nox-openclaw-hunter 1.0.0

package/dist/commands/export.js

@@ -0,0 +1,616 @@
+/**
+ * Export command - generate MDM deployment scripts.
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import chalk from 'chalk';
+import ora from 'ora';
+import { printBanner, EXIT_CODES } from '../branding.js';
+import { logger, setLogLevel } from '../utils/logger.js';
+import { printStatus } from '../reporter/index.js';
+/**
+ * Validate MDM platform option.
+ */
+function validatePlatform(platform) {
+    return ['jamf', 'intune', 'jumpcloud'].includes(platform.toLowerCase());
+}
+/**
+ * Validate script mode option.
+ */
+function validateMode(mode) {
+    return ['detect', 'purge'].includes(mode.toLowerCase());
+}
+/**
+ * Generate detection shell script for Unix-like systems.
+ */
+function generateDetectShellScript(webhookUrl, webhookToken) {
+    const webhookSection = webhookUrl
+        ? `
+# Webhook configuration
+WEBHOOK_URL="${webhookUrl}"
+${webhookToken ? `WEBHOOK_TOKEN="${webhookToken}"` : ''}
+
+send_webhook() {
+  local status="$1"
+  local details="$2"
+  local payload="{\\"event\\":\\"openclaw.detection\\",\\"status\\":\\"$status\\",\\"hostname\\":\\"$(hostname)\\",\\"details\\":\\"$details\\"}"
+  
+  curl -s -X POST "$WEBHOOK_URL" \\
+    -H "Content-Type: application/json" \\
+    ${webhookToken ? '-H "Authorization: Bearer $WEBHOOK_TOKEN"' : ''} \\
+    -d "$payload" > /dev/null 2>&1 || true
+}
+`
+        : '';
+    return `#!/bin/bash
+# Nox OpenClaw Detection Script
+# Generated by nox-openclaw-detector
+# https://nox.security
+
+set -euo pipefail
+
+OPENCLAW_FOUND=0
+DETAILS=""
+${webhookSection}
+# Check if nox CLI is installed
+if command -v nox &>/dev/null; then
+    if nox scan --quiet --json > /tmp/nox_scan_result.json 2>/dev/null; then
+        SUMMARY=$(cat /tmp/nox_scan_result.json | grep -o '"summary":"[^"]*"' | cut -d'"' -f4 || echo "")
+        if [[ "$SUMMARY" != "not-installed" ]]; then
+            OPENCLAW_FOUND=1
+            DETAILS="Detected via nox CLI: $SUMMARY"
+        fi
+        rm -f /tmp/nox_scan_result.json
+    fi
+    ${webhookUrl ? 'send_webhook "$([[ $OPENCLAW_FOUND -eq 1 ]] && echo "detected" || echo "clean")" "$DETAILS"' : ''}
+    exit $OPENCLAW_FOUND
+fi
+
+# Fallback: direct detection
+
+# Check CLI binary
+for cli_path in /usr/local/bin/openclaw /opt/homebrew/bin/openclaw /usr/bin/openclaw; do
+    if [[ -f "$cli_path" ]]; then
+        OPENCLAW_FOUND=1
+        DETAILS="CLI found at $cli_path"
+        break
+    fi
+done
+
+# Check config directory
+if [[ -d "$HOME/.openclaw" ]] || [[ -d "/Users/*/.openclaw" ]]; then
+    OPENCLAW_FOUND=1
+    DETAILS="$DETAILS; Config directory found"
+fi
+
+# Check macOS app bundle
+if [[ -d "/Applications/OpenClaw.app" ]]; then
+    OPENCLAW_FOUND=1
+    DETAILS="$DETAILS; App bundle found"
+fi
+
+# Check gateway port
+if command -v nc &>/dev/null && nc -z localhost 18789 2>/dev/null; then
+    OPENCLAW_FOUND=1
+    DETAILS="$DETAILS; Gateway port 18789 listening"
+fi
+
+# Check running processes
+if pgrep -x "openclaw" > /dev/null 2>&1 || pgrep -f "openclaw" > /dev/null 2>&1; then
+    OPENCLAW_FOUND=1
+    DETAILS="$DETAILS; Process running"
+fi
+${webhookUrl ? '\nsend_webhook "$([[ $OPENCLAW_FOUND -eq 1 ]] && echo "detected" || echo "clean")" "$DETAILS"' : ''}
+
+exit $OPENCLAW_FOUND
+`;
+}
+/**
+ * Generate detection PowerShell script for Windows.
