@integsec/agentic-pentest-proxy 0.2.5 → 0.2.7

package/dist/src/audit/local.js.map

@@ -1 +1 @@
-{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/audit/local.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IACnB,QAAQ,CAAS;IACzB,6DAA6D;IACrD,MAAM,GAA8B,IAAI,GAAG,EAAE,CAAC;IAEtD,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,MAAM,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,YAAY,QAAQ,CAAC,CAAC;YACnE,4EAA4E;YAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACtE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF"}
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../../src/audit/local.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,OAAO,gBAAgB;IACnB,QAAQ,CAAS;IACzB,6DAA6D;IACrD,MAAM,GAA8B,IAAI,GAAG,EAAE,CAAC;IAEtD,YAAY,QAAgB;QAC1B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,MAAM,EAAE,GAAG,KAAK,CAAC,aAAa,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,mCAAmC;QACnC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,KAAK,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,kBAAkB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YACvF,4EAA4E;YAC5E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YACtE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QACD,sCAAsC;QACtC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;CACF"}

package/dist/src/builder/dry-run.d.ts

@@ -0,0 +1,12 @@
+import type { ScopeManifest, Decision } from "../types.js";
+import { DnsResolver } from "../dns-resolver.js";
+export interface DryRunResult {
+    target: string;
+    tool: string;
+    expected: "ALLOWED" | "BLOCKED";
+    actual: Decision;
+    pass: boolean;
+    reason: string;
+}
+export declare function runDryRun(manifest: ScopeManifest, resolver?: DnsResolver): Promise<DryRunResult[]>;
+//# sourceMappingURL=dry-run.d.ts.map

package/dist/src/builder/dry-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dry-run.d.ts","sourceRoot":"","sources":["../../../src/builder/dry-run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGjD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,SAAS,GAAG,SAAS,CAAC;IAChC,MAAM,EAAE,QAAQ,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,aAAa,EACvB,QAAQ,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,YAAY,EAAE,CAAC,CA4FzB"}

package/dist/src/builder/dry-run.js

@@ -0,0 +1,103 @@
+import { ScopeValidator } from "../validator.js";
+import { DnsResolver } from "../dns-resolver.js";
+import { isIpInCidr } from "../ip-matcher.js";
+export async function runDryRun(manifest, resolver) {
+    const dnsResolver = resolver ?? new DnsResolver(0);
+    const validator = new ScopeValidator(manifest, dnsResolver);
+    const results = [];
+    // Test each authorized domain
+    for (const domain of manifest.authorized_targets.domains) {
+        const testDomain = domain.startsWith("*.") ? `test-sample.${domain.slice(2)}` : domain;
+        const result = await validator.validate("nmap", { target: testDomain });
+        results.push({
+            target: testDomain,
+            tool: "nmap",
+            expected: "ALLOWED",
+            actual: result.decision,
+            pass: result.decision === "ALLOWED",
+            reason: result.reason,
+        });
+    }
+    // Test a sample IP from each authorized range
+    for (const range of manifest.authorized_targets.ip_ranges) {
+        const sampleIp = sampleIpFromCidr(range);
+        if (!sampleIp)
+            continue;
+        const result = await validator.validate("nmap", { target: sampleIp });
+        results.push({
+            target: sampleIp,
+            tool: "nmap",
+            expected: "ALLOWED",
+            actual: result.decision,
+            pass: result.decision === "ALLOWED",
+            reason: result.reason,
+        });
+    }
+    // Test each excluded target
+    for (const excluded of manifest.excluded_targets) {
+        const result = await validator.validate("nmap", { target: excluded });
+        results.push({
+            target: excluded,
+            tool: "nmap",
+            expected: "BLOCKED",
+            actual: result.decision,
+            pass: result.decision.startsWith("BLOCKED"),
+            reason: result.reason,
+        });
+    }
+    // Test sensitive targets — always expected BLOCKED unless explicitly authorized
+    const sensitiveTargets = ["169.254.169.254", "8.8.8.8"];
+    for (const target of sensitiveTargets) {
+        const isAuthorized = manifest.authorized_targets.ip_ranges.some((range) => isIpInCidr(target, range));
+        const result = await validator.validate("curl", { url: `http://${target}/` });
+        results.push({
+            target,
+            tool: "curl",
+            expected: isAuthorized ? "ALLOWED" : "BLOCKED",
+            actual: result.decision,
+            pass: isAuthorized
+                ? result.decision === "ALLOWED"
+                : result.decision.startsWith("BLOCKED"),
+            reason: result.reason,
+        });
+    }
+    // Universal canary probes: representative targets an operator would normally
+    // authorize. If the manifest does not cover them they will be BLOCKED, which
+    // surfaces as a surprise (pass=false) and signals under-specified scope.
+    const canaryTargets = [
+        { target: "192.168.1.1", tool: "nmap" },
+        { target: "10.0.0.1", tool: "nmap" },
+    ];
+    for (const { target, tool } of canaryTargets) {
+        const isAuthorized = manifest.authorized_targets.ip_ranges.some((range) => isIpInCidr(target, range)) ||
+            manifest.authorized_targets.domains.some((d) => d === target);
+        if (isAuthorized)
+            continue; // already covered by authorized range probes above
+        const result = await validator.validate(tool, { target });
+        results.push({
+            target,
+            tool,
+            expected: "ALLOWED",
+            actual: result.decision,
+            pass: result.decision === "ALLOWED",
+            reason: result.reason,
+        });
+    }
+    return results;
+}
+function sampleIpFromCidr(cidr) {
+    if (!cidr.includes("/"))
+        return cidr;
+    const [base, prefix] = cidr.split("/");
+    const prefixNum = parseInt(prefix, 10);
+    if (prefixNum >= 32 || (base.includes(":") && prefixNum >= 128))
+        return base;
+    if (!base.includes(":")) {
+        const parts = base.split(".");
+        const offset = Math.min(50, Math.pow(2, 32 - prefixNum) - 2);
+        parts[3] = String(parseInt(parts[3], 10) + offset);
+        return parts.join(".");
+    }
+    return base;
+}
+//# sourceMappingURL=dry-run.js.map

