chainwall 2.1.0 → 2.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +44 -1
- package/README.md +213 -105
- package/dist/auditor/miner-detector.d.ts +16 -0
- package/dist/auditor/miner-detector.d.ts.map +1 -1
- package/dist/auditor/miner-detector.js +54 -10
- package/dist/auditor/miner-detector.js.map +1 -1
- package/dist/auditor/remediation.d.ts +9 -0
- package/dist/auditor/remediation.d.ts.map +1 -1
- package/dist/auditor/remediation.js +292 -1
- package/dist/auditor/remediation.js.map +1 -1
- package/dist/cli.js +29 -1
- package/dist/cli.js.map +1 -1
- package/dist/commands/monitor.d.ts +13 -0
- package/dist/commands/monitor.d.ts.map +1 -0
- package/dist/commands/monitor.js +102 -0
- package/dist/commands/monitor.js.map +1 -0
- package/dist/config.d.ts +4 -0
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +55 -0
- package/dist/config.js.map +1 -1
- package/dist/mcp-server/index.d.ts.map +1 -1
- package/dist/mcp-server/index.js +4 -0
- package/dist/mcp-server/index.js.map +1 -1
- package/dist/mcp-server/schemas.d.ts +2 -0
- package/dist/mcp-server/schemas.d.ts.map +1 -1
- package/dist/mcp-server/schemas.js +2 -0
- package/dist/mcp-server/schemas.js.map +1 -1
- package/dist/mcp-server/tools/capture-baseline.d.ts +3 -0
- package/dist/mcp-server/tools/capture-baseline.d.ts.map +1 -0
- package/dist/mcp-server/tools/capture-baseline.js +42 -0
- package/dist/mcp-server/tools/capture-baseline.js.map +1 -0
- package/dist/mcp-server/tools/monitor-snapshot.d.ts +3 -0
- package/dist/mcp-server/tools/monitor-snapshot.d.ts.map +1 -0
- package/dist/mcp-server/tools/monitor-snapshot.js +53 -0
- package/dist/mcp-server/tools/monitor-snapshot.js.map +1 -0
- package/dist/monitor/baseline.d.ts +6 -0
- package/dist/monitor/baseline.d.ts.map +1 -0
- package/dist/monitor/baseline.js +64 -0
- package/dist/monitor/baseline.js.map +1 -0
- package/dist/monitor/browser-scanner.d.ts +4 -0
- package/dist/monitor/browser-scanner.d.ts.map +1 -0
- package/dist/monitor/browser-scanner.js +141 -0
- package/dist/monitor/browser-scanner.js.map +1 -0
- package/dist/monitor/clipboard-scanner.d.ts +3 -0
- package/dist/monitor/clipboard-scanner.d.ts.map +1 -0
- package/dist/monitor/clipboard-scanner.js +49 -0
- package/dist/monitor/clipboard-scanner.js.map +1 -0
- package/dist/monitor/correlation.d.ts +9 -0
- package/dist/monitor/correlation.d.ts.map +1 -0
- package/dist/monitor/correlation.js +117 -0
- package/dist/monitor/correlation.js.map +1 -0
- package/dist/monitor/index.d.ts +13 -0
- package/dist/monitor/index.d.ts.map +1 -0
- package/dist/monitor/index.js +11 -0
- package/dist/monitor/index.js.map +1 -0
- package/dist/monitor/known-good.d.ts +24 -0
- package/dist/monitor/known-good.d.ts.map +1 -0
- package/dist/monitor/known-good.js +82 -0
- package/dist/monitor/known-good.js.map +1 -0
- package/dist/monitor/network-scanner.d.ts +4 -0
- package/dist/monitor/network-scanner.d.ts.map +1 -0
- package/dist/monitor/network-scanner.js +123 -0
- package/dist/monitor/network-scanner.js.map +1 -0
- package/dist/monitor/persistence-scanner.d.ts +4 -0
- package/dist/monitor/persistence-scanner.d.ts.map +1 -0
- package/dist/monitor/persistence-scanner.js +156 -0
- package/dist/monitor/persistence-scanner.js.map +1 -0
- package/dist/monitor/process-scanner.d.ts +6 -0
- package/dist/monitor/process-scanner.d.ts.map +1 -0
- package/dist/monitor/process-scanner.js +101 -0
- package/dist/monitor/process-scanner.js.map +1 -0
- package/dist/monitor/shadow-ai-scanner.d.ts +3 -0
- package/dist/monitor/shadow-ai-scanner.d.ts.map +1 -0
- package/dist/monitor/shadow-ai-scanner.js +70 -0
- package/dist/monitor/shadow-ai-scanner.js.map +1 -0
- package/dist/monitor/types.d.ts +79 -0
- package/dist/monitor/types.d.ts.map +1 -0
- package/dist/monitor/types.js +12 -0
- package/dist/monitor/types.js.map +1 -0
- package/dist/reporter/monitor-report.d.ts +3 -0
- package/dist/reporter/monitor-report.d.ts.map +1 -0
- package/dist/reporter/monitor-report.js +89 -0
- package/dist/reporter/monitor-report.js.map +1 -0
- package/dist/reporter/risk-scorer.d.ts +2 -0
- package/dist/reporter/risk-scorer.d.ts.map +1 -1
- package/dist/reporter/risk-scorer.js +12 -0
- package/dist/reporter/risk-scorer.js.map +1 -1
- package/dist/reporter/shared.d.ts.map +1 -1
- package/dist/reporter/shared.js +5 -3
- package/dist/reporter/shared.js.map +1 -1
- package/dist/rules/exfiltration-rules.d.ts +3 -0
- package/dist/rules/exfiltration-rules.d.ts.map +1 -0
- package/dist/rules/exfiltration-rules.js +181 -0
- package/dist/rules/exfiltration-rules.js.map +1 -0
- package/dist/rules/index.d.ts +2 -1
- package/dist/rules/index.d.ts.map +1 -1
- package/dist/rules/index.js +3 -1
- package/dist/rules/index.js.map +1 -1
- package/dist/rules/types.d.ts +9 -1
- package/dist/rules/types.d.ts.map +1 -1
- package/dist/scanner/filesystem-scanner.d.ts.map +1 -1
- package/dist/scanner/filesystem-scanner.js +27 -10
- package/dist/scanner/filesystem-scanner.js.map +1 -1
- package/dist/tui/App.d.ts.map +1 -1
- package/dist/tui/App.js +10 -2
- package/dist/tui/App.js.map +1 -1
- package/dist/tui/components/Footer.d.ts +2 -3
- package/dist/tui/components/Footer.d.ts.map +1 -1
- package/dist/tui/components/Footer.js +11 -5
- package/dist/tui/components/Footer.js.map +1 -1
- package/dist/tui/components/WelcomeScreen.d.ts.map +1 -1
- package/dist/tui/components/WelcomeScreen.js +1 -1
- package/dist/tui/components/WelcomeScreen.js.map +1 -1
- package/dist/tui/educational.d.ts +6 -0
- package/dist/tui/educational.d.ts.map +1 -1
- package/dist/tui/educational.js +37 -0
- package/dist/tui/educational.js.map +1 -1
- package/dist/tui/hooks/useLogs.d.ts +1 -1
- package/dist/tui/hooks/useLogs.d.ts.map +1 -1
- package/dist/tui/hooks/useMonitor.d.ts +28 -0
- package/dist/tui/hooks/useMonitor.d.ts.map +1 -0
- package/dist/tui/hooks/useMonitor.js +127 -0
- package/dist/tui/hooks/useMonitor.js.map +1 -0
- package/dist/tui/screens/AuditPanel.d.ts.map +1 -1
- package/dist/tui/screens/AuditPanel.js +109 -9
- package/dist/tui/screens/AuditPanel.js.map +1 -1
- package/dist/tui/screens/MonitorPanel.d.ts +2 -0
- package/dist/tui/screens/MonitorPanel.d.ts.map +1 -0
- package/dist/tui/screens/MonitorPanel.js +370 -0
- package/dist/tui/screens/MonitorPanel.js.map +1 -0
- package/dist/tui/screens/OverviewPanel.d.ts.map +1 -1
- package/dist/tui/screens/OverviewPanel.js +9 -3
- package/dist/tui/screens/OverviewPanel.js.map +1 -1
- package/dist/tui/screens/ScanPanel.d.ts.map +1 -1
- package/dist/tui/screens/ScanPanel.js +5 -5
- package/dist/tui/screens/ScanPanel.js.map +1 -1
- package/dist/tui/screens/ScanResultsPanel.d.ts.map +1 -1
- package/dist/tui/screens/ScanResultsPanel.js +104 -32
- package/dist/tui/screens/ScanResultsPanel.js.map +1 -1
- package/dist/tui/state.d.ts +7 -3
- package/dist/tui/state.d.ts.map +1 -1
- package/dist/tui/state.js +1 -0
- package/dist/tui/state.js.map +1 -1
- package/dist/tui/utils/open-file.d.ts +4 -0
- package/dist/tui/utils/open-file.d.ts.map +1 -0
- package/dist/tui/utils/open-file.js +29 -0
- package/dist/tui/utils/open-file.js.map +1 -0
- package/install.sh +23 -12
- package/package.json +1 -1
- package/patterns/exfiltration.yaml +160 -0
- package/uninstall.sh +14 -10
|
@@ -4,6 +4,7 @@ import type { EnvExposure } from './env-auditor.js';
|
|
|
4
4
|
import type { ScanFinding } from '../rules/types.js';
|
|
5
5
|
import type { PoisoningFinding } from './mcp-poison-detector.js';
|
|
6
6
|
import type { RunningMiner } from './miner-detector.js';
|
|
7
|
+
import type { MonitorFinding } from '../monitor/types.js';
|
|
7
8
|
