@pentoshi/clai 4.11.11 → 4.11.13

package/dist/tools/handlers/pentest.js

@@ -1,208 +0,0 @@
-import { responderJobOptions } from "./responder-job-options.js";
-import { spawnArgv } from "../shell.js";
-import { parseHost, } from "../validate.js";
-import { jobManager } from "../jobs.js";
-import { runNmapScan } from "../nmap-runner.js";
-import { compareAuthorizationContexts, discoverWebSurface, enumerateApi, } from "../pentest-workflows.js";
-import { nativeDnsLookup } from "../dns-native.js";
-import { nativeWhoisLookup } from "../whois-native.js";
-import { optionalNumber, optionalString, requireString, } from "./args.js";
-import { buildPentestReconNmapArgv, prepareDurableNmapJob, } from "./nmap-preparation.js";
-import { estimateScanResources } from "../registry.js";
-export const toolRegistry_PENTEST = {
-    async "pentest.recon"(args, options) {
-        const host = parseHost(requireString(args, "target"));
-        const wantWhois = args.whois !== false;
-        const wantDns = args.dns !== false;
-        const wantNmap = args.nmap !== false;
-        const nmapArgv = buildPentestReconNmapArgv(args, host.value);
-        const allSteps = [
-            { key: "whois", command: "whois", argv: [host.value] },
-            {
-                key: "dns",
-                command: "dig",
-                argv: [host.value, "ANY", "+noall", "+answer"],
-            },
-            {
-                key: "nmap",
-                command: "nmap",
-                argv: nmapArgv,
-            },
-        ];
-        const steps = allSteps.filter((step) => {
-            if (step.key === "whois")
-                return wantWhois;
-            if (step.key === "dns")
-                return wantDns;
-            if (step.key === "nmap")
-                return wantNmap;
-            return true;
-        });
-        if (steps.length === 0) {
-            return {
-                ok: false,
-                output: "pentest.recon: no steps requested. Set at least one of whois|dns|nmap to true, or omit them all for a full sweep.",
-                exitCode: 1,
-            };
-        }
-        const { mkdir, writeFile } = await import("node:fs/promises");
-        const { join } = await import("node:path");
-        const { getArtifactDir } = await import("../../store/paths.js");
-        const artifactDir = getArtifactDir();
-        let artifactPath;
-        try {
-            await mkdir(artifactDir, { recursive: true, mode: 0o700 });
-            const safeHost = host.value.replace(/[^a-z0-9_.-]+/gi, "-");
-            artifactPath = join(artifactDir, `${new Date().toISOString().replace(/[:.]/g, "-")}-recon-${safeHost}.txt`);
-        }
-        catch {
-            artifactPath = undefined;
-        }
-        const outputs = [];
-        const transcript = [];
-        let anyOk = false;
-        const userAborted = () => Boolean(options?.signal?.aborted);
-        const runStep = async (step) => {
-            const display = `${step.command} ${step.argv.join(" ")}`;
-            options?.onOutput?.(`\n$ ${display}\n`, "stdout");
-            const beat = setInterval(() => {
-                options?.onOutput?.(`[recon] ${step.key} still running…\n`, "stdout");
-            }, 5_000);
-            beat.unref?.();
-            try {
-                if (step.key === "nmap") {
-                    const estimate = estimateScanResources(step.argv);
-                    if (args.background === true || args.responder === true) {
-                        const prepared = await prepareDurableNmapJob(step.argv, options, "Enter your password for the durable nmap raw-socket scan. It is sent only to sudo stdin and is never stored. Esc cancels.");
-                        const result = prepared.prepared
-                            ? await jobManager.startJob(prepared.spec, {
-                                name: `recon-${estimate.profile}-${host.value}`,
-                                profile: estimate.profile,
-                                estimatedSeconds: estimate.estimatedSeconds,
-                                ...responderJobOptions(options),
-                                responder: args.responder === true,
-                                wakeOnCompletion: args.responder === true,
-                                ...(options?.engagementAuthorization
-                                    ? { authorization: options.engagementAuthorization }
-                                    : {}),
-                            })
-                            : prepared.result;
-                        return { key: step.key, display, result };
-                    }
-                    return {
-                        key: step.key,
-                        display,
-                        result: await runNmapScan(step.argv, options, optionalNumber(args, "timeoutMs")),
-                    };
-                }
-                if (step.key === "dns") {
-                    return {
-                        key: step.key,
-                        display: `native DNS ANY ${host.value}`,
-                        result: await nativeDnsLookup(host.value, "ANY"),
-                    };
-                }
-                if (step.key === "whois") {
-                    return {
-                        key: step.key,
-                        display: `native WHOIS ${host.value}`,
-                        result: await nativeWhoisLookup(host.value),
-                    };
-                }
-                const timeoutMs = step.key === "whois" ? 20_000 : 30_000;
-                return {
