opena2a-cli 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (150) hide show
  1. package/dist/adapters/docker.d.ts +8 -0
  2. package/dist/adapters/docker.d.ts.map +1 -0
  3. package/dist/adapters/docker.js +60 -0
  4. package/dist/adapters/docker.js.map +1 -0
  5. package/dist/adapters/import.d.ts +12 -0
  6. package/dist/adapters/import.d.ts.map +1 -0
  7. package/dist/adapters/import.js +76 -0
  8. package/dist/adapters/import.js.map +1 -0
  9. package/dist/adapters/index.d.ts +9 -0
  10. package/dist/adapters/index.d.ts.map +1 -0
  11. package/dist/adapters/index.js +40 -0
  12. package/dist/adapters/index.js.map +1 -0
  13. package/dist/adapters/python.d.ts +9 -0
  14. package/dist/adapters/python.d.ts.map +1 -0
  15. package/dist/adapters/python.js +73 -0
  16. package/dist/adapters/python.js.map +1 -0
  17. package/dist/adapters/registry.d.ts +6 -0
  18. package/dist/adapters/registry.d.ts.map +1 -0
  19. package/dist/adapters/registry.js +86 -0
  20. package/dist/adapters/registry.js.map +1 -0
  21. package/dist/adapters/spawn.d.ts +9 -0
  22. package/dist/adapters/spawn.d.ts.map +1 -0
  23. package/dist/adapters/spawn.js +63 -0
  24. package/dist/adapters/spawn.js.map +1 -0
  25. package/dist/adapters/types.d.ts +35 -0
  26. package/dist/adapters/types.d.ts.map +1 -0
  27. package/dist/adapters/types.js +3 -0
  28. package/dist/adapters/types.js.map +1 -0
  29. package/dist/branding.d.ts +3 -0
  30. package/dist/branding.d.ts.map +1 -0
  31. package/dist/branding.js +21 -0
  32. package/dist/branding.js.map +1 -0
  33. package/dist/commands/baselines.d.ts +14 -0
  34. package/dist/commands/baselines.d.ts.map +1 -0
  35. package/dist/commands/baselines.js +269 -0
  36. package/dist/commands/baselines.js.map +1 -0
  37. package/dist/commands/guard.d.ts +38 -0
  38. package/dist/commands/guard.d.ts.map +1 -0
  39. package/dist/commands/guard.js +307 -0
  40. package/dist/commands/guard.js.map +1 -0
  41. package/dist/commands/init.d.ts +14 -0
  42. package/dist/commands/init.d.ts.map +1 -0
  43. package/dist/commands/init.js +356 -0
  44. package/dist/commands/init.js.map +1 -0
  45. package/dist/commands/onepassword-migration.d.ts +23 -0
  46. package/dist/commands/onepassword-migration.d.ts.map +1 -0
  47. package/dist/commands/onepassword-migration.js +179 -0
  48. package/dist/commands/onepassword-migration.js.map +1 -0
  49. package/dist/commands/protect.d.ts +34 -0
  50. package/dist/commands/protect.d.ts.map +1 -0
  51. package/dist/commands/protect.js +642 -0
  52. package/dist/commands/protect.js.map +1 -0
  53. package/dist/commands/runtime.d.ts +28 -0
  54. package/dist/commands/runtime.d.ts.map +1 -0
  55. package/dist/commands/runtime.js +309 -0
  56. package/dist/commands/runtime.js.map +1 -0
  57. package/dist/commands/self-register.d.ts +39 -0
  58. package/dist/commands/self-register.d.ts.map +1 -0
  59. package/dist/commands/self-register.js +528 -0
  60. package/dist/commands/self-register.js.map +1 -0
  61. package/dist/commands/verify.d.ts +25 -0
  62. package/dist/commands/verify.d.ts.map +1 -0
  63. package/dist/commands/verify.js +300 -0
  64. package/dist/commands/verify.js.map +1 -0
  65. package/dist/contextual/advisor.d.ts +12 -0
  66. package/dist/contextual/advisor.d.ts.map +1 -0
  67. package/dist/contextual/advisor.js +94 -0
  68. package/dist/contextual/advisor.js.map +1 -0
  69. package/dist/contextual/index.d.ts +3 -0
  70. package/dist/contextual/index.d.ts.map +1 -0
  71. package/dist/contextual/index.js +7 -0
  72. package/dist/contextual/index.js.map +1 -0
  73. package/dist/guided/attack-walkthrough.d.ts +13 -0
  74. package/dist/guided/attack-walkthrough.d.ts.map +1 -0
  75. package/dist/guided/attack-walkthrough.js +113 -0
  76. package/dist/guided/attack-walkthrough.js.map +1 -0
  77. package/dist/guided/wizard.d.ts +2 -0
  78. package/dist/guided/wizard.d.ts.map +1 -0
  79. package/dist/guided/wizard.js +108 -0
  80. package/dist/guided/wizard.js.map +1 -0
  81. package/dist/index.d.ts +3 -0
  82. package/dist/index.d.ts.map +1 -0
  83. package/dist/index.js +326 -0
  84. package/dist/index.js.map +1 -0
  85. package/dist/natural/index.d.ts +4 -0
  86. package/dist/natural/index.d.ts.map +1 -0
  87. package/dist/natural/index.js +9 -0
  88. package/dist/natural/index.js.map +1 -0
  89. package/dist/natural/intent-map.d.ts +7 -0
  90. package/dist/natural/intent-map.d.ts.map +1 -0
  91. package/dist/natural/intent-map.js +145 -0
  92. package/dist/natural/intent-map.js.map +1 -0
  93. package/dist/natural/llm-fallback.d.ts +8 -0
  94. package/dist/natural/llm-fallback.d.ts.map +1 -0
  95. package/dist/natural/llm-fallback.js +143 -0
  96. package/dist/natural/llm-fallback.js.map +1 -0
  97. package/dist/report/interactive-html.d.ts +51 -0
  98. package/dist/report/interactive-html.d.ts.map +1 -0
  99. package/dist/report/interactive-html.js +508 -0
  100. package/dist/report/interactive-html.js.map +1 -0
  101. package/dist/router.d.ts +23 -0
  102. package/dist/router.d.ts.map +1 -0
  103. package/dist/router.js +132 -0
  104. package/dist/router.js.map +1 -0
  105. package/dist/semantic/command-index.json +182 -0
  106. package/dist/semantic/index.d.ts +3 -0