+ */
+function generateDetectPowerShellScript(webhookUrl, webhookToken) {
+    const webhookSection = webhookUrl
+        ? `
+# Webhook configuration
+$WebhookUrl = "${webhookUrl}"
+${webhookToken ? `$WebhookToken = "${webhookToken}"` : ''}
+
+function Send-Webhook {
+    param([string]$Status, [string]$Details)
+    $payload = @{
+        event = "openclaw.detection"
+        status = $Status
+        hostname = $env:COMPUTERNAME
+        details = $Details
+    } | ConvertTo-Json
+    
+    try {
+        $headers = @{ "Content-Type" = "application/json" }
+        ${webhookToken ? '$headers["Authorization"] = "Bearer $WebhookToken"' : ''}
+        Invoke-RestMethod -Uri $WebhookUrl -Method Post -Headers $headers -Body $payload -ErrorAction SilentlyContinue
+    } catch {}
+}
+`
+        : '';
+    return `# Nox OpenClaw Detection Script (PowerShell)
+# Generated by nox-openclaw-detector
+# https://nox.security
+
+$ErrorActionPreference = "SilentlyContinue"
+$OpenClawFound = $false
+$Details = @()
+${webhookSection}
+# Check common installation paths
+$CliPaths = @(
+    "$env:LOCALAPPDATA\\Programs\\openclaw\\openclaw.exe",
+    "$env:ProgramFiles\\OpenClaw\\openclaw.exe",
+    "$env:ProgramFiles(x86)\\OpenClaw\\openclaw.exe"
+)
+
+foreach ($path in $CliPaths) {
+    if (Test-Path $path) {
+        $OpenClawFound = $true
+        $Details += "CLI found at $path"
+        break
+    }
+}
+
+# Check config directory
+$ConfigPaths = @(
+    "$env:USERPROFILE\\.openclaw",
+    "$env:APPDATA\\OpenClaw"
+)
+
+foreach ($path in $ConfigPaths) {
+    if (Test-Path $path) {
+        $OpenClawFound = $true
+        $Details += "Config directory found at $path"
+    }
+}
+
+# Check running processes
+$processes = Get-Process -Name "*openclaw*" -ErrorAction SilentlyContinue
+if ($processes) {
+    $OpenClawFound = $true
+    $Details += "Process running: $($processes.Name -join ', ')"
+}
+
+# Check gateway port
+$portCheck = Test-NetConnection -ComputerName localhost -Port 18789 -WarningAction SilentlyContinue -ErrorAction SilentlyContinue
+if ($portCheck.TcpTestSucceeded) {
+    $OpenClawFound = $true
+    $Details += "Gateway port 18789 listening"
+}
+
+# Check Windows service
+$service = Get-Service -Name "*openclaw*" -ErrorAction SilentlyContinue
+if ($service) {
+    $OpenClawFound = $true
+    $Details += "Service found: $($service.Name) ($($service.Status))"
+}
+
+$DetailsString = $Details -join "; "
+${webhookUrl ? '\nSend-Webhook -Status $(if ($OpenClawFound) { "detected" } else { "clean" }) -Details $DetailsString' : ''}
+
+if ($OpenClawFound) {
+    Write-Host "OpenClaw DETECTED: $DetailsString"
+    exit 1
+} else {
+    Write-Host "OpenClaw not detected"
+    exit 0
+}
+`;
+}
+/**
+ * Generate purge shell script for Unix-like systems.
