opena2a-cli 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/adapters/docker.d.ts +8 -0
- package/dist/adapters/docker.d.ts.map +1 -0
- package/dist/adapters/docker.js +60 -0
- package/dist/adapters/docker.js.map +1 -0
- package/dist/adapters/import.d.ts +12 -0
- package/dist/adapters/import.d.ts.map +1 -0
- package/dist/adapters/import.js +76 -0
- package/dist/adapters/import.js.map +1 -0
- package/dist/adapters/index.d.ts +9 -0
- package/dist/adapters/index.d.ts.map +1 -0
- package/dist/adapters/index.js +40 -0
- package/dist/adapters/index.js.map +1 -0
- package/dist/adapters/python.d.ts +9 -0
- package/dist/adapters/python.d.ts.map +1 -0
- package/dist/adapters/python.js +73 -0
- package/dist/adapters/python.js.map +1 -0
- package/dist/adapters/registry.d.ts +6 -0
- package/dist/adapters/registry.d.ts.map +1 -0
- package/dist/adapters/registry.js +86 -0
- package/dist/adapters/registry.js.map +1 -0
- package/dist/adapters/spawn.d.ts +9 -0
- package/dist/adapters/spawn.d.ts.map +1 -0
- package/dist/adapters/spawn.js +63 -0
- package/dist/adapters/spawn.js.map +1 -0
- package/dist/adapters/types.d.ts +35 -0
- package/dist/adapters/types.d.ts.map +1 -0
- package/dist/adapters/types.js +3 -0
- package/dist/adapters/types.js.map +1 -0
- package/dist/branding.d.ts +3 -0
- package/dist/branding.d.ts.map +1 -0
- package/dist/branding.js +21 -0
- package/dist/branding.js.map +1 -0
- package/dist/commands/baselines.d.ts +14 -0
- package/dist/commands/baselines.d.ts.map +1 -0
- package/dist/commands/baselines.js +269 -0
- package/dist/commands/baselines.js.map +1 -0
- package/dist/commands/guard.d.ts +38 -0
- package/dist/commands/guard.d.ts.map +1 -0
- package/dist/commands/guard.js +307 -0
- package/dist/commands/guard.js.map +1 -0
- package/dist/commands/init.d.ts +14 -0
- package/dist/commands/init.d.ts.map +1 -0
- package/dist/commands/init.js +356 -0
- package/dist/commands/init.js.map +1 -0
- package/dist/commands/onepassword-migration.d.ts +23 -0
- package/dist/commands/onepassword-migration.d.ts.map +1 -0
- package/dist/commands/onepassword-migration.js +179 -0
- package/dist/commands/onepassword-migration.js.map +1 -0
- package/dist/commands/protect.d.ts +34 -0
- package/dist/commands/protect.d.ts.map +1 -0
- package/dist/commands/protect.js +642 -0
- package/dist/commands/protect.js.map +1 -0
- package/dist/commands/runtime.d.ts +28 -0
- package/dist/commands/runtime.d.ts.map +1 -0
- package/dist/commands/runtime.js +309 -0
- package/dist/commands/runtime.js.map +1 -0
- package/dist/commands/self-register.d.ts +39 -0
- package/dist/commands/self-register.d.ts.map +1 -0
- package/dist/commands/self-register.js +528 -0
- package/dist/commands/self-register.js.map +1 -0
- package/dist/commands/verify.d.ts +25 -0
- package/dist/commands/verify.d.ts.map +1 -0
- package/dist/commands/verify.js +300 -0
- package/dist/commands/verify.js.map +1 -0
- package/dist/contextual/advisor.d.ts +12 -0
- package/dist/contextual/advisor.d.ts.map +1 -0
- package/dist/contextual/advisor.js +94 -0
- package/dist/contextual/advisor.js.map +1 -0
- package/dist/contextual/index.d.ts +3 -0
- package/dist/contextual/index.d.ts.map +1 -0
- package/dist/contextual/index.js +7 -0
- package/dist/contextual/index.js.map +1 -0
- package/dist/guided/attack-walkthrough.d.ts +13 -0
- package/dist/guided/attack-walkthrough.d.ts.map +1 -0
- package/dist/guided/attack-walkthrough.js +113 -0
- package/dist/guided/attack-walkthrough.js.map +1 -0
- package/dist/guided/wizard.d.ts +2 -0
- package/dist/guided/wizard.d.ts.map +1 -0
- package/dist/guided/wizard.js +108 -0
- package/dist/guided/wizard.js.map +1 -0
- package/dist/index.d.ts +3 -0
- package/dist/index.d.ts.map +1 -0
- package/dist/index.js +326 -0
- package/dist/index.js.map +1 -0
- package/dist/natural/index.d.ts +4 -0
- package/dist/natural/index.d.ts.map +1 -0
- package/dist/natural/index.js +9 -0
- package/dist/natural/index.js.map +1 -0
- package/dist/natural/intent-map.d.ts +7 -0
- package/dist/natural/intent-map.d.ts.map +1 -0
- package/dist/natural/intent-map.js +145 -0
- package/dist/natural/intent-map.js.map +1 -0
- package/dist/natural/llm-fallback.d.ts +8 -0
- package/dist/natural/llm-fallback.d.ts.map +1 -0
- package/dist/natural/llm-fallback.js +143 -0
- package/dist/natural/llm-fallback.js.map +1 -0
- package/dist/report/interactive-html.d.ts +51 -0
- package/dist/report/interactive-html.d.ts.map +1 -0
- package/dist/report/interactive-html.js +508 -0
- package/dist/report/interactive-html.js.map +1 -0
- package/dist/router.d.ts +23 -0
- package/dist/router.d.ts.map +1 -0
- package/dist/router.js +132 -0
- package/dist/router.js.map +1 -0
- package/dist/semantic/command-index.json +182 -0
- package/dist/semantic/index.d.ts +3 -0
- package/dist/semantic/index.d.ts.map +1 -0
- package/dist/semantic/index.js +28 -0
- package/dist/semantic/index.js.map +1 -0
- package/dist/semantic/search.d.ts +17 -0
- package/dist/semantic/search.d.ts.map +1 -0
- package/dist/semantic/search.js +123 -0
- package/dist/semantic/search.js.map +1 -0
- package/dist/util/action-prompt.d.ts +29 -0
- package/dist/util/action-prompt.d.ts.map +1 -0
- package/dist/util/action-prompt.js +126 -0
- package/dist/util/action-prompt.js.map +1 -0
- package/dist/util/advisories.d.ts +43 -0
- package/dist/util/advisories.d.ts.map +1 -0
- package/dist/util/advisories.js +229 -0
- package/dist/util/advisories.js.map +1 -0
- package/dist/util/colors.d.ts +9 -0
- package/dist/util/colors.d.ts.map +1 -0
- package/dist/util/colors.js +18 -0
- package/dist/util/colors.js.map +1 -0
- package/dist/util/credential-patterns.d.ts +38 -0
- package/dist/util/credential-patterns.d.ts.map +1 -0
- package/dist/util/credential-patterns.js +203 -0
- package/dist/util/credential-patterns.js.map +1 -0
- package/dist/util/detect.d.ts +11 -0
- package/dist/util/detect.d.ts.map +1 -0
- package/dist/util/detect.js +49 -0
- package/dist/util/detect.js.map +1 -0
- package/dist/util/format.d.ts +6 -0
- package/dist/util/format.d.ts.map +1 -0
- package/dist/util/format.js +49 -0
- package/dist/util/format.js.map +1 -0
- package/dist/util/report-submission.d.ts +64 -0
- package/dist/util/report-submission.d.ts.map +1 -0
- package/dist/util/report-submission.js +109 -0
- package/dist/util/report-submission.js.map +1 -0
- package/dist/util/spinner.d.ts +10 -0
- package/dist/util/spinner.d.ts.map +1 -0
- package/dist/util/spinner.js +38 -0
- package/dist/util/spinner.js.map +1 -0
- package/dist/util/version.d.ts +5 -0
- package/dist/util/version.d.ts.map +1 -0
- package/dist/util/version.js +24 -0
- package/dist/util/version.js.map +1 -0
- package/package.json +47 -0
|
@@ -0,0 +1,269 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* opena2a baselines -- Collect and submit behavioral observations
|
|
4
|
+
* for crowdsourced agent behavioral profiles. Opt-in only.