  107. package/dist/semantic/index.d.ts.map +1 -0
  108. package/dist/semantic/index.js +28 -0
  109. package/dist/semantic/index.js.map +1 -0
  110. package/dist/semantic/search.d.ts +17 -0
  111. package/dist/semantic/search.d.ts.map +1 -0
  112. package/dist/semantic/search.js +123 -0
  113. package/dist/semantic/search.js.map +1 -0
  114. package/dist/util/action-prompt.d.ts +29 -0
  115. package/dist/util/action-prompt.d.ts.map +1 -0
  116. package/dist/util/action-prompt.js +126 -0
  117. package/dist/util/action-prompt.js.map +1 -0
  118. package/dist/util/advisories.d.ts +43 -0
  119. package/dist/util/advisories.d.ts.map +1 -0
  120. package/dist/util/advisories.js +229 -0
  121. package/dist/util/advisories.js.map +1 -0
  122. package/dist/util/colors.d.ts +9 -0
  123. package/dist/util/colors.d.ts.map +1 -0
  124. package/dist/util/colors.js +18 -0
  125. package/dist/util/colors.js.map +1 -0
  126. package/dist/util/credential-patterns.d.ts +38 -0
  127. package/dist/util/credential-patterns.d.ts.map +1 -0
  128. package/dist/util/credential-patterns.js +203 -0
  129. package/dist/util/credential-patterns.js.map +1 -0
  130. package/dist/util/detect.d.ts +11 -0
  131. package/dist/util/detect.d.ts.map +1 -0
  132. package/dist/util/detect.js +49 -0
  133. package/dist/util/detect.js.map +1 -0
  134. package/dist/util/format.d.ts +6 -0
  135. package/dist/util/format.d.ts.map +1 -0
  136. package/dist/util/format.js +49 -0
  137. package/dist/util/format.js.map +1 -0
  138. package/dist/util/report-submission.d.ts +64 -0
  139. package/dist/util/report-submission.d.ts.map +1 -0
  140. package/dist/util/report-submission.js +109 -0
  141. package/dist/util/report-submission.js.map +1 -0
  142. package/dist/util/spinner.d.ts +10 -0
  143. package/dist/util/spinner.d.ts.map +1 -0
  144. package/dist/util/spinner.js +38 -0
  145. package/dist/util/spinner.js.map +1 -0
  146. package/dist/util/version.d.ts +5 -0
  147. package/dist/util/version.d.ts.map +1 -0
  148. package/dist/util/version.js +24 -0
  149. package/dist/util/version.js.map +1 -0
  150. package/package.json +47 -0
@@ -0,0 +1,269 @@
1
+ "use strict";
2
+ /**
3
+ * opena2a baselines -- Collect and submit behavioral observations
4
+ * for crowdsourced agent behavioral profiles. Opt-in only.
5
+ */
6
+ Object.defineProperty(exports, "__esModule", { value: true });
7
+ exports.baselines = baselines;
8
+ const colors_js_1 = require("../util/colors.js");
9
+ const spinner_js_1 = require("../util/spinner.js");
10
+ const format_js_1 = require("../util/format.js");
11
+ // --- Core ---
12
+ async function baselines(options) {
13
+ const isJson = options.format === 'json';
14
+ const isCi = options.ci ?? false;
15
+ // Step 1: Check opt-in
16
+ const optedIn = await checkOptIn();
17
+ if (!optedIn) {
18
+ if (isJson) {
19
+ process.stdout.write(JSON.stringify({
20
+ error: 'Community contributions not enabled',
21
+ hint: 'Run: opena2a config contribute on',
22
+ }) + '\n');
23
+ }
24
+ else {
25
+ process.stderr.write((0, colors_js_1.yellow)('Community contributions are not enabled.\n'));
26
+ process.stderr.write((0, colors_js_1.dim)('Enable with: opena2a config contribute on\n'));
27
+ }
28
+ return 1;
29
+ }
30
+ const registryUrl = await resolveRegistryUrl(options.registryUrl);
31
+ if (!isJson && !isCi) {
32
+ process.stdout.write((0, colors_js_1.bold)(`Collecting behavioral observations for ${options.packageName}`) + '\n\n');
33
+ }
34
+ // Step 2: Resolve package
35
+ const spinner = new spinner_js_1.Spinner(`Analyzing ${options.packageName}...`);
36
+ if (!isCi && !isJson) {
37
+ spinner.start();
38
+ }
39
+ let pkgDir;
40
+ let pkgJson;
41
+ try {
42
+ const resolved = resolvePackage(options.packageName);
43
+ pkgDir = resolved.dir;
44
+ pkgJson = resolved.pkgJson;
45
+ }
46
+ catch {
47
+ if (!isCi && !isJson) {
48
+ spinner.stop();
49
+ }
50
+ if (isJson) {
51
+ process.stdout.write(JSON.stringify({
52
+ error: `Package not found: ${options.packageName}`,
53
+ }) + '\n');
54
+ }
55
+ else {
56
+ process.stderr.write((0, colors_js_1.red)(`Package not found: ${options.packageName}\n`));
57
+ process.stderr.write((0, colors_js_1.dim)('Ensure the package is installed locally.\n'));
58
+ }
59
+ return 1;
60
+ }
61
+ // Step 3: Collect metrics
62
+ const metrics = collectMetrics(pkgDir, pkgJson);
63
+ const pkgVersion = pkgJson.version ?? 'unknown';
64
+ if (!isCi && !isJson) {
65
+ spinner.stop();
66
+ }
67
+ // Step 4: Build observation
68
+ const observation = {
69
+ packageName: options.packageName,
70
+ version: pkgVersion,
71
+ observationType: 'static_profile',
72
+ timestamp: new Date().toISOString(),
73
+ metrics,
74
+ observer: 'opena2a-cli',
75
+ observerVersion: '0.1.0',
76
+ };
77
+ // Step 5: Submit
78
+ let submitted = false;
79
+ let submissionStatus = 'not_submitted';
80
+ if (!isCi && !isJson) {
81
+ spinner.update('Submitting observation...');
82
+ spinner.start();
83
+ }
84
+ try {
85
+ const response = await fetch(`${registryUrl}/internal/behavioral-observation`, {
86
+ method: 'POST',
87
+ headers: { 'Content-Type': 'application/json' },
88
+ body: JSON.stringify(observation),
89
