@neurosec/sentry 1.0.19 → 1.1.0

package/dist/api.js

@@ -1,24 +1,72 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SentryApiServer = void 0;
 const http_1 = __importDefault(require("http"));
+const proxy_1 = require("./proxy");
+const sandbox_1 = require("./sandbox");
+const api_auth_1 = require("./api-auth");
 const logger_1 = require("./logger");
 class SentryApiServer {
-    constructor(config, getTaggedProcesses, getEngine, getSkillEvaluator, getPolicyVersion, getLastSyncAt, getAgentRegistry, getActionLogger, getAnomalyDetector) {
+    constructor(config, getTaggedProcesses, getEngine, getSkillEvaluator, getPolicyVersion, getLastSyncAt, getProxy = () => undefined, getPolicyEnforcer = () => undefined) {
         this.config = config;
         this.getTaggedProcesses = getTaggedProcesses;
         this.getEngine = getEngine;
         this.getSkillEvaluator = getSkillEvaluator;
         this.getPolicyVersion = getPolicyVersion;
         this.getLastSyncAt = getLastSyncAt;
-        this.getAgentRegistry = getAgentRegistry;
-        this.getActionLogger = getActionLogger;
-        this.getAnomalyDetector = getAnomalyDetector;
+        this.getProxy = getProxy;
+        this.getPolicyEnforcer = getPolicyEnforcer;
         this.server = null;
         this.startTime = Date.now();
+        this.auth = new api_auth_1.LocalApiAuth({
+            stateDir: config.sentry.stateDir,
+            // Read-only health/status is anonymous so operator dashboards and
+            // monitoring agents can poll without provisioning the bearer token.
+            publicPaths: ['/api/v1/status', '/health'],
+        });
+        logger_1.logger.info('Local API auth initialized — clients must send Authorization: Bearer <token>', {
+            tokenPath: this.auth.getTokenPath(),
+        });
+    }
+    /** Returns the bearer token for use by trusted local tooling. */
+    getAuthToken() {
+        return this.auth.getToken();
     }
     async start() {
         if (this.server)
@@ -50,6 +98,7 @@ class SentryApiServer {
         const engine = this.getEngine();
         const stats = engine.getStats();
         const processes = this.getTaggedProcesses();
+        const platform = process.platform === 'linux' ? 'linux' : process.platform === 'darwin' ? 'darwin' : process.platform === 'win32' ? 'win32' : 'unknown';
         return {
             version: this.config.sentry.version,
             uptime: Math.floor((Date.now() - this.startTime) / 1000),
@@ -60,7 +109,11 @@ class SentryApiServer {
             decisionsTotal: stats.total,
             decisionsDenied: stats.denied,
             lastSyncAt: this.getLastSyncAt(),
-            platform: process.platform === 'linux' ? 'linux' : process.platform === 'darwin' ? 'darwin' : 'unknown',
+            platform: platform,
+            proxyEnabled: this.config.proxy?.enabled ?? false,
+            proxyPort: this.config.proxy?.port ?? 0,
+            redirectEnabled: this.config.redirect?.enabled ?? false,
+            redirectStrategy: this.config.redirect?.strategy ?? 'none',
         };
     }
     async handleRequest(req, res) {
@@ -77,6 +130,16 @@ class SentryApiServer {
             res.end();
             return;
         }
+        // Auth gate (skipped for public read-only paths defined by LocalApiAuth).
+        const authResult = this.auth.authorize(req);
+        if (!authResult.ok) {
+            await this.json(res, 401, {
+                error: 'Authentication required',
+                hint: `Send 'Authorization: Bearer <token>' (token stored at ${this.auth.getTokenPath()})`,
+                reason: authResult.reason,
+            });
+            return;
+        }
         try {
             switch (true) {
                 case method === 'GET' && pathname === '/api/v1/status':
@@ -110,15 +173,84 @@ class SentryApiServer {
                         blockedEgress: this.config.network.blockHosts,
                     });
                     break;
-                case method === 'POST' && pathname === '/api/v1/policy/reload':
-                    await this.json(res, 200, { message: 'Policy reload requested' });
+                case method === 'POST' && pathname === '/api/v1/policy/reload': {
+                    // The reload itself is triggered by emitting a marker; the daemon
+                    // observes this and runs syncPolicies on its next tick. We use a
+                    // setImmediate so this handler stays sync-friendly.