|
|
5
|
+
*/
|
|
6
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
7
|
+
exports.baselines = baselines;
|
|
8
|
+
const colors_js_1 = require("../util/colors.js");
|
|
9
|
+
const spinner_js_1 = require("../util/spinner.js");
|
|
10
|
+
const format_js_1 = require("../util/format.js");
|
|
11
|
+
// --- Core ---
|
|
12
|
+
async function baselines(options) {
|
|
13
|
+
const isJson = options.format === 'json';
|
|
14
|
+
const isCi = options.ci ?? false;
|
|
15
|
+
// Step 1: Check opt-in
|
|
16
|
+
const optedIn = await checkOptIn();
|
|
17
|
+
if (!optedIn) {
|
|
18
|
+
if (isJson) {
|
|
19
|
+
process.stdout.write(JSON.stringify({
|
|
20
|
+
error: 'Community contributions not enabled',
|
|
21
|
+
hint: 'Run: opena2a config contribute on',
|
|
22
|
+
}) + '\n');
|
|
23
|
+
}
|
|
24
|
+
else {
|
|
25
|
+
process.stderr.write((0, colors_js_1.yellow)('Community contributions are not enabled.\n'));
|
|
26
|
+
process.stderr.write((0, colors_js_1.dim)('Enable with: opena2a config contribute on\n'));
|
|
27
|
+
}
|
|
28
|
+
return 1;
|
|
29
|
+
}
|
|
30
|
+
const registryUrl = await resolveRegistryUrl(options.registryUrl);
|
|
31
|
+
if (!isJson && !isCi) {
|
|
32
|
+
process.stdout.write((0, colors_js_1.bold)(`Collecting behavioral observations for ${options.packageName}`) + '\n\n');
|
|
33
|
+
}
|
|
34
|
+
// Step 2: Resolve package
|
|
35
|
+
const spinner = new spinner_js_1.Spinner(`Analyzing ${options.packageName}...`);
|
|
36
|
+
if (!isCi && !isJson) {
|
|
37
|
+
spinner.start();
|
|
38
|
+
}
|
|
39
|
+
let pkgDir;
|
|
40
|
+
let pkgJson;
|
|
41
|
+
try {
|
|
42
|
+
const resolved = resolvePackage(options.packageName);
|
|
43
|
+
pkgDir = resolved.dir;
|
|
44
|
+
pkgJson = resolved.pkgJson;
|
|
45
|
+
}
|
|
46
|
+
catch {
|
|
47
|
+
if (!isCi && !isJson) {
|
|
48
|
+
spinner.stop();
|
|
49
|
+
}
|
|
50
|
+
if (isJson) {
|
|
51
|
+
process.stdout.write(JSON.stringify({
|
|
52
|
+
error: `Package not found: ${options.packageName}`,
|
|
53
|
+
}) + '\n');
|
|
54
|
+
}
|
|
55
|
+
else {
|
|
56
|
+
process.stderr.write((0, colors_js_1.red)(`Package not found: ${options.packageName}\n`));
|
|
57
|
+
process.stderr.write((0, colors_js_1.dim)('Ensure the package is installed locally.\n'));
|
|
58
|
+
}
|
|
59
|
+
return 1;
|
|
60
|
+
}
|
|
61
|
+
// Step 3: Collect metrics
|
|
62
|
+
const metrics = collectMetrics(pkgDir, pkgJson);
|
|
63
|
+
const pkgVersion = pkgJson.version ?? 'unknown';
|
|
64
|
+
if (!isCi && !isJson) {
|
|
65
|
+
spinner.stop();
|
|
66
|
+
}
|
|
67
|
+
// Step 4: Build observation
|
|
68
|
+
const observation = {
|
|
69
|
+
packageName: options.packageName,
|
|
70
|
+
version: pkgVersion,
|
|
71
|
+
observationType: 'static_profile',
|
|
72
|
+
timestamp: new Date().toISOString(),
|
|
73
|
+
metrics,
|
|
74
|
+
observer: 'opena2a-cli',
|
|
75
|
+
observerVersion: '0.1.0',
|
|
76
|
+
};
|
|
77
|
+
// Step 5: Submit
|
|
78
|
+
let submitted = false;
|
|
79
|
+
let submissionStatus = 'not_submitted';
|
|
80
|
+
if (!isCi && !isJson) {
|
|
81
|
+
spinner.update('Submitting observation...');
|
|
82
|
+
spinner.start();
|
|
83
|
+
}
|
|
84
|
+
try {
|
|
85
|
+
const response = await fetch(`${registryUrl}/internal/behavioral-observation`, {
|
|
86
|
+
method: 'POST',
|
|
87
|
+
headers: { 'Content-Type': 'application/json' },
|
|
88
|
+
body: JSON.stringify(observation),
|
|
89
|
+
signal: AbortSignal.timeout(10_000),
|
|
90
|
+
});
|
|
91
|
+
if (response.ok) {
|
|
92
|
+
submitted = true;
|
|
93
|
+
submissionStatus = 'submitted';
|
|
94
|
+
}
|
|
95
|
+
else if (response.status === 401 || response.status === 403) {
|
|
96
|
+
// Try community endpoint as fallback
|
|
97
|
+
const fallbackResponse = await fetch(`${registryUrl}/api/v1/registry/community/behavioral-observation`, {
|
|
98
|
+
method: 'POST',
|
|
99
|
+
headers: { 'Content-Type': 'application/json' },
|
|
100
|
+
body: JSON.stringify(observation),
|
|
101
|
+
signal: AbortSignal.timeout(10_000),
|
|
102
|
+
});
|
|
103
|
+
if (fallbackResponse.ok) {
|
|
104
|
+
submitted = true;
|
|
105
|
+
submissionStatus = 'submitted (community)';
|
|
106
|
+
}
|
|
107
|
+
else {
|
|
108
|
+
submissionStatus = 'collected_locally';
|
|
109
|
+
}
|
|
110
|
+
}
|
|
111
|
+
else {
|
|
112
|
+
submissionStatus = 'collected_locally';
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
catch {
|
|
116
|
+
submissionStatus = 'collected_locally';
|
|
117
|
+
}
|
|
118
|
+
if (!isCi && !isJson) {
|
|
119
|
+
spinner.stop();
|
|
120
|
+
}
|
|
121
|
+
// Step 6: Output
|
|
122
|
+
const result = {
|
|
123
|
+
observation,
|
|
124
|
+
submitted,
|
|
125
|
+
submissionStatus,
|
|
126
|
+
};
|
|
127
|
+
if (isJson) {
|
|
128
|
+
process.stdout.write(JSON.stringify(result, null, 2) + '\n');
|
|
129
|
+
}
|
|
130
|
+
else {
|
|
131
|
+
printSummary(result);
|
|
132
|
+
}
|
|
133
|
+
return 0;
|
|
134
|
+
}
|
|
135
|
+
// --- Helpers ---
|
|
136
|
+
async function checkOptIn() {
|
|
137
|
+
try {
|
|
138
|
+
const shared = await Function('return import("@opena2a/shared")')();
|
|
139
|
+
const mod = 'default' in shared ? shared.default : shared;
|
|
140
|
+
const config = mod.loadUserConfig();
|
|
141
|
+
return config.contribute?.enabled === true;
|
|
142
|
+
}
|
|
143
|
+
catch {
|
|
144
|
+
return false;
|
|
145
|
+
}
|
|
146
|
+
}
|
|
147
|
+
async function resolveRegistryUrl(override) {
|
|
148
|
+
if (override)
|
|
149
|
+
return override.replace(/\/$/, '');
|
|
150
|
+
try {
|
|
151
|
+
const shared = await Function('return import("@opena2a/shared")')();
|
|
152
|
+
const mod = 'default' in shared ? shared.default : shared;
|
|
153
|
+
const config = mod.loadUserConfig();
|
|
154
|
+
return config.registry.url;
|
|
155
|
+
}
|
|
156
|
+
catch {
|
