@jheavenknows/bluerouter 1.0.25 → 1.0.28

package/app/.next-cli-build/server/chunks/6182.js

@@ -1,5 +1,5 @@
 "use strict";exports.id=6182,exports.ids=[6182],exports.modules={8578:(a,b,c)=>{let d=c(33873),e=c(29021),f=c(15296),{execFileSync:g}=c(79646),{MITM_DIR:h}=c(82193),i=d.join(h,"rootCA.key"),j=d.join(h,"rootCA.crt"),k=d.join(h,"rootCA.csr"),l=d.join(h,"rootCA.csr.cnf"),m=d.join(h,"rootCA.pending.key"),n=d.join(h,"backup");function o(){e.existsSync(h)||e.mkdirSync(h,{recursive:!0})}function p(a,b){let c=String(a||"").trim();if(!c)throw Error(`${b} is empty`);return`${c}
-`}function q(a){return f.md.sha256.create().update(f.pki.publicKeyToPem(a),"utf8").digest().toHex()}function r(a){let b=a.getExtension("basicConstraints"),c=a.getExtension("keyUsage");return!!b?.cA&&(!c||!0===c.keyCertSign)}function s(a,b){if(q(a.publicKey)!==q(function(a){if(!a?.n||!a?.e)throw Error("Only RSA private keys are supported for MITM Root CA");return f.pki.setRsaPublicKey(a.n,a.e)}(b)))throw Error("Certificate public key does not match private key")}function t(){o();let a=e.existsSync(i),b=e.existsSync(j);if(!a&&!b)return null;e.mkdirSync(n,{recursive:!0});let c=new Date().toISOString().replace(/[:.]/g,"-"),f={key:d.join(n,`rootCA.${c}.key`),cert:d.join(n,`rootCA.${c}.crt`)};return a&&e.copyFileSync(i,f.key),b&&e.copyFileSync(j,f.cert),f}function u(a,b="Certificate"){try{return f.pki.certificateFromPem(p(a,b))}catch(a){throw Error(`${b} is not a valid PEM certificate: ${a.message}`)}}function v(a,b="Private key"){try{return f.pki.privateKeyFromPem(p(a,b))}catch(a){throw Error(`${b} is not a valid PEM private key: ${a.message}`)}}function w(a){try{let b=f.pki.certificateFromPem(e.readFileSync(a,"utf8")),c=new Date(Date.now()+2592e6);return b.validity.notAfter<c}catch{return!0}}function x(){let a=e.existsSync(j),b=e.existsSync(i),c={certExists:a,keyExists:b,csrExists:e.existsSync(k),pendingKeyExists:e.existsSync(m),certPath:j,keyPath:i,csrPath:k,pendingKeyPath:m};if(!a)return c;try{let a=u(e.readFileSync(j,"utf8")),b=a.subject.attributes.map(a=>`${a.shortName||a.name}=${a.value}`).join(", "),d=a.issuer.attributes.map(a=>`${a.shortName||a.name}=${a.value}`).join(", ");c.subject=b,c.issuer=d,c.serialNumber=a.serialNumber,c.notBefore=a.validity.notBefore.toISOString(),c.notAfter=a.validity.notAfter.toISOString(),c.expiredOrExpiringSoon=w(j),c.isCa=r(a),c.isSelfSigned=b===d,c.fingerprint=q(a.publicKey)}catch(a){c.error=a.message}return c}function y(a,b){return String(a||b||"").replace(/[\r\n]+/g," ").replace(/[\\]/g,"\\\\").trim()||String(b||"")}a.exports={generateRootCA:async function a(){let a=e.existsSync(i)&&e.existsSync(j);if(a&&!w(j))return console.log("✅ Root CA already exists"),{key:i,cert:j};if(a){console.log("\uD83D\uDD10 Root CA expired or expiring soon — regenerating...");try{e.unlinkSync(i)}catch{}try{e.unlinkSync(j)}catch{}}o(),console.log("\uD83D\uDD10 Generating Root CA certificate...");let b=f.pki.rsa.generateKeyPair(2048),c=f.pki.createCertificate();c.publicKey=b.publicKey,c.serialNumber="01",c.validity.notBefore=new Date,c.validity.notAfter=new Date,c.validity.notAfter.setFullYear(c.validity.notBefore.getFullYear()+10);let d=[{name:"commonName",value:"Blue Router Gateway Root CA"},{name:"organizationName",value:"Blue Router Gateway"},{name:"countryName",value:"VN"}];c.setSubject(d),c.setIssuer(d),c.