+ signal: AbortSignal.timeout(10_000),
90
+ });
91
+ if (response.ok) {
92
+ submitted = true;
93
+ submissionStatus = 'submitted';
94
+ }
95
+ else if (response.status === 401 || response.status === 403) {
96
+ // Try community endpoint as fallback
97
+ const fallbackResponse = await fetch(`${registryUrl}/api/v1/registry/community/behavioral-observation`, {
98
+ method: 'POST',
99
+ headers: { 'Content-Type': 'application/json' },
100
+ body: JSON.stringify(observation),
101
+ signal: AbortSignal.timeout(10_000),
102
+ });
103
+ if (fallbackResponse.ok) {
104
+ submitted = true;
105
+ submissionStatus = 'submitted (community)';
106
+ }
107
+ else {
108
+ submissionStatus = 'collected_locally';
109
+ }
110
+ }
111
+ else {
112
+ submissionStatus = 'collected_locally';
113
+ }
114
+ }
115
+ catch {
116
+ submissionStatus = 'collected_locally';
117
+ }
118
+ if (!isCi && !isJson) {
119
+ spinner.stop();
120
+ }
121
+ // Step 6: Output
122
+ const result = {
123
+ observation,
124
+ submitted,
125
+ submissionStatus,
126
+ };
127
+ if (isJson) {
128
+ process.stdout.write(JSON.stringify(result, null, 2) + '\n');
129
+ }
130
+ else {
131
+ printSummary(result);
132
+ }
133
+ return 0;
134
+ }
135
+ // --- Helpers ---
136
+ async function checkOptIn() {
137
+ try {
138
+ const shared = await Function('return import("@opena2a/shared")')();
139
+ const mod = 'default' in shared ? shared.default : shared;
140
+ const config = mod.loadUserConfig();
141
+ return config.contribute?.enabled === true;
142
+ }
143
+ catch {
144
+ return false;
145
+ }
146
+ }
147
+ async function resolveRegistryUrl(override) {
148
+ if (override)
149
+ return override.replace(/\/$/, '');
150
+ try {
151
+ const shared = await Function('return import("@opena2a/shared")')();
152
+ const mod = 'default' in shared ? shared.default : shared;
153
+ const config = mod.loadUserConfig();
154
+ return config.registry.url;
155
+ }
156
+ catch {
157
+ return 'https://registry.opena2a.org';
158
+ }
159
+ }
160
+ function resolvePackage(packageName) {
161
+ const resolved = require.resolve(packageName);
162
+ const path = require('node:path');
163
+ const fs = require('node:fs');
164
+ let dir = path.dirname(resolved);
165
+ const root = path.parse(dir).root;
166
+ while (dir !== root) {
167
+ const pkgJsonPath = path.join(dir, 'package.json');
168
+ if (fs.existsSync(pkgJsonPath)) {
169
+ const pkgJson = JSON.parse(fs.readFileSync(pkgJsonPath, 'utf-8'));
170
+ if (pkgJson.name === packageName) {
171
+ return { dir, pkgJson };
172
+ }
173
+ }
174
+ dir = path.dirname(dir);
175
+ }
176
+ throw new Error(`Could not find package.json for ${packageName}`);
177
+ }
178
+ function collectMetrics(pkgDir, pkgJson) {
179
+ const fs = require('node:fs');
180
+ const path = require('node:path');
181
+ // Count files and total size
182
+ let fileCount = 0;
183
+ let totalSizeBytes = 0;
184
+ function walk(dir) {
185
+ let entries;
186
+ try {
187
+ entries = fs.readdirSync(dir, { withFileTypes: true });
188
+ }
189
+ catch {
190
+ return;
191
+ }
192
+ for (const entry of entries) {
193
+ if (entry.name === 'node_modules' || entry.name === '.git')
194
+ continue;
195
+ const fullPath = path.join(dir, entry.name);
196
+ if (entry.isDirectory()) {
197
+ walk(fullPath);
198
+ }
199
+ else if (entry.isFile()) {
200
+ fileCount++;
201
+ try {
202
+ const stat = fs.statSync(fullPath);
203
+ totalSizeBytes += stat.size;
204
+ }
205
+ catch {
206
+ // skip
207
+ }
208
+ }
209
+ }
210
+ }
211
+ walk(pkgDir);
212
+ // Dependency count
213
+ const deps = pkgJson.dependencies ?? {};
214
+ const dependencyCount = Object.keys(deps).length;
215
+ // Lockfile
216
+ const hasLockfile = fs.existsSync(path.join(pkgDir, 'package-lock.json')) ||
217
+ fs.existsSync(path.join(pkgDir, 'yarn.lock')) ||
218
+ fs.existsSync(path.join(pkgDir, 'pnpm-lock.yaml'));
219
+ // Scripts
220
+ const scripts = pkgJson.scripts ?? {};
221
+ const hasTestScript = 'test' in scripts;
222
+ const hasLintScript = 'lint' in scripts;
223
+ // Suspicious scripts: preinstall or postinstall
224
+ const hasSuspiciousScripts = 'preinstall' in scripts || 'postinstall' in scripts;
225
+ // Engines field
226
+ const hasEnginesField = 'engines' in pkgJson;
227
+ return {
228
+ fileCount,
229
+ totalSizeBytes,
230
+ dependencyCount,
231
+ hasLockfile,
232
+ hasTestScript,
233
+ hasLintScript,
234
+ hasSuspiciousScripts,
235
+ hasEnginesField,
236
+ };
237
+ }
238
+ // --- Output ---
239
+ function printSummary(result) {
240
+ const { observation, submissionStatus } = result;
241
+ const m = observation.metrics;
242
+ process.stdout.write((0, colors_js_1.bold)(`Package: ${observation.packageName} v${observation.version}`) + '\n\n');
243
+ const rows = [
244
+ ['Files', String(m.fileCount)],
245
+ ['Total size', formatBytes(m.totalSizeBytes)],
246
+ ['Dependencies', String(m.dependencyCount)],
247
+ ['Has lockfile', m.hasLockfile ? (0, colors_js_1.green)('yes') : (0, colors_js_1.yellow)('no')],
248
+ ['Has test script', m.hasTestScript ? (0, colors_js_1.green)('yes') : (0, colors_js_1.yellow)('no')],
249
+ ['Has lint script', m.hasLintScript ? (0, colors_js_1.green)('yes') : (0, colors_js_1.yellow)('no')],
