deepadb 1.0.0

package/build/tools/selinux-audit.js

@@ -0,0 +1,301 @@
+/**
+ * SELinux & Permission Auditing — OS-level security inspection.
+ *
+ * Inspects SELinux enforcement mode, queries policy denials from
+ * kernel audit logs, and audits runtime permission grants against
+ * actual usage to detect over-provisioning.
+ *
+ * Extends the existing accessibility and security auditing capabilities
+ * to the Android OS permission layer. Useful for security hardening,
+ * compliance checks, and understanding app permission behavior.
+ *
+ * Root access recommended for full audit log access; basic SELinux
+ * mode and permission grant queries work without root.
+ */
+import { z } from "zod";
+import { OutputProcessor } from "../middleware/output-processor.js";
+import { validateShellArg } from "../middleware/sanitize.js";
+function parsePermissions(dumpsysOutput) {
+    const grants = [];
+    const lines = dumpsysOutput.split("\n");
+    for (const line of lines) {
+        // Format: "android.permission.CAMERA: granted=true, flags=[ USER_SET ]"
+        // or "android.permission.CAMERA granted=true"
+        const match = line.match(/(android\.permission\.\S+)[:\s]+granted=(\w+)(?:.*flags=\[([^\]]*)\])?/);
+        if (match) {
+            grants.push({
+                permission: match[1],
+                granted: match[2] === "true",
+                flags: match[3]?.trim() ?? "",
+            });
+        }
+    }
+    return grants;
+}
+/** Well-known dangerous permissions grouped by category. */
+const DANGEROUS_PERMISSION_GROUPS = {
+    "Camera": ["android.permission.CAMERA"],
+    "Microphone": ["android.permission.RECORD_AUDIO"],
+    "Location": [
+        "android.permission.ACCESS_FINE_LOCATION",
+        "android.permission.ACCESS_COARSE_LOCATION",
+        "android.permission.ACCESS_BACKGROUND_LOCATION",
+    ],
+    "Storage": [
+        "android.permission.READ_EXTERNAL_STORAGE",
+        "android.permission.WRITE_EXTERNAL_STORAGE",
+        "android.permission.READ_MEDIA_IMAGES",
+        "android.permission.READ_MEDIA_VIDEO",
+        "android.permission.READ_MEDIA_AUDIO",
+        "android.permission.MANAGE_EXTERNAL_STORAGE",
+    ],
+    "Contacts": [
+        "android.permission.READ_CONTACTS",
+        "android.permission.WRITE_CONTACTS",
+        "android.permission.GET_ACCOUNTS",
+    ],
+    "Phone": [
+        "android.permission.READ_PHONE_STATE",
+        "android.permission.READ_PHONE_NUMBERS",
+        "android.permission.CALL_PHONE",
+        "android.permission.READ_CALL_LOG",
+        "android.permission.WRITE_CALL_LOG",
+    ],
+    "SMS": [
+        "android.permission.SEND_SMS",
+        "android.permission.RECEIVE_SMS",
+        "android.permission.READ_SMS",
+    ],
+    "Calendar": [
+        "android.permission.READ_CALENDAR",
+        "android.permission.WRITE_CALENDAR",
+    ],
+    "Body Sensors": [
+        "android.permission.BODY_SENSORS",
+        "android.permission.BODY_SENSORS_BACKGROUND",
+    ],
+    "Nearby Devices": [
+        "android.permission.BLUETOOTH_CONNECT",
+        "android.permission.BLUETOOTH_SCAN",
+        "android.permission.BLUETOOTH_ADVERTISE",
+        "android.permission.NEARBY_WIFI_DEVICES",
+        "android.permission.UWB_RANGING",
+    ],
+    "Notifications": ["android.permission.POST_NOTIFICATIONS"],
+};
+export function registerSelinuxAuditTools(ctx) {
+    ctx.server.tool("adb_selinux_status", "Check SELinux enforcement mode, policy version, and recent denial count. Shows whether the device is in Enforcing, Permissive, or Disabled mode. Root access provides additional policy details from dmesg audit logs.", {
+        device: z.string().optional().describe("Device serial"),
+    }, async ({ device }) => {
+        try {
+            const resolved = await ctx.deviceManager.resolveDevice(device);
+            const serial = resolved.serial;
+            const sections = [];
+            sections.push("=== SELinux Status ===");
+            // Get SELinux mode via getenforce
+            const enforceResult = await ctx.bridge.shell("getenforce", {
+                device: serial, ignoreExitCode: true,
+            });
+            const mode = enforceResult.stdout.trim() || "unknown";
+            sections.push(`Mode: ${mode}`);
+            // Get SELinux context of the shell
+            const contextResult = await ctx.bridge.shell("id -Z 2>/dev/null || echo 'unavailable'", {
+                device: serial, ignoreExitCode: true,
+            });
+            const context = contextResult.stdout.trim();
+            if (context && context !== "unavailable") {
+                sections.push(`Shell context: ${context}`);
+            }
+            // SELinux-related properties
+            const props = await ctx.deviceManager.getDeviceProps(serial);
+            const selinuxProps = [
+                "ro.build.selinux",
+                "ro.boot.selinux",
+                "selinux.reload_policy",
+            ];
+            for (const prop of selinuxProps) {
+                const val = props[prop];
+                if (val)
+                    sections.push(`${prop}: ${val}`);
+            }
+            // Try to get policy version and stats
+            const policyResult = await ctx.bridge.shell("cat /sys/fs/selinux/policyvers 2>/dev/null && echo '---' && cat /sys/fs/selinux/status 2>/dev/null", { device: serial, ignoreExitCode: true });
+            if (policyResult.stdout.includes("---")) {
+                const parts = policyResult.stdout.split("---");
+                const policyVer = parts[0].trim();
+                if (policyVer)
+                    sections.push(`Policy version: ${policyVer}`);
+            }
+            // Count recent denials from logcat (doesn't require root)
+            const denialResult = await ctx.bridge.shell("logcat -d -b events -t 500 | grep -c 'avc.*denied' 2>/dev/null || echo 0", { device: serial, ignoreExitCode: true });
+            const denialCount = parseInt(denialResult.stdout.trim(), 10) || 0;
+            sections.push(`\nRecent AVC denials (last 500 events): ${denialCount}`);
+            // Try root access for dmesg denials