export type RiskLevel = 'safe' | 'caution';
|
|
8
9
|
export interface RemediationAction {
|
|
9
10
|
type: string;
|
|
@@ -27,4 +28,12 @@ export declare function getActionsForPermissionFinding(finding: ScanFinding): Re
|
|
|
27
28
|
export declare function getActionsForExposure(filePath: string): RemediationAction[];
|
|
28
29
|
export declare function getActionsForPoisoningFinding(finding: PoisoningFinding): RemediationAction[];
|
|
29
30
|
export declare function getActionsForRunningMiner(miner: RunningMiner): RemediationAction[];
|
|
31
|
+
export declare function createLocateAction(finding: MonitorFinding): RemediationAction | null;
|
|
32
|
+
export declare function getActionsForMonitorProcess(finding: MonitorFinding): RemediationAction[];
|
|
33
|
+
export declare function getActionsForMonitorNetwork(finding: MonitorFinding): RemediationAction[];
|
|
34
|
+
export declare function getActionsForMonitorBrowser(finding: MonitorFinding): RemediationAction[];
|
|
35
|
+
export declare function getActionsForMonitorShadowAI(finding: MonitorFinding): RemediationAction[];
|
|
36
|
+
export declare function getActionsForMonitorClipboard(_finding: MonitorFinding): RemediationAction[];
|
|
37
|
+
export declare function getActionsForMonitorPersistence(finding: MonitorFinding): RemediationAction[];
|
|
38
|
+
export declare function getActionsForMonitorFinding(finding: MonitorFinding): RemediationAction[];
|
|
30
39
|
//# sourceMappingURL=remediation.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"remediation.d.ts","sourceRoot":"","sources":["../../src/auditor/remediation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;
|
|
1
|
+
{"version":3,"file":"remediation.d.ts","sourceRoot":"","sources":["../../src/auditor/remediation.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,SAAS,CAAC;AAE3C,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,SAAS,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,iBAAiB,CAazF;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAOrD;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,GAAG,iBAAiB,EAAE,CAmD7E;AAED,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,eAAe,GAAG,iBAAiB,EAAE,CAwBtF;AAED,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,WAAW,GAAG,iBAAiB,EAAE,CAgD9E;AAED,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,WAAW,GAAG,iBAAiB,EAAE,CAgCxF;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAuC3E;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,gBAAgB,GAAG,iBAAiB,EAAE,CAiB5F;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,YAAY,GAAG,iBAAiB,EAAE,CAwBlF;AAID,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,GAAG,IAAI,CAkCpF;AAwCD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,EAAE,CA+BxF;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAgCxF;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAQxF;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,EAAE,CA+BzF;AAED,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAkB3F;AAED,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAyE5F;AAED,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAUxF"}
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import { readFileSync, writeFileSync, copyFileSync, existsSync, chmodSync, mkdirSync } from 'node:fs';
|
|
2
2
|
import { execFileSync } from 'node:child_process';
|
|
3
|
-
import { join } from 'node:path';
|
|
3
|
+
import { join, basename } from 'node:path';
|
|
4
4
|
import { homedir } from 'node:os';
|
|
5
5
|
export function restoreBackup(backupPath, originalPath) {
|
|
6
6
|
try {
|
|
@@ -261,4 +261,295 @@ export function getActionsForRunningMiner(miner) {
|
|
|
261
261
|
},
|
|
262
262
|
];
|
|
263
263
|
}
|
|
264
|
+
// --- Monitor locate action ---
|
|
265
|
+
export function createLocateAction(finding) {
|
|
266
|
+
// Only offer "Open" for actual file paths (starts with /), not IDs or hostnames
|
|
267
|
+
if (finding.target && finding.target.startsWith('/') && existsSync(finding.target)) {
|
|
268
|
+
return {
|
|
269
|
+
type: 'locate-target',
|
|
270
|
+
riskLevel: 'safe',
|
|
271
|
+
label: `Open ${basename(finding.target)}`,
|
|
272
|
+
description: `Opens the target file in your editor: ${finding.target}`,
|
|
273
|
+
target: finding.target,
|
|
274
|
+
execute: async () => {
|
|
275
|
+
return { success: true, message: finding.target };
|
|
276
|
+
},
|
|
277
|
+
};
|
|
278
|
+
}
|
|
279
|
+
if (finding.pid && finding.processName) {
|
|
280
|
+
return {
|
|
281
|
+
type: 'locate-process',
|
|
282
|
+
riskLevel: 'safe',
|
|
283
|
+
label: `Show process info (PID ${finding.pid})`,
|
|
284
|
+
description: `Runs ps to show details about process ${finding.pid}.`,
|
|
285
|
+
target: String(finding.pid),
|
|
286
|
+
execute: async () => {
|
|
287
|
+
try {
|
|
288
|
+
const output = execFileSync('ps', ['-p', String(finding.pid), '-o', 'pid,ppid,user,%cpu,%mem,command'], {
|
|
289
|
+
timeout: 5000, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'],
|
|
290
|
+
});
|
|
291
|
+
return { success: true, message: output.trim() };
|
|
292
|
+
}
|
|
293
|
+
catch {
|
|
294
|
+
return { success: false, message: `Process ${finding.pid} not found (may have exited)` };
|
|
295
|
+
}
|
|
296
|
+
},
|
|
297
|
+
};
|
|
298
|
+
}
|
|
299
|
+
return null;
|
|
300
|
+
}
|
|
301
|
+
// --- Monitor remediation actions ---
|
|
302
|
+
function addToMonitorAllowlist(listKey, value) {
|
|
303
|
+
return {
|
|
304
|
+
type: `add-monitor-${listKey}`,
|
|
305
|
+
riskLevel: 'safe',
|
|
306
|
+
label: `Add to ${listKey} allowlist`,
|
|
307
|
+
description: `Adds "${value}" to monitor.${listKey} in ~/.llm-av/config.json.`,
|
|
308
|
+
target: value,
|
|
309
|
+
execute: async () => {
|
|
310
|
+
try {
|
|
311
|
+
const configDir = join(homedir(), '.llm-av');
|
|
312
|
+
const configPath = join(configDir, 'config.json');
|
|
313
|
+
if (!existsSync(configDir))
|
|
314
|
+
mkdirSync(configDir, { recursive: true });
|
|
315
|
+
let existing = {};
|
|
316
|
+
try {
|
|
317
|
+
existing = JSON.parse(readFileSync(configPath, 'utf-8'));
|
|
318
|
+
}
|
|
319
|
+
catch { /* start fresh */ }
|
|
320
|
+
if (!existing.monitor || typeof existing.monitor !== 'object') {
|
|
321
|
+
existing.monitor = {};
|
|
322
|
+
}
|
|
323
|
+
const monitor = existing.monitor;
|
|
324
|
+
if (!Array.isArray(monitor[listKey]))
|
|
325
|
+
monitor[listKey] = [];
|
|
326
|
+
if (monitor[listKey].includes(value)) {
|
|
327
|
+
return { success: true, message: 'Already in allowlist' };
|
|
328
|
+
}
|
|
329
|
+
monitor[listKey].push(value);
|
|
330
|
+
writeFileSync(configPath, JSON.stringify(existing, null, 2) + '\n');
|
|
331
|
+
return { success: true, message: `Added to ${listKey} allowlist` };
|
|
332
|
+
}
|
|
333
|
+
catch (err) {
|
|
334
|
+
return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
|
|
335
|
+
}
|
|
336
|
+
},
|
|
337
|
+
};
|
|
338
|
+
}
|
|
339
|
+
export function getActionsForMonitorProcess(finding) {
|
|
340
|
+
const actions = [];
|
|
341
|
+
if (finding.pid) {
|
|
342
|
+
actions.push({
|
|
343
|
+
type: 'kill-process',
|
|
344
|
+
riskLevel: 'caution',
|
|
345
|
+
label: `Kill ${finding.processName ?? 'process'} (PID ${finding.pid})`,
|
|
346
|
+
description: `Sends SIGTERM to process ${finding.pid}. The process may restart if it has a supervisor.`,
|
|
347
|
+
target: String(finding.pid),
|
|
348
|
+
execute: async () => {
|
|
349
|
+
try {
|
|
350
|
+
process.kill(finding.pid, 'SIGTERM');
|
|
351
|
+
return { success: true, message: `Sent SIGTERM to PID ${finding.pid}` };
|
|
352
|
+
}
|
|
353
|
+
catch (err) {
|
|
354
|
+
if (err.code === 'ESRCH') {
|
|
355
|
+