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0},{name:"subjectKeyIdentifier"}]),c.sign(b.privateKey,f.md.sha256.create());let g=f.pki.privateKeyToPem(b.privateKey),h=f.pki.certificateToPem(c);return e.writeFileSync(i,g,{mode:384}),e.writeFileSync(j,h),console.log("✅ Root CA generated successfully"),{key:i,cert:j}},importRootCAPair:function({certPem:a,keyPem:b}){o();let c=p(a,"Certificate"),d=p(b,"Private key"),f=u(c);if(s(f,v(d)),!r(f))throw Error("Certificate must be a CA certificate with basicConstraints CA:true and keyCertSign usage");if(f.validity.notAfter<new Date)throw Error("Certificate is already expired");let g=t();e.writeFileSync(i,d,{mode:384}),e.writeFileSync(j,c);try{e.unlinkSync(k)}catch{}try{e.unlinkSync(m)}catch{}return{key:i,cert:j,backup:g,info:x()}},generateRootCACsr:function({commonName:a,organizationName:b,countryName:c}={}){if(o(),function(){try{return g("openssl",["version"],{stdio:"ignore"}),!0}catch{return!1}}())return function({commonName:a,organizationName:b,countryName:c}={}){let d=y(a,"Fujinet 9Router MITM CA"),f=y(b,"Fujinet"),h=y(c,"VN").slice(0,2).toUpperCase()||"VN",i=`[ req ]
+`}function q(a){return f.md.sha256.create().update(f.pki.publicKeyToPem(a),"utf8").digest().toHex()}function r(a){let b=a.getExtension("basicConstraints"),c=a.getExtension("keyUsage");return!!b?.cA&&(!c||!0===c.keyCertSign)}function s(a,b){if(q(a.publicKey)!==q(function(a){if(!a?.n||!a?.e)throw Error("Only RSA private keys are supported for MITM Root CA");return f.pki.setRsaPublicKey(a.n,a.e)}(b)))throw Error("Certificate public key does not match private key")}function t(){o();let a=e.existsSync(i),b=e.existsSync(j);if(!a&&!b)return null;e.mkdirSync(n,{recursive:!0});let c=new Date().toISOString().replace(/[:.]/g,"-"),f={key:d.join(n,`rootCA.${c}.key`),cert:d.join(n,`rootCA.${c}.crt`)};return a&&e.copyFileSync(i,f.key),b&&e.copyFileSync(j,f.cert),f}function u(a,b="Certificate"){try{return f.pki.certificateFromPem(p(a,b))}catch(a){throw Error(`${b} is not a valid PEM certificate: ${a.message}`)}}function v(a,b="Private key"){try{return f.pki.privateKeyFromPem(p(a,b))}catch(a){throw Error(`${b} is not a valid PEM private key: ${a.message}`)}}function w(a){try{let b=f.pki.certificateFromPem(e.readFileSync(a,"utf8")),c=new Date(Date.now()+2592e6);return b.validity.notAfter<c}catch{return!0}}function x(){let a=e.existsSync(j),b=e.existsSync(i),c={certExists:a,keyExists:b,csrExists:e.existsSync(k),pendingKeyExists:e.existsSync(m),certPath:j,keyPath:i,csrPath:k,pendingKeyPath:m};if(!a)return c;try{let a=u(e.readFileSync(j,"utf8")),b=a.subject.attributes.map(a=>`${a.shortName||a.name}=${a.value}`).join(", "),d=a.issuer.attributes.map(a=>`${a.shortName||a.name}=${a.value}`).join(", ");c.subject=b,c.issuer=d,c.serialNumber=a.serialNumber,c.notBefore=a.validity.notBefore.toISOString(),c.notAfter=a.validity.notAfter.toISOString(),c.expiredOrExpiringSoon=w(j),c.isCa=r(a),c.isSelfSigned=b===d,c.fingerprint=q(a.publicKey)}catch(a){c.error=a.message}return c}function y(a,b){return String(a||b||"").replace(/[\r\n]+/g," ").replace(/[\\]/g,"\\\\").trim()||String(b||"")}a.exports={generateRootCA:async function a(){let a=e.existsSync(i)&&e.existsSync(j);if(a&&!w(j))return