package/dist/src/builder/dry-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dry-run.js","sourceRoot":"","sources":["../../../src/builder/dry-run.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAW9C,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAuB,EACvB,QAAsB;IAEtB,MAAM,WAAW,GAAG,QAAQ,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,8BAA8B;IAC9B,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QACvF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,IAAI,EAAE,MAAM,CAAC,QAAQ,KAAK,SAAS;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,8CAA8C;IAC9C,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC;QAC1D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,IAAI,EAAE,MAAM,CAAC,QAAQ,KAAK,SAAS;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,4BAA4B;IAC5B,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;YAC3C,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,MAAM,gBAAgB,GAAG,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC;IACxD,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,QAAQ,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACxE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAC1B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,UAAU,MAAM,GAAG,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,IAAI,CAAC;YACX,MAAM;YACN,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YAC9C,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,IAAI,EAAE,YAAY;gBAChB,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAC/B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC;YACzC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,MAAM,aAAa,GAAG;QACpB,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,EAAE;QACvC,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;KACrC,CAAC;IACF,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,aAAa,EAAE,CAAC;QAC7C,MAAM,YAAY,GAChB,QAAQ,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACnD,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAC1B;YACD,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QAChE,IAAI,YAAY;YAAE,SAAS,CAAC,mDAAmD;QAC/E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,IAAI,CAAC;YACX,MAAM;YACN,IAAI;YACJ,QAAQ,EAAE,SAAS;YACnB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,IAAI,EAAE,MAAM,CAAC,QAAQ,KAAK,SAAS;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,SAAS,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/builder/manifest-writer.d.ts

@@ -0,0 +1,7 @@
+import type { ScopeManifest } from "../types.js";
+export interface WriteOptions {
+    force?: boolean;
+}
+export declare function serializeManifest(manifest: ScopeManifest): string;
+export declare function writeManifest(manifest: ScopeManifest, filePath: string, options?: WriteOptions): void;
+//# sourceMappingURL=manifest-writer.d.ts.map

package/dist/src/builder/manifest-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-writer.d.ts","sourceRoot":"","sources":["../../../src/builder/manifest-writer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CAEjE;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,aAAa,EACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,YAAiB,GACzB,IAAI,CAUN"}

package/dist/src/builder/manifest-writer.js

@@ -0,0 +1,17 @@
+import fs from "fs";
+import path from "path";
+export function serializeManifest(manifest) {
+    return JSON.stringify(manifest, null, 2) + "\n";
+}
+export function writeManifest(manifest, filePath, options = {}) {
+    const dir = path.dirname(filePath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    if (fs.existsSync(filePath) && !options.force) {
+        throw new Error(`File "${filePath}" already exists. Use --force to overwrite.`);
+    }
+    const json = serializeManifest(manifest);
+    fs.writeFileSync(filePath, json, "utf-8");
+}
+//# sourceMappingURL=manifest-writer.js.map

package/dist/src/builder/manifest-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-writer.js","sourceRoot":"","sources":["../../../src/builder/manifest-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAOxB,MAAM,UAAU,iBAAiB,CAAC,QAAuB;IACvD,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,QAAuB,EACvB,QAAgB,EAChB,UAAwB,EAAE;IAE1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,6CAA6C,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACzC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/src/builder/review-display.d.ts

