@neurosec/sentry 1.0.19 → 1.1.0

package/dist/enforcement/network-monitor.js

@@ -6,23 +6,28 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.scanLLMConnections = scanLLMConnections;
 const dns_1 = __importDefault(require("dns"));
 const util_1 = require("util");
+const fs_1 = __importDefault(require("fs"));
+const child_process_1 = require("child_process");
 const types_1 = require("../types");
 const logger_1 = require("../logger");
 const dnsReverse = (0, util_1.promisify)(dns_1.default.reverse);
-const fs = require('fs');
 function parseProcNetTcp(filePath) {
     try {
-        const content = fs.readFileSync(filePath, 'utf8');
+        const content = fs_1.default.readFileSync(filePath, 'utf8');
         const lines = content.split('\n').slice(1);
         const entries = [];
         for (const line of lines) {
             const parts = line.trim().split(/\s+/);
-            if (parts.length < 4)
+            if (parts.length < 10)
                 continue;
             entries.push({
                 localAddress: parts[1] ?? '',
                 remoteAddress: parts[2] ?? '',
                 state: parts[3] ?? '',
+                // Column index varies slightly per kernel — column 9 (0-indexed) is the inode
+                // on most modern kernels. Safer: search for the first all-digit token after
+                // column 3 that isn't 0.
+                inode: parts.slice(4).find((p) => /^\d+$/.test(p) && p !== '0') ?? '',
             });
         }
         return entries;
@@ -31,6 +36,67 @@ function parseProcNetTcp(filePath) {
         return [];
     }
 }
+function parseWindowsNetstat(output) {
+    const entries = [];
+    for (const line of output.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed.startsWith('TCP')) {
+            continue;
+        }
+        const parts = trimmed.split(/\s+/);
+        if (parts.length < 5) {
+            continue;
+        }
+        const pid = parseInt(parts[4], 10);
+        if (!Number.isFinite(pid)) {
+            continue;
+        }
+        entries.push({
+            protocol: parts[0],
+            localAddress: parts[1],
+            remoteAddress: parts[2],
+            state: parts[3],
+            pid,
+        });
+    }
+    return entries;
+}
+/**
+ * Build a map of socket-inode -> PID by walking /proc/<pid>/fd symlinks.
+ * Linux exposes socket fds as symlinks of the form `socket:[12345]`. Iterating
+ * /proc on a busy host can be expensive; we restrict to the PIDs the daemon
+ * already cares about (tagged agent processes) to keep this cheap.
+ *
+ * Fixes S-C17: prior code hardcoded `pid: 0` on every connection record so
+ * the dashboard could not attribute network activity to a specific agent.
+ */
+function buildInodeToPidMap(pids) {
+    const map = new Map();
+    for (const pid of pids) {
+        let fds = [];
+        try {
+            fds = fs_1.default.readdirSync(`/proc/${pid}/fd`);
+        }
+        catch {
+            continue;
+        }
+        for (const fd of fds) {
+            try {
+                const target = fs_1.default.readlinkSync(`/proc/${pid}/fd/${fd}`);
+                const match = target.match(/^socket:\[(\d+)\]$/);
+                if (match) {
+                    // Last write wins — fine, since the same inode shouldn't be mapped
+                    // to two PIDs unless they share the fd (fork without close).
+                    map.set(match[1], pid);
+                }
+            }
+            catch {
+                // fd closed between readdir and readlink — skip
+            }
+        }
+    }
+    return map;
+}
 // /proc/net/tcp hex encoding: "0100007F:0035" = 127.0.0.1:53
 function hexToAddr(hex) {
     const [hexAddr, hexPort] = hex.split(':');
@@ -61,10 +127,274 @@ async function reverseResolveSafe(ip) {
         return [];
     }
 }
+function parseEndpoint(endpoint) {
+    const trimmed = endpoint.trim();
+    const cleaned = trimmed.replace(/\s+\(LISTEN\)$/, '');
+    if (cleaned.startsWith('[')) {
+        const match = cleaned.match(/^\[(.+)\]:(\d+)$/);
+        if (!match)
+            return null;
+        return { host: match[1], port: parseInt(match[2], 10) };
+    }
+    const lastColon = cleaned.lastIndexOf(':');
+    if (lastColon === -1)
+        return null;
+    const host = cleaned.slice(0, lastColon) || '0.0.0.0';
+    const port = parseInt(cleaned.slice(lastColon + 1), 10);
+    if (!Number.isFinite(port))
+        return null;
+    return { host, port };
+}
+async function scanDarwinConnections(taggedProcesses) {
+    const connections = [];
+    const seen = new Set();
+    const now = Date.now();
+    const taggedPids = new Set(taggedProcesses.map((process) => process.pid));
+    let output = '';
+    try {
+        output = (0, child_process_1.execFileSync)('lsof', ['-nP', '-iTCP', '-F', 'pn'], {
+            encoding: 'utf8',
+            timeout: 5000,
+        });
+    }
+    catch {
+        return [];
+    }
+    let currentPid = null;
+    for (const line of output.split('\n')) {
+        if (!line)
+            continue;
+        if (line.startsWith('p')) {
+            const pid = parseInt(line.slice(1), 10);
+            currentPid = Number.isFinite(pid) ? pid : null;
+            continue;
+        }
+        if (!line.startsWith('n') || currentPid === null || !taggedPids.has(currentPid)) {
+            continue;
+        }
+        const descriptor = line.slice(1);
+        const [localText, remoteText] = descriptor.split('->');
+        const local = parseEndpoint(localText);
+        if (!local)
+            continue;
+        if (remoteText) {
