@neurosec/sentry 1.1.1 → 1.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/config.js +7 -7
- package/dist/config.js.map +1 -1
- package/dist/config.test.js +7 -6
- package/dist/config.test.js.map +1 -1
- package/dist/redirect/platform-redirect.d.ts +7 -0
- package/dist/redirect/platform-redirect.d.ts.map +1 -1
- package/dist/redirect/platform-redirect.js +102 -25
- package/dist/redirect/platform-redirect.js.map +1 -1
- package/dist/redirect/platform-redirect.test.js +28 -10
- package/dist/redirect/platform-redirect.test.js.map +1 -1
- package/package.json +1 -1
package/dist/config.js
CHANGED
|
@@ -78,13 +78,13 @@ const DEFAULTS = {
|
|
|
78
78
|
upstreamTimeoutMs: 120000,
|
|
79
79
|
maxBufferSizeMb: 10,
|
|
80
80
|
maxConcurrentRequests: 100,
|
|
81
|
-
// Default
|
|
82
|
-
//
|
|
83
|
-
//
|
|
84
|
-
//
|
|
85
|
-
//
|
|
86
|
-
//
|
|
87
|
-
interceptHttps:
|
|
81
|
+
// Default ON (S-C8) — most agent/LLM traffic is HTTPS, so interception must
|
|
82
|
+
// be enabled by default for Sentry to do its job. Connectivity is preserved
|
|
83
|
+
// because the transparent redirect (platform-redirect.ts) is scoped to known
|
|
84
|
+
// LLM-provider IPs only and points at the HTTPS interception listener
|
|
85
|
+
// (port+1), never the host's entire 443 egress. Set SENTRY_PROXY_HTTPS=false
|
|
86
|
+
// (or proxy.intercept_https: false) to monitor HTTP only.
|
|
87
|
+
interceptHttps: true,
|
|
88
88
|
certPath: '/var/lib/neuroshield/sentry/proxy-cert.pem',
|
|
89
89
|
keyPath: '/var/lib/neuroshield/sentry/proxy-key.pem',
|
|
90
90
|
allowedProviders: ['*'],
|
package/dist/config.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;AA+MA,gCA+GC;AA9TD,4CAAoB;AAEpB,gDAAwB;AAExB,qCAAkC;AAsFlC,MAAM,QAAQ,GAAiB;IAC7B,MAAM,EAAE;QACN,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,6BAA6B;QACvC,WAAW,EAAE,iCAAiC;KAC/C;IACD,QAAQ,EAAE;QACR,2EAA2E;QAC3E,wEAAwE;QACxE,QAAQ,EAAE,4BAA4B;QACtC,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,+BAA+B;QAC1C,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,0BAA0B;QAClC,YAAY,EAAE,EAAE;QAChB,uBAAuB,EAAE,EAAE;QAC3B,gBAAgB,EAAE,KAAK;QACvB,cAAc,EAAE,KAAK;QACrB,mBAAmB,EAAE,MAAM;KAC5B;IACD,WAAW,EAAE;QACX,IAAI,EAAE,SAAS;QACf,cAAc,EAAE,IAAI;QACpB,oBAAoB,EAAE,IAAI;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,uBAAuB,EAAE,IAAI;KAC9B;IACD,eAAe,EAAE;QACf,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,GAAG;KACZ;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,oBAAoB;YACpB,uBAAuB;YACvB,qBAAqB;SACtB;QACD,UAAU,EAAE;YACV,gBAAgB;YAChB,YAAY;YACZ,kBAAkB;YAClB,gBAAgB;SACjB;QACD,YAAY,EAAE,KAAK;QACnB,iBAAiB,EAAE,IAAI;KACxB;IACD,UAAU,EAAE;QACV,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC;KACnE;IACD,KAAK,EAAE;QACL,OAAO,EAAE,iCAAiC;QAC1C,aAAa,EAAE,EAAE;QACjB,SAAS,EAAE,GAAG;KACf;IACD,SAAS,EAAE;QACT,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;KACrD;IACD,KAAK,EAAE;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,WAAW;QACxB,iBAAiB,EAAE,MAAM;QACzB,eAAe,EAAE,EAAE;QACnB,qBAAqB,EAAE,GAAG;QAC1B,8EAA8E;QAC9E,8EAA8E;QAC9E,+EAA+E;QAC/E,6EAA6E;QAC7E,uEAAuE;QACvE,2BAA2B;QAC3B,cAAc,EAAE,KAAK;QACrB,QAAQ,EAAE,4CAA4C;QACtD,OAAO,EAAE,2CAA2C;QACpD,gBAAgB,EAAE,CAAC,GAAG,CAAC;QACvB,gBAAgB,EAAE,KAAK;KACxB;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,MAAM;QAChB,mBAAmB,EAAE,IAAI;QACzB,gBAAgB,EAAE,IAAI;KACvB;CACF,CAAC;AAEF,SAAS,mBAAmB,CAAI,KAAQ;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAM,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,MAAM,CAA0B,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE;QAC9H,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACvG,GAAG,CAAC,aAAa,CAAC,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,UAAe,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB;IAClC,IAAI,CAAC;QACH,OAAO,YAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAgB,UAAU,CAAC,UAAmB;IAC5C,MAAM,YAAY,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,8BAA8B,CAAC;IACpG,IAAI,UAAU,GAA0B,EAAE,CAAC;IAE3C,IAAI,YAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAClD,UAAU,GAAG,mBAAmB,CAAC,cAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAA0B,CAAC;YAC3E,eAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;gBACzD,IAAI,EAAE,YAAY;gBAClB,GAAG,EAAG,GAAa,CAAC,OAAO;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,eAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAiB;QAC3B,MAAM,EAAE;YACN,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM;YACzF,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC,MAAM,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO;YAC5F,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YAC/H,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACnH,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC,MAAM,EAAE,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ;YACjG,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,UAAU,CAAC,MAAM,EAAE,WAAW,IAAI,QAAQ,CAAC,MAAM,CAAC,WAAW;SAC1G;QACD,QAAQ,EAAE;YACR,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YAC7G,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,UAAU,CAAC,QAAQ,EAAE,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK;YAC3F,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,UAAU,CAAC,QAAQ,EAAE,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS;YAC3G,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO;YACnG,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM;YAC/F,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,QAAQ,EAAE,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY;YACnH,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,UAAU,CAAC,QAAQ,EAAE,uBAAuB,IAAI,QAAQ,CAAC,QAAQ,CAAC,uBAAuB;YACzJ,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,gBAAgB,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,KAAK,MAAM;YAC7J,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACjJ,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACtK;QACD,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,UAAU,CAAC,WAAW,EAAE,IAAI,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAoB;YAC3H,cAAc,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,cAAc,IAAI,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,KAAK,MAAM;YACxJ,oBAAoB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,oBAAoB,IAAI,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,KAAK,MAAM;YACzK,oBAAoB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,oBAAoB,IAAI,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,KAAK,MAAM;YACzK,uBAAuB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,uBAAuB,IAAI,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,KAAK,MAAM;SAC9K;QACD,eAAe,EAAE;YACf,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,eAAe,EAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM;YAC/G,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,UAAU,CAAC,eAAe,EAAE,SAAS,IAAI,QAAQ,CAAC,eAAe,CAAC,SAAS;YAC3H,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,EAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;SAC1I;QACD,OAAO,EAAE;YACP,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAChL,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAChL,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,KAAK,MAAM;YACxI,iBAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,IAAI,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,KAAK,MAAM;SACtJ;QACD,UAAU,EAAE;YACV,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM;YAC7H,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,KAAK,MAAM;YACpJ,eAAe,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,UAAU,CAAC,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SACjN;QACD,KAAK,EAAE;YACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO;YACjG,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YAC/I,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;SACjI;QACD,SAAS,EAAE;YACT,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,IAAI,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YAC5I,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,UAAU,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SACzL;QACD,KAAK,EAAE;YACL,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM;YACrH,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC1G,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,CAAC,KAAK,EAAE,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW;YACzG,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,iBAAiB,IAAI,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;YACpJ,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,eAAe,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;YACjJ,qBAAqB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,qBAAqB,IAAI,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,CAAC;YACxK,cAAc,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,cAAc,IAAI,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,KAAK,MAAM;YACxI,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,CAAC,KAAK,EAAE,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ;YAChG,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO;YAC5F,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC1M,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,gBAAgB,IAAI,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,KAAK,MAAM;SACrJ;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM;YAC9H,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAA+B;YAC7I,mBAAmB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,KAAK,MAAM;YACvK,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,gBAAgB,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,KAAK,MAAM;SACrK;KACF,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,eAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
|
1
|
+
{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;AA+MA,gCA+GC;AA9TD,4CAAoB;AAEpB,gDAAwB;AAExB,qCAAkC;AAsFlC,MAAM,QAAQ,GAAiB;IAC7B,MAAM,EAAE;QACN,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,6BAA6B;QACvC,WAAW,EAAE,iCAAiC;KAC/C;IACD,QAAQ,EAAE;QACR,2EAA2E;QAC3E,wEAAwE;QACxE,QAAQ,EAAE,4BAA4B;QACtC,KAAK,EAAE,EAAE;QACT,SAAS,EAAE,+BAA+B;QAC1C,OAAO,EAAE,2BAA2B;QACpC,MAAM,EAAE,0BAA0B;QAClC,YAAY,EAAE,EAAE;QAChB,uBAAuB,EAAE,EAAE;QAC3B,gBAAgB,EAAE,KAAK;QACvB,cAAc,EAAE,KAAK;QACrB,mBAAmB,EAAE,MAAM;KAC5B;IACD,WAAW,EAAE;QACX,IAAI,EAAE,SAAS;QACf,cAAc,EAAE,IAAI;QACpB,oBAAoB,EAAE,IAAI;QAC1B,oBAAoB,EAAE,IAAI;QAC1B,uBAAuB,EAAE,IAAI;KAC9B;IACD,eAAe,EAAE;QACf,MAAM,EAAE,KAAK;QACb,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,GAAG;KACZ;IACD,OAAO,EAAE;QACP,UAAU,EAAE;YACV,oBAAoB;YACpB,uBAAuB;YACvB,qBAAqB;SACtB;QACD,UAAU,EAAE;YACV,gBAAgB;YAChB,YAAY;YACZ,kBAAkB;YAClB,gBAAgB;SACjB;QACD,YAAY,EAAE,KAAK;QACnB,iBAAiB,EAAE,IAAI;KACxB;IACD,UAAU,EAAE;QACV,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC;KACnE;IACD,KAAK,EAAE;QACL,OAAO,EAAE,iCAAiC;QAC1C,aAAa,EAAE,EAAE;QACjB,SAAS,EAAE,GAAG;KACf;IACD,SAAS,EAAE;QACT,UAAU,EAAE,KAAK;QACjB,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC;KACrD;IACD,KAAK,EAAE;QACL,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,WAAW;QACxB,iBAAiB,EAAE,MAAM;QACzB,eAAe,EAAE,EAAE;QACnB,qBAAqB,EAAE,GAAG;QAC1B,4EAA4E;QAC5E,4EAA4E;QAC5E,6EAA6E;QAC7E,sEAAsE;QACtE,6EAA6E;QAC7E,0DAA0D;QAC1D,cAAc,EAAE,IAAI;QACpB,QAAQ,EAAE,4CAA4C;QACtD,OAAO,EAAE,2CAA2C;QACpD,gBAAgB,EAAE,CAAC,GAAG,CAAC;QACvB,gBAAgB,EAAE,KAAK;KACxB;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,MAAM;QAChB,mBAAmB,EAAE,IAAI;QACzB,gBAAgB,EAAE,IAAI;KACvB;CACF,CAAC;AAEF,SAAS,mBAAmB,CAAI,KAAQ;IACtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAM,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,MAAM,CAA0B,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,EAAE;QAC9H,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QACvG,GAAG,CAAC,aAAa,CAAC,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC;IACb,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,UAAe,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB;IAClC,IAAI,CAAC;QACH,OAAO,YAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAgB,UAAU,CAAC,UAAmB;IAC5C,MAAM,YAAY,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,8BAA8B,CAAC;IACpG,IAAI,UAAU,GAA0B,EAAE,CAAC;IAE3C,IAAI,YAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAClD,UAAU,GAAG,mBAAmB,CAAC,cAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAA0B,CAAC;YAC3E,eAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;gBACzD,IAAI,EAAE,YAAY;gBAClB,GAAG,EAAG,GAAa,CAAC,OAAO;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,eAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAiB;QAC3B,MAAM,EAAE;YACN,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM;YACzF,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,UAAU,CAAC,MAAM,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO;YAC5F,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,IAAI,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YAC/H,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACnH,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC,MAAM,EAAE,QAAQ,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ;YACjG,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,UAAU,CAAC,MAAM,EAAE,WAAW,IAAI,QAAQ,CAAC,MAAM,CAAC,WAAW;SAC1G;QACD,QAAQ,EAAE;YACR,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ;YAC7G,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,UAAU,CAAC,QAAQ,EAAE,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK;YAC3F,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,UAAU,CAAC,QAAQ,EAAE,SAAS,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS;YAC3G,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO;YACnG,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC,QAAQ,EAAE,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM;YAC/F,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,QAAQ,EAAE,YAAY,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY;YACnH,uBAAuB,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,UAAU,CAAC,QAAQ,EAAE,uBAAuB,IAAI,QAAQ,CAAC,QAAQ,CAAC,uBAAuB;YACzJ,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,gBAAgB,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,KAAK,MAAM;YAC7J,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,cAAc,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACjJ,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC;SACtK;QACD,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,UAAU,CAAC,WAAW,EAAE,IAAI,IAAI,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAoB;YAC3H,cAAc,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,cAAc,IAAI,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,KAAK,MAAM;YACxJ,oBAAoB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,oBAAoB,IAAI,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,KAAK,MAAM;YACzK,oBAAoB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,oBAAoB,IAAI,QAAQ,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC,KAAK,MAAM;YACzK,uBAAuB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,uBAAuB,IAAI,QAAQ,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,KAAK,MAAM;SAC9K;QACD,eAAe,EAAE;YACf,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,eAAe,EAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM;YAC/G,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,UAAU,CAAC,eAAe,EAAE,SAAS,IAAI,QAAQ,CAAC,eAAe,CAAC,SAAS;YAC3H,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC,UAAU,CAAC,eAAe,EAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;SAC1I;QACD,OAAO,EAAE;YACP,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAChL,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAChL,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,KAAK,MAAM;YACxI,iBAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,iBAAiB,IAAI,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,KAAK,MAAM;SACtJ;QACD,UAAU,EAAE;YACV,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM;YAC7H,YAAY,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,KAAK,MAAM;YACpJ,eAAe,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,UAAU,CAAC,UAAU,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SACjN;QACD,KAAK,EAAE;YACL,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO;YACjG,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YAC/I,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;SACjI;QACD,SAAS,EAAE;YACT,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,IAAI,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YAC5I,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,UAAU,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SACzL;QACD,KAAK,EAAE;YACL,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM;YACrH,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YAC1G,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,CAAC,KAAK,EAAE,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW;YACzG,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,iBAAiB,IAAI,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;YACpJ,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,eAAe,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;YACjJ,qBAAqB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,qBAAqB,IAAI,QAAQ,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,EAAE,CAAC;YACxK,cAAc,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,cAAc,IAAI,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,KAAK,MAAM;YACxI,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,CAAC,KAAK,EAAE,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,QAAQ;YAChG,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO;YAC5F,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,UAAU,CAAC,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;YAC1M,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,gBAAgB,IAAI,QAAQ,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,KAAK,MAAM;SACrJ;QACD,QAAQ,EAAE;YACR,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,MAAM;YAC9H,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAA+B;YAC7I,mBAAmB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,mBAAmB,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,KAAK,MAAM;YACvK,gBAAgB,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,gBAAgB,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,KAAK,MAAM;SACrK;KACF,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC3B,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,eAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
|
package/dist/config.test.js
CHANGED
|
@@ -36,7 +36,7 @@ const envSnapshot = Object.fromEntries(ENV_KEYS.map((key) => [key, process.env[k
|
|
|
36
36
|
}
|
|
37
37
|
});
|
|
38
38
|
(0, vitest_1.describe)('loadConfig', () => {
|
|
39
|
-
(0, vitest_1.it)('defaults to HTTPS interception
|
|
39
|
+
(0, vitest_1.it)('defaults to HTTPS interception enabled', () => {
|
|
40
40
|
const tempDir = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'neuroshield-config-'));
|
|
41
41
|
const tokenPath = path_1.default.join(tempDir, 'sentry.token');
|
|
42
42
|
const configPath = path_1.default.join(tempDir, 'sentry.yaml');
|
|
@@ -54,8 +54,9 @@ const envSnapshot = Object.fromEntries(ENV_KEYS.map((key) => [key, process.env[k
|
|
|
54
54
|
` token_path: ${tokenPath}`,
|
|
55
55
|
].join('\n'), 'utf8');
|
|
56
56
|
const config = (0, config_1.loadConfig)(configPath);
|
|
57
|
-
// Verify default is
|
|
58
|
-
|
|
57
|
+
// Verify default is true (no proxy.intercept_https in YAML). HTTPS
|
|
58
|
+
// interception is Sentry's core purpose, so it must be on by default.