+ */
+function generatePurgeShellScript(webhookUrl, webhookToken) {
+    const webhookSection = webhookUrl
+        ? `
+# Webhook configuration
+WEBHOOK_URL="${webhookUrl}"
+${webhookToken ? `WEBHOOK_TOKEN="${webhookToken}"` : ''}
+
+send_webhook() {
+  local status="$1"
+  local details="$2"
+  local payload="{\\"event\\":\\"openclaw.purge\\",\\"status\\":\\"$status\\",\\"hostname\\":\\"$(hostname)\\",\\"details\\":\\"$details\\"}"
+  
+  curl -s -X POST "$WEBHOOK_URL" \\
+    -H "Content-Type: application/json" \\
+    ${webhookToken ? '-H "Authorization: Bearer $WEBHOOK_TOKEN"' : ''} \\
+    -d "$payload" > /dev/null 2>&1 || true
+}
+`
+        : '';
+    return `#!/bin/bash
+# Nox OpenClaw Purge Script
+# Generated by nox-openclaw-detector
+# https://nox.security
+#
+# WARNING: This script will remove OpenClaw installations!
+# Run with sudo for full purge capabilities.
+
+set -euo pipefail
+
+PURGE_RESULTS=""
+${webhookSection}
+log_action() {
+    echo "[$(date '+%Y-%m-%d %H:%M:%S')] $1"
+    PURGE_RESULTS="$PURGE_RESULTS; $1"
+}
+
+# Check if running as root
+if [[ $EUID -ne 0 ]]; then
+    echo "Warning: Not running as root. Some actions may fail."
+fi
+
+# Kill running processes
+log_action "Killing OpenClaw processes..."
+pkill -9 -f "openclaw" 2>/dev/null || log_action "No processes to kill"
+
+# Stop and disable launchd service (macOS)
+if [[ "$(uname)" == "Darwin" ]]; then
+    for plist in ~/Library/LaunchAgents/bot.molt.* /Library/LaunchAgents/bot.molt.* /Library/LaunchDaemons/bot.molt.*; do
+        if [[ -f "$plist" ]]; then
+            launchctl unload "$plist" 2>/dev/null || true
+            rm -f "$plist"
+            log_action "Removed launchd plist: $plist"
+        fi
+    done
+fi
+
+# Stop and disable systemd service (Linux)
+if command -v systemctl &>/dev/null; then
+    systemctl stop openclaw.service 2>/dev/null || true
+    systemctl disable openclaw.service 2>/dev/null || true
+    rm -f /etc/systemd/system/openclaw.service 2>/dev/null || true
+    systemctl daemon-reload 2>/dev/null || true
+    log_action "Stopped and disabled systemd service"
+fi
+
+# Remove CLI binary
+for cli_path in /usr/local/bin/openclaw /opt/homebrew/bin/openclaw /usr/bin/openclaw; do
+    if [[ -f "$cli_path" ]]; then
+        rm -f "$cli_path"
+        log_action "Removed CLI: $cli_path"
+    fi
+done
+
+# Remove macOS app bundle
+if [[ -d "/Applications/OpenClaw.app" ]]; then
+    rm -rf "/Applications/OpenClaw.app"
+    log_action "Removed app bundle: /Applications/OpenClaw.app"
+fi
+
+# Remove config directories
+for config_dir in ~/.openclaw /Users/*/.openclaw; do
+    if [[ -d "$config_dir" ]]; then
+        rm -rf "$config_dir"
+        log_action "Removed config: $config_dir"
+    fi
+done
+
+# Remove Docker containers and images
+if command -v docker &>/dev/null; then
+    docker ps -a --filter "name=openclaw" --format "{{.ID}}" | xargs -r docker rm -f 2>/dev/null || true
+    docker images --filter "reference=*openclaw*" --format "{{.ID}}" | xargs -r docker rmi -f 2>/dev/null || true
+    log_action "Cleaned Docker artifacts"
+fi
+
+log_action "Purge complete"
+${webhookUrl ? '\nsend_webhook "purged" "$PURGE_RESULTS"' : ''}
+
+echo "Purge complete. Results: $PURGE_RESULTS"
+exit 0
+`;
+}
+/**
+ * Generate purge PowerShell script for Windows.