+            const remote = parseEndpoint(remoteText);
+            if (!remote || !isLLMPort(remote.port))
+                continue;
+            const key = `darwin:established:${currentPid}:${remote.host}:${remote.port}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            let providerId = null;
+            let providerName = null;
+            let hostname = remote.host;
+            if (!isLocalIp(remote.host)) {
+                const hostnames = await reverseResolveSafe(remote.host);
+                for (const candidate of hostnames) {
+                    const match = (0, types_1.matchProviderByDomain)(candidate);
+                    if (match) {
+                        providerId = match.id;
+                        providerName = match.name;
+                        hostname = candidate;
+                        break;
+                    }
+                }
+            }
+            else {
+                const localProvider = matchLocalProviderByPort(remote.port);
+                if (localProvider) {
+                    providerId = localProvider.id;
+                    providerName = localProvider.name;
+                    hostname = 'localhost';
+                }
+            }
+            if (providerId) {
+                connections.push({
+                    pid: currentPid,
+                    localIp: local.host,
+                    localPort: local.port,
+                    remoteIp: remote.host,
+                    remotePort: remote.port,
+                    providerId,
+                    providerName,
+                    hostname,
+                    timestamp: now,
+                    type: 'established',
+                });
+            }
+            continue;
+        }
+        if (!descriptor.includes('(LISTEN)') || !isLLMPort(local.port)) {
+            continue;
+        }
+        const localProvider = matchLocalProviderByPort(local.port);
+        if (!localProvider) {
+            continue;
+        }
+        const key = `darwin:listening:${currentPid}:${local.port}`;
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        connections.push({
+            pid: currentPid,
+            localIp: local.host,
+            localPort: local.port,
+            remoteIp: '0.0.0.0',
+            remotePort: 0,
+            providerId: localProvider.id,
+            providerName: localProvider.name,
+            hostname: isLocalIp(local.host) ? 'localhost' : local.host,
+            timestamp: now,
+            type: 'listening',
+        });
+    }
+    return connections;
+}
+async function scanWindowsConnections(taggedProcesses) {
+    const connections = [];
+    const seen = new Set();
+    const now = Date.now();
+    const taggedPids = new Set(taggedProcesses.map((process) => process.pid));
+    let output = '';
+    try {
+        output = (0, child_process_1.execFileSync)('netstat', ['-ano', '-p', 'tcp'], {
+            encoding: 'utf8',
+            timeout: 5000,
+        });
+    }
+    catch {
+        return [];
+    }
+    const entries = parseWindowsNetstat(output);
+    for (const entry of entries) {
+        if (!taggedPids.has(entry.pid)) {
+            continue;
+        }
+        const local = parseEndpoint(entry.localAddress);
+        const remote = parseEndpoint(entry.remoteAddress);
+        if (!local || !remote) {
+            continue;
+        }
+        if (entry.state === 'LISTENING' && isLLMPort(local.port)) {
+            const localProvider = matchLocalProviderByPort(local.port);
+            if (!localProvider) {
+                continue;
+            }
+            const key = `win:listening:${entry.pid}:${local.host}:${local.port}`;
+            if (seen.has(key)) {
+                continue;
+            }
+            seen.add(key);
+            connections.push({
+                pid: entry.pid,
+                localIp: local.host,
+                localPort: local.port,
+                remoteIp: '0.0.0.0',
+                remotePort: 0,
+                providerId: localProvider.id,
+                providerName: localProvider.name,
+                hostname: isLocalIp(local.host) ? 'localhost' : local.host,
+                timestamp: now,
+                type: 'listening',
+            });
+            continue;
+        }
+        if (!['ESTABLISHED', 'CLOSE_WAIT', 'TIME_WAIT'].includes(entry.state)) {
+            continue;
+        }
+        if (!isLLMPort(remote.port)) {
+            continue;
+        }
+        const key = `win:established:${entry.pid}:${remote.host}:${remote.port}`;
+        if (seen.has(key)) {
+            continue;
+        }
+        seen.add(key);
+        let providerId = null;
+        let providerName = null;
+        let hostname = null;
+        if (isLocalIp(remote.host)) {
+            const localProvider = matchLocalProviderByPort(remote.port);
+            if (localProvider) {
+                providerId = localProvider.id;
+                providerName = localProvider.name;
+                hostname = 'localhost';
+            }
+        }
+        else {
+            const hostnames = await reverseResolveSafe(remote.host);
+            hostname = hostnames[0] ?? remote.host;
+            for (const candidate of hostnames) {
+                const match = (0, types_1.matchProviderByDomain)(candidate);
+                if (match) {
+                    providerId = match.id;
+                    providerName = match.name;
+                    hostname = candidate;
+                    break;
+                }
+            }
+            if (!providerId) {