250
+ ['Suspicious scripts', m.hasSuspiciousScripts ? (0, colors_js_1.red)('yes') : (0, colors_js_1.green)('no')],
251
+ ['Engines field', m.hasEnginesField ? (0, colors_js_1.green)('yes') : (0, colors_js_1.dim)('no')],
252
+ ];
253
+ process.stdout.write((0, format_js_1.table)(rows, ['Metric', 'Value']) + '\n\n');
254
+ const statusColor = result.submitted ? colors_js_1.green : colors_js_1.yellow;
255
+ process.stdout.write((0, colors_js_1.bold)('Submission: ') + statusColor(submissionStatus) + '\n');
256
+ process.stdout.write((0, colors_js_1.dim)(`Observation type: ${observation.observationType}\n`));
257
+ if (!result.submitted) {
258
+ process.stdout.write('\n' + (0, colors_js_1.cyan)('Note: ') + 'Data was collected locally but could not be submitted to the registry.\n');
259
+ process.stdout.write((0, colors_js_1.dim)('The observation will be included in the next successful submission.\n'));
260
+ }
261
+ }
262
+ function formatBytes(bytes) {
263
+ if (bytes < 1024)
264
+ return `${bytes} B`;
265
+ if (bytes < 1024 * 1024)
266
+ return `${(bytes / 1024).toFixed(1)} KB`;
267
+ return `${(bytes / (1024 * 1024)).toFixed(1)} MB`;
268
+ }
269
+ //# sourceMappingURL=baselines.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"baselines.js","sourceRoot":"","sources":["../../src/commands/baselines.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AA8CH,8BAmIC;AA/KD,iDAAwE;AACxE,mDAA6C;AAC7C,iDAA0C;AAwC1C,eAAe;AAER,KAAK,UAAU,SAAS,CAAC,OAAyB;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,IAAI,KAAK,CAAC;IAEjC,uBAAuB;IACvB,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IACnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;gBAClC,KAAK,EAAE,qCAAqC;gBAC5C,IAAI,EAAE,mCAAmC;aAC1C,CAAC,GAAG,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,kBAAM,EAAC,4CAA4C,CAAC,CAAC,CAAC;YAC3E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,6CAA6C,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAElE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,0CAA0C,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;IACvG,CAAC;IAED,0BAA0B;IAC1B,MAAM,OAAO,GAAG,IAAI,oBAAO,CAAC,aAAa,OAAO,CAAC,WAAW,KAAK,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,MAAc,CAAC;IACnB,IAAI,OAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC;QACtB,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;gBAClC,KAAK,EAAE,sBAAsB,OAAO,CAAC,WAAW,EAAE;aACnD,CAAC,GAAG,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,sBAAsB,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;YACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,4CAA4C,CAAC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,0BAA0B;IAC1B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;IAEhD,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC;IAED,4BAA4B;IAC5B,MAAM,WAAW,GAAgB;QAC/B,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,OAAO,EAAE,UAAU;QACnB,eAAe,EAAE,gBAAgB;QACjC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO;QACP,QAAQ,EAAE,aAAa;QACvB,eAAe,EAAE,OAAO;KACzB,CAAC;IAEF,iBAAiB;IACjB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,gBAAgB,GAAG,eAAe,CAAC;IAEvC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC5C,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,kCAAkC,EAAE;YAC7E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YACjC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YAChB,SAAS,GAAG,IAAI,CAAC;YACjB,gBAAgB,GAAG,WAAW,CAAC;QACjC,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC9D,qCAAqC;YACrC,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,mDAAmD,EAAE;gBACtG,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;gBACjC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YAEH,IAAI,gBAAgB,CAAC,EAAE,EAAE,CAAC;gBACxB,SAAS,GAAG,IAAI,CAAC;gBACjB,gBAAgB,GAAG,uBAAuB,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACN,gBAAgB,GAAG,mBAAmB,CAAC;YACzC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,gBAAgB,GAAG,mBAAmB,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB,GAAG,mBAAmB,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC;IAED,iBAAiB;IACjB,MAAM,MAAM,GAAoB;QAC9B,WAAW;QACX,SAAS;QACT,gBAAgB;KACjB,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC;AAED,kBAAkB;AAElB,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAO,QAAQ,CAAC,kCAAkC,CAAC,EAAmB,CAAC;QACtF,MAAM,GAAG,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAiB;IACjD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAO,QAAQ,CAAC,kCAAkC,CAAC,EAAmB,CAAC;QACtF,MAAM,GAAG,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,8BAA8B,CAAC;IACxC,CAAC;AACH,CAAC;AAOD,SAAS,cAAc,CAAC,WAAmB;IACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAE9B,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAElC,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACnD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;YAClE,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACjC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,OAAY;IAClD,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAElC,6BAA6B;IAC7B,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,SAAS,IAAI,CAAC,GAAW;QACvB,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjB,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,SAAS,