return { success: true, message: `Process ${finding.pid} already terminated` };
|
|
356
|
+
}
|
|
357
|
+
if (err.code === 'EPERM') {
|
|
358
|
+
return { success: false, message: 'Permission denied — try running as root' };
|
|
359
|
+
}
|
|
360
|
+
return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
|
|
361
|
+
}
|
|
362
|
+
},
|
|
363
|
+
});
|
|
364
|
+
}
|
|
365
|
+
const locate = createLocateAction(finding);
|
|
366
|
+
if (locate)
|
|
367
|
+
actions.push(locate);
|
|
368
|
+
if (finding.processName) {
|
|
369
|
+
actions.push(addToMonitorAllowlist('processAllowlist', finding.processName));
|
|
370
|
+
}
|
|
371
|
+
return actions;
|
|
372
|
+
}
|
|
373
|
+
export function getActionsForMonitorNetwork(finding) {
|
|
374
|
+
const actions = [];
|
|
375
|
+
if (finding.pid) {
|
|
376
|
+
actions.push({
|
|
377
|
+
type: 'kill-connecting-process',
|
|
378
|
+
riskLevel: 'caution',
|
|
379
|
+
label: `Kill connecting process (PID ${finding.pid})`,
|
|
380
|
+
description: `Sends SIGTERM to the process making the connection.`,
|
|
381
|
+
target: String(finding.pid),
|
|
382
|
+
execute: async () => {
|
|
383
|
+
try {
|
|
384
|
+
process.kill(finding.pid, 'SIGTERM');
|
|
385
|
+
return { success: true, message: `Sent SIGTERM to PID ${finding.pid}` };
|
|
386
|
+
}
|
|
387
|
+
catch (err) {
|
|
388
|
+
if (err.code === 'ESRCH') {
|
|
389
|
+
return { success: true, message: `Process ${finding.pid} already terminated` };
|
|
390
|
+
}
|
|
391
|
+
if (err.code === 'EPERM') {
|
|
392
|
+
return { success: false, message: 'Permission denied — try running as root' };
|
|
393
|
+
}
|
|
394
|
+
return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
|
|
395
|
+
}
|
|
396
|
+
},
|
|
397
|
+
});
|
|
398
|
+
}
|
|
399
|
+
const locate = createLocateAction(finding);
|
|
400
|
+
if (locate)
|
|
401
|
+
actions.push(locate);
|
|
402
|
+
if (finding.target) {
|
|
403
|
+
const host = finding.target.replace(/:\d+$/, '');
|
|
404
|
+
actions.push(addToMonitorAllowlist('networkAllowlist', host));
|
|
405
|
+
}
|
|
406
|
+
return actions;
|
|
407
|
+
}
|
|
408
|
+
export function getActionsForMonitorBrowser(finding) {
|
|
409
|
+
const actions = [];
|
|
410
|
+
const locate = createLocateAction(finding);
|
|
411
|
+
if (locate)
|
|
412
|
+
actions.push(locate);
|
|
413
|
+
if (finding.target) {
|
|
414
|
+
actions.push(addToMonitorAllowlist('browserAllowlist', finding.target));
|
|
415
|
+
}
|
|
416
|
+
return actions;
|
|
417
|
+
}
|
|
418
|
+
export function getActionsForMonitorShadowAI(finding) {
|
|
419
|
+
const actions = [];
|
|
420
|
+
if (finding.pid) {
|
|
421
|
+
actions.push({
|
|
422
|
+
type: 'kill-shadow-ai-process',
|
|
423
|
+
riskLevel: 'caution',
|
|
424
|
+
label: `Kill ${finding.processName ?? 'shadow AI'} (PID ${finding.pid})`,
|
|
425
|
+
description: `Sends SIGTERM to the unregistered AI process.`,
|
|
426
|
+
target: String(finding.pid),
|
|
427
|
+
execute: async () => {
|
|
428
|
+
try {
|
|
429
|
+
process.kill(finding.pid, 'SIGTERM');
|
|
430
|
+
return { success: true, message: `Sent SIGTERM to PID ${finding.pid}` };
|
|
431
|
+
}
|
|
432
|
+
catch (err) {
|
|
433
|
+
if (err.code === 'ESRCH') {
|
|
434
|
+
return { success: true, message: `Process already terminated` };
|
|
435
|
+
}
|
|
436
|
+
if (err.code === 'EPERM') {
|
|
437
|
+
return { success: false, message: 'Permission denied' };
|
|
438
|
+
}
|
|
439
|
+
return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
|
|
440
|
+
}
|
|
441
|
+
},
|
|
442
|
+
});
|
|
443
|
+
}
|
|
444
|
+
const locate = createLocateAction(finding);
|
|
445
|
+
if (locate)
|
|
446
|
+
actions.push(locate);
|
|
447
|
+
if (finding.processName) {
|
|
448
|
+
actions.push(addToMonitorAllowlist('processAllowlist', finding.processName));
|
|
449
|
+
}
|
|
450
|
+
return actions;
|
|
451
|
+
}
|
|
452
|
+
export function getActionsForMonitorClipboard(_finding) {
|
|
453
|
+
return [
|
|
454
|
+
{
|
|
455
|
+
type: 'clear-clipboard',
|
|
456
|
+
riskLevel: 'safe',
|
|
457
|
+
label: 'Clear clipboard',
|
|
458
|
+
description: 'Clears the system clipboard contents.',
|
|
459
|
+
target: 'clipboard',
|
|
460
|
+
execute: async () => {
|
|
461
|
+
try {
|
|
462
|
+
execFileSync('pbcopy', [], { input: '', timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] });
|
|
463
|
+
return { success: true, message: 'Clipboard cleared' };
|
|
464
|
+
}
|
|
465
|
+
catch {
|
|
466
|
+
return { success: false, message: 'Failed to clear clipboard' };
|
|
467
|
+
}
|
|
468
|
+
},
|
|
469
|
+
},
|
|
470
|
+
];
|
|
471
|
+
}
|
|
472
|
+
export function getActionsForMonitorPersistence(finding) {
|
|
473
|
+
const actions = [];
|
|
474
|
+
const target = finding.target ?? '';
|
|
475
|
+
if (finding.id.startsWith('persist-cron-')) {
|
|
476
|
+
actions.push({
|
|
477
|
+
type: 'remove-crontab-entry',
|
|
478
|
+
riskLevel: 'caution',
|
|
479
|
+
label: 'Remove crontab entry',
|
|
480
|
+
description: `Comments out the suspicious crontab line. Original is preserved.`,
|
|
481
|
+
target,
|
|
482
|
+
execute: async () => {
|
|
483
|
+
try {
|
|
484
|
+
const output = execFileSync('crontab', ['-l'], { timeout: 5000, encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] });
|
|
485
|
+
const lines = output.split('\n');
|
|
486
|
+
const updated = lines.map(l => l.trim() === target.trim() ? `# [chainwall] ${l}` : l).join('\n');
|
|
487
|
+
execFileSync('crontab', ['-'], { input: updated, timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] });
|
|
488
|
+
return { success: true, message: 'Crontab entry commented out' };
|
|
489
|
+
}
|
|
490
|
+
catch (err) {
|
|
491
|
+
return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
|
|
492
|
+
}
|
|
493
|
+
},
|
|
494
|
+
});
|
|
495
|
+
}
|
|
496
|
+
if (finding.id.startsWith('persist-launchagent-')) {
|
|
497
|
+
actions.push({
|
|
498
|
+
type: 'unload-launch-agent',
|
|
499
|
+
riskLevel: 'caution',
|
|
500
|
+
label: `Unload launch agent`,
|
|
501
|
+
description: `Runs launchctl unload on ${target.split('/').pop()}. The plist file is not deleted.`,
|
|
502
|
+
target,
|
|
503
|
+
execute: async () => {
|
|
504
|
+
try {
|
|
505
|
+
execFileSync('launchctl', ['unload', target], { timeout: 10000, stdio: ['pipe', 'pipe', 'pipe'] });
|
|
506
|
+
return { success: true, message: `Unloaded: ${target.split('/').pop()}` };
|
|
507
|
+
}
|
|
508
|
+
catch (err) {
|
|
509
|
+
return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
|
|
510
|
+
}
|
|
511
|
+
},
|
|
512
|
+
});
|
|
513
|
+
}
|
|
514
|
+
if (finding.id.startsWith('persist-rc-') && target) {
|
|
515
|
+
actions.push({
|
|
516
|
+
type: 'comment-rc-line',
|
|
517
|
+
riskLevel: 'caution',
|
|
518
|
+
label: `Comment suspicious line in ${target.split('/').pop()}`,
|
|
519
|
+
description: `Comments out the suspicious line in ${target.split('/').pop()}. A backup is created.`,
|
|
520
|
+
target,
|
|
521
|
+
execute: async () => {
|
|
522
|
+
try {
|
|
523
|
+
const content = readFileSync(target, 'utf-8');
|
|
524
|
+
const backupPath = createBackup(target);
|
|
525
|
+
const desc = finding.description;
|
|
526
|
+
const updated = content.split('\n').map(l => l.trim() === desc.trim() ? `# [chainwall] ${l}` : l).join('\n');
|
|
527
|
+
writeFileSync(target, updated);
|
|
528
|
+
return { success: true, message: `Line commented out in ${target.split('/').pop()}`, backupPath };
|
|
529
|
+
}
|
|
530
|
+
catch (err) {
|
|
531
|
+
return { success: false, message: `Error: ${err instanceof Error ? err.message : String(err)}` };
|
|
532
|
+
}
|
|
533
|
+
},
|
|
534
|
+
});
|
|
535
|
+
}
|
|
536
|
+