+                for (const sig of types_1.LLM_PROVIDER_SIGNATURES) {
+                    for (const domain of sig.domains) {
+                        if (domain === 'localhost' || domain === '127.0.0.1')
+                            continue;
+                        try {
+                            const resolved = await new Promise((resolve) => {
+                                dns_1.default.resolve(domain, (err, addresses) => {
+                                    resolve(err ? [] : addresses);
+                                });
+                            });
+                            if (resolved.includes(remote.host)) {
+                                providerId = sig.id;
+                                providerName = sig.name;
+                                hostname = domain;
+                                break;
+                            }
+                        }
+                        catch { /* continue */ }
+                    }
+                    if (providerId)
+                        break;
+                }
+            }
+        }
+        if (!providerId) {
+            continue;
+        }
+        connections.push({
+            pid: entry.pid,
+            localIp: local.host,
+            localPort: local.port,
+            remoteIp: remote.host,
+            remotePort: remote.port,
+            providerId,
+            providerName,
+            hostname,
+            timestamp: now,
+            type: 'established',
+        });
+    }
+    if (connections.length > 0) {
+        const providers = [...new Set(connections.map(c => c.providerName))];
+        logger_1.logger.info('LLM endpoints detected', { count: connections.length, providers });
+    }
+    return connections;
+}
 async function scanLLMConnections(taggedProcesses) {
+    if (process.platform === 'darwin') {
+        return scanDarwinConnections(taggedProcesses);
+    }
+    if (process.platform === 'win32') {
+        return scanWindowsConnections(taggedProcesses);
+    }
+    if (process.platform !== 'linux') {
+        return [];
+    }
     const connections = [];
     const now = Date.now();
     const procFiles = ['/proc/net/tcp', '/proc/net/tcp6'];
+    const taggedPids = taggedProcesses.map((p) => p.pid);
+    const inodeToPid = buildInodeToPidMap(taggedPids);
     // Track seen connections to avoid duplicates
     const seen = new Set();
     // ── Phase 1: Established outbound connections (cloud LLMs) ────────────────
@@ -73,6 +403,10 @@ async function scanLLMConnections(taggedProcesses) {
         for (const entry of entries) {
             if (entry.state !== '01' && entry.state !== '06' && entry.state !== '08')
                 continue; // 01=ESTABLISHED, 06=TIME_WAIT, 08=CLOSE_WAIT
+            const ownerPid = entry.inode ? inodeToPid.get(entry.inode) : undefined;
+            if (!ownerPid)
+                continue;
+            const local = hexToAddr(entry.localAddress);
             const remote = hexToAddr(entry.remoteAddress);
             if (!remote)
                 continue;
@@ -80,7 +414,7 @@ async function scanLLMConnections(taggedProcesses) {
                 continue;
             if (isLocalIp(remote.ip))
                 continue; // skip localhost for cloud scan
-            const key = `cloud:${remote.ip}:${remote.port}`;
+            const key = `cloud:${ownerPid}:${remote.ip}:${remote.port}`;
             if (seen.has(key))
                 continue;
             seen.add(key);
@@ -124,7 +458,9 @@ async function scanLLMConnections(taggedProcesses) {
             }
             if (providerId) {
                 connections.push({
-                    pid: 0, localIp: '', localPort: 0,
+                    pid: ownerPid,
+                    localIp: local?.ip ?? '',
+                    localPort: local?.port ?? 0,
                     remoteIp: remote.ip, remotePort: remote.port,
                     providerId, providerName, hostname,
                     timestamp: now, type: 'established',
@@ -136,6 +472,9 @@ async function scanLLMConnections(taggedProcesses) {
     for (const procFile of procFiles) {
         const entries = parseProcNetTcp(procFile);
         for (const entry of entries) {
+            const ownerPid = entry.inode ? inodeToPid.get(entry.inode) : undefined;
+            if (!ownerPid)
+                continue;
             const local = hexToAddr(entry.localAddress);
             const remote = hexToAddr(entry.remoteAddress);
             if (!local || !remote)
@@ -143,14 +482,15 @@ async function scanLLMConnections(taggedProcesses) {
             // State 01 = ESTABLISHED, 06 = TIME_WAIT, 08 = CLOSE_WAIT — catch active + recently-closed
             const isRecent = entry.state === '01' || entry.state === '06' || entry.state === '08';
             if (isRecent && isLocalIp(remote.ip) && isLLMPort(remote.port)) {
-                const key = `local:established:${remote.port}`;
+                const key = `local:established:${ownerPid}:${remote.port}`;
                 if (seen.has(key))
                     continue;
                 seen.add(key);
                 const localProvider = matchLocalProviderByPort(remote.port);
                 if (localProvider) {
                     connections.push({
-                        pid: 0, localIp: local.ip, localPort: local.port,
+                        pid: ownerPid,
+                        localIp: local.ip, localPort: local.port,
                         remoteIp: remote.ip, remotePort: remote.port,
                         providerId: localProvider.id,