+ */
+function generatePurgePowerShellScript(webhookUrl, webhookToken) {
+    const webhookSection = webhookUrl
+        ? `
+# Webhook configuration
+$WebhookUrl = "${webhookUrl}"
+${webhookToken ? `$WebhookToken = "${webhookToken}"` : ''}
+
+function Send-Webhook {
+    param([string]$Status, [string]$Details)
+    $payload = @{
+        event = "openclaw.purge"
+        status = $Status
+        hostname = $env:COMPUTERNAME
+        details = $Details
+    } | ConvertTo-Json
+    
+    try {
+        $headers = @{ "Content-Type" = "application/json" }
+        ${webhookToken ? '$headers["Authorization"] = "Bearer $WebhookToken"' : ''}
+        Invoke-RestMethod -Uri $WebhookUrl -Method Post -Headers $headers -Body $payload -ErrorAction SilentlyContinue
+    } catch {}
+}
+`
+        : '';
+    return `# Nox OpenClaw Purge Script (PowerShell)
+# Generated by nox-openclaw-detector
+# https://nox.security
+#
+# WARNING: This script will remove OpenClaw installations!
+# Run as Administrator for full purge capabilities.
+
+#Requires -RunAsAdministrator
+
+$ErrorActionPreference = "SilentlyContinue"
+$PurgeResults = @()
+${webhookSection}
+function Log-Action {
+    param([string]$Message)
+    Write-Host "[$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')] $Message"
+    $script:PurgeResults += $Message
+}
+
+# Kill running processes
+Log-Action "Killing OpenClaw processes..."
+Get-Process -Name "*openclaw*" | Stop-Process -Force -ErrorAction SilentlyContinue
+Log-Action "Processes terminated"
+
+# Stop and remove Windows service
+$service = Get-Service -Name "*openclaw*" -ErrorAction SilentlyContinue
+if ($service) {
+    Stop-Service -Name $service.Name -Force -ErrorAction SilentlyContinue
+    sc.exe delete $service.Name 2>$null
+    Log-Action "Stopped and removed service: $($service.Name)"
+}
+
+# Remove CLI binaries
+$CliPaths = @(
+    "$env:LOCALAPPDATA\\Programs\\openclaw",
+    "$env:ProgramFiles\\OpenClaw",
+    "$env:ProgramFiles(x86)\\OpenClaw"
+)
+
+foreach ($path in $CliPaths) {
+    if (Test-Path $path) {
+        Remove-Item -Path $path -Recurse -Force -ErrorAction SilentlyContinue
+        Log-Action "Removed: $path"
+    }
+}
+
+# Remove config directories
+$ConfigPaths = @(
+    "$env:USERPROFILE\\.openclaw",
+    "$env:APPDATA\\OpenClaw"
+)
+
+foreach ($path in $ConfigPaths) {
+    if (Test-Path $path) {
+        Remove-Item -Path $path -Recurse -Force -ErrorAction SilentlyContinue
+        Log-Action "Removed config: $path"
+    }
+}
+
+# Remove scheduled tasks
+Get-ScheduledTask -TaskName "*openclaw*" | Unregister-ScheduledTask -Confirm:$false -ErrorAction SilentlyContinue
+Log-Action "Removed scheduled tasks"
+
+# Clean Docker (if installed)
+if (Get-Command docker -ErrorAction SilentlyContinue) {
+    docker ps -a --filter "name=openclaw" --format "{{.ID}}" | ForEach-Object { docker rm -f $_ 2>$null }
+    docker images --filter "reference=*openclaw*" --format "{{.ID}}" | ForEach-Object { docker rmi -f $_ 2>$null }
+    Log-Action "Cleaned Docker artifacts"
+}
+
+$ResultsString = $PurgeResults -join "; "
+${webhookUrl ? '\nSend-Webhook -Status "purged" -Details $ResultsString' : ''}
+
+Write-Host ""
+Write-Host "Purge complete. Results: $ResultsString"
+exit 0
+`;
+}
+/**
+ * Generate scripts for the specified MDM platform.