|
|
59
|
+
(0, vitest_1.expect)(config.proxy.interceptHttps).toBe(true);
|
|
59
60
|
});
|
|
60
61
|
(0, vitest_1.it)('honors SENTRY_PROXY_HTTPS environment variable override', () => {
|
|
61
62
|
const tempDir = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'neuroshield-config-'));
|
|
@@ -74,10 +75,10 @@ const envSnapshot = Object.fromEntries(ENV_KEYS.map((key) => [key, process.env[k
|
|
|
74
75
|
' org_id: "test-org"',
|
|
75
76
|
` token_path: ${tokenPath}`,
|
|
76
77
|
].join('\n'), 'utf8');
|
|
77
|
-
process.env.SENTRY_PROXY_HTTPS = '
|
|
78
|
+
process.env.SENTRY_PROXY_HTTPS = 'false';
|
|
78
79
|
const config = (0, config_1.loadConfig)(configPath);
|
|
79
|
-
// Verify environment variable overrides default
|
|
80
|
-
(0, vitest_1.expect)(config.proxy.interceptHttps).toBe(
|
|
80
|
+
// Verify environment variable overrides the (enabled) default
|
|
81
|
+
(0, vitest_1.expect)(config.proxy.interceptHttps).toBe(false);
|
|
81
82
|
});
|
|
82
83
|
(0, vitest_1.it)('honors setup-generated snake_case YAML keys', () => {
|
|
83
84
|
const tempDir = fs_1.default.mkdtempSync(path_1.default.join(os_1.default.tmpdir(), 'neuroshield-config-'));
|
package/dist/config.test.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../src/config.test.ts"],"names":[],"mappings":";;;;;AAAA,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,mCAAyD;AAEzD,qCAAsC;AAEtC,MAAM,QAAQ,GAAG;IACf,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;IACjB,0BAA0B;IAC1B,iBAAiB;IACjB,qBAAqB;IACrB,sBAAsB;IACtB,2BAA2B;IAC3B,oBAAoB;IACpB,oBAAoB;CACZ,CAAC;AAEX,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAEvF,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC;QACnC,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAA,WAAE,EAAC,
|
|
1
|
+
{"version":3,"file":"config.test.js","sourceRoot":"","sources":["../src/config.test.ts"],"names":[],"mappings":";;;;;AAAA,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,mCAAyD;AAEzD,qCAAsC;AAEtC,MAAM,QAAQ,GAAG;IACf,gBAAgB;IAChB,gBAAgB;IAChB,oBAAoB;IACpB,iBAAiB;IACjB,kBAAkB;IAClB,iBAAiB;IACjB,0BAA0B;IAC1B,iBAAiB;IACjB,qBAAqB;IACrB,sBAAsB;IACtB,2BAA2B;IAC3B,oBAAoB;IACpB,oBAAoB;CACZ,CAAC;AAEX,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAEvF,IAAA,kBAAS,EAAC,GAAG,EAAE;IACb,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC;QACnC,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAA,iBAAQ,EAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAA,WAAE,EAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,OAAO,GAAG,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAErD,YAAE,CAAC,aAAa,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACpD,YAAE,CAAC,aAAa,CACd,UAAU,EACV;YACE,SAAS;YACT,wBAAwB;YACxB,qBAAqB;YACrB,kBAAkB;YAClB,qCAAqC;YACrC,8CAA8C;YAC9C,WAAW;YACX,oCAAoC;YACpC,sBAAsB;YACtB,iBAAiB,SAAS,EAAE;SAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CACP,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;QAEtC,mEAAmE;QACnE,sEAAsE;QACtE,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,OAAO,GAAG,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAErD,YAAE,CAAC,aAAa,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACpD,YAAE,CAAC,aAAa,CACd,UAAU,EACV;YACE,SAAS;YACT,wBAAwB;YACxB,qBAAqB;YACrB,kBAAkB;YAClB,qCAAqC;YACrC,8CAA8C;YAC9C,WAAW;YACX,oCAAoC;YACpC,sBAAsB;YACtB,iBAAiB,SAAS,EAAE;SAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CACP,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,kBAAkB,GAAG,OAAO,CAAC;QACzC,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;QAEtC,8DAA8D;QAC9D,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,OAAO,GAAG,YAAE,CAAC,WAAW,CAAC,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,cAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAErD,YAAE,CAAC,aAAa,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACpD,YAAE,CAAC,aAAa,CACd,UAAU,EACV;YACE,SAAS;YACT,mCAAmC;YACnC,qBAAqB;YACrB,kBAAkB;YAClB,qCAAqC;YACrC,8CAA8C;YAC9C,WAAW;YACX,oCAAoC;YACpC,2BAA2B;YAC3B,iBAAiB,SAAS,EAAE;YAC5B,2BAA2B;YAC3B,iCAAiC;YACjC,UAAU;YACV,gBAAgB;YAChB,0BAA0B;YAC1B,QAAQ;YACR,0BAA0B;SAC3B,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,MAAM,CACP,CAAC;QAEF,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;QAEtC,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC1D,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC9D,IAAA,eAAM,EAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACtE,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC9D,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpD,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,IAAA,eAAM,EAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAChE,IAAA,eAAM,EAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -31,6 +31,13 @@ export declare class PlatformRedirect {
|
|
|
31
31
|
args: string[];
|
|
32
32
|
}>;
|
|
33
33
|
private installLinuxRedirect;
|
|
34
|
+
/**
|
|
35
|
+
* Resolve the public IPs of the known LLM providers so the transparent
|
|
36
|
+
* redirect can target ONLY that traffic. Returns a de-duplicated list; hosts
|
|
37
|
+
* that fail to resolve are skipped (best effort — a missing provider just
|
|
38
|
+
* isn't transparently intercepted, it does not break connectivity).