-                    key: step.key,
-                    display,
-                    result: await spawnArgv({
-                        command: step.command,
-                        argv: step.argv,
-                        timeoutMs,
-                        signal: options?.signal,
-                        onOutput: options?.onOutput,
-                    }),
-                };
-            }
-            catch (error) {
-                return {
-                    key: step.key,
-                    display,
-                    result: {
-                        ok: false,
-                        output: `${step.key} error: ${error instanceof Error ? error.message : String(error)}`,
-                        exitCode: 1,
-                    },
-                };
-            }
-            finally {
-                clearInterval(beat);
-            }
-        };
-        const completed = await Promise.all(steps.map(runStep));
-        for (const { display, result } of completed) {
-            transcript.push(`$ ${display}`, result.output);
-            outputs.push(result.output);
-            if (result.ok)
-                anyOk = true;
-        }
-        if (artifactPath) {
-            const body = transcript.join("\n\n");
-            try {
-                await writeFile(artifactPath, body, { encoding: "utf8", mode: 0o600 });
-            }
-            catch {
-                artifactPath = undefined;
-            }
-        }
-        const aborted = userAborted();
-        const nmapResult = completed.find((entry) => entry.key === "nmap")?.result;
-        const requestedScanFailed = wantNmap && Boolean(nmapResult && !nmapResult.ok);
-        const backgroundJob = completed.find((entry) => entry.result.backgroundJob)
-            ?.result.backgroundJob;
-        const output = outputs.join("\n\n");
-        return {
-            ok: !aborted && anyOk && !requestedScanFailed,
-            output: aborted
-                ? `${output}\n\nCommand aborted.`.trim()
-                : requestedScanFailed
-                    ? `${output}\n\nThe requested nmap scan failed or was not started; passive recon results above are partial only.`.trim()
-                    : output,
-            exitCode: aborted ? 130 : anyOk && !requestedScanFailed ? 0 : 1,
-            ...(artifactPath ? { outputPath: artifactPath } : {}),
-            ...(backgroundJob ? { backgroundJob } : {}),
-        };
-    },
-    async "pentest.webDiscover"(args, options) {
-        const paths = Array.isArray(args.paths)
-            ? args.paths.filter((value) => typeof value === "string")
-            : [];
-        return discoverWebSurface(requireString(args, "baseUrl"), paths, options);
-    },
-    async "pentest.apiEnumerate"(args, options) {
-        return enumerateApi(requireString(args, "specUrl"), options);
-    },
-    async "pentest.authCompare"(args, options) {
-        const contexts = Array.isArray(args.contexts)
-            ? args.contexts.filter((value) => {
-                if (!value || typeof value !== "object" || Array.isArray(value))
-                    return false;
-                const candidate = value;
-                return (typeof candidate.label === "string" &&
-                    Boolean(candidate.headers) &&
-                    typeof candidate.headers === "object" &&
-                    !Array.isArray(candidate.headers));
-            })
-            : [];
-        return compareAuthorizationContexts(requireString(args, "url"), contexts, options);
-    },
-    async "pentest.scanStatus"(args) {
-        const offset = optionalNumber(args, "offset");
-        const bytes = optionalNumber(args, "bytes");
-        const stream = optionalString(args, "stream");
-        return jobManager.tailJob(requireString(args, "id"), {
-            ...(offset !== undefined ? { offset } : {}),
-            ...(bytes !== undefined ? { bytes } : {}),
-            ...(stream !== undefined ? { stream } : {}),
-        });
-    },
-};
-//# sourceMappingURL=pentest.js.map

package/dist/tools/handlers/pentest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"pentest.js","sourceRoot":"","sources":["../../../src/tools/handlers/pentest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEjE,OAAO,EAAa,SAAS,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EACL,SAAS,GAKV,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAwB,MAAM,YAAY,CAAC;AAE9D,OAAO,EAA4B,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EACL,4BAA4B,EAC5B,kBAAkB,EAClB,YAAY,GACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAMvD,OAAO,EAEL,cAAc,EAEd,cAAc,EAEd,aAAa,GAEd,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,CAAC,MAAM,oBAAoB,GAAgC;IAC/D,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO;QACjC,MAAM,IAAI,GAAG,SAAS,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC;QACrC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAIT;YACH,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACtD;gBACE,GAAG,EAAE,KAAK;gBACV,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;aAC/C;YACD;gBACE,GAAG,EAAE,MAAM;gBACX,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,QAAQ;aACf;SACF,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YACrC,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO;gBAAE,OAAO,SAAS,CAAC;YAC3C,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK;gBAAE,OAAO,OAAO,CAAC;YACvC,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM;gBAAE,OAAO,QAAQ,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EACJ,mHAAmH;gBACrH,QAAQ,EAAE,CAAC;aACZ,CAAC;QACJ,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC9D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAChE,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,IAAI,YAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAC5D,YAAY,GAAG,IAAI,CACjB,WAAW,EACX,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,QAAQ,MAAM,CAC1E,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,YAAY,GAAG,SAAS,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,MAAM,WAAW,GAAG,GAAY,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAErE,MAAM,OAAO,GAAG,KAAK,EACnB,IAA4B,EACmC,EAAE;YACjE,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,OAAO,IAAI,EAAE,QAAQ,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE;gBAC5B,OAAO,EAAE,QAAQ,EAAE,CAAC,WAAW,IAAI,CAAC,GAAG,mBAAmB,EAAE,QAAQ,CAAC,CAAC;YACxE,CAAC,EAAE,KAAK,CAAC,CAAC;YACT,IAA0C,CAAC,KAAK,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;oBACxB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAClD,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;wBACxD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,IAAI,CAAC,IAAI,EACT,OAAO,EACP,2HAA2H,CAC5H,CAAC;wBACF,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ;4BAC9B,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;gCACvC,IAAI,EAAE,SAAS,QAAQ,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE;gCAC/C,OAAO,EAAE,QAAQ,CAAC,OAAO;gCACzB,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;gCAC3C,GAAG,mBAAmB,CAAC,OAAO,CAAC;gCAC/B,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;gCAClC,gBAAgB,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;gCACzC,GAAG,CAAC,OAAO,EAAE,uBAAuB;oCAClC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,uBAAuB,EAAE;oCACpD,CAAC,CAAC,EAAE,CAAC;6BACR,CAAC;4BACJ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;wBACpB,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;oBAC5C,CAAC;oBACD,OAAO;wBACL,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,OAAO;wBACP,MAAM,EAAE,MAAM,WAAW,CACvB,IAAI,CAAC,IAAI,EACT,OAAO,EACP,cAAc,CAAC,IAAI,EAAE,WAAW,CAAC,CAClC;qBACF,CAAC;gBACJ,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,EAAE,CAAC;oBACvB,OAAO;wBACL,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,OAAO,EAAE,kBAAkB,IAAI,CAAC,KAAK,EAAE;wBACvC,MAAM,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;qBACjD,CAAC;gBACJ,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;oBACzB,OAAO;wBACL,GAAG,EAAE,IAAI,CAAC,GAAG;wBACb,OAAO,EAAE,gBAAgB,IAAI,CAAC,KAAK,EAAE;wBACrC,MAAM,EAAE,MAAM,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;qBAC5C,CAAC;gBACJ,CAAC;gBACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBACzD,OAAO;oBACL,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,OAAO;oBACP,MAAM,EAAE,MAAM,SAAS,CAAC;wBACtB,OAAO,EAAE,IAAI,CAAC,OAAO;wBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,SAAS;wBACT,MAAM,EAAE,OAAO,EAAE,MAAM;wBACvB,QAAQ,EAAE,OAAO,EAAE,QAAQ;qBAC5B,CAAC;iBACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO;oBACL,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,OAAO;oBACP,MAAM,EAAE;wBACN,EAAE,EAAE,KAAK;wBACT,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;wBACtF,QAAQ,EAAE,CAAC;qBACZ;iBACF,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,aAAa,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;YAC5C,UAAU,CAAC,IAAI,CAAC,KAAK,OAAO,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,MAAM,CAAC,EAAE;gBAAE,KAAK,GAAG,IAAI,CAAC;QAC9B,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY,GAAG,SAAS,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC;QAC3E,MAAM,mBAAmB,GACvB,QAAQ,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;YACzE,EAAE,MAAM,CAAC,aAAa,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO;YACL,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,IAAI,CAAC,mBAAmB;YAC7C,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE;gBACxC,CAAC,CAAC,mBAAmB;oBACnB,CAAC,CAAC,GAAG,MAAM,sGAAsG,CAAC,IAAI,EAAE;oBACxH,CAAC,CAAC,MAAM;YACZ,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;YACrC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAC1E,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,kBAAkB,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,CAAC,sBAAsB,CAAC,IAAI,EAAE,OAAO;QACxC,OAAO,YAAY,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO;QACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC3C,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAClB,CACE,KAAK,EACwD,EAAE;gBAC/D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;oBAC7D,OAAO,KAAK,CAAC;gBACf,MAAM,SAAS,GAAG,KAAgC,CAAC;gBACnD,OAAO,CACL,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ;oBACnC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;oBAC1B,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;oBACrC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAClC,CAAC;YACJ,CAAC,CACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,4BAA4B,CACjC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,EAC1B,QAAQ,EACR,OAAO,CACR,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,oBAAoB,CAAC,IAAI;QAC7B,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,QAAQ,CACE,CAAC;QAC/C,OAAO,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;YACnD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/dist/tools/network-context.d.ts

@@ -1,22 +0,0 @@
-import type { ToolResult } from "../types.js";
-export interface NetworkInterfaceInfo {
-    name: string;
-    address: string;
-    family: "IPv4" | "IPv6";
-    netmask?: string | undefined;
-    cidr?: string | undefined;
-    mac?: string | undefined;
-    internal: boolean;
-    defaultRoute?: boolean | undefined;
-    gateway?: string | undefined;
-}
-export interface NetworkContextResult {
-    hostname: string;
