed.toString();
+}
+export function sanitizeToolParams(action, rawParams) {
+    switch (action) {
+        case "chaos.cpu":
+            return { duration: toPositiveInt(rawParams.duration, 5000, 250, 120000) };
+        case "chaos.memory": {
+            const memoryAction = rawParams.action === "clear" ? "clear" : "allocate";
+            if (memoryAction === "clear") {
+                return { action: "clear" };
+            }
+            return {
+                action: "allocate",
+                amount: toPositiveInt(rawParams.amount, 100, 1, 4096),
+            };
+        }
+        case "cluster.attack":
+            return {
+                target: parseTargetUrl(rawParams.target),
+                rate: toPositiveInt(rawParams.rate, 100, 1, 2000),
+            };
+        case "mtd.rotate":
+            return {
+                prefix: typeof rawParams.prefix === "string" && rawParams.prefix.trim()
+                    ? rawParams.prefix.slice(0, 48)
+                    : Math.random().toString(36).slice(2, 8),
+            };
+        case "chaos.crash":
+            return { delayMs: toPositiveInt(rawParams.delayMs, 1000, 100, 30000) };
+        case "delay":
+            return { duration: toPositiveInt(rawParams.duration, 1000, 10, 120000) };
+        case "k6.run": {
+            const script = String(rawParams.script || "baseline.js");
+            const target = String(rawParams.target || "");
+            const duration = String(rawParams.duration || "10s");
+            if (script.includes("..") || script.includes("/") || script.includes("\\")) {
+                throw new Error("Invalid script name: path traversal not allowed");
+            }
+            if (!/^\d{1,3}[smh]$/.test(duration)) {
+                throw new Error("Invalid duration format (e.g. 30s, 1m)");
+            }
+            if (!isSafeTarget(target)) {
+                throw new Error("Target URL restricted (internal/private IP)");
+            }
+            return {
+                script,
+                vus: toPositiveInt(rawParams.vus, 10, 1, 100),
+                duration,
+                target: parseTargetUrl(target),
+            };
+        }
+        case "nuclei.run": {
+            const template = String(rawParams.template || "ai-prompt-injection.yaml");
+            const target = String(rawParams.target || "");
+            if (template.includes("..") || template.includes("/") || template.includes("\\")) {
+                throw new Error("Invalid template name: path traversal not allowed");
+            }
+            if (!isSafeTarget(target)) {
+                throw new Error("Target URL restricted (internal/private IP)");
+            }
+            return {
+                template,
+                target: parseTargetUrl(target),
+            };
+        }
+        default:
+            throw new Error(`Unsupported action: ${action}`);
+    }
+}
+export async function executeToolStep(step, options) {
+    const startedAt = new Date().toISOString();
+    try {
+        let message = "";
+        const sanitizedParams = sanitizeToolParams(step.action, step.params || {});
+        if (options?.shouldCancel?.()) {
+            throw new Error("Execution cancelled");
+        }
+        switch (step.action) {
+            case "chaos.cpu": {
+                const duration = sanitizedParams.duration;
+                if (!triggerCpuSpike(duration)) {
+                    throw new Error("CPU spike already running");
+                }
+                message = `Spiking CPU for ${duration}ms`;
+                break;
+            }
+            case "chaos.memory": {
+                if (sanitizedParams.action === "clear") {
+                    message = clearMemorySpike();
+                }
+                else {
+                    const amount = sanitizedParams.amount;
+                    message = allocateMemorySpike(amount);
+                }
+                break;
+            }
+            case "cluster.attack": {
+                const target = sanitizedParams.target;
+                const rate = sanitizedParams.rate;
+                const result = await broadcastClusterAttack(target, rate);
+                message = `${result.message} (${result.nodes} nodes)`;
+                break;
+            }
+            case "mtd.rotate": {
+                const prefix = sanitizedParams.prefix;
+                setMtdPrefix(prefix);
+                message = `MTD prefix rotated to ${prefix}`;
+                break;
+            }
+            case "chaos.crash": {
+                const delay = sanitizedParams.delayMs;
+                scheduleCrash(delay);
+                message = `Crash scheduled in ${delay}ms`;
+                break;
+            }
+            case "delay": {
+                const duration = sanitizedParams.duration;
+                await cancellableSleep(duration, options?.shouldCancel);