                         providerName: localProvider.name,
@@ -161,14 +501,15 @@ async function scanLLMConnections(taggedProcesses) {
             }
             // State 0A = LISTEN on local LLM port (service is running)
             if (entry.state === '0A' && isLLMPort(local.port)) {
-                const key = `local:listening:${local.port}`;
+                const key = `local:listening:${ownerPid}:${local.port}`;
                 if (seen.has(key))
                     continue;
                 seen.add(key);
                 const localProvider = matchLocalProviderByPort(local.port);
                 if (localProvider) {
                     connections.push({
-                        pid: 0, localIp: local.ip, localPort: local.port,
+                        pid: ownerPid,
+                        localIp: local.ip, localPort: local.port,
                         remoteIp: '0.0.0.0', remotePort: 0,
                         providerId: localProvider.id,
                         providerName: localProvider.name,

package/dist/enforcement/network-monitor.js.map

@@ -1 +1 @@
-{"version":3,"file":"network-monitor.js","sourceRoot":"","sources":["../../src/enforcement/network-monitor.ts"],"names":[],"mappings":";;;;;AAkEA,gDA8HC;AAhMD,8CAAsB;AACtB,+BAAiC;AACjC,oCAAuH;AACvH,sCAAmC;AAEnC,MAAM,UAAU,GAAG,IAAA,gBAAS,EAAC,aAAG,CAAC,OAAO,CAAC,CAAC;AAC1C,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAQzB,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAC/B,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC5B,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC7B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,6DAA6D;AAC7D,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG;YACZ,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;YACjC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;YACjC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;YACjC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;SAClC,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,oBAAoB;AACnC,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,qBAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,IAAI,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,EAAU;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,eAAgC;IACvE,MAAM,WAAW,GAAoB,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAEtD,6CAA6C;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,6EAA6E;IAC7E,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;gBAAE,SAAS,CAAC,8CAA8C;YAClI,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAE,SAAS,CAAC,gCAAgC;YAEpE,MAAM,GAAG,GAAG,SAAS,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEd,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtD,IAAI,UAAU,GAAkB,IAAI,CAAC;YACrC,IAAI,YAAY,GAAkB,IAAI,CAAC;YACvC,IAAI,QAAQ,GAAkB,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAEnD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,IAAA,6BAAqB,EAAC,CAAC,CAAC,CAAC;gBACvC,IAAI,KAAK,EAAE,CAAC;oBACV,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC;oBACtB,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC;oBAC1B,QAAQ,GAAG,CAAC,CAAC;oBACb,MAAM;gBACR,CAAC;YACH,CAAC;YAED,gEAAgE;YAChE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,KAAK,MAAM,GAAG,IAAI,+BAAuB,EAAE,CAAC;oBAC1C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;wBACjC,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,WAAW;4BAAE,SAAS;wBAC/D,IAAI,CAAC;4BACH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE;gCACvD,aAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;oCACrC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gCAChC,CAAC,CAAC,CAAC;4BACL,CAAC,CAAC,CAAC;4BACH,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gCACjC,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC;gCACpB,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;gCACxB,QAAQ,GAAG,MAAM,CAAC;gCAClB,MAAM;4BACR,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;oBAC5B,CAAC;oBACD,IAAI,UAAU;wBAAE,MAAM;gBACxB,CAAC;YACH,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,CAAC;oBACf,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;oBACjC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI;oBAC5C,UAAU,EAAE,YAAY,EAAE,QAAQ;oBAClC,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,SAAS;YAEhC,2FAA2F;YAC3F,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;YACtF,IAAI,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/D,MAAM,GAAG,GAAG,qBAAqB,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC/C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEd,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,aAAa,EAAE,CAAC;oBAClB,WAAW,CAAC,IAAI,CAAC;wBACf,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI;wBAChD,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI;wBAC5C,UAAU,EAAE,aAAa,CAAC,EAAE;wBAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;wBAChC,QAAQ,EAAE,WAAW;wBACrB,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,2DAA2D;YAC3D,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,MAAM,GAAG,GAAG,mBAAmB,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEd,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3D,IAAI,aAAa,EAAE,CAAC;oBAClB,WAAW,CAAC,IAAI,CAAC;wBACf,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI;wBAChD,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;wBAClC,UAAU,EAAE,aAAa,CAAC,EAAE;wBAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;wBAChC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;wBACtD,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW;qBAClC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrE,eAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,sCAAsC;IACtC,