+ */
+function generateScripts(platform, mode, webhookUrl, webhookToken) {
+    const scripts = [];
+    if (mode === 'detect') {
+        if (platform === 'intune') {
+            // Intune primarily uses PowerShell
+            scripts.push({
+                filename: 'nox-scan.ps1',
+                content: generateDetectPowerShellScript(webhookUrl, webhookToken),
+                description: 'PowerShell detection script for Microsoft Intune',
+            });
+        }
+        else {
+            // Jamf and JumpCloud use shell scripts (and optionally PowerShell for Windows)
+            scripts.push({
+                filename: 'nox-scan.sh',
+                content: generateDetectShellScript(webhookUrl, webhookToken),
+                description: 'Shell detection script for macOS/Linux',
+            });
+            scripts.push({
+                filename: 'nox-scan.ps1',
+                content: generateDetectPowerShellScript(webhookUrl, webhookToken),
+                description: 'PowerShell detection script for Windows',
+            });
+        }
+    }
+    else {
+        // Purge mode
+        if (platform === 'intune') {
+            scripts.push({
+                filename: 'nox-purge.ps1',
+                content: generatePurgePowerShellScript(webhookUrl, webhookToken),
+                description: 'PowerShell purge script for Microsoft Intune',
+            });
+        }
+        else {
+            scripts.push({
+                filename: 'nox-purge.sh',
+                content: generatePurgeShellScript(webhookUrl, webhookToken),
+                description: 'Shell purge script for macOS/Linux',
+            });
+            scripts.push({
+                filename: 'nox-purge.ps1',
+                content: generatePurgePowerShellScript(webhookUrl, webhookToken),
+                description: 'PowerShell purge script for Windows',
+            });
+        }
+    }
+    return scripts;
+}
+/**
+ * Generate README for the exported scripts.
+ */
+function generateReadme(platform, mode) {
+    const platformName = platform === 'jamf'
+        ? 'Jamf Pro'
+        : platform === 'intune'
+            ? 'Microsoft Intune'
+            : 'JumpCloud';
+    const modeDescription = mode === 'detect' ? 'detection (scan)' : 'removal (purge)';
+    return `# Nox OpenClaw ${mode === 'detect' ? 'Scan' : 'Purge'} Scripts
+
+Generated by nox-openclaw-detector for ${platformName}.
+
+## Overview
+
+These scripts provide OpenClaw ${modeDescription} capabilities for deployment via ${platformName}.
+
+## Exit Codes
+
+| Code | Meaning |
+|------|---------|
+| 0 | ${mode === 'detect' ? 'OpenClaw not detected (clean)' : 'Purge successful'} |
+| 1 | ${mode === 'detect' ? 'OpenClaw detected' : 'Purge failed'} |
+| 2 | Script error |
+
+## Deployment Instructions
+
+${platform === 'jamf' ? `
+### Jamf Pro
+
+1. Navigate to **Settings > Computer Management > Scripts**
+2. Click **New** and paste the script content
+3. Set appropriate **Priority** and **Parameter Labels**
+4. Create a **Policy** to deploy the script:
+   - Trigger: Recurring Check-in (for ongoing monitoring)
+   - Execution Frequency: Once per day (recommended)
+   - Scope: Target computers/groups
+` : ''}
+
+${platform === 'intune' ? `
+### Microsoft Intune
+
+1. Navigate to **Devices > Scripts**
+2. Click **Add > Windows 10 and later**
+3. Upload the PowerShell script
+4. Configure script settings:
+   - Run script in 64-bit PowerShell: Yes
+   - Run script as administrator: Yes (for purge)
+5. Assign to device groups
+` : ''}
+
+${platform === 'jumpcloud' ? `
+### JumpCloud
+
+1. Navigate to **Device Management > Commands**
+2. Click **+** to create a new command
+3. Select the appropriate OS type
+4. Paste the script content
+5. Configure:
+   - Command Type: Script
+   - Run As: Root (for purge)
+   - Timeout: 120 seconds (recommended)
+6. Assign to device groups or systems
+` : ''}
+
+## Webhook Integration
+
+The scripts support webhook notifications for SIEM/alerting integration.
