@sentriflow/cli 0.2.0 → 0.2.1

package/dist/index.js

@@ -1,15 +1,766 @@
 #!/usr/bin/env node
+var __create = Object.create;
 var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
   get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
 }) : x)(function(x) {
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
+var __commonJS = (cb, mod) => function __require2() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
 var __export = (target, all) => {
   for (var name in all)
     __defProp(target, name, { get: all[name], enumerable: true });
 };
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// ../../node_modules/.bun/node-machine-id@1.1.12/node_modules/node-machine-id/dist/index.js
+var require_dist = __commonJS({
+  "../../node_modules/.bun/node-machine-id@1.1.12/node_modules/node-machine-id/dist/index.js"(exports, module) {
+    !(function(t, n) {
+      "object" == typeof exports && "object" == typeof module ? module.exports = n(__require("child_process"), __require("crypto")) : "function" == typeof define && define.amd ? define(["child_process", "crypto"], n) : "object" == typeof exports ? exports["electron-machine-id"] = n(__require("child_process"), __require("crypto")) : t["electron-machine-id"] = n(t.child_process, t.crypto);
+    })(exports, function(t, n) {
+      return (function(t2) {
+        function n2(e) {
+          if (r[e]) return r[e].exports;
+          var o = r[e] = { exports: {}, id: e, loaded: false };
+          return t2[e].call(o.exports, o, o.exports, n2), o.loaded = true, o.exports;
+        }
+        var r = {};
+        return n2.m = t2, n2.c = r, n2.p = "", n2(0);
+      })([function(t2, n2, r) {
+        t2.exports = r(34);
+      }, function(t2, n2, r) {
+        var e = r(29)("wks"), o = r(33), i = r(2).Symbol, c = "function" == typeof i, u = t2.exports = function(t3) {
+          return e[t3] || (e[t3] = c && i[t3] || (c ? i : o)("Symbol." + t3));
+        };
+        u.store = e;
+      }, function(t2, n2) {
+        var r = t2.exports = "undefined" != typeof window && window.Math == Math ? window : "undefined" != typeof self && self.Math == Math ? self : Function("return this")();
+        "number" == typeof __g && (__g = r);
+      }, function(t2, n2, r) {
+        var e = r(9);
+        t2.exports = function(t3) {
+          if (!e(t3)) throw TypeError(t3 + " is not an object!");
+          return t3;
+        };
+      }, function(t2, n2, r) {
+        t2.exports = !r(24)(function() {
+          return 7 != Object.defineProperty({}, "a", { get: function() {
+            return 7;
+          } }).a;
+        });
+      }, function(t2, n2, r) {
+        var e = r(12), o = r(17);
+        t2.exports = r(4) ? function(t3, n3, r2) {
+          return e.f(t3, n3, o(1, r2));
+        } : function(t3, n3, r2) {
+          return t3[n3] = r2, t3;
+        };
+      }, function(t2, n2) {
+        var r = t2.exports = { version: "2.4.0" };
+        "number" == typeof __e && (__e = r);
+      }, function(t2, n2, r) {
+        var e = r(14);
+        t2.exports = function(t3, n3, r2) {
+          if (e(t3), void 0 === n3) return t3;
+          switch (r2) {
+            case 1:
+              return function(r3) {
+                return t3.call(n3, r3);
+              };
+            case 2:
+              return function(r3, e2) {
+                return t3.call(n3, r3, e2);
+              };
+            case 3:
+              return function(r3, e2, o) {
+                return t3.call(n3, r3, e2, o);
+              };
+          }
+          return function() {
+            return t3.apply(n3, arguments);
+          };
+        };
+      }, function(t2, n2) {
+        var r = {}.hasOwnProperty;
+        t2.exports = function(t3, n3) {
+          return r.call(t3, n3);
+        };
+      }, function(t2, n2) {
+        t2.exports = function(t3) {
+          return "object" == typeof t3 ? null !== t3 : "function" == typeof t3;
+        };
+      }, function(t2, n2) {
+        t2.exports = {};
+      }, function(t2, n2) {
+        var r = {}.toString;
+        t2.exports = function(t3) {
+          return r.call(t3).slice(8, -1);
+        };
+      }, function(t2, n2, r) {
+        var e = r(3), o = r(26), i = r(32), c = Object.defineProperty;
+        n2.f = r(4) ? Object.defineProperty : function(t3, n3, r2) {
+          if (e(t3), n3 = i(n3, true), e(r2), o) try {
+            return c(t3, n3, r2);
+          } catch (t4) {
+          }
+          if ("get" in r2 || "set" in r2) throw TypeError("Accessors not supported!");
+          return "value" in r2 && (t3[n3] = r2.value), t3;
+        };
+      }, function(t2, n2, r) {
+        var e = r(42), o = r(15);
+        t2.exports = function(t3) {
+          return e(o(t3));
+        };
+      }, function(t2, n2) {
+        t2.exports = function(t3) {
+          if ("function" != typeof t3) throw TypeError(t3 + " is not a function!");
+          return t3;
+        };
+      }, function(t2, n2) {
+        t2.exports = function(t3) {
+          if (void 0 == t3) throw TypeError("Can't call method on  " + t3);
+          return t3;
+        };
+      }, function(t2, n2, r) {
+        var e = r(9), o = r(2).document, i = e(o) && e(o.createElement);
+        t2.exports = function(t3) {
+          return i ? o.createElement(t3) : {};
+        };
+      }, function(t2, n2) {
+        t2.exports = function(t3, n3) {
+          return { enumerable: !(1 & t3), configurable: !(2 & t3), writable: !(4 & t3), value: n3 };
+        };
+      }, function(t2, n2, r) {
+        var e = r(12).f, o = r(8), i = r(1)("toStringTag");
+        t2.exports = function(t3, n3, r2) {
+          t3 && !o(t3 = r2 ? t3 : t3.prototype, i) && e(t3, i, { configurable: true, value: n3 });
+        };
+      }, function(t2, n2, r) {
+        var e = r(29)("keys"), o = r(33);
+        t2.exports = function(t3) {
+          return e[t3] || (e[t3] = o(t3));
+        };
+      }, function(t2, n2) {
+        var r = Math.ceil, e = Math.floor;
+        t2.exports = function(t3) {
+          return isNaN(t3 = +t3) ? 0 : (t3 > 0 ? e : r)(t3);
+        };
+      }, function(t2, n2, r) {
+        var e = r(11), o = r(1)("toStringTag"), i = "Arguments" == e(/* @__PURE__ */ (function() {
+          return arguments;
+        })()), c = function(t3, n3) {
+          try {
+            return t3[n3];
+          } catch (t4) {
+          }
+        };
+        t2.exports = function(t3) {
+          var n3, r2, u;
+          return void 0 === t3 ? "Undefined" : null === t3 ? "Null" : "string" == typeof (r2 = c(n3 = Object(t3), o)) ? r2 : i ? e(n3) : "Object" == (u = e(n3)) && "function" == typeof n3.callee ? "Arguments" : u;
+        };
+      }, function(t2, n2) {
+        t2.exports = "constructor,hasOwnProperty,isPrototypeOf,propertyIsEnumerable,toLocaleString,toString,valueOf".split(",");
+      }, function(t2, n2, r) {
+        var e = r(2), o = r(6), i = r(7), c = r(5), u = "prototype", s = function(t3, n3, r2) {
+          var f, a, p, l = t3 & s.F, v = t3 & s.G, h = t3 & s.S, d = t3 & s.P, y = t3 & s.B, _ = t3 & s.W, x = v ? o : o[n3] || (o[n3] = {}), m = x[u], w = v ? e : h ? e[n3] : (e[n3] || {})[u];
+          v && (r2 = n3);
+          for (f in r2) a = !l && w && void 0 !== w[f], a && f in x || (p = a ? w[f] : r2[f], x[f] = v && "function" != typeof w[f] ? r2[f] : y && a ? i(p, e) : _ && w[f] == p ? (function(t4) {
+            var n4 = function(n5, r3, e2) {
+              if (this instanceof t4) {
+                switch (arguments.length) {
+                  case 0:
+                    return new t4();
+                  case 1:
+                    return new t4(n5);
+                  case 2:
+                    return new t4(n5, r3);
+                }
+                return new t4(n5, r3, e2);
+              }
+              return t4.apply(this, arguments);
+            };
+            return n4[u] = t4[u], n4;
+          })(p) : d && "function" == typeof p ? i(Function.call, p) : p, d && ((x.virtual || (x.virtual = {}))[f] = p, t3 & s.R && m && !m[f] && c(m, f, p)));
+        };
+        s.F = 1, s.G = 2, s.S = 4, s.P = 8, s.B = 16, s.W = 32, s.U = 64, s.R = 128, t2.exports = s;
+      }, function(t2, n2) {
+        t2.exports = function(t3) {
+          try {
+            return !!t3();
+          } catch (t4) {
+            return true;
+          }
+        };
+      }, function(t2, n2, r) {
+        t2.exports = r(2).document && document.documentElement;
+      }, function(t2, n2, r) {
+        t2.exports = !r(4) && !r(24)(function() {
+          return 7 != Object.defineProperty(r(16)("div"), "a", { get: function() {
+            return 7;
+          } }).a;
+        });
+      }, function(t2, n2, r) {
+        "use strict";
+        var e = r(28), o = r(23), i = r(57), c = r(5), u = r(8), s = r(10), f = r(45), a = r(18), p = r(52), l = r(1)("iterator"), v = !([].keys && "next" in [].keys()), h = "@@iterator", d = "keys", y = "values", _ = function() {
+          return this;
+        };
+        t2.exports = function(t3, n3, r2, x, m, w, g) {
+          f(r2, n3, x);
+          var b, O, j, S = function(t4) {
+            if (!v && t4 in T) return T[t4];
+            switch (t4) {
+              case d:
+                return function() {
+                  return new r2(this, t4);
+                };
+              case y:
+                return function() {
+                  return new r2(this, t4);
+                };
+            }
+            return function() {
+              return new r2(this, t4);
+            };
+          }, E = n3 + " Iterator", P = m == y, M = false, T = t3.prototype, A = T[l] || T[h] || m && T[m], k = A || S(m), C = m ? P ? S("entries") : k : void 0, I = "Array" == n3 ? T.entries || A : A;
+          if (I && (j = p(I.call(new t3())), j !== Object.prototype && (a(j, E, true), e || u(j, l) || c(j, l, _))), P && A && A.name !== y && (M = true, k = function() {
+            return A.call(this);
+          }), e && !g || !v && !M && T[l] || c(T, l, k), s[n3] = k, s[E] = _, m) if (b = { values: P ? k : S(y), keys: w ? k : S(d), entries: C }, g) for (O in b) O in T || i(T, O, b[O]);
+          else o(o.P + o.F * (v || M), n3, b);
+          return b;
+        };
+      }, function(t2, n2) {
+        t2.exports = true;
+      }, function(t2, n2, r) {
+        var e = r(2), o = "__core-js_shared__", i = e[o] || (e[o] = {});
+        t2.exports = function(t3) {
+          return i[t3] || (i[t3] = {});
+        };
+      }, function(t2, n2, r) {
+        var e, o, i, c = r(7), u = r(41), s = r(25), f = r(16), a = r(2), p = a.process, l = a.setImmediate, v = a.clearImmediate, h = a.MessageChannel, d = 0, y = {}, _ = "onreadystatechange", x = function() {
+          var t3 = +this;
+          if (y.hasOwnProperty(t3)) {
+            var n3 = y[t3];
+            delete y[t3], n3();
+          }
+        }, m = function(t3) {
+          x.call(t3.data);
+        };
+        l && v || (l = function(t3) {
+          for (var n3 = [], r2 = 1; arguments.length > r2; ) n3.push(arguments[r2++]);
+          return y[++d] = function() {
+            u("function" == typeof t3 ? t3 : Function(t3), n3);
+          }, e(d), d;
+        }, v = function(t3) {
+          delete y[t3];
+        }, "process" == r(11)(p) ? e = function(t3) {
+          p.nextTick(c(x, t3, 1));
+        } : h ? (o = new h(), i = o.port2, o.port1.onmessage = m, e = c(i.postMessage, i, 1)) : a.addEventListener && "function" == typeof postMessage && !a.importScripts ? (e = function(t3) {
+          a.postMessage(t3 + "", "*");
+        }, a.addEventListener("message", m, false)) : e = _ in f("script") ? function(t3) {
+          s.appendChild(f("script"))[_] = function() {
+            s.removeChild(this), x.call(t3);
+          };
+        } : function(t3) {
+          setTimeout(c(x, t3, 1), 0);
+        }), t2.exports = { set: l, clear: v };
+      }, function(t2, n2, r) {
+        var e = r(20), o = Math.min;
+        t2.exports = function(t3) {
+          return t3 > 0 ? o(e(t3), 9007199254740991) : 0;
+        };
+      }, function(t2, n2, r) {
+        var e = r(9);
+        t2.exports = function(t3, n3) {
+          if (!e(t3)) return t3;
+          var r2, o;
+          if (n3 && "function" == typeof (r2 = t3.toString) && !e(o = r2.call(t3))) return o;
+          if ("function" == typeof (r2 = t3.valueOf) && !e(o = r2.call(t3))) return o;
+          if (!n3 && "function" == typeof (r2 = t3.toString) && !e(o = r2.call(t3))) return o;
+          throw TypeError("Can't convert object to primitive value");
+        };
+      }, function(t2, n2) {
+        var r = 0, e = Math.random();
+        t2.exports = function(t3) {
+          return "Symbol(".concat(void 0 === t3 ? "" : t3, ")_", (++r + e).toString(36));
+        };
+      }, function(t2, n2, r) {
+        "use strict";
+        function e(t3) {
+          return t3 && t3.__esModule ? t3 : { default: t3 };
+        }
+        function o() {
+          return "win32" !== process.platform ? "" : "ia32" === process.arch && process.env.hasOwnProperty("PROCESSOR_ARCHITEW6432") ? "mixed" : "native";
+        }
+        function i(t3) {
+          return (0, l.createHash)("sha256").update(t3).digest("hex");
+        }
+        function c(t3) {
+          switch (h) {
+            case "darwin":
+              return t3.split("IOPlatformUUID")[1].split("\n")[0].replace(/\=|\s+|\"/gi, "").toLowerCase();
+            case "win32":
+              return t3.toString().split("REG_SZ")[1].replace(/\r+|\n+|\s+/gi, "").toLowerCase();
+            case "linux":
+              return t3.toString().replace(/\r+|\n+|\s+/gi, "").toLowerCase();
+            case "freebsd":
+              return t3.toString().replace(/\r+|\n+|\s+/gi, "").toLowerCase();
+            default:
+              throw new Error("Unsupported platform: " + process.platform);
+          }
+        }
+        function u(t3) {
+          var n3 = c((0, p.execSync)(y[h]).toString());
+          return t3 ? n3 : i(n3);
+        }
+        function s(t3) {
+          return new a.default(function(n3, r2) {
+            return (0, p.exec)(y[h], {}, function(e2, o2, u2) {
+              if (e2) return r2(new Error("Error while obtaining machine id: " + e2.stack));
+              var s2 = c(o2.toString());
+              return n3(t3 ? s2 : i(s2));
+            });
+          });
+        }
+        Object.defineProperty(n2, "__esModule", { value: true });
+        var f = r(35), a = e(f);
+        n2.machineIdSync = u, n2.machineId = s;
+        var p = r(70), l = r(71), v = process, h = v.platform, d = { native: "%windir%\\System32", mixed: "%windir%\\sysnative\\cmd.exe /c %windir%\\System32" }, y = { darwin: "ioreg -rd1 -c IOPlatformExpertDevice", win32: d[o()] + "\\REG.exe QUERY HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Cryptography /v MachineGuid", linux: "( cat /var/lib/dbus/machine-id /etc/machine-id 2> /dev/null || hostname ) | head -n 1 || :", freebsd: "kenv -q smbios.system.uuid || sysctl -n kern.hostuuid" };
+      }, function(t2, n2, r) {
+        t2.exports = { default: r(36), __esModule: true };
+      }, function(t2, n2, r) {
+        r(66), r(68), r(69), r(67), t2.exports = r(6).Promise;
+      }, function(t2, n2) {
+        t2.exports = function() {
+        };
+      }, function(t2, n2) {
+        t2.exports = function(t3, n3, r, e) {
+          if (!(t3 instanceof n3) || void 0 !== e && e in t3) throw TypeError(r + ": incorrect invocation!");
+          return t3;
+        };
+      }, function(t2, n2, r) {
+        var e = r(13), o = r(31), i = r(62);
+        t2.exports = function(t3) {
+          return function(n3, r2, c) {
+            var u, s = e(n3), f = o(s.length), a = i(c, f);
+            if (t3 && r2 != r2) {
+              for (; f > a; ) if (u = s[a++], u != u) return true;
+            } else for (; f > a; a++) if ((t3 || a in s) && s[a] === r2) return t3 || a || 0;
+            return !t3 && -1;
+          };
+        };
+      }, function(t2, n2, r) {
+        var e = r(7), o = r(44), i = r(43), c = r(3), u = r(31), s = r(64), f = {}, a = {}, n2 = t2.exports = function(t3, n3, r2, p, l) {
+          var v, h, d, y, _ = l ? function() {
+            return t3;
+          } : s(t3), x = e(r2, p, n3 ? 2 : 1), m = 0;
+          if ("function" != typeof _) throw TypeError(t3 + " is not iterable!");
+          if (i(_)) {
+            for (v = u(t3.length); v > m; m++) if (y = n3 ? x(c(h = t3[m])[0], h[1]) : x(t3[m]), y === f || y === a) return y;
+          } else for (d = _.call(t3); !(h = d.next()).done; ) if (y = o(d, x, h.value, n3), y === f || y === a) return y;
+        };
+        n2.BREAK = f, n2.RETURN = a;
+      }, function(t2, n2) {
+        t2.exports = function(t3, n3, r) {
+          var e = void 0 === r;
+          switch (n3.length) {
+            case 0:
+              return e ? t3() : t3.call(r);
+            case 1:
+              return e ? t3(n3[0]) : t3.call(r, n3[0]);
+            case 2:
+              return e ? t3(n3[0], n3[1]) : t3.call(r, n3[0], n3[1]);
+            case 3:
+              return e ? t3(n3[0], n3[1], n3[2]) : t3.call(r, n3[0], n3[1], n3[2]);
+            case 4:
+              return e ? t3(n3[0], n3[1], n3[2], n3[3]) : t3.call(r, n3[0], n3[1], n3[2], n3[3]);
+          }
+          return t3.apply(r, n3);
+        };
+      }, function(t2, n2, r) {
+        var e = r(11);
+        t2.exports = Object("z").propertyIsEnumerable(0) ? Object : function(t3) {
+          return "String" == e(t3) ? t3.split("") : Object(t3);
+        };
+      }, function(t2, n2, r) {
+        var e = r(10), o = r(1)("iterator"), i = Array.prototype;
+        t2.exports = function(t3) {
+          return void 0 !== t3 && (e.Array === t3 || i[o] === t3);
+        };
+      }, function(t2, n2, r) {
+        var e = r(3);
+        t2.exports = function(t3, n3, r2, o) {
+          try {
+            return o ? n3(e(r2)[0], r2[1]) : n3(r2);
+          } catch (n4) {
+            var i = t3.return;
+            throw void 0 !== i && e(i.call(t3)), n4;
+          }
+        };
+      }, function(t2, n2, r) {
+        "use strict";
+        var e = r(49), o = r(17), i = r(18), c = {};
+        r(5)(c, r(1)("iterator"), function() {
+          return this;
+        }), t2.exports = function(t3, n3, r2) {
+          t3.prototype = e(c, { next: o(1, r2) }), i(t3, n3 + " Iterator");
+        };
+      }, function(t2, n2, r) {
+        var e = r(1)("iterator"), o = false;
+        try {
+          var i = [7][e]();
+          i.return = function() {
+            o = true;
+          }, Array.from(i, function() {
+            throw 2;
+          });
+        } catch (t3) {
+        }
+        t2.exports = function(t3, n3) {
+          if (!n3 && !o) return false;
+          var r2 = false;
+          try {
+            var i2 = [7], c = i2[e]();
+            c.next = function() {
+              return { done: r2 = true };
+            }, i2[e] = function() {
+              return c;
+            }, t3(i2);
+          } catch (t4) {
+          }
+          return r2;
+        };
+      }, function(t2, n2) {
+        t2.exports = function(t3, n3) {
+          return { value: n3, done: !!t3 };
+        };
+      }, function(t2, n2, r) {
+        var e = r(2), o = r(30).set, i = e.MutationObserver || e.WebKitMutationObserver, c = e.process, u = e.Promise, s = "process" == r(11)(c);
+        t2.exports = function() {
+          var t3, n3, r2, f = function() {
+            var e2, o2;
+            for (s && (e2 = c.domain) && e2.exit(); t3; ) {
+              o2 = t3.fn, t3 = t3.next;
+              try {
+                o2();
+              } catch (e3) {
+                throw t3 ? r2() : n3 = void 0, e3;
+              }
+            }
+            n3 = void 0, e2 && e2.enter();
+          };
+          if (s) r2 = function() {
+            c.nextTick(f);
+          };
+          else if (i) {
+            var a = true, p = document.createTextNode("");
+            new i(f).observe(p, { characterData: true }), r2 = function() {
+              p.data = a = !a;
+            };
+          } else if (u && u.resolve) {
+            var l = u.resolve();
+            r2 = function() {
+              l.then(f);
+            };
+          } else r2 = function() {
+            o.call(e, f);
+          };
+          return function(e2) {
+            var o2 = { fn: e2, next: void 0 };
+            n3 && (n3.next = o2), t3 || (t3 = o2, r2()), n3 = o2;
+          };
+        };
+      }, function(t2, n2, r) {
+        var e = r(3), o = r(50), i = r(22), c = r(19)("IE_PROTO"), u = function() {
+        }, s = "prototype", f = function() {
+          var t3, n3 = r(16)("iframe"), e2 = i.length, o2 = ">";
+          for (n3.style.display = "none", r(25).appendChild(n3), n3.src = "javascript:", t3 = n3.contentWindow.document, t3.open(), t3.write("<script>document.F=Object</script" + o2), t3.close(), f = t3.F; e2--; ) delete f[s][i[e2]];
+          return f();
+        };
+        t2.exports = Object.create || function(t3, n3) {
+          var r2;
+          return null !== t3 ? (u[s] = e(t3), r2 = new u(), u[s] = null, r2[c] = t3) : r2 = f(), void 0 === n3 ? r2 : o(r2, n3);
+        };
+      }, function(t2, n2, r) {
+        var e = r(12), o = r(3), i = r(54);
+        t2.exports = r(4) ? Object.defineProperties : function(t3, n3) {
+          o(t3);
+          for (var r2, c = i(n3), u = c.length, s = 0; u > s; ) e.f(t3, r2 = c[s++], n3[r2]);
+          return t3;
+        };
+      }, function(t2, n2, r) {
+        var e = r(55), o = r(17), i = r(13), c = r(32), u = r(8), s = r(26), f = Object.getOwnPropertyDescriptor;
+        n2.f = r(4) ? f : function(t3, n3) {
+          if (t3 = i(t3), n3 = c(n3, true), s) try {
+            return f(t3, n3);
+          } catch (t4) {
+          }
+          if (u(t3, n3)) return o(!e.f.call(t3, n3), t3[n3]);
+        };
+      }, function(t2, n2, r) {
+        var e = r(8), o = r(63), i = r(19)("IE_PROTO"), c = Object.prototype;
+        t2.exports = Object.getPrototypeOf || function(t3) {
+          return t3 = o(t3), e(t3, i) ? t3[i] : "function" == typeof t3.constructor && t3 instanceof t3.constructor ? t3.constructor.prototype : t3 instanceof Object ? c : null;
+        };
+      }, function(t2, n2, r) {
+        var e = r(8), o = r(13), i = r(39)(false), c = r(19)("IE_PROTO");
+        t2.exports = function(t3, n3) {
+          var r2, u = o(t3), s = 0, f = [];
+          for (r2 in u) r2 != c && e(u, r2) && f.push(r2);
+          for (; n3.length > s; ) e(u, r2 = n3[s++]) && (~i(f, r2) || f.push(r2));
+          return f;
+        };
+      }, function(t2, n2, r) {
+        var e = r(53), o = r(22);
+        t2.exports = Object.keys || function(t3) {
+          return e(t3, o);
+        };
+      }, function(t2, n2) {
+        n2.f = {}.propertyIsEnumerable;
+      }, function(t2, n2, r) {
+        var e = r(5);
+        t2.exports = function(t3, n3, r2) {
+          for (var o in n3) r2 && t3[o] ? t3[o] = n3[o] : e(t3, o, n3[o]);
+          return t3;
+        };
+      }, function(t2, n2, r) {
+        t2.exports = r(5);
+      }, function(t2, n2, r) {
+        var e = r(9), o = r(3), i = function(t3, n3) {
+          if (o(t3), !e(n3) && null !== n3) throw TypeError(n3 + ": can't set as prototype!");
+        };
+        t2.exports = { set: Object.setPrototypeOf || ("__proto__" in {} ? (function(t3, n3, e2) {
+          try {
+            e2 = r(7)(Function.call, r(51).f(Object.prototype, "__proto__").set, 2), e2(t3, []), n3 = !(t3 instanceof Array);
+          } catch (t4) {
+            n3 = true;
+          }
+          return function(t4, r2) {
+            return i(t4, r2), n3 ? t4.__proto__ = r2 : e2(t4, r2), t4;
+          };
+        })({}, false) : void 0), check: i };
+      }, function(t2, n2, r) {
+        "use strict";
+        var e = r(2), o = r(6), i = r(12), c = r(4), u = r(1)("species");
+        t2.exports = function(t3) {
+          var n3 = "function" == typeof o[t3] ? o[t3] : e[t3];
+          c && n3 && !n3[u] && i.f(n3, u, { configurable: true, get: function() {
+            return this;
+          } });
+        };
+      }, function(t2, n2, r) {
+        var e = r(3), o = r(14), i = r(1)("species");
+        t2.exports = function(t3, n3) {
+          var r2, c = e(t3).constructor;
+          return void 0 === c || void 0 == (r2 = e(c)[i]) ? n3 : o(r2);
+        };
+      }, function(t2, n2, r) {
+        var e = r(20), o = r(15);
+        t2.exports = function(t3) {
+          return function(n3, r2) {
+            var i, c, u = String(o(n3)), s = e(r2), f = u.length;
+            return s < 0 || s >= f ? t3 ? "" : void 0 : (i = u.charCodeAt(s), i < 55296 || i > 56319 || s + 1 === f || (c = u.charCodeAt(s + 1)) < 56320 || c > 57343 ? t3 ? u.charAt(s) : i : t3 ? u.slice(s, s + 2) : (i - 55296 << 10) + (c - 56320) + 65536);
+          };
+        };
+      }, function(t2, n2, r) {
+        var e = r(20), o = Math.max, i = Math.min;
+        t2.exports = function(t3, n3) {
+          return t3 = e(t3), t3 < 0 ? o(t3 + n3, 0) : i(t3, n3);
+        };
+      }, function(t2, n2, r) {
+        var e = r(15);
+        t2.exports = function(t3) {
+          return Object(e(t3));
+        };
+      }, function(t2, n2, r) {
+        var e = r(21), o = r(1)("iterator"), i = r(10);
+        t2.exports = r(6).getIteratorMethod = function(t3) {
+          if (void 0 != t3) return t3[o] || t3["@@iterator"] || i[e(t3)];
+        };
+      }, function(t2, n2, r) {
+        "use strict";
+        var e = r(37), o = r(47), i = r(10), c = r(13);
+        t2.exports = r(27)(Array, "Array", function(t3, n3) {
+          this._t = c(t3), this._i = 0, this._k = n3;
+        }, function() {
+          var t3 = this._t, n3 = this._k, r2 = this._i++;
+          return !t3 || r2 >= t3.length ? (this._t = void 0, o(1)) : "keys" == n3 ? o(0, r2) : "values" == n3 ? o(0, t3[r2]) : o(0, [r2, t3[r2]]);
+        }, "values"), i.Arguments = i.Array, e("keys"), e("values"), e("entries");
+      }, function(t2, n2) {
+      }, function(t2, n2, r) {
+        "use strict";
+        var e, o, i, c = r(28), u = r(2), s = r(7), f = r(21), a = r(23), p = r(9), l = (r(3), r(14)), v = r(38), h = r(40), d = (r(58).set, r(60)), y = r(30).set, _ = r(48)(), x = "Promise", m = u.TypeError, w = u.process, g = u[x], w = u.process, b = "process" == f(w), O = function() {
+        }, j = !!(function() {
+          try {
+            var t3 = g.resolve(1), n3 = (t3.constructor = {})[r(1)("species")] = function(t4) {
+              t4(O, O);
+            };
+            return (b || "function" == typeof PromiseRejectionEvent) && t3.then(O) instanceof n3;
+          } catch (t4) {
+          }
+        })(), S = function(t3, n3) {
+          return t3 === n3 || t3 === g && n3 === i;
+        }, E = function(t3) {
+          var n3;
+          return !(!p(t3) || "function" != typeof (n3 = t3.then)) && n3;
+        }, P = function(t3) {
+          return S(g, t3) ? new M(t3) : new o(t3);
+        }, M = o = function(t3) {
+          var n3, r2;
+          this.promise = new t3(function(t4, e2) {
+            if (void 0 !== n3 || void 0 !== r2) throw m("Bad Promise constructor");
+            n3 = t4, r2 = e2;
+          }), this.resolve = l(n3), this.reject = l(r2);
+        }, T = function(t3) {
+          try {
+            t3();
+          } catch (t4) {
+            return { error: t4 };
+          }
+        }, A = function(t3, n3) {
+          if (!t3._n) {
+            t3._n = true;
+            var r2 = t3._c;
+            _(function() {
+              for (var e2 = t3._v, o2 = 1 == t3._s, i2 = 0, c2 = function(n4) {
+                var r3, i3, c3 = o2 ? n4.ok : n4.fail, u2 = n4.resolve, s2 = n4.reject, f2 = n4.domain;
+                try {
+                  c3 ? (o2 || (2 == t3._h && I(t3), t3._h = 1), c3 === true ? r3 = e2 : (f2 && f2.enter(), r3 = c3(e2), f2 && f2.exit()), r3 === n4.promise ? s2(m("Promise-chain cycle")) : (i3 = E(r3)) ? i3.call(r3, u2, s2) : u2(r3)) : s2(e2);
+                } catch (t4) {
+                  s2(t4);
+                }
+              }; r2.length > i2; ) c2(r2[i2++]);
+              t3._c = [], t3._n = false, n3 && !t3._h && k(t3);
+            });
+          }
+        }, k = function(t3) {
+          y.call(u, function() {
+            var n3, r2, e2, o2 = t3._v;
+            if (C(t3) && (n3 = T(function() {
+              b ? w.emit("unhandledRejection", o2, t3) : (r2 = u.onunhandledrejection) ? r2({ promise: t3, reason: o2 }) : (e2 = u.console) && e2.error && e2.error("Unhandled promise rejection", o2);
+            }), t3._h = b || C(t3) ? 2 : 1), t3._a = void 0, n3) throw n3.error;
+          });
+        }, C = function(t3) {
+          if (1 == t3._h) return false;
+          for (var n3, r2 = t3._a || t3._c, e2 = 0; r2.length > e2; ) if (n3 = r2[e2++], n3.fail || !C(n3.promise)) return false;
+          return true;
+        }, I = function(t3) {
+          y.call(u, function() {
+            var n3;
+            b ? w.emit("rejectionHandled", t3) : (n3 = u.onrejectionhandled) && n3({ promise: t3, reason: t3._v });
+          });
+        }, R = function(t3) {
+          var n3 = this;
+          n3._d || (n3._d = true, n3 = n3._w || n3, n3._v = t3, n3._s = 2, n3._a || (n3._a = n3._c.slice()), A(n3, true));
+        }, F = function(t3) {
+          var n3, r2 = this;
+          if (!r2._d) {
+            r2._d = true, r2 = r2._w || r2;
+            try {
+              if (r2 === t3) throw m("Promise can't be resolved itself");
+              (n3 = E(t3)) ? _(function() {
+                var e2 = { _w: r2, _d: false };
+                try {
+                  n3.call(t3, s(F, e2, 1), s(R, e2, 1));
+                } catch (t4) {
+                  R.call(e2, t4);
+                }
+              }) : (r2._v = t3, r2._s = 1, A(r2, false));
+            } catch (t4) {
+              R.call({ _w: r2, _d: false }, t4);
+            }
+          }
+        };
+        j || (g = function(t3) {
+          v(this, g, x, "_h"), l(t3), e.call(this);
+          try {
+            t3(s(F, this, 1), s(R, this, 1));
+          } catch (t4) {
+            R.call(this, t4);
+          }
+        }, e = function(t3) {
+          this._c = [], this._a = void 0, this._s = 0, this._d = false, this._v = void 0, this._h = 0, this._n = false;
+        }, e.prototype = r(56)(g.prototype, { then: function(t3, n3) {
+          var r2 = P(d(this, g));
+          return r2.ok = "function" != typeof t3 || t3, r2.fail = "function" == typeof n3 && n3, r2.domain = b ? w.domain : void 0, this._c.push(r2), this._a && this._a.push(r2), this._s && A(this, false), r2.promise;
+        }, catch: function(t3) {
+          return this.then(void 0, t3);
+        } }), M = function() {
+          var t3 = new e();
+          this.promise = t3, this.resolve = s(F, t3, 1), this.reject = s(R, t3, 1);
+        }), a(a.G + a.W + a.F * !j, { Promise: g }), r(18)(g, x), r(59)(x), i = r(6)[x], a(a.S + a.F * !j, x, { reject: function(t3) {
+          var n3 = P(this), r2 = n3.reject;
+          return r2(t3), n3.promise;
+        } }), a(a.S + a.F * (c || !j), x, { resolve: function(t3) {
+          if (t3 instanceof g && S(t3.constructor, this)) return t3;
+          var n3 = P(this), r2 = n3.resolve;
+          return r2(t3), n3.promise;
+        } }), a(a.S + a.F * !(j && r(46)(function(t3) {
+          g.all(t3).catch(O);
+        })), x, { all: function(t3) {
+          var n3 = this, r2 = P(n3), e2 = r2.resolve, o2 = r2.reject, i2 = T(function() {
+            var r3 = [], i3 = 0, c2 = 1;
+            h(t3, false, function(t4) {
+              var u2 = i3++, s2 = false;
+              r3.push(void 0), c2++, n3.resolve(t4).then(function(t5) {
+                s2 || (s2 = true, r3[u2] = t5, --c2 || e2(r3));
+              }, o2);
+            }), --c2 || e2(r3);
+          });
+          return i2 && o2(i2.error), r2.promise;
+        }, race: function(t3) {
+          var n3 = this, r2 = P(n3), e2 = r2.reject, o2 = T(function() {
+            h(t3, false, function(t4) {
+              n3.resolve(t4).then(r2.resolve, e2);
+            });
+          });
+          return o2 && e2(o2.error), r2.promise;
+        } });
+      }, function(t2, n2, r) {
+        "use strict";
+        var e = r(61)(true);
+        r(27)(String, "String", function(t3) {
+          this._t = String(t3), this._i = 0;
+        }, function() {
+          var t3, n3 = this._t, r2 = this._i;
+          return r2 >= n3.length ? { value: void 0, done: true } : (t3 = e(n3, r2), this._i += t3.length, { value: t3, done: false });
+        });
+      }, function(t2, n2, r) {
+        r(65);
+        for (var e = r(2), o = r(5), i = r(10), c = r(1)("toStringTag"), u = ["NodeList", "DOMTokenList", "MediaList", "StyleSheetList", "CSSRuleList"], s = 0; s < 5; s++) {
+          var f = u[s], a = e[f], p = a && a.prototype;
+          p && !p[c] && o(p, c, f), i[f] = i.Array;
+        }
+      }, function(t2, n2) {
+        t2.exports = __require("child_process");
+      }, function(t2, n2) {
+        t2.exports = __require("crypto");
+      }]);
+    });
+  }
+});
 