console.log("✅ Root CA already exists"),{key:i,cert:j};if(a){console.log("\uD83D\uDD10 Root CA expired or expiring soon — regenerating...");try{e.unlinkSync(i)}catch{}try{e.unlinkSync(j)}catch{}}o(),console.log("\uD83D\uDD10 Generating Root CA certificate...");let b=f.pki.rsa.generateKeyPair(2048),c=f.pki.createCertificate();c.publicKey=b.publicKey,c.serialNumber="01",c.validity.notBefore=new Date,c.validity.notAfter=new Date,c.validity.notAfter.setFullYear(c.validity.notBefore.getFullYear()+10);let d=[{name:"commonName",value:"Blue Router Gateway Root CA"},{name:"organizationName",value:"Blue Router Gateway"},{name:"countryName",value:"VN"}];c.setSubject(d),c.setIssuer(d),c.setExtensions([{name:"basicConstraints",cA:!0,critical:!0},{name:"keyUsage",keyCertSign:!0,cRLSign:!0,critical:!0},{name:"subjectKeyIdentifier"}]),c.sign(b.privateKey,f.md.sha256.create());let g=f.pki.privateKeyToPem(b.privateKey),h=f.pki.certificateToPem(c);return e.writeFileSync(i,g,{mode:384}),e.writeFileSync(j,h),console.log("✅ Root CA generated successfully"),{key:i,cert:j}},importRootCAPair:function({certPem:a,keyPem:b}){o();let c=p(a,"Certificate"),d=p(b,"Private key"),f=u(c);if(s(f,v(d)),!r(f))throw Error("Certificate must be a CA certificate with basicConstraints CA:true and keyCertSign usage");if(f.validity.notAfter<new Date)throw Error("Certificate is already expired");let g=t();e.writeFileSync(i,d,{mode:384}),e.writeFileSync(j,c);try{e.unlinkSync(k)}catch{}try{e.unlinkSync(m)}catch{}return{key:i,cert:j,backup:g,info:x()}},generateRootCACsr:function({commonName:a,organizationName:b,countryName:c}={}){if(o(),function(){try{return g("openssl",["version"],{stdio:"ignore"}),!0}catch{return!1}}())return function({commonName:a,organizationName:b,countryName:c}={}){let d=y(a,"Fujinet Bluerouter MITM CA"),f=y(b,"Fujinet"),h=y(c,"VN").slice(0,2).toUpperCase()||"VN",i=`[ req ]
 default_bits       = 4096
 prompt             = no
 distinguished_name = dn
@@ -15,11 +15,11 @@ CN = ${d}
 basicConstraints = critical, CA:true, pathlen:0
 keyUsage = critical, keyCertSign, cRLSign
 subjectKeyIdentifier = hash
-`,j=t();e.writeFileSync(l,i,"utf8");try{g("openssl",["genrsa","-out",m,"4096"],{stdio:["ignore","pipe","pipe"]}),g("openssl",["req","-new","-key",m,"-out",k,"-config",l],{stdio:["ignore","pipe","pipe"]});try{e.chmodSync(m,384)}catch{}return{csr:k,pendingKey:m,config:l,backup:j}}catch(b){try{e.unlinkSync(m)}catch{}try{e.unlinkSync(k)}catch{}let a=b?.stderr?String(b.stderr).trim():"";throw Error(`OpenSSL CSR generation failed${a?`: ${a}`:""}`)}}({commonName:a,organizationName:b,countryName:c});let d=[{name:"commonName",value:String(a||"Fujinet 9Router MITM CA").trim()||"Fujinet 9Router MITM CA"},{name:"organizationName",value:String(b||"Fujinet").trim()||"Fujinet"},{name:"organizationalUnitName",value:"AI Gateway"}],h=String(c||"VN").trim().slice(0,2).toUpperCase();h&&d.push({name:"countryName",value:h});let i=f.pki.rsa.generateKeyPair(4096),j=f.pki.createCertificationRequest();if(j.publicKey=i.publicKey,j.setSubject(d),j.sign(i.privateKey,f.md.sha256.create()),!j.verify())throw Error("Generated CSR failed verification");let n=t(),p=f.pki.certificationRequestToPem(j),q=f.pki.privateKeyToPem(i.privateKey);return