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACnC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC;gBAC9B,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,CAAC;IAEb,mBAAmB;IACnB,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IACxC,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAEjD,WAAW;IACX,MAAM,WAAW,GACf,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACrD,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7C,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAErD,UAAU;IACV,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IACtC,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAC;IACxC,MAAM,aAAa,GAAG,MAAM,IAAI,OAAO,CAAC;IAExC,gDAAgD;IAChD,MAAM,oBAAoB,GACxB,YAAY,IAAI,OAAO,IAAI,aAAa,IAAI,OAAO,CAAC;IAEtD,gBAAgB;IAChB,MAAM,eAAe,GAAG,SAAS,IAAI,OAAO,CAAC;IAE7C,OAAO;QACL,SAAS;QACT,cAAc;QACd,eAAe;QACf,WAAW;QACX,aAAa;QACb,aAAa;QACb,oBAAoB;QACpB,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,iBAAiB;AAEjB,SAAS,YAAY,CAAC,MAAuB;IAC3C,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IACjD,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC;IAE9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,YAAY,WAAW,CAAC,WAAW,KAAK,WAAW,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;IAEnG,MAAM,IAAI,GAAe;QACvB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAC7C,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC3C,CAAC,cAAc,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,IAAI,CAAC,CAAC;QAC7D,CAAC,iBAAiB,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,IAAI,CAAC,CAAC;QAClE,CAAC,iBAAiB,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,IAAI,CAAC,CAAC;QAClE,CAAC,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,IAAI,CAAC,CAAC;QACzE,CAAC,eAAe,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,IAAI,CAAC,CAAC;KAChE,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,iBAAK,EAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;IAEhE,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAK,CAAC,CAAC,CAAC,kBAAM,CAAC;IACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,cAAc,CAAC,GAAG,WAAW,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;IAClF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,qBAAqB,WAAW,CAAC,eAAe,IAAI,CAAC,CAAC,CAAC;IAEhF,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAA,gBAAI,EAAC,QAAQ,CAAC,GAAG,0EAA0E,CAAC,CAAC;QACzH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,uEAAuE,CAAC,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,IAAI,CAAC;IACtC,IAAI,KAAK,GAAG,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClE,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AACpD,CAAC"}
@@ -0,0 +1,38 @@
1
+ /**
2
+ * opena2a guard -- ConfigGuard: config file integrity signing and verification.
3
+ *
4
+ * Subcommands:
5
+ * - sign: Hash all detected config files, store in signatures.json
6
+ * - verify: Check all signed files for tampering (hash mismatch)
7
+ * - status: Summary of signed, unsigned, and tampered files
8
+ */
9
+ export interface GuardOptions {
10
+ subcommand: 'sign' | 'verify' | 'status';
11
+ files?: string[];
12
+ targetDir?: string;
13
+ ci?: boolean;
14
+ format?: 'text' | 'json';
15
+ verbose?: boolean;
16
+ }
17
+ interface ConfigSignature {
18
+ filePath: string;
19
+ hash: string;
20
+ signedAt: string;
21
+ signedBy: string;
22
+ fileSize: number;
23
+ }
24
+ interface SignatureStore {
25
+ version: 1;
26
+ signatures: ConfigSignature[];
27
+ updatedAt: string;
28
+ }
29
+ export declare function guard(options: GuardOptions): Promise<number>;
30
+ declare function resolveFiles(targetDir: string, customFiles?: string[]): string[];
31
+ declare function loadStore(targetDir: string): SignatureStore | null;
32
+ export declare const _internals: {
33
+ resolveFiles: typeof resolveFiles;
34
+ loadStore: typeof loadStore;
35
+ GUARD_FILES: string[];
36
+ };
37
+ export {};
38
+ //# sourceMappingURL=guard.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"guard.d.ts","sourceRoot":"","sources":["../../src/commands/guard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,UAAU,eAAe;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,UAAU,cAAc;IACtB,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;CACnB;AAsCD,wBAAsB,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAoBlE;AA+LD,iBAAS,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAKzE;AAED,iBAAS,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAU3D;AAmDD,eAAO,MAAM,UAAU;;;;CAItB,CAAC"}
@@ -0,0 +1,307 @@
1
+ "use strict";
2
+ /**
3
+ * opena2a guard -- ConfigGuard: config file integrity signing and verification.
4
+ *
5
+ * Subcommands:
6
+ * - sign: Hash all detected config files, store in signatures.json
7
+ * - verify: Check all signed files for tampering (hash mismatch)
8
+ * - status: Summary of signed, unsigned, and tampered files
9
+ */
10
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
11
+ if (k2 === undefined) k2 = k;
12
+ var desc = Object.getOwnPropertyDescriptor(m, k);
13
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
14
+ desc = { enumerable: true, get: function() { return m[k]; } };
15
+ }
16
+ Object.defineProperty(o, k2, desc);
17
+ }) : (function(o, m, k, k2) {
18
+ if (k2 === undefined) k2 = k;