 // index.ts
 import { Command } from "commander";
@@ -71,15 +822,24 @@ var CiscoIOSSchema = {
     { pattern: /^banner\s+(motd|login|exec)/i, depth: 0 },
     { pattern: /^control-plane/i, depth: 0 },
     { pattern: /^ip\s+ips\s+signature-category/i, depth: 0 },
-    // ============ DEPTH 1: Inside routing protocols ============
+    // ============ DEPTH 1: Inside routing protocols / policy-map ============
     { pattern: /^address-family\s+\S+/i, depth: 1 },
-    { pattern: /^af-interface\s+\S+/i, depth: 1 },
-    { pattern: /^topology\s+\S+/i, depth: 1 },
     { pattern: /^service-family\s+\S+/i, depth: 1 },
-    { pattern: /^class\s+\S+/i, depth: 1 },
     { pattern: /^category\s+\S+/i, depth: 1 },
-    // ============ DEPTH 2: Inside address-family ============
-    { pattern: /^vrf\s+\S+/i, depth: 2 }
+    // Inside archive block
+    { pattern: /^log\s+config/i, depth: 1 },
+    // Inside key chain block
+    { pattern: /^key\s+\d+/i, depth: 1 },
+    // Inside policy-map (class block)
+    { pattern: /^class\s+\S+/i, depth: 1 },
+    // ============ DEPTH 2: Inside address-family / class ============
+    // Inside address-family (named EIGRP)
+    { pattern: /^af-interface\s+\S+/i, depth: 2 },
+    { pattern: /^topology\s+\S+/i, depth: 2 },
+    // Inside address-family (BGP vrf)
+    { pattern: /^vrf\s+\S+/i, depth: 2 },
+    // Inside class (QoS policing)
+    { pattern: /^police\s+/i, depth: 2 }
   ],
   blockEnders: [
     /^exit-address-family$/i,
@@ -147,11 +907,18 @@ var CiscoNXOSSchema = {
     // ============ DEPTH 1: Inside routing protocols ============
     { pattern: /^address-family\s+\S+/i, depth: 1 },
     { pattern: /^vrf\s+member\s+\S+/i, depth: 1 },
+    // VRF sub-context inside router bgp (e.g., "vrf TENANT-A")
+    // Uses negative lookahead (?!member\s) to avoid matching "vrf member X"
+    // This removes the ordering dependency with the vrf member pattern above
+    { pattern: /^vrf\s+(?!member\s)\S+/i, depth: 1 },
     { pattern: /^template\s+peer\s+\S+/i, depth: 1 },
     { pattern: /^neighbor\s+\S+/i, depth: 1 },
-    { pattern: /^class\s+\S+/i, depth: 1 }
-    // ============ DEPTH 2: Inside address-family ============
-    // Note: NX-OS uses different VRF nesting than IOS
+    { pattern: /^class\s+\S+/i, depth: 1 },
+    // ============ DEPTH 2: Inside neighbor / address-family ============
+    // address-family inside neighbor block
+    { pattern: /^address-family\s+\S+/i, depth: 2 },
+    // Inside policy-map class (QoS)
+    { pattern: /^police\s+/i, depth: 2 }
   ],
   blockEnders: [
     /^exit-address-family$/i,
@@ -3045,6 +3812,7 @@ var MAX_LINE_COUNT = 1e5;
 var MAX_TRAVERSAL_DEPTH = 20;
 var ALLOWED_CONFIG_EXTENSIONS = [".js", ".ts", ".mjs", ".cjs"];
 var ALLOWED_ENCRYPTED_PACK_EXTENSIONS = [".grpx"];
+var ALLOWED_GRX2_PACK_EXTENSIONS = [".grx2"];
 var ALLOWED_JSON_RULES_EXTENSIONS = [".json"];
 var MAX_CONFIG_FILE_SIZE = 1024 * 1024;
 var MAX_ENCRYPTED_PACK_SIZE = 5 * 1024 * 1024;
@@ -3338,6 +4106,30 @@ var SchemaAwareParser = class {
           }
         }
       }
+      if (isBlockStarter && currentLine.indent === 0) {
+        const multiDepthsForSamePattern = this.getMultiDepthsForSamePattern(currentLine.sanitized);
+        if (multiDepthsForSamePattern.length > 1) {
+          const currentBlockType = currentLine.sanitized.split(/\s+/)[0];
+          const maxSearch = Math.min(parentStack.length, MAX_NESTING_DEPTH);
+          for (let i = parentStack.length - 1; i >= parentStack.length - maxSearch; i--) {
+            const ancestor = parentStack[i];
+            if (ancestor?.type === "section" && ancestor.blockDepth !== void 0) {
+              const ancestorBlockType = ancestor.id.split(/\s+/)[0];
+              if (ancestorBlockType === currentBlockType) {
+                continue;
+              }
+              const ancestorDepth = ancestor.blockDepth;
+              const validChildDepths = multiDepthsForSamePattern.filter(
+                (d) => d > ancestorDepth
+              );
+              if (validChildDepths.length > 0) {
+                blockStarterDepth = Math.min(...validChildDepths);
+                break;
+              }
+            }
+          }
+        }
+      }
       const newNodeType = isBlockStarter ? "section" : "command";
       const modifiedLine = {
         ...currentLine,
@@ -3427,6 +4219,33 @@ var SchemaAwareParser = class {
     }
     return depths;
   }
+  /**
+   * Returns depths only for patterns where the SAME regex pattern is defined
+   * at multiple depth levels. This is used for flat config parsing where we need
+   * to detect intentional multi-depth patterns (like address-family at depth 1 AND 2)
+   * vs accidental overlaps (like vrf definition matching both vrf\s+definition and vrf\s+\S+).
+   *
+   * Example: address-family\s+\S+ at depth 1 AND depth 2 → returns [1, 2]
+   * Example: vrf definition X matching vrf\s+definition (depth 0) AND vrf\s+\S+ (depth 2) → returns []
+   */
+  getMultiDepthsForSamePattern(sanitizedLine) {
+    const patternToDepths = /* @__PURE__ */ new Map();
+    for (const def of this.vendor.blockStarters) {
+      if (def.pattern.test(sanitizedLine)) {
+        const key = `${def.pattern.source}|${def.pattern.flags}`;
+        if (!patternToDepths.has(key)) {
+          patternToDepths.set(key, []);
+        }
+        patternToDepths.get(key).push(def.depth);
+      }
+    }
+    for (const depths of patternToDepths.values()) {
+      if (depths.length > 1) {
+        return depths;
+      }
+    }
+    return [];
+  }
   /**
    * Checks if a sanitized line matches any of the defined BlockEnders regexes.
    */
@@ -3508,7 +4327,8 @@ var RuleExecutor = class {
       onTimeout: options.onTimeout ?? (() => {
       }),
       onRuleDisabled: options.onRuleDisabled ?? (() => {
-      })
+      }),
+      onError: options.onError
     };
   }
   /**
@@ -3535,6 +4355,7 @@ var RuleExecutor = class {
     } catch (error) {
       const elapsed = performance.now() - startTime;
       this.trackExecutionTime(rule.id, elapsed);
+      this.options.onError?.(rule.id, node.id, error);
       return {
         passed: false,
         message: `Rule ${rule.id} failed to execute. Check rule implementation.`,
@@ -3963,9 +4784,9 @@ __export(helpers_exports, {
 });
 