e.writeFileSync(m,q,{mode:384}),e.writeFileSync(k,p),{csr:k,pendingKey:m,backup:n}},importSignedRootCACert:function({certPem:a}){if(o(),!e.existsSync(m))throw Error("No pending CSR private key found. Generate a CSR first.");let b=p(a,"Signed certificate"),c=u(b,"Signed certificate");if(s(c,v(e.readFileSync(m,"utf8"),"Pending private key")),!r(c))throw Error("Signed certificate must be a CA certificate with CA:true and keyCertSign usage");if(c.validity.notAfter<new Date)throw Error("Signed certificate is already expired");let d=t();e.copyFileSync(m,i);try{e.chmodSync(i,384)}catch{}e.writeFileSync(j,b);try{e.unlinkSync(k)}catch{}try{e.unlinkSync(m)}catch{}return{key:i,cert:j,backup:d,info:x()}},loadRootCA:function(){if(!e.existsSync(i)||!e.existsSync(j))throw Error("Root CA not found. Generate it first.");let a=e.readFileSync(i,"utf8"),b=e.readFileSync(j,"utf8");return{key:f.pki.privateKeyFromPem(a),cert:f.pki.certificateFromPem(b)}},generateLeafCert:function(a,b){let c=f.pki.rsa.generateKeyPair(2048),d=f.pki.createCertificate();return d.publicKey=c.publicKey,d.serialNumber=Math.floor(1e6*Math.random()).toString(),d.validity.notBefore=new Date,d.validity.notAfter=new Date,d.validity.notAfter.setFullYear(d.validity.notBefore.getFullYear()+1),d.setSubject([{name:"commonName",value:a}]),d.setIssuer(b.cert.subject.attributes),d.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:a},{type:2,value:`*.${a}`}]}]),d.sign(b.key,f.md.sha256.create()),{key:f.pki.privateKeyToPem(c.privateKey),cert:f.pki.certificateToPem(d)}},isCertExpired:w,readRootCAInfo:x,ROOT_CA_CERT_PATH:j,ROOT_CA_KEY_PATH:i,ROOT_CA_CSR_PATH:k,ROOT_CA_PENDING_KEY_PATH:m}},9631:(a,b,c)=>{let d=c(29021),e=c(55511),{exec:f}=c(79646),{execWithPassword:g,isSudoAvailable:h}=c(66936),{runElevatedPowerShell:i,quotePs:j}=c(64809),{log:k,err:l}=c(87777),m="win32"===process.platform,n="darwin"===process.platform,o=[{dir:"/usr/local/share/ca-certificates",cmd:"update-ca-certificates"},{dir:"/etc/ca-certificates/trust-source/anchors",cmd:"update-ca-trust"},{dir:"/etc/pki/ca-trust/source/anchors",cmd:"update-ca-trust"},{dir:"/etc/pki/trust/anchors",cmd:"update-ca-certificates"}];function p(){for(let a of o)if(d.existsSync(a.dir))return a;return o[0]}let q="9Router MITM Root CA";function r(a){let b=d.readFileSync(a,"utf-8"),c=Buffer.from(b.replace(/-----[^-]+-----/g,"").replace(/\s/g,""),"base64");return e.createHash("sha1").update(c).digest("hex").toUpperCase().match(/.{2}/g).join(":")}async function s(a){var b,c;let e,g;return m?(b=a,new Promise(a=>{let c;try{c=r(b).replace(/:/g,"")}catch{return a(!1)}f(`certutil -store Root ${c}`,{windowsHide:!0},b=>{a(!b)})})):n?(c=a,new Promise(a=>{try{let b=r(c).replace(/:/g,"");f(`security verify-cert -c "${c}" -p ssl -k /Library/Keychains/System.keychain 2>/dev/null`,{windowsHide:!0},c=>{if(!c)return a(!0);f(`security dump-trust-settings -d 2>/dev/null | grep -i "${b}"`,{windowsHide:!0},(b,c)=>{a(!b&&!!c?.trim())})})}catch{a(!1)}})):(e=p(),g=`${e.dir}/bluerouter-root-ca.crt`,Promise.resolve(d.existsSync(g)))}async function t(a,b){let c=`security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain "${b}"`;try{await g(`security delete-certificate -c "9Router MITM Root CA" /Library/Keychains/System.keychain 2>/dev/null || true && ${c}`,a),k("\uD83D\uDD10 Cert: ✅ installed to system keychain")}catch(a){throw Error(a.message?.includes("canceled")?"User canceled authorization":"Certificate install failed")}}async function u(a){let b=`