@@ -0,0 +1,10 @@
+import React from "react";
+import type { ScopeManifest } from "../types.js";
+interface Props {
+    manifest: ScopeManifest;
+    sourcePath: string;
+    onDone: () => void;
+}
+export declare function ReviewDisplay({ manifest, sourcePath, onDone }: Props): React.ReactElement;
+export {};
+//# sourceMappingURL=review-display.d.ts.map

package/dist/src/builder/review-display.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-display.d.ts","sourceRoot":"","sources":["../../../src/builder/review-display.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA8B,MAAM,OAAO,CAAC;AAGnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAWjD,UAAU,KAAK;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,IAAI,CAAC;CACpB;AAID,wBAAgB,aAAa,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CAqEzF"}

package/dist/src/builder/review-display.js

@@ -0,0 +1,55 @@
+import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
+import { useState, useEffect } from "react";
+import { Box, Text, useInput } from "ink";
+import Spinner from "ink-spinner";
+import { validateCidr, validateDomain, validateWindowSanity, checkOrphanedExclusion, } from "./smart-validator.js";
+import { runDryRun } from "./dry-run.js";
+import { writeManifest } from "./manifest-writer.js";
+export function ReviewDisplay({ manifest, sourcePath, onDone }) {
+    const [validationMsgs, setValidationMsgs] = useState([]);
+    const [dryRunResults, setDryRunResults] = useState(null);
+    const [action, setAction] = useState("pending");
+    useEffect(() => {
+        const msgs = [];
+        for (const cidr of manifest.authorized_targets.ip_ranges) {
+            msgs.push(...validateCidr(cidr));
+        }
+        for (const domain of manifest.authorized_targets.domains) {
+            msgs.push(...validateDomain(domain));
+        }
+        msgs.push(...validateWindowSanity(manifest.engagement_window.start, manifest.engagement_window.end));
+        for (const excluded of manifest.excluded_targets) {
+            msgs.push(...checkOrphanedExclusion(excluded, {
+                ip_ranges: manifest.authorized_targets.ip_ranges,
+                domains: manifest.authorized_targets.domains,
+            }));
+        }
+        setValidationMsgs(msgs);
+        runDryRun(manifest).then(setDryRunResults).catch(() => setDryRunResults([]));
+    }, []);
+    useInput((ch, key) => {
+        if (ch === "a" && action === "pending") {
+            const outputPath = sourcePath.replace(".pending.json", ".json");
+            try {
+                writeManifest(manifest, outputPath, { force: true });
+                setAction("approve");
+                setTimeout(onDone, 500);
+            }
+            catch { /* handled in display */ }
+            return;
+        }
+        if (ch === "r" && action === "pending") {
+            setAction("reject");
+            setTimeout(onDone, 500);
+            return;
+        }
+        if (key.escape) {
+            onDone();
+            return;
+        }
+    });
+    const errors = validationMsgs.filter((m) => m.level === "error");
+    const warnings = validationMsgs.filter((m) => m.level === "warning");
+    return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsxs(Text, { bold: true, color: "cyan", children: ["Manifest Review: ", sourcePath] }), _jsx(Box, { marginTop: 1 }), _jsxs(Text, { bold: true, children: ["Engagement: ", manifest.engagement_id, " \u2014 ", manifest.client] }), _jsxs(Text, { children: ["Operator: ", manifest.operator] }), _jsxs(Text, { children: ["Window: ", manifest.engagement_window.start, " \u2192 ", manifest.engagement_window.end] }), _jsxs(Text, { children: ["Domains: ", manifest.authorized_targets.domains.join(", ") || "none"] }), _jsxs(Text, { children: ["IP Ranges: ", manifest.authorized_targets.ip_ranges.join(", ") || "none"] }), _jsxs(Text, { children: ["Exclusions: ", manifest.excluded_targets.join(", ") || "none"] }), _jsx(Box, { marginTop: 1 }), _jsx(Text, { bold: true, children: "Validation:" }), errors.length === 0 && warnings.length === 0 && (_jsx(Text, { color: "green", children: "  \u2713 No issues found" })), errors.map((m, i) => _jsxs(Text, { color: "red", children: ["  \u2717 ", m.message] }, `e${i}`)), warnings.map((m, i) => _jsxs(Text, { color: "yellow", children: ["  \u26A0 ", m.message] }, `w${i}`)), _jsx(Box, { marginTop: 1 }), _jsx(Text, { bold: true, children: "Dry-Run:" }), dryRunResults === null ? (_jsxs(Text, { children: ["  ", _jsx(Spinner, { type: "dots" }), " Running..."] })) : (dryRunResults.map((r, i) => (_jsxs(Text, { color: r.pass ? "green" : "red", children: ["  ", r.pass ? "✓" : "✗", " ", r.tool, " \u2192 ", r.target, ": ", r.actual] }, i)))), _jsx(Box, { marginTop: 1 }), action === "pending" && (_jsx(Text, { dimColor: true, children: "[a] Approve  [r] Reject  [Esc] Cancel" })), action === "approve" && (_jsx(Text, { color: "green", bold: true, children: "\u2713 Approved and saved." })), action === "reject" && (_jsx(Text, { color: "red", bold: true, children: "\u2717 Rejected." }))] }));
+}
+//# sourceMappingURL=review-display.js.map