 // ../core/src/helpers/common/validation.ts
-var equalsIgnoreCase = (a, b) => a.toLowerCase() === b.toLowerCase();
-var includesIgnoreCase = (haystack, needle) => haystack.toLowerCase().includes(needle.toLowerCase());
-var startsWithIgnoreCase = (str, prefix) => str.toLowerCase().startsWith(prefix.toLowerCase());
+var equalsIgnoreCase = (a, b) => a != null && b != null && a.toLowerCase() === b.toLowerCase();
+var includesIgnoreCase = (haystack, needle) => haystack != null && needle != null && haystack.toLowerCase().includes(needle.toLowerCase());
+var startsWithIgnoreCase = (str, prefix) => str != null && prefix != null && str.toLowerCase().startsWith(prefix.toLowerCase());
 var parseInteger = (value) => {
   const num = parseInt(value, 10);
   return isNaN(num) ? null : num;
@@ -4085,18 +4906,21 @@ var maskToPrefix = (mask) => {
   return count;
 };
 var hasChildCommand = (node, prefix) => {
+  if (!node?.children || !prefix) return false;
   return node.children.some(
-    (child) => child.id.toLowerCase().startsWith(prefix.toLowerCase())
+    (child) => child?.id?.toLowerCase().startsWith(prefix.toLowerCase()) ?? false
   );
 };
 var getChildCommand = (node, prefix) => {
+  if (!node?.children || !prefix) return void 0;
   return node.children.find(
-    (child) => child.id.toLowerCase().startsWith(prefix.toLowerCase())
+    (child) => child?.id?.toLowerCase().startsWith(prefix.toLowerCase()) ?? false
   );
 };
 var getChildCommands = (node, prefix) => {
+  if (!node?.children || !prefix) return [];
   return node.children.filter(
-    (child) => child.id.toLowerCase().startsWith(prefix.toLowerCase())
+    (child) => child?.id?.toLowerCase().startsWith(prefix.toLowerCase()) ?? false
   );
 };
 var isValidIpAddress = (value) => {
@@ -4125,12 +4949,14 @@ var getParamValue = (node, keyword) => {
   return void 0;
 };
 var isShutdown = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const id = child.id.toLowerCase().trim();
+    const id = child?.id?.toLowerCase().trim();
     return id === "shutdown" || id === "disable";
   });
 };
 var isInterfaceDefinition = (node) => {
+  if (!node?.id) return false;
   const id = node.id.toLowerCase();
   if (node.type !== "section") {
     return false;
@@ -4145,12 +4971,13 @@ var isInterfaceDefinition = (node) => {
   if (ifName === "all" || ifName === "default") {
     return false;
   }
-  if (node.children.length <= 1) {
-    const hasOnlySimpleChild = node.children.every((child) => {
-      const childId = child.id.toLowerCase();
+  const childrenLength = node.children?.length ?? 0;
+  if (childrenLength <= 1) {
+    const hasOnlySimpleChild = (node.children ?? []).every((child) => {
+      const childId = child?.id?.toLowerCase() ?? "";
       return childId === "passive" || childId.startsWith("interface-type") || childId.startsWith("metric") || childId.startsWith("hello-interval") || childId.startsWith("dead-interval") || childId.startsWith("priority") || childId.startsWith("authentication") || childId.startsWith("bfd-liveness");
     });
-    if (hasOnlySimpleChild && node.children.length > 0) {
+    if (hasOnlySimpleChild && childrenLength > 0) {
       return false;
     }
   }
@@ -4260,22 +5087,25 @@ var hasPlaintextPassword = (node) => {
   return false;
 };
 var hasServicePasswordEncryption = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => equalsIgnoreCase(node.id, "service password-encryption")
+    (node) => equalsIgnoreCase(node?.id ?? "", "service password-encryption")
   );
 };
 var hasSshVersion2 = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^ip\s+ssh\s+version\s+2/i.test(node.id)
+    (node) => /^ip\s+ssh\s+version\s+2/i.test(node?.id ?? "")
   );
 };
 var getWeakSshCiphers = (ast) => {
+  if (!Array.isArray(ast)) return [];
   const weakCiphers = ["3des-cbc", "aes128-cbc", "aes192-cbc", "aes256-cbc", "blowfish-cbc"];
   const found = [];
   for (const node of ast) {
-    if (/^ip\s+ssh\s+ciphers/i.test(node.id)) {
+    if (/^ip\s+ssh\s+ciphers/i.test(node?.id ?? "")) {
       for (const cipher of weakCiphers) {
-        if (includesIgnoreCase(node.id, cipher)) {
+        if (includesIgnoreCase(node?.id ?? "", cipher)) {
           found.push(cipher);
         }
       }
@@ -4284,35 +5114,38 @@ var getWeakSshCiphers = (ast) => {
   return found;
 };
 var isTelnetDisabled = (ast) => {
+  if (!Array.isArray(ast)) return true;
   const noMgmtTelnet = ast.some(
-    (node) => /^no\s+management\s+telnet/i.test(node.id)
+    (node) => node?.id && /^no\s+management\s+telnet/i.test(node.id)
   );
   if (noMgmtTelnet) return true;
   const mgmtTelnet = ast.find(
-    (node) => /^management\s+telnet/i.test(node.id)
+    (node) => node?.id && /^management\s+telnet/i.test(node.id)
   );
-  if (mgmtTelnet) {
+  if (mgmtTelnet?.children) {
     return mgmtTelnet.children.some(
-      (child) => equalsIgnoreCase(child.id, "shutdown")
+      (child) => child?.id && equalsIgnoreCase(child.id, "shutdown")
     );
   }
   return true;
 };
 var isHttpServerDisabled = (ast) => {
+  if (!Array.isArray(ast)) return true;
   const hasNoHttp = ast.some(
-    (node) => /^no\s+ip\s+http\s+server/i.test(node.id)
+    (node) => /^no\s+ip\s+http\s+server/i.test(node?.id ?? "")
   );
   const hasHttp = ast.some(
-    (node) => /^ip\s+http\s+server/i.test(node.id) && !/^no\s+/i.test(node.id)
+    (node) => /^ip\s+http\s+server/i.test(node?.id ?? "") && !/^no\s+/i.test(node?.id ?? "")
   );
   return hasNoHttp || !hasHttp;
 };
 var getInsecureSnmpCommunities = (ast) => {
+  if (!Array.isArray(ast)) return [];
   const insecure = [];
   const defaultCommunities = ["public", "private", "community"];
   for (const node of ast) {
-    if (/^snmp-server\s+community\s+/i.test(node.id)) {
-      const match = node.id.match(/snmp-server\s+community\s+(\S+)/i);
+    if (/^snmp-server\s+community\s+/i.test(node?.id ?? "")) {
+      const match = node?.id?.match(/snmp-server\s+community\s+(\S+)/i);
       if (match?.[1]) {
         const community = match[1];
         if (defaultCommunities.some((dc) => equalsIgnoreCase(community, dc))) {
@@ -4326,40 +5159,47 @@ var getInsecureSnmpCommunities = (ast) => {
   return insecure;
 };
 var hasSnmpV3AuthPriv = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^snmp-server\s+group\s+\S+\s+v3\s+priv/i.test(node.id) || /^snmp-server\s+user\s+\S+\s+\S+\s+v3\s+auth\s+\S+\s+\S+\s+priv/i.test(node.id)
+    (node) => /^snmp-server\s+group\s+\S+\s+v3\s+priv/i.test(node?.id ?? "") || /^snmp-server\s+user\s+\S+\s+\S+\s+v3\s+auth\s+\S+\s+\S+\s+priv/i.test(node?.id ?? "")
   );
 };
 var hasNtpAuthentication = (ast) => {
+  if (!Array.isArray(ast)) return false;
   const hasAuthenticate = ast.some(
-    (node) => /^ntp\s+authenticate$/i.test(node.id)
+    (node) => /^ntp\s+authenticate$/i.test(node?.id ?? "")
   );
   const hasTrustedKey = ast.some(
-    (node) => /^ntp\s+trusted-key\s+/i.test(node.id)
+    (node) => /^ntp\s+trusted-key\s+/i.test(node?.id ?? "")
   );
   return hasAuthenticate && hasTrustedKey;
 };
 var hasAaaAuthenticationLogin = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^aaa\s+authentication\s+login\s+/i.test(node.id)
+    (node) => /^aaa\s+authentication\s+login\s+/i.test(node?.id ?? "")
   );
 };
 var hasTacacsServer = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^tacacs-server\s+host\s+/i.test(node.id)
+    (node) => /^tacacs-server\s+host\s+/i.test(node?.id ?? "")
   );
 };
 var hasAaaAccounting = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^aaa\s+accounting\s+/i.test(node.id)
+    (node) => /^aaa\s+accounting\s+/i.test(node?.id ?? "")
   );
 };
 var hasManagementVrf = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^vrf\s+instance\s+MGMT/i.test(node.id) || /^vrf\s+instance\s+management/i.test(node.id)
+    (node) => /^vrf\s+instance\s+MGMT/i.test(node?.id ?? "") || /^vrf\s+instance\s+management/i.test(node?.id ?? "")
   );
 };
 var getBannerInfoDisclosure = (ast) => {
+  if (!Array.isArray(ast)) return [];
   const issues = [];
   const sensitivePatterns = [
     { pattern: /version\s+\d+/i, desc: "software version" },
@@ -4369,8 +5209,8 @@ var getBannerInfoDisclosure = (ast) => {
     { pattern: /\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}/, desc: "IP address" }
   ];
   for (const node of ast) {
-    if (/^banner\s+(login|motd)/i.test(node.id)) {
-      const bannerText = node.rawText || node.id;
+    if (/^banner\s+(login|motd)/i.test(node?.id ?? "")) {
+      const bannerText = node?.rawText ?? node?.id ?? "";
       for (const { pattern, desc } of sensitivePatterns) {
         if (pattern.test(bannerText)) {
           issues.push(`Banner contains ${desc}`);
@@ -4381,10 +5221,12 @@ var getBannerInfoDisclosure = (ast) => {
   return issues;
 };
 var getConsoleIdleTimeout = (ast) => {
+  if (!Array.isArray(ast)) return void 0;
   for (const node of ast) {
-    if (/^management\s+console/i.test(node.id)) {
+    if (node?.id && /^management\s+console/i.test(node.id)) {
+      if (!node?.children) continue;
       for (const child of node.children) {
-        const match = child.id.match(/idle-timeout\s+(\d+)/i);
+        const match = child?.id?.match(/idle-timeout\s+(\d+)/i);
         if (match?.[1]) {
           return parseInteger(match[1]) ?? void 0;
         }
@@ -4394,102 +5236,117 @@ var getConsoleIdleTimeout = (ast) => {
   return void 0;
 };
 var isZtpDisabled = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^no\s+zerotouch\s+enable/i.test(node.id) || equalsIgnoreCase(node.id, "zerotouch cancel")
+    (node) => /^no\s+zerotouch\s+enable/i.test(node?.id ?? "") || equalsIgnoreCase(node?.id ?? "", "zerotouch cancel")
   );
 };
 var hasControlPlaneAcl = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^system\s+control-plane/i.test(node.id)
+    (node) => /^system\s+control-plane/i.test(node?.id ?? "")
   );
 };
 var hasCoppPolicy = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^policy-map\s+type\s+copp/i.test(node.id)
+    (node) => /^policy-map\s+type\s+copp/i.test(node?.id ?? "")
   );
 };
 var hasNoIpRedirects = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^no\s+ip\s+redirects/i.test(child.id)
+    (child) => child?.id && /^no\s+ip\s+redirects/i.test(child.id)
   );
 };
 var hasNoIpUnreachables = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^no\s+ip\s+unreachables/i.test(child.id)
+    (child) => child?.id && /^no\s+ip\s+unreachables/i.test(child.id)
   );
 };
 var hasRoutingProtocolAuth = (routerNode) => {
+  if (!routerNode?.id || !routerNode?.children) return false;
   if (/^router\s+ospf/i.test(routerNode.id)) {
     return routerNode.children.some(
-      (child) => /authentication/i.test(child.id)
+      (child) => child?.id && /authentication/i.test(child.id)
     );
   }
   if (/^router\s+isis/i.test(routerNode.id)) {
     return routerNode.children.some(
-      (child) => /authentication/i.test(child.id)
+      (child) => child?.id && /authentication/i.test(child.id)
     );
   }
   return false;
 };
 var hasBfd = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^bfd\s+/i.test(node.id)
+    (node) => /^bfd\s+/i.test(node?.id ?? "")
   );
 };
 var getStormControlStatus = (interfaceNode) => {
+  if (!interfaceNode?.children) return { broadcast: false, multicast: false, unicast: false };
   return {
     broadcast: interfaceNode.children.some(
-      (child) => /^storm-control\s+broadcast/i.test(child.id)
+      (child) => child?.id && /^storm-control\s+broadcast/i.test(child.id)
     ),
     multicast: interfaceNode.children.some(
-      (child) => /^storm-control\s+multicast/i.test(child.id)
+      (child) => child?.id && /^storm-control\s+multicast/i.test(child.id)
     ),
     unicast: interfaceNode.children.some(
-      (child) => /^storm-control\s+unknown-unicast/i.test(child.id)
+      (child) => child?.id && /^storm-control\s+unknown-unicast/i.test(child.id)
     )
   };
 };
 var hasDhcpSnooping = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^ip\s+dhcp\s+snooping$/i.test(node.id)
+    (node) => /^ip\s+dhcp\s+snooping$/i.test(node?.id ?? "")
   );
 };
 var isDhcpSnoopingTrust = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^ip\s+dhcp\s+snooping\s+trust/i.test(child.id)
+    (child) => child?.id && /^ip\s+dhcp\s+snooping\s+trust/i.test(child.id)
   );
 };
 var hasDynamicArpInspection = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^ip\s+arp\s+inspection\s+vlan/i.test(node.id)
+    (node) => /^ip\s+arp\s+inspection\s+vlan/i.test(node?.id ?? "")
   );
 };
 var isArpInspectionTrust = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^ip\s+arp\s+inspection\s+trust/i.test(child.id)
+    (child) => child?.id && /^ip\s+arp\s+inspection\s+trust/i.test(child.id)
   );
 };
 var hasIpSourceGuard = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^ip\s+verify\s+source/i.test(child.id)
+    (child) => child?.id && /^ip\s+verify\s+source/i.test(child.id)
   );
 };
 var hasPortSecurity = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^switchport\s+port-security/i.test(child.id)
+    (child) => child?.id && /^switchport\s+port-security/i.test(child.id)
   );
 };
 var getBgpNeighborsWithoutAuth = (routerBgpNode, neighborIp) => {
   const neighborsWithoutAuth = [];
+  if (!routerBgpNode?.children) return neighborsWithoutAuth;
   const neighborConfigs = /* @__PURE__ */ new Map();
   for (const child of routerBgpNode.children) {
-    const neighborMatch = child.id.match(/^neighbor\s+(\S+)/i);
+    const neighborMatch = child?.id?.match(/^neighbor\s+(\S+)/i);
     if (neighborMatch?.[1]) {
       const ip = neighborMatch[1];
       if (!neighborConfigs.has(ip)) {
         neighborConfigs.set(ip, { hasPassword: false });
       }
-      if (/password/i.test(child.id)) {
+      if (child?.id && /password/i.test(child.id)) {
         const config = neighborConfigs.get(ip);
         if (config) {
           config.hasPassword = true;
@@ -4508,10 +5365,11 @@ var getBgpNeighborsWithoutAuth = (routerBgpNode, neighborIp) => {
 };
 var getBgpNeighborsWithoutTtlSecurity = (routerBgpNode) => {
   const neighborsWithoutTtl = [];
+  if (!routerBgpNode?.children) return neighborsWithoutTtl;
   const neighborConfigs = /* @__PURE__ */ new Map();
-  const localAs = routerBgpNode.id.match(/router\s+bgp\s+(\d+)/i)?.[1];
+  const localAs = routerBgpNode?.id?.match(/router\s+bgp\s+(\d+)/i)?.[1];
   for (const child of routerBgpNode.children) {
-    const neighborMatch = child.id.match(/^neighbor\s+(\S+)\s+remote-as\s+(\d+)/i);
+    const neighborMatch = child?.id?.match(/^neighbor\s+(\S+)\s+remote-as\s+(\d+)/i);
     if (neighborMatch?.[1] && neighborMatch?.[2]) {
       const ip = neighborMatch[1];
       const remoteAs = neighborMatch[2];
@@ -4520,7 +5378,7 @@ var getBgpNeighborsWithoutTtlSecurity = (routerBgpNode) => {
         isEbgp: localAs !== remoteAs
       });
     }
-    const ttlMatch = child.id.match(/^neighbor\s+(\S+)\s+ttl\s+maximum-hops/i);
+    const ttlMatch = child?.id?.match(/^neighbor\s+(\S+)\s+ttl\s+maximum-hops/i);
     if (ttlMatch?.[1]) {
       const config = neighborConfigs.get(ttlMatch[1]);
       if (config) {
@@ -4537,13 +5395,14 @@ var getBgpNeighborsWithoutTtlSecurity = (routerBgpNode) => {
 };
 var getBgpNeighborsWithoutMaxRoutes = (routerBgpNode) => {
   const neighborsWithoutMax = [];
+  if (!routerBgpNode?.children) return neighborsWithoutMax;
   const neighborConfigs = /* @__PURE__ */ new Map();
   for (const child of routerBgpNode.children) {
-    const neighborMatch = child.id.match(/^neighbor\s+(\S+)\s+remote-as/i);
+    const neighborMatch = child?.id?.match(/^neighbor\s+(\S+)\s+remote-as/i);
     if (neighborMatch?.[1]) {
       neighborConfigs.set(neighborMatch[1], false);
     }
-    const maxMatch = child.id.match(/^neighbor\s+(\S+)\s+maximum-routes/i);
+    const maxMatch = child?.id?.match(/^neighbor\s+(\S+)\s+maximum-routes/i);
     if (maxMatch?.[1]) {
       neighborConfigs.set(maxMatch[1], true);
     }
@@ -4556,31 +5415,36 @@ var getBgpNeighborsWithoutMaxRoutes = (routerBgpNode) => {
   return neighborsWithoutMax;
 };
 var hasBgpGracefulRestart = (routerBgpNode) => {
+  if (!routerBgpNode?.children) return false;
   return routerBgpNode.children.some(
-    (child) => /^bgp\s+graceful-restart/i.test(child.id)
+    (child) => child?.id && /^bgp\s+graceful-restart/i.test(child.id)
   );
 };
 var hasBgpLogNeighborChanges = (routerBgpNode) => {
+  if (!routerBgpNode?.children) return false;
   return routerBgpNode.children.some(
-    (child) => /^bgp\s+log-neighbor-changes/i.test(child.id)
+    (child) => child?.id && /^bgp\s+log-neighbor-changes/i.test(child.id)
   );
 };
 var hasRpkiConfiguration = (routerBgpNode) => {
+  if (!routerBgpNode?.children) return false;
   return routerBgpNode.children.some(
-    (child) => /^rpki\s+cache/i.test(child.id)
+    (child) => child?.id && /^rpki\s+cache/i.test(child.id)
   );
 };
 var hasRpkiOriginValidation = (routerBgpNode) => {
+  if (!routerBgpNode?.children) return false;
   return routerBgpNode.children.some(
-    (child) => /^rpki\s+origin-validation/i.test(child.id)
+    (child) => child?.id && /^rpki\s+origin-validation/i.test(child.id)
   );
 };
 var getUrpfMode = (interfaceNode) => {
+  if (!interfaceNode?.children) return { enabled: false };
   for (const child of interfaceNode.children) {
-    if (/^ip\s+verify\s+unicast\s+source\s+reachable-via\s+rx/i.test(child.id)) {
+    if (child?.id && /^ip\s+verify\s+unicast\s+source\s+reachable-via\s+rx/i.test(child.id)) {
       return { enabled: true, mode: "strict" };
     }
-    if (/^ip\s+verify\s+unicast\s+source\s+reachable-via\s+any/i.test(child.id)) {
+    if (child?.id && /^ip\s+verify\s+unicast\s+source\s+reachable-via\s+any/i.test(child.id)) {
       return { enabled: true, mode: "loose" };
     }
   }
@@ -4596,11 +5460,13 @@ var getMlagReloadDelays = (mlagNode) => {
   };
 };
 var hasEvpnPeerAuth = (routerBgpNode) => {
+  if (!routerBgpNode?.children) return false;
   let evpnPeerGroup;
   for (const child of routerBgpNode.children) {
-    if (/^address-family\s+evpn/i.test(child.id)) {
+    if (child?.id && /^address-family\s+evpn/i.test(child.id)) {
+      if (!child?.children) continue;
       for (const subchild of child.children) {
-        const match = subchild.id.match(/neighbor\s+(\S+)\s+activate/i);
+        const match = subchild?.id?.match(/neighbor\s+(\S+)\s+activate/i);
         if (match?.[1]) {
           evpnPeerGroup = match[1];
         }
@@ -4609,14 +5475,15 @@ var hasEvpnPeerAuth = (routerBgpNode) => {
   }
   if (!evpnPeerGroup) return false;
   return routerBgpNode.children.some(
-    (child) => includesIgnoreCase(child.id, `neighbor ${evpnPeerGroup}`) && includesIgnoreCase(child.id, "password")
+    (child) => child?.id && includesIgnoreCase(child.id, `neighbor ${evpnPeerGroup}`) && includesIgnoreCase(child.id, "password")
   );
 };
 var hasLoggingLevel = (ast, minLevel) => {
+  if (!Array.isArray(ast)) return false;
   const levels = ["emergencies", "alerts", "critical", "errors", "warnings", "notifications", "informational", "debugging"];
   const minIndex = levels.indexOf(minLevel.toLowerCase());
   for (const node of ast) {
-    const match = node.id.match(/^logging\s+(?:buffered|trap)\s+(\S+)/i);
+    const match = (node?.id ?? "").match(/^logging\s+(?:buffered|trap)\s+(\S+)/i);
     if (match?.[1]) {
       const configuredIndex = levels.indexOf(match[1].toLowerCase());
       if (configuredIndex >= minIndex) {
@@ -4627,52 +5494,61 @@ var hasLoggingLevel = (ast, minLevel) => {
   return false;
 };
 var hasLoggingSourceInterface = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^logging\s+source-interface/i.test(node.id)
+    (node) => /^logging\s+source-interface/i.test(node?.id ?? "")
   );
 };
 var hasEventMonitor = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^event-monitor$/i.test(node.id)
+    (node) => /^event-monitor$/i.test(node?.id ?? "")
   );
 };
 var hasVrrpAuthentication = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^vrrp\s+\d+\s+authentication/i.test(child.id)
+    (child) => child?.id && /^vrrp\s+\d+\s+authentication/i.test(child.id)
   );
 };
 var hasVirtualRouterMac = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^ip\s+virtual-router\s+mac-address/i.test(node.id)
+    (node) => /^ip\s+virtual-router\s+mac-address/i.test(node?.id ?? "")
   );
 };
 var isExternalInterface = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   const description = interfaceNode.children.find(
-    (child) => startsWithIgnoreCase(child.id, "description ")
+    (child) => child?.id && startsWithIgnoreCase(child.id, "description ")
   );
-  if (description) {
+  if (description?.id) {
     return includesIgnoreCase(description.id, "wan") || includesIgnoreCase(description.id, "internet") || includesIgnoreCase(description.id, "isp") || includesIgnoreCase(description.id, "external") || includesIgnoreCase(description.id, "uplink") || includesIgnoreCase(description.id, "peering");
   }
   return false;
 };
 var isAccessPort = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^switchport\s+mode\s+access/i.test(child.id)
+    (child) => child?.id && /^switchport\s+mode\s+access/i.test(child.id)
   );
 };
 var isTrunkPort = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^switchport\s+mode\s+trunk/i.test(child.id)
+    (child) => child?.id && /^switchport\s+mode\s+trunk/i.test(child.id)
   );
 };
 var hasMlagConfiguration = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => startsWithIgnoreCase(node.id, "mlag configuration")
+    (node) => startsWithIgnoreCase(node?.id ?? "", "mlag configuration")
   );
 };
 var getMlagConfiguration = (ast) => {
+  if (!Array.isArray(ast)) return void 0;
   return ast.find(
-    (node) => startsWithIgnoreCase(node.id, "mlag configuration")
+    (node) => startsWithIgnoreCase(node?.id ?? "", "mlag configuration")
   );
 };
 var checkMlagRequirements = (mlagNode) => {
@@ -4684,21 +5560,24 @@ var checkMlagRequirements = (mlagNode) => {
   };
 };
 var hasManagementApi = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => startsWithIgnoreCase(node.id, "management api")
+    (node) => startsWithIgnoreCase(node?.id ?? "", "management api")
   );
 };
 var getManagementApiNodes = (ast) => {
+  if (!Array.isArray(ast)) return [];
   return ast.filter(
-    (node) => startsWithIgnoreCase(node.id, "management api")
+    (node) => startsWithIgnoreCase(node?.id ?? "", "management api")
   );
 };
 var hasHttpsTransport = (apiNode) => {
+  if (!apiNode?.children) return false;
   const hasProtocolHttps = apiNode.children.some(
-    (child) => includesIgnoreCase(child.id, "protocol https")
+    (child) => child?.id && includesIgnoreCase(child.id, "protocol https")
   );
   const hasTransportHttps = apiNode.children.some(
-    (child) => includesIgnoreCase(child.id, "transport https")
+    (child) => child?.id && includesIgnoreCase(child.id, "transport https")
   );
   return hasProtocolHttps || hasTransportHttps;
 };
@@ -4717,8 +5596,9 @@ var isMlagPeerLink = (node, mlagNode) => {
 };
 var getVxlanVniMappings = (vxlanNode) => {
   const mappings = [];
+  if (!vxlanNode?.children) return mappings;
   for (const child of vxlanNode.children) {
-    const vniMatch = child.id.match(/vxlan\s+vni\s+(\d+)\s+vlan\s+(\d+)/i);
+    const vniMatch = child?.id?.match(/vxlan\s+vni\s+(\d+)\s+vlan\s+(\d+)/i);
     if (vniMatch) {
       const vni = vniMatch[1];
       if (!vni) {
@@ -4728,7 +5608,7 @@ var getVxlanVniMappings = (vxlanNode) => {
       mappings.push({ vni, vlan });
       continue;
     }
-    const simpleMatch = child.id.match(/vxlan\s+vni\s+(\d+)/i);
+    const simpleMatch = child?.id?.match(/vxlan\s+vni\s+(\d+)/i);
     if (simpleMatch) {
       const vni = simpleMatch[1];
       if (!vni) {
@@ -4743,8 +5623,9 @@ var hasVxlanSourceInterface = (vxlanNode) => {
   return hasChildCommand(vxlanNode, "vxlan source-interface");
 };
 var getMlagId = (interfaceNode) => {
+  if (!interfaceNode?.children) return void 0;
   const mlagCmd = interfaceNode.children.find(
-    (child) => /^mlag\s+\d+/i.test(child.id)
+    (child) => child?.id && /^mlag\s+\d+/i.test(child.id)
   );
   if (!mlagCmd) return void 0;
   const match = mlagCmd.id.match(/mlag\s+(\d+)/i);
@@ -4766,91 +5647,106 @@ var isEthernetInterface = (node) => {
   return /^interface\s+Ethernet\d+/i.test(node.id);
 };
 var hasDaemon = (ast, daemonName) => {
+  if (!Array.isArray(ast)) return false;
   if (daemonName) {
     return ast.some(
-      (node) => equalsIgnoreCase(node.id, `daemon ${daemonName}`)
+      (node) => equalsIgnoreCase(node?.id ?? "", `daemon ${daemonName}`)
     );
   }
-  return ast.some((node) => startsWithIgnoreCase(node.id, "daemon "));
+  return ast.some((node) => startsWithIgnoreCase(node?.id ?? "", "daemon "));
 };
 var hasEventHandler = (ast) => {
-  return ast.some((node) => startsWithIgnoreCase(node.id, "event-handler "));
+  if (!Array.isArray(ast)) return false;
+  return ast.some((node) => startsWithIgnoreCase(node?.id ?? "", "event-handler "));
 };
 var getVrfInstances = (ast) => {
+  if (!Array.isArray(ast)) return [];
   return ast.filter(
-    (node) => /^vrf\s+instance\s+\S+/i.test(node.id)
+    (node) => /^vrf\s+instance\s+\S+/i.test(node?.id ?? "")
   );
 };
 var getInterfaceVrf = (interfaceNode) => {
+  if (!interfaceNode?.children) return void 0;
   const vrfCmd = interfaceNode.children.find(
-    (child) => /^vrf\s+\S+/i.test(child.id)
+    (child) => child?.id && /^vrf\s+\S+/i.test(child.id)
   );
   if (!vrfCmd) return void 0;
   const match = vrfCmd.id.match(/vrf\s+(\S+)/i);
   return match ? match[1] : void 0;
 };
 var hasEvpnAddressFamily = (routerBgpNode) => {
+  if (!routerBgpNode?.children) return false;
   return routerBgpNode.children.some(
-    (child) => /^address-family\s+evpn/i.test(child.id)
+    (child) => child?.id && /^address-family\s+evpn/i.test(child.id)
   );
 };
 var hasVirtualRouterAddress = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^ip\s+virtual-router\s+address/i.test(child.id)
+    (child) => child?.id && /^ip\s+virtual-router\s+address/i.test(child.id)
   );
 };
 var hasIpAddress = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   return interfaceNode.children.some(
-    (child) => /^ip\s+address\s+\d+\.\d+\.\d+\.\d+/i.test(child.id)
+    (child) => child?.id && /^ip\s+address\s+\d+\.\d+\.\d+\.\d+/i.test(child.id)
   );
 };
 var isShutdown2 = (interfaceNode) => {
+  if (!interfaceNode?.children) return false;
   const hasShutdown = interfaceNode.children.some(
-    (child) => equalsIgnoreCase(child.id, "shutdown")
+    (child) => child?.id && equalsIgnoreCase(child.id, "shutdown")
   );
   const hasNoShutdown = interfaceNode.children.some(
-    (child) => equalsIgnoreCase(child.id, "no shutdown")
+    (child) => child?.id && equalsIgnoreCase(child.id, "no shutdown")
   );
   return hasShutdown && !hasNoShutdown;
 };
 var getInterfaceDescription = (interfaceNode) => {
+  if (!interfaceNode?.children) return void 0;
   const descCmd = interfaceNode.children.find(
-    (child) => startsWithIgnoreCase(child.id, "description ")
+    (child) => child?.id && startsWithIgnoreCase(child.id, "description ")
   );
   if (!descCmd) return void 0;
   return descCmd.id.replace(/^description\s+/i, "").trim();
 };
 var hasNtpServer = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^ntp\s+server\s+/i.test(node.id)
+    (node) => /^ntp\s+server\s+/i.test(node?.id ?? "")
   );
 };
 var hasLoggingHost = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^logging\s+host\s+/i.test(node.id)
+    (node) => /^logging\s+host\s+/i.test(node?.id ?? "")
   );
 };
 var hasSnmpServer = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^snmp-server\s+/i.test(node.id)
+    (node) => /^snmp-server\s+/i.test(node?.id ?? "")
   );
 };
 var hasAaa = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^aaa\s+/i.test(node.id)
+    (node) => /^aaa\s+/i.test(node?.id ?? "")
   );
 };
 var hasSpanningTree = (ast) => {
+  if (!Array.isArray(ast)) return false;
   return ast.some(
-    (node) => /^spanning-tree\s+/i.test(node.id)
+    (node) => /^spanning-tree\s+/i.test(node?.id ?? "")
   );
 };
 var getSpanningTreeMode = (ast) => {
+  if (!Array.isArray(ast)) return void 0;
   const stpNode = ast.find(
-    (node) => /^spanning-tree\s+mode\s+/i.test(node.id)
+    (node) => /^spanning-tree\s+mode\s+/i.test(node?.id ?? "")
   );
   if (!stpNode) return void 0;
-  const match = stpNode.id.match(/spanning-tree\s+mode\s+(\S+)/i);
+  const match = stpNode?.id?.match(/spanning-tree\s+mode\s+(\S+)/i);
   return match ? match[1] : void 0;
 };
 