-    platform: NodeJS.Platform;
-    interfaces: NetworkInterfaceInfo[];
-    candidates: NetworkInterfaceInfo[];
-    selected?: NetworkInterfaceInfo | undefined;
-    warnings?: string[] | undefined;
-}
-export declare function netmaskToCidr(netmask: string): number | undefined;
-export declare function getNetworkContext(): Promise<ToolResult>;

package/dist/tools/network-context.js

@@ -1,130 +0,0 @@
-import { networkInterfaces, hostname, platform } from "node:os";
-import { execSync } from "node:child_process";
-export function netmaskToCidr(netmask) {
-    const parts = netmask.split(".");
-    if (parts.length !== 4)
-        return undefined;
-    let bits = 0;
-    for (const part of parts) {
-        const n = Number(part);
-        if (Number.isNaN(n) || n < 0 || n > 255)
-            return undefined;
-        bits += n.toString(2).split("1").length - 1;
-    }
-    return bits;
-}
-function isPrivateV4(address) {
-    const parts = address.split(".").map(Number);
-    const [a, b] = parts;
-    if (a === 10)
-        return true;
-    if (a === 172 && b !== undefined && b >= 16 && b <= 31)
-        return true;
-    if (a === 192 && b === 168)
-        return true;
-    if (a === 169 && b === 254)
-        return true;
-    return false;
-}
-function detectGateway() {
-    const os = platform();
-    try {
-        if (os === "darwin") {
-            const out = execSync("route -n get default 2>/dev/null", {
-                timeout: 5_000,
-                encoding: "utf8",
-            });
-            const match = /gateway:\s+(\S+)/i.exec(out);
-            return match?.[1];
-        }
-        if (os === "linux") {
-            const out = execSync("ip route show default 2>/dev/null", {
-                timeout: 5_000,
-                encoding: "utf8",
-            });
-            const match = /via\s+(\S+)/i.exec(out);
-            return match?.[1];
-        }
-        if (os === "win32") {
-            const out = execSync('powershell -Command "(Get-NetRoute -DestinationPrefix 0.0.0.0/0 | Select-Object -First 1).NextHop"', { timeout: 5_000, encoding: "utf8" });
-            const trimmed = out.trim();
-            return trimmed || undefined;
-        }
-    }
-    catch {
-    }
-    return undefined;
-}
-function sameSubnet(addr, gateway, prefix) {
-    const toBits = (ip) => {
-        const parts = ip.split(".").map(Number);
-        return ((parts[0] << 24) | (parts[1] << 16) | (parts[2] << 8) | parts[3]) >>> 0;
-    };
-    const mask = prefix === 0 ? 0 : (~0 << (32 - prefix)) >>> 0;
-    return (toBits(addr) & mask) === (toBits(gateway) & mask);
-}
-export async function getNetworkContext() {
-    const ifaces = networkInterfaces();
-    const all = [];
-    const warnings = [];
-    const gateway = detectGateway();
-    for (const [name, addrs] of Object.entries(ifaces)) {
-        if (!addrs)
-            continue;
-        for (const addr of addrs) {
-            all.push({
-                name,
-                address: addr.address,
-                family: addr.family,
-                netmask: addr.netmask,
-                cidr: addr.cidr ?? undefined,
-                mac: addr.mac,
-                internal: addr.internal,
-            });
-        }
-    }
-    const candidates = all.filter((iface) => iface.family === "IPv4" &&
-        !iface.internal &&
-        isPrivateV4(iface.address));
-    let selected;
-    if (gateway && candidates.length > 0) {
-        for (const candidate of candidates) {
-            const prefix = candidate.netmask
-                ? netmaskToCidr(candidate.netmask)
-                : undefined;
-            if (prefix !== undefined && sameSubnet(candidate.address, gateway, prefix)) {
-                selected = {
-                    ...candidate,
-                    defaultRoute: true,
-                    gateway,
-                };
-                break;
-            }
-        }
-        if (!selected && candidates.length > 0) {
-            selected = { ...candidates[0], gateway };
-        }
-    }
-    else if (candidates.length === 1) {
-        selected = candidates[0];
-    }
-    else if (candidates.length > 1) {
-        warnings.push(`Multiple network interfaces found (${candidates.map((c) => `${c.name}:${c.address}`).join(", ")}). Could not determine default route.`);
-    }
-    else {
-        warnings.push("No active private IPv4 interfaces detected.");
-    }
-    const result = {
-        hostname: hostname(),
-        platform: platform(),
-        interfaces: all,
-        candidates,
-        selected,
-        warnings: warnings.length > 0 ? warnings : undefined,
-    };
-    return {
-        ok: candidates.length > 0,
-        output: JSON.stringify(result, null, 2),
-    };
-}
-//# sourceMappingURL=network-context.js.map