|
157
|
+
return 'https://registry.opena2a.org';
|
|
158
|
+
}
|
|
159
|
+
}
|
|
160
|
+
function resolvePackage(packageName) {
|
|
161
|
+
const resolved = require.resolve(packageName);
|
|
162
|
+
const path = require('node:path');
|
|
163
|
+
const fs = require('node:fs');
|
|
164
|
+
let dir = path.dirname(resolved);
|
|
165
|
+
const root = path.parse(dir).root;
|
|
166
|
+
while (dir !== root) {
|
|
167
|
+
const pkgJsonPath = path.join(dir, 'package.json');
|
|
168
|
+
if (fs.existsSync(pkgJsonPath)) {
|
|
169
|
+
const pkgJson = JSON.parse(fs.readFileSync(pkgJsonPath, 'utf-8'));
|
|
170
|
+
if (pkgJson.name === packageName) {
|
|
171
|
+
return { dir, pkgJson };
|
|
172
|
+
}
|
|
173
|
+
}
|
|
174
|
+
dir = path.dirname(dir);
|
|
175
|
+
}
|
|
176
|
+
throw new Error(`Could not find package.json for ${packageName}`);
|
|
177
|
+
}
|
|
178
|
+
function collectMetrics(pkgDir, pkgJson) {
|
|
179
|
+
const fs = require('node:fs');
|
|
180
|
+
const path = require('node:path');
|
|
181
|
+
// Count files and total size
|
|
182
|
+
let fileCount = 0;
|
|
183
|
+
let totalSizeBytes = 0;
|
|
184
|
+
function walk(dir) {
|
|
185
|
+
let entries;
|
|
186
|
+
try {
|
|
187
|
+
entries = fs.readdirSync(dir, { withFileTypes: true });
|
|
188
|
+
}
|
|
189
|
+
catch {
|
|
190
|
+
return;
|
|
191
|
+
}
|
|
192
|
+
for (const entry of entries) {
|
|
193
|
+
if (entry.name === 'node_modules' || entry.name === '.git')
|
|
194
|
+
continue;
|
|
195
|
+
const fullPath = path.join(dir, entry.name);
|
|
196
|
+
if (entry.isDirectory()) {
|
|
197
|
+
walk(fullPath);
|
|
198
|
+
}
|
|
199
|
+
else if (entry.isFile()) {
|
|
200
|
+
fileCount++;
|
|
201
|
+
try {
|
|
202
|
+
const stat = fs.statSync(fullPath);
|
|
203
|
+
totalSizeBytes += stat.size;
|
|
204
|
+
}
|
|
205
|
+
catch {
|
|
206
|
+
// skip
|
|
207
|
+
}
|
|
208
|
+
}
|
|
209
|
+
}
|
|
210
|
+
}
|
|
211
|
+
walk(pkgDir);
|
|
212
|
+
// Dependency count
|
|
213
|
+
const deps = pkgJson.dependencies ?? {};
|
|
214
|
+
const dependencyCount = Object.keys(deps).length;
|
|
215
|
+
// Lockfile
|
|
216
|
+
const hasLockfile = fs.existsSync(path.join(pkgDir, 'package-lock.json')) ||
|
|
217
|
+
fs.existsSync(path.join(pkgDir, 'yarn.lock')) ||
|
|
218
|
+
fs.existsSync(path.join(pkgDir, 'pnpm-lock.yaml'));
|
|
219
|
+
// Scripts
|
|
220
|
+
const scripts = pkgJson.scripts ?? {};
|
|
221
|
+
const hasTestScript = 'test' in scripts;
|
|
222
|
+
const hasLintScript = 'lint' in scripts;
|
|
223
|
+
// Suspicious scripts: preinstall or postinstall
|
|
224
|
+
const hasSuspiciousScripts = 'preinstall' in scripts || 'postinstall' in scripts;
|
|
225
|
+
// Engines field
|
|
226
|
+
const hasEnginesField = 'engines' in pkgJson;
|
|
227
|
+
return {
|
|
228
|
+
fileCount,
|
|
229
|
+
totalSizeBytes,
|
|
230
|
+
dependencyCount,
|
|
231
|
+
hasLockfile,
|
|
232
|
+
hasTestScript,
|
|
233
|
+
hasLintScript,
|
|
234
|
+
hasSuspiciousScripts,
|
|
235
|
+
hasEnginesField,
|
|
236
|
+
};
|
|
237
|
+
}
|
|
238
|
+
// --- Output ---
|
|
239
|
+
function printSummary(result) {
|
|
240
|
+
const { observation, submissionStatus } = result;
|
|
241
|
+
const m = observation.metrics;
|
|
242
|
+
process.stdout.write((0, colors_js_1.bold)(`Package: ${observation.packageName} v${observation.version}`) + '\n\n');
|
|
243
|
+
const rows = [
|
|
244
|
+
['Files', String(m.fileCount)],
|
|
245
|
+
['Total size', formatBytes(m.totalSizeBytes)],
|
|
246
|
+
['Dependencies', String(m.dependencyCount)],
|
|
247
|
+
['Has lockfile', m.hasLockfile ? (0, colors_js_1.green)('yes') : (0, colors_js_1.yellow)('no')],
|
|
248
|
+
['Has test script', m.hasTestScript ? (0, colors_js_1.green)('yes') : (0, colors_js_1.yellow)('no')],
|
|
249
|
+
['Has lint script', m.hasLintScript ? (0, colors_js_1.green)('yes') : (0, colors_js_1.yellow)('no')],
|
|
250
|
+
['Suspicious scripts', m.hasSuspiciousScripts ? (0, colors_js_1.red)('yes') : (0, colors_js_1.green)('no')],
|
|
251
|
+
['Engines field', m.hasEnginesField ? (0, colors_js_1.green)('yes') : (0, colors_js_1.dim)('no')],
|
|
252
|
+
];
|
|
253
|
+
process.stdout.write((0, format_js_1.table)(rows, ['Metric', 'Value']) + '\n\n');
|
|
254
|
+
const statusColor = result.submitted ? colors_js_1.green : colors_js_1.yellow;
|
|
255
|
+
process.stdout.write((0, colors_js_1.bold)('Submission: ') + statusColor(submissionStatus) + '\n');
|
|
256
|
+
process.stdout.write((0, colors_js_1.dim)(`Observation type: ${observation.observationType}\n`));
|
|
257
|
+
if (!result.submitted) {
|
|
258
|
+
process.stdout.write('\n' + (0, colors_js_1.cyan)('Note: ') + 'Data was collected locally but could not be submitted to the registry.\n');
|
|
259
|
+
process.stdout.write((0, colors_js_1.dim)('The observation will be included in the next successful submission.\n'));
|
|
260
|
+
}
|
|
261
|
+
}
|
|
262
|
+
function formatBytes(bytes) {
|
|
263
|
+
if (bytes < 1024)
|
|
264
|
+
return `${bytes} B`;
|
|
265
|
+
if (bytes < 1024 * 1024)
|
|
266
|
+
return `${(bytes / 1024).toFixed(1)} KB`;
|
|
267
|
+
return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
|
|
268
|
+
}
|
|
269
|
+