+                    process.nextTick(() => process.emit('SIGUSR1'));
+                    await this.json(res, 202, { message: 'Policy reload scheduled (next sync tick)' });
+                    break;
+                }
+                // NeuroShield proxy endpoints
+                case method === 'GET' && pathname === '/api/v1/proxy/status':
+                    await this.json(res, 200, {
+                        enabled: this.config.proxy.enabled,
+                        port: this.config.proxy.port,
+                        bindAddress: this.config.proxy.bindAddress,
+                        interceptHttps: this.config.proxy.interceptHttps,
+                        running: !!this.getProxy(),
+                    });
+                    break;
+                case method === 'GET' && pathname === '/api/v1/proxy/policies':
+                    await this.json(res, 200, {
+                        mode: this.config.enforcement.mode,
+                        policies: proxy_1.DEFAULT_POLICIES,
+                    });
+                    break;
+                case method === 'POST' && pathname === '/api/v1/proxy/policies/reload': {
+                    const { DEFAULT_POLICIES } = await Promise.resolve().then(() => __importStar(require('./proxy')));
+                    const enforcer = this.getPolicyEnforcer();
+                    if (enforcer) {
+                        enforcer.setPolicies(DEFAULT_POLICIES);
+                        await this.json(res, 200, { message: 'Proxy policies reloaded' });
+                    }
+                    else {
+                        await this.json(res, 503, { error: 'Policy enforcer not available' });
+                    }
+                    break;
+                }
+                case method === 'GET' && pathname === '/api/v1/redirect/status':
+                    await this.json(res, 200, {
+                        enabled: this.config.redirect.enabled,
+                        strategy: this.config.redirect.strategy,
+                        injectOnDiscover: this.config.redirect.injectOnDiscover,
+                    });
                     break;
                 case method === 'POST' && /^\/api\/v1\/sandbox\/(\d+)\/(disable|restrict)$/.test(pathname): {
                     const match = pathname.match(/^\/api\/v1\/sandbox\/(\d+)\/(disable|restrict)$/);
                     const pid = parseInt(match[1], 10);
                     const action = match[2];
-                    logger_1.logger.info('Sandbox action requested', { pid, action });
-                    await this.json(res, 200, { message: `Sandbox ${action} for pid ${pid}` });
+                    // Refuse if pid isn't in our tagged-process set (operator can only
+                    // touch processes Sentry actively manages).
+                    const proc = this.getTaggedProcesses().find(p => p.pid === pid);
+                    if (!proc) {
+                        await this.json(res, 404, { error: 'Process not found in tagged set', pid });
+                        break;
+                    }
+                    if (action === 'disable') {
+                        const removed = await (0, sandbox_1.removeSandbox)(pid);
+                        logger_1.logger.warn('Sandbox disabled by operator request', { pid, removed });
+                        await this.json(res, removed ? 200 : 500, {
+                            message: removed ? `Sandbox removed for pid ${pid}` : 'Sandbox removal failed',
+                            pid,
+                            applied: removed,
+                        });
+                    }
+                    else {
+                        // restrict → re-apply the most restrictive profile available
+                        const restrictiveProfile = (0, sandbox_1.getProfileForFramework)('') /* falls back to default-restrictive */;
+                        const result = restrictiveProfile
+                            ? await (0, sandbox_1.applySandbox)({ ...proc, sandboxProfileName: restrictiveProfile.name }, this.config)
+                            : { applied: false, features: [], reason: 'no restrictive profile available' };
+                        logger_1.logger.info('Sandbox restrict applied', { pid, ...result });
+                        await this.json(res, result.applied ? 200 : 500, {
+                            message: result.applied ? `Sandbox restricted for pid ${pid}` : 'Sandbox restrict failed',
+                            pid,
+                            applied: result.applied,
+                            features: result.features,
+                            reason: result.reason,
+                        });
+                    }
                     break;
                 }
                 case method === 'GET' && pathname === '/api/v1/approvals':
@@ -146,131 +278,6 @@ class SentryApiServer {
                     }
                     break;
                 }
-                // ═══════════════════════════════════════════════════════════════════
-                // AEGIS Framework API Endpoints
-                // ═══════════════════════════════════════════════════════════════════
-                // AEGIS: Agent identity & lifecycle (IAM Domain)
-                case method === 'GET' && pathname === '/api/v1/aegis/agents':
-                    await this.json(res, 200, this.getAgentRegistry().getAllIdentities());
-                    break;
-                case method === 'GET' && /^\/api\/v1\/aegis\/agents\/([^/]+)$/.test(pathname): {
-                    const agentId = pathname.match(/^\/api\/v1\/aegis\/agents\/([^/]+)$/)[1];
-                    const identity = this.getAgentRegistry().getIdentityById(agentId);