+                message = `Delayed for ${duration}ms`;
+                break;
+            }
+            case "k6.run": {
+                if (!cfg.k6ScenariosPath)
+                    throw new Error("K6 Scenarios path not configured");
+                const scriptPath = path.resolve(cfg.k6ScenariosPath, sanitizedParams.script);
+                if (!scriptPath.startsWith(path.resolve(cfg.k6ScenariosPath))) {
+                    throw new Error("Path traversal blocked");
+                }
+                const args = ["run", scriptPath, "--vus", String(sanitizedParams.vus), "--duration", sanitizedParams.duration, "-e", `BASE=${sanitizedParams.target}`];
+                const controller = new AbortController();
+                const timeout = setTimeout(() => controller.abort(), MAX_PROCESS_TIMEOUT_MS);
+                const k6 = spawn("k6", args, { signal: controller.signal });
+                let output = "";
+                k6.stdout.on("data", (data) => {
+                    if (output.length < MAX_OUTPUT_BUFFER)
+                        output += data.toString();
+                });
+                k6.stderr.on("data", (data) => {
+                    if (output.length < MAX_OUTPUT_BUFFER)
+                        output += data.toString();
+                });
+                const exitCode = await new Promise((resolve, reject) => {
+                    k6.on("close", resolve);
+                    k6.on("error", (err) => {
+                        if (err.name === "AbortError")
+                            resolve("timeout");
+                        else
+                            reject(err);
+                    });
+                });
+                clearTimeout(timeout);
+                if (exitCode === "timeout") {
+                    throw new Error(`k6 timed out after ${MAX_PROCESS_TIMEOUT_MS}ms`);
+                }
+                if (exitCode !== 0) {
+                    throw new Error(`k6 failed with exit code ${exitCode}: ${output.slice(-200)}`);
+                }
+                message = `k6 finished successfully. Output: ${output.slice(-100)}`;
+                break;
+            }
+            case "nuclei.run": {
+                if (!cfg.nucleiTemplatesPath)
+                    throw new Error("Nuclei Templates path not configured");
+                const templatePath = path.resolve(cfg.nucleiTemplatesPath, sanitizedParams.template);
+                if (!templatePath.startsWith(path.resolve(cfg.nucleiTemplatesPath))) {
+                    throw new Error("Path traversal blocked");
+                }
+                const args = ["-t", templatePath, "-u", sanitizedParams.target, "-nc"];
+                const controller = new AbortController();
+                const timeout = setTimeout(() => controller.abort(), MAX_PROCESS_TIMEOUT_MS);
+                const nuclei = spawn("nuclei", args, { signal: controller.signal });
+                let output = "";
+                nuclei.stdout.on("data", (data) => {
+                    if (output.length < MAX_OUTPUT_BUFFER)
+                        output += data.toString();
+                });
+                nuclei.stderr.on("data", (data) => {
+                    if (output.length < MAX_OUTPUT_BUFFER)
+                        output += data.toString();
+                });
+                const exitCode = await new Promise((resolve, reject) => {
+                    nuclei.on("close", resolve);
+                    nuclei.on("error", (err) => {
+                        if (err.name === "AbortError")
+                            resolve("timeout");
+                        else
+                            reject(err);
+                    });
+                });
+                clearTimeout(timeout);
+                if (exitCode === "timeout") {
+                    throw new Error(`nuclei timed out after ${MAX_PROCESS_TIMEOUT_MS}ms`);
+                }
+                if (exitCode !== 0) {
+                    throw new Error(`nuclei failed with exit code ${exitCode}: ${output.slice(-200)}`);
+                }
+                message = `nuclei finished successfully. Findings: ${output.length > 0 ? "Detected" : "None"}`;
+                break;
+            }
+            default:
+                throw new Error(`Unsupported action: ${String(step.action)}`);
+        }
+        if (step.delayMs && step.delayMs > 0) {
+            await cancellableSleep(step.delayMs, options?.shouldCancel);
+        }
+        return {
+            ok: true,
+            action: step.action,
+            message,
+            startedAt,
+            endedAt: new Date().toISOString()
+        };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            action: step.action,
+            message: error?.message || "Tool execution failed",
+            startedAt,
+            endedAt: new Date().toISOString(),