package/dist/src/builder/review-display.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-display.js","sourceRoot":"","sources":["../../../src/builder/review-display.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC1C,OAAO,OAAO,MAAM,aAAa,CAAC;AAElC,OAAO,EACL,YAAY,EACZ,cAAc,EACd,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAqB,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAUrD,MAAM,UAAU,aAAa,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAS;IACnE,MAAM,CAAC,cAAc,EAAE,iBAAiB,CAAC,GAAG,QAAQ,CAAsB,EAAE,CAAC,CAAC;IAC9E,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,QAAQ,CAAwB,IAAI,CAAC,CAAC;IAChF,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAe,SAAS,CAAC,CAAC;IAE9D,SAAS,CAAC,GAAG,EAAE;QACb,MAAM,IAAI,GAAwB,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,kBAAkB,CAAC,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC;QAC/F,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QACnG,IAAI,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QACrG,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,QAAQ,EAAE;gBAC5C,SAAS,EAAE,QAAQ,CAAC,kBAAkB,CAAC,SAAS;gBAChD,OAAO,EAAE,QAAQ,CAAC,kBAAkB,CAAC,OAAO;aAC7C,CAAC,CAAC,CAAC;QACN,CAAC;QACD,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE;QACnB,IAAI,EAAE,KAAK,GAAG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YAChE,IAAI,CAAC;gBACH,aAAa,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,SAAS,CAAC,SAAS,CAAC,CAAC;gBACrB,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACjG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAErE,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,OAAO,EAAE,CAAC,aACpC,MAAC,IAAI,IAAC,IAAI,QAAC,KAAK,EAAC,MAAM,kCAAmB,UAAU,IAAQ,EAC5D,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,GAAI,EACrB,MAAC,IAAI,IAAC,IAAI,mCAAc,QAAQ,CAAC,aAAa,cAAK,QAAQ,CAAC,MAAM,IAAQ,EAC1E,MAAC,IAAI,6BAAY,QAAQ,CAAC,QAAQ,IAAQ,EAC1C,MAAC,IAAI,2BAAU,QAAQ,CAAC,iBAAiB,CAAC,KAAK,cAAK,QAAQ,CAAC,iBAAiB,CAAC,GAAG,IAAQ,EAC1F,MAAC,IAAI,4BAAW,QAAQ,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAQ,EAChF,MAAC,IAAI,8BAAa,QAAQ,CAAC,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAQ,EACpF,MAAC,IAAI,+BAAc,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,IAAQ,EACzE,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,GAAI,EACrB,KAAC,IAAI,IAAC,IAAI,kCAAmB,EAC5B,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,yCAA2B,CAAC,EAChG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAC,IAAI,IAAe,KAAK,EAAC,KAAK,0BAAM,CAAC,CAAC,OAAO,KAAnC,IAAI,CAAC,EAAE,CAAoC,CAAC,EAC5E,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAC,IAAI,IAAe,KAAK,EAAC,QAAQ,0BAAM,CAAC,CAAC,OAAO,KAAtC,IAAI,CAAC,EAAE,CAAuC,CAAC,EAClF,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,GAAI,EACrB,KAAC,IAAI,IAAC,IAAI,+BAAgB,EACzB,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,CACxB,MAAC,IAAI,qBAAG,KAAC,OAAO,IAAC,IAAI,EAAC,MAAM,GAAG,mBAAkB,CAClD,CAAC,CAAC,CAAC,CACF,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAC1B,MAAC,IAAI,IAAS,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,aAC1C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,OAAG,CAAC,CAAC,IAAI,cAAK,CAAC,CAAC,MAAM,QAAI,CAAC,CAAC,MAAM,KADlD,CAAC,CAEL,CACR,CAAC,CACH,EACD,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,GAAI,EACpB,MAAM,KAAK,SAAS,IAAI,CAAC,KAAC,IAAI,IAAC,QAAQ,4DAA6C,CAAC,EACrF,MAAM,KAAK,SAAS,IAAI,CAAC,KAAC,IAAI,IAAC,KAAK,EAAC,OAAO,EAAC,IAAI,iDAA6B,CAAC,EAC/E,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAC,IAAI,IAAC,KAAK,EAAC,KAAK,EAAC,IAAI,uCAAmB,CAAC,IAC/D,CACP,CAAC;AACJ,CAAC"}