-                    if (identity) {
-                        await this.json(res, 200, identity);
-                    }
-                    else {
-                        await this.json(res, 404, { error: 'Agent identity not found' });
-                    }
-                    break;
-                }
-                case method === 'GET' && pathname === '/api/v1/aegis/agents/active':
-                    await this.json(res, 200, this.getAgentRegistry().getActiveIdentities());
-                    break;
-                case method === 'PUT' && /^\/api\/v1\/aegis\/agents\/([^/]+)\/documentation$/.test(pathname): {
-                    const docId = pathname.match(/^\/api\/v1\/aegis\/agents\/([^/]+)\/documentation$/)[1];
-                    let body = '';
-                    for await (const chunk of req)
-                        body += chunk;
-                    const updates = JSON.parse(body);
-                    const identity = this.getAgentRegistry().getIdentityById(docId);
-                    if (identity) {
-                        this.getAgentRegistry().updateDocumentation(identity.frameworkId, identity.pid, updates);
-                        await this.json(res, 200, { message: 'Documentation updated' });
-                    }
-                    else {
-                        await this.json(res, 404, { error: 'Agent identity not found' });
-                    }
-                    break;
-                }
-                case method === 'PUT' && /^\/api\/v1\/aegis\/agents\/([^/]+)\/identity$/.test(pathname): {
-                    const updId = pathname.match(/^\/api\/v1\/aegis\/agents\/([^/]+)\/identity$/)[1];
-                    let body = '';
-                    for await (const chunk of req)
-                        body += chunk;
-                    const updates = JSON.parse(body);
-                    const identity = this.getAgentRegistry().getIdentityById(updId);
-                    if (identity) {
-                        this.getAgentRegistry().updateIdentity(identity.frameworkId, identity.pid, updates);
-                        await this.json(res, 200, { message: 'Identity updated' });
-                    }
-                    else {
-                        await this.json(res, 404, { error: 'Agent identity not found' });
-                    }
-                    break;
-                }
-                // AEGIS: Agent-on-a-Page governance documentation
-                case method === 'GET' && /^\/api\/v1\/aegis\/agents\/([^/]+)\/page$/.test(pathname): {
-                    const pageId = pathname.match(/^\/api\/v1\/aegis\/agents\/([^/]+)\/page$/)[1];
-                    const identity = this.getAgentRegistry().getIdentityById(pageId);
-                    if (identity) {
-                        await this.json(res, 200, {
-                            agentId: identity.id,
-                            frameworkId: identity.frameworkId,
-                            frameworkName: identity.frameworkName,
-                            pid: identity.pid,
-                            status: identity.status,
-                            purpose: identity.purpose,
-                            riskLevel: identity.riskLevel,
-                            owner: identity.owner,
-                            ownerEmail: identity.ownerEmail,
-                            documentation: identity.documentation,
-                            allowedTools: identity.allowedTools,
-                            maxDecisionScope: identity.maxDecisionScope,
-                            allowedDataClassifications: identity.allowedDataClassifications,
-                            firstDiscoveredAt: identity.firstDiscoveredAt,
-                            lastSeenAt: identity.lastSeenAt,
-                        });
-                    }
-                    else {
-                        await this.json(res, 404, { error: 'Agent identity not found' });
-                    }
-                    break;
-                }
-                // AEGIS: Least-agency constraints (Zero Trust Domain)
-                case method === 'GET' && pathname === '/api/v1/aegis/constraints':
-                    await this.json(res, 200, [...this.getAgentRegistry().getAllIdentities().map(id => ({ frameworkId: id.frameworkId, level: id.maxDecisionScope }))]);
-                    break;
-                // AEGIS: Agent action log (Threat Management Domain)
-                case method === 'GET' && pathname === '/api/v1/aegis/actions':
-                    await this.json(res, 200, this.getActionLogger().getRecentActions(100));
-                    break;
-                case method === 'GET' && pathname === '/api/v1/aegis/actions/stats':
-                    await this.json(res, 200, { processedCount: this.getActionLogger().getProcessedCount() });
-                    break;
-                // AEGIS: Anomaly alerts (GRC + Threat Management Domains)
-                case method === 'GET' && pathname === '/api/v1/aegis/anomalies':
-                    await this.json(res, 200, this.getAnomalyDetector().getAllAlerts());
-                    break;
-                case method === 'GET' && pathname === '/api/v1/aegis/anomalies/open':
-                    await this.json(res, 200, this.getAnomalyDetector().getOpenAlerts());
-                    break;
-                case method === 'POST' && /^\/api\/v1\/aegis\/anomalies\/([^/]+)\/resolve$/.test(pathname): {
-                    const alertId = pathname.match(/^\/api\/v1\/aegis\/anomalies\/([^/]+)\/resolve$/)[1];
-                    let body = '';
-                    for await (const chunk of req)