@@ -4916,6 +5812,7 @@ __export(aruba_exports, {
 
 // ../core/src/helpers/aruba/helpers.ts
 var getInterfaceName = (node) => {
+  if (!node?.id) return void 0;
   const match = node.id.match(/interface\s+(.+)/i);
   const ifName = match?.[1]?.trim();
   return ifName && ifName.length > 0 ? ifName : void 0;
@@ -5079,10 +5976,12 @@ var getAosSwitchVlanName = (node) => {
   return name?.trim();
 };
 var hasManagerPassword = (nodes) => {
-  return nodes.some((n) => n.id.toLowerCase().startsWith("password manager"));
+  if (!nodes) return false;
+  return nodes.some((n) => n?.id?.toLowerCase().startsWith("password manager") ?? false);
 };
 var hasOperatorPassword = (nodes) => {
-  return nodes.some((n) => n.id.toLowerCase().startsWith("password operator"));
+  if (!nodes) return false;
+  return nodes.some((n) => n?.id?.toLowerCase().startsWith("password operator") ?? false);
 };
 var getWlanEncryption = (node) => {
   const cmd = getChildCommand(node, "opmode");
@@ -5122,9 +6021,10 @@ var getVapSsidProfile = (node) => {
   return profile?.trim();
 };
 var getApGroupVirtualAps = (node) => {
+  if (!node?.children) return [];
   const vaps = [];
   for (const child of node.children) {
-    const match = child.id.match(/virtual-ap\s+["']?([^"'\n]+)["']?/i);
+    const match = child?.id?.match(/virtual-ap\s+["']?([^"'\n]+)["']?/i);
     const vapName = match?.[1];
     if (vapName) {
       vaps.push(vapName);
@@ -5188,12 +6088,14 @@ var hasWhitelistDb = (node) => {
   return hasChildCommand(node, "whitelist-db enable");
 };
 var findStanza = (node, stanzaName) => {
+  if (!node?.children) return void 0;
   return node.children.find(
-    (child) => child.id.toLowerCase() === stanzaName.toLowerCase()
+    (child) => child?.id?.toLowerCase() === stanzaName.toLowerCase()
   );
 };
 var findStanzas = (node, pattern) => {
-  return node.children.filter((child) => pattern.test(child.id.toLowerCase()));
+  if (!node?.children) return [];
+  return node.children.filter((child) => child?.id && pattern.test(child.id.toLowerCase()));
 };
 var hasDescription = (node) => {
   return hasChildCommand(node, "description");
@@ -5258,8 +6160,9 @@ __export(cisco_exports, {
 