+            let hasRoot = false;
+            try {
+                const rootResult = await ctx.bridge.shell("su -c 'dmesg | grep -c avc 2>/dev/null || echo 0'", {
+                    device: serial, timeout: 5000, ignoreExitCode: true,
+                });
+                if (rootResult.stdout.trim() && !rootResult.stdout.includes("Permission denied")) {
+                    hasRoot = true;
+                    const dmesgDenials = parseInt(rootResult.stdout.trim(), 10) || 0;
+                    sections.push(`Kernel AVC denials (dmesg): ${dmesgDenials}`);
+                }
+            }
+            catch { /* no root */ }
+            if (!hasRoot) {
+                sections.push("\nNote: Root access provides additional kernel audit log details.");
+            }
+            return { content: [{ type: "text", text: sections.join("\n") }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: OutputProcessor.formatError(error) }], isError: true };
+        }
+    });
+    ctx.server.tool("adb_selinux_denials", "List recent SELinux AVC denial messages from logcat and kernel logs. Shows which processes were blocked, what they tried to do, and the SELinux contexts involved. Useful for diagnosing permission issues and understanding security policy enforcement.", {
+        lines: z.number().min(1).max(1000).optional().default(50).describe("Max denial entries to return (1-1000, default 50)"),
+        process: z.string().optional().describe("Filter denials by process/source context name"),
+        device: z.string().optional().describe("Device serial"),
+    }, async ({ lines, process: processFilter, device }) => {
+        try {
+            const resolved = await ctx.deviceManager.resolveDevice(device);
+            const serial = resolved.serial;
+            if (processFilter) {
+                const filterErr = validateShellArg(processFilter, "process");
+                if (filterErr)
+                    return { content: [{ type: "text", text: filterErr }], isError: true };
+            }
+            const maxLines = Math.min(lines, 500);
+            const sections = [];
+            sections.push("=== SELinux AVC Denials ===\n");
+            // Logcat denials
+            const grepFilter = processFilter ? ` | grep -iF '${processFilter}'` : "";
+            const logcatResult = await ctx.bridge.shell(`logcat -d -b events,main -t 2000 | grep 'avc.*denied'${grepFilter} | tail -${maxLines}`, { device: serial, timeout: 15000, ignoreExitCode: true });
+            const logcatDenials = logcatResult.stdout.trim().split("\n").filter((l) => l.trim().length > 0);
+            if (logcatDenials.length > 0) {
+                sections.push(`Logcat denials (${logcatDenials.length}):\n`);
+                for (const denial of logcatDenials) {
+                    // Parse the AVC denial for readable output
+                    const scontextMatch = denial.match(/scontext=(\S+)/);
+                    const tcontextMatch = denial.match(/tcontext=(\S+)/);
+                    const tclassMatch = denial.match(/tclass=(\S+)/);
+                    const permMatch = denial.match(/\{\s*([^}]+)\s*\}/);
+                    if (scontextMatch && tcontextMatch) {
+                        const source = scontextMatch[1];
+                        const target = tcontextMatch[1];
+                        const tclass = tclassMatch ? tclassMatch[1] : "?";
+                        const perms = permMatch ? permMatch[1].trim() : "?";
+                        sections.push(`  ${perms} [${tclass}] ${source} → ${target}`);
+                    }
+                    else {
+                        // Raw line if parsing fails
+                        sections.push(`  ${denial.substring(0, 200)}`);
+                    }
+                }
+            }
+            else {
+                sections.push("No AVC denials found in logcat.");
+            }
+            // Try dmesg for kernel-level denials (root)
+            try {
+                const dmesgGrepFilter = processFilter ? ` | grep -iF "${processFilter}"` : "";
+                const dmesgResult = await ctx.bridge.shell(`su -c 'dmesg | grep "avc.*denied"${dmesgGrepFilter} | tail -20'`, { device: serial, timeout: 10000, ignoreExitCode: true });
+                const dmesgDenials = dmesgResult.stdout.trim().split("\n").filter((l) => l.includes("avc"));
+                if (dmesgDenials.length > 0) {
+                    sections.push(`\nKernel denials (${dmesgDenials.length}):\n`);
+                    for (const d of dmesgDenials.slice(0, 20)) {
+                        sections.push(`  ${d.substring(0, 200)}`);
+                    }
+                }
+            }
+            catch { /* no root — skip silently */ }
+            return { content: [{ type: "text", text: OutputProcessor.process(sections.join("\n")) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: OutputProcessor.formatError(error) }], isError: true };
+        }
+    });
+    ctx.server.tool("adb_permission_audit", "Audit runtime permission grants for a package. Lists all granted dangerous permissions grouped by category (Camera, Location, Phone, SMS, etc.) and flags potentially over-provisioned permissions. Compares grants against the dangerous permission manifest to identify unnecessary access.", {
+        packageName: z.string().describe("Package name to audit (e.g., 'com.example.app')"),
+        device: z.string().optional().describe("Device serial"),
+    }, async ({ packageName, device }) => {
+        try {
+            const pkgErr = validateShellArg(packageName, "packageName");
+            if (pkgErr)
+                return { content: [{ type: "text", text: pkgErr }], isError: true };
+            const resolved = await ctx.deviceManager.resolveDevice(device);
+            const serial = resolved.serial;
+            // Get permission state from dumpsys
+            const dumpResult = await ctx.bridge.shell(`dumpsys package ${packageName} | grep -A 200 'runtime permissions'`, { device: serial, timeout: 15000, ignoreExitCode: true });
+            if (!dumpResult.stdout || dumpResult.stdout.trim().length === 0) {