const locate = createLocateAction(finding);
|
|
537
|
+
if (locate)
|
|
538
|
+
actions.push(locate);
|
|
539
|
+
if (finding.id.startsWith('persist-')) {
|
|
540
|
+
actions.push(addToMonitorAllowlist('processAllowlist', finding.title));
|
|
541
|
+
}
|
|
542
|
+
return actions;
|
|
543
|
+
}
|
|
544
|
+
export function getActionsForMonitorFinding(finding) {
|
|
545
|
+
switch (finding.category) {
|
|
546
|
+
case 'process': return getActionsForMonitorProcess(finding);
|
|
547
|
+
case 'network': return getActionsForMonitorNetwork(finding);
|
|
548
|
+
case 'browser': return getActionsForMonitorBrowser(finding);
|
|
549
|
+
case 'shadow_ai': return getActionsForMonitorShadowAI(finding);
|
|
550
|
+
case 'clipboard': return getActionsForMonitorClipboard(finding);
|
|
551
|
+
case 'persistence': return getActionsForMonitorPersistence(finding);
|
|
552
|
+
default: return [];
|
|
553
|
+
}
|
|
554
|
+
}
|
|
264
555
|
//# sourceMappingURL=remediation.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"remediation.js","sourceRoot":"","sources":["../../src/auditor/remediation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAyBlC,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,YAAoB;IACpE,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,UAAU,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACnG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,UAAU,GAAG,GAAG,QAAQ,MAAM,CAAC;IACnC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,UAAU,GAAG,GAAG,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/C,CAAC;IACD,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAiB;IACtD,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,mBAAmB;QACzB,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,UAAU,MAAM,CAAC,IAAI,cAAc;QAC1C,WAAW,EAAE,gBAAgB,MAAM,CAAC,IAAI,uBAAuB,MAAM,CAAC,UAAU,6BAA6B;QAC7G,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;gBAC7E,CAAC;gBACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACzD,IAAI,MAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;gBACrF,CAAC;gBAED,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAEnD,oDAAoD;gBACpD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAiD,CAAC;gBAC5E,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;oBAC5C,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC/B,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;gBACtF,CAAC;gBAED,kCAAkC;gBAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAA8C,CAAC;gBACtE,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;oBACtC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC5B,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;gBACtF,CAAC;gBAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,uBAAuB,EAAE,CAAC;YACpF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;gBAC1D,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACnG,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,GAAoB;IAC/D,OAAO;QACL;YACE,IAAI,EAAE,0BAA0B;YAChC,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,WAAW,GAAG,CAAC,IAAI,EAAE;YAC5B,WAAW,EAAE,kCAAkC,GAAG,CAAC,EAAE,6BAA6B;YAClF,MAAM,EAAE,GAAG,CAAC,EAAE;YACd,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,YAAY,CAAC,MAAM,EAAE,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE;wBACpD,OAAO,EAAE,MAAM;wBACf,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;qBAChC,CAAC,CAAC;oBACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBACvE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;oBACtF,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBAC/G,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAgB;IACvD,MAAM,YAAY,GAAG;QACnB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC;QAC1B,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC;QAC3B,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC;KAC7B,CAAC;IAEF,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS;QACvC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,mBAAmB,UAAU,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1E,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,oBAAoB;gBAC1B,SAAS,EAAE,SAAS;gBACpB,KAAK,EAAE,eAAe,GAAG,CAAC,GAAG,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAClE,WAAW,EAAE,wBAAwB,GAAG,CAAC,GAAG,YAAY,WAAW,mBAAmB;gBACtF,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;wBACnD,MAAM,UAAU,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;wBAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;wBACjE,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;wBACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,GAAG,CAAC,GAAG,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;oBAC/G,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;wBAC1D,CAAC;wBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACnG,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAoB;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEpE,kFAAkF;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAE3C,OAAO;QACL;YACE,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,UAAU,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAChF,WAAW,EAAE,+BAA+B,OAAO,CAAC,QAAQ,QAAQ,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG;YAC/F,MAAM,EAAE,OAAO,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;oBACvD,CAAC;oBACD,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;oBAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC3F,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;oBAC1D,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO;QACL;YACE,IAAI,EAAE,kBAAkB;YACxB,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,eAAe;YACtD,WAAW,EAAE,SAAS,QAAQ,6CAA6C;YAC3E,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;oBAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;oBAElD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;wBAAE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAEtE,IAAI,QAAQ,GAA4B,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;oBACtF,CAAC;oBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;oBAE7B,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;wBAClE,QAAQ,CAAC,SAAS,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;oBAC9D,CAAC;oBACD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAqC,CAAC;oBACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;wBAAE,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;oBAE1D,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;oBACjE,CAAC;oBAED,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC/B,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;gBACxF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAyB;IACrE,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,IAAI,OAAO,CAAC,QAAQ,KAAK,qBAAqB,IAAI,OAAO,CAAC,QAAQ,KAAK,uBAAuB,EAAE,CAAC;QAC/F,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,mBAAmB;YACzB,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,UAAU,OAAO,CAAC,UAAU,SAAS;YAC5C,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,+CAA+C;YAClF,MAAM,EAAE,OAAO,CAAC,UAAU;YAC1B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5G,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAmB;IAC3D,OAAO;QACL;YACE,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,QAAQ,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,GAAG,GAAG;YAC9C,WAAW,EAAE,4BAA4B,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,oDAAoD;YACrH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;YACzB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;gBACxF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,KAAK,CAAC,GAAG,qBAAqB,EAAE,CAAC;oBAC/E,CAAC;oBACD,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;oBAChF,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}
|