 // ../core/src/helpers/cisco/helpers.ts
 var isShutdown3 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    return equalsIgnoreCase(child.id.trim(), "shutdown");
+    return child?.id && equalsIgnoreCase(child.id.trim(), "shutdown");
   });
 };
 var isPhysicalPort = (interfaceName) => {
@@ -5401,18 +6304,21 @@ var hasEigrpAuthentication = (node) => {
   return hasChildCommand(node, "ip authentication mode eigrp") && hasChildCommand(node, "ip authentication key-chain eigrp");
 };
 var hasBgpNeighborPassword = (neighborCommands) => {
+  if (!neighborCommands || !Array.isArray(neighborCommands)) return false;
   return neighborCommands.some(
-    (cmd) => includesIgnoreCase(cmd.id, "password")
+    (cmd) => cmd?.id && includesIgnoreCase(cmd.id, "password")
   );
 };
 var hasBgpTtlSecurity = (neighborCommands) => {
+  if (!neighborCommands || !Array.isArray(neighborCommands)) return false;
   return neighborCommands.some(
-    (cmd) => includesIgnoreCase(cmd.id, "ttl-security")
+    (cmd) => cmd?.id && includesIgnoreCase(cmd.id, "ttl-security")
   );
 };
 var hasBgpMaxPrefix = (neighborCommands) => {
+  if (!neighborCommands || !Array.isArray(neighborCommands)) return false;
   return neighborCommands.some(
-    (cmd) => includesIgnoreCase(cmd.id, "maximum-prefix")
+    (cmd) => cmd?.id && includesIgnoreCase(cmd.id, "maximum-prefix")
   );
 };
 var hasBgpLogNeighborChanges2 = (node) => {
@@ -5420,9 +6326,10 @@ var hasBgpLogNeighborChanges2 = (node) => {
 };
 var getBgpNeighbors = (node) => {
   const neighbors = /* @__PURE__ */ new Map();
+  if (!node?.children) return neighbors;
   for (const child of node.children) {
-    if (startsWithIgnoreCase(child.id, "neighbor")) {
-      const neighborIp = child.params[1];
+    if (child?.id && startsWithIgnoreCase(child.id, "neighbor")) {
+      const neighborIp = child.params?.[1];
       if (neighborIp) {
         const existing = neighbors.get(neighborIp) || [];
         existing.push(child);
@@ -5433,13 +6340,15 @@ var getBgpNeighbors = (node) => {
   return neighbors;
 };
 var hasHsrpMd5Auth = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    return startsWithIgnoreCase(child.id, "standby") && includesIgnoreCase(child.id, "authentication md5");
+    return child?.id && startsWithIgnoreCase(child.id, "standby") && includesIgnoreCase(child.id, "authentication md5");
   });
 };
 var hasVrrpAuthentication2 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    return startsWithIgnoreCase(child.id, "vrrp") && includesIgnoreCase(child.id, "authentication");
+    return child?.id && startsWithIgnoreCase(child.id, "vrrp") && includesIgnoreCase(child.id, "authentication");
   });
 };
 var hasUrpf = (node) => {
@@ -5857,26 +6766,30 @@ var hasVxlanId = (node) => {
   );
 };
 var hasBgpNeighborPassword2 = (node, neighborAddr) => {
+  if (!node?.children || !neighborAddr) return false;
   return node.children.some((child) => {
-    const id = child.id.toLowerCase();
-    return id.startsWith(`neighbor ${neighborAddr.toLowerCase()} password`);
+    const id = child?.id?.toLowerCase();
+    return id?.startsWith(`neighbor ${neighborAddr.toLowerCase()} password`) ?? false;
   });
 };
 var hasBgpPeerGroupPassword = (node, peerGroup) => {
+  if (!node?.children || !peerGroup) return false;
   return node.children.some((child) => {
-    const id = child.id.toLowerCase();
-    return id.startsWith(`neighbor ${peerGroup.toLowerCase()} password`);
+    const id = child?.id?.toLowerCase();
+    return id?.startsWith(`neighbor ${peerGroup.toLowerCase()} password`) ?? false;
   });
 };
 var hasBgpMaximumPrefix = (node, neighborAddr) => {
+  if (!node?.children || !neighborAddr) return false;
   return node.children.some((child) => {
-    const id = child.id.toLowerCase();
-    return id.includes(`neighbor ${neighborAddr.toLowerCase()}`) && id.includes("maximum-prefix");
+    const id = child?.id?.toLowerCase();
+    return id?.includes(`neighbor ${neighborAddr.toLowerCase()}`) && id?.includes("maximum-prefix");
   });
 };
 var hasBgpBfd = (node) => {
+  if (!node?.children) return false;
   return node.children.some(
-    (child) => child.id.toLowerCase().includes(" bfd")
+    (child) => child?.id?.toLowerCase().includes(" bfd") ?? false
   );
 };
 var hasBgpMultipath = (node) => {
@@ -6100,11 +7013,12 @@ var getVossMltId = (node) => {
   return mltId ? parseInt(mltId, 10) : void 0;
 };
 var isVossShutdown = (node) => {
+  if (!node?.children) return false;
   const hasShutdown = node.children.some(
-    (child) => child.id.toLowerCase() === "shutdown"
+    (child) => child?.id?.toLowerCase() === "shutdown"
   );
   const hasNoShutdown = node.children.some(
-    (child) => child.id.toLowerCase() === "no shutdown"
+    (child) => child?.id?.toLowerCase() === "no shutdown"
   );
   return hasShutdown && !hasNoShutdown;
 };
@@ -6136,8 +7050,9 @@ var hasVossSsh = (ast) => {
   );
 };
 var hasVossLacp = (node) => {
+  if (!node?.children) return false;
   return node.children.some(
-    (child) => /^lacp\s+(enable|key)/i.test(child.id)
+    (child) => child?.id && /^lacp\s+(enable|key)/i.test(child.id)
   );
 };
 var hasVossDvr = (ast) => {
@@ -6151,10 +7066,11 @@ var hasVossCfm = (ast) => {
   );
 };
 var getVossDefaultVlan = (node) => {
+  if (!node?.children) return void 0;
   const defaultVlan = node.children.find(
-    (child) => /^default-vlan-id\s+\d+/i.test(child.id)
+    (child) => child?.id && /^default-vlan-id\s+\d+/i.test(child.id)
   );
-  if (!defaultVlan) return void 0;
+  if (!defaultVlan?.id) return void 0;
   const match = defaultVlan.id.match(/default-vlan-id\s+(\d+)/i);
   const vlanId = match?.[1];
   return vlanId ? parseInt(vlanId, 10) : void 0;
@@ -6229,19 +7145,24 @@ __export(fortinet_exports, {
 
 // ../core/src/helpers/fortinet/helpers.ts
 var findConfigSection = (node, sectionName) => {
+  if (!node?.children) return void 0;
   const normalizedName = sectionName.toLowerCase();
   return node.children.find((child) => {
-    const childId = child.id.toLowerCase();
+    const childId = child?.id?.toLowerCase();
+    if (!childId) return false;
     return childId === `config ${normalizedName}` || childId === normalizedName || childId.startsWith(`config ${normalizedName} `) || childId.startsWith(`${normalizedName} `);
   });
 };
 var findConfigSections = (node, pattern) => {
-  return node.children.filter((child) => pattern.test(child.id.toLowerCase()));
+  if (!node?.children) return [];
+  return node.children.filter((child) => child?.id && pattern.test(child.id.toLowerCase()));
 };
 var findEditEntry = (configSection, entryName) => {
+  if (!configSection?.children) return void 0;
   const normalizedName = entryName.toLowerCase().replace(/^["']|["']$/g, "");
   return configSection.children.find((child) => {
-    const childId = child.id.toLowerCase();
+    const childId = child?.id?.toLowerCase();
+    if (!childId) return false;
     const editMatch = childId.match(/^edit\s+["']?([^"']+)["']?$/i);
     const editName = editMatch?.[1];
     if (editName) {
@@ -6251,8 +7172,9 @@ var findEditEntry = (configSection, entryName) => {
   });
 };
 var getEditEntries = (configSection) => {
+  if (!configSection?.children) return [];
   return configSection.children.filter(
-    (child) => child.id.toLowerCase().startsWith("edit ")
+    (child) => child?.id?.toLowerCase().startsWith("edit ")
   );
 };
 var getEditEntryName = (editEntry) => {
@@ -6261,9 +7183,11 @@ var getEditEntryName = (editEntry) => {
   return entryName ?? editEntry.id;
 };
 var getSetValue = (node, paramName) => {
+  if (!node?.children) return void 0;
   const normalizedParam = paramName.toLowerCase();
   for (const child of node.children) {
-    const childId = child.id.toLowerCase();
+    const childId = child?.id?.toLowerCase();
+    if (!childId) continue;
     const match = childId.match(new RegExp(`^set\\s+${normalizedParam}\\s+(.+)$`, "i"));
     const value = match?.[1];
     if (value) {
@@ -6276,10 +7200,12 @@ var hasSetValue = (node, paramName) => {
   return getSetValue(node, paramName) !== void 0;
 };
 var getSetValues = (node, paramName) => {
+  if (!node?.children) return [];
   const normalizedParam = paramName.toLowerCase();
   const values = [];
   for (const child of node.children) {
-    const childId = child.id.toLowerCase();
+    const childId = child?.id?.toLowerCase();
+    if (!childId) continue;
     const match = childId.match(new RegExp(`^set\\s+${normalizedParam}\\s+(.+)$`, "i"));
     const matchValue = match?.[1];
     if (matchValue) {
@@ -6698,19 +7624,21 @@ __export(huawei_exports, {
 
 // ../core/src/helpers/huawei/helpers.ts
 var isShutdown4 = (node) => {
+  if (!node?.children) return true;
   const hasShutdown = node.children.some((child) => {
-    const id = child.id.toLowerCase().trim();
+    const id = child?.id?.toLowerCase().trim();
     return id === "shutdown";
   });
   const hasUndoShutdown = node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "undo shutdown";
   });
   return hasShutdown || !hasUndoShutdown;
 };
 var isEnabled = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "undo shutdown";
   });
 };
@@ -6728,26 +7656,30 @@ var isEthTrunk = (interfaceName) => {
   return interfaceName.toLowerCase().includes("eth-trunk");
 };
 var isTrunkPort3 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText?.includes("port link-type trunk") ?? false;
   });
 };
 var isAccessPort3 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText?.includes("port link-type access") ?? false;
   });
 };
 var isHybridPort = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText?.includes("port link-type hybrid") ?? false;
   });
 };
 var getDefaultVlan = (node) => {
+  if (!node?.children) return void 0;
   const vlanCmd = node.children.find((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText?.startsWith("port default vlan") ?? false;
   });
   if (vlanCmd?.rawText) {
@@ -6760,8 +7692,9 @@ var getDefaultVlan = (node) => {
   return void 0;
 };
 var getTrunkAllowedVlans = (node) => {
+  if (!node?.children) return void 0;
   const vlanCmd = node.children.find((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText?.startsWith("port trunk allow-pass vlan") ?? false;
   });
   if (vlanCmd?.rawText) {
@@ -6788,20 +7721,23 @@ var getDescription2 = (node) => {
   return void 0;
 };
 var hasStpEdgedPort = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText?.includes("stp edged-port enable") ?? false;
   });
 };
 var hasPortSecurity2 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText?.includes("port-security enable") ?? false;
   });
 };
 var hasBpduProtection = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     if (!rawText) {
       return false;
     }
@@ -6809,8 +7745,9 @@ var hasBpduProtection = (node) => {
   });
 };
 var getCommandValue = (node, command) => {
+  if (!node?.children) return void 0;
   const cmd = node.children.find((child) => {
-    const text = child.rawText?.toLowerCase().trim();
+    const text = child?.rawText?.toLowerCase().trim();
     return text?.startsWith(command.toLowerCase()) ?? false;
   });
   if (cmd?.rawText) {
@@ -6820,18 +7757,21 @@ var getCommandValue = (node, command) => {
   return void 0;
 };
 var isSshEnabled = (node) => {
+  if (!node?.id || !node?.children) return false;
   if (node.id.toLowerCase().includes("user-interface")) {
     return node.children.some((child) => {
-      const rawText = child.rawText?.toLowerCase().trim();
+      const rawText = child?.rawText?.toLowerCase().trim();
       return rawText?.includes("protocol inbound ssh") || rawText === "protocol inbound all";
     });
   }
   return false;
 };
 var isTelnetEnabled = (node) => {
+  if (!node?.id || !node?.children) return false;
   if (node.id.toLowerCase().includes("user-interface")) {
     return node.children.some((child) => {
-      const rawText = child.rawText.toLowerCase().trim();
+      const rawText = child?.rawText?.toLowerCase().trim();
+      if (!rawText) return false;
       return rawText.includes("protocol inbound telnet") || rawText === "protocol inbound all" || // Default for VTY is often telnet
       !rawText.includes("protocol inbound");
     });
@@ -6839,15 +7779,17 @@ var isTelnetEnabled = (node) => {
   return false;
 };
 var hasAaaAuthentication = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.includes("authentication-mode aaa");
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.includes("authentication-mode aaa") ?? false;
   });
 };
 var hasPasswordAuthentication = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.includes("authentication-mode password");
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.includes("authentication-mode password") ?? false;
   });
 };
 var hasIdleTimeout = (node) => {
@@ -6865,15 +7807,18 @@ var getIdleTimeout = (node) => {
   return void 0;
 };
 var hasAclInbound = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.match(/acl\s+\d+\s+inbound/);
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.match(/acl\s+\d+\s+inbound/) ?? false;
   });
 };
 var findStanza3 = (node, stanzaName) => {
+  if (!node?.id) return void 0;
   if (node.id.toLowerCase().startsWith(stanzaName.toLowerCase())) {
     return node;
   }
+  if (!node?.children) return void 0;
   for (const child of node.children) {
     const found = findStanza3(child, stanzaName);
     if (found) return found;
@@ -6882,30 +7827,36 @@ var findStanza3 = (node, stanzaName) => {
 };
 var findStanzas2 = (node, stanzaName) => {
   const results = [];
+  if (!node?.id) return results;
   if (node.id.toLowerCase().startsWith(stanzaName.toLowerCase())) {
     results.push(node);
   }
+  if (!node?.children) return results;
   for (const child of node.children) {
     results.push(...findStanzas2(child, stanzaName));
   }
   return results;
 };
 var hasEncryptedPassword = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
+    if (!rawText) return false;
     return rawText.includes("password cipher") || rawText.includes("password irreversible-cipher");
   });
 };
 var hasPlaintextPassword2 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.includes("password simple");
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.includes("password simple") ?? false;
   });
 };
 var getPrivilegeLevel = (node) => {
+  if (!node?.children) return void 0;
   const privCmd = node.children.find((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("privilege level");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("privilege level") ?? false;
   });
   if (privCmd?.rawText) {
     const match = privCmd.rawText.match(/privilege\s+level\s+(\d+)/i);
@@ -6917,39 +7868,45 @@ var getPrivilegeLevel = (node) => {
   return void 0;
 };
 var hasBgpPeerPassword = (node, peerIp) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
+    const rawText = child?.rawText?.toLowerCase();
     return rawText?.includes(`peer ${peerIp.toLowerCase()}`) && rawText?.includes("password");
   });
 };
 var hasBgpPeerKeychain = (node, peerIp) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
+    const rawText = child?.rawText?.toLowerCase();
     return rawText?.includes(`peer ${peerIp.toLowerCase()}`) && rawText?.includes("keychain");
   });
 };
 var hasBgpPeerGtsm = (node, peerIp) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
+    const rawText = child?.rawText?.toLowerCase();
     return rawText?.includes(`peer ${peerIp.toLowerCase()}`) && rawText?.includes("valid-ttl-hops");
   });
 };
 var hasBgpPeerRouteLimit = (node, peerIp) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
+    const rawText = child?.rawText?.toLowerCase();
     return rawText?.includes(`peer ${peerIp.toLowerCase()}`) && rawText?.includes("route-limit");
   });
 };
 var hasBgpPeerPrefixFilter = (node, peerIp) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
+    const rawText = child?.rawText?.toLowerCase();
     return rawText?.includes(`peer ${peerIp.toLowerCase()}`) && (rawText?.includes("ip-prefix") || rawText?.includes("route-policy") || rawText?.includes("filter-policy"));
   });
 };
 var getBgpPeers = (node) => {
   const peers = [];
+  if (!node?.children) return peers;
   for (const child of node.children) {
-    if (child.rawText) {
+    if (child?.rawText) {
       const match = child.rawText.match(/peer\s+([\d.]+)\s+as-number/i);
       if (match?.[1]) {
         peers.push(match[1]);
@@ -6959,56 +7916,65 @@ var getBgpPeers = (node) => {
   return peers;
 };
 var hasBgpGracefulRestart2 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "graceful-restart" || rawText?.startsWith("graceful-restart ");
   });
 };
 var hasOspfAreaAuthentication = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("authentication-mode");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("authentication-mode") ?? false;
   });
 };
 var hasInterfaceOspfAuth = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("ospf authentication-mode");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("ospf authentication-mode") ?? false;
   });
 };
 var hasIsisAreaAuth = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("area-authentication-mode");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("area-authentication-mode") ?? false;
   });
 };
 var hasIsisDomainAuth = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("domain-authentication-mode");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("domain-authentication-mode") ?? false;
   });
 };
 var hasInterfaceIsisAuth = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("isis authentication-mode");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("isis authentication-mode") ?? false;
   });
 };
 var hasVrrp = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("vrrp vrid");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("vrrp vrid") ?? false;
   });
 };
 var hasVrrpAuthentication3 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
+    const rawText = child?.rawText?.toLowerCase();
     return rawText?.includes("vrrp vrid") && rawText?.includes("authentication-mode");
   });
 };
 var getVrrpVrid = (node) => {
+  if (!node?.children) return void 0;
   const vrrpCmd = node.children.find((child) => {
-    return child.rawText?.toLowerCase().includes("vrrp vrid");
+    return child?.rawText?.toLowerCase().includes("vrrp vrid") ?? false;
   });
   if (vrrpCmd?.rawText) {
     const match = vrrpCmd.rawText.match(/vrrp\s+vrid\s+(\d+)/i);
@@ -7019,33 +7985,38 @@ var getVrrpVrid = (node) => {
   return void 0;
 };
 var hasIcmpRedirectDisabled = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "undo icmp redirect send";
   });
 };
 var hasDirectedBroadcastDisabled = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "undo ip directed-broadcast enable" || rawText === "undo ip directed-broadcast";
   });
 };
 var hasArpProxyDisabled = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "undo arp proxy enable" || rawText === "undo proxy-arp";
   });
 };
 var hasUrpf2 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
+    const rawText = child?.rawText?.toLowerCase();
     return rawText?.includes("urpf strict") || rawText?.includes("urpf loose");
   });
 };
 var getUrpfMode3 = (node) => {
+  if (!node?.children) return void 0;
   const urpfCmd = node.children.find((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("urpf");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("urpf") ?? false;
   });
   if (urpfCmd?.rawText) {
     const rawText = urpfCmd.rawText.toLowerCase();
@@ -7055,21 +8026,24 @@ var getUrpfMode3 = (node) => {
   return void 0;
 };
 var hasLldpDisabled = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "undo lldp enable";
   });
 };
 var hasNtpAuthentication3 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "authentication enable";
   });
 };
 var hasNtpAuthKey = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("authentication-keyid");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("authentication-keyid") ?? false;
   });
 };
 var hasSshStrongCiphers = (node) => {
@@ -7101,8 +8075,9 @@ var hasCpuDefendPolicy = (node) => {
   return node.id.toLowerCase().startsWith("cpu-defend policy");
 };
 var hasCpuDefendAutoDefend = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "auto-defend enable";
   });
 };
@@ -7125,15 +8100,17 @@ var isIpSourceRouteDisabled = (rawText) => {
   return rawText.toLowerCase().trim() === "undo ip source-route";
 };
 var hasHwtacacsSharedKey = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("shared-key cipher");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("shared-key cipher") ?? false;
   });
 };
 var hasHwtacacsSecondary = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase();
-    return rawText?.includes("secondary");
+    const rawText = child?.rawText?.toLowerCase();
+    return rawText?.includes("secondary") ?? false;
   });
 };
 