-                        body += chunk;
-                    const { resolvedBy } = JSON.parse(body);
-                    const success = this.getAnomalyDetector().resolveAlert(alertId, resolvedBy);
-                    if (success) {
-                        await this.json(res, 200, { message: 'Alert resolved' });
-                    }
-                    else {
-                        await this.json(res, 404, { error: 'Alert not found' });
-                    }
-                    break;
-                }
-                case method === 'POST' && /^\/api\/v1\/aegis\/anomalies\/([^/]+)\/acknowledge$/.test(pathname): {
-                    const ackId = pathname.match(/^\/api\/v1\/aegis\/anomalies\/([^/]+)\/acknowledge$/)[1];
-                    const success = this.getAnomalyDetector().acknowledgeAlert(ackId);
-                    if (success) {
-                        await this.json(res, 200, { message: 'Alert acknowledged' });
-                    }
-                    else {
-                        await this.json(res, 404, { error: 'Alert not found or already resolved' });
-                    }
-                    break;
-                }
                 default:
                     await this.json(res, 404, { error: 'Not found', path: pathname });
             }

package/dist/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AAQxB,qCAAkC;AAElC,MAAa,eAAe;IAI1B,YACU,MAAoB,EACpB,kBAAyC,EACzC,SAAkC,EAClC,iBAAuC,EACvC,gBAA8B,EAC9B,aAAkC,EAClC,gBAAqC,EACrC,eAAmC,EACnC,kBAAyC;QARzC,WAAM,GAAN,MAAM,CAAc;QACpB,uBAAkB,GAAlB,kBAAkB,CAAuB;QACzC,cAAS,GAAT,SAAS,CAAyB;QAClC,sBAAiB,GAAjB,iBAAiB,CAAsB;QACvC,qBAAgB,GAAhB,gBAAgB,CAAc;QAC9B,kBAAa,GAAb,aAAa,CAAqB;QAClC,qBAAgB,GAAhB,gBAAgB,CAAqB;QACrC,oBAAe,GAAf,eAAe,CAAoB;QACnC,uBAAkB,GAAlB,kBAAkB,CAAuB;QAZ3C,WAAM,GAAuB,IAAI,CAAC;QAClC,cAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAY5B,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAExB,IAAI,CAAC,MAAM,GAAG,cAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC3C,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACvC,eAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QAEH,eAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,SAAS;QACP,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE5C,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YACnC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;YACxD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;YAClC,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE;YACtC,eAAe,EAAE,SAAS,CAAC,MAAM;YACjC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM;YAC7D,cAAc,EAAE,KAAK,CAAC,KAAK;YAC3B,eAAe,EAAE,KAAK,CAAC,MAAM;YAC7B,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE;YAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACxG,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAyB,EAAE,GAAwB;QAC7E,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAElD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAEnC,qBAAqB;QACrB,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,uBAAuB,CAAC,CAAC;QACtE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAE9D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,gBAAgB;oBACpD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;oBAC5C,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,mBAAmB;oBACvD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;oBACrD,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,+BAA+B,CAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;oBAChD,IAAI,IAAI,EAAE,CAAC;wBACT,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;oBAClC,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBAC5D,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,mBAAmB;oBACvD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,kBAAkB,EAAE,CAAC,CAAC;oBACjE,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,gBAAgB;oBACpD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;wBACxB,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;wBAChC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;wBAClC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc;wBACtD,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO;wBACjD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU;wBAC7C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU;qBAC9C,CAAC,CAAC;oBACH,MAAM;gBAER,KAAK,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,uBAAuB;oBAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;oBAClE,MAAM;gBAER,KAAK,MAAM,KAAK,MAAM,IAAI,iDAAiD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAC3F,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;oBAChF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACpC,MAAM,MAAM,GAAG,KAAM,CAAC,CAAC,CAAC,CAAC;oBACzB,eAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;oBACzD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,MAAM,YAAY,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC3E,MAAM;gBACR,CAAC;gBAED,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,mBAAmB;oBACvD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC;oBAC1E,MAAM;gBAER,KAAK,MAAM,KAAK,MAAM,IAAI,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACtE,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,4BAA4B,CAAE,CAAC,CAAC,CAAC,CAAC;oBACtE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;oBAC/D,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,YAAY,EAAE,CAAC,CAAC;oBACpF,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,YAAY,EAAE,CAAC,CAAC;oBAC9F,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,MAAM,KAAK,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACnE,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAE,CAAC,CAAC,CAAC,CAAC;oBACnE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBAC5D,