|
1
|
+
{"version":3,"file":"remediation.js","sourceRoot":"","sources":["../../src/auditor/remediation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACtG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AA0BlC,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,YAAoB;IACpE,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,qBAAqB,UAAU,EAAE,EAAE,CAAC;QACxE,CAAC;QACD,YAAY,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACnG,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,IAAI,UAAU,GAAG,GAAG,QAAQ,MAAM,CAAC;IACnC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,UAAU,GAAG,GAAG,QAAQ,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/C,CAAC;IACD,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAiB;IACtD,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,OAAO,CAAC,IAAI,CAAC;QACX,IAAI,EAAE,mBAAmB;QACzB,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,UAAU,MAAM,CAAC,IAAI,cAAc;QAC1C,WAAW,EAAE,gBAAgB,MAAM,CAAC,IAAI,uBAAuB,MAAM,CAAC,UAAU,6BAA6B;QAC7G,MAAM,EAAE,MAAM,CAAC,UAAU;QACzB,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;oBACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;gBAC7E,CAAC;gBACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gBACzD,IAAI,MAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;gBAC1D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;gBACrF,CAAC;gBAED,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAEnD,oDAAoD;gBACpD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAiD,CAAC;gBAC5E,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;oBAC5C,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC/B,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;gBACtF,CAAC;gBAED,kCAAkC;gBAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAA8C,CAAC;gBACtE,IAAI,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;oBACtC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC5B,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,cAAc,EAAE,UAAU,EAAE,CAAC;gBACtF,CAAC;gBAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,IAAI,uBAAuB,EAAE,CAAC;YACpF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;gBAC1D,CAAC;gBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACnG,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,GAAoB;IAC/D,OAAO;QACL;YACE,IAAI,EAAE,0BAA0B;YAChC,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,WAAW,GAAG,CAAC,IAAI,EAAE;YAC5B,WAAW,EAAE,kCAAkC,GAAG,CAAC,EAAE,6BAA6B;YAClF,MAAM,EAAE,GAAG,CAAC,EAAE;YACd,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,YAAY,CAAC,MAAM,EAAE,CAAC,qBAAqB,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE;wBACpD,OAAO,EAAE,MAAM;wBACf,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;qBAChC,CAAC,CAAC;oBACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBACvE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;oBACtF,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBAC/G,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAgB;IACvD,MAAM,YAAY,GAAG;QACnB,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC;QAC1B,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC;QACzB,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC;QAC3B,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,CAAC;QAChC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC;KAC7B,CAAC;IAEF,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,SAAS;QACvC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,mBAAmB,UAAU,OAAO,EAAE,GAAG,CAAC,CAAC;QAC1E,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,oBAAoB;gBAC1B,SAAS,EAAE,SAAS;gBACpB,KAAK,EAAE,eAAe,GAAG,CAAC,GAAG,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;gBAClE,WAAW,EAAE,wBAAwB,GAAG,CAAC,GAAG,YAAY,WAAW,mBAAmB;gBACtF,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;wBACnD,MAAM,UAAU,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;wBAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;wBACjE,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;wBACpC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,GAAG,CAAC,GAAG,OAAO,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;oBAC/G,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;wBAC1D,CAAC;wBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACnG,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAoB;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,YAAY,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEpE,kFAAkF;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAE3C,OAAO;QACL;YACE,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,UAAU,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAChF,WAAW,EAAE,+BAA+B,OAAO,CAAC,QAAQ,QAAQ,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG;YAC/F,MAAM,EAAE,OAAO,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAClC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC;oBACvD,CAAC;oBACD,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;oBAC1C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC3F,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBACrD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;oBAC1D,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,OAAO;QACL;YACE,IAAI,EAAE,kBAAkB;YACxB,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,eAAe;YACtD,WAAW,EAAE,SAAS,QAAQ,6CAA6C;YAC3E,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;oBAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;oBAElD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;wBAAE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;oBAEtE,IAAI,QAAQ,GAA4B,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;oBACtF,CAAC;oBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;oBAE7B,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;wBAClE,QAAQ,CAAC,SAAS,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;oBAC9D,CAAC;oBACD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAqC,CAAC;oBACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC;wBAAE,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;oBAE1D,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;oBACjE,CAAC;oBAED,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC/B,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;oBACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;gBACxF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,OAAyB;IACrE,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,IAAI,OAAO,CAAC,QAAQ,KAAK,qBAAqB,IAAI,OAAO,CAAC,QAAQ,KAAK,uBAAuB,EAAE,CAAC;QAC/F,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,mBAAmB;YACzB,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,UAAU,OAAO,CAAC,UAAU,SAAS;YAC5C,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,+CAA+C;YAClF,MAAM,EAAE,OAAO,CAAC,UAAU;YAC1B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5G,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAmB;IAC3D,OAAO;QACL;YACE,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,QAAQ,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,GAAG,GAAG;YAC9C,WAAW,EAAE,4BAA4B,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,oDAAoD;YACrH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;YACzB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;oBACnC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;gBACxF,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,KAAK,CAAC,GAAG,qBAAqB,EAAE,CAAC;oBAC/E,CAAC;oBACD,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;oBAChF,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,gCAAgC;AAEhC,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACxD,gFAAgF;IAChF,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,QAAQ,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACzC,WAAW,EAAE,yCAAyC,OAAO,CAAC,MAAM,EAAE;YACtE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,MAAO,EAAE,CAAC;YACrD,CAAC;SACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,0BAA0B,OAAO,CAAC,GAAG,GAAG;YAC/C,WAAW,EAAE,yCAAyC,OAAO,CAAC,GAAG,GAAG;YACpE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,iCAAiC,CAAC,EAAE;wBACtG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;qBAClE,CAAC,CAAC;oBACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBACnD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,OAAO,CAAC,GAAG,8BAA8B,EAAE,CAAC;gBAC3F,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sCAAsC;AAEtC,SAAS,qBAAqB,CAAC,OAAe,EAAE,KAAa;IAC3D,OAAO;QACL,IAAI,EAAE,eAAe,OAAO,EAAE;QAC9B,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,UAAU,OAAO,YAAY;QACpC,WAAW,EAAE,SAAS,KAAK,gBAAgB,OAAO,4BAA4B;QAC9E,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK,IAAI,EAAE;YAClB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBAClD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;oBAAE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAEtE,IAAI,QAAQ,GAA4B,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAA4B,CAAC;gBACtF,CAAC;gBAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;gBAE7B,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC9D,QAAQ,CAAC,OAAO,GAAG,EAAE,CAAC;gBACxB,CAAC;gBACD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAmC,CAAC;gBAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAAE,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC5D,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;gBAC5D,CAAC;gBACD,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC7B,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;gBACpE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,OAAO,YAAY,EAAE,CAAC;YACrE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACnG,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAuB;IACjE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,QAAQ,OAAO,CAAC,WAAW,IAAI,SAAS,SAAS,OAAO,CAAC,GAAG,GAAG;YACtE,WAAW,EAAE,4BAA4B,OAAO,CAAC,GAAG,mDAAmD;YACvG,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAI,EAAE,SAAS,CAAC,CAAC;oBACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC1E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,OAAO,CAAC,GAAG,qBAAqB,EAAE,CAAC;oBACjF,CAAC;oBACD,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;oBAChF,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAuB;IACjE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,yBAAyB;YAC/B,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,gCAAgC,OAAO,CAAC,GAAG,GAAG;YACrD,WAAW,EAAE,qDAAqD;YAClE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAI,EAAE,SAAS,CAAC,CAAC;oBACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC1E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,OAAO,CAAC,GAAG,qBAAqB,EAAE,CAAC;oBACjF,CAAC;oBACD,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;oBAChF,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAuB;IACjE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAuB;IAClE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,wBAAwB;YAC9B,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,QAAQ,OAAO,CAAC,WAAW,IAAI,WAAW,SAAS,OAAO,CAAC,GAAG,GAAG;YACxE,WAAW,EAAE,+CAA+C;YAC5D,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;YAC3B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAI,EAAE,SAAS,CAAC,CAAC;oBACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC1E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;oBAClE,CAAC;oBACD,IAAK,GAA6B,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBACpD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;oBAC1D,CAAC;oBACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,QAAwB;IACpE,OAAO;QACL;YACE,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,iBAAiB;YACxB,WAAW,EAAE,uCAAuC;YACpD,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;gBACzD,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;gBAClE,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,OAAuB;IACrE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IAEpC,IAAI,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,sBAAsB;YAC5B,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,kEAAkE;YAC/E,MAAM;YACN,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;oBACtH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjG,YAAY,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;gBACnE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,qBAAqB;YAC3B,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,qBAAqB;YAC5B,WAAW,EAAE,4BAA4B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,kCAAkC;YAClG,MAAM;YACN,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,YAAY,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;gBAC5E,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,MAAM,EAAE,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,8BAA8B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9D,WAAW,EAAE,uCAAuC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,wBAAwB;YACnG,MAAM;YACN,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC9C,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;oBACxC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC;oBACjC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC7G,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC;gBACpG,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjC,IAAI,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,kBAAkB,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAuB;IACjE,QAAQ,OAAO,CAAC,QAAQ,EAAE,CAAC;QACzB,KAAK,SAAS,CAAC,CAAC,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,KAAK,SAAS,CAAC,CAAC,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,KAAK,SAAS,CAAC,CAAC,OAAO,2BAA2B,CAAC,OAAO,CAAC,CAAC;QAC5D,KAAK,WAAW,CAAC,CAAC,OAAO,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAC/D,KAAK,WAAW,CAAC,CAAC,OAAO,6BAA6B,CAAC,OAAO,CAAC,CAAC;QAChE,KAAK,aAAa,CAAC,CAAC,OAAO,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;IACrB,CAAC;AACH,CAAC"}
|
package/dist/cli.js
CHANGED
|
@@ -4,7 +4,7 @@ import chalk from 'chalk';
|
|
|
4
4
|
import { runScan } from './commands/scan.js';
|
|
5
5
|
import { runInit } from './commands/init.js';
|
|
6
6
|
import { runAudit } from './commands/audit.js';
|
|
7
|
-
import { isProtectionEnabled, setProtectionEnabled, addAllowlistPath, disableRule } from './config.js';
|
|
7
|
+
import { isProtectionEnabled, setProtectionEnabled, addAllowlistPath, disableRule, addMonitorProcessAllowlist, addMonitorNetworkAllowlist } from './config.js';
|
|
8
8
|
import { allRules } from './rules/index.js';
|
|
9
9
|
import { detectInstalledTools } from './auditor/tool-detector.js';
|
|
10
10
|
import { existsSync } from 'node:fs';
|
|
@@ -36,6 +36,8 @@ Examples:
|
|
|
36
36
|
$ chainwall audit Targeted system audit (~3s)
|
|
37
37
|
$ chainwall audit ~/project Scan a specific directory + system audit
|
|
38
38
|
$ chainwall audit --deep Full home directory scan (slow)
|
|
39
|
+
$ chainwall monitor Runtime behavioral analysis
|
|
40
|
+
$ chainwall monitor --baseline Capture current state as known-good
|
|
39
41
|
$ chainwall watch Watch current dir for secrets in real-time
|
|
40
42
|
$ chainwall init Install hooks in current project`);
|
|
41
43
|
program
|
|
@@ -70,6 +72,22 @@ Examples:
|
|
|
70
72
|
.action(async (dir, options) => {
|
|
71
73
|
await runAudit(dir ?? '.', options);
|
|
72
74
|
});
|
|
75
|
+
program
|
|
76
|
+
.command('monitor')
|
|
77
|
+
.description('Runtime behavioral analysis — scan processes, network, browser extensions, and more')
|
|
78
|
+
.option('--baseline', 'Capture current state as known-good baseline')