package/dist/src/builder/smart-validator.d.ts

@@ -0,0 +1,39 @@
+import { DnsResolver } from "../dns-resolver.js";
+export interface ValidationMessage {
+    level: "error" | "warning" | "info";
+    message: string;
+}
+export declare function validateEngagementId(id: string): ValidationMessage[];
+export declare function validateCidr(cidr: string): ValidationMessage[];
+export declare function validateDomain(domain: string): ValidationMessage[];
+export declare function validateIsoDate(date: string): ValidationMessage[];
+export declare function validateWindowSanity(start: string, end: string): ValidationMessage[];
+export interface DomainPreviewResult {
+    ips: string[];
+    messages: ValidationMessage[];
+}
+/**
+ * Resolve a domain via the provided DnsResolver and return the IPs along with
+ * any validation messages (e.g. NXDOMAIN warning when no IPs are returned).
+ * A wildcard prefix (`*.`) is stripped before the DNS lookup.
+ */
+export declare function resolveDomainPreview(domain: string, resolver: DnsResolver): Promise<DomainPreviewResult>;
+/**
+ * Check whether any of the resolved IPs fall inside an authorized CIDR range.
+ * Returns an info message for the first match found.
+ */
+export declare function checkOverlap(resolvedIps: string[], authorizedRanges: string[]): ValidationMessage[];
+/**
+ * When a wildcard domain (e.g. `*.acme.com`) is present, suggest adding the
+ * apex (`acme.com`) separately if it is not already in the list.
+ */
+export declare function checkWildcardApex(domain: string, currentDomains: string[]): ValidationMessage[];
+/**
+ * Warn if an excluded target (IP or domain) is not covered by any authorized
+ * IP range or domain pattern, making the exclusion redundant.
+ */
+export declare function checkOrphanedExclusion(excludedTarget: string, authorized: {
+    ip_ranges: string[];
+    domains: string[];
+}): ValidationMessage[];
+//# sourceMappingURL=smart-validator.d.ts.map

package/dist/src/builder/smart-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"smart-validator.d.ts","sourceRoot":"","sources":["../../../src/builder/smart-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAIjD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAQpE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAoB9D;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAYlE;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAQjE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAoBpF;AAMD,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,QAAQ,EAAE,iBAAiB,EAAE,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,mBAAmB,CAAC,CAe9B;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,MAAM,EAAE,EACrB,gBAAgB,EAAE,MAAM,EAAE,GACzB,iBAAiB,EAAE,CAcrB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,EAAE,GACvB,iBAAiB,EAAE,CAerB;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE;IAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,GACrD,iBAAiB,EAAE,CAiBrB"}

