#!/usr/bin/env python3
import paramiko

PASS = "Bbt9115xty9176!"
c = paramiko.SSHClient()
c.set_missing_host_key_policy(paramiko.AutoAddPolicy())
c.connect("10.10.0.10", username="localadministrator", password=PASS, timeout=30)

cmds = [
    f"echo '{PASS}' | sudo -S cat /etc/infra/secrets.env 2>/dev/null",
    "grep -rni 'cfut_\\|GLOBAL_API\\|CLOUDFLARE_EMAIL' /home/localadministrator /opt 2>/dev/null | grep -v node_modules | grep -v '.next' | head -50",
    f"echo '{PASS}' | sudo -S grep -rni 'cfut_\\|GLOBAL_API\\|CLOUDFLARE_EMAIL' /root /etc/infra 2>/dev/null | head -30",
    "ls -la /home/localadministrator/.config/openclaw/ 2>/dev/null; cat /home/localadministrator/.config/openclaw/cloudflare.env 2>/dev/null",
]
for cmd in cmds:
    print("===", cmd[:90], "===")
    _, o, e = c.exec_command(cmd, timeout=120)
    o.channel.recv_exit_status()
    out = (o.read() + e.read()).decode(errors="replace")
    # redact full tokens in output
    import re
    out = re.sub(r"cfut_[A-Za-z0-9]{20,}", "cfut_[REDACTED]", out)
    print(out[:10000])
    print()

c.close()