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,CAAC,CAAC;oBAClF,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,YAAY,EAAE,CAAC,CAAC;oBAC5F,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,sEAAsE;gBACtE,gCAAgC;gBAChC,sEAAsE;gBAEtE,iDAAiD;gBACjD,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,sBAAsB;oBAC1D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,gBAAgB,EAAE,CAAC,CAAC;oBACtE,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,qCAAqC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAC9E,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,qCAAqC,CAAE,CAAC,CAAC,CAAC,CAAC;oBAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;oBAClE,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;oBACtC,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,6BAA6B;oBACjE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC;oBACzE,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,oDAAoD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAC7F,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,oDAAoD,CAAE,CAAC,CAAC,CAAC,CAAC;oBACvF,IAAI,IAAI,GAAG,EAAE,CAAC;oBACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;wBAAE,IAAI,IAAI,KAAK,CAAC;oBAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;oBAChE,IAAI,QAAQ,EAAE,CAAC;wBACb,IAAI,CAAC,gBAAgB,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;wBACzF,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,uBAAuB,EAAE,CAAC,CAAC;oBAClE,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,MAAM,KAAK,KAAK,IAAI,+CAA+C,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACxF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,+CAA+C,CAAE,CAAC,CAAC,CAAC,CAAC;oBAClF,IAAI,IAAI,GAAG,EAAE,CAAC;oBACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;wBAAE,IAAI,IAAI,KAAK,CAAC;oBAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;oBAChE,IAAI,QAAQ,EAAE,CAAC;wBACb,IAAI,CAAC,gBAAgB,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;wBACpF,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC7D,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,kDAAkD;gBAClD,KAAK,MAAM,KAAK,KAAK,IAAI,2CAA2C,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACpF,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,2CAA2C,CAAE,CAAC,CAAC,CAAC,CAAC;oBAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;oBACjE,IAAI,QAAQ,EAAE,CAAC;wBACb,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;4BACxB,OAAO,EAAE,QAAQ,CAAC,EAAE;4BACpB,WAAW,EAAE,QAAQ,CAAC,WAAW;4BACjC,aAAa,EAAE,QAAQ,CAAC,aAAa;4BACrC,GAAG,EAAE,QAAQ,CAAC,GAAG;4BACjB,MAAM,EAAE,QAAQ,CAAC,MAAM;4BACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;4BACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;4BAC7B,KAAK,EAAE,QAAQ,CAAC,KAAK;4BACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;4BAC/B,aAAa,EAAE,QAAQ,CAAC,aAAa;4BACrC,YAAY,EAAE,QAAQ,CAAC,YAAY;4BACnC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;4BAC3C,0BAA0B,EAAE,QAAQ,CAAC,0BAA0B;4BAC/D,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;4BAC7C,UAAU,EAAE,QAAQ,CAAC,UAAU;yBAChC,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,sDAAsD;gBACtD,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,2BAA2B;oBAC/D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAC1E,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,gBAAgB,EAAE,CAAC,CACpE,CAAC,CAAC,CAAC;oBACJ,MAAM;gBAER,qDAAqD;gBACrD,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,uBAAuB;oBAC3D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;oBACxE,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,6BAA6B;oBACjE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;oBAC1F,MAAM;gBAER,0DAA0D;gBAC1D,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,yBAAyB;oBAC7D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;oBACpE,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,8BAA8B;oBAClE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;oBACrE,MAAM;gBAER,KAAK,MAAM,KAAK,MAAM,IAAI,iDAAiD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAC3F,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,iDAAiD,CAAE,CAAC,CAAC,CAAC,CAAC;oBACtF,IAAI,IAAI,GAAG,EAAE,CAAC;oBACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG;wBAAE,IAAI,IAAI,KAAK,CAAC;oBAC7C,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACxC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;oBAC5E,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;oBAC3D,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;oBAC1D,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,MAAM,KAAK,MAAM,IAAI,qDAAqD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAC/F,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,qDAAqD,CAAE,CAAC,CAAC,CAAC,CAAC;oBACxF,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;oBAClE,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;oBAC/D,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC,CAAC;oBAC9E,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED;oBACE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAa;QACxE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC;CACF;AA/SD,0CA+SC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,gDAAwB;AAOxB,mCAA2C;AAC3C,uCAAgF;AAChF,yCAA0C;AAC1C,qCAAkC;AAElC,MAAa,eAAe;IAK1B,YACU,MAAoB,EACpB,kBAAyC,EACzC,SAAkC,EAClC,iBAAuC,EACvC,gBAA8B,EAC9B,aAAkC,EAClC,WAA6C,GAAG,EAAE,CAAC,SAAS,EAC5D,oBAAsD,GAAG,EAAE,CAAC,SAAS;QAPrE,WAAM,GAAN,MAAM,CAAc;QACpB,uBAAkB,GAAlB,kBAAkB,CAAuB;QACzC,cAAS,GAAT,SAAS,CAAyB;QAClC,sBAAiB,GAAjB,iBAAiB,CAAsB;QACvC,qBAAgB,GAAhB,gBAAgB,CAAc;QAC9B,kBAAa,GAAb,aAAa,CAAqB;QAClC,aAAQ,GAAR,QAAQ,CAAoD;QAC5D,sBAAiB,GAAjB,iBAAiB,CAAoD;QAZvE,WAAM,GAAuB,IAAI,CAAC;QAClC,cAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAa7B,IAAI,CAAC,IAAI,GAAG,IAAI,uBAAY,CAAC;YAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAChC,kEAAkE;YAClE,oEAAoE;YACpE,WAAW,EAAE,CAAC,gBAAgB,EAAE,SAAS,CAAC;SAC3C,CAAC,CAAC;QACH,eAAM,CAAC,IAAI,CAAC,8EAA8E,EAAE;YAC1F,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;SACpC,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAExB,IAAI,CAAC,MAAM,GAAG,cAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC3C,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACvC,eAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBACnE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QAEH,eAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QACzB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,SAAS;QACP,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAExJ,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO;YACnC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;YACxD,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;YAClC,aAAa,EAAE,IAAI,CAAC,gBAAgB,EAAE;YACtC,eAAe,EAAE,SAAS,CAAC,MAAM;YACjC,kBAAkB,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM;YAC7D,cAAc,EAAE,KAAK,CAAC,KAAK;YAC3B,eAAe,EAAE,KAAK,CAAC,MAAM;YAC7B,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE;YAChC,QAAQ,EAAE,QAAoC;YAC9C,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,KAAK;YACjD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC;YACvC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,KAAK;YACvD,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,IAAI,MAAM;SAC3D,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,GAAyB,EAAE,GAAwB;QAC7E,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAElD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;QAEnC,qBAAqB;QACrB,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,uBAAuB,CAAC,CAAC;QACtE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,oBAAoB,CAAC,CAAC;QACpE,GAAG,CAAC,SAAS,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;QAE9D,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,0EAA0E;QAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;gBACxB,KAAK,EAAE,yBAAyB;gBAChC,IAAI,EAAE,yDAAyD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG;gBAC1F,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,gBAAgB;oBACpD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;oBAC5C,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,mBAAmB;oBACvD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;oBACrD,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,+BAA+B,CAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;oBAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;oBAChD,IAAI,IAAI,EAAE,CAAC;wBACT,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;oBAClC,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBAC5D,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,mBAAmB;oBACvD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,kBAAkB,EAAE,CAAC,CAAC;oBACjE,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,gBAAgB;oBACpD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;wBACxB,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE;wBAChC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;wBAClC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc;wBACtD,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO;wBACjD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU;wBAC7C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU;qBAC9C,CAAC,CAAC;oBACH,MAAM;gBAER,KAAK,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,uBAAuB,CAAC,CAAC,CAAC;oBAC/D,kEAAkE;oBAClE,iEAAiE;oBACjE,oDAAoD;oBACpD,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAA2B,CAAC,CAAC,CAAC;oBAClE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC,CAAC;oBACnF,MAAM;gBACR,CAAC;gBAED,8BAA8B;gBAC9B,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,sBAAsB;oBAC1D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;wBACxB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;wBAClC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;wBAC5B,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW;wBAC1C,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc;wBAChD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE;qBAC3B,CAAC,CAAC;oBACH,MAAM;gBAER,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,wBAAwB;oBAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;wBACxB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI;wBAClC,QAAQ,EAAE,wBAAgB;qBAC3B,CAAC,CAAC;oBACH,MAAM;gBAER,KAAK,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,+BAA+B,CAAC,CAAC,CAAC;oBACvE,MAAM,EAAE,gBAAgB,EAAE,GAAG,wDAAa,SAAS,GAAC,CAAC;oBACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBAC1C,IAAI,QAAQ,EAAE,CAAC;wBACb,QAAQ,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;wBACvC,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;oBACpE,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;oBACxE,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,yBAAyB;oBAC7D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE;wBACxB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO;wBACrC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ;wBACvC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB;qBACxD,CAAC,CAAC;oBACH,MAAM;gBAER,KAAK,MAAM,KAAK,MAAM,IAAI,iDAAiD,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAC3F,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;oBAChF,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACpC,MAAM,MAAM,GAAG,KAAM,CAAC,CAAC,CAA2B,CAAC;oBAEnD,mEAAmE;oBACnE,4CAA4C;oBAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;oBAChE,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,GAAG,EAAE,CAAC,CAAC;wBAC7E,MAAM;oBACR,CAAC;oBAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,MAAM,OAAO,GAAG,MAAM,IAAA,uBAAa,EAAC,GAAG,CAAC,CAAC;wBACzC,eAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;wBACtE