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAC1E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACtF,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IAC/E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAC3E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IAC1G,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"network-monitor.js","sourceRoot":"","sources":["../../src/enforcement/network-monitor.ts"],"names":[],"mappings":";;;;;AAqaA,gDAqJC;AA1jBD,8CAAsB;AACtB,+BAAiC;AACjC,4CAAoB;AACpB,iDAA6C;AAC7C,oCAAuH;AACvH,sCAAmC;AAEnC,MAAM,UAAU,GAAG,IAAA,gBAAS,EAAC,aAAG,CAAC,OAAO,CAAC,CAAC;AAkB1C,SAAS,eAAe,CAAC,QAAgB;IACvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;gBAAE,SAAS;YAChC,OAAO,CAAC,IAAI,CAAC;gBACX,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC5B,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBAC7B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;gBACrB,8EAA8E;gBAC9E,4EAA4E;gBAC5E,yBAAyB;gBACzB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE;aACtE,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,MAAM,OAAO,GAA0B,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;YAClB,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;YACtB,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;YACvB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YACf,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,kBAAkB,CAAC,IAAc;IACxC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,GAAa,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,GAAG,GAAG,YAAE,CAAC,WAAW,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,YAAE,CAAC,YAAY,CAAC,SAAS,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;gBACxD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBACjD,IAAI,KAAK,EAAE,CAAC;oBACV,mEAAmE;oBACnE,6DAA6D;oBAC7D,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6DAA6D;AAC7D,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG;YACZ,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;YACjC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;YACjC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;YACjC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;SAClC,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,oBAAoB;AACnC,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,qBAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,EAAU;IAC3B,OAAO,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,WAAW,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,IAAI,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,EAAU;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAEtD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC;IACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,eAAgC;IACnE,MAAM,WAAW,GAAoB,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1E,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,4BAAY,EAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;YAC1D,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/C,SAAS;QACX,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAChF,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YAEjD,MAAM,GAAG,GAAG,sBAAsB,UAAU,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7E,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEd,IAAI,UAAU,GAAkB,IAAI,CAAC;YACrC,IAAI,YAAY,GAAkB,IAAI,CAAC;YACvC,IAAI,QAAQ,GAAkB,MAAM,CAAC,IAAI,CAAC;YAE1C,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACxD,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;oBAClC,MAAM,KAAK,GAAG,IAAA,6BAAqB,EAAC,SAAS,CAAC,CAAC;oBAC/C,IAAI,KAAK,EAAE,CAAC;wBACV,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC;wBACtB,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC;wBAC1B,QAAQ,GAAG,SAAS,CAAC;wBACrB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,aAAa,EAAE,CAAC;oBAClB,UAAU,GAAG,aAAa,CAAC,EAAE,CAAC;oBAC9B,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC;oBAClC,QAAQ,GAAG,WAAW,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,CAAC;oBACf,GAAG,EAAE,UAAU;oBACf,OAAO,EAAE,KAAK,CAAC,IAAI;oBACnB,SAAS,EAAE,KAAK,CAAC,IAAI;oBACrB,QAAQ,EAAE,MAAM,CAAC,IAAI;oBACrB,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,UAAU;oBACV,YAAY;oBACZ,QAAQ;oBACR,SAAS,EAAE,GAAG;oBACd,IAAI,EAAE,aAAa;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,SAAS;QACX,CAAC;QAED,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,oBAAoB,UAAU,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,KAAK,CAAC,IAAI;YACnB,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,CAAC;YACb,UAAU,EAAE,aAAa,CAAC,EAAE;YAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;YAChC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;YAC1D,SAAS,EAAE,GAAG;YACd,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,eAAgC;IACpE,MAAM,WAAW,GAAoB,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAE1E,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAA,4BAAY,EAAC,SAAS,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE;YACtD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACtB,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,SAAS;YACX,CAAC;YAED,MAAM,GAAG,GAAG,iBAAiB,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACrE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEd,WAAW,CAAC,IAAI,CAAC;gBACf,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,OAAO,EAAE,KAAK,CAAC,IAAI;gBACnB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,QAAQ,EAAE,SAAS;gBACnB,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,aAAa,CAAC,EAAE;gBAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;gBAChC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI;gBAC1D,SAAS,EAAE,GAAG;gBACd,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACtE,SAAS;QACX,