//# sourceMappingURL=baselines.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"baselines.js","sourceRoot":"","sources":["../../src/commands/baselines.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AA8CH,8BAmIC;AA/KD,iDAAwE;AACxE,mDAA6C;AAC7C,iDAA0C;AAwC1C,eAAe;AAER,KAAK,UAAU,SAAS,CAAC,OAAyB;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,CAAC;IAEjC,uBAAuB;IACvB,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;gBAClC,KAAK,EAAE,qCAAqC;gBAC5C,IAAI,EAAE,mCAAmC;aAC1C,CAAC,GAAG,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,kBAAM,EAAC,4CAA4C,CAAC,CAAC,CAAC;YAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,6CAA6C,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAElE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,0CAA0C,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;IACvG,CAAC;IAED,0BAA0B;IAC1B,MAAM,OAAO,GAAG,IAAI,oBAAO,CAAC,aAAa,OAAO,CAAC,WAAW,KAAK,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,MAAc,CAAC;IACnB,IAAI,OAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC;QACtB,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;gBAClC,KAAK,EAAE,sBAAsB,OAAO,CAAC,WAAW,EAAE;aACnD,CAAC,GAAG,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,sBAAsB,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;YACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,4CAA4C,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,0BAA0B;IAC1B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;IAEhD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC;IAED,4BAA4B;IAC5B,MAAM,WAAW,GAAgB;QAC/B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,UAAU;QACnB,eAAe,EAAE,gBAAgB;QACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO;QACP,QAAQ,EAAE,aAAa;QACvB,eAAe,EAAE,OAAO;KACzB,CAAC;IAEF,iBAAiB;IACjB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,gBAAgB,GAAG,eAAe,CAAC;IAEvC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC5C,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,kCAAkC,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YACjC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,SAAS,GAAG,IAAI,CAAC;YACjB,gBAAgB,GAAG,WAAW,CAAC;QACjC,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC9D,qCAAqC;YACrC,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,mDAAmD,EAAE;gBACtG,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;gBACjC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,gBAAgB,CAAC,EAAE,EAAE,CAAC;gBACxB,SAAS,GAAG,IAAI,CAAC;gBACjB,gBAAgB,GAAG,uBAAuB,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,gBAAgB,GAAG,mBAAmB,CAAC;YACzC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,gBAAgB,GAAG,mBAAmB,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB,GAAG,mBAAmB,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC;IAED,iBAAiB;IACjB,MAAM,MAAM,GAAoB;QAC9B,WAAW;QACX,SAAS;QACT,gBAAgB;KACjB,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC;AAED,kBAAkB;AAElB,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAO,QAAQ,CAAC,kCAAkC,CAAC,EAAmB,CAAC;QACtF,MAAM,GAAG,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAiB;IACjD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAO,QAAQ,CAAC,kCAAkC,CAAC,EAAmB,CAAC;QACtF,MAAM,GAAG,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,8BAA8B,CAAC;IACxC,CAAC;AACH,CAAC;AAOD,SAAS,cAAc,CAAC,WAAmB;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE9B,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAElC,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YAClE,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,OAAY;IAClD,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAElC,6BAA6B;IAC7B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,SAAS,IAAI,CAAC,GAAW;QACvB,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,SAAS,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACnC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,CAAC;IAEb,mBAAmB;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IACxC,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAEjD,WAAW;IACX,MAAM,WAAW,GACf,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACrD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7C,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAErD,UAAU;IACV,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAC;IACxC,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAC;IAExC,gDAAgD;IAChD,MAAM,oBAAoB,GACxB,YAAY,IAAI,OAAO,IAAI,aAAa,IAAI,OAAO,CAAC;IAEtD,gBAAgB;IAChB,MAAM,eAAe,GAAG,SAAS,IAAI,OAAO,CAAC;IAE7C,OAAO;QACL,SAAS;QACT,cAAc;QACd,eAAe;QACf,WAAW;QACX,aAAa;QACb,aAAa;QACb,oBAAoB;QACpB,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,iBAAiB;AAEjB,SAAS,YAAY,CAAC,MAAuB;IAC3C,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IACjD,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC;IAE9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,YAAY,WAAW,CAAC,WAAW,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;IAEnG,MAAM,IAAI,GAAe;QACvB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAC7C,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC3C,CAAC,cAAc,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,IAAI,CAAC,CAAC;QAC7D,CAAC,iBAAiB,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,IAAI,CAAC,CAAC;QAClE,CAAC,iBAAiB,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,IAAI,CAAC,CAAC;QAClE,CAAC,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,IAAI,CAAC,CAAC;QACzE,CAAC,eAAe,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,IAAI,CAAC,CAAC;KAChE,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,iBAAK,EAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IAEhE,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAK,CAAC,CAAC,CAAC,kBAAM,CAAC;IACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,cAAc,CAAC,GAAG,WAAW,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;IAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,qBAAqB,WAAW,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC;IAEhF,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAA,gBAAI,EAAC,QAAQ,CAAC,GAAG,0EAA0E,CAAC,CAAC;QACzH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,uEAAuE,CAAC,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACtC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AACpD,CAAC"}
|
|
@@ -0,0 +1,38 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* opena2a guard -- ConfigGuard: config file integrity signing and verification.