|
|
39
|
+
*/
|
|
40
|
+
private resolveProviderIps;
|
|
34
41
|
private removeLinuxRedirect;
|
|
35
42
|
private installMacOSRedirect;
|
|
36
43
|
private removeMacOSRedirect;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-redirect.d.ts","sourceRoot":"","sources":["../../src/redirect/platform-redirect.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"platform-redirect.d.ts","sourceRoot":"","sources":["../../src/redirect/platform-redirect.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAMxC;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,QAAQ,CAAW;IAC3B,qFAAqF;IACrF,OAAO,CAAC,cAAc,CAAsE;gBAEhF,MAAM,EAAE,WAAW;IAKzB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAmBnC,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC;IAiBxC,2EAA2E;IAC3E,kBAAkB,IAAI,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;YAK/C,oBAAoB;IA0ElC;;;;;OAKG;YACW,kBAAkB;YAwBlB,mBAAmB;YAcnB,oBAAoB;YA8DpB,mBAAmB;IASjC,OAAO,CAAC,uBAAuB;YAWjB,sBAAsB;YActB,qBAAqB;IAOnC,OAAO,CAAC,UAAU;CAYnB"}
|
|
@@ -5,7 +5,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
|
|
|
5
5
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
6
6
|
exports.PlatformRedirect = void 0;
|
|
7
7
|
const child_process_1 = require("child_process");
|
|
8
|
+
const dns_1 = __importDefault(require("dns"));
|
|
8
9
|
const os_1 = __importDefault(require("os"));
|
|
10
|
+
const types_1 = require("../types");
|
|
9
11
|
const logger_1 = require("../logger");
|
|
10
12
|
/**
|
|
11
13
|
* Platform-specific traffic redirect: divert outbound port-443 from agent
|
|
@@ -79,30 +81,94 @@ class PlatformRedirect {
|
|
|
79
81
|
logger_1.logger.warn('iptables not available; Linux redirect not installed');
|
|
80
82
|
return false;
|
|
81
83
|
}
|
|
82
|
-
|
|
83
|
-
//
|
|
84
|
-
//
|
|
85
|
-
//
|
|
86
|
-
//
|
|
87
|
-
const
|
|
88
|
-
|
|
89
|
-
'-
|
|
90
|
-
|
|
91
|
-
'--dport', '443',
|
|
92
|
-
'-m', 'addrtype', '!', '--dst-type', 'LOCAL',
|
|
93
|
-
'-j', 'REDIRECT',
|
|
94
|
-
'--to-port', String(proxyPort),
|
|
95
|
-
];
|
|
96
|
-
try {
|
|
97
|
-
(0, child_process_1.execFileSync)(iptables, args, { timeout: 5000, stdio: 'ignore' });
|
|
98
|
-
this.installedRules.push({ kind: 'iptables', args });
|
|
99
|
-
logger_1.logger.info('Linux iptables redirect installed', { proxyPort, args });
|
|
100
|
-
return true;
|
|
84
|
+
// Scope the redirect to KNOWN LLM-PROVIDER IPs only. The previous rule
|
|
85
|
+
// captured the host's ENTIRE outbound port-443 egress, which silently broke
|
|
86
|
+
// every unrelated HTTPS client on the machine (package managers, browsers,
|
|
87
|
+
// internal APIs, `curl https://…`). A tool meant to watch agent/LLM traffic
|
|
88
|
+
// must not hijack all of TLS.
|
|
89
|
+
const targetIps = await this.resolveProviderIps();
|
|
90
|
+
if (targetIps.length === 0) {
|
|
91
|
+
logger_1.logger.warn('No LLM-provider IPs resolved; Linux redirect not installed');
|
|
92
|
+
return false;
|
|
101
93
|
}
|
|
102
|
-
|
|
103
|
-
|
|
94
|
+
// Redirect TLS to the HTTPS interception listener (config.port + 1), NOT the
|
|
95
|
+
// plain-HTTP proxy (config.port). Sending raw TLS bytes to the HTTP listener
|
|
96
|
+
// is exactly what produced "SSL routines::wrong version number".
|
|
97
|
+
const toPort = this.config.interceptHttps ? this.config.port + 1 : this.config.port;
|
|
98
|
+
// Loop avoidance: the proxy forwards to the real provider on dst-443, which
|
|
99
|
+
// would re-match this rule and bounce back into the proxy. We exclude the
|
|
100
|
+
// daemon's own UID so its upstream calls pass straight through.
|
|
101
|
+
//
|
|
102
|
+
// This MUST be a dedicated NON-ROOT uid. Excluding uid 0 would silently
|
|
103
|
+
// bypass every root-running agent (the S-C13 regression) — and containerised
|
|
104
|
+
// agents commonly run as root. So if the daemon itself runs as root we refuse
|
|
105
|
+
// the transparent redirect rather than install a looping or root-bypassing
|
|
106
|
+
// rule. Launched agents are still intercepted via the explicit-proxy env vars
|
|
107
|
+
// in launcher.ts; only transparent capture of unlaunched processes is skipped.