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,mBAAmB,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACzE,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEd,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,IAAI,QAAQ,GAAkB,IAAI,CAAC;QAEnC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,aAAa,EAAE,CAAC;gBAClB,UAAU,GAAG,aAAa,CAAC,EAAE,CAAC;gBAC9B,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC;gBAClC,QAAQ,GAAG,WAAW,CAAC;YACzB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxD,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;YACvC,KAAK,MAAM,SAAS,IAAI,SAAS,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,IAAA,6BAAqB,EAAC,SAAS,CAAC,CAAC;gBAC/C,IAAI,KAAK,EAAE,CAAC;oBACV,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC;oBACtB,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC;oBAC1B,QAAQ,GAAG,SAAS,CAAC;oBACrB,MAAM;gBACR,CAAC;YACH,CAAC;YAED,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,KAAK,MAAM,GAAG,IAAI,+BAAuB,EAAE,CAAC;oBAC1C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;wBACjC,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,WAAW;4BAAE,SAAS;wBAC/D,IAAI,CAAC;4BACH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE;gCACvD,aAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;oCACrC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gCAChC,CAAC,CAAC,CAAC;4BACL,CAAC,CAAC,CAAC;4BACH,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gCACnC,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC;gCACpB,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;gCACxB,QAAQ,GAAG,MAAM,CAAC;gCAClB,MAAM;4BACR,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;oBAC5B,CAAC;oBACD,IAAI,UAAU;wBAAE,MAAM;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QAED,WAAW,CAAC,IAAI,CAAC;YACf,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,OAAO,EAAE,KAAK,CAAC,IAAI;YACnB,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,QAAQ,EAAE,MAAM,CAAC,IAAI;YACrB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,UAAU;YACV,YAAY;YACZ,QAAQ;YACR,SAAS,EAAE,GAAG;YACd,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrE,eAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,eAAgC;IACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,qBAAqB,CAAC,eAAe,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,sBAAsB,CAAC,eAAe,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GAAoB,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAElD,6CAA6C;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,6EAA6E;IAC7E,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;gBAAE,SAAS,CAAC,8CAA8C;YAClI,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAE,SAAS,CAAC,gCAAgC;YAEpE,MAAM,GAAG,GAAG,SAAS,QAAQ,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAEd,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtD,IAAI,UAAU,GAAkB,IAAI,CAAC;YACrC,IAAI,YAAY,GAAkB,IAAI,CAAC;YACvC,IAAI,QAAQ,GAAkB,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAEnD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,IAAA,6BAAqB,EAAC,CAAC,CAAC,CAAC;gBACvC,IAAI,KAAK,EAAE,CAAC;oBACV,UAAU,GAAG,KAAK,CAAC,EAAE,CAAC;oBACtB,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC;oBAC1B,QAAQ,GAAG,CAAC,CAAC;oBACb,MAAM;gBACR,CAAC;YACH,CAAC;YAED,gEAAgE;YAChE,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,KAAK,MAAM,GAAG,IAAI,+BAAuB,EAAE,CAAC;oBAC1C,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;wBACjC,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,WAAW;4BAAE,SAAS;wBAC/D,IAAI,CAAC;4BACH,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE;gCACvD,aAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;oCACrC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gCAChC,CAAC,CAAC,CAAC;4BACL,CAAC,CAAC,CAAC;4BACH,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;gCACjC,UAAU,GAAG,GAAG,CAAC,EAAE,CAAC;gCACpB,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;gCACxB,QAAQ,GAAG,MAAM,CAAC;gCAClB,MAAM;4BACR,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;oBAC5B,CAAC;oBACD,IAAI,UAAU;wBAAE,MAAM;gBACxB,CAAC;YACH,CAAC;YAED,IAAI,UAAU,EAAE,CAAC;gBACf,WAAW,CAAC,IAAI,CAAC;oBACf,GAAG,EAAE,QAAQ;oBACb,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE;oBACxB,SAAS,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC;oBAC3B,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI;oBAC5C,UAAU,EAAE,YAAY,EAAE,QAAQ;oBAClC,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa;iBACpC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,+EAA+E;IAC/E,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvE,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9C,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,SAAS;YAEhC,2FAA2F;YAC3F,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;YACtF,IAAI,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/D,MAAM,GAAG,GAAG,qBAAqB,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC3D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEd,MAAM,aAAa,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC5D,IAAI,aAAa,EAAE,CAAC;oBAClB,WAAW,CAAC,IAAI,CAAC;wBACf,GAAG,EAAE,QAAQ;wBACb,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI;wBACxC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI;wBAC5C,UAAU,EAAE,aAAa,CAAC,EAAE;wBAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;wBAChC,QAAQ,EAAE,WAAW;wBACrB,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,2DAA2D;YAC3D,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,MAAM,GAAG,GAAG,mBAAmB,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACxD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEd,MAAM,aAAa,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3D,IAAI,aAAa,EAAE,CAAC;oBAClB,WAAW,CAAC,