package/dist/tools/network-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"network-context.js","sourceRoot":"","sources":["../../src/tools/network-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAwB9C,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG;YAAE,OAAO,SAAS,CAAC;QAC1D,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACrB,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,QAAQ,CAAC,kCAAkC,EAAE;gBACvD,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,QAAQ,CAAC,mCAAmC,EAAE;gBACxD,OAAO,EAAE,KAAK;gBACd,QAAQ,EAAE,MAAM;aACjB,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,QAAQ,CAClB,oGAAoG,EACpG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrC,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,OAAO,OAAO,IAAI,SAAS,CAAC;QAC9B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;IACT,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CACjB,IAAY,EACZ,OAAe,EACf,MAAc;IAEd,MAAM,MAAM,GAAG,CAAC,EAAU,EAAU,EAAE;QACpC,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;IACtF,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAEhC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI;gBACJ,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAyB;gBACtC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,SAAS;gBAC5B,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;aACxB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAC3B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,MAAM;QACvB,CAAC,KAAK,CAAC,QAAQ;QACf,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAC7B,CAAC;IAEF,IAAI,QAA0C,CAAC;IAE/C,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO;gBAC9B,CAAC,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC;gBAClC,CAAC,CAAC,SAAS,CAAC;YACd,IAAI,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC3E,QAAQ,GAAG;oBACT,GAAG,SAAS;oBACZ,YAAY,EAAE,IAAI;oBAClB,OAAO;iBACR,CAAC;gBACF,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,QAAQ,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC;QAC5C,CAAC;IACH,CAAC;SAAM,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAC5B,CAAC;SAAM,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CACX,sCAAsC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,uCAAuC,CACxI,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,MAAM,GAAyB;QACnC,QAAQ,EAAE,QAAQ,EAAE;QACpB,QAAQ,EAAE,QAAQ,EAAE;QACpB,UAAU,EAAE,GAAG;QACf,UAAU;QACV,QAAQ;QACR,QAAQ,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KACrD,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/dist/tools/nmap-runner.d.ts

@@ -1,10 +0,0 @@
-import type { ToolResult } from "../types.js";
-import type { ToolRunOptions } from "./tool-types.js";
-export type NmapScanDepth = "standard" | "deep" | "full";
-export interface NmapTimeoutPolicy {
-    readonly depth: NmapScanDepth;
-    readonly timeoutMs: number;
-    readonly source: "profile" | "environment" | "call";
-}
-export declare function resolveNmapTimeoutPolicy(argv: readonly string[], env?: NodeJS.ProcessEnv): NmapTimeoutPolicy;
-export declare function runNmapScan(argv: string[], options?: ToolRunOptions, timeoutMsOverride?: number): Promise<ToolResult>;

package/dist/tools/nmap-runner.js

@@ -1,240 +0,0 @@
-import { platform } from "node:os";
-import { commandAvailable } from "../os/pkgmgr.js";
-import { evictSudoSession, formatSudoStdinPassword, looksLikeSudoAuthError, obtainSudoPassword, } from "./sudo-session.js";
-import { getAllowInteractiveStdinInherit, spawnArgv, } from "./shell.js";
-import { isNmapSingleHostTarget, looksLikeNmapNoHostsUp, nmapArgvHasPn, nmapScanNeedsPrivilege, toConnectScanArgv, withNmapSkipDiscovery, } from "./validate.js";
-async function elevationPrefix() {
-    if (process.getuid && process.getuid() === 0) {
-        return { command: "", argv: [] };
-    }
-    if (platform() === "win32") {
-        if (await commandAvailable("sudo"))
-            return { command: "sudo", argv: [] };
-        if (await commandAvailable("gsudo"))
-            return { command: "gsudo", argv: [] };
-        return undefined;
-    }
-    if (await commandAvailable("sudo")) {
-        return { command: "sudo", argv: ["-p", "[clai] sudo password for nmap: "] };
-    }
-    if (await commandAvailable("doas"))
-        return { command: "doas", argv: [] };
-    return undefined;
-}
-function looksLikePrivilegeError(output) {
-    return /(?:requires root privileges|you (?:requested|need) (?:a scan type|root)|operation not permitted|must (?:be|run as) root|raw sockets?|sudo: (?:a (?:password|terminal) is required|no askpass|3 incorrect)|incorrect password|authentication failure|permission denied|requires (?:administrator|elevation))/i.test(output);
-}
-function canInteractiveSudo() {
-    return Boolean(process.stdin.isTTY);
-}
-const NMAP_TIMEOUTS_MS = {
-    standard: 5 * 60_000,
-    deep: 15 * 60_000,
-    full: 45 * 60_000,
-};
-export function resolveNmapTimeoutPolicy(argv, env = process.env) {
-    const configured = Number(env.CLAI_NMAP_TIMEOUT_MS);
-    if (Number.isSafeInteger(configured) && configured >= 30_000) {
-        return { depth: inferNmapScanDepth(argv), timeoutMs: configured, source: "environment" };
-    }
-    const depth = inferNmapScanDepth(argv);
-    return { depth, timeoutMs: NMAP_TIMEOUTS_MS[depth], source: "profile" };
-}
-function inferNmapScanDepth(argv) {
-    if (argv.includes("-p-"))
-        return "full";
-    const portsIndex = argv.findIndex((arg) => arg === "-p");
-    const portSpec = portsIndex >= 0 ? argv[portsIndex + 1] ?? "" : "";
-    if (/^(?:1-65535|1-65534|0-65535)$/.test(portSpec))
-        return "full";
-    const explicitPorts = portSpec ? portSpec.split(",").length : 0;
-    const topPortsIndex = argv.findIndex((arg) => arg === "--top-ports");
-    const topPorts = topPortsIndex >= 0 ? Number(argv[topPortsIndex + 1]) : 0;
-    const hasDeepEnumeration = argv.some((arg) => arg === "-sV" || arg === "-sC" || arg === "-A" || arg.startsWith("--script"));
-    if (topPorts > 1_000 || explicitPorts > 1_000 || hasDeepEnumeration)
-        return "deep";
-    return "standard";
-}
-export async function runNmapScan(argv, options, timeoutMsOverride) {
-    let scanArgv = isNmapSingleHostTarget(argv) && !nmapArgvHasPn(argv)
-        ? withNmapSkipDiscovery(argv)
-        : [...argv];
-    const needsPrivilege = nmapScanNeedsPrivilege(scanArgv);
-    const prefix = needsPrivilege ? await elevationPrefix() : undefined;
-    const attempts = [];