@@ -7210,7 +8187,8 @@ __export(juniper_exports, {
 
 // ../core/src/helpers/juniper/helpers.ts
 var isDisabled = (node) => {
-  return node.children.some((child) => equalsIgnoreCase(child.id.trim(), "disable"));
+  if (!node?.children) return false;
+  return node.children.some((child) => child?.id && equalsIgnoreCase(child.id.trim(), "disable"));
 };
 var isPhysicalJunosPort = (interfaceName) => {
   return startsWithIgnoreCase(interfaceName, "ge-") || startsWithIgnoreCase(interfaceName, "xe-") || startsWithIgnoreCase(interfaceName, "et-") || startsWithIgnoreCase(interfaceName, "ae") || startsWithIgnoreCase(interfaceName, "em") || startsWithIgnoreCase(interfaceName, "fxp");
@@ -7239,29 +8217,35 @@ var parseJunosAddress = (address) => {
   };
 };
 var findStanza4 = (node, stanzaName) => {
+  if (!node?.children) return void 0;
   return node.children.find(
-    (child) => equalsIgnoreCase(child.id, stanzaName)
+    (child) => child?.id && equalsIgnoreCase(child.id, stanzaName)
   );
 };
 var findStanzas3 = (node, pattern) => {
-  return node.children.filter((child) => pattern.test(child.id));
+  if (!node?.children) return [];
+  return node.children.filter((child) => child?.id && pattern.test(child.id));
 };
 var getInterfaceUnits = (interfaceNode) => {
+  if (!interfaceNode?.children) return [];
   return interfaceNode.children.filter(
-    (child) => startsWithIgnoreCase(child.id, "unit")
+    (child) => child?.id && startsWithIgnoreCase(child.id, "unit")
   );
 };
 var getTermAction = (termNode) => {
+  if (!termNode?.children) return void 0;
   for (const child of termNode.children) {
-    const id = child.id.trim();
+    const id = child?.id?.trim();
+    if (!id) continue;
     if (equalsIgnoreCase(id, "then accept") || equalsIgnoreCase(id, "then accept;")) return "accept";
     if (equalsIgnoreCase(id, "then reject") || equalsIgnoreCase(id, "then reject;")) return "reject";
     if (startsWithIgnoreCase(id, "then next")) return "next";
   }
   const thenStanza = findStanza4(termNode, "then");
-  if (!thenStanza) return void 0;
+  if (!thenStanza?.children) return void 0;
   for (const child of thenStanza.children) {
-    const id = child.id.trim();
+    const id = child?.id?.trim();
+    if (!id) continue;
     if (equalsIgnoreCase(id, "accept") || equalsIgnoreCase(id, "accept;")) return "accept";
     if (equalsIgnoreCase(id, "reject") || equalsIgnoreCase(id, "reject;")) return "reject";
     if (startsWithIgnoreCase(id, "next")) return "next";
@@ -7269,16 +8253,19 @@ var getTermAction = (termNode) => {
   return void 0;
 };
 var isFilterTermDrop = (termNode) => {
+  if (!termNode?.children) return false;
   for (const child of termNode.children) {
-    const id = child.id.trim();
+    const id = child?.id?.trim();
+    if (!id) continue;
     if (equalsIgnoreCase(id, "then discard") || equalsIgnoreCase(id, "then discard;") || equalsIgnoreCase(id, "then reject") || equalsIgnoreCase(id, "then reject;")) {
       return true;
     }
   }
   const thenStanza = findStanza4(termNode, "then");
-  if (!thenStanza) return false;
+  if (!thenStanza?.children) return false;
   for (const child of thenStanza.children) {
-    const id = child.id.trim();
+    const id = child?.id?.trim();
+    if (!id) continue;
     if (equalsIgnoreCase(id, "discard") || equalsIgnoreCase(id, "discard;") || equalsIgnoreCase(id, "reject") || equalsIgnoreCase(id, "reject;")) {
       return true;
     }
@@ -7287,9 +8274,9 @@ var isFilterTermDrop = (termNode) => {
 };
 var isSshV2Only = (servicesNode) => {
   const ssh = findStanza4(servicesNode, "ssh");
-  if (!ssh) return false;
+  if (!ssh?.children) return false;
   for (const child of ssh.children) {
-    if (includesIgnoreCase(child.id, "protocol-version") && includesIgnoreCase(child.id, "v2") && !includesIgnoreCase(child.id, "v1")) {
+    if (child?.id && includesIgnoreCase(child.id, "protocol-version") && includesIgnoreCase(child.id, "v2") && !includesIgnoreCase(child.id, "v1")) {
       return true;
     }
   }
@@ -7297,9 +8284,9 @@ var isSshV2Only = (servicesNode) => {
 };
 var isSshRootLoginDenied = (servicesNode) => {
   const ssh = findStanza4(servicesNode, "ssh");
-  if (!ssh) return false;
+  if (!ssh?.children) return false;
   for (const child of ssh.children) {
-    if (includesIgnoreCase(child.id, "root-login") && includesIgnoreCase(child.id, "deny")) {
+    if (child?.id && includesIgnoreCase(child.id, "root-login") && includesIgnoreCase(child.id, "deny")) {
       return true;
     }
   }
@@ -7410,14 +8397,17 @@ var hasBgpTtlSecurity2 = (groupNode) => {
   return hasChildCommand(groupNode, "ttl") || hasChildCommand(groupNode, "multihop");
 };
 var hasBgpPrefixLimit = (groupNode) => {
+  if (!groupNode?.children) return false;
   const family = findStanza4(groupNode, "family");
   if (!family) {
     for (const child of groupNode.children) {
-      if (startsWithIgnoreCase(child.id, "family")) {
+      if (child?.id && startsWithIgnoreCase(child.id, "family")) {
         const hasLimit = hasChildCommand(child, "prefix-limit");
         if (hasLimit) return true;
-        for (const nested of child.children) {
-          if (hasChildCommand(nested, "prefix-limit")) return true;
+        if (child?.children) {
+          for (const nested of child.children) {
+            if (hasChildCommand(nested, "prefix-limit")) return true;
+          }
         }
       }
     }
@@ -7429,7 +8419,8 @@ var hasBgpPolicies = (groupNode) => {
   return hasChildCommand(groupNode, "import") || hasChildCommand(groupNode, "export");
 };
 var isBgpGroupExternal = (groupNode) => {
-  return groupNode.children.some((child) => includesIgnoreCase(child.id, "type external"));
+  if (!groupNode?.children) return false;
+  return groupNode.children.some((child) => child?.id && includesIgnoreCase(child.id, "type external"));
 };
 var hasGracefulRestart = (routingOptionsNode) => {
   return hasChildCommand(routingOptionsNode, "graceful-restart");
@@ -7467,8 +8458,9 @@ var hasPolicyLogging = (policyNode) => {
   return hasChildCommand(thenStanza, "log");
 };
 var hasStrongDhGroup = (proposalNode) => {
+  if (!proposalNode?.children) return false;
   for (const child of proposalNode.children) {
-    if (includesIgnoreCase(child.id, "dh-group")) {
+    if (child?.id && includesIgnoreCase(child.id, "dh-group")) {
       if (includesIgnoreCase(child.id, "group1") && !includesIgnoreCase(child.id, "group14")) return false;
       if (includesIgnoreCase(child.id, "group2") && !includesIgnoreCase(child.id, "group21")) return false;
       if (includesIgnoreCase(child.id, "group5")) return false;
@@ -7480,8 +8472,9 @@ var hasStrongDhGroup = (proposalNode) => {
   return false;
 };
 var hasStrongEncryption = (proposalNode) => {
+  if (!proposalNode?.children) return false;
   for (const child of proposalNode.children) {
-    if (includesIgnoreCase(child.id, "encryption-algorithm")) {
+    if (child?.id && includesIgnoreCase(child.id, "encryption-algorithm")) {
       if (includesIgnoreCase(child.id, "aes-256") || includesIgnoreCase(child.id, "aes-gcm-256")) {
         return true;
       }
@@ -7693,9 +8686,11 @@ var isSetCommand = (nodeOrCommand) => {
   return /^set\s+/i.test(str.trim());
 };
 var getAddCommands = (node) => {
+  if (!node?.children) return [];
   return node.children.filter((child) => isAddCommand(child));
 };
 var getSetCommands = (node) => {
+  if (!node?.children) return [];
   return node.children.filter((child) => isSetCommand(child));
 };
 var isPathBlock = (node, path) => {
@@ -7704,13 +8699,15 @@ var isPathBlock = (node, path) => {
   return nodeId === targetPath || nodeId.startsWith(targetPath + " ");
 };
 var findPathBlock = (node, pathPrefix) => {
+  if (!node?.children) return void 0;
   return node.children.find(
-    (child) => child.id.toLowerCase().trim().startsWith(pathPrefix.toLowerCase())
+    (child) => child?.id?.toLowerCase().trim().startsWith(pathPrefix.toLowerCase())
   );
 };
 var findPathBlocks = (node, pathPrefix) => {
+  if (!node?.children) return [];
   return node.children.filter(
-    (child) => child.id.toLowerCase().trim().startsWith(pathPrefix.toLowerCase())
+    (child) => child?.id?.toLowerCase().trim().startsWith(pathPrefix.toLowerCase())
   );
 };
 var parseMikroTikAddress = (address) => {
@@ -7756,6 +8753,7 @@ var isServiceDisabled = (nodeOrCommand) => {
   return disabled?.toLowerCase() === "yes";
 };
 var getFirewallRules = (firewallNode) => {
+  if (!firewallNode?.children) return [];
   return firewallNode.children.filter((child) => isAddCommand(child));
 };
 var getNatAction = (nodeOrCommand) => {
@@ -7771,6 +8769,7 @@ var getInInterface = (nodeOrCommand) => {
   return parseProperty(str, "in-interface");
 };
 var getSystemIdentity = (node) => {
+  if (!node?.children) return void 0;
   for (const child of node.children) {
     if (isSetCommand(child)) {
       const name = getName(child);
@@ -7785,10 +8784,11 @@ var isNtpEnabled = (nodeOrCommand) => {
   return enabled?.toLowerCase() === "yes";
 };
 var getNtpServers = (ntpNode) => {
+  if (!ntpNode?.children) return [];
   const servers = [];
   for (const child of ntpNode.children) {
     if (isAddCommand(child)) {
-      const address = parseProperty(child.id, "address");
+      const address = parseProperty(child?.id, "address");
       if (address) servers.push(address);
     }
   }
@@ -8067,25 +9067,28 @@ __export(nokia_exports, {
 
 // ../core/src/helpers/nokia/helpers.ts
 var isAdminStateEnabled = (node) => {
+  if (!node?.children) return false;
   const directCheck = node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "admin-state enable" || rawText === "admin-state up";
   });
   if (directCheck) return true;
-  const nodeText = node.rawText.toLowerCase();
+  const nodeText = node?.rawText?.toLowerCase() ?? "";
   return nodeText.includes("admin-state enable") || nodeText.includes("admin-state up");
 };
 var isAdminStateDisabled = (node) => {
+  if (!node?.children) return false;
   const directCheck = node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "admin-state disable";
   });
   if (directCheck) return true;
-  return node.rawText.toLowerCase().includes("admin-state disable");
+  return node?.rawText?.toLowerCase().includes("admin-state disable") ?? false;
 };
 var isShutdown5 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText === "shutdown";
   });
 };
@@ -8107,15 +9110,16 @@ var isSystemInterface = (interfaceName) => {
   return name.includes("system") || name.includes("loopback") || name === '"system"';
 };
 var getPortMode = (node) => {
+  if (!node?.children) return void 0;
   const ethernetNode = node.children.find(
-    (child) => child.id.toLowerCase() === "ethernet"
+    (child) => child?.id?.toLowerCase() === "ethernet"
   );
-  if (ethernetNode) {
+  if (ethernetNode?.children) {
     const modeCmd = ethernetNode.children.find((child) => {
-      const rawText = child.rawText.toLowerCase().trim();
-      return rawText.startsWith("mode");
+      const rawText = child?.rawText?.toLowerCase().trim();
+      return rawText?.startsWith("mode");
     });
-    if (modeCmd) {
+    if (modeCmd?.rawText) {
       if (modeCmd.rawText.toLowerCase().includes("network")) {
         return "network";
       }
@@ -8137,7 +9141,7 @@ var hasDescription4 = (node) => {
 };
 var getDescription3 = (node) => {
   const descCmd = getChildCommand(node, "description");
-  if (descCmd) {
+  if (descCmd?.rawText) {
     const match = descCmd.rawText.match(/description\s+"([^"]+)"|description\s+(\S+)/i);
     if (match) {
       return match[1] || match[2];
@@ -8146,10 +9150,11 @@ var getDescription3 = (node) => {
   return void 0;
 };
 var getSystemName = (node) => {
+  if (!node?.children) return void 0;
   const nameCmd = node.children.find((child) => {
-    return child.id.toLowerCase().startsWith("name");
+    return child?.id?.toLowerCase().startsWith("name");
   });
-  if (nameCmd) {
+  if (nameCmd?.rawText) {
     const match = nameCmd.rawText.match(/name\s+"([^"]+)"/i);
     if (match) {
       return match[1];
@@ -8158,17 +9163,19 @@ var getSystemName = (node) => {
   return void 0;
 };
 var hasIpAddress2 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.startsWith("address");
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.startsWith("address") ?? false;
   });
 };
 var getIpAddress = (node) => {
+  if (!node?.children) return void 0;
   const addrCmd = node.children.find((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.startsWith("address");
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.startsWith("address") ?? false;
   });
-  if (addrCmd) {
+  if (addrCmd?.rawText) {
     const match = addrCmd.rawText.match(/address\s+([\d./:a-fA-F]+)/i);
     if (match) {
       return match[1];
@@ -8177,17 +9184,19 @@ var getIpAddress = (node) => {
   return void 0;
 };
 var hasPortAssignment = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.startsWith("port");
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.startsWith("port") ?? false;
   });
 };
 var getPortAssignment = (node) => {
+  if (!node?.children) return void 0;
   const portCmd = node.children.find((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.startsWith("port");
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.startsWith("port") ?? false;
   });
-  if (portCmd) {
+  if (portCmd?.rawText) {
     const match = portCmd.rawText.match(/port\s+([\d/]+)/i);
     if (match) {
       return match[1];
@@ -8200,7 +9209,7 @@ var hasBgpRouterId2 = (node) => {
 };
 var getBgpRouterId = (node) => {
   const routerIdCmd = getChildCommand(node, "router-id");
-  if (routerIdCmd) {
+  if (routerIdCmd?.rawText) {
     const match = routerIdCmd.rawText.match(/router-id\s+([\d.]+)/i);
     if (match) {
       return match[1];
@@ -8209,9 +9218,10 @@ var getBgpRouterId = (node) => {
   return void 0;
 };
 var findStanza5 = (node, stanzaName) => {
-  if (node.id.toLowerCase().startsWith(stanzaName.toLowerCase())) {
+  if (node?.id?.toLowerCase().startsWith(stanzaName.toLowerCase())) {
     return node;
   }
+  if (!node?.children) return void 0;
   for (const child of node.children) {
     const found = findStanza5(child, stanzaName);
     if (found) return found;
@@ -8220,26 +9230,29 @@ var findStanza5 = (node, stanzaName) => {
 };
 var findStanzas4 = (node, stanzaName) => {
   const results = [];
-  if (node.id.toLowerCase().startsWith(stanzaName.toLowerCase())) {
+  if (node?.id?.toLowerCase().startsWith(stanzaName.toLowerCase())) {
     results.push(node);
   }
+  if (!node?.children) return results;
   for (const child of node.children) {
     results.push(...findStanzas4(child, stanzaName));
   }
   return results;
 };
 var hasSap = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.startsWith("sap");
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.startsWith("sap") ?? false;
   });
 };
 var getSapId = (node) => {
+  if (!node?.children) return void 0;
   const sapCmd = node.children.find((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.startsWith("sap");
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.startsWith("sap") ?? false;
   });
-  if (sapCmd) {
+  if (sapCmd?.rawText) {
     const match = sapCmd.rawText.match(/sap\s+([\d/:]+)/i);
     if (match) {
       return match[1];
@@ -8248,38 +9261,43 @@ var getSapId = (node) => {
   return void 0;
 };
 var isSnmpEnabled = (node) => {
+  if (!node?.id) return false;
   if (node.id.toLowerCase() === "snmp") {
     return isAdminStateEnabled(node);
   }
   return false;
 };
 var hasNtpServer2 = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim() ?? "";
     return rawText.includes("ntp-server") || rawText.includes("server");
   });
 };
 var isSshEnabled2 = (node) => {
+  if (!node?.id || !node?.children) return false;
   if (node.id.toLowerCase().includes("security") || node.id.toLowerCase().includes("management-interface")) {
     return node.children.some((child) => {
-      const rawText = child.rawText.toLowerCase().trim();
+      const rawText = child?.rawText?.toLowerCase().trim() ?? "";
       return rawText.includes("ssh") && !rawText.includes("no ssh");
     });
   }
   return false;
 };
 var isTelnetEnabled2 = (node) => {
+  if (!node?.id || !node?.children) return false;
   if (node.id.toLowerCase().includes("security") || node.id.toLowerCase().includes("management-interface")) {
     return node.children.some((child) => {
-      const rawText = child.rawText.toLowerCase().trim();
+      const rawText = child?.rawText?.toLowerCase().trim() ?? "";
       return rawText.includes("telnet") && !rawText.includes("no telnet");
     });
   }
   return false;
 };
 var hasAuthentication = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     if (!rawText) {
       return false;
     }
@@ -8287,6 +9305,7 @@ var hasAuthentication = (node) => {
   });
 };
 var getInterfaceName3 = (node) => {
+  if (!node?.id) return "";
   const match = node.id.match(/interface\s+"([^"]+)"|interface\s+(\S+)/i);
   const quoted = match?.[1];
   const unquoted = match?.[2];
@@ -8295,6 +9314,7 @@ var getInterfaceName3 = (node) => {
   return node.id.replace(/^interface\s+/i, "").trim();
 };
 var getRouterName = (node) => {
+  if (!node?.id) return "Base";
   const match = node.id.match(/router\s+"([^"]+)"|router\s+(\S+)/i);
   const quoted = match?.[1];
   const unquoted = match?.[2];
@@ -8306,6 +9326,7 @@ var hasPeerDescription = (node) => {
   return hasChildCommand(node, "description");
 };
 var getServiceType = (node) => {
+  if (!node?.id) return void 0;
   const id = node.id.toLowerCase();
   if (id.includes("vpls")) return "vpls";
   if (id.includes("vprn")) return "vprn";
@@ -8314,6 +9335,7 @@ var getServiceType = (node) => {
   return void 0;
 };
 var getServiceId = (node) => {
+  if (!node?.id) return void 0;
   const match = node.id.match(/(vpls|vprn|epipe|ies)\s+(\d+)/i);
   const serviceId = match?.[2];
   if (serviceId) {
@@ -8322,17 +9344,19 @@ var getServiceId = (node) => {
   return void 0;
 };
 var hasCustomer = (node) => {
+  if (!node?.children) return false;
   return node.children.some((child) => {
-    const rawText = child.rawText?.toLowerCase().trim();
+    const rawText = child?.rawText?.toLowerCase().trim();
     return rawText?.startsWith("customer") ?? false;
   });
 };
 var getCustomerId = (node) => {
+  if (!node?.children) return void 0;
   const customerCmd = node.children.find((child) => {
-    const rawText = child.rawText.toLowerCase().trim();
-    return rawText.startsWith("customer");
+    const rawText = child?.rawText?.toLowerCase().trim();
+    return rawText?.startsWith("customer") ?? false;
   });
-  if (customerCmd) {
+  if (customerCmd?.rawText) {
     const match = customerCmd.rawText.match(/customer\s+(\d+)/i);
     if (match) {
       return match[1];
@@ -8341,10 +9365,11 @@ var getCustomerId = (node) => {
   return void 0;
 };
 var searchNodeRecursively = (node, predicate) => {
-  const rawText = node.rawText.toLowerCase().trim();
+  const rawText = node?.rawText?.toLowerCase().trim() ?? "";
   if (predicate(rawText)) {
     return true;
   }
+  if (!node?.children) return false;
   return node.children.some((child) => searchNodeRecursively(child, predicate));
 };
 var hasTacacsConfig = (node) => {
@@ -8471,7 +9496,7 @@ var hasUrpf3 = (node) => {
 var getUrpfMode4 = (node) => {
   let mode;
   const findMode = (n) => {
-    const rawText = n.rawText.toLowerCase();
+    const rawText = n?.rawText?.toLowerCase() ?? "";
     if (rawText.includes("urpf-check")) {
       if (rawText.includes("strict")) {
         mode = "strict";
@@ -8484,7 +9509,9 @@ var getUrpfMode4 = (node) => {
     } else if (rawText.includes("mode loose")) {
       mode = "loose";
     }
-    n.children.forEach(findMode);
+    if (n?.children) {
+      n.children.forEach(findMode);
+    }
   };
   findMode(node);
   return mode;
@@ -8538,6 +9565,7 @@ var hasGrtLeaking = (node) => {
   return searchNodeRecursively(node, (rawText) => rawText.includes("grt-leaking"));
 };
 var getBgpNeighborIp = (node) => {
+  if (!node?.id) return "";
   const match = node.id.match(/neighbor\s+"?([^"]+)"?|neighbor\s+([\d.:a-fA-F]+)/i);
   if (match) {
     return match[1] ?? match[2] ?? node.id.replace(/^neighbor\s+/i, "").trim();
@@ -8545,6 +9573,7 @@ var getBgpNeighborIp = (node) => {
   return node.id.replace(/^neighbor\s+/i, "").trim();
 };
 var getBgpGroupName = (node) => {
+  if (!node?.id) return "";
   const match = node.id.match(/group\s+"([^"]+)"/i);
   if (match?.[1]) {
     return match[1];
@@ -8610,12 +9639,14 @@ __export(paloalto_exports, {
 