+                return { content: [{ type: "text", text: `Package "${packageName}" not found or has no runtime permissions section.` }], isError: true };
+            }
+            const grants = parsePermissions(dumpResult.stdout);
+            // Also get requested permissions from the manifest
+            const requestedResult = await ctx.bridge.shell(`dumpsys package ${packageName} | grep -A 500 'requested permissions:' | grep 'android.permission' | head -100`, { device: serial, timeout: 10000, ignoreExitCode: true });
+            const requestedPerms = requestedResult.stdout.split("\n")
+                .map((l) => l.trim())
+                .filter((l) => l.startsWith("android.permission."));
+            const sections = [];
+            sections.push(`=== Permission Audit: ${packageName} ===\n`);
+            const granted = grants.filter((g) => g.granted);
+            const denied = grants.filter((g) => !g.granted);
+            sections.push(`Runtime permissions: ${grants.length} total, ${granted.length} granted, ${denied.length} denied`);
+            if (requestedPerms.length > 0) {
+                sections.push(`Manifest-requested permissions: ${requestedPerms.length}`);
+            }
+            // Group granted permissions by category
+            sections.push(`\n--- Granted Dangerous Permissions ---`);
+            let dangerousGrantedCount = 0;
+            for (const [category, perms] of Object.entries(DANGEROUS_PERMISSION_GROUPS)) {
+                const grantedInCategory = granted.filter((g) => perms.includes(g.permission));
+                if (grantedInCategory.length > 0) {
+                    dangerousGrantedCount += grantedInCategory.length;
+                    sections.push(`\n[${category}]`);
+                    for (const g of grantedInCategory) {
+                        const flags = g.flags ? ` (${g.flags})` : "";
+                        sections.push(`  ✓ ${g.permission}${flags}`);
+                    }
+                }
+            }
+            // Show non-categorized grants
+            const allDangerousPerms = Object.values(DANGEROUS_PERMISSION_GROUPS).flat();
+            const uncategorizedGrants = granted.filter((g) => !allDangerousPerms.includes(g.permission));
+            if (uncategorizedGrants.length > 0) {
+                sections.push(`\n[Other Granted]`);
+                for (const g of uncategorizedGrants) {
+                    sections.push(`  ✓ ${g.permission}`);
+                }
+            }
+            if (dangerousGrantedCount === 0 && uncategorizedGrants.length === 0) {
+                sections.push("  (none)");
+            }
+            // Denied permissions
+            if (denied.length > 0) {
+                sections.push(`\n--- Denied Permissions (${denied.length}) ---`);
+                for (const d of denied) {
+                    sections.push(`  ✗ ${d.permission}`);
+                }
+            }
+            // Over-provisioning analysis
+            sections.push(`\n--- Analysis ---`);
+            sections.push(`Dangerous permissions granted: ${dangerousGrantedCount}`);
+            const highRisk = granted.filter((g) => g.permission.includes("BACKGROUND_LOCATION") ||
+                g.permission.includes("MANAGE_EXTERNAL_STORAGE") ||
+                g.permission.includes("BODY_SENSORS_BACKGROUND") ||
+                g.permission.includes("READ_CALL_LOG") ||
+                g.permission.includes("READ_SMS"));
+            if (highRisk.length > 0) {
+                sections.push(`\nHigh-sensitivity permissions granted:`);
+                for (const hr of highRisk) {
+                    sections.push(`  ⚠ ${hr.permission}`);
+                }
+            }
+            return { content: [{ type: "text", text: sections.join("\n") }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: OutputProcessor.formatError(error) }], isError: true };
+        }
+    });
+}
+//# sourceMappingURL=selinux-audit.js.map

package/build/tools/selinux-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selinux-audit.js","sourceRoot":"","sources":["../../src/tools/selinux-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAQ7D,SAAS,gBAAgB,CAAC,aAAqB;IAC7C,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,wEAAwE;QACxE,8CAA8C;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QACnG,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC;gBACV,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;gBACpB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;gBAC5B,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4DAA4D;AAC5D,MAAM,2BAA2B,GAA6B;IAC5D,QAAQ,EAAE,CAAC,2BAA2B,CAAC;IACvC,YAAY,EAAE,CAAC,iCAAiC,CAAC;IACjD,UAAU,EAAE;QACV,yCAAyC;QACzC,2CAA2C;QAC3C,+CAA+C;KAChD;IACD,SAAS,EAAE;QACT,0CAA0C;QAC1C,2CAA2C;QAC3C,sCAAsC;QACtC,qCAAqC;QACrC,qCAAqC;QACrC,4CAA4C;KAC7C;IACD,UAAU,EAAE;QACV,kCAAkC;QAClC,mCAAmC;QACnC,iCAAiC;KAClC;IACD,OAAO,EAAE;QACP,qCAAqC;QACrC,uCAAuC;QACvC,+BAA+B;QAC/B,kCAAkC;QAClC,mCAAmC;KACpC;IACD,KAAK,EAAE;QACL,6BAA6B;QAC7B,gCAAgC;QAChC,6BAA6B;KAC9B;IACD,UAAU,EAAE;QACV,kCAAkC;QAClC,mCAAmC;KACpC;IACD,cAAc,EAAE;QACd,iCAAiC;QACjC,4CAA4C;KAC7C;IACD,gBAAgB,EAAE;QAChB,sCAAsC;QACtC,mCAAmC;QACnC,wCAAwC;QACxC,wCAAwC;QACxC,gCAAgC;KACjC;IACD,eAAe,EAAE,CAAC,uCAAuC,CAAC;CAC3D,CAAC;AAEF,MAAM,UAAU,yBAAyB,CAAC,GAAgB;IAExD,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,oBAAoB,EACpB,wNAAwN,EACxN;QACE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;KACxD,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAE/B,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAExC,kCAAkC;YAClC,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE;gBACzD,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI;aACrC,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;YACtD,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAE/B,mCAAmC;YACnC,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;gBACtF,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI;aACrC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,OAAO,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;gBACzC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,OAAO,EAAE,CAAC,CAAC;YAC7C,CAAC;YAED,6BAA6B;YAC7B