IAAI,CAAC;wBACf,GAAG,EAAE,QAAQ;wBACb,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI;wBACxC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;wBAClC,UAAU,EAAE,aAAa,CAAC,EAAE;wBAC5B,YAAY,EAAE,aAAa,CAAC,IAAI;wBAChC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;wBACtD,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW;qBAClC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrE,eAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,sCAAsC;IACtC,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;IAC1E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IACtF,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;IAC/E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAC3E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;IAC1G,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/enforcement/network-monitor.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=network-monitor.test.d.ts.map

package/dist/enforcement/network-monitor.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-monitor.test.d.ts","sourceRoot":"","sources":["../../src/enforcement/network-monitor.test.ts"],"names":[],"mappings":""}

package/dist/enforcement/network-monitor.test.js

@@ -0,0 +1,52 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const vitest_1 = require("vitest");
+const dns_1 = __importDefault(require("dns"));
+const { mockExecFileSync } = vitest_1.vi.hoisted(() => ({
+    mockExecFileSync: vitest_1.vi.fn(),
+}));
+vitest_1.vi.mock('child_process', () => ({
+    execFileSync: mockExecFileSync,
+}));
+const network_monitor_1 = require("./network-monitor");
+(0, vitest_1.describe)('scanLLMConnections', () => {
+    (0, vitest_1.beforeEach)(() => {
+        vitest_1.vi.clearAllMocks();
+    });
+    (0, vitest_1.it)('detects local LLM listeners on Windows via netstat', async () => {
+        const platformSpy = vitest_1.vi.spyOn(process, 'platform', 'get').mockReturnValue('win32');
+        const reverseSpy = vitest_1.vi.spyOn(dns_1.default, 'reverse').mockImplementation((_ip, cb) => cb(new Error('no reverse dns'), []));
+        mockExecFileSync.mockReturnValue([
+            'Active Connections',
+            '',
+            '  Proto  Local Address          Foreign Address        State           PID',
+            '  TCP    127.0.0.1:11434        0.0.0.0:0              LISTENING       4242',
+            '  TCP    127.0.0.1:55000        127.0.0.1:11434        ESTABLISHED     4242',
+        ].join('\r\n'));
+        const taggedProcesses = [{
+                pid: 4242,
+                ppid: 1,
+                frameworkId: 'ollama',
+                frameworkName: 'Ollama',
+                command: 'ollama serve',
+                exePath: 'C:\\ollama.exe',
+                confidence: 1,
+                envKeys: [],
+                discoveredAt: Date.now(),
+                sandboxed: false,
+                sandboxProfileName: null,
+                uid: 0,
+                gid: 0,
+            }];
+        const connections = await (0, network_monitor_1.scanLLMConnections)(taggedProcesses);
+        (0, vitest_1.expect)(connections).toHaveLength(2);
+        (0, vitest_1.expect)(connections.some(connection => connection.type === 'listening' && connection.providerId === 'ollama-local')).toBe(true);
+        (0, vitest_1.expect)(connections.some(connection => connection.type === 'established' && connection.hostname === 'localhost')).toBe(true);
+        reverseSpy.mockRestore();
+        platformSpy.mockRestore();
+    });
+});
+//# sourceMappingURL=network-monitor.test.js.map

package/dist/enforcement/network-monitor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-monitor.test.js","sourceRoot":"","sources":["../../src/enforcement/network-monitor.test.ts"],"names":[],"mappings":";;;;;AAAA,mCAA8D;AAC9D,8CAAsB;AAEtB,MAAM,EAAE,gBAAgB,EAAE,GAAG,WAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7C,gBAAgB,EAAE,WAAE,CAAC,EAAE,EAAE;CAC1B,CAAC,CAAC,CAAC;AAEJ,WAAE,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9B,YAAY,EAAE,gBAAgB;CAC/B,CAAC,CAAC,CAAC;AAEJ,uDAAuD;AAGvD,IAAA,iBAAQ,EAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAA,mBAAU,EAAC,GAAG,EAAE;QACd,WAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,WAAW,GAAG,WAAE,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,WAAE,CAAC,KAAK,CAAC,aAAG,EAAE,SAAS,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAEjH,gBAAgB,CAAC,eAAe,CAAC;YAC/B,oBAAoB;YACpB,EAAE;YACF,4EAA4E;YAC5E,6EAA6E;YAC7E,6EAA6E;SAC9E,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAEhB,MAAM,eAAe,GAAoB,CAAC;gBACxC,GAAG,EAAE,IAAI;gBACT,IAAI,EAAE,CAAC;gBACP,WAAW,EAAE,QAAQ;gBACrB,aAAa,EAAE,QAAQ;gBACvB,OAAO,EAAE,cAAc;gBACvB,OAAO,EAAE,gBAAgB;gBACzB,UAAU,EAAE,CAAC;gBACb,OAAO,EAAE,EAAE;gBACX,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;gBACxB,SAAS,EAAE,KAAK;gBAChB,kBAAkB,EAAE,IAAI;gBACxB,GAAG,EAAE,CAAC;gBACN,GAAG,EAAE,CAAC;aACP,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,MAAM,IAAA,oCAAkB,EAAC,eAAe,CAAC,CAAC;QAE9D,IAAA,eAAM,EAAC,WAAW,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,IAAA,eAAM,EAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,WAAW,IAAI,UAAU,CAAC,UAAU,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/H,IAAA,eAAM,EAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,aAAa,IAAI,UAAU,CAAC,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5H,UAAU,CAAC,WAAW,EAAE,CAAC;QACzB,WAAW,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/enforcement/policy-executor.d.ts

@@ -16,17 +16,40 @@ interface PolicyResult {
     applied: boolean;
     detail: string;
 }
+/**
+ * Executes cloud-supplied policies on the local host.