+`,j=t();e.writeFileSync(l,i,"utf8");try{g("openssl",["genrsa","-out",m,"4096"],{stdio:["ignore","pipe","pipe"]}),g("openssl",["req","-new","-key",m,"-out",k,"-config",l],{stdio:["ignore","pipe","pipe"]});try{e.chmodSync(m,384)}catch{}return{csr:k,pendingKey:m,config:l,backup:j}}catch(b){try{e.unlinkSync(m)}catch{}try{e.unlinkSync(k)}catch{}let a=b?.stderr?String(b.stderr).trim():"";throw Error(`OpenSSL CSR generation failed${a?`: ${a}`:""}`)}}({commonName:a,organizationName:b,countryName:c});let d=[{name:"commonName",value:String(a||"Fujinet Bluerouter MITM CA").trim()||"Fujinet Bluerouter MITM CA"},{name:"organizationName",value:String(b||"Fujinet").trim()||"Fujinet"},{name:"organizationalUnitName",value:"AI Gateway"}],h=String(c||"VN").trim().slice(0,2).toUpperCase();h&&d.push({name:"countryName",value:h});let i=f.pki.rsa.generateKeyPair(4096),j=f.pki.createCertificationRequest();if(j.publicKey=i.publicKey,j.setSubject(d),j.sign(i.privateKey,f.md.sha256.create()),!j.verify())throw Error("Generated CSR failed verification");let n=t(),p=f.pki.certificationRequestToPem(j),q=f.pki.privateKeyToPem(i.privateKey);return e.writeFileSync(m,q,{mode:384}),e.writeFileSync(k,p),{csr:k,pendingKey:m,backup:n}},importSignedRootCACert:function({certPem:a}){if(o(),!e.existsSync(m))throw Error("No pending CSR private key found. Generate a CSR first.");let b=p(a,"Signed certificate"),c=u(b,"Signed certificate");if(s(c,v(e.readFileSync(m,"utf8"),"Pending private key")),!r(c))throw Error("Signed certificate must be a CA certificate with CA:true and keyCertSign usage");if(c.validity.notAfter<new Date)throw Error("Signed certificate is already expired");let d=t();e.copyFileSync(m,i);try{e.chmodSync(i,384)}catch{}e.writeFileSync(j,b);try{e.unlinkSync(k)}catch{}try{e.unlinkSync(m)}catch{}return{key:i,cert:j,backup:d,info:x()}},loadRootCA:function(){if(!e.existsSync(i)||!e.existsSync(j))throw Error("Root CA not found. Generate it first.");let a=e.readFileSync(i,"utf8"),b=e.readFileSync(j,"utf8");return{key:f.pki.privateKeyFromPem(a),cert:f.pki.certificateFromPem(b)}},generateLeafCert:function(a,b){let c=f.pki.rsa.generateKeyPair(2048),d=f.pki.createCertificate();return d.publicKey=c.publicKey,d.serialNumber=Math.floor(1e6*Math.random()).toString(),d.validity.notBefore=new Date,d.validity.notAfter=new Date,d.validity.notAfter.setFullYear(d.validity.notBefore.getFullYear()+1),d.setSubject([{name:"commonName",value:a}]),d.setIssuer(b.cert.subject.attributes),d.setExtensions([{name:"basicConstraints",cA:!1},{name:"keyUsage",digitalSignature:!0,keyEncipherment:!0},{name:"extKeyUsage",serverAuth:!0,clientAuth:!0},{name:"subjectAltName",altNames:[{type:2,value:a},{type:2,value:`*.