 // ../core/src/helpers/paloalto/helpers.ts
 var findStanza6 = (node, stanzaName) => {
+  if (!node?.children) return void 0;
   return node.children.find(
-    (child) => child.id.toLowerCase() === stanzaName.toLowerCase()
+    (child) => child?.id?.toLowerCase() === stanzaName.toLowerCase()
   );
 };
 var findStanzas5 = (node, pattern) => {
-  return node.children.filter((child) => pattern.test(child.id.toLowerCase()));
+  if (!node?.children) return [];
+  return node.children.filter((child) => child?.id && pattern.test(child.id.toLowerCase()));
 };
 var hasLogging2 = (ruleNode) => {
   const logStart = hasChildCommand(ruleNode, "log-start");
@@ -8651,27 +9682,28 @@ var isDenyRule = (ruleNode) => {
 };
 var getSourceZones = (ruleNode) => {
   const from = findStanza6(ruleNode, "from");
-  if (!from) return [];
-  return from.children.map((child) => child.id.trim());
+  if (!from?.children) return [];
+  return from.children.map((child) => child?.id?.trim() ?? "").filter(Boolean);
 };
 var getDestinationZones = (ruleNode) => {
   const to = findStanza6(ruleNode, "to");
-  if (!to) return [];
-  return to.children.map((child) => child.id.trim());
+  if (!to?.children) return [];
+  return to.children.map((child) => child?.id?.trim() ?? "").filter(Boolean);
 };
 var getApplications = (ruleNode) => {
+  if (!ruleNode?.children) return [];
   const application = findStanza6(ruleNode, "application");
-  if (application && application.children.length > 0) {
-    return application.children.map((child) => child.id.trim());
+  if (application?.children && application.children.length > 0) {
+    return application.children.map((child) => child?.id?.trim() ?? "").filter(Boolean);
   }
   const appCommands = ruleNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("application ")
+    (child) => child?.id?.toLowerCase().startsWith("application ")
   );
   if (appCommands.length > 0) {
     return appCommands.map((cmd) => {
-      const parts = cmd.id.split(/\s+/);
+      const parts = cmd?.id?.split(/\s+/) ?? [];
       return parts.slice(1).join(" ").replace(/;$/, "").trim();
-    });
+    }).filter(Boolean);
   }
   return [];
 };
@@ -8680,57 +9712,60 @@ var hasAnyApplication = (ruleNode) => {
   return apps.some((app) => app.toLowerCase() === "any");
 };
 var hasAnySource = (ruleNode) => {
+  if (!ruleNode?.children) return false;
   const source = findStanza6(ruleNode, "source");
-  if (source && source.children.length > 0) {
+  if (source?.children && source.children.length > 0) {
     return source.children.some((child) => {
-      const id = child.id.toLowerCase().trim().replace(/;$/, "");
+      const id = child?.id?.toLowerCase().trim().replace(/;$/, "");
       return id === "any" || id === "0.0.0.0/0";
     });
   }
   const sourceCommands = ruleNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("source ")
+    (child) => child?.id?.toLowerCase().startsWith("source ")
   );
   if (sourceCommands.length > 0) {
     return sourceCommands.some((cmd) => {
-      const value = cmd.id.split(/\s+/).slice(1).join(" ").toLowerCase().replace(/;$/, "").trim();
+      const value = cmd?.id?.split(/\s+/).slice(1).join(" ").toLowerCase().replace(/;$/, "").trim();
       return value === "any" || value === "0.0.0.0/0";
     });
   }
   return false;
 };
 var hasAnyDestination = (ruleNode) => {
+  if (!ruleNode?.children) return false;
   const destination = findStanza6(ruleNode, "destination");
-  if (destination && destination.children.length > 0) {
+  if (destination?.children && destination.children.length > 0) {
     return destination.children.some((child) => {
-      const id = child.id.toLowerCase().trim().replace(/;$/, "");
+      const id = child?.id?.toLowerCase().trim().replace(/;$/, "");
       return id === "any" || id === "0.0.0.0/0";
     });
   }
   const destCommands = ruleNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("destination ")
+    (child) => child?.id?.toLowerCase().startsWith("destination ")
   );
   if (destCommands.length > 0) {
     return destCommands.some((cmd) => {
-      const value = cmd.id.split(/\s+/).slice(1).join(" ").toLowerCase().replace(/;$/, "").trim();
+      const value = cmd?.id?.split(/\s+/).slice(1).join(" ").toLowerCase().replace(/;$/, "").trim();
       return value === "any" || value === "0.0.0.0/0";
     });
   }
   return false;
 };
 var hasAnyService2 = (ruleNode) => {
+  if (!ruleNode?.children) return false;
   const service = findStanza6(ruleNode, "service");
-  if (service && service.children.length > 0) {
+  if (service?.children && service.children.length > 0) {
     return service.children.some((child) => {
-      const id = child.id.toLowerCase().trim().replace(/;$/, "");
+      const id = child?.id?.toLowerCase().trim().replace(/;$/, "");
       return id === "any";
     });
   }
   const serviceCommands = ruleNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("service ")
+    (child) => child?.id?.toLowerCase().startsWith("service ")
   );
   if (serviceCommands.length > 0) {
     return serviceCommands.some((cmd) => {
-      const value = cmd.id.split(/\s+/).slice(1).join(" ").toLowerCase().replace(/;$/, "").trim();
+      const value = cmd?.id?.split(/\s+/).slice(1).join(" ").toLowerCase().replace(/;$/, "").trim();
       return value === "any";
     });
   }
@@ -8745,19 +9780,19 @@ var getSecurityRules = (rulebaseNode) => {
   const security = findStanza6(rulebaseNode, "security");
   if (!security) return [];
   const rules = findStanza6(security, "rules");
-  if (!rules) return [];
+  if (!rules?.children) return [];
   return rules.children;
 };
 var getNatRules = (rulebaseNode) => {
   const nat = findStanza6(rulebaseNode, "nat");
   if (!nat) return [];
   const rules = findStanza6(nat, "rules");
-  if (!rules) return [];
+  if (!rules?.children) return [];
   return rules.children;
 };
 var isHAConfigured = (deviceconfigNode) => {
   const ha = findStanza6(deviceconfigNode, "high-availability");
-  if (!ha) return false;
+  if (!ha?.children) return false;
   return ha.children.length > 0;
 };
 var isPhysicalEthernetPort = (interfaceName) => {
@@ -8818,27 +9853,27 @@ var parsePanosAddress = (address) => {
 };
 var hasWildfireProfile = (profilesNode) => {
   const wildfire = findStanza6(profilesNode, "wildfire-analysis");
-  return wildfire !== void 0 && wildfire.children.length > 0;
+  return wildfire !== void 0 && (wildfire?.children?.length ?? 0) > 0;
 };
 var hasUrlFilteringProfile = (profilesNode) => {
   const urlFiltering = findStanza6(profilesNode, "url-filtering");
-  return urlFiltering !== void 0 && urlFiltering.children.length > 0;
+  return urlFiltering !== void 0 && (urlFiltering?.children?.length ?? 0) > 0;
 };
 var hasAntiVirusProfile = (profilesNode) => {
   const virus = findStanza6(profilesNode, "virus");
-  return virus !== void 0 && virus.children.length > 0;
+  return virus !== void 0 && (virus?.children?.length ?? 0) > 0;
 };
 var hasAntiSpywareProfile = (profilesNode) => {
   const spyware = findStanza6(profilesNode, "spyware");
-  return spyware !== void 0 && spyware.children.length > 0;
+  return spyware !== void 0 && (spyware?.children?.length ?? 0) > 0;
 };
 var hasVulnerabilityProfile = (profilesNode) => {
   const vuln = findStanza6(profilesNode, "vulnerability");
-  return vuln !== void 0 && vuln.children.length > 0;
+  return vuln !== void 0 && (vuln?.children?.length ?? 0) > 0;
 };
 var hasFileBlockingProfile = (profilesNode) => {
   const fileBlocking = findStanza6(profilesNode, "file-blocking");
-  return fileBlocking !== void 0 && fileBlocking.children.length > 0;
+  return fileBlocking !== void 0 && (fileBlocking?.children?.length ?? 0) > 0;
 };
 var hasPasswordComplexity = (systemNode) => {
   const passwordComplexity = findStanza6(systemNode, "password-complexity");
@@ -9036,7 +10071,7 @@ var hasHAPathMonitoring = (haNode) => {
 };
 var getLogForwardingStatus = (logSettingsNode) => {
   const profiles = findStanza6(logSettingsNode, "profiles");
-  if (!profiles) {
+  if (!profiles?.children) {
     return { hasSyslog: false, hasPanorama: false, hasEmail: false };
   }
   let hasSyslog2 = false;
@@ -9044,12 +10079,12 @@ var getLogForwardingStatus = (logSettingsNode) => {
   let hasEmail = false;
   for (const profile of profiles.children) {
     const matchList = findStanza6(profile, "match-list");
-    if (matchList) {
+    if (matchList?.children) {
       for (const match of matchList.children) {
         if (findStanza6(match, "send-syslog")) hasSyslog2 = true;
         if (hasChildCommand(match, "send-to-panorama")) {
           const cmd = getChildCommand(match, "send-to-panorama");
-          if (cmd?.id.toLowerCase().includes("yes")) hasPanorama = true;
+          if (cmd?.id?.toLowerCase().includes("yes")) hasPanorama = true;
         }
         if (findStanza6(match, "send-email")) hasEmail = true;
       }
@@ -9073,9 +10108,9 @@ var getUpdateScheduleStatus = (systemNode) => {
     }
   }
   return {
-    hasThreats: threats !== void 0 && threats.children.length > 0,
-    hasAntivirus: antivirus !== void 0 && antivirus.children.length > 0,
-    hasWildfire: wildfire !== void 0 && wildfire.children.length > 0,
+    hasThreats: threats !== void 0 && (threats?.children?.length ?? 0) > 0,
+    hasAntivirus: antivirus !== void 0 && (antivirus?.children?.length ?? 0) > 0,
+    hasWildfire: wildfire !== void 0 && (wildfire?.children?.length ?? 0) > 0,
     wildfireRealtime
   };
 };
@@ -9083,7 +10118,7 @@ var getDecryptionRules = (rulebaseNode) => {
   const decryption = findStanza6(rulebaseNode, "decryption");
   if (!decryption) return [];
   const rules = findStanza6(decryption, "rules");
-  if (!rules) return [];
+  if (!rules?.children) return [];
   return rules.children;
 };
 var isDecryptRule = (ruleNode) => {
@@ -9092,12 +10127,16 @@ var isDecryptRule = (ruleNode) => {
   return action.id.toLowerCase().includes("decrypt");
 };
 var getInterfaceManagementServices = (profileNode) => {
+  if (!profileNode?.children) {
+    return { https: false, http: false, ssh: false, telnet: false, ping: false, snmp: false };
+  }
   const isServiceEnabled = (serviceName) => {
     const cmd = profileNode.children.find((child) => {
-      const lowerId = child.id.toLowerCase();
+      const lowerId = child?.id?.toLowerCase();
+      if (!lowerId) return false;
       return lowerId === serviceName || lowerId.startsWith(serviceName + " ");
     });
-    if (!cmd) return false;
+    if (!cmd?.id) return false;
     return cmd.id.toLowerCase().includes("yes");
   };
   return {
@@ -9150,7 +10189,8 @@ __export(vyos_exports, {
 
 // ../core/src/helpers/vyos/helpers.ts
 var isDisabled2 = (node) => {
-  return node.children.some((child) => child.id.toLowerCase().trim() === "disable");
+  if (!node?.children) return false;
+  return node.children.some((child) => child?.id?.toLowerCase().trim() === "disable");
 };
 var isPhysicalVyosPort = (interfaceName) => {
   const name = interfaceName.toLowerCase();
@@ -9198,36 +10238,44 @@ var parseVyosAddress = (address) => {
   };
 };
 var findStanza7 = (node, stanzaName) => {
+  if (!node?.children) return void 0;
   return node.children.find(
-    (child) => child.id.toLowerCase() === stanzaName.toLowerCase()
+    (child) => child?.id?.toLowerCase() === stanzaName.toLowerCase()
   );
 };
 var findStanzaByPrefix = (node, prefix) => {
+  if (!node?.children) return void 0;
   return node.children.find(
-    (child) => child.id.toLowerCase().startsWith(prefix.toLowerCase())
+    (child) => child?.id?.toLowerCase().startsWith(prefix.toLowerCase())
   );
 };
 var findStanzas6 = (node, pattern) => {
-  return node.children.filter((child) => pattern.test(child.id.toLowerCase()));
+  if (!node?.children) return [];
+  return node.children.filter((child) => child?.id && pattern.test(child.id.toLowerCase()));
 };
 var findStanzasByPrefix2 = (node, prefix) => {
+  if (!node?.children) return [];
   return node.children.filter(
-    (child) => child.id.toLowerCase().startsWith(prefix.toLowerCase())
+    (child) => child?.id?.toLowerCase().startsWith(prefix.toLowerCase())
   );
 };
 var getEthernetInterfaces = (interfacesNode) => {
+  if (!interfacesNode?.children) return [];
   return interfacesNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("ethernet eth")
+    (child) => child?.id?.toLowerCase().startsWith("ethernet eth")
   );
 };
 var getVifInterfaces = (interfaceNode) => {
+  if (!interfaceNode?.children) return [];
   return interfaceNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("vif")
+    (child) => child?.id?.toLowerCase().startsWith("vif")
   );
 };
 var getFirewallDefaultAction = (rulesetNode) => {
+  if (!rulesetNode?.children) return void 0;
   for (const child of rulesetNode.children) {
-    const id = child.id.toLowerCase().trim();
+    const id = child?.id?.toLowerCase().trim();
+    if (!id) continue;
     if (id.startsWith("default-action")) {
       if (id.includes("drop")) return "drop";
       if (id.includes("accept")) return "accept";
@@ -9237,13 +10285,16 @@ var getFirewallDefaultAction = (rulesetNode) => {
   return void 0;
 };
 var getFirewallRules2 = (rulesetNode) => {
+  if (!rulesetNode?.children) return [];
   return rulesetNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("rule")
+    (child) => child?.id?.toLowerCase().startsWith("rule")
   );
 };
 var getFirewallRuleAction = (ruleNode) => {
+  if (!ruleNode?.children) return void 0;
   for (const child of ruleNode.children) {
-    const id = child.id.toLowerCase().trim();
+    const id = child?.id?.toLowerCase().trim();
+    if (!id) continue;
     if (id.startsWith("action")) {
       if (id.includes("drop")) return "drop";
       if (id.includes("accept")) return "accept";
@@ -9253,62 +10304,73 @@ var getFirewallRuleAction = (ruleNode) => {
   return void 0;
 };
 var hasNatTranslation = (ruleNode) => {
+  if (!ruleNode?.children) return false;
   return ruleNode.children.some(
-    (child) => child.id.toLowerCase().startsWith("translation")
+    (child) => child?.id?.toLowerCase().startsWith("translation")
   );
 };
 var hasSshService = (serviceNode) => {
+  if (!serviceNode?.children) return false;
   return serviceNode.children.some(
-    (child) => child.id.toLowerCase().startsWith("ssh")
+    (child) => child?.id?.toLowerCase().startsWith("ssh")
   );
 };
 var getSshConfig = (serviceNode) => {
+  if (!serviceNode?.children) return void 0;
   return serviceNode.children.find(
-    (child) => child.id.toLowerCase().startsWith("ssh")
+    (child) => child?.id?.toLowerCase().startsWith("ssh")
   );
 };
 var hasDhcpServer = (serviceNode) => {
+  if (!serviceNode?.children) return false;
   return serviceNode.children.some(
-    (child) => child.id.toLowerCase().startsWith("dhcp-server")
+    (child) => child?.id?.toLowerCase().startsWith("dhcp-server")
   );
 };
 var getDnsConfig = (serviceNode) => {
+  if (!serviceNode?.children) return void 0;
   return serviceNode.children.find(
-    (child) => child.id.toLowerCase().startsWith("dns")
+    (child) => child?.id?.toLowerCase().startsWith("dns")
   );
 };
 var hasNtpConfig = (systemNode) => {
+  if (!systemNode?.children) return false;
   return systemNode.children.some(
-    (child) => child.id.toLowerCase().startsWith("ntp")
+    (child) => child?.id?.toLowerCase().startsWith("ntp")
   );
 };
 var hasSyslogConfig = (systemNode) => {
+  if (!systemNode?.children) return false;
   return systemNode.children.some(
-    (child) => child.id.toLowerCase().startsWith("syslog")
+    (child) => child?.id?.toLowerCase().startsWith("syslog")
   );
 };
 var getLoginConfig = (systemNode) => {
+  if (!systemNode?.children) return void 0;
   return systemNode.children.find(
-    (child) => child.id.toLowerCase().startsWith("login")
+    (child) => child?.id?.toLowerCase().startsWith("login")
   );
 };
 var getUserConfigs = (loginNode) => {
+  if (!loginNode?.children) return [];
   return loginNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("user")
+    (child) => child?.id?.toLowerCase().startsWith("user")
   );
 };
 var getSwitchPortMembers = (interfacesNode) => {
   const members = /* @__PURE__ */ new Set();
+  if (!interfacesNode?.children) return members;
   const switches = interfacesNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("switch ")
+    (child) => child?.id?.toLowerCase().startsWith("switch ")
   );
   for (const switchNode of switches) {
+    if (!switchNode?.children) continue;
     const switchPort = switchNode.children.find(
-      (child) => child.id.toLowerCase() === "switch-port"
+      (child) => child?.id?.toLowerCase() === "switch-port"
     );
-    if (switchPort) {
+    if (switchPort?.children) {
       for (const child of switchPort.children) {
-        const match = child.id.toLowerCase().match(/^interface\s+(eth\d+)$/);
+        const match = child?.id?.toLowerCase().match(/^interface\s+(eth\d+)$/);
         if (match?.[1]) {
           members.add(match[1]);
         }
@@ -9319,16 +10381,18 @@ var getSwitchPortMembers = (interfacesNode) => {
 };
 var getBridgeMembers = (interfacesNode) => {
   const members = /* @__PURE__ */ new Set();
+  if (!interfacesNode?.children) return members;
   const bridges = interfacesNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("bridge ")
+    (child) => child?.id?.toLowerCase().startsWith("bridge ")
   );
   for (const bridgeNode of bridges) {
+    if (!bridgeNode?.children) continue;
     const memberSection = bridgeNode.children.find(
-      (child) => child.id.toLowerCase() === "member"
+      (child) => child?.id?.toLowerCase() === "member"
     );
-    if (memberSection) {
+    if (memberSection?.children) {
       for (const child of memberSection.children) {
-        const match = child.id.toLowerCase().match(/^interface\s+(\S+)$/);
+        const match = child?.id?.toLowerCase().match(/^interface\s+(\S+)$/);
         if (match?.[1]) {
           members.add(match[1]);
         }
@@ -9339,16 +10403,18 @@ var getBridgeMembers = (interfacesNode) => {
 };
 var getBondingMembers = (interfacesNode) => {
   const members = /* @__PURE__ */ new Set();
+  if (!interfacesNode?.children) return members;
   const bonds = interfacesNode.children.filter(
-    (child) => child.id.toLowerCase().startsWith("bonding ")
+    (child) => child?.id?.toLowerCase().startsWith("bonding ")
   );
   for (const bondNode of bonds) {
+    if (!bondNode?.children) continue;
     const memberSection = bondNode.children.find(
-      (child) => child.id.toLowerCase() === "member"
+      (child) => child?.id?.toLowerCase() === "member"
     );
-    if (memberSection) {
+    if (memberSection?.children) {
       for (const child of memberSection.children) {
-        const match = child.id.toLowerCase().match(/^interface\s+(\S+)$/);
+        const match = child?.id?.toLowerCase().match(/^interface\s+(\S+)$/);
         if (match?.[1]) {
           members.add(match[1]);
         }
@@ -9372,14 +10438,19 @@ function getAllVendorModules() {
 function buildAllHelpers() {
   const result = { ...helpers_exports };
   const vendorModules2 = getAllVendorModules();
-  for (const [_name, module] of Object.entries(vendorModules2)) {
-    Object.assign(result, module);
+  for (const [name, module] of Object.entries(vendorModules2)) {
+    result[name] = module;
+    for (const [key, value] of Object.entries(module)) {
+      if (!(key in result)) {
+        result[key] = value;
+      }
+    }
   }
   return result;
 }
 var allHelpers = buildAllHelpers();
 async function loadEncryptedPack(packData, options) {
-  const { licenseKey, machineId, getActivationCount, timeout = 5e3 } = options;
+  const { licenseKey, machineId: machineId2, getActivationCount, timeout = 5e3 } = options;
   if (packData.length < GRPX_CONSTANTS.HEADER_SIZE) {
     throw new PackLoadError("INVALID_FORMAT", "Pack file too small");
   }
@@ -9436,7 +10507,7 @@ async function loadEncryptedPack(packData, options) {
       "Invalid license key or corrupted pack"
     );
   }
-  const sandbox = createValidationSandbox({ machineId, getActivationCount });
+  const sandbox = createValidationSandbox({ machineId: machineId2, getActivationCount });
   const context = createContext(sandbox);
   let vmResult;
   try {
@@ -9483,7 +10554,7 @@ async function loadEncryptedPack(packData, options) {
   };
 }
 var helperNames = Object.keys(allHelpers).filter(
-  (key) => typeof allHelpers[key] === "function"
+  (key) => typeof allHelpers[key] === "function" || typeof allHelpers[key] === "object"
 );
 var helperDestructure = helperNames.join(", ");
 function compileNativeCheckFunction(source) {
@@ -9560,6 +10631,277 @@ function validatePackFormat(packData) {
   return true;
 }
 