+            error: error?.message || "Unknown error"
+        };
+    }
+}
+export async function stopAllActiveExperiments() {
+    const cpuStopped = stopCpuSpike();
+    const memoryCleared = clearMemorySpike();
+    let clusterMessage = "Cluster stop not requested";
+    try {
+        const clusterResult = await broadcastClusterStop();
+        clusterMessage = clusterResult.message;
+    }
+    catch (error) {
+        clusterMessage = `Cluster stop failed: ${error?.message || "unknown error"}`;
+    }
+    return {
+        cpuStopped,
+        memoryCleared,
+        cluster: clusterMessage,
+    };
+}
+export function resetToolExecutorForTests() {
+    stopCpuSpike();
+    clearMemorySpike();
+    stopClusterAttack();
+}
+//# sourceMappingURL=tool-executor.js.map

package/dist/tool-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-executor.js","sourceRoot":"","sources":["../src/tool-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACjH,OAAO,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAC/F,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAGlC,MAAM,sBAAsB,GAAG,MAAM,CAAC,CAAC,kCAAkC;AACzE,MAAM,iBAAiB,GAAG,MAAM,CAAC,CAAC,8BAA8B;AAEhE,SAAS,YAAY,CAAC,GAAW;IAC7B,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3C,kEAAkE;QAClE,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QACjF,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAChF,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG;IACxB,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,YAAY;IACZ,OAAO;IACP,aAAa;IACb,QAAQ;IACR,YAAY;CACN,CAAC;AAuBX,MAAM,sBAAsB,GAAG,4BAA4B,CAAC;AAE5D,SAAS,KAAK,CAAC,EAAU;IACrB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,EAAU,EAAE,YAA4B;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,EAAE,EAAE,CAAC;QACjC,IAAI,YAAY,EAAE,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,SAAS,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;QAChD,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,QAAgB,EAAE,GAAW,EAAE,GAAW;IAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,sBAAsB,CAAC;IACvE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACD,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAkB,EAAE,SAAkC;IACrF,QAAQ,MAAM,EAAE,CAAC;QACb,KAAK,WAAW;YACZ,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QAC9E,KAAK,cAAc,CAAC,CAAC,CAAC;YAClB,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;YACzE,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;gBAC3B,OAAO,EAAE,MAAM,EAAE,OAAgB,EAAE,CAAC;YACxC,CAAC;YACD,OAAO;gBACH,MAAM,EAAE,UAAmB;gBAC3B,MAAM,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC;aACxD,CAAC;QACN,CAAC;QACD,KAAK,gBAAgB;YACjB,OAAO;gBACH,MAAM,EAAE,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC;gBACxC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC;aACpD,CAAC;QACN,KAAK,YAAY;YACb,OAAO;gBACH,MAAM,EAAE,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;oBACnE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;oBAC/B,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aAC/C,CAAC;QACN,KAAK,aAAa;YACd,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,OAAO;YACR,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7E,KAAK,QAAQ,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC;YAErD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACnE,CAAC;YAED,OAAO;gBACH,MAAM;gBACN,GAAG,EAAE,aAAa,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC;gBAC7C,QAAQ;gBACR,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC;aACjC,CAAC;QACN,CAAC;QACD,KAAK,YAAY,CAAC,CAAC,CAAC;YAChB,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,QAAQ,IAAI,0BAA0B,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAE9C,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/E,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACzE,CAAC;YACD,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACnE,CAAC;YAED,OAAO;gBACH,QAAQ;gBACR,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC;aACjC,CAAC;QACN,CAAC;QACD;YACI,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAc,EAAE,OAA8B;IAChF,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE3C,IAAI,CAAC;QACD,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,MAAM,eAAe,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAI,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC3C,CAAC;QAED,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;YAClB,KAAK,WAAW,CAAC,CAAC,CAAC;gBACf,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAkB,CAAC;gBACpD,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBACjD,CAAC;gBACD,OAAO,GAAG,mBAAmB,QAAQ,IAAI,CAAC;gBAC1C,MAAM;YACV,CAAC;YAED,KAAK,cAAc,CAAC,CAAC,CAAC;gBAClB,IAAI,eAAe,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBACrC,OAAO,GAAG,gBAAgB,EAAE,CAAC;gBACjC,CAAC;qBAAM,CAAC;oBACJ,MAAM,MAAM,GAAG,eAAe,CAAC,MAAgB,CAAC;oBAChD,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBAC1C,CAAC;gBACD,MAAM;YACV,CAAC;YAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACpB,MAAM,MAAM,GAAG,eAAe,CAAC,MAAgB,CAAC;gBAChD