package/dist/src/builder/smart-validator.js

@@ -0,0 +1,157 @@
+import { isCidr, isIpInCidr } from "../ip-matcher.js";
+import { matchesDomain } from "../domain-matcher.js";
+export function validateEngagementId(id) {
+    if (!id || id.trim() === "") {
+        return [{ level: "error", message: "Engagement ID must not be empty." }];
+    }
+    if (!/^ENG-\d{4}-\d{3,}$/.test(id)) {
+        return [{ level: "info", message: `Suggested format: ENG-YYYY-NNNN (e.g. ENG-${new Date().getFullYear()}-0001).` }];
+    }
+    return [];
+}
+export function validateCidr(cidr) {
+    if (!cidr || cidr.trim() === "") {
+        return [{ level: "error", message: "CIDR range must not be empty." }];
+    }
+    let normalized = cidr;
+    if (!cidr.includes("/")) {
+        normalized = cidr.includes(":") ? `${cidr}/128` : `${cidr}/32`;
+    }
+    if (!isCidr(normalized)) {
+        return [{ level: "error", message: `Invalid CIDR syntax: "${cidr}". Example: 10.10.10.0/24` }];
+    }
+    const slashIndex = normalized.indexOf("/");
+    if (slashIndex !== -1 && !normalized.includes(":")) {
+        const prefix = parseInt(normalized.slice(slashIndex + 1), 10);
+        if (prefix < 16) {
+            const count = Math.pow(2, 32 - prefix);
+            return [{ level: "warning", message: `This range covers ${count.toLocaleString()} addresses. Is /${prefix} intentional?` }];
+        }
+    }
+    return [];
+}
+export function validateDomain(domain) {
+    if (!domain || domain.trim() === "") {
+        return [{ level: "error", message: "Domain must not be empty." }];
+    }
+    if (/\s/.test(domain)) {
+        return [{ level: "error", message: `Domain "${domain}" contains whitespace.` }];
+    }
+    const pattern = /^(\*\.)?([a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?\.)*[a-zA-Z]{2,}\.?$/;
+    if (!pattern.test(domain)) {
+        return [{ level: "error", message: `"${domain}" does not look like a valid domain.` }];
+    }
+    return [];
+}
+export function validateIsoDate(date) {
+    if (!date || date.trim() === "") {
+        return [{ level: "error", message: "Date must not be empty." }];
+    }
+    if (isNaN(Date.parse(date))) {
+        return [{ level: "error", message: `"${date}" is not a valid ISO 8601 date. Example: 2026-03-29T08:00:00Z` }];
+    }
+    return [];
+}
+export function validateWindowSanity(start, end) {
+    const msgs = [];
+    const startMs = Date.parse(start);
+    const endMs = Date.parse(end);
+    if (isNaN(startMs) || isNaN(endMs))
+        return [];
+    if (endMs <= startMs) {
+        msgs.push({ level: "error", message: "End date is before or equal to start date." });
+        return msgs;
+    }
+    if (startMs < Date.now()) {
+        msgs.push({ level: "warning", message: "Start date is in the past." });
+    }
+    const durationMs = endMs - startMs;
+    if (durationMs > 30 * 24 * 3600_000) {
+        msgs.push({ level: "warning", message: `Engagement window exceeds 30 days (${Math.round(durationMs / 86400_000)} days).` });
+    }
+    if (durationMs < 3600_000) {
+        msgs.push({ level: "warning", message: "Engagement window is less than 1 hour." });
+    }
+    return msgs;
+}
+/**
+ * Resolve a domain via the provided DnsResolver and return the IPs along with
+ * any validation messages (e.g. NXDOMAIN warning when no IPs are returned).
+ * A wildcard prefix (`*.`) is stripped before the DNS lookup.
+ */
+export async function resolveDomainPreview(domain, resolver) {
+    const lookupDomain = domain.startsWith("*.") ? domain.slice(2) : domain;
+    const ips = await resolver.resolve(lookupDomain);
+    if (ips.length === 0) {
+        return {
+            ips: [],
+            messages: [
+                {
+                    level: "warning",
+                    message: `"${lookupDomain}" did not resolve to any addresses (NXDOMAIN or DNS failure).`,
+                },
+            ],
+        };
+    }
+    return { ips, messages: [] };
+}
+/**
+ * Check whether any of the resolved IPs fall inside an authorized CIDR range.
+ * Returns an info message for the first match found.
+ */
+export function checkOverlap(resolvedIps, authorizedRanges) {
+    for (const ip of resolvedIps) {
+        for (const range of authorizedRanges) {
+            if (isIpInCidr(ip, range)) {
+                return [
+                    {
+                        level: "info",
+                        message: `Resolved IP ${ip} is already covered by authorized range ${range}.`,
+                    },
+                ];
+            }
+        }
+    }
+    return [];
+}
+/**
+ * When a wildcard domain (e.g. `*.acme.com`) is present, suggest adding the
+ * apex (`acme.com`) separately if it is not already in the list.
+ */
+export function checkWildcardApex(domain, currentDomains) {
+    if (!domain.startsWith("*.")) {
+        return [];
+    }
+    const apex = domain.slice(2);
+    const alreadyPresent = currentDomains.some((d) => d.toLowerCase() === apex.toLowerCase());
+    if (alreadyPresent) {
+        return [];
+    }
+    return [
+        {
+            level: "info",
+            message: `Wildcard "${domain}" does not cover the apex "${apex}". Add "${apex}" separately if needed.`,
+        },
+    ];
+}
+/**
+ * Warn if an excluded target (IP or domain) is not covered by any authorized
+ * IP range or domain pattern, making the exclusion redundant.
+ */
+export function checkOrphanedExclusion(excludedTarget, authorized) {
+    const inRange = authorized.ip_ranges.some((range) => isIpInCidr(excludedTarget, range));
+    if (inRange) {
+        return [];
+    }
+    const matchesDomainPattern = authorized.domains.some((pattern) => matchesDomain(excludedTarget, pattern));
+    if (matchesDomainPattern) {
+        return [];
+    }
+    return [
+        {
+            level: "warning",
+            message: `Excluded target "${excludedTarget}" is redundant — it is not covered by any authorized range or domain.`,
+        },
+    ];
+}
+//# sourceMappingURL=smart-validator.js.map

package/dist/src/builder/smart-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smart-validator.js","sourceRoot":"","sources":["../../../src/builder/smart-validator.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAOrD,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5B,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,6CAA6C,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,IAAI,2BAA2B,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC;YACvC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,KAAK,CAAC,cAAc,EAAE,mBAAmB,MAAM,eAAe,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACpC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,MAAM,wBAAwB,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,OAAO,GAAG,qEAAqE,CAAC;IACtF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,MAAM,sCAAsC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChC,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,IAAI,+DAA+D,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa,EAAE,GAAW;IAC7D,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC9C,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,GAAG,OAAO,CAAC;IACnC,IAAI,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,sCAAsC,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9H,CAAC;IACD,IAAI,UAAU,GAAG,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,QAAqB;IAErB,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACjD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,GAAG,EAAE,EAAE;YACP,QAAQ,EAAE;gBACR;oBACE,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,IAAI,YAAY,+DAA+D;iBACzF;aACF;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,WAAqB,EACrB,gBAA0B;IAE1B,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACrC,IAAI,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL;wBACE,KAAK,EAAE,MAAM;wBACb,OAAO,EAAE,eAAe,EAAE,2CAA2C,KAAK,GAAG;qBAC9E;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,cAAwB;IAExB,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,cAAc,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1F,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL;YACE,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,aAAa,MAAM,8BAA8B,IAAI,WAAW,IAAI,yBAAyB;SACvG;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,cAAsB,EACtB,UAAsD;IAEtD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;IACxF,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,oBAAoB,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/D,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CACvC,CAAC;IACF,IAAI,oBAAoB,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL;YACE,KAAK,EAAE,SAAS;YAChB,OAAO,EAAE,oBAAoB,cAAc,uEAAuE;SACnH;KACF,CAAC;AACJ,CAAC"}