|
|
3
|
+
*
|
|
4
|
+
* Subcommands:
|
|
5
|
+
* - sign: Hash all detected config files, store in signatures.json
|
|
6
|
+
* - verify: Check all signed files for tampering (hash mismatch)
|
|
7
|
+
* - status: Summary of signed, unsigned, and tampered files
|
|
8
|
+
*/
|
|
9
|
+
export interface GuardOptions {
|
|
10
|
+
subcommand: 'sign' | 'verify' | 'status';
|
|
11
|
+
files?: string[];
|
|
12
|
+
targetDir?: string;
|
|
13
|
+
ci?: boolean;
|
|
14
|
+
format?: 'text' | 'json';
|
|
15
|
+
verbose?: boolean;
|
|
16
|
+
}
|
|
17
|
+
interface ConfigSignature {
|
|
18
|
+
filePath: string;
|
|
19
|
+
hash: string;
|
|
20
|
+
signedAt: string;
|
|
21
|
+
signedBy: string;
|
|
22
|
+
fileSize: number;
|
|
23
|
+
}
|
|
24
|
+
interface SignatureStore {
|
|
25
|
+
version: 1;
|
|
26
|
+
signatures: ConfigSignature[];
|
|
27
|
+
updatedAt: string;
|
|
28
|
+
}
|
|
29
|
+
export declare function guard(options: GuardOptions): Promise<number>;
|
|
30
|
+
declare function resolveFiles(targetDir: string, customFiles?: string[]): string[];
|
|
31
|
+
declare function loadStore(targetDir: string): SignatureStore | null;
|
|
32
|
+
export declare const _internals: {
|
|
33
|
+
resolveFiles: typeof resolveFiles;
|
|
34
|
+
loadStore: typeof loadStore;
|
|
35
|
+
GUARD_FILES: string[];
|
|
36
|
+
};
|
|
37
|
+
export {};
|
|
38
|
+
//# sourceMappingURL=guard.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/commands/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,cAAc;IACtB,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAsCD,wBAAsB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBlE;AA+LD,iBAAS,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAKzE;AAED,iBAAS,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAU3D;AAmDD,eAAO,MAAM,UAAU;;;;CAItB,CAAC"}
|
|
@@ -0,0 +1,307 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* opena2a guard -- ConfigGuard: config file integrity signing and verification.
|
|
4
|
+
*
|
|
5
|
+
* Subcommands:
|
|
6
|
+
* - sign: Hash all detected config files, store in signatures.json
|
|
7
|
+
* - verify: Check all signed files for tampering (hash mismatch)
|
|
8
|
+
* - status: Summary of signed, unsigned, and tampered files
|
|
9
|
+
*/
|
|
10
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
11
|
+
if (k2 === undefined) k2 = k;
|
|
12
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
13
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
14
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
15
|
+
}
|
|
16
|
+
Object.defineProperty(o, k2, desc);
|
|
17
|
+
}) : (function(o, m, k, k2) {
|
|
18
|
+
if (k2 === undefined) k2 = k;
|
|
19
|
+
o[k2] = m[k];
|
|
20
|
+
}));
|
|
21
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
22
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
23
|
+
}) : function(o, v) {
|
|
24
|
+
o["default"] = v;
|
|
25
|
+
});
|
|
26
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
27
|
+
var ownKeys = function(o) {
|
|
28
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
29
|
+
var ar = [];
|
|
30
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
31
|
+
return ar;
|
|
32
|
+
};
|
|
33
|
+
return ownKeys(o);
|
|
34
|
+
};
|
|
35
|
+
return function (mod) {
|
|
36
|
+
if (mod && mod.__esModule) return mod;
|
|
37
|
+
var result = {};
|
|
38
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
39
|
+
__setModuleDefault(result, mod);
|
|
40
|
+
return result;
|
|
41
|
+
};
|
|
42
|
+
})();
|
|
43
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
44
|
+
exports._internals = void 0;
|
|
45
|
+
exports.guard = guard;
|
|
46
|
+
const fs = __importStar(require("node:fs"));
|
|
47
|
+
const os = __importStar(require("node:os"));
|
|
48
|
+
const path = __importStar(require("node:path"));
|
|
49
|
+
const node_crypto_1 = require("node:crypto");
|
|
50
|
+
const colors_js_1 = require("../util/colors.js");
|
|
51
|
+
const spinner_js_1 = require("../util/spinner.js");
|
|
52
|
+
// --- Default guarded files ---
|
|
53
|
+
const GUARD_FILES = [
|
|
54
|
+
'mcp.json', '.mcp.json', '.claude/settings.json',
|
|
55
|
+
'package.json', 'package-lock.json',
|
|
56
|
+
'arp.yaml', 'arp.yml', 'arp.json',
|
|
57
|
+
'openclaw.json', '.openclaw/config.json',
|
|
58
|
+
'.opena2a.yaml', '.opena2a.json',
|
|
59
|
+
'tsconfig.json', 'go.mod', 'go.sum',
|
|
60
|
+
'pyproject.toml', 'requirements.txt',
|
|
61
|
+
'Dockerfile', 'docker-compose.yml',
|
|
62
|
+
];
|
|
63
|
+
const STORE_DIR = '.opena2a/guard';
|
|
64
|
+
const STORE_FILE = 'signatures.json';
|
|
65
|
+
// --- Core ---
|
|
66
|
+
async function guard(options) {
|
|
67
|
+
const targetDir = path.resolve(options.targetDir ?? process.cwd());
|
|
68
|
+
if (!fs.existsSync(targetDir)) {
|
|
69
|
+
process.stderr.write((0, colors_js_1.red)(`Directory not found: ${targetDir}\n`));
|
|
70
|
+
return 1;
|
|
71
|
+
}
|
|
72
|
+