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG;gBACnB,kBAAkB;gBAClB,iBAAiB;gBACjB,uBAAuB;aACxB,CAAC;YACF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxB,IAAI,GAAG;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;YAC5C,CAAC;YAED,sCAAsC;YACtC,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CACzC,oGAAoG,EACpG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CACzC,CAAC;YACF,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxC,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAClC,IAAI,SAAS;oBAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,SAAS,EAAE,CAAC,CAAC;YAC/D,CAAC;YAED,0DAA0D;YAC1D,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CACzC,0EAA0E,EAC1E,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CACzC,CAAC;YACF,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAClE,QAAQ,CAAC,IAAI,CAAC,2CAA2C,WAAW,EAAE,CAAC,CAAC;YAExE,oCAAoC;YACpC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,EAAE;oBAC7F,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI;iBACpD,CAAC,CAAC;gBACH,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;oBACjF,OAAO,GAAG,IAAI,CAAC;oBACf,MAAM,YAAY,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;oBACjE,QAAQ,CAAC,IAAI,CAAC,+BAA+B,YAAY,EAAE,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC;YAEzB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,QAAQ,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;YACrF,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClG,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,qBAAqB,EACrB,2PAA2P,EAC3P;QACE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,mDAAmD,CAAC;QACvH,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;QACxF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;KACxD,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAE/B,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,gBAAgB,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBAC7D,IAAI,SAAS;oBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxF,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAE/C,iBAAiB;YACjB,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,CAAC,gBAAgB,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CACzC,wDAAwD,UAAU,YAAY,QAAQ,EAAE,EACxF,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CACzD,CAAC;YAEF,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAEhG,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,mBAAmB,aAAa,CAAC,MAAM,MAAM,CAAC,CAAC;gBAC7D,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;oBACnC,2CAA2C;oBAC3C,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBACrD,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBACrD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;oBACjD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;oBAEpD,IAAI,aAAa,IAAI,aAAa,EAAE,CAAC;wBACnC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;wBAChC,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;wBAChC,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;wBAClD,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;wBACpD,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,MAAM,KAAK,MAAM,MAAM,MAAM,EAAE,CAAC,CAAC;oBAChE,CAAC;yBAAM,CAAC;wBACN,4BAA4B;wBAC5B,QAAQ,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBACjD,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;YACnD,CAAC;YAED,4CAA4C;YAC5C,IAAI,CAAC;gBACH,MAAM,eAAe,GAAG,aAAa,CAAC,CAAC,CAAC,gBAAgB,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CACxC,oCAAoC,eAAe,cAAc,EACjE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CACzD,CAAC;gBACF,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC5F,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,QAAQ,CAAC,IAAI,CAAC,qBAAqB,YAAY,CAAC,MAAM,MAAM,CAAC,CAAC;oBAC9D,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;wBAC1C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;oBAC5C,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;YAEzC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClG,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,sBAAsB,EACtB,+RAA+R,EAC/R;QACE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,iDAAiD,CAAC;QACnF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;KACxD,EACD,KAAK,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YAC5D,IAAI,MAAM;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAEhF,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAE/B,oCAAoC;YACpC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CACvC,mBAAmB,WAAW,sCAAsC,EACpE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CACzD,CAAC;YAEF,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,WAAW,oDAAoD,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3I,CAAC;YAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAEnD,mDAAmD;YACnD,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAC5C,mBAAmB,WAAW,iFAAiF,EAC/G,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,CACzD,CAAC;YACF,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;iBACtD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;iBACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAEtD,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,yBAAyB,WAAW,QAAQ,CAAC,CAAC;YAE5D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAEhD,QAAQ,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,aAAa,MAAM,CAAC,MAAM,SAAS,CAAC,CAAC;YACjH,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,IAAI,CAAC,mCAAmC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;YAC5E,CAAC;YAED,wCAAwC;YACxC,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;YACzD,IAAI,qBAAqB,GAAG,CAAC,CAAC;YAE9B,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,CAAC;gBAC5E,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC9E,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACjC,qBAAqB,IAAI,iBAAiB,CAAC,MAAM,CAAC;oBAClD,QAAQ,CAAC,IAAI,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC;oBACjC,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;wBAClC,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,KAAK,EAAE,CAAC,CAAC;oBAC/C,CAAC;gBACH,CAAC;YACH,CAAC;YAED,8BAA8B;YAC9B,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5E,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAC7F,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;gBACnC,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;oBACpC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAED,IAAI,qBAAqB,KAAK,CAAC,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC5B,CAAC;YAED,qBAAqB;YACrB,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,QAAQ,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC;gBACjE,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAED,6BAA6B;YAC7B,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,kCAAkC,qBAAqB,EAAE,CAAC,CAAC;YAEzE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACpC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,qBAAqB,CAAC;gBAC5C,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,yBAAyB,CAAC;gBAChD,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,yBAAyB,CAAC;gBAChD,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;gBACtC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAClC,CAAC;YACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;gBACzD,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAC1B,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClG,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/tools/shell.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Shell Tools — Execute arbitrary shell commands on the device.
+ */
+import { ToolContext } from "../tool-context.js";
+export declare function registerShellTools(ctx: ToolContext): void;
+//# sourceMappingURL=shell.d.ts.map

package/build/tools/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAkEzD"}

package/build/tools/shell.js

@@ -0,0 +1,63 @@
+/**
+ * Shell Tools — Execute arbitrary shell commands on the device.
+ */
+import { z } from "zod";
+import { OutputProcessor } from "../middleware/output-processor.js";
+export function registerShellTools(ctx) {
+    ctx.server.tool("adb_shell", "Execute a shell command on the Android device. Returns stdout and stderr.", {
+        command: z.string().describe("Shell command to execute on the device"),
+        device: z.string().optional().describe("Device serial"),
+        timeout: z.number().min(1000).max(600000).optional().describe("Timeout in milliseconds (1s-10min)"),
+    }, async ({ command, device, timeout }) => {
+        try {
+            // Security check
+            const blocked = ctx.security.checkCommand(command, device);
+            if (blocked) {
+                return { content: [{ type: "text", text: blocked }], isError: true };
+            }
+            const resolved = await ctx.deviceManager.resolveDevice(device);
+            const result = await ctx.bridge.shell(command, {
+                device: resolved.serial,
+                timeout,
+                ignoreExitCode: true,
+            });
+            let output = result.stdout;
+            if (result.stderr) {
+                output += `\n--- STDERR ---\n${result.stderr}`;
+            }
+            if (result.exitCode !== 0) {
+                output += `\n--- Exit code: ${result.exitCode} ---`;
+            }
+            return { content: [{ type: "text", text: OutputProcessor.process(output) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: OutputProcessor.formatError(error) }], isError: true };
+        }
+    });
+    ctx.server.tool("adb_root_shell", "Execute a command as root via su. Requires rooted device.", {
+        command: z.string().describe("Command to run as root"),
+        device: z.string().optional().describe("Device serial"),
+    }, async ({ command, device }) => {
+        try {
+            // Security check (root commands get extra scrutiny)
+            const blocked = ctx.security.checkCommand(`su: ${command}`, device);
+            if (blocked) {
+                return { content: [{ type: "text", text: blocked }], isError: true };
+            }
+            const resolved = await ctx.deviceManager.resolveDevice(device);
+            const result = await ctx.bridge.rootShell(command, {
+                device: resolved.serial,
+                ignoreExitCode: true,
+            });
+            let output = result.stdout;
+            if (result.stderr) {
+                output += `\n--- STDERR ---\n${result.stderr}`;
+            }
+            return { content: [{ type: "text", text: OutputProcessor.process(output) }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: OutputProcessor.formatError(error) }], isError: true };
+        }
+    });
+}
+//# sourceMappingURL=shell.js.map

package/build/tools/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/tools/shell.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE,MAAM,UAAU,kBAAkB,CAAC,GAAgB;IAEjD,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,WAAW,EACX,2EAA2E,EAC3E;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;QACvD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;KACpG,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE;QACrC,IAAI,CAAC;YACH,iBAAiB;YACjB,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3D,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACvE,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;gBAC7C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO;gBACP,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,IAAI,qBAAqB,MAAM,CAAC,MAAM,EAAE,CAAC;YACjD,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,oBAAoB,MAAM,CAAC,QAAQ,MAAM,CAAC;YACtD,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClG,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,gBAAgB,EAChB,2DAA2D,EAC3D;QACE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;KACxD,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5B,IAAI,CAAC;YACH,oDAAoD;YACpD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;YACpE,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACvE,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE;gBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;YACH,IAAI,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,IAAI,qBAAqB,MAAM,CAAC,MAAM,EAAE,CAAC;YACjD,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClG,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/build/tools/snapshot.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Snapshot Tools — Save and compare device state for reproducible testing.