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;4BACxC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC,CAAC,wBAAwB;4BAC9E,GAAG;4BACH,OAAO,EAAE,OAAO;yBACjB,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,6DAA6D;wBAC7D,MAAM,kBAAkB,GACtB,IAAA,gCAAsB,EAAC,EAAE,CAAC,CAAC,uCAAuC,CAAC;wBACrE,MAAM,MAAM,GAAG,kBAAkB;4BAC/B,CAAC,CAAC,MAAM,IAAA,sBAAY,EAAC,EAAE,GAAG,IAAI,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC;4BAC3F,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;wBACjF,eAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;wBAC5D,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE;4BAC/C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC,CAAC,yBAAyB;4BACzF,GAAG;4BACH,OAAO,EAAE,MAAM,CAAC,OAAO;4BACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;4BACzB,MAAM,EAAE,MAAM,CAAC,MAAM;yBACtB,CAAC,CAAC;oBACL,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,MAAM,KAAK,KAAK,IAAI,QAAQ,KAAK,mBAAmB;oBACvD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC;oBAC1E,MAAM;gBAER,KAAK,MAAM,KAAK,MAAM,IAAI,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACtE,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,4BAA4B,CAAE,CAAC,CAAC,CAAC,CAAC;oBACtE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;oBAC/D,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,2BAA2B,EAAE,YAAY,EAAE,CAAC,CAAC;oBACpF,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,YAAY,EAAE,CAAC,CAAC;oBAC9F,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED,KAAK,MAAM,KAAK,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBACnE,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,yBAAyB,CAAE,CAAC,CAAC,CAAC,CAAC;oBACnE,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBAC5D,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,YAAY,EAAE,CAAC,CAAC;oBAClF,CAAC;yBAAM,CAAC;wBACN,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,qCAAqC,EAAE,YAAY,EAAE,CAAC,CAAC;oBAC5F,CAAC;oBACD,MAAM;gBACR,CAAC;gBAED;oBACE,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAa;QACxE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,CAAC;CACF;AArRD,0CAqRC"}

package/dist/cli.d.ts

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-export {};
+export declare function main(): Promise<void>;
 //# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAqUA,wBAAsB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAgC1C"}

package/dist/cli.js

@@ -4,11 +4,14 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.main = main;
 const http_1 = __importDefault(require("http"));
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
 const child_process_1 = require("child_process");
+const config_1 = require("./config");
+const launcher_1 = require("./launcher");
 const setup_1 = require("./setup");
 const VERSION = require('../package.json').version || '1.0.0';
 const USAGE = `
@@ -20,6 +23,7 @@ USAGE
 COMMANDS
   setup     Generate and write sentry.yaml configuration
   install   Install the sentry daemon as a system service
+  launch    Launch an agent through Sentry's platform sandbox wrapper
   status    Show sentry daemon status and active processes
   logs      Tail the sentry audit log
   version   Print version
@@ -33,9 +37,16 @@ SETUP OPTIONS
   --config=<path>     Config output path (default: /etc/neuroshield/sentry.yaml)
   --non-interactive   Skip prompts (use with flags above)
 
+LAUNCH OPTIONS
+  --framework=<id>    Framework id used to select sandbox profile
+  --profile=<name>    Explicit sandbox profile name
+  --cwd=<path>        Working directory for the launched command
+  --dry-run           Print the computed launch plan without executing it
+
 EXAMPLES
   neuroshield-sentry setup
   neuroshield-sentry setup --org=org_abc123 --token=nst_xxx --mode=enforce
+  neuroshield-sentry launch --framework=codex -- node agent.js
   sudo neuroshield-sentry install
   neuroshield-sentry status
   neuroshield-sentry logs -n 50
@@ -47,6 +58,12 @@ function getConfigPaths(platform) {
             log: '/usr/local/var/log/neuroshield/sentry.log',
         };
     }
+    if (platform === 'win32') {
+        return {
+            config: `${process.env.ProgramData || 'C:\\ProgramData'}\\NeuroShield\\Sentry\\sentry.yaml`,
+            log: `${process.env.ProgramData || 'C:\\ProgramData'}\\NeuroShield\\Sentry\\logs\\sentry.log`,
+        };
+    }
     return {
         config: '/etc/neuroshield/sentry.yaml',
         log: '/var/log/neuroshield/sentry.log',
@@ -72,6 +89,22 @@ async function cmdInstall() {
     const platform = os_1.default.platform();
     const pkgRoot = path_1.default.resolve(__dirname, '..');
     const scriptsDir = path_1.default.join(pkgRoot, 'scripts');
+    if (platform === 'win32') {
+        const installScript = path_1.default.join(scriptsDir, 'install-sentry-windows.ps1');
+        if (!fs_1.default.existsSync(installScript)) {
+            console.error(`Windows install script not found at ${installScript}`);
+            process.exit(1);
+        }
+        console.log('Installing sentry daemon for Windows...');
+        const result = (0, child_process_1.spawnSync)('powershell', [
+            '-ExecutionPolicy', 'Bypass',
+            '-File', installScript,
+        ], {
+            stdio: 'inherit',
+            env: { ...process.env, SENTRY_VERSION: VERSION },
+        });
+        process.exit(result.status ?? 1);
+    }
     const scriptName = platform === 'darwin' ? 'install-sentry-macos.sh' : 'install-sentry.sh';
     const installScript = path_1.default.join(scriptsDir, scriptName);
     if (!fs_1.default.existsSync(installScript)) {
@@ -86,8 +119,29 @@ async function cmdInstall() {
     });
     process.exit(result.status ?? 1);
 }
+async function cmdLaunch(args) {
+    const separatorIndex = args.indexOf('--');