switch (options.subcommand) {
|
|
73
|
+
case 'sign':
|
|
74
|
+
return guardSign(targetDir, options);
|
|
75
|
+
case 'verify':
|
|
76
|
+
return guardVerify(targetDir, options);
|
|
77
|
+
case 'status':
|
|
78
|
+
return guardStatus(targetDir, options);
|
|
79
|
+
default:
|
|
80
|
+
process.stderr.write((0, colors_js_1.red)(`Unknown subcommand: ${options.subcommand}\n`));
|
|
81
|
+
process.stderr.write('Usage: opena2a guard <sign|verify|status>\n');
|
|
82
|
+
return 1;
|
|
83
|
+
}
|
|
84
|
+
}
|
|
85
|
+
// --- Sign ---
|
|
86
|
+
async function guardSign(targetDir, options) {
|
|
87
|
+
const isJson = options.format === 'json';
|
|
88
|
+
const spinner = new spinner_js_1.Spinner('Signing config files...');
|
|
89
|
+
if (!isJson)
|
|
90
|
+
spinner.start();
|
|
91
|
+
const filesToSign = resolveFiles(targetDir, options.files);
|
|
92
|
+
const signatures = [];
|
|
93
|
+
for (const relPath of filesToSign) {
|
|
94
|
+
const fullPath = path.join(targetDir, relPath);
|
|
95
|
+
if (!fs.existsSync(fullPath))
|
|
96
|
+
continue;
|
|
97
|
+
const content = fs.readFileSync(fullPath);
|
|
98
|
+
const hash = 'sha256:' + (0, node_crypto_1.createHash)('sha256').update(content).digest('hex');
|
|
99
|
+
const stat = fs.statSync(fullPath);
|
|
100
|
+
signatures.push({
|
|
101
|
+
filePath: relPath,
|
|
102
|
+
hash,
|
|
103
|
+
signedAt: new Date().toISOString(),
|
|
104
|
+
signedBy: os.userInfo().username + '@opena2a-cli',
|
|
105
|
+
fileSize: stat.size,
|
|
106
|
+
});
|
|
107
|
+
}
|
|
108
|
+
if (!isJson)
|
|
109
|
+
spinner.stop();
|
|
110
|
+
if (signatures.length === 0) {
|
|
111
|
+
if (isJson) {
|
|
112
|
+
process.stdout.write(JSON.stringify({ signed: 0, files: [] }, null, 2) + '\n');
|
|
113
|
+
}
|
|
114
|
+
else {
|
|
115
|
+
process.stdout.write((0, colors_js_1.yellow)('No config files found to sign.\n'));
|
|
116
|
+
}
|
|
117
|
+
return 0;
|
|
118
|
+
}
|
|
119
|
+
// Write signature store
|
|
120
|
+
const store = {
|
|
121
|
+
version: 1,
|
|
122
|
+
signatures,
|
|
123
|
+
updatedAt: new Date().toISOString(),
|
|
124
|
+
};
|
|
125
|
+
const storeDir = path.join(targetDir, STORE_DIR);
|
|
126
|
+
fs.mkdirSync(storeDir, { recursive: true });
|
|
127
|
+
fs.writeFileSync(path.join(storeDir, STORE_FILE), JSON.stringify(store, null, 2) + '\n', 'utf-8');
|
|
128
|
+
if (isJson) {
|
|
129
|
+
process.stdout.write(JSON.stringify({ signed: signatures.length, files: signatures.map(s => s.filePath) }, null, 2) + '\n');
|
|
130
|
+
}
|
|
131
|
+
else {
|
|
132
|
+
process.stdout.write((0, colors_js_1.green)(`Signed ${signatures.length} config file${signatures.length === 1 ? '' : 's'}.\n`));
|
|
133
|
+
for (const sig of signatures) {
|
|
134
|
+
process.stdout.write((0, colors_js_1.dim)(` ${sig.filePath} ${sig.hash.slice(0, 23)}...\n`));
|
|
135
|
+
}
|
|
136
|
+
process.stdout.write((0, colors_js_1.dim)(`\nStore: ${STORE_DIR}/${STORE_FILE}\n`));
|
|
137
|
+
}
|
|
138
|
+
return 0;
|
|
139
|
+
}
|
|
140
|
+
// --- Verify ---
|
|
141
|
+
async function guardVerify(targetDir, options) {
|
|
142
|
+
const isJson = options.format === 'json';
|
|
143
|
+
const store = loadStore(targetDir);
|
|
144
|
+
if (!store) {
|
|
145
|
+
if (isJson) {
|
|
146
|
+
process.stdout.write(JSON.stringify({ error: 'No signature store found. Run: opena2a guard sign' }, null, 2) + '\n');
|
|
147
|
+
}
|
|
148
|
+
else {
|
|
149
|
+
process.stdout.write((0, colors_js_1.yellow)('No signature store found. Run: opena2a guard sign\n'));
|
|
150
|
+
}
|
|
151
|
+
return 1;
|
|
152
|
+
}
|
|
153
|
+
const results = [];
|
|
154
|
+
// Check signed files
|
|
155
|
+
for (const sig of store.signatures) {
|
|
156
|
+
const fullPath = path.join(targetDir, sig.filePath);
|
|
157
|
+
if (!fs.existsSync(fullPath)) {
|
|
158
|
+
results.push({
|
|
159
|
+
filePath: sig.filePath,
|
|
160
|
+
status: 'missing',
|
|
161
|
+
expectedHash: sig.hash,
|
|
162
|
+
});
|
|
163
|
+
continue;
|
|
164
|
+
}
|
|
165
|
+
const content = fs.readFileSync(fullPath);
|
|
166
|
+
const currentHash = 'sha256:' + (0, node_crypto_1.createHash)('sha256').update(content).digest('hex');
|
|
167
|
+
if (currentHash === sig.hash) {
|
|
168
|
+
results.push({
|
|
169
|
+
filePath: sig.filePath,
|
|
170
|
+
status: 'pass',
|
|
171
|
+
currentHash,
|
|
172
|
+
});
|
|
173
|
+
}
|
|
174
|
+
else {
|
|
175
|
+
results.push({
|
|
176
|
+
filePath: sig.filePath,
|
|
177
|
+
status: 'tampered',
|
|
178
|
+
currentHash,
|
|
179
|
+
expectedHash: sig.hash,
|
|
180
|
+
});
|
|
181
|
+
}
|
|
182
|
+
}
|
|
183
|
+
// Check for unsigned config files
|
|
184
|
+
const signedPaths = new Set(store.signatures.map(s => s.filePath));
|
|
185
|
+
const allConfigFiles = resolveFiles(targetDir);
|
|
186
|
+
for (const relPath of allConfigFiles) {
|
|
187
|
+
if (!signedPaths.has(relPath)) {
|
|
188
|
+
results.push({
|
|
189
|
+
filePath: relPath,