+Configure the webhook URL and token when generating scripts with:
+
+\`\`\`bash
+nox export --platform ${platform} --mode ${mode} --webhook https://your-siem.example.com/webhook --webhook-token YOUR_TOKEN
+\`\`\`
+
+## Support
+
+For issues or questions, contact support@nox.security
+`;
+}
+/**
+ * Export command handler.
+ */
+export async function exportCommand(options) {
+    // Handle debug mode
+    const parentOpts = options.parent?.opts() ?? {};
+    if (parentOpts.debug) {
+        setLogLevel('debug');
+    }
+    printBanner();
+    // Validate platform
+    if (!validatePlatform(options.platform)) {
+        console.log(chalk.red(`Invalid platform: ${options.platform}`));
+        console.log();
+        console.log('Supported platforms:');
+        console.log('  jamf       - Jamf Pro');
+        console.log('  intune     - Microsoft Intune');
+        console.log('  jumpcloud  - JumpCloud');
+        process.exit(EXIT_CODES.ERROR);
+    }
+    // Validate mode
+    if (!validateMode(options.mode)) {
+        console.log(chalk.red(`Invalid mode: ${options.mode}`));
+        console.log();
+        console.log('Supported modes:');
+        console.log('  detect  - Scan/detection scripts');
+        console.log('  purge   - Removal/purge scripts');
+        process.exit(EXIT_CODES.ERROR);
+    }
+    const platform = options.platform.toLowerCase();
+    const mode = options.mode.toLowerCase();
+    const outputDir = options.output;
+    const spinner = ora(`Generating ${mode} scripts for ${platform}...`).start();
+    try {
+        // Generate scripts
+        const scripts = generateScripts(platform, mode, options.webhook, options.webhookToken);
+        const readme = generateReadme(platform, mode);
+        // Create output directory
+        await fs.mkdir(outputDir, { recursive: true });
+        // Write scripts
+        for (const script of scripts) {
+            const filePath = path.join(outputDir, script.filename);
+            await fs.writeFile(filePath, script.content, 'utf-8');
+            // Make shell scripts executable
+            if (script.filename.endsWith('.sh')) {
+                await fs.chmod(filePath, 0o755);
+            }
+        }
+        // Write README
+        await fs.writeFile(path.join(outputDir, 'README.md'), readme, 'utf-8');
+        spinner.succeed('Scripts generated successfully');
+        // Display results
+        console.log();
+        console.log(chalk.bold('Generated files:'));
+        console.log();
+        for (const script of scripts) {
+            console.log(`  ${chalk.green('●')} ${path.join(outputDir, script.filename)}`);
+            console.log(`    ${chalk.dim(script.description)}`);
+        }
+        console.log(`  ${chalk.blue('●')} ${path.join(outputDir, 'README.md')}`);
+        console.log(`    ${chalk.dim('Deployment instructions')}`);
+        console.log();
+        printStatus(`Scripts exported to ${outputDir}`, 'success');
+        process.exit(EXIT_CODES.CLEAN);
+    }
+    catch (error) {
+        spinner.fail('Failed to generate scripts');
+        const message = error instanceof Error ? error.message : 'Unknown error';
+        logger.error(`Export error: ${message}`);
+        process.exit(EXIT_CODES.ERROR);
+    }
+}
+//# sourceMappingURL=export.js.map