+    const flagArgs = separatorIndex >= 0 ? args.slice(0, separatorIndex) : args.filter((arg) => arg.startsWith('--'));
+    const commandArgs = separatorIndex >= 0 ? args.slice(separatorIndex + 1) : args.filter((arg) => !arg.startsWith('--'));
+    const flags = parseFlags(flagArgs);
+    if (commandArgs.length === 0) {
+        console.error('launch requires a command after --');
+        process.exit(1);
+    }
+    const configPath = flag(flags, 'config', 'config-path');
+    const config = (0, config_1.loadConfig)(configPath);
+    const exitCode = await (0, launcher_1.launchWithSentry)(config, {
+        frameworkId: flag(flags, 'framework'),
+        profileName: flag(flags, 'profile'),
+        cwd: flag(flags, 'cwd'),
+        dryRun: flagEnabled(flags, 'dry-run', 'dryrun'),
+        command: commandArgs,
+    });
+    process.exit(exitCode);
+}
 async function cmdStatus() {
-    const paths = getConfigPaths(os_1.default.platform());
+    const platform = os_1.default.platform();
+    const paths = getConfigPaths(platform);
     // Try local API first
     const apiPorts = [9191];
     for (const port of apiPorts) {
@@ -107,6 +161,10 @@ async function cmdStatus() {
             console.log(`  Decisions Denied: ${status.decisionsDenied}`);
             console.log(`  Policy Version:  ${status.policyVersion}`);
             console.log(`  Last Sync:       ${status.lastSyncAt || 'never'}`);
+            if (status.proxyEnabled) {
+                console.log(`  Proxy Port:      ${status.proxyPort}`);
+                console.log(`  Redirect:        ${status.redirectEnabled ? status.redirectStrategy : 'disabled'}`);
+            }
             console.log('');
             if (status.taggedProcesses > 0) {
                 try {
@@ -131,12 +189,23 @@ async function cmdStatus() {
     }
     // Fallback: check if process is running
     try {
-        const ps = (0, child_process_1.execSync)('pgrep -f neuroshield-sentryd', { encoding: 'utf8', timeout: 3000 }).trim();
-        if (ps) {
-            console.log('Sentry daemon process is running (pids: ' + ps + ')');
-            console.log('Local API not responding — daemon may still be starting up.');
-            console.log(`Config: ${paths.config}`);
-            console.log(`Logs:   ${paths.log}`);
+        if (platform === 'win32') {
+            const result = (0, child_process_1.execSync)(`powershell -Command "Get-Process -Name 'node' -ErrorAction SilentlyContinue | Where-Object { $_.CommandLine -match 'sentry' } | Select-Object -ExpandProperty Id"`, { encoding: 'utf8', timeout: 5000 }).trim();
+            if (result) {
+                console.log('Sentry daemon process is running (pids: ' + result + ')');
+                console.log('Local API not responding — daemon may still be starting up.');
+                console.log(`Config: ${paths.config}`);
+                console.log(`Logs:   ${paths.log}`);
+            }
+        }
+        else {
+            const ps = (0, child_process_1.execSync)('pgrep -f neuroshield-sentryd', { encoding: 'utf8', timeout: 3000 }).trim();
+            if (ps) {
+                console.log('Sentry daemon process is running (pids: ' + ps + ')');
+                console.log('Local API not responding — daemon may still be starting up.');
+                console.log(`Config: ${paths.config}`);
+                console.log(`Logs:   ${paths.log}`);
+            }
         }
     }
     catch {
@@ -146,7 +215,10 @@ async function cmdStatus() {
     if (fs_1.default.existsSync(paths.config)) {
         console.log('Sentry daemon is NOT running.');
         console.log(`Config exists: ${paths.config}`);
-        console.log('Start it with: sudo neuroshield-sentryd');
+        const startCmd = platform === 'win32'
+            ? 'net start NeuroShieldSentry'
+            : 'sudo neuroshield-sentryd';
+        console.log(`Start it with: ${startCmd}`);
     }
     else {
         console.log('Sentry daemon is NOT configured.');
@@ -188,12 +260,28 @@ function parseFlags(args) {
     for (const arg of args) {
         const match = arg.match(/^--(\w[\w-]*)(?:=(.*))?$/);
         if (match) {
-            const key = match[1].replace(/-/g, '');
-            flags[key] = match[2] ?? 'true';
+            const rawKey = match[1];
+            const normalizedKey = rawKey.replace(/-/g, '');
+            const value = match[2] ?? 'true';
+            flags[rawKey] = value;
+            flags[normalizedKey] = value;
         }
     }
     return flags;
 }
+function flag(flags, ...names) {
+    for (const name of names) {
+        if (flags[name] !== undefined)
+            return flags[name];
+        const normalized = name.replace(/-/g, '');
+        if (flags[normalized] !== undefined)
+            return flags[normalized];
+    }
+    return undefined;
+}
+function flagEnabled(flags, ...names) {
+    return flag(flags, ...names) === 'true';
+}
 function httpGet(url, timeout) {
     return new Promise((resolve, reject) => {
         const req = http_1.default.get(url, { timeout }, res => {
@@ -230,6 +318,9 @@ async function main() {
         case 'install':
             await cmdInstall();
             break;
+        case 'launch':
+            await cmdLaunch(rest);
+            break;
         case 'status':
             await cmdStatus();
             break;
@@ -249,8 +340,10 @@ async function main() {
             break;
     }
 }
-main().catch(err => {
-    console.error('CLI error:', err.message);
-    process.exit(1);
-});
+if (require.main === module) {
+    main().catch(err => {
+        console.error('CLI error:', err.message);
+        process.exit(1);
+    });
+}
 //# sourceMappingURL=cli.js.map