|
|
190
|
+
status: 'unsigned',
|
|
191
|
+
});
|
|
192
|
+
}
|
|
193
|
+
}
|
|
194
|
+
const report = buildReport('verify', targetDir, results, store.signatures.length);
|
|
195
|
+
if (isJson) {
|
|
196
|
+
process.stdout.write(JSON.stringify(report, null, 2) + '\n');
|
|
197
|
+
}
|
|
198
|
+
else {
|
|
199
|
+
printVerifyReport(report);
|
|
200
|
+
}
|
|
201
|
+
return (report.tampered > 0 || report.missing > 0) ? 1 : 0;
|
|
202
|
+
}
|
|
203
|
+
// --- Status ---
|
|
204
|
+
async function guardStatus(targetDir, options) {
|
|
205
|
+
const isJson = options.format === 'json';
|
|
206
|
+
const store = loadStore(targetDir);
|
|
207
|
+
const signedCount = store?.signatures.length ?? 0;
|
|
208
|
+
const allConfigFiles = resolveFiles(targetDir);
|
|
209
|
+
const signedPaths = new Set(store?.signatures.map(s => s.filePath) ?? []);
|
|
210
|
+
const unsignedCount = allConfigFiles.filter(f => !signedPaths.has(f)).length;
|
|
211
|
+
// Quick tamper check
|
|
212
|
+
let tamperedCount = 0;
|
|
213
|
+
if (store) {
|
|
214
|
+
for (const sig of store.signatures) {
|
|
215
|
+
const fullPath = path.join(targetDir, sig.filePath);
|
|
216
|
+
if (!fs.existsSync(fullPath)) {
|
|
217
|
+
tamperedCount++;
|
|
218
|
+
continue;
|
|
219
|
+
}
|
|
220
|
+
const content = fs.readFileSync(fullPath);
|
|
221
|
+
const currentHash = 'sha256:' + (0, node_crypto_1.createHash)('sha256').update(content).digest('hex');
|
|
222
|
+
if (currentHash !== sig.hash)
|
|
223
|
+
tamperedCount++;
|
|
224
|
+
}
|
|
225
|
+
}
|
|
226
|
+
const statusReport = {
|
|
227
|
+
signed: signedCount,
|
|
228
|
+
unsigned: unsignedCount,
|
|
229
|
+
tampered: tamperedCount,
|
|
230
|
+
lastUpdated: store?.updatedAt ?? null,
|
|
231
|
+
};
|
|
232
|
+
if (isJson) {
|
|
233
|
+
process.stdout.write(JSON.stringify(statusReport, null, 2) + '\n');
|
|
234
|
+
}
|
|
235
|
+
else {
|
|
236
|
+
process.stdout.write((0, colors_js_1.bold)('ConfigGuard Status') + '\n');
|
|
237
|
+
process.stdout.write((0, colors_js_1.gray)('-'.repeat(40)) + '\n');
|
|
238
|
+
process.stdout.write(` Signed: ${(0, colors_js_1.green)(String(signedCount))}\n`);
|
|
239
|
+
process.stdout.write(` Unsigned: ${unsignedCount > 0 ? (0, colors_js_1.yellow)(String(unsignedCount)) : (0, colors_js_1.dim)('0')}\n`);
|
|
240
|
+
process.stdout.write(` Tampered: ${tamperedCount > 0 ? (0, colors_js_1.red)(String(tamperedCount)) : (0, colors_js_1.dim)('0')}\n`);
|
|
241
|
+
if (store?.updatedAt) {
|
|
242
|
+
process.stdout.write((0, colors_js_1.dim)(` Last signed: ${store.updatedAt}\n`));
|
|
243
|
+
}
|
|
244
|
+
process.stdout.write((0, colors_js_1.gray)('-'.repeat(40)) + '\n');
|
|
245
|
+
}
|
|
246
|
+
return tamperedCount > 0 ? 1 : 0;
|
|
247
|
+
}
|
|
248
|
+
// --- Helpers ---
|
|
249
|
+
function resolveFiles(targetDir, customFiles) {
|
|
250
|
+
if (customFiles && customFiles.length > 0) {
|
|
251
|
+
return customFiles.filter(f => fs.existsSync(path.join(targetDir, f)));
|
|
252
|
+
}
|
|
253
|
+
return GUARD_FILES.filter(f => fs.existsSync(path.join(targetDir, f)));
|
|
254
|
+
}
|
|
255
|
+
function loadStore(targetDir) {
|
|
256
|
+
const storePath = path.join(targetDir, STORE_DIR, STORE_FILE);
|
|
257
|
+
if (!fs.existsSync(storePath))
|
|
258
|
+
return null;
|
|
259
|
+
try {
|
|
260
|
+
const raw = fs.readFileSync(storePath, 'utf-8');
|
|
261
|
+
return JSON.parse(raw);
|
|
262
|
+
}
|
|
263
|
+
catch {
|
|
264
|
+
return null;
|
|
265
|
+
}
|
|
266
|
+
}
|
|
267
|
+
function buildReport(subcommand, targetDir, results, totalSigned) {
|
|
268
|
+
return {
|
|
269
|
+
subcommand,
|
|
270
|
+
directory: targetDir,
|
|
271
|
+
results,
|
|
272
|
+
passed: results.filter(r => r.status === 'pass').length,
|
|
273
|
+
tampered: results.filter(r => r.status === 'tampered').length,
|
|
274
|
+
unsigned: results.filter(r => r.status === 'unsigned').length,
|
|
275
|
+
missing: results.filter(r => r.status === 'missing').length,
|
|
276
|
+
totalSigned,
|
|
277
|
+
};
|
|
278
|
+
}
|
|
279
|
+
function printVerifyReport(report) {
|
|
280
|
+
process.stdout.write('\n' + (0, colors_js_1.bold)(' ConfigGuard Verification') + '\n\n');
|
|
281
|
+
process.stdout.write(` ${(0, colors_js_1.dim)('File'.padEnd(28))} ${(0, colors_js_1.dim)('Status'.padEnd(12))} ${(0, colors_js_1.dim)('Hash')}\n`);
|
|
282
|
+
process.stdout.write((0, colors_js_1.gray)(' ' + '-'.repeat(60)) + '\n');
|
|
283
|
+
for (const result of report.results) {
|
|
284
|
+
const statusLabel = result.status === 'pass' ? (0, colors_js_1.green)('PASS')
|
|
285
|
+
: result.status === 'tampered' ? (0, colors_js_1.red)('TAMPERED')
|
|
286
|
+
: result.status === 'unsigned' ? (0, colors_js_1.yellow)('UNSIGNED')
|
|
287
|
+
: (0, colors_js_1.red)('MISSING');
|
|
288
|
+
const hashDisplay = result.currentHash
|
|
289
|
+
? (0, colors_js_1.dim)(result.currentHash.slice(0, 23) + '...')