|
|
108
|
+
const daemonUid = typeof process.getuid === 'function' ? process.getuid() : undefined;
|
|
109
|
+
if (daemonUid === undefined || daemonUid === 0) {
|
|
110
|
+
logger_1.logger.warn('Transparent HTTPS redirect skipped: Sentry must run as a dedicated ' +
|
|
111
|
+
'non-root user so its own upstream calls can be excluded without ' +
|
|
112
|
+
'bypassing root-running agents. Launched-agent interception is unaffected.', { daemonUid: daemonUid ?? null });
|
|
113
|
+
return false;
|
|
114
|
+
}
|
|
115
|
+
const ownerMatch = ['-m', 'owner', '!', '--uid-owner', String(daemonUid)];
|
|
116
|
+
let installed = 0;
|
|
117
|
+
for (const ip of targetIps) {
|
|
118
|
+
const args = [
|
|
119
|
+
'-t', 'nat',
|
|
120
|
+
'-A', 'OUTPUT',
|
|
121
|
+
'-p', 'tcp',
|
|
122
|
+
'-d', `${ip}/32`,
|
|
123
|
+
'--dport', '443',
|
|
124
|
+
...ownerMatch,
|
|
125
|
+
'-j', 'REDIRECT',
|
|
126
|
+
'--to-port', String(toPort),
|
|
127
|
+
];
|
|
128
|
+
try {
|
|
129
|
+
(0, child_process_1.execFileSync)(iptables, args, { timeout: 5000, stdio: 'ignore' });
|
|
130
|
+
this.installedRules.push({ kind: 'iptables', args });
|
|
131
|
+
installed++;
|
|
132
|
+
}
|
|
133
|
+
catch (err) {
|
|
134
|
+
logger_1.logger.warn('iptables rule install failed', { ip, err: err.message });
|
|
135
|
+
}
|
|
136
|
+
}
|
|
137
|
+
if (installed === 0) {
|
|
138
|
+
logger_1.logger.warn('iptables redirect install failed for all provider IPs (non-root?)');
|
|
104
139
|
return false;
|
|
105
140
|
}
|
|
141
|
+
logger_1.logger.info('Linux iptables redirect installed', { toPort, providerIps: installed });
|
|
142
|
+
return true;
|
|
143
|
+
}
|
|
144
|
+
/**
|
|
145
|
+
* Resolve the public IPs of the known LLM providers so the transparent
|
|
146
|
+
* redirect can target ONLY that traffic. Returns a de-duplicated list; hosts
|
|
147
|
+
* that fail to resolve are skipped (best effort — a missing provider just
|
|
148
|
+
* isn't transparently intercepted, it does not break connectivity).
|
|
149
|
+
*/
|
|
150
|
+
async resolveProviderIps() {
|
|
151
|
+
const hosts = new Set();
|
|
152
|
+
for (const provider of Object.values(types_1.KNOWN_PROVIDERS)) {
|
|
153
|
+
try {
|
|
154
|
+
hosts.add(new URL(provider.baseUrl).hostname);
|
|
155
|
+
}
|
|
156
|
+
catch {
|
|
157
|
+
/* malformed baseUrl — skip */
|
|
158
|
+
}
|
|
159
|
+
}
|
|
160
|
+
const ips = new Set();
|
|
161
|
+
await Promise.all([...hosts].map(async (host) => {
|
|
162
|
+
try {
|
|
163
|
+
const records = await dns_1.default.promises.resolve4(host);
|
|
164
|
+
for (const ip of records)
|
|
165
|
+
ips.add(ip);
|
|
166
|
+
}
|
|
167
|
+
catch {
|
|
168
|
+
/* unresolved provider — skip */
|
|
169
|
+
}
|
|
170
|
+
}));
|
|
171
|
+
return [...ips];
|
|
106
172
|
}
|
|
107
173
|
async removeLinuxRedirect() {
|
|
108
174
|
const iptables = this.resolveBin('iptables');
|
|
@@ -133,14 +199,25 @@ class PlatformRedirect {
|
|
|
133
199
|
logger_1.logger.warn('Could not resolve default egress interface for pf redirect');
|
|
134
200
|
return false;
|
|
135
201
|
}
|
|
136
|
-
|
|
202
|
+
// Redirect TLS to the HTTPS interception listener (config.port + 1), NOT the
|
|
203
|
+
// plain-HTTP proxy (config.port) — see installLinuxRedirect for the
|
|
204
|
+
// "wrong version number" root cause.
|
|
205
|
+
const toPort = this.config.interceptHttps ? this.config.port + 1 : this.config.port;
|
|
206
|
+
// Scope to known LLM-provider IPs only; never blanket-redirect all 443.
|
|
207
|
+
const targetIps = await this.resolveProviderIps();
|
|
208
|
+
if (targetIps.length === 0) {
|
|
209
|
+
logger_1.logger.warn('No LLM-provider IPs resolved; macOS redirect not installed');
|
|
210
|
+
return false;
|
|
211
|
+
}
|
|
137
212
|
// We do NOT shell out via `bash -c "echo ... > file"` (S-C2 family).
|
|
138
213
|
// Use Node fs to write the anchor file directly.
|
|
139
214
|
const fs = require('fs');
|
|
140
215
|
const path = require('path');
|
|
141
216
|
const anchorPath = '/etc/neuroshield/pf-anchor.conf';
|
|
142
|
-
const rules = `# NeuroShield Sentry — redirect outbound 443 on ${iface}
|
|
143
|
-
|
|
217
|
+
const rules = `# NeuroShield Sentry — redirect outbound 443 to known LLM providers on ${iface}\n` +
|
|
218
|
+
targetIps
|
|
219
|
+
.map((ip) => `rdr pass on ${iface} inet proto tcp from any to ${ip} port 443 -> 127.0.0.1 port ${toPort}\n`)
|
|
220
|
+
.join('');
|
|
144
221
|
try {
|
|
145
222
|
fs.mkdirSync(path.dirname(anchorPath), { recursive: true });
|
|
146
223
|
fs.writeFileSync(anchorPath, rules, 'utf8');
|
|
@@ -156,7 +233,7 @@ class PlatformRedirect {
|
|
|
156
233
|
(0, child_process_1.execFileSync)(pfctl, ['-a', 'com.neuroshield/sentry', '-f', anchorPath], { timeout: 5000, stdio: 'ignore' });
|
|
157
234
|
(0, child_process_1.execFileSync)(pfctl, ['-E'], { timeout: 5000, stdio: 'ignore' });
|
|
158
235
|
this.installedRules.push({ kind: 'pf', args: ['-a', 'com.neuroshield/sentry', '-f', anchorPath] });
|
|
159
|
-
logger_1.logger.info('macOS pf redirect installed', { iface,
|
|
236
|
+
logger_1.logger.info('macOS pf redirect installed', { iface, toPort, providerIps: targetIps.length, anchorPath });
|
|
160
237
|
return true;
|
|
161
238
|
}
|
|
162
239
|
catch (err) {
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-redirect.js","sourceRoot":"","sources":["../../src/redirect/platform-redirect.ts"],"names":[],"mappings":";;;;;;AAAA,iDAA6C;AAC7C,4CAAoB;AAEpB,sCAAmC;AAInC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,gBAAgB;IAM3B,YAAY,MAAmB;QAH/B,qFAAqF;QAC7E,mBAAc,GAAmE,EAAE,CAAC;QAG1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,YAAE,CAAC,QAAQ,EAAc,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YACH,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACvD,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACxD,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACzD;oBACE,eAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC7E,OAAO,KAAK,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,EAAG,GAAa,CAAC,OAAO;aAC5B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACtD,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACvD,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACxD,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,EAAG,GAAa,CAAC,OAAO;aAC5B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,kBAAkB;QAChB,OAAO,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,oBAAoB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,eAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;
|
|
1
|
+