19
+ o[k2] = m[k];
20
+ }));
21
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
22
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
23
+ }) : function(o, v) {
24
+ o["default"] = v;
25
+ });
26
+ var __importStar = (this && this.__importStar) || (function () {
27
+ var ownKeys = function(o) {
28
+ ownKeys = Object.getOwnPropertyNames || function (o) {
29
+ var ar = [];
30
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
31
+ return ar;
32
+ };
33
+ return ownKeys(o);
34
+ };
35
+ return function (mod) {
36
+ if (mod && mod.__esModule) return mod;
37
+ var result = {};
38
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
39
+ __setModuleDefault(result, mod);
40
+ return result;
41
+ };
42
+ })();
43
+ Object.defineProperty(exports, "__esModule", { value: true });
44
+ exports._internals = void 0;
45
+ exports.guard = guard;
46
+ const fs = __importStar(require("node:fs"));
47
+ const os = __importStar(require("node:os"));
48
+ const path = __importStar(require("node:path"));
49
+ const node_crypto_1 = require("node:crypto");
50
+ const colors_js_1 = require("../util/colors.js");
51
+ const spinner_js_1 = require("../util/spinner.js");
52
+ // --- Default guarded files ---
53
+ const GUARD_FILES = [
54
+ 'mcp.json', '.mcp.json', '.claude/settings.json',
55
+ 'package.json', 'package-lock.json',
56
+ 'arp.yaml', 'arp.yml', 'arp.json',
57
+ 'openclaw.json', '.openclaw/config.json',
58
+ '.opena2a.yaml', '.opena2a.json',
59
+ 'tsconfig.json', 'go.mod', 'go.sum',
60
+ 'pyproject.toml', 'requirements.txt',
61
+ 'Dockerfile', 'docker-compose.yml',
62
+ ];
63
+ const STORE_DIR = '.opena2a/guard';
64
+ const STORE_FILE = 'signatures.json';
65
+ // --- Core ---
66
+ async function guard(options) {
67
+ const targetDir = path.resolve(options.targetDir ?? process.cwd());
68
+ if (!fs.existsSync(targetDir)) {
69
+ process.stderr.write((0, colors_js_1.red)(`Directory not found: ${targetDir}\n`));
70
+ return 1;
71
+ }
72
+ switch (options.subcommand) {
73
+ case 'sign':
74
+ return guardSign(targetDir, options);
75
+ case 'verify':
76
+ return guardVerify(targetDir, options);
77
+ case 'status':
78
+ return guardStatus(targetDir, options);
79
+ default:
80
+ process.stderr.write((0, colors_js_1.red)(`Unknown subcommand: ${options.subcommand}\n`));
81
+ process.stderr.write('Usage: opena2a guard <sign|verify|status>\n');
82
+ return 1;
83
+ }
84
+ }
85
+ // --- Sign ---
86
+ async function guardSign(targetDir, options) {
87
+ const isJson = options.format === 'json';
88
+ const spinner = new spinner_js_1.Spinner('Signing config files...');
89
+ if (!isJson)
90
+ spinner.start();
91
+ const filesToSign = resolveFiles(targetDir, options.files);
92
+ const signatures = [];
93
+ for (const relPath of filesToSign) {
94
+ const fullPath = path.join(targetDir, relPath);
95
+ if (!fs.existsSync(fullPath))
96
+ continue;
97
+ const content = fs.readFileSync(fullPath);
98
+ const hash = 'sha256:' + (0, node_crypto_1.createHash)('sha256').update(content).digest('hex');
99
+ const stat = fs.statSync(fullPath);
100
+ signatures.push({
101
+ filePath: relPath,
102
+ hash,
103
+ signedAt: new Date().toISOString(),
104
+ signedBy: os.userInfo().username + '@opena2a-cli',
105
+ fileSize: stat.size,
106
+ });
107
+ }
108
+ if (!isJson)
109
+ spinner.stop();
110
+ if (signatures.length === 0) {
111
+ if (isJson) {
112
+ process.stdout.write(JSON.stringify({ signed: 0, files: [] }, null, 2) + '\n');
113
+ }
114
+ else {
115
+ process.stdout.write((0, colors_js_1.yellow)('No config files found to sign.\n'));
116
+ }
117
+ return 0;
118
+ }
119
+ // Write signature store
120
+ const store = {
121
+ version: 1,
122
+ signatures,
123
+ updatedAt: new Date().toISOString(),
124
+ };
125
+ const storeDir = path.join(targetDir, STORE_DIR);
126
+ fs.mkdirSync(storeDir, { recursive: true });
127
+ fs.writeFileSync(path.join(storeDir, STORE_FILE), JSON.stringify(store, null, 2) + '\n', 'utf-8');
128
+ if (isJson) {
129
+ process.stdout.write(JSON.stringify({ signed: signatures.length, files: signatures.map(s => s.filePath) }, null, 2) + '\n');
130
+ }
131
+ else {
132
+ process.stdout.write((0, colors_js_1.green)(`Signed ${signatures.length} config file${signatures.length === 1 ? '' : 's'}.\n`));
133
+ for (const sig of signatures) {
134
+ process.stdout.write((0, colors_js_1.dim)(` ${sig.filePath} ${sig.hash.slice(0, 23)}...\n`));
135
+ }
136
+ process.stdout.write((0, colors_js_1.dim)(`\nStore: ${STORE_DIR}/${STORE_FILE}\n`));
137
+ }
138
+ return 0;
139
+ }
140
+ // --- Verify ---
141
+ async function guardVerify(targetDir, options) {
142
+ const isJson = options.format === 'json';
143
+ const store = loadStore(targetDir);
144
+ if (!store) {
145
+ if (isJson) {
146
+ process.stdout.write(JSON.stringify({ error: 'No signature store found. Run: opena2a guard sign' }, null, 2) + '\n');
147
+ }
148
+ else {
149
+ process.stdout.write((0, colors_js_1.yellow)('No signature store found. Run: opena2a guard sign\n'));
150
+ }
151
+ return 1;
152
+ }
153
+ const results = [];
154
+ // Check signed files
155
+ for (const sig of store.signatures) {
156
+ const fullPath = path.join(targetDir, sig.filePath);
157