package/dist/src/builder/steps/domains.d.ts

@@ -0,0 +1,10 @@
+import React from "react";
+interface Props {
+    initial?: string[];
+    authorizedIpRanges?: string[];
+    onComplete: (domains: string[]) => void;
+    onBack?: () => void;
+}
+export declare function DomainsStep({ initial, onComplete, onBack }: Props): React.ReactElement;
+export {};
+//# sourceMappingURL=domains.d.ts.map

package/dist/src/builder/steps/domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.d.ts","sourceRoot":"","sources":["../../../../src/builder/steps/domains.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA2B,MAAM,OAAO,CAAC;AAKhD,UAAU,KAAK;IACb,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC;IACxC,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,wBAAgB,WAAW,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CAkEtF"}

package/dist/src/builder/steps/domains.js

@@ -0,0 +1,71 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { useState, useRef } from "react";
+import { Box, Text, useInput } from "ink";
+import { validateDomain, checkWildcardApex, resolveDomainPreview } from "../smart-validator.js";
+import { DnsResolver } from "../../dns-resolver.js";
+export function DomainsStep({ initial, onComplete, onBack }) {
+    const [domains, setDomains] = useState(initial ?? []);
+    const [input, setInput] = useState("");
+    const [messages, setMessages] = useState([]);
+    const [resolvedInfo, setResolvedInfo] = useState("");
+    const resolverRef = useRef(new DnsResolver(0));
+    useInput((ch, key) => {
+        if (key.escape) {
+            if (input === "" && onBack) {
+                onBack();
+            }
+            else {
+                setInput("");
+                setMessages([]);
+            }
+            return;
+        }
+        if (ch === "d" && key.ctrl) {
+            onComplete(domains);
+            return;
+        }
+        if (key.return) {
+            if (input.trim() === "") {
+                onComplete(domains);
+                return;
+            }
+            const newDomains = input.split(",").map((d) => d.trim()).filter(Boolean);
+            const allMsgs = [];
+            const validDomains = [];
+            for (const domain of newDomains) {
+                const domainMsgs = validateDomain(domain);
+                if (domainMsgs.some((m) => m.level === "error")) {
+                    allMsgs.push(...domainMsgs);
+                }
+                else {
+                    validDomains.push(domain);
+                    allMsgs.push(...checkWildcardApex(domain, [...domains, ...validDomains]));
+                }
+            }
+            if (allMsgs.some((m) => m.level === "error")) {
+                setMessages(allMsgs);
+                return;
+            }
+            setDomains((prev) => [...prev, ...validDomains]);
+            setMessages(allMsgs);
+            setInput("");
+            for (const domain of validDomains) {
+                resolveDomainPreview(domain, resolverRef.current).then((result) => {
+                    if (result.ips.length > 0) {
+                        setResolvedInfo((prev) => prev + `${domain} → ${result.ips.join(", ")}\n`);
+                    }
+                });
+            }
+            return;
+        }
+        if (key.backspace || key.delete) {
+            setInput((prev) => prev.slice(0, -1));
+            return;
+        }
+        if (ch && !key.ctrl && !key.meta) {
+            setInput((prev) => prev + ch);
+        }
+    });
+    return (_jsxs(Box, { flexDirection: "column", padding: 1, children: [_jsx(Text, { bold: true, color: "cyan", children: "Step 3: Authorized Domains" }), _jsx(Text, { dimColor: true, children: "Enter domains (comma-separated OK). Empty enter or Ctrl+D when done. Esc to go back." }), _jsx(Box, { marginTop: 1 }), domains.map((d, i) => (_jsxs(Text, { color: "green", children: ["  \u2713 ", d] }, i))), _jsxs(Box, { children: [_jsx(Text, { children: "\u203A " }), _jsxs(Text, { children: [input, _jsx(Text, { dimColor: true, children: "\u2502" })] })] }), resolvedInfo && (_jsxs(Box, { marginTop: 1, flexDirection: "column", children: [_jsx(Text, { dimColor: true, children: "DNS Preview:" }), resolvedInfo.trim().split("\n").map((line, i) => (_jsxs(Text, { dimColor: true, children: ["  ", line] }, i)))] })), messages.map((msg, i) => (_jsx(Box, { marginTop: i === 0 ? 1 : 0, children: _jsxs(Text, { color: msg.level === "error" ? "red" : msg.level === "warning" ? "yellow" : "blue", children: [msg.level === "error" ? "✗" : msg.level === "warning" ? "⚠" : "ℹ", " ", msg.message] }) }, i))), _jsx(Box, { marginTop: 1, children: _jsxs(Text, { dimColor: true, children: [domains.length, " domain(s) added"] }) })] }));
+}
+//# sourceMappingURL=domains.js.map