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAc,CAAC;gBAC5C,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC1D,OAAO,GAAG,GAAG,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,SAAS,CAAC;gBACtD,MAAM;YACV,CAAC;YAED,KAAK,YAAY,CAAC,CAAC,CAAC;gBAChB,MAAM,MAAM,GAAG,eAAe,CAAC,MAAgB,CAAC;gBAChD,YAAY,CAAC,MAAM,CAAC,CAAC;gBACrB,OAAO,GAAG,yBAAyB,MAAM,EAAE,CAAC;gBAC5C,MAAM;YACV,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,eAAe,CAAC,OAAiB,CAAC;gBAChD,aAAa,CAAC,KAAK,CAAC,CAAC;gBACrB,OAAO,GAAG,sBAAsB,KAAK,IAAI,CAAC;gBAC1C,MAAM;YACV,CAAC;YAED,KAAK,OAAO,CAAC,CAAC,CAAC;gBACX,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAkB,CAAC;gBACpD,MAAM,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;gBACxD,OAAO,GAAG,eAAe,QAAQ,IAAI,CAAC;gBACtC,MAAM;YACV,CAAC;YAED,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC,GAAG,CAAC,eAAe;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBAE9E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,eAAe,CAAC,MAAgB,CAAC,CAAC;gBACvF,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;oBAC5D,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC9C,CAAC;gBAED,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,eAAe,CAAC,QAAkB,EAAE,IAAI,EAAE,QAAQ,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;gBAEjK,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,sBAAsB,CAAC,CAAC;gBAE7E,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC5D,IAAI,MAAM,GAAG,EAAE,CAAC;gBAEhB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB;wBAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACrE,CAAC,CAAC,CAAC;gBAEH,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC1B,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB;wBAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACrE,CAAC,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACpE,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBACxB,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBACnB,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;4BAAE,OAAO,CAAC,SAAS,CAAC,CAAC;;4BAC7C,MAAM,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;gBAEH,YAAY,CAAC,OAAO,CAAC,CAAC;gBAEtB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,sBAAsB,IAAI,CAAC,CAAC;gBACtE,CAAC;gBACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnF,CAAC;gBACD,OAAO,GAAG,qCAAqC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpE,MAAM;YACV,CAAC;YAED,KAAK,YAAY,CAAC,CAAC,CAAC;gBAChB,IAAI,CAAC,GAAG,CAAC,mBAAmB;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAEtF,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,eAAe,CAAC,QAAkB,CAAC,CAAC;gBAC/F,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,EAAE,CAAC;oBAClE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC9C,CAAC;gBAED,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,CAAC,MAAgB,EAAE,KAAK,CAAC,CAAC;gBAEjF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,sBAAsB,CAAC,CAAC;gBAE7E,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpE,IAAI,MAAM,GAAG,EAAE,CAAC;gBAEhB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB;wBAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACrE,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC9B,IAAI,MAAM,CAAC,MAAM,GAAG,iBAAiB;wBAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACrE,CAAC,CAAC,CAAC;gBAEH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACpE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC5B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;wBACvB,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;4BAAE,OAAO,CAAC,SAAS,CAAC,CAAC;;4BAC7C,MAAM,CAAC,GAAG,CAAC,CAAC;oBACrB,CAAC,CAAC,CAAC;gBACP,CAAC,CAAC,CAAC;gBAEH,YAAY,CAAC,OAAO,CAAC,CAAC;gBAEtB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,0BAA0B,sBAAsB,IAAI,CAAC,CAAC;gBAC1E,CAAC;gBACD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvF,CAAC;gBACD,OAAO,GAAG,2CAA2C,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC/F,MAAM;YACV,CAAC;YAED;gBACI,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC;QAChE,CAAC;QAED,OAAO;YACH,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO;YACP,SAAS;YACT,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACN,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QAClB,OAAO;YACH,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,KAAK,EAAE,OAAO,IAAI,uBAAuB;YAClD,SAAS;YACT,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACjC,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,eAAe;SAC3C,CAAC;IACN,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC1C,MAAM,UAAU,GAAG,YAAY,EAAE,CAAC;IAClC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,IAAI,cAAc,GAAG,4BAA4B,CAAC;IAClD,IAAI,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,oBAAoB,EAAE,CAAC;QACnD,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QAClB,cAAc,GAAG,wBAAwB,KAAK,EAAE,OAAO,IAAI,eAAe,EAAE,CAAC;IACjF,CAAC;IAED,OAAO;QACH,UAAU;QACV,aAAa;QACb,OAAO,EAAE,cAAc;KAC1B,CAAC;AACN,CAAC;AAED,MAAM,UAAU,yBAAyB;IACrC,YAAY,EAAE,CAAC;IACf,gBAAgB,EAAE,CAAC;IACnB,iBAAiB,EAAE,CAAC;AACxB,CAAC"}