package/dist/commands/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../src/commands/export.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAsBnD;;GAEG;AACH,SAAS,gBAAgB,CAAC,QAAgB;IACxC,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAAC,UAAmB,EAAE,YAAqB;IAC3E,MAAM,cAAc,GAAG,UAAU;QAC/B,CAAC,CAAC;;eAES,UAAU;EACvB,YAAY,CAAC,CAAC,CAAC,kBAAkB,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE;;;;;;;;;MASjD,YAAY,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,EAAE;;;CAGpE;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;;;;;EASP,cAAc;;;;;;;;;;;MAWV,UAAU,CAAC,CAAC,CAAC,6FAA6F,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsCnH,UAAU,CAAC,CAAC,CAAC,+FAA+F,CAAC,CAAC,CAAC,EAAE;;;CAGlH,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAS,8BAA8B,CAAC,UAAmB,EAAE,YAAqB;IAChF,MAAM,cAAc,GAAG,UAAU;QAC/B,CAAC,CAAC;;iBAEW,UAAU;EACzB,YAAY,CAAC,CAAC,CAAC,oBAAoB,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;UAa/C,YAAY,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC,EAAE;;;;CAIjF;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;;;EAOP,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmDd,UAAU,CAAC,CAAC,CAAC,uGAAuG,CAAC,CAAC,CAAC,EAAE;;;;;;;;;CAS1H,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAS,wBAAwB,CAAC,UAAmB,EAAE,YAAqB;IAC1E,MAAM,cAAc,GAAG,UAAU;QAC/B,CAAC,CAAC;;eAES,UAAU;EACvB,YAAY,CAAC,CAAC,CAAC,kBAAkB,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE;;;;;;;;;MASjD,YAAY,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,EAAE;;;CAGpE;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;;;;;;;EAWP,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAiEd,UAAU,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,EAAE;;;;CAI7D,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAS,6BAA6B,CAAC,UAAmB,EAAE,YAAqB;IAC/E,MAAM,cAAc,GAAG,UAAU;QAC/B,CAAC,CAAC;;iBAEW,UAAU;EACzB,YAAY,CAAC,CAAC,CAAC,oBAAoB,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE;;;;;;;;;;;;;UAa/C,YAAY,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC,EAAE;;;;CAIjF;QACG,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;;;;;;;;;;EAWP,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2Dd,UAAU,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,EAAE;;;;;CAK5E,CAAC;AACF,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CACtB,QAAqB,EACrB,IAAgB,EAChB,UAAmB,EACnB,YAAqB;IAErB,MAAM,OAAO,GAAsB,EAAE,CAAC;IAEtC,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,mCAAmC;YACnC,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,cAAc;gBACxB,OAAO,EAAE,8BAA8B,CAAC,UAAU,EAAE,YAAY,CAAC;gBACjE,WAAW,EAAE,kDAAkD;aAChE,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,+EAA+E;YAC/E,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,aAAa;gBACvB,OAAO,EAAE,yBAAyB,CAAC,UAAU,EAAE,YAAY,CAAC;gBAC5D,WAAW,EAAE,wCAAwC;aACtD,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,cAAc;gBACxB,OAAO,EAAE,8BAA8B,CAAC,UAAU,EAAE,YAAY,CAAC;gBACjE,WAAW,EAAE,yCAAyC;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,CAAC;QACN,aAAa;QACb,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,eAAe;gBACzB,OAAO,EAAE,6BAA6B,CAAC,UAAU,EAAE,YAAY,CAAC;gBAChE,WAAW,EAAE,8CAA8C;aAC5D,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,cAAc;gBACxB,OAAO,EAAE,wBAAwB,CAAC,UAAU,EAAE,YAAY,CAAC;gBAC3D,WAAW,EAAE,oCAAoC;aAClD,CAAC,CAAC;YACH,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,eAAe;gBACzB,OAAO,EAAE,6BAA6B,CAAC,UAAU,EAAE,YAAY,CAAC;gBAChE,WAAW,EAAE,qCAAqC;aACnD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,QAAqB,EAAE,IAAgB;IAC7D,MAAM,YAAY,GAChB,QAAQ,KAAK,MAAM;QACjB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACrB,CAAC,CAAC,kBAAkB;YACpB,CAAC,CAAC,WAAW,CAAC;IAEpB,MAAM,eAAe,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAEnF,OAAO,kBAAkB,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;;yCAEtB,YAAY;;;;iCAIpB,eAAe,oCAAoC,YAAY;;;;;;QAMxF,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,kBAAkB;QACxE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,cAAc;;;;;EAK9D,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC;;;;;;;;;;CAUvB,CAAC,CAAC,CAAC,EAAE;;EAEJ,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC;;;;;;;;;;CAUzB,CAAC,CAAC,CAAC,EAAE;;EAEJ,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC;;;;;;;;;;;;CAY5B,CAAC,CAAC,CAAC,EAAE;;;;;;;;wBAQkB,QAAQ,WAAW,IAAI;;;;;;CAM9C,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA6B;IAC/D,oBAAoB;IACpB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,WAAW,