${a}`}]}]),d.sign(b.key,f.md.sha256.create()),{key:f.pki.privateKeyToPem(c.privateKey),cert:f.pki.certificateToPem(d)}},isCertExpired:w,readRootCAInfo:x,ROOT_CA_CERT_PATH:j,ROOT_CA_KEY_PATH:i,ROOT_CA_CSR_PATH:k,ROOT_CA_PENDING_KEY_PATH:m}},9631:(a,b,c)=>{let d=c(29021),e=c(55511),{exec:f}=c(79646),{execWithPassword:g,isSudoAvailable:h}=c(66936),{runElevatedPowerShell:i,quotePs:j}=c(64809),{log:k,err:l}=c(87777),m="win32"===process.platform,n="darwin"===process.platform,o=[{dir:"/usr/local/share/ca-certificates",cmd:"update-ca-certificates"},{dir:"/etc/ca-certificates/trust-source/anchors",cmd:"update-ca-trust"},{dir:"/etc/pki/ca-trust/source/anchors",cmd:"update-ca-trust"},{dir:"/etc/pki/trust/anchors",cmd:"update-ca-certificates"}];function p(){for(let a of o)if(d.existsSync(a.dir))return a;return o[0]}let q="Bluerouter MITM Root CA";function r(a){let b=d.readFileSync(a,"utf-8"),c=Buffer.from(b.replace(/-----[^-]+-----/g,"").replace(/\s/g,""),"base64");return e.createHash("sha1").update(c).digest("hex").toUpperCase().match(/.{2}/g).join(":")}async function s(a){var b,c;let e,g;return m?(b=a,new Promise(a=>{let c;try{c=r(b).replace(/:/g,"")}catch{return a(!1)}f(`certutil -store Root ${c}`,{windowsHide:!0},b=>{a(!b)})})):n?(c=a,new Promise(a=>{try{let b=r(c).replace(/:/g,"");f(`security verify-cert -c "${c}" -p ssl -k /Library/Keychains/System.keychain 2>/dev/null`,{windowsHide:!0},c=>{if(!c)return a(!0);f(`security dump-trust-settings -d 2>/dev/null | grep -i "${b}"`,{windowsHide:!0},(b,c)=>{a(!b&&!!c?.trim())})})}catch{a(!1)}})):(e=p(),g=`${e.dir}/bluerouter-root-ca.crt`,Promise.resolve(d.existsSync(g)))}async function t(a,b){let c=`security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain "${b}"`;try{await g(`security delete-certificate -c "Bluerouter MITM Root CA" /Library/Keychains/System.keychain 2>/dev/null || true && ${c}`,a),k("\uD83D\uDD10 Cert: ✅ installed to system keychain")}catch(a){throw Error(a.message?.includes("canceled")?"User canceled authorization":"Certificate install failed")}}async function u(a){let b=`
     certutil -delstore Root ${j(q)} 2>$null | Out-Null
     $exit = & certutil -addstore Root ${j(a)} 2>&1
     if ($LASTEXITCODE -ne 0) { throw "certutil exit $LASTEXITCODE" }
-  `;try{await i(b),k("\uD83D\uDD10 Cert: ✅ installed to Windows Root store")}catch(a){throw Error(`Failed to install certificate: ${a.message}`)}}async function v(a,b){let c=r(b).replace(/:/g,""),d=`security delete-certificate -Z "${c}" /Library/Keychains/System.keychain`;try{await g(d,a),k("\uD83D\uDD10 Cert: ✅ uninstalled from system keychain")}catch(a){throw Error("Failed to uninstall certificate")}}async function w(){let a=`certutil -delstore Root ${j(q)}`;try{await i(a),k("\uD83D\uDD10 Cert: ✅ uninstalled from Windows Root store")}catch(a){throw Error(`Failed to uninstall certificate: ${a.message}`)}}async function x(a,b="add"){let c="9Router MITM Root CA",d=`
+  `;try{await i(b),k("\uD83D\uDD10 Cert: ✅ installed to Windows Root store")}catch(a){throw Error(`Failed to install certificate: ${a.message}`)}}async function v(a,b){let c=r(b).replace(/:/g,""),d=`security delete-certificate -Z "${c}" /Library/Keychains/System.keychain`;try{await g(d,a),k("\uD83D\uDD10 Cert: ✅ uninstalled from system keychain")}catch(a){throw Error("Failed to uninstall certificate")}}async function w(){let a=`certutil -delstore Root ${j(q)}`;try{await i(a),k("\uD83D\uDD10 Cert: ✅ uninstalled from Windows Root store")}catch(a){throw Error(`Failed to uninstall certificate: ${a.message}`)}}async function x(a,b="add"){let c="Bluerouter MITM Root CA",d=`
     if ! command -v certutil &> /dev/null; then
       exit 0
     fi