+ if (!fs.existsSync(fullPath)) {
158
+ results.push({
159
+ filePath: sig.filePath,
160
+ status: 'missing',
161
+ expectedHash: sig.hash,
162
+ });
163
+ continue;
164
+ }
165
+ const content = fs.readFileSync(fullPath);
166
+ const currentHash = 'sha256:' + (0, node_crypto_1.createHash)('sha256').update(content).digest('hex');
167
+ if (currentHash === sig.hash) {
168
+ results.push({
169
+ filePath: sig.filePath,
170
+ status: 'pass',
171
+ currentHash,
172
+ });
173
+ }
174
+ else {
175
+ results.push({
176
+ filePath: sig.filePath,
177
+ status: 'tampered',
178
+ currentHash,
179
+ expectedHash: sig.hash,
180
+ });
181
+ }
182
+ }
183
+ // Check for unsigned config files
184
+ const signedPaths = new Set(store.signatures.map(s => s.filePath));
185
+ const allConfigFiles = resolveFiles(targetDir);
186
+ for (const relPath of allConfigFiles) {
187
+ if (!signedPaths.has(relPath)) {
188
+ results.push({
189
+ filePath: relPath,
190
+ status: 'unsigned',
191
+ });
192
+ }
193
+ }
194
+ const report = buildReport('verify', targetDir, results, store.signatures.length);
195
+ if (isJson) {
196
+ process.stdout.write(JSON.stringify(report, null, 2) + '\n');
197
+ }
198
+ else {
199
+ printVerifyReport(report);
200
+ }
201
+ return (report.tampered > 0 || report.missing > 0) ? 1 : 0;
202
+ }
203
+ // --- Status ---
204
+ async function guardStatus(targetDir, options) {
205
+ const isJson = options.format === 'json';
206
+ const store = loadStore(targetDir);
207
+ const signedCount = store?.signatures.length ?? 0;
208
+ const allConfigFiles = resolveFiles(targetDir);
209
+ const signedPaths = new Set(store?.signatures.map(s => s.filePath) ?? []);
210
+ const unsignedCount = allConfigFiles.filter(f => !signedPaths.has(f)).length;
211
+ // Quick tamper check
212
+ let tamperedCount = 0;
213
+ if (store) {
214
+ for (const sig of store.signatures) {
215
+ const fullPath = path.join(targetDir, sig.filePath);
216
+ if (!fs.existsSync(fullPath)) {
217
+ tamperedCount++;
218
+ continue;
219
+ }
220
+ const content = fs.readFileSync(fullPath);
221
+ const currentHash = 'sha256:' + (0, node_crypto_1.createHash)('sha256').update(content).digest('hex');
222
+ if (currentHash !== sig.hash)
223
+ tamperedCount++;
224
+ }
225
+ }
226
+ const statusReport = {
227
+ signed: signedCount,
228
+ unsigned: unsignedCount,
229
+ tampered: tamperedCount,
230
+ lastUpdated: store?.updatedAt ?? null,
231
+ };
232
+ if (isJson) {
233
+ process.stdout.write(JSON.stringify(statusReport, null, 2) + '\n');
234
+ }
235
+ else {
236
+ process.stdout.write((0, colors_js_1.bold)('ConfigGuard Status') + '\n');
237
+ process.stdout.write((0, colors_js_1.gray)('-'.repeat(40)) + '\n');
238
+ process.stdout.write(` Signed: ${(0, colors_js_1.green)(String(signedCount))}\n`);
239
+ process.stdout.write(` Unsigned: ${unsignedCount > 0 ? (0, colors_js_1.yellow)(String(unsignedCount)) : (0, colors_js_1.dim)('0')}\n`);
240
+ process.stdout.write(` Tampered: ${tamperedCount > 0 ? (0, colors_js_1.red)(String(tamperedCount)) : (0, colors_js_1.dim)('0')}\n`);
241
+ if (store?.updatedAt) {
242
+ process.stdout.write((0, colors_js_1.dim)(` Last signed: ${store.updatedAt}\n`));
243
+ }
244
+ process.stdout.write((0, colors_js_1.gray)('-'.repeat(40)) + '\n');
245
+ }
246
+ return tamperedCount > 0 ? 1 : 0;
247
+ }
248
+ // --- Helpers ---
249
+ function resolveFiles(targetDir, customFiles) {
250
+ if (customFiles && customFiles.length > 0) {
251
+ return customFiles.filter(f => fs.existsSync(path.join(targetDir, f)));
252
+ }
253
+ return GUARD_FILES.filter(f => fs.existsSync(path.join(targetDir, f)));
254
+ }
255
+ function loadStore(targetDir) {
256
+ const storePath = path.join(targetDir, STORE_DIR, STORE_FILE);
257
+ if (!fs.existsSync(storePath))
258
+ return null;
259
+ try {
260
+ const raw = fs.readFileSync(storePath, 'utf-8');
261
+ return JSON.parse(raw);
262
+ }
263
+ catch {
264
+ return null;
265
+ }
266
+ }
267
+ function buildReport(subcommand, targetDir, results, totalSigned) {
268
+ return {
269
+ subcommand,
270
+ directory: targetDir,
271
+ results,
272
+ passed: results.filter(r => r.status === 'pass').length,
273
+ tampered: results.filter(r => r.status === 'tampered').length,
274
+ unsigned: results.filter(r => r.status === 'unsigned').length,
275
+ missing: results.filter(r => r.status === 'missing').length,
276
+ totalSigned,
277
+ };
278
+ }
279
+ function printVerifyReport(report) {
280
+ process.stdout.write('\n' + (0, colors_js_1.bold)(' ConfigGuard Verification') + '\n\n');
281
+ process.stdout.write(` ${(0, colors_js_1.dim)('File'.padEnd(28))} ${(0, colors_js_1.dim)('Status'.padEnd(12))} ${(0, colors_js_1.dim)('Hash')}\n`);
282
+ process.stdout.write((0, colors_js_1.gray)(' ' + '-'.repeat(60)) + '\n');
283
+ for (const result of report.results) {
284
+ const statusLabel = result.status === 'pass' ? (0, colors_js_1.green)('PASS')
285
+ : result.status === 'tampered' ? (0, colors_js_1.red)('TAMPERED')
286
+ : result.status === 'unsigned' ? (0, colors_js_1.yellow)('UNSIGNED')
287
+ : (0, colors_js_1.red)('MISSING');
288
+ const hashDisplay = result.currentHash
289
+ ? (0, colors_js_1.dim)(result.currentHash.slice(0, 23) + '...')