|
|
79
|
+
.option('--process', 'Only scan processes')
|
|
80
|
+
.option('--network', 'Only scan network connections')
|
|
81
|
+
.option('--browser', 'Only scan browser extensions')
|
|
82
|
+
.option('--shadow-ai', 'Only scan for shadow AI tools')
|
|
83
|
+
.option('--clipboard', 'Scan clipboard for secrets (off by default)')
|
|
84
|
+
.option('--json', 'Output results as JSON')
|
|
85
|
+
.addOption(new Option('--format <type>', 'Output format').choices(['text', 'json']).default('text'))
|
|
86
|
+
.option('--verbose', 'Show all findings including low severity')
|
|
87
|
+
.action(async (options) => {
|
|
88
|
+
const { runMonitor } = await import('./commands/monitor.js');
|
|
89
|
+
await runMonitor(options);
|
|
90
|
+
});
|
|
73
91
|
program
|
|
74
92
|
.command('watch')
|
|
75
93
|
.description('Watch a directory for file changes and scan in real-time')
|
|
@@ -107,6 +125,8 @@ Examples:
|
|
|
107
125
|
.command('allow <path>')
|
|
108
126
|
.description('Add a file path to the global allowlist, or disable a rule')
|
|
109
127
|
.option('--rule', 'Treat the argument as a rule ID instead of a file path')
|
|
128
|
+
.option('--process', 'Treat the argument as a process name for monitor allowlist')
|
|
129
|
+
.option('--network', 'Treat the argument as a network destination for monitor allowlist')
|
|
110
130
|
.action((pathOrRule, options) => {
|
|
111
131
|
const value = pathOrRule.trim();
|
|
112
132
|
if (!value) {
|
|
@@ -118,6 +138,14 @@ Examples:
|
|
|
118
138
|
disableRule(value);
|
|
119
139
|
console.log(chalk.green(`\u2713 Rule disabled: ${value}`));
|
|
120
140
|
}
|
|
141
|
+
else if (options.process) {
|
|
142
|
+
addMonitorProcessAllowlist(value);
|
|
143
|
+
console.log(chalk.green(`\u2713 Process allowlisted: ${value}`));
|
|
144
|
+
}
|
|
145
|
+
else if (options.network) {
|
|
146
|
+
addMonitorNetworkAllowlist(value);
|
|
147
|
+
console.log(chalk.green(`\u2713 Network destination allowlisted: ${value}`));
|
|
148
|
+
}
|
|
121
149
|
else {
|
|
122
150
|
addAllowlistPath(value);
|
|
123
151
|
console.log(chalk.green(`\u2713 Path allowlisted: ${value}`));
|
package/dist/cli.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,WAAW,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAC/J,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,4CAA4C;AAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;IACtB,MAAM,CAAC,gBAAgB,CAAC;SACrB,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC;SACpC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;QACpB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC;KAAM,CAAC;IACN,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAE9B,OAAO;SACJ,IAAI,CAAC,WAAW,CAAC;SACjB,WAAW,CAAC,oIAAoI,CAAC;SACjJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,OAAO,EAAE;;;;;;;;;;;;oEAY0C,CAAC,CAAC;IAEpE,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,wCAAwC,CAAC;SACrD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,EAAE,GAAG,CAAC;SAC3C,MAAM,CAAC,QAAQ,EAAE,2CAA2C,CAAC;SAC7D,MAAM,CAAC,eAAe,EAAE,4BAA4B,CAAC;SACrD,MAAM,CAAC,WAAW,EAAE,qCAAqC,CAAC;SAC1D,MAAM,CAAC,UAAU,EAAE,2CAA2C,CAAC;SAC/D,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SAC5G,MAAM,CAAC,iBAAiB,EAAE,qDAAqD,CAAC;SAChF,MAAM,CAAC,WAAW,EAAE,gDAAgD,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,OAAkJ,EAAE,EAAE;QAChL,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,yCAAyC,CAAC;SACtD,QAAQ,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG,CAAC;SAC1C,MAAM,CAAC,CAAC,GAAY,EAAE,EAAE;QACvB,OAAO,CAAC,GAAG,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;SACtC,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SAC5G,MAAM,CAAC,aAAa,EAAE,qCAAqC,CAAC;SAC5D,MAAM,CAAC,QAAQ,EAAE,mDAAmD,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,GAAuB,EAAE,OAAiF,EAAE,EAAE;QAC3H,MAAM,QAAQ,CAAC,GAAG,IAAI,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,qFAAqF,CAAC;SAClG,MAAM,CAAC,YAAY,EAAE,8CAA8C,CAAC;SACpE,MAAM,CAAC,WAAW,EAAE,qBAAqB,CAAC;SAC1C,MAAM,CAAC,WAAW,EAAE,+BAA+B,CAAC;SACpD,MAAM,CAAC,WAAW,EAAE,8BAA8B,CAAC;SACnD,MAAM,CAAC,aAAa,EAAE,+BAA+B,CAAC;SACtD,MAAM,CAAC,aAAa,EAAE,6CAA6C,CAAC;SACpE,MAAM,CAAC,QAAQ,EAAE,wBAAwB,CAAC;SAC1C,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SACnG,MAAM,CAAC,WAAW,EAAE,0CAA0C,CAAC;SAC/D,MAAM,CAAC,KAAK,EAAE,OAAqL,EAAE,EAAE;QACtM,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC7D,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,0DAA0D,CAAC;SACvE,QAAQ,CAAC,OAAO,EAAE,oBAAoB,EAAE,GAAG,CAAC;SAC5C,MAAM,CAAC,WAAW,EAAE,oBAAoB,CAAC;SACzC,MAAM,CAAC,QAAQ,EAAE,+BAA+B,CAAC;SACjD,MAAM,CAAC,KAAK,EAAE,GAAW,EAAE,OAA8C,EAAE,EAAE;QAC5E,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACzD,MAAM,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,6CAA6C,CAAC;SAC1D,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACjE,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,GAAG,EAAE;QACX,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,mDAAmD,CAAC;SAChE,MAAM,CAAC,GAAG,EAAE;QACX,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,4DAA4D,CAAC;SACzE,MAAM,CAAC,QAAQ,EAAE,wDAAwD,CAAC;SAC1E,MAAM,CAAC,WAAW,EAAE,4DAA4D,CAAC;SACjF,MAAM,CAAC,WAAW,EAAE,mEAAmE,CAAC;SACxF,MAAM,CAAC,CAAC,UAAkB,EAAE,OAAiE,EAAE,EAAE;QAChG,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAClD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,WAAW,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,0BAA0B,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAC3B,0BAA0B,CAAC,KAAK,CAAC,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,2CAA2C,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,4BAA4B,KAAK,EAAE,CAAC,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,wBAAwB,CAAC;SACrC,MAAM,CAAC,GAAG,EAAE;QACX,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACrC,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;QAE7D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,QAAQ,CAAC,MAAM,kBAAkB,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,MAAM,cAAc,KAAK,GAAG,CAAC,CAAC;QACpE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC5I,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEL,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;QACxC,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
export interface MonitorOptions {
|
|
2
|
+
baseline?: boolean;
|
|
3
|
+
process?: boolean;
|
|
4
|
+
network?: boolean;
|
|
5
|
+
browser?: boolean;
|
|
6
|
+
shadowAi?: boolean;
|
|
7
|
+
clipboard?: boolean;
|
|
8
|
+
json?: boolean;
|
|
9
|
+
format?: string;
|
|
10
|
+
verbose?: boolean;
|
|
11
|
+
}
|
|
12
|
+
export declare function runMonitor(options: MonitorOptions): Promise<void>;
|
|
13
|
+
//# sourceMappingURL=monitor.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"monitor.d.ts","sourceRoot":"","sources":["../../src/commands/monitor.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAiGvE"}
|
|
@@ -0,0 +1,102 @@
|
|
|
1
|
+
import chalk from 'chalk';
|
|
2
|
+
import { loadConfig } from '../config.js';
|
|
3
|
+
import { DEFAULT_KNOWN_GOOD } from '../monitor/known-good.js';
|
|
4
|
+
import { scanProcesses, getProcessMap } from '../monitor/process-scanner.js';
|
|
5
|
+
import { scanNetwork } from '../monitor/network-scanner.js';
|
|
6
|
+
import { scanBrowserExtensions } from '../monitor/browser-scanner.js';
|
|
7
|
+
import { scanShadowAI } from '../monitor/shadow-ai-scanner.js';
|
|
8
|
+
import { scanClipboard } from '../monitor/clipboard-scanner.js';
|
|
9
|
+
import { scanPersistence } from '../monitor/persistence-scanner.js';
|
|
10
|
+
import { correlateFindings } from '../monitor/correlation.js';
|
|
11
|
+
import { captureBaseline, saveBaseline, loadBaseline } from '../monitor/baseline.js';