-    if (needsPrivilege && prefix) {
-        if (prefix.command === "sudo") {
-            const useSecret = Boolean(options?.requestSecret);
-            const useTty = !useSecret &&
-                canInteractiveSudo() &&
-                getAllowInteractiveStdinInherit();
-            if (!useSecret && !useTty) {
-                options?.onOutput?.("\nCannot prompt for sudo password in this UI without freezing it. Using an unprivileged TCP connect scan (-sT -Pn).\n", "stderr");
-            }
-            else {
-                options?.onOutput?.(useSecret
-                    ? "\nAdministrator access is required for a stealth scan. Complete the secure password prompt below.\n"
-                    : "\nAdministrator access is required for a stealth scan. Enter your sudo password below; Ctrl+C cancels.\n", "stdout");
-                if (useSecret && options?.requestSecret) {
-                    const auth = await obtainSudoPassword({
-                        requestSecret: options.requestSecret,
-                        title: "Administrator access",
-                        prompt: "Enter your password for sudo (nmap raw-socket scan). It is sent only to sudo, kept in memory for a few minutes so parallel privileged scans don't ask again, and never written to disk. Esc cancels.",
-                        ...(options.signal ? { signal: options.signal } : {}),
-                        ...(options.onOutput ? { onOutput: options.onOutput } : {}),
-                    });
-                    if (auth.status === "cancelled") {
-                        options?.onOutput?.("\nSudo cancelled — falling back to unprivileged TCP connect scan (-sT -Pn).\n", "stderr");
-                    }
-                    else if (auth.status === "failed") {
-                        const detail = auth.detail ? `\n${auth.detail}` : "";
-                        options?.onOutput?.(`\nSudo authentication failed; using an unprivileged TCP connect scan instead.${detail}\n`, "stderr");
-                    }
-                    else {
-                        attempts.push({
-                            command: "sudo",
-                            argv: ["-S", "-p", "", "nmap", ...scanArgv],
-                            stdinText: formatSudoStdinPassword(auth.password),
-                            interactiveStdin: false,
-                            note: "Administrator access confirmed. Starting stealth scan (ESC cancels).",
-                        });
-                    }
-                }
-                else {
-                    const auth = await spawnArgv({
-                        command: "sudo",
-                        argv: [...prefix.argv, "-v"],
-                        timeoutMs: 120_000,
-                        signal: options?.signal,
-                        onOutput: options?.onOutput,
-                        interactiveStdin: true,
-                        noArtifact: true,
-                    });
-                    if (options?.signal?.aborted)
-                        return auth;
-                    if (auth.exitCode === 130) {
-                        options?.onOutput?.("\nSudo authentication was cancelled; using an unprivileged TCP connect scan instead. Authentication will not be reopened automatically.\n", "stderr");
-                    }
-                    else if (auth.ok) {
-                        attempts.push({
-                            command: "sudo",
-                            argv: ["-n", "nmap", ...scanArgv],
-                            interactiveStdin: false,
-                            note: "Administrator access confirmed. Starting stealth scan (ESC cancels).",
-                        });
-                    }
-                    else {
-                        const detail = auth.output?.trim()
-                            ? `\n${auth.output.trim().slice(0, 400)}`
-                            : "";
-                        options?.onOutput?.(`\nSudo authentication failed or was not completed; using an unprivileged TCP connect scan instead.${detail}\n`, "stderr");
-                    }
-                }
-            }
-        }
-        else if (prefix.command) {
-            if (getAllowInteractiveStdinInherit()) {
-                attempts.push({
-                    command: prefix.command,
-                    argv: [...prefix.argv, "nmap", ...scanArgv],
-                    interactiveStdin: true,
-                    note: `Running a stealth scan with ${prefix.command} (you may be prompted for your password).`,
-                });
-            }
-            else {
-                options?.onOutput?.(`\n${prefix.command} would need a TTY password prompt (blocked in this UI). Using unprivileged TCP connect scan (-sT -Pn).\n`, "stderr");
-            }
-        }
-        else {
-            attempts.push({ command: "nmap", argv: scanArgv, interactiveStdin: false });
-        }
-        const connectArgv = withNmapSkipDiscovery(toConnectScanArgv(scanArgv));
-        attempts.push({
-            command: "nmap",
-            argv: connectArgv,
-            note: "Privileged scan unavailable — falling back to an unprivileged TCP connect scan (-sT -Pn).",
-        });
-    }
-    else if (needsPrivilege && !prefix) {
-        attempts.push({
-            command: "nmap",
-            argv: withNmapSkipDiscovery(toConnectScanArgv(scanArgv)),
-            note: platform() === "win32"
-                ? "No elevation helper found (sudo/gsudo). Run from an Administrator terminal with Npcap for a SYN scan; using a TCP connect scan (-sT -Pn) for now."