+ *
+ * Captures a comprehensive device state snapshot (packages, settings, properties)
+ * and can compare the current state against a saved snapshot to detect drift.
+ */
+import { ToolContext } from "../tool-context.js";
+export declare function registerSnapshotTools(ctx: ToolContext): void;
+//# sourceMappingURL=snapshot.d.ts.map

package/build/tools/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../src/tools/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAejD,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI,CAsM5D"}

package/build/tools/snapshot.js

@@ -0,0 +1,192 @@
+/**
+ * Snapshot Tools — Save and compare device state for reproducible testing.
+ *
+ * Captures a comprehensive device state snapshot (packages, settings, properties)
+ * and can compare the current state against a saved snapshot to detect drift.
+ */
+import { z } from "zod";
+import { join } from "path";
+import { mkdirSync, writeFileSync, readFileSync, existsSync } from "fs";
+import { OutputProcessor } from "../middleware/output-processor.js";
+import { validateShellArgs } from "../middleware/sanitize.js";
+export function registerSnapshotTools(ctx) {
+    ctx.server.tool("adb_snapshot_capture", "Capture a comprehensive device state snapshot: installed packages, key settings, and system properties. Saves to a JSON file.", {
+        name: z.string().optional().describe("Snapshot name (default: auto-generated timestamp)"),
+        device: z.string().optional().describe("Device serial"),
+    }, async ({ name, device }) => {
+        try {
+            const resolved = await ctx.deviceManager.resolveDevice(device);
+            const serial = resolved.serial;
+            // Gather state in parallel
+            const [pkgResult, globalResult, secureResult, systemResult, propResult] = await Promise.allSettled([
+                ctx.bridge.shell("pm list packages -3", { device: serial }),
+                ctx.bridge.shell("settings list global", { device: serial }),
+                ctx.bridge.shell("settings list secure", { device: serial }),
+                ctx.bridge.shell("settings list system", { device: serial }),
+                ctx.bridge.shell("getprop", { device: serial }),
+            ]);
+            const parsePackages = (r) => {
+                if (r.status !== "fulfilled")
+                    return [];
+                return r.value.stdout.split("\n")
+                    .map((l) => l.replace("package:", "").trim())
+                    .filter((l) => l.length > 0).sort();
+            };
+            const parseSettings = (r) => {
+                if (r.status !== "fulfilled")
+                    return {};
+                const map = {};
+                for (const line of r.value.stdout.split("\n")) {
+                    const idx = line.indexOf("=");
+                    if (idx > 0)
+                        map[line.substring(0, idx)] = line.substring(idx + 1).trim();
+                }
+                return map;
+            };
+            const parseProps = (r) => {
+                if (r.status !== "fulfilled")
+                    return {};
+                const map = {};
+                for (const line of r.value.stdout.split("\n")) {
+                    const match = line.trim().match(/^\[(.+?)\]: \[(.*)?\]$/);
+                    if (match)
+                        map[match[1]] = match[2] ?? "";
+                }
+                return map;
+            };
+            const props = parseProps(propResult);
+            const snapshot = {
+                timestamp: new Date().toISOString(),
+                device: serial,
+                model: props["ro.product.model"] ?? "unknown",
+                androidVersion: props["ro.build.version.release"] ?? "unknown",
+                sdkLevel: props["ro.build.version.sdk"] ?? "unknown",
+                packages: parsePackages(pkgResult),
+                settings: {
+                    global: parseSettings(globalResult),
+                    secure: parseSettings(secureResult),
+                    system: parseSettings(systemResult),
+                },
+                properties: props,
+            };
+            const safeName = (name ?? `snapshot_${Date.now()}`).replace(/[^a-zA-Z0-9_-]/g, "_");
+            const filePath = join(ctx.config.tempDir, "snapshots", `${safeName}.json`);
+            const dir = join(ctx.config.tempDir, "snapshots");
+            if (!existsSync(dir)) {
+                mkdirSync(dir, { recursive: true });
+            }
+            writeFileSync(filePath, JSON.stringify(snapshot, null, 2));
+            return {
+                content: [{
+                        type: "text",
+                        text: `Snapshot captured: ${filePath}\nDevice: ${snapshot.model} (Android ${snapshot.androidVersion})\nPackages: ${snapshot.packages.length}\nSettings: ${Object.keys(snapshot.settings.global).length} global, ${Object.keys(snapshot.settings.secure).length} secure, ${Object.keys(snapshot.settings.system).length} system\nProperties: ${Object.keys(snapshot.properties).length}`,
+                    }],
+            };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: OutputProcessor.formatError(error) }], isError: true };
+        }
+    });
+    ctx.server.tool("adb_snapshot_compare", "Compare current device state against a saved snapshot. Shows added/removed packages, changed settings, and property differences.", {
+        snapshotPath: z.string().describe("Path to the saved snapshot JSON file"),
+        device: z.string().optional().describe("Device serial"),
+    }, async ({ snapshotPath, device }) => {
+        try {
+            if (!existsSync(snapshotPath)) {
+                return { content: [{ type: "text", text: `Snapshot file not found: ${snapshotPath}` }], isError: true };
+            }
+            const saved = JSON.parse(readFileSync(snapshotPath, "utf-8"));
+            const resolved = await ctx.deviceManager.resolveDevice(device);