|
|
12
|
+
import { printMonitorReport } from '../reporter/monitor-report.js';
|
|
13
|
+
import { detectInstalledTools } from '../auditor/tool-detector.js';
|
|
14
|
+
export async function runMonitor(options) {
|
|
15
|
+
const config = loadConfig();
|
|
16
|
+
const monitorConfig = config.monitor ?? {};
|
|
17
|
+
const knownGood = {
|
|
18
|
+
...DEFAULT_KNOWN_GOOD,
|
|
19
|
+
processes: [
|
|
20
|
+
...DEFAULT_KNOWN_GOOD.processes,
|
|
21
|
+
...(monitorConfig.processAllowlist ?? []),
|
|
22
|
+
],
|
|
23
|
+
networkEndpoints: [
|
|
24
|
+
...DEFAULT_KNOWN_GOOD.networkEndpoints,
|
|
25
|
+
...(monitorConfig.networkAllowlist ?? []),
|
|
26
|
+
],
|
|
27
|
+
browserExtensions: [
|
|
28
|
+
...DEFAULT_KNOWN_GOOD.browserExtensions,
|
|
29
|
+
...(monitorConfig.browserAllowlist ?? []),
|
|
30
|
+
],
|
|
31
|
+
};
|
|
32
|
+
// Determine which scanners to run
|
|
33
|
+
const hasFilter = options.process || options.network || options.browser || options.shadowAi || options.clipboard;
|
|
34
|
+
const runAll = !hasFilter;
|
|
35
|
+
const runProcess = runAll || !!options.process;
|
|
36
|
+
const runNetwork = runAll || !!options.network;
|
|
37
|
+
const runBrowser = runAll || !!options.browser;
|
|
38
|
+
const runShadowAi = runAll || !!options.shadowAi;
|
|
39
|
+
const runClipboard = runAll || !!options.clipboard;
|
|
40
|
+
const runPersistence = runAll;
|
|
41
|
+
if (!options.json) {
|
|
42
|
+
console.log(chalk.dim('Scanning runtime environment...'));
|
|
43
|
+
}
|
|
44
|
+
// Phase 1: Process scanner first (others need processMap)
|
|
45
|
+
const processMap = getProcessMap(monitorConfig, knownGood);
|
|
46
|
+
const scannerResults = [];
|
|
47
|
+
if (runProcess) {
|
|
48
|
+
scannerResults.push(scanProcesses(monitorConfig, knownGood));
|
|
49
|
+
}
|
|
50
|
+
// Phase 2: Run remaining scanners in parallel
|
|
51
|
+
const knownToolNames = detectInstalledTools().map(t => t.name);
|
|
52
|
+
const parallelPromises = [];
|
|
53
|
+
if (runNetwork) {
|
|
54
|
+
parallelPromises.push(Promise.resolve(scanNetwork(monitorConfig, knownGood, processMap)));
|
|
55
|
+
}
|
|
56
|
+
if (runBrowser) {
|
|
57
|
+
parallelPromises.push(Promise.resolve(scanBrowserExtensions(monitorConfig, knownGood)));
|
|
58
|
+
}
|
|
59
|
+
if (runShadowAi) {
|
|
60
|
+
parallelPromises.push(Promise.resolve(scanShadowAI(processMap, knownToolNames, monitorConfig)));
|
|
61
|
+
}
|
|
62
|
+
if (runClipboard) {
|
|
63
|
+
parallelPromises.push(Promise.resolve(scanClipboard(monitorConfig)));
|
|
64
|
+
}
|
|
65
|
+
if (runPersistence) {
|
|
66
|
+
parallelPromises.push(Promise.resolve(scanPersistence(monitorConfig, knownGood)));
|
|
67
|
+
}
|
|
68
|
+
const parallelResults = await Promise.all(parallelPromises);
|
|
69
|
+
scannerResults.push(...parallelResults);
|
|
70
|
+
// Phase 3: Correlation
|
|
71
|
+
const baseline = loadBaseline(monitorConfig.baselinePath);
|
|
72
|
+
const result = correlateFindings(scannerResults, undefined, baseline, knownGood);
|
|
73
|
+
// Baseline capture mode
|
|
74
|
+
if (options.baseline) {
|
|
75
|
+
const baselineState = captureBaseline(scannerResults);
|
|
76
|
+
saveBaseline(baselineState, monitorConfig.baselinePath);
|
|
77
|
+
if (!options.json) {
|
|
78
|
+
console.log(chalk.green('\u2713 Baseline captured successfully'));
|
|
79
|
+
console.log(chalk.dim(` Path: ${monitorConfig.baselinePath ?? '~/.llm-av/monitor-baseline.json'}`));
|
|
80
|
+
}
|
|
81
|
+
}
|
|
82
|
+
else if (!baseline) {
|
|
83
|
+
// First run, suggest baseline capture
|
|
84
|
+
if (!options.json) {
|
|
85
|
+
console.log(chalk.yellow('\u26a0 No baseline found. Run with --baseline to capture current state.'));
|
|
86
|
+
console.log('');
|
|
87
|
+
}
|
|
88
|
+
}
|
|
89
|
+
// Output
|
|
90
|
+
if (options.json || options.format === 'json') {
|
|
91
|
+
console.log(JSON.stringify(result, null, 2));
|
|
92
|
+
}
|
|
93
|
+
else {
|
|
94
|
+
printMonitorReport(result, !!options.verbose);
|
|
95
|
+
}
|
|
96
|
+
// Exit code
|
|
97
|
+
const hasCriticalOrHigh = result.findings.some(f => f.severity === 'critical' || f.severity === 'high');
|
|
98
|
+
if (hasCriticalOrHigh) {
|
|
99
|
+
process.exitCode = 1;
|
|
100
|
+
}
|
|
101
|
+
}
|
|
102
|
+
//# sourceMappingURL=monitor.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"monitor.js","sourceRoot":"","sources":["../../src/commands/monitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAsB,MAAM,0BAA0B,CAAC;AAClF,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAenE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,aAAa,GAAkB,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAC1D,MAAM,SAAS,GAAkB;QAC/B,GAAG,kBAAkB;QACrB,SAAS,EAAE;YACT,GAAG,kBAAkB,CAAC,SAAS;YAC/B,GAAG,CAAC,aAAa,CAAC,gBAAgB,IAAI,EAAE,CAAC;SAC1C;QACD,gBAAgB,EAAE;YAChB,GAAG,kBAAkB,CAAC,gBAAgB;YACtC,GAAG,CAAC,aAAa,CAAC,gBAAgB,IAAI,EAAE,CAAC;SAC1C;QACD,iBAAiB,EAAE;YACjB,GAAG,kBAAkB,CAAC,iBAAiB;YACvC,GAAG,CAAC,aAAa,CAAC,gBAAgB,IAAI,EAAE,CAAC;SAC1C;KACF,CAAC;IAEF,kCAAkC;IAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,CAAC;IACjH,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC;IAE1B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC/C,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC/C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACjD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACnD,MAAM,cAAc,GAAG,MAAM,CAAC;IAE9B,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,0DAA0D;IAC1D,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAoB,EAAE,CAAC;IAE3C,IAAI,UAAU,EAAE,CAAC;QACf,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,8CAA8C;IAC9C,MAAM,cAAc,GAAG,oBAAoB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,gBAAgB,GAAkC,EAAE,CAAC;IAE3D,IAAI,UAAU,EAAE,CAAC;QACf,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC5D,cAAc,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;IAExC,uBAAuB;IACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAEjF,wBAAwB;IACxB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,aAAa,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;QACtD,YAAY,CAAC,aAAa,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,aAAa,CAAC,YAAY,IAAI,iCAAiC,EAAE,CAAC,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrB,sCAAsC;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,yEAAyE,CAAC,CAAC,CAAC;YACrG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,SAAS;IACT,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;SAAM,CAAC;QACN,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,YAAY;IACZ,MAAM,iBAAiB,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;IACxG,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}
|
package/dist/config.d.ts
CHANGED
|
@@ -14,6 +14,10 @@ export declare function disableRule(ruleId: string): void;
|
|
|
14
14
|
export declare function hasSeenWelcome(): boolean;
|
|
15
15
|
/** Mark the welcome screen as completed. Preserves all other config fields. */
|
|
16
16
|
export declare function setWelcomeComplete(): void;
|
|
17
|
+
/** Add a process name to the monitor process allowlist. Deduplicates. */
|
|
18
|
+
export declare function addMonitorProcessAllowlist(processName: string): void;
|
|
19
|
+
/** Add a network destination to the monitor network allowlist. Deduplicates. */
|
|
20
|
+
export declare function addMonitorNetworkAllowlist(destination: string): void;
|
|
17
21
|
/** Validate a config file against the Zod schema. Returns array of error messages (empty = valid). */
|
|
18
22
|
export declare function validateConfig(filePath: string): string[];
|
|
19
23
|
//# sourceMappingURL=config.d.ts.map
|