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,WAAW,EAAE,CAAC;IAEd,oBAAoB;IACpB,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,gBAAgB;IAChB,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAiB,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAgB,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAEjC,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,IAAI,gBAAgB,QAAQ,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;IAE7E,IAAI,CAAC;QACH,mBAAmB;QACnB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE9C,0BAA0B;QAC1B,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,gBAAgB;QAChB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEtD,gCAAgC;YAChC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,eAAe;QACf,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEvE,OAAO,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QAElD,kBAAkB;QAClB,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,EAAE,CAAC;QAEd,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC;QAE3D,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,WAAW,CAAC,uBAAuB,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;QAE3D,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,MAAM,CAAC,KAAK,CAAC,iBAAiB,OAAO,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;AACH,CAAC"}

package/dist/commands/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Command exports for Nox OpenClaw Detector CLI.
+ */
+export { scanCommand } from './scan.js';
+export { purgeCommand } from './purge.js';
+export { isolateApplyCommand, isolateRevertCommand, isolateListCommand, } from './isolate.js';
+export { exportCommand } from './export.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/commands/index.js

@@ -0,0 +1,8 @@
+/**
+ * Command exports for Nox OpenClaw Detector CLI.
+ */
+export { scanCommand } from './scan.js';
+export { purgeCommand } from './purge.js';
+export { isolateApplyCommand, isolateRevertCommand, isolateListCommand, } from './isolate.js';
+export { exportCommand } from './export.js';
+//# sourceMappingURL=index.js.map

package/dist/commands/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/commands/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/commands/isolate.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Isolate command - isolate device from OpenClaw.
+ */
+interface BaseCommandOptions {
+    json?: boolean;
+    quiet?: boolean;
+    force?: boolean;
+    parent?: {
+        parent?: {
+            opts(): {
+                debug?: boolean;
+            };
+        };
+    };
+}
+interface IsolateApplyOptions extends BaseCommandOptions {
+    port?: number;
+    dryRun?: boolean;
+    webhook?: string;
+    webhookToken?: string;
+}
+export declare function isolateApplyCommand(options: IsolateApplyOptions): Promise<void>;
+export declare function isolateListCommand(options: BaseCommandOptions): Promise<void>;
+interface IsolateRevertOptions extends BaseCommandOptions {
+    port?: number;
+    dryRun?: boolean;
+}
+export declare function isolateRevertCommand(options: IsolateRevertOptions): Promise<void>;
+export {};
+//# sourceMappingURL=isolate.d.ts.map

package/dist/commands/isolate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolate.d.ts","sourceRoot":"","sources":["../../src/commands/isolate.ts"],"names":[],"mappings":"AAAA;;GAEG;AA4BH,UAAU,kBAAkB;IAC1B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE;QACP,MAAM,CAAC,EAAE;YACP,IAAI,IAAI;gBAAE,KAAK,CAAC,EAAE,OAAO,CAAA;aAAE,CAAC;SAC7B,CAAC;KACH,CAAC;CACH;AAED,UAAU,mBAAoB,SAAQ,kBAAkB;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAsED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiLrF;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCnF;AA6FD,UAAU,oBAAqB,SAAQ,kBAAkB;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAiCD,wBAAsB,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6LvF"}