+            const serial = resolved.serial;
+            // Get current packages
+            const pkgResult = await ctx.bridge.shell("pm list packages -3", { device: serial });
+            const currentPkgs = pkgResult.stdout.split("\n")
+                .map((l) => l.replace("package:", "").trim())
+                .filter((l) => l.length > 0).sort();
+            const added = currentPkgs.filter((p) => !saved.packages.includes(p));
+            const removed = saved.packages.filter((p) => !currentPkgs.includes(p));
+            // Compare key settings
+            const settingsChanges = [];
+            for (const ns of ["global", "secure"]) {
+                const savedNs = saved.settings[ns];
+                const currentResult = await ctx.bridge.shell(`settings list ${ns}`, { device: serial });
+                const currentNs = {};
+                for (const line of currentResult.stdout.split("\n")) {
+                    const idx = line.indexOf("=");
+                    if (idx > 0)
+                        currentNs[line.substring(0, idx)] = line.substring(idx + 1).trim();
+                }
+                for (const [key, val] of Object.entries(savedNs)) {
+                    if (currentNs[key] !== undefined && currentNs[key] !== val) {
+                        settingsChanges.push(`${ns}/${key}: "${val}" → "${currentNs[key]}"`);
+                    }
+                }
+            }
+            const sections = [];
+            sections.push(`Comparing against: ${saved.timestamp}`);
+            sections.push(`Snapshot device: ${saved.model} (Android ${saved.androidVersion})`);
+            if (added.length === 0 && removed.length === 0 && settingsChanges.length === 0) {
+                sections.push("\nNo differences detected.");
+            }
+            else {
+                if (added.length > 0)
+                    sections.push(`\nPackages added (+${added.length}):\n  ${added.join("\n  ")}`);
+                if (removed.length > 0)
+                    sections.push(`\nPackages removed (-${removed.length}):\n  ${removed.join("\n  ")}`);
+                if (settingsChanges.length > 0)
+                    sections.push(`\nSettings changed (${settingsChanges.length}):\n  ${settingsChanges.join("\n  ")}`);
+            }
+            return { content: [{ type: "text", text: sections.join("\n") }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: OutputProcessor.formatError(error) }], isError: true };
+        }
+    });
+    ctx.server.tool("adb_snapshot_restore_settings", "Restore settings from a saved snapshot to the current device. Only restores global and secure settings — does not install/uninstall packages.", {
+        snapshotPath: z.string().describe("Path to the saved snapshot JSON file"),
+        namespace: z.enum(["global", "secure", "both"]).optional().default("both")
+            .describe("Which settings namespace to restore"),
+        device: z.string().optional().describe("Device serial"),
+    }, async ({ snapshotPath, namespace, device }) => {
+        try {
+            if (!existsSync(snapshotPath)) {
+                return { content: [{ type: "text", text: `Snapshot file not found: ${snapshotPath}` }], isError: true };
+            }
+            const saved = JSON.parse(readFileSync(snapshotPath, "utf-8"));
+            const resolved = await ctx.deviceManager.resolveDevice(device);
+            const serial = resolved.serial;
+            const namespaces = namespace === "both" ? ["global", "secure"] : [namespace];
+            let restored = 0;
+            const errors = [];
+            for (const ns of namespaces) {
+                const savedSettings = saved.settings[ns];
+                for (const [key, value] of Object.entries(savedSettings)) {
+                    try {
+                        // Validate deserialized JSON values before shell interpolation
+                        const argErr = validateShellArgs([[key, "setting key"], [value, "setting value"]]);
+                        if (argErr) {
+                            errors.push(`${ns}/${key}: skipped — ${argErr}`);
+                            continue;
+                        }
+                        await ctx.bridge.shell(`settings put ${ns} ${key} ${value}`, { device: serial });
+                        restored++;
+                    }
+                    catch (err) {
+                        errors.push(`${ns}/${key}: ${err instanceof Error ? err.message : err}`);
+                    }
+                }
+            }
+            let output = `Restored ${restored} settings from snapshot (${saved.timestamp})`;
+            if (errors.length > 0) {
+                output += `\n${errors.length} errors:\n  ${errors.slice(0, 10).join("\n  ")}`;
+                if (errors.length > 10)
+                    output += `\n  ... and ${errors.length - 10} more`;
+            }
+            return { content: [{ type: "text", text: output }] };
+        }
+        catch (error) {
+            return { content: [{ type: "text", text: OutputProcessor.formatError(error) }], isError: true };
+        }
+    });
+}
+//# sourceMappingURL=snapshot.js.map