+ *
+ * SECURITY INVARIANTS:
+ *   - Every `target` from a policy is validated via {@link validateTarget}
+ *     before reaching any subprocess. Invalid targets are dropped, not
+ *     "best-effort" passed through.
+ *   - All subprocess invocations use {@link execFileSync} with separate args —
+ *     no shell metacharacter interpolation, ever.
+ *   - PID validation rejects values outside the kernel's PID range (1..4194304).
+ *   - Iptables / nft binaries are resolved once at construction; we never
+ *     accept a `bin` path from the cloud.
+ */
 export declare class PolicyExecutor {
     private config;
     private appliedRules;
     private lastPolicies;
+    private iptablesBin;
+    private nftBin;
     constructor(config: SentryConfig);
+    private resolveBin;
     apply(policies: SentryPolicy[], taggedProcesses: TaggedProcess[]): Promise<PolicyResult[]>;
     private applyKillProcess;
     private applyBlockProvider;
     private applyBlockDomain;
-    private addIptablesRule;
+    /**
+     * Add an OUTPUT DROP rule. Each piece of `target` was pre-validated; we still
+     * call execFileSync with separate args so even a future regression in the
+     * validator cannot escape to a shell.
+     */
+    private addNetworkBlockRule;
     private removeRule;
+    private removeIptablesRule;
+    private removeNftRules;
 }
 export {};
 //# sourceMappingURL=policy-executor.d.ts.map

package/dist/enforcement/policy-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy-executor.d.ts","sourceRoot":"","sources":["../../src/enforcement/policy-executor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAA2B,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,cAAc,CAAC;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACvC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,YAAY;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,cAAc,GAAG,gBAAgB,GAAG,cAAc,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,cAAc;IAIb,OAAO,CAAC,MAAM;IAH1B,OAAO,CAAC,YAAY,CAAqB;IACzC,OAAO,CAAC,YAAY,CAAsB;gBAEtB,MAAM,EAAE,YAAY;IAGlC,KAAK,CACT,QAAQ,EAAE,YAAY,EAAE,EACxB,eAAe,EAAE,aAAa,EAAE,GAC/B,OAAO,CAAC,YAAY,EAAE,CAAC;YAyCZ,gBAAgB;IA8D9B,OAAO,CAAC,kBAAkB;IA+B1B,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,UAAU;CAInB"}
+{"version":3,"file":"policy-executor.d.ts","sourceRoot":"","sources":["../../src/enforcement/policy-executor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAA2B,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAIzC,UAAU,YAAY;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,cAAc,GAAG,gBAAgB,GAAG,cAAc,CAAC;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;IACvC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,YAAY;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,cAAc,GAAG,gBAAgB,GAAG,cAAc,CAAC;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAOD;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IAMb,OAAO,CAAC,MAAM;IAL1B,OAAO,CAAC,YAAY,CAA2C;IAC/D,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,WAAW,CAAgB;IACnC,OAAO,CAAC,MAAM,CAAgB;gBAEV,MAAM,EAAE,YAAY;IAKxC,OAAO,CAAC,UAAU;IAcZ,KAAK,CACT,QAAQ,EAAE,YAAY,EAAE,EACxB,eAAe,EAAE,aAAa,EAAE,GAC/B,OAAO,CAAC,YAAY,EAAE,CAAC;IAiF1B,OAAO,CAAC,gBAAgB;IAoDxB,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,gBAAgB;IAaxB;;;;OAIG;IACH,OAAO,CAAC,mBAAmB;IA8B3B,OAAO,CAAC,UAAU;IAqBlB,OAAO,CAAC,kBAAkB;IAqB1B,OAAO,CAAC,cAAc;CAiCvB"}