{"version":3,"file":"platform-redirect.js","sourceRoot":"","sources":["../../src/redirect/platform-redirect.ts"],"names":[],"mappings":";;;;;;AAAA,iDAA6C;AAC7C,8CAAsB;AACtB,4CAAoB;AAEpB,oCAA2C;AAC3C,sCAAmC;AAInC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,gBAAgB;IAM3B,YAAY,MAAmB;QAH/B,qFAAqF;QAC7E,mBAAc,GAAmE,EAAE,CAAC;QAG1F,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,YAAE,CAAC,QAAQ,EAAc,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,CAAC;YACH,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACvD,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACxD,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBACzD;oBACE,eAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC7E,OAAO,KAAK,CAAC;YACjB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,EAAG,GAAa,CAAC,OAAO;aAC5B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,IAAI,CAAC;YACH,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACtD,KAAK,QAAQ,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACvD,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBACxD,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;gBAChD,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,GAAG,EAAG,GAAa,CAAC,OAAO;aAC5B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,kBAAkB;QAChB,OAAO,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,oBAAoB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,eAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,uEAAuE;QACvE,4EAA4E;QAC5E,2EAA2E;QAC3E,4EAA4E;QAC5E,8BAA8B;QAC9B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAClD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,eAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6EAA6E;QAC7E,6EAA6E;QAC7E,iEAAiE;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAEpF,4EAA4E;QAC5E,0EAA0E;QAC1E,gEAAgE;QAChE,EAAE;QACF,wEAAwE;QACxE,6EAA6E;QAC7E,8EAA8E;QAC9E,2EAA2E;QAC3E,8EAA8E;QAC9E,+EAA+E;QAC/E,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YAC/C,eAAM,CAAC,IAAI,CACT,qEAAqE;gBACrE,kEAAkE;gBAClE,2EAA2E,EAC3E,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,EAAE,CACjC,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAE1E,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,GAAG,EAAE,KAAK;gBAChB,SAAS,EAAE,KAAK;gBAChB,GAAG,UAAU;gBACb,IAAI,EAAE,UAAU;gBAChB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;aAC5B,CAAC;YACF,IAAI,CAAC;gBACH,IAAA,4BAAY,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACjE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,SAAS,EAAE,CAAC;YACd,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,eAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,EAAE,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QAED,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,eAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;YACjF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,eAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,kBAAkB;QAC9B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,uBAAe,CAAC,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,8BAA8B;YAChC,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,MAAM,OAAO,CAAC,GAAG,CACf,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,aAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAClD,KAAK,MAAM,EAAE,IAAI,OAAO;oBAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QACF,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,mBAAmB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACvC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,IAAI,CAAC;gBAAC,IAAA,4BAAY,EAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAAC,CAAC;YAC/E,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,oBAAoB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,eAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,uEAAuE;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,eAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,6EAA6E;QAC7E,oEAAoE;QACpE,qCAAqC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;QAEpF,wEAAwE;QACxE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAClD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,eAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qEAAqE;QACrE,iDAAiD;QACjD,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,UAAU,GAAG,iCAAiC,CAAC;QACrD,MAAM,KAAK,GACT,0EAA0E,KAAK,IAAI;YACnF,SAAS;iBACN,GAAG,CACF,CAAC,EAAE,EAAE,EAAE,CACL,eAAe,KAAK,+BAA+B,EAAE,+BAA+B,MAAM,IAAI,CACjG;iBACA,IAAI,CAAC,EAAE,CAAC,CAAC;QAEd,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;gBACzD,UAAU;gBACV,GAAG,EAAG,GAAa,CAAC,OAAO;aAC5B,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC5G,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YACnG,eAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YACzG,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC9F,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,IAAI,CAAC;YAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAC/G,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC3B,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,uBAAuB;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAA,4BAAY,EAAC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;YACjG,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,4EAA4E;IACpE,KAAK,CAAC,sBAAsB;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAClD,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;YAC5F,eAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;YACtE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACpF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC;QAC1D,IAAI,CAAC;YAAC,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC5G,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACzB,CAAC;IAED,4EAA4E;IACpE,UAAU,CAAC,IAAY;QAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,CAAC;YACzG,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;YACjE,IAAI,CAAC;gBACH,IAAA,4BAAY,EAAC,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC3E,OAAO,SAAS,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA9RD,4CA8RC"}
|
|
@@ -22,25 +22,43 @@ function proxyConfig(port = 9081) {
|
|
|
22
22
|
};
|
|
23
23
|
}
|
|
24
24
|
(0, vitest_1.describe)('PlatformRedirect rule shapes (S-C13 / S-C14)', () => {
|
|
25
|
-
(0, vitest_1.it)('Linux rule
|
|
25
|
+
(0, vitest_1.it)('Linux rule never excludes root (S-C13): excludes only a dedicated non-root daemon uid', async () => {
|
|
26
26
|
if (os_1.default.platform() !== 'linux')
|
|
27
27
|
return;
|
|
28
28
|
const r = new platform_redirect_1.PlatformRedirect(proxyConfig());
|
|
29
29
|
await r.installRedirect().catch(() => undefined);
|
|
30
30
|
const rules = r._getInstalledRules();
|
|
31
|
-
//
|
|
31
|
+
// When the daemon runs as root the transparent redirect is refused entirely
|
|
32
|
+
// (no rule installed), so root-running agents are never silently bypassed.