+// ../core/src/grx2-loader/types.ts
+import { homedir } from "node:os";
+import { join } from "node:path";
+var EncryptedPackError = class extends Error {
+  constructor(message, code, details) {
+    super(message);
+    this.code = code;
+    this.details = details;
+    this.name = "EncryptedPackError";
+  }
+};
+var GRX2_HEADER_SIZE = 96;
+var GRX2_EXTENDED_VERSION = 3;
+var GRX2_EXTENDED_FLAG = 1;
+var GRX2_PORTABLE_FLAG = 2;
+var GRX2_ALGORITHM_AES_256_GCM = 1;
+var GRX2_KDF_PBKDF2 = 1;
+var DEFAULT_PACKS_DIRECTORY = join(homedir(), ".sentriflow", "packs");
+var CACHE_DIRECTORY = join(homedir(), ".sentriflow", "cache");
+
+// ../core/src/grx2-loader/MachineId.ts
+var import_node_machine_id = __toESM(require_dist(), 1);
+async function getMachineId() {
+  return (0, import_node_machine_id.machineId)();
+}
+
+// ../core/src/grx2-loader/GRX2ExtendedLoader.ts
+import {
+  createDecipheriv as createDecipheriv2,
+  createHash,
+  pbkdf2Sync as pbkdf2Sync2,
+  timingSafeEqual
+} from "node:crypto";
+import { readFile, readdir } from "node:fs/promises";
+var AES_ALGORITHM = "aes-256-gcm";
+var PBKDF2_ITERATIONS = 1e5;
+var AES_KEY_SIZE = 32;
+var PACK_HASH_SIZE = 16;
+var GRX2_MAGIC = Buffer.from("GRX2", "ascii");
+var MIN_WRAPPED_TMK_SIZE = 64;
+var MAX_WRAPPED_TMK_SIZE = 1024;
+function deriveLDK(licenseKey, ldkSalt, machineId2) {
+  const combinedSalt = Buffer.concat([
+    ldkSalt,
+    Buffer.from(machineId2, "utf-8")
+  ]);
+  return pbkdf2Sync2(licenseKey, combinedSalt, PBKDF2_ITERATIONS, AES_KEY_SIZE, "sha256");
+}
+function decrypt(ciphertext, key, iv, authTag) {
+  try {
+    const decipher = createDecipheriv2(AES_ALGORITHM, key, iv);
+    decipher.setAuthTag(authTag);
+    const plaintext = Buffer.concat([
+      decipher.update(ciphertext),
+      decipher.final()
+    ]);
+    return plaintext;
+  } catch (error) {
+    throw new EncryptedPackError(
+      "Decryption failed (invalid key or corrupted data)",
+      "DECRYPTION_FAILED",
+      error
+    );
+  }
+}
+function packHash(data) {
+  return createHash("sha256").update(data).digest().subarray(0, PACK_HASH_SIZE);
+}
+function zeroize(buffer) {
+  buffer.fill(0);
+}
+function isExtendedGRX2(data) {
+  if (data.length < GRX2_HEADER_SIZE) {
+    return false;
+  }
+  const magic = data.subarray(0, 4);
+  const version = data.readUInt8(4);
+  const reservedByte = data.readUInt8(94);
+  return magic.equals(GRX2_MAGIC) && version === GRX2_EXTENDED_VERSION && (reservedByte & GRX2_EXTENDED_FLAG) !== 0;
+}
+function parseExtendedHeader(data) {
+  if (data.length < GRX2_HEADER_SIZE + 4) {
+    throw new EncryptedPackError(
+      "Pack too small for extended GRX2 format",
+      "PACK_CORRUPTED"
+    );
+  }
+  if (!isExtendedGRX2(data)) {
+    throw new EncryptedPackError(
+      "Not an extended GRX2 pack (wrong magic, version, or flag)",
+      "PACK_CORRUPTED"
+    );
+  }
+  const magic = data.subarray(0, 4);
+  const version = data.readUInt8(4);
+  const algorithm = data.readUInt8(5);
+  const kdf = data.readUInt8(6);
+  const keyType = data.readUInt8(7);
+  const tierId = data.readUInt16BE(8);
+  const tmkVersion = data.readUInt32BE(10);
+  const iv = Buffer.from(data.subarray(14, 26));
+  const authTag = Buffer.from(data.subarray(26, 42));
+  const salt = Buffer.from(data.subarray(42, 74));
+  const payloadLength = data.readUInt32BE(74);
+  const packHashBytes = Buffer.from(data.subarray(78, 94));
+  const reserved = Buffer.from(data.subarray(94, 96));
+  if (algorithm !== GRX2_ALGORITHM_AES_256_GCM) {
+    throw new EncryptedPackError(
+      `Unsupported encryption algorithm: ${algorithm}`,
+      "PACK_CORRUPTED"
+    );
+  }
+  if (kdf !== GRX2_KDF_PBKDF2) {
+    throw new EncryptedPackError(
+      `Unsupported KDF: ${kdf}`,
+      "PACK_CORRUPTED"
+    );
+  }
+  const wrappedTMKLength = data.readUInt32BE(GRX2_HEADER_SIZE);
+  if (wrappedTMKLength < MIN_WRAPPED_TMK_SIZE || wrappedTMKLength > MAX_WRAPPED_TMK_SIZE) {
+    throw new EncryptedPackError(
+      `Invalid wrapped TMK length: ${wrappedTMKLength}`,
+      "PACK_CORRUPTED"
+    );
+  }
+  const totalHeaderSize = GRX2_HEADER_SIZE + 4 + wrappedTMKLength;
+  if (data.length < totalHeaderSize) {
+    throw new EncryptedPackError(
+      `Pack too small for wrapped TMK block`,
+      "PACK_CORRUPTED"
+    );
+  }
+  const wrappedTMKBuffer = data.subarray(GRX2_HEADER_SIZE + 4, totalHeaderSize);
+  let serialized;
+  try {
+    serialized = JSON.parse(wrappedTMKBuffer.toString("utf8"));
+  } catch {
+    throw new EncryptedPackError(
+      "Failed to parse wrapped TMK block",
+      "PACK_CORRUPTED"
+    );
+  }
+  if (!serialized.k || !serialized.i || !serialized.t || typeof serialized.v !== "number" || !serialized.s) {
+    throw new EncryptedPackError(
+      "Invalid wrapped TMK structure (missing required fields)",
+      "PACK_CORRUPTED"
+    );
+  }
+  const wrappedTMK = {
+    encryptedKey: Buffer.from(serialized.k, "base64"),
+    iv: Buffer.from(serialized.i, "base64"),
+    authTag: Buffer.from(serialized.t, "base64"),
+    tmkVersion: serialized.v,
+    ldkSalt: Buffer.from(serialized.s, "base64")
+  };
+  const reservedByte = data.readUInt8(94);
+  const isPortable = (reservedByte & GRX2_PORTABLE_FLAG) !== 0;
+  const header = {
+    magic: Buffer.from(magic),
+    version,
+    algorithm,
+    kdf,
+    keyType,
+    tierId,
+    tmkVersion,
+    iv,
+    authTag,
+    salt,
+    payloadLength,
+    packHash: packHashBytes,
+    reserved,
+    isExtended: true,
+    isPortable,
+    wrappedTMK,
+    totalHeaderSize
+  };
+  return { header, payloadOffset: totalHeaderSize };
+}
+async function loadExtendedPack(filePath, licenseKey, machineId2, debug) {
+  debug?.(`[GRX2Loader] Loading pack: ${filePath}`);
+  debug?.(`[GRX2Loader] License key length: ${licenseKey.length}, first 20 chars: ${licenseKey.substring(0, 20)}...`);
+  debug?.(`[GRX2Loader] Machine ID: "${machineId2}" (length: ${machineId2.length})`);
+  const data = await readFile(filePath);
+  debug?.(`[GRX2Loader] Pack file size: ${data.length} bytes`);
+  const { header, payloadOffset } = parseExtendedHeader(data);
+  debug?.(`[GRX2Loader] Header parsed - version: ${header.version}, keyType: ${header.keyType}, tmkVersion: ${header.tmkVersion}, isPortable: ${header.isPortable}`);
+  const effectiveMachineId = header.isPortable ? "" : machineId2;
+  if (header.isPortable) {
+    debug?.(`[GRX2Loader] Portable pack detected - ignoring machineId for decryption`);
+  }
+  const ldk = deriveLDK(licenseKey, header.wrappedTMK.ldkSalt, effectiveMachineId);
+  debug?.(`[GRX2Loader] LDK derived successfully`);
+  let tmk;
+  try {
+    tmk = decrypt(
+      header.wrappedTMK.encryptedKey,
+      ldk,
+      header.wrappedTMK.iv,
+      header.wrappedTMK.authTag
+    );
+    debug?.(`[GRX2Loader] TMK unwrapped successfully`);
+  } catch (error) {
+    debug?.(`[GRX2Loader] TMK unwrap FAILED: ${error.message}`);
+    zeroize(ldk);
+    throw new EncryptedPackError(
+      "Failed to unwrap TMK - invalid license key or machine ID mismatch",
+      "DECRYPTION_FAILED",
+      error
+    );
+  }
+  zeroize(ldk);
+  const encryptedPayload = data.subarray(payloadOffset);
+  if (encryptedPayload.length !== header.payloadLength) {
+    zeroize(tmk);
+    throw new EncryptedPackError(
+      `Payload length mismatch: expected ${header.payloadLength}, got ${encryptedPayload.length}`,
+      "PACK_CORRUPTED"
+    );
+  }
+  let plaintext;
+  try {
+    plaintext = decrypt(encryptedPayload, tmk, header.iv, header.authTag);
+  } catch (error) {
+    zeroize(tmk);
+    throw new EncryptedPackError(
+      "Failed to decrypt pack payload",
+      "DECRYPTION_FAILED",
+      error
+    );
+  }
+  zeroize(tmk);
+  const computedHash = packHash(plaintext);
+  if (!timingSafeEqual(computedHash, header.packHash)) {
+    throw new EncryptedPackError(
+      "Pack integrity check failed (hash mismatch)",
+      "PACK_CORRUPTED"
+    );
+  }
+  let serializedPack;
+  try {
+    serializedPack = JSON.parse(plaintext.toString("utf8"));
+  } catch {
+    throw new EncryptedPackError(
+      "Failed to parse pack JSON content",
+      "PACK_CORRUPTED"
+    );
+  }
+  const compiledRules = serializedPack.rules.map((ruleDef) => {
+    const checkFn = compileNativeCheckFunction(ruleDef.checkSource);
+    return {
+      id: ruleDef.id,
+      selector: ruleDef.selector,
+      vendor: ruleDef.vendor,
+      category: ruleDef.category,
+      metadata: ruleDef.metadata,
+      check: checkFn
+    };
+  });
+  const pack = {
+    name: serializedPack.name,
+    version: serializedPack.version,
+    publisher: serializedPack.publisher,
+    description: serializedPack.description,
+    license: serializedPack.license,
+    homepage: serializedPack.homepage,
+    priority: serializedPack.priority,
+    rules: compiledRules
+  };
+  return pack;
+}
+
 // ../core/src/json-rules/types.ts
 function isJsonArgValue(obj) {
   if (obj === null) return true;
@@ -10734,7 +12076,7 @@ function extractIPSummary(content, options = {}) {
 }
 
 // index.ts
-import { readFile } from "fs/promises";
+import { readFile as readFile2 } from "fs/promises";
 import { statSync as statSync2 } from "fs";
 import { resolve as resolve4, dirname as dirname2, basename } from "path";
 
@@ -10813,7 +12155,7 @@ function generateSarif(results, filePath, rules, options = {}, ipSummary) {
         tool: {
           driver: {
             name: "Sentriflow",
-            version: "0.2.0",
+            version: "0.2.1",
             informationUri: "https://github.com/sentriflow/sentriflow",
             rules: sarifRules,
             // SEC-007: Include CWE taxonomy when rules reference it
@@ -10973,7 +12315,7 @@ function generateMultiFileSarif(fileResults, rules, options = {}) {
         tool: {
           driver: {
             name: "Sentriflow",
-            version: "0.2.0",
+            version: "0.2.1",
             informationUri: "https://github.com/sentriflow/sentriflow",
             rules: sarifRules,
             // SEC-007: Include CWE taxonomy when rules reference it
@@ -14011,6 +15353,14 @@ function validateEncryptedPackPath(packPath, baseDirs) {
     mustExist: true
   });
 }
+function validateGrx2PackPath(packPath, baseDirs) {
+  return validatePath(packPath, {
+    allowedBaseDirs: baseDirs,
+    allowedExtensions: ALLOWED_GRX2_PACK_EXTENSIONS,
+    maxFileSize: MAX_ENCRYPTED_PACK_SIZE,
+    mustExist: true
+  });
+}
 function validateJsonRulesPath(jsonPath, baseDirs) {
   return validatePath(jsonPath, {
     allowedBaseDirs: baseDirs,
@@ -14484,6 +15834,9 @@ async function resolveRules(options = {}) {
     licenseKey,
     strictPacks = false,
     // SEC-012: Default to graceful handling
+    grx2PackPaths,
+    strictGrx2 = false,
+    // Default to graceful handling
     jsonRulesPaths,
     disableIds = [],
     vendorId,
@@ -14493,6 +15846,7 @@ async function resolveRules(options = {}) {
   } = options;
   const packPathsArray = encryptedPackPaths ? Array.isArray(encryptedPackPaths) ? encryptedPackPaths : [encryptedPackPaths] : [];
   const jsonPathsArray = jsonRulesPaths ? Array.isArray(jsonRulesPaths) ? jsonRulesPaths : [jsonRulesPaths] : [];
+  const grx2PathsArray = grx2PackPaths ? Array.isArray(grx2PackPaths) ? grx2PackPaths : [grx2PackPaths] : [];
   let config = { includeDefaults: true };
   if (!noConfig) {
     const foundConfigPath = configPath ?? findConfigFile(cwd);
@@ -14605,6 +15959,89 @@ async function resolveRules(options = {}) {
       }
     }
   }
+  if (grx2PathsArray.length > 0) {
+    if (!licenseKey) {
+      const errorMsg = "License key required for GRX2 packs (use --license-key or set SENTRIFLOW_LICENSE_KEY)";
+      if (strictGrx2) {
+        throw new SentriflowConfigError(errorMsg);
+      }
+      console.error(`Warning: ${errorMsg}`);
+      console.error(
+        `Warning: Skipping ${grx2PathsArray.length} GRX2 pack(s)`
+      );
+    } else {
+      let machineId2;
+      try {
+        machineId2 = await getMachineId();
+      } catch (error) {
+        const errorMsg = "Failed to retrieve machine ID for license validation";
+        if (strictGrx2) {
+          throw new SentriflowConfigError(errorMsg);
+        }
+        console.error(`Warning: ${errorMsg}`);
+        console.error(
+          `Warning: Skipping ${grx2PathsArray.length} GRX2 pack(s)`
+        );
+        machineId2 = "";
+      }
+      if (machineId2) {
+        let loadedCount = 0;
+        let totalRules = 0;
+        const failedPacks = [];
+        for (let i = 0; i < grx2PathsArray.length; i++) {
+          const packPath = grx2PathsArray[i];
+          if (!packPath) continue;
+          try {
+            const validation = validateGrx2PackPath(packPath, allowedBaseDirs);
+            if (!validation.valid) {
+              throw new SentriflowConfigError(validation.error ?? "Invalid pack path");
+            }
+            const grx2Pack = await loadExtendedPack(
+              validation.canonicalPath,
+              licenseKey,
+              machineId2
+            );
+            grx2Pack.priority = 300 + i;
+            allPacks.push(grx2Pack);
+            loadedCount++;
+            totalRules += grx2Pack.rules.length;
+          } catch (error) {
+            let errorMsg;
+            if (error instanceof EncryptedPackError) {
+              const messages = {
+                LICENSE_MISSING: "Invalid or missing license key",
+                LICENSE_EXPIRED: "License has expired",
+                LICENSE_INVALID: "License key is invalid for this pack",
+                DECRYPTION_FAILED: "Failed to decrypt pack (invalid key or corrupted data)",
+                MACHINE_MISMATCH: "License is not valid for this machine",
+                PACK_CORRUPTED: "Pack file is corrupted or invalid",
+                NOT_EXTENDED_FORMAT: "Pack is not in extended GRX2 format"
+              };
+              errorMsg = messages[error.code] ?? `Pack load error: ${error.message}`;
+            } else {
+              errorMsg = error instanceof Error ? error.message : "Unknown error";
+            }
+            if (strictGrx2) {
+              throw new SentriflowConfigError(
+                `Failed to load GRX2 pack '${packPath}': ${errorMsg}`
+              );
+            }
+            console.error(`Warning: Failed to load GRX2 pack: ${errorMsg}`);
+            console.error(`Warning: Skipping GRX2 pack: ${packPath}`);
+            failedPacks.push(packPath);
+          }
+        }
+        if (grx2PathsArray.length > 0) {
+          const successMsg = `GRX2 packs: ${loadedCount} of ${grx2PathsArray.length} loaded (${totalRules} rules)`;
+          if (failedPacks.length > 0) {
+            console.error(`${successMsg}, ${failedPacks.length} failed`);
+          } else {
+            console.error(successMsg);
+          }
+        }
+      }
+    }
+  }
   const legacyDisabledIds = /* @__PURE__ */ new Set([
     ...config.disable ?? [],
     ...disableIds
@@ -14634,8 +16071,8 @@ async function resolveRules(options = {}) {
 }
 
 // src/scanner/DirectoryScanner.ts
-import { readdir, stat } from "fs/promises";
-import { join, resolve as resolve3, extname as extname2 } from "path";
+import { readdir as readdir2, stat } from "fs/promises";
+import { join as join2, resolve as resolve3, extname as extname2 } from "path";
 import { realpathSync as realpathSync2, existsSync as existsSync3 } from "fs";
 var DEFAULT_CONFIG_EXTENSIONS = [
   "txt",
@@ -14746,7 +16183,7 @@ async function scanDirectory(dirPath, options = {}) {
     result.scannedDirs.push(currentDir);
     let entries;
     try {
-      entries = await readdir(currentDir);
+      entries = await readdir2(currentDir);
     } catch (error) {
       result.errors.push({
         path: currentDir,
@@ -14755,8 +16192,8 @@ async function scanDirectory(dirPath, options = {}) {
       return;
     }
     for (const entry of entries) {
-      const fullPath = join(currentDir, entry);
-      const relativePath = join(basePath, entry);