package/build/tools/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/tools/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAExE,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAa9D,MAAM,UAAU,qBAAqB,CAAC,GAAgB;IAEpD,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,sBAAsB,EACtB,+HAA+H,EAC/H;QACE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mDAAmD,CAAC;QACzF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;KACxD,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAE/B,2BAA2B;YAC3B,MAAM,CAAC,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACjG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC3D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBAC5D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;aAChD,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,CAAC,CAA2C,EAAY,EAAE;gBAC9E,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;oBAAE,OAAO,EAAE,CAAC;gBACxC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;qBAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;qBAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,CAAC,CAAC;YAEF,MAAM,aAAa,GAAG,CAAC,CAA2C,EAA0B,EAAE;gBAC5F,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;oBAAE,OAAO,EAAE,CAAC;gBACxC,MAAM,GAAG,GAA2B,EAAE,CAAC;gBACvC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC9B,IAAI,GAAG,GAAG,CAAC;wBAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5E,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;YAEF,MAAM,UAAU,GAAG,CAAC,CAA2C,EAA0B,EAAE;gBACzF,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW;oBAAE,OAAO,EAAE,CAAC;gBACxC,MAAM,GAAG,GAA2B,EAAE,CAAC;gBACvC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;oBAC1D,IAAI,KAAK;wBAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5C,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC;YAEF,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAmB;gBAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,KAAK,CAAC,kBAAkB,CAAC,IAAI,SAAS;gBAC7C,cAAc,EAAE,KAAK,CAAC,0BAA0B,CAAC,IAAI,SAAS;gBAC9D,QAAQ,EAAE,KAAK,CAAC,sBAAsB,CAAC,IAAI,SAAS;gBACpD,QAAQ,EAAE,aAAa,CAAC,SAAS,CAAC;gBAClC,QAAQ,EAAE;oBACR,MAAM,EAAE,aAAa,CAAC,YAAY,CAAC;oBACnC,MAAM,EAAE,aAAa,CAAC,YAAY,CAAC;oBACnC,MAAM,EAAE,aAAa,CAAC,YAAY,CAAC;iBACpC;gBACD,UAAU,EAAE,KAAK;aAClB,CAAC;YAEF,MAAM,QAAQ,GAAG,CAAC,IAAI,IAAI,YAAY,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;YAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAClD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtC,CAAC;YACD,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAE3D,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,sBAAsB,QAAQ,aAAa,QAAQ,CAAC,KAAK,aAAa,QAAQ,CAAC,cAAc,gBAAgB,QAAQ,CAAC,QAAQ,CAAC,MAAM,eAAe,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,YAAY,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,YAAY,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,wBAAwB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE;qBACxX,CAAC;aACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClG,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,sBAAsB,EACtB,kIAAkI,EAClI;QACE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACzE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;KACxD,EACD,KAAK,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,YAAY,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC1G,CAAC;YACD,MAAM,KAAK,GAAmB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAE/B,uBAAuB;YACvB,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpF,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;iBAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;iBAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAEtC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAEvE,uBAAuB;YACvB,MAAM,eAAe,GAAa,EAAE,CAAC;YACrC,KAAK,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAU,EAAE,CAAC;gBAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACnC,MAAM,aAAa,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxF,MAAM,SAAS,GAA2B,EAAE,CAAC;gBAC7C,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBAC9B,IAAI,GAAG,GAAG,CAAC;wBAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAClF,CAAC;gBACD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;wBAC3D,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,MAAM,GAAG,QAAQ,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACvE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;YACvD,QAAQ,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,KAAK,aAAa,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;YAEnF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/E,QAAQ,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,MAAM,SAAS,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACrG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,MAAM,SAAS,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC7G,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,uBAAuB,eAAe,CAAC,MAAM,SAAS,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtI,CAAC;YAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClG,CAAC;IACH,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,IAAI,CACb,+BAA+B,EAC/B,+IAA+I,EAC/I;QACE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;QACzE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;aACvE,QAAQ,CAAC,qCAAqC,CAAC;QAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;KACxD,EACD,KAAK,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5C,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,YAAY,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC1G,CAAC;YACD,MAAM,KAAK,GAAmB,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAE/B,MAAM,UAAU,GAAG,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAU,CAAC;YAC/F,IAAI,QAAQ,GAAG,CAAC,CAAC;YACjB,MAAM,MAAM,GAAa,EAAE,CAAC;YAE5B,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC5B,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;oBACzD,IAAI,CAAC;wBACH,+DAA+D;wBAC/D,MAAM,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;wBACnF,IAAI,MAAM,EAAE,CAAC;4BACX,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,eAAe,MAAM,EAAE,CAAC,CAAC;4BACjD,SAAS;wBACX,CAAC;wBACD,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,GAAG,IAAI,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;wBACjF,QAAQ,EAAE,CAAC;oBACb,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;oBAC3E,CAAC;gBACH,CAAC;YACH,CAAC;YAED,IAAI,MAAM,GAAG,YAAY,QAAQ,4BAA4B,KAAK,CAAC,SAAS,GAAG,CAAC;YAChF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,MAAM,CAAC,MAAM,eAAe,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9E,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;oBAAE,MAAM,IAAI,eAAe,MAAM,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC;YAC7E,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAClG,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}