|
|
33
|
+
if (typeof process.getuid === 'function' && process.getuid() === 0) {
|
|
34
|
+
(0, vitest_1.expect)(rules.filter((rule) => rule.kind === 'iptables')).toHaveLength(0);
|
|
35
|
+
return;
|
|
36
|
+
}
|
|
37
|
+
// As a non-root user, any installed rule must exclude ONLY this daemon's uid
|
|
38
|
+
// (loop avoidance) and never uid 0.
|
|
32
39
|
for (const rule of rules) {
|
|
33
40
|
const arg = rule.args.join(' ');
|
|
34
|
-
(0, vitest_1.expect)(arg).not.toMatch(
|
|
35
|
-
(0, vitest_1.expect)(arg).not.toMatch(/!\s*--uid-owner\s+0/);
|
|
41
|
+
(0, vitest_1.expect)(arg).not.toMatch(/!\s*--uid-owner\s+0\b/);
|
|
36
42
|
}
|
|
37
43
|
});
|
|
38
|
-
(0, vitest_1.it)('Linux rule
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
//
|
|
42
|
-
|
|
43
|
-
|
|
44
|
+
(0, vitest_1.it)('Linux rule redirects TLS to the HTTPS interception port and scopes by destination', async () => {
|
|
45
|
+
if (os_1.default.platform() !== 'linux')
|
|
46
|
+
return;
|
|
47
|
+
// interceptHttps=true → TLS (443) must be redirected to port+1 (the HTTPS
|
|
48
|
+
// listener), never to the plain-HTTP proxy port. Each rule must be scoped to
|
|
49
|
+
// a specific destination IP (-d), never a blanket all-443 capture.
|
|
50
|
+
const r = new platform_redirect_1.PlatformRedirect({ ...proxyConfig(9081), interceptHttps: true });
|
|
51
|
+
await r.installRedirect().catch(() => undefined);
|
|
52
|
+
for (const rule of r._getInstalledRules()) {
|
|
53
|
+
if (rule.kind !== 'iptables')
|
|
54
|
+
continue;
|
|
55
|
+
const arg = rule.args.join(' ');
|
|
56
|
+
(0, vitest_1.expect)(arg).toContain('--dport 443');
|
|
57
|
+
(0, vitest_1.expect)(arg).toMatch(/-d\s+\d+\.\d+\.\d+\.\d+\/32/);
|
|
58
|
+
(0, vitest_1.expect)(arg).toContain('--to-port 9082');
|
|
59
|
+
// Must NOT be the old blanket-capture shape.
|
|
60
|
+
(0, vitest_1.expect)(arg).not.toContain('--dst-type LOCAL');
|
|
61
|
+
}
|
|
44
62
|
});
|
|
45
63
|
(0, vitest_1.it)('macOS does not bind to lo0 (S-C14)', async () => {
|
|
46
64
|
if (os_1.default.platform() !== 'darwin')
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"platform-redirect.test.js","sourceRoot":"","sources":["../../src/redirect/platform-redirect.test.ts"],"names":[],"mappings":";;;;;AAAA;;;;;;GAMG;AACH,mCAA8C;AAC9C,4CAAoB;AACpB,2DAAuD;AAGvD,SAAS,WAAW,CAAC,IAAI,GAAG,IAAI;IAC9B,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW;QAC7C,iBAAiB,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC;QACxC,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;QAChD,gBAAgB,EAAE,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,KAAK;KACjD,CAAC;AACJ,CAAC;AAED,IAAA,iBAAQ,EAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,IAAA,WAAE,EAAC,
|
|
1
|
+
{"version":3,"file":"platform-redirect.test.js","sourceRoot":"","sources":["../../src/redirect/platform-redirect.test.ts"],"names":[],"mappings":";;;;;AAAA;;;;;;GAMG;AACH,mCAA8C;AAC9C,4CAAoB;AACpB,2DAAuD;AAGvD,SAAS,WAAW,CAAC,IAAI,GAAG,IAAI;IAC9B,OAAO;QACL,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW;QAC7C,iBAAiB,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC;QACxC,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;QAChD,gBAAgB,EAAE,CAAC,GAAG,CAAC,EAAE,gBAAgB,EAAE,KAAK;KACjD,CAAC;AACJ,CAAC;AAED,IAAA,iBAAQ,EAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,IAAA,WAAE,EAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,IAAI,YAAE,CAAC,QAAQ,EAAE,KAAK,OAAO;YAAE,OAAO;QACtC,MAAM,CAAC,GAAG,IAAI,oCAAgB,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,CAAC,CAAC,kBAAkB,EAAE,CAAC;QACrC,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YACnE,IAAA,eAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QACD,6EAA6E;QAC7E,oCAAoC;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,IAAI,YAAE,CAAC,QAAQ,EAAE,KAAK,OAAO;YAAE,OAAO;QACtC,0EAA0E;QAC1E,6EAA6E;QAC7E,mEAAmE;QACnE,MAAM,CAAC,GAAG,IAAI,oCAAgB,CAAC,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjD,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;gBAAE,SAAS;YACvC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACrC,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;YACnD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YACxC,6CAA6C;YAC7C,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,IAAI,YAAE,CAAC,QAAQ,EAAE,KAAK,QAAQ;YAAE,OAAO;QACvC,MAAM,CAAC,GAAG,IAAI,oCAAgB,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,CAAC,CAAC,kBAAkB,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;gBAAE,SAAS;YACjC,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1D,IAAI,UAAU,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;oBAC/D,IAAA,eAAM,EAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,yDAAyD;gBAC3D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,CAAC,GAAG,IAAI,oCAAgB,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,cAAc,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,kEAAkE;QAClE,IAAA,eAAM,EAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
package/package.json
CHANGED