package/dist/src/builder/steps/domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"domains.js","sourceRoot":"","sources":["../../../../src/builder/steps/domains.tsx"],"names":[],"mappings":";AAAA,OAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAChD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,oBAAoB,EAA0B,MAAM,uBAAuB,CAAC;AACxH,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AASpD,MAAM,UAAU,WAAW,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAS;IAChE,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,GAAG,QAAQ,CAAW,OAAO,IAAI,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IACvC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAsB,EAAE,CAAC,CAAC;IAClE,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,GAAG,QAAQ,CAAS,EAAE,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/C,QAAQ,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE;QACnB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,IAAI,KAAK,KAAK,EAAE,IAAI,MAAM,EAAE,CAAC;gBAAC,MAAM,EAAE,CAAC;YAAC,CAAC;iBAAM,CAAC;gBAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC;YACjF,OAAO;QACT,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBAAC,UAAU,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzD,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzE,MAAM,OAAO,GAAwB,EAAE,CAAC;YACxC,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;gBAChC,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC;gBAAC,CAAC;qBAC5E,CAAC;oBACJ,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAC1B,OAAO,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC5E,CAAC;YACH,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC;gBAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC/E,UAAU,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;YACjD,WAAW,CAAC,OAAO,CAAC,CAAC;YACrB,QAAQ,CAAC,EAAE,CAAC,CAAC;YACb,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;gBAClC,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;oBAChE,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,MAAM,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC7E,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACnF,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,OAAO,CACL,MAAC,GAAG,IAAC,aAAa,EAAC,QAAQ,EAAC,OAAO,EAAE,CAAC,aACpC,KAAC,IAAI,IAAC,IAAI,QAAC,KAAK,EAAC,MAAM,2CAAkC,EACzD,KAAC,IAAI,IAAC,QAAQ,2GAA4F,EAC1G,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,GAAI,EACpB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAC,IAAI,IAAS,KAAK,EAAC,OAAO,0BAAM,CAAC,KAAvB,CAAC,CAA8B,CAAC,CAAC,EACpE,MAAC,GAAG,eAAC,KAAC,IAAI,0BAAU,EAAA,MAAC,IAAI,eAAE,KAAK,EAAC,KAAC,IAAI,IAAC,QAAQ,6BAAS,IAAO,IAAM,EACpE,YAAY,IAAI,CACf,MAAC,GAAG,IAAC,SAAS,EAAE,CAAC,EAAE,aAAa,EAAC,QAAQ,aACvC,KAAC,IAAI,IAAC,QAAQ,mCAAoB,EACjC,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAC,IAAI,IAAS,QAAQ,yBAAI,IAAI,KAAnB,CAAC,CAA0B,CAAC,CAAC,IACvF,CACP,EACA,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CACxB,KAAC,GAAG,IAAS,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YACrC,MAAC,IAAI,IAAC,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,aACrF,GAAG,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,OAAG,GAAG,CAAC,OAAO,IAC3E,IAHC,CAAC,CAIL,CACP,CAAC,EACF,KAAC,GAAG,IAAC,SAAS,EAAE,CAAC,YAAE,MAAC,IAAI,IAAC,QAAQ,mBAAE,OAAO,CAAC,MAAM,wBAAwB,GAAM,IAC3E,CACP,CAAC;AACJ,CAAC"}

package/dist/src/builder/steps/engagement-info.d.ts

@@ -0,0 +1,17 @@
+import React from "react";
+interface Props {
+    initial?: {
+        engagement_id?: string;
+        client?: string;
+        operator?: string;
+    };
+    onComplete: (data: {
+        engagement_id: string;
+        client: string;
+        operator: string;
+    }) => void;
+    onBack?: () => void;
+}
+export declare function EngagementInfoStep({ initial, onComplete, onBack }: Props): React.ReactElement;
+export {};
+//# sourceMappingURL=engagement-info.d.ts.map

package/dist/src/builder/steps/engagement-info.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engagement-info.d.ts","sourceRoot":"","sources":["../../../../src/builder/steps/engagement-info.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmB,MAAM,OAAO,CAAC;AAGxC,UAAU,KAAK;IACb,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,UAAU,EAAE,CAAC,IAAI,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACxF,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;CACrB;AAUD,wBAAgB,kBAAkB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,YAAY,CAoD7F"}