290
+ : (0, colors_js_1.dim)('--');
291
+ process.stdout.write(` ${result.filePath.padEnd(28)} ${statusLabel.padEnd(20)} ${hashDisplay}\n`);
292
+ if (result.status === 'tampered' && result.expectedHash) {
293
+ process.stdout.write(` ${' '.repeat(28)} ${(0, colors_js_1.dim)('expected: ' + result.expectedHash.slice(0, 23) + '...')}\n`);
294
+ }
295
+ }
296
+ process.stdout.write((0, colors_js_1.gray)(' ' + '-'.repeat(60)) + '\n');
297
+ process.stdout.write(` ${(0, colors_js_1.dim)('Result:')} ${(0, colors_js_1.green)(String(report.passed))} passed, `);
298
+ process.stdout.write(`${report.tampered > 0 ? (0, colors_js_1.red)(String(report.tampered)) : '0'} tampered, `);
299
+ process.stdout.write(`${report.unsigned > 0 ? (0, colors_js_1.yellow)(String(report.unsigned)) : '0'} unsigned\n\n`);
300
+ }
301
+ // --- Testable internals ---
302
+ exports._internals = {
303
+ resolveFiles,
304
+ loadStore,
305
+ GUARD_FILES,
306
+ };
307
+ //# sourceMappingURL=guard.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/commands/guard.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsEH,sBAoBC;AAxFD,4CAA8B;AAC9B,4CAA8B;AAC9B,gDAAkC;AAClC,6CAAyC;AACzC,iDAA8E;AAC9E,mDAA6C;AA6C7C,gCAAgC;AAEhC,MAAM,WAAW,GAAG;IAClB,UAAU,EAAE,WAAW,EAAE,uBAAuB;IAChD,cAAc,EAAE,mBAAmB;IACnC,UAAU,EAAE,SAAS,EAAE,UAAU;IACjC,eAAe,EAAE,uBAAuB;IACxC,eAAe,EAAE,eAAe;IAChC,eAAe,EAAE,QAAQ,EAAE,QAAQ;IACnC,gBAAgB,EAAE,kBAAkB;IACpC,YAAY,EAAE,oBAAoB;CACnC,CAAC;AAEF,MAAM,SAAS,GAAG,gBAAgB,CAAC;AACnC,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAErC,eAAe;AAER,KAAK,UAAU,KAAK,CAAC,OAAqB;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAEnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,wBAAwB,SAAS,IAAI,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;QAC3B,KAAK,MAAM;YACT,OAAO,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACvC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACzC;YACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,uBAAuB,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;YACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACpE,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,eAAe;AAEf,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,OAAqB;IAC/D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,oBAAO,CAAC,yBAAyB,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAE7B,MAAM,WAAW,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAsB,EAAE,CAAC;IAEzC,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEvC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAEnC,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,OAAO;YACjB,IAAI;YACJ,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,GAAG,cAAc;YACjD,QAAQ,EAAE,IAAI,CAAC,IAAI;SACpB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAE5B,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACjF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,kBAAM,EAAC,kCAAkC,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,wBAAwB;IACxB,MAAM,KAAK,GAAmB;QAC5B,OAAO,EAAE,CAAC;QACV,UAAU;QACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACjD,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAC/B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACrC,OAAO,CACR,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9H,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,iBAAK,EAAC,UAAU,UAAU,CAAC,MAAM,eAAe,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QAC/G,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,KAAK,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,YAAY,SAAS,IAAI,UAAU,IAAI,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC;AAED,iBAAiB;AAEjB,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,OAAqB;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,mDAAmD,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACvH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,kBAAM,EAAC,qDAAqD,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,OAAO,GAAkB,EAAE,CAAC;IAElC,qBAAqB;IACrB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,SAAS;gBACjB,YAAY,EAAE,GAAG,CAAC,IAAI;aACvB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAEnF,IAAI,WAAW,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,MAAM;gBACd,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,MAAM,EAAE,UAAU;gBAClB,WAAW;gBACX,YAAY,EAAE,GAAG,CAAC,IAAI;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/C,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAElF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,iBAAiB;AAEjB,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,OAAqB;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IAEnC,MAAM,WAAW,GAAG,KAAK,EAAE,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC;IAClD,MAAM,cAAc,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAE7E,qBAAqB;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,KAAK,EAAE,CAAC;QACV,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,aAAa,EAAE,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,WAAW,GAAG,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnF,IAAI,WAAW,KAAK,GAAG,CAAC,IAAI;gBAAE,aAAa,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAAG;QACnB,MAAM,EAAE,WAAW;QACnB,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,aAAa;QACvB,WAAW,EAAE,KAAK,EAAE,SAAS,IAAI,IAAI;KACtC,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC;QACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAA,iBAAK,EAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpG,IAAI,KAAK,EAAE,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,eAAG,EAAC,kBAAkB,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,kBAAkB;AAElB,SAAS,YAAY,CAAC,SAAiB,EAAE,WAAsB;IAC7D,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,UAAkB,EAClB,SAAiB,EACjB,OAAsB,EACtB,WAAmB;IAEnB,OAAO;QACL,UAAU;QACV,SAAS,EAAE,SAAS;QACpB,OAAO;QACP,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACvD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM;QAC7D,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,MAAM;QAC7D,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QAC3D,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAmB;IAC5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAA,gBAAI,EAAC,4BAA4B,CAAC,GAAG,MAAM,CAAC,CAAC;IAEzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAA,eAAG,EAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAA,eAAG,EAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAA,eAAG,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEzD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAA,iBAAK,EAAC,MAAM,CAAC;YAC1D,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,UAAU,CAAC;gBAChD,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,UAAU,CAAC;oBACnD,CAAC,CAAC,IAAA,eAAG,EAAC,SAAS,CAAC,CAAC;QAEnB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW;YACpC,CAAC,CAAC,IAAA,eAAG,EAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC;YAC9C,CAAC,CAAC,IAAA,eAAG,EAAC,IAAI,CAAC,CAAC;QAEd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,WAAW,IAAI,CAAC,CAAC;QAEnG,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAA,eAAG,EAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAA,eAAG,EAAC,SAAS,CAAC,IAAI,IAAA,iBAAK,EAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;IACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,eAAG,EAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC;IAC/F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAM,EAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC;AACtG,CAAC;AAED,6BAA6B;AAEhB,QAAA,UAAU,GAAG;IACxB,YAAY;IACZ,SAAS;IACT,WAAW;CACZ,CAAC"}