|
|
290
|
+
: (0, colors_js_1.dim)('--');
|
|
291
|
+
process.stdout.write(` ${result.filePath.padEnd(28)} ${statusLabel.padEnd(20)} ${hashDisplay}\n`);
|
|
292
|
+
if (result.status === 'tampered' && result.expectedHash) {
|
|
293
|
+
process.stdout.write(` ${' '.repeat(28)} ${(0, colors_js_1.dim)('expected: ' + result.expectedHash.slice(0, 23) + '...')}\n`);
|
|
294
|
+
}
|
|
295
|
+
}
|
|
296
|
+
process.stdout.write((0, colors_js_1.gray)(' ' + '-'.repeat(60)) + '\n');
|
|
297
|
+
process.stdout.write(` ${(0, colors_js_1.dim)('Result:')} ${(0, colors_js_1.green)(String(report.passed))} passed, `);
|
|
298
|
+
process.stdout.write(`${report.tampered > 0 ? (0, colors_js_1.red)(String(report.tampered)) : '0'} tampered, `);
|
|
299
|
+
process.stdout.write(`${report.unsigned > 0 ? (0, colors_js_1.yellow)(String(report.unsigned)) : '0'} unsigned\n\n`);
|
|
300
|
+
}
|
|
301
|
+
// --- Testable internals ---
|
|
302
|
+
exports._internals = {
|
|
303
|
+
resolveFiles,
|
|
304
|
+
loadStore,
|
|
305
|
+
GUARD_FILES,
|
|
306
|
+
};
|
|
307
|
+
//# sourceMappingURL=guard.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/commands/guard.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsEH,sBAoBC;AAxFD,4CAA8B;AAC9B,4CAA8B;AAC9B,gDAAkC;AAClC,6CAAyC;AACzC,iDAA8E;AAC9E,mDAA6C;AA6C7C,gCAAgC;AAEhC,MAAM,WAAW,GAAG;IAClB,UAAU,EAAE,WAAW,EAAE,uBAAuB;IAChD,cAAc,EAAE,mBAAmB;IACnC,UAAU,EAAE,SAAS,EAAE,UAAU;IACjC,eAAe,EAAE,uBAAuB;IACxC,eAAe,EAAE,eAAe;IAChC,eAAe,EAAE,QAAQ,EAAE,QAAQ;IACnC,gBAAgB,EAAE,kBAAkB;IACpC,YAAY,EAAE,oBAAoB;CACnC,CAAC;AAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAErC,eAAe;AAER,KAAK,UAAU,KAAK,CAAC,OAAqB;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,wBAAwB,SAAS,IAAI,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3B,KAAK,MAAM;YACT,OAAO,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACvC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,uBAAuB,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;YACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACpE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,eAAe;AAEf,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,OAAqB;IAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,oBAAO,CAAC,yBAAyB,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAE7B,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAsB,EAAE,CAAC;IAEzC,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEvC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEnC,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,OAAO;YACjB,IAAI;YACJ,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,GAAG,cAAc;YACjD,QAAQ,EAAE,IAAI,CAAC,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAE5B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACjF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,kBAAM,EAAC,kCAAkC,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,wBAAwB;IACxB,MAAM,KAAK,GAAmB;QAC5B,OAAO,EAAE,CAAC;QACV,UAAU;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAC/B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACrC,OAAO,CACR,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9H,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,iBAAK,EAAC,UAAU,UAAU,CAAC,MAAM,eAAe,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QAC/G,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,KAAK,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,YAAY,SAAS,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC;AAED,iBAAiB;AAEjB,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,OAAqB;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mDAAmD,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,kBAAM,EAAC,qDAAqD,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,qBAAqB;IACrB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,GAAG,CAAC,IAAI;aACvB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEnF,IAAI,WAAW,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,MAAM;gBACd,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,UAAU;gBAClB,WAAW;gBACX,YAAY,EAAE,GAAG,CAAC,IAAI;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/C,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAElF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,iBAAiB;AAEjB,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,OAAqB;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAEnC,MAAM,WAAW,GAAG,KAAK,EAAE,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE7E,qBAAqB;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,aAAa,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,WAAW,GAAG,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnF,IAAI,WAAW,KAAK,GAAG,CAAC,IAAI;gBAAE,aAAa,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG;QACnB,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,aAAa;QACvB,WAAW,EAAE,KAAK,EAAE,SAAS,IAAI,IAAI;KACtC,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC;QACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAA,iBAAK,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpG,IAAI,KAAK,EAAE,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,kBAAkB,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,kBAAkB;AAElB,SAAS,YAAY,CAAC,SAAiB,EAAE,WAAsB;IAC7D,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,UAAkB,EAClB,SAAiB,EACjB,OAAsB,EACtB,WAAmB;IAEnB,OAAO;QACL,UAAU;QACV,SAAS,EAAE,SAAS;QACpB,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM;QAC7D,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM;QAC7D,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QAC3D,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAmB;IAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAA,gBAAI,EAAC,4BAA4B,CAAC,GAAG,MAAM,CAAC,CAAC;IAEzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAA,eAAG,EAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAA,eAAG,EAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAA,eAAG,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEzD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,MAAM,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,UAAU,CAAC;gBAChD,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,UAAU,CAAC;oBACnD,CAAC,CAAC,IAAA,eAAG,EAAC,SAAS,CAAC,CAAC;QAEnB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW;YACpC,CAAC,CAAC,IAAA,eAAG,EAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;YAC9C,CAAC,CAAC,IAAA,eAAG,EAAC,IAAI,CAAC,CAAC;QAEd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,WAAW,IAAI,CAAC,CAAC;QAEnG,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAA,eAAG,EAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAA,eAAG,EAAC,SAAS,CAAC,IAAI,IAAA,iBAAK,EAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;IACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC;IAC/F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC;AACtG,CAAC;AAED,6BAA6B;AAEhB,QAAA,UAAU,GAAG;IACxB,YAAY;IACZ,SAAS;IACT,WAAW;CACZ,CAAC"}
|