-                : "No sudo/doas available for a raw-socket SYN scan — using an unprivileged TCP connect scan (-sT -Pn) instead.",
-        });
-    }
-    else {
-        attempts.push({ command: "nmap", argv: scanArgv });
-    }
-    const configuredPolicy = resolveNmapTimeoutPolicy(scanArgv);
-    const timeoutPolicy = typeof timeoutMsOverride === "number" && Number.isFinite(timeoutMsOverride)
-        ? {
-            ...configuredPolicy,
-            timeoutMs: Math.max(1_000, Math.min(30 * 60_000, Math.floor(timeoutMsOverride))),
-            source: "call",
-        }
-        : configuredPolicy;
-    options?.onOutput?.(`[nmap] ${timeoutPolicy.depth} scan timeout: ${Math.round(timeoutPolicy.timeoutMs / 60_000)}m (${timeoutPolicy.source})\n`, "stdout");
-    let last;
-    for (let i = 0; i < attempts.length; i += 1) {
-        const attempt = attempts[i];
-        if (options?.signal?.aborted) {
-            return { ok: false, output: "Command aborted.", exitCode: 130 };
-        }
-        if (attempt.note)
-            options?.onOutput?.(`\n${attempt.note}\n`, "stdout");
-        let result = await spawnArgv({
-            command: attempt.command,
-            argv: attempt.argv,
-            stdinText: attempt.stdinText,
-            timeoutMs: timeoutPolicy.timeoutMs,
-            signal: options?.signal,
-            onOutput: options?.onOutput,
-            ...(attempt.interactiveStdin !== undefined
-                ? { interactiveStdin: attempt.interactiveStdin }
-                : {}),
-        });
-        if (result.ok &&
-            looksLikeNmapNoHostsUp(result.output) &&
-            !nmapArgvHasPn(attempt.argv) &&
-            isNmapSingleHostTarget(attempt.argv)) {
-            options?.onOutput?.("\nHost discovery reported no hosts up — retrying once with -Pn (treat host as online).\n", "stdout");
-            result = await spawnArgv({
-                command: attempt.command,
-                argv: withNmapSkipDiscovery(attempt.argv),
-                stdinText: attempt.stdinText,
-                timeoutMs: timeoutPolicy.timeoutMs,
-                signal: options?.signal,
-                onOutput: options?.onOutput,
-                ...(attempt.interactiveStdin !== undefined
-                    ? { interactiveStdin: attempt.interactiveStdin }
-                    : {}),
-            });
-        }
-        last = result;
-        if (!result.ok &&
-            attempt.stdinText !== undefined &&
-            looksLikeSudoAuthError(result.output)) {
-            evictSudoSession();
-        }
-        const isLastAttempt = i === attempts.length - 1;
-        if (result.ok || isLastAttempt || !looksLikePrivilegeError(result.output)) {
-            if (result.ok &&
-                looksLikeNmapNoHostsUp(result.output) &&
-                isNmapSingleHostTarget(attempt.argv)) {
-                return {
-                    ...result,
-                    output: result.output +
-                        "\n\nNote: nmap still reported no live host/open ports after -Pn. " +
-                        "The target may be offline, firewalled, or blocking this host. " +
-                        "Do not retry the same net.scan args in a loop — try different ports, " +
-                        "confirm the IP with net.context / net.pingSweep, or use shell.exec for a custom nmap line.",
-                };
-            }
-            return result;
-        }
-    }
-    return last ?? { ok: false, output: "nmap produced no result.", exitCode: 1 };
-}
-//# sourceMappingURL=nmap-runner.js.map

package/dist/tools/nmap-runner.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"nmap-runner.js","sourceRoot":"","sources":["../../src/tools/nmap-runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,+BAA+B,EAC/B,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAGvB,KAAK,UAAU,eAAe;IAG5B,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACnC,CAAC;IACD,IAAI,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC3B,IAAI,MAAM,gBAAgB,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QACzE,IAAI,MAAM,gBAAgB,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC3E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,iCAAiC,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;IAC7C,OAAO,8SAA8S,CAAC,IAAI,CACxT,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAUD,MAAM,gBAAgB,GAA4C;IAChE,QAAQ,EAAE,CAAC,GAAG,MAAM;IACpB,IAAI,EAAE,EAAE,GAAG,MAAM;IACjB,IAAI,EAAE,EAAE,GAAG,MAAM;CAClB,CAAC;AAEF,MAAM,UAAU,wBAAwB,CACtC,IAAuB,EACvB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,MAAM,EAAE,CAAC;QAC7D,OAAO,EAAE,KAAK,EAAE,kBAAkB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC3F,CAAC;IAED,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAuB;IACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,IAAI,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,MAAM,CAAC;IAClE,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhE,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3C,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAC7E,CAAC;IACF,IAAI,QAAQ,GAAG,KAAK,IAAI,aAAa,GAAG,KAAK,IAAI,kBAAkB;QAAE,OAAO,MAAM,CAAC;IACnF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAc,EACd,OAAwB,EACxB,iBAA0B;IAE1B,IAAI,QAAQ,GACV,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAClD,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC;QAC7B,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAEhB,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpE,MAAM,QAAQ,GAMT,EAAE,CAAC;IAER,IAAI,cAAc,IAAI,MAAM,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAClD,MAAM,MAAM,GACV,CAAC,SAAS;gBACV,kBAAkB,EAAE;gBACpB,+BAA+B,EAAE,CAAC;YAEpC,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC1B,OAAO,EAAE,QAAQ,EAAE,CACjB,uHAAuH,EACvH,QAAQ,CACT,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,QAAQ,EAAE,CACjB,SAAS;oBACP,CAAC,CAAC,qGAAqG;oBACvG,CAAC,CAAC,0GAA0G,EAC9G,QAAQ,CACT,CAAC;gBACF,IAAI,SAAS,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;oBACxC,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC;wBACpC,aAAa,EAAE,OAAO,CAAC,aAAa;wBACpC,KAAK,EAAE,sBAAsB;wBAC7B,MAAM,EACJ,sMAAsM;wBACxM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACrD,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC5D,CAAC,CAAC;oBACH,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;wBAChC,OAAO,EAAE,QAAQ,EAAE,CACjB,+EAA+E,EAC/E,QAAQ,CACT,CAAC;oBACJ,CAAC;yBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;wBACpC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACrD,OAAO,EAAE,QAAQ,EAAE,CACjB,gFAAgF,MAAM,IAAI,EAC1F,QAAQ,CACT,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,MAAM;4BACf,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;4BAC3C,SAAS,EAAE,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC;4BACjD,gBAAgB,EAAE,KAAK;4BACvB,IAAI,EAAE,sEAAsE;yBAC7E,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC;wBAC3B,OAAO,EAAE,MAAM;wBACf,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;wBAC5B,SAAS,EAAE,OAAO;wBAClB,MAAM,EAAE,OAAO,EAAE,MAAM;wBACvB,QAAQ,EAAE,OAAO,EAAE,QAAQ;wBAC3B,gBAAgB,EAAE,IAAI;wBACtB,UAAU,EAAE,IAAI;qBACjB,CAAC,CAAC;oBACH,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO;wBAAE,OAAO,IAAI,CAAC;oBAC1C,IAAI,IAAI,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;wBAC1B,OAAO,EAAE,QAAQ,EAAE,CACjB,2IAA2I,EAC3I,QAAQ,CACT,CAAC;oBACJ,CAAC;yBAAM,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;wBACnB,QAAQ,CAAC,IAAI,CAAC;4BACZ,OAAO,EAAE,MAAM;4BACf,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;4BACjC,gBAAgB,EAAE,KAAK;4BACvB,IAAI,EAAE,sEAAsE;yBAC7E,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE;4BAChC,CAAC,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;4BACzC,CAAC,CAAC,EAAE,CAAC;wBACP,OAAO,EAAE,QAAQ,EAAE,CACjB,qGAAqG,MAAM,IAAI,EAC/G,QAAQ,CACT,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,+BAA+B,EAAE,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC;oBACZ,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;oBAC3C,gBAAgB,EAAE,IAAI;oBACtB,IAAI,EAAE,+BAA+B,MAAM,CAAC,OAAO,2CAA2C;iBAC/F,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,EAAE,QAAQ,EAAE,CACjB,KAAK,MAAM,CAAC,OAAO,0GAA0G,EAC7H,QAAQ,CACT,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,WAAW,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvE,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,2FAA2F;SAClG,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,cAAc,IAAI,CAAC,MAAM,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,EACF,QAAQ,EAAE,KAAK,OAAO;gBACpB,CAAC,CAAC,mJAAmJ;gBACrJ,CAAC,CAAC,8GAA8G;SACrH,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,aAAa,GACjB,OAAO,iBAAiB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACzE,CAAC,CAAC;YACE,GAAG,gBAAgB;YACnB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAChF,MAAM,EAAE,MAAe;SACxB;QACH,CAAC,CAAC,gBAAgB,CAAC;IACvB,OAAO,EAAE,QAAQ,EAAE,CACjB,UAAU,aAAa,CAAC,KAAK,kBAAkB,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,aAAa,CAAC,MAAM,KAAK,EAC1H,QAAQ,CACT,CAAC;IAEF,IAAI,IAA4B,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC7B,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;QAClE,CAAC;QACD,IAAI,OAAO,CAAC,IAAI;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvE,IAAI,MAAM,GAAG,MAAM,SAAS,CAAC;YAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QAEH,IACE,MAAM,CAAC,EAAE;YACT,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC;YACrC,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC;YAC5B,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,EACpC,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,CACjB,0FAA0F,EAC1F,QAAQ,CACT,CAAC;YACF,MAAM,GAAG,MAAM,SAAS,CAAC;gBACvB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC;gBACzC,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS,EAAE,aAAa,CAAC,SAAS;gBAClC,MAAM,EAAE,OAAO,EAAE,MAAM;gBACvB,QAAQ,EAAE,OAAO,EAAE,QAAQ;gBAC3B,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;oBACxC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;oBAChD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;QAED,IAAI,GAAG,MAAM,CAAC;QACd,IACE,CAAC,MAAM,CAAC,EAAE;YACV,OAAO,CAAC,SAAS,KAAK,SAAS;YAC/B,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,EACrC,CAAC;YACD,gBAAgB,EAAE,CAAC;QACrB,CAAC;QACD,MAAM,aAAa,GAAG,CAAC,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,EAAE,IAAI,aAAa,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1E,IACE,MAAM,CAAC,EAAE;gBACT,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC;gBACrC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,EACpC,CAAC;gBACD,OAAO;oBACL,GAAG,MAAM;oBACT,MAAM,EACJ,MAAM,CAAC,MAAM;wBACb,mEAAmE;wBACnE,gEAAgE;wBAChE,uEAAuE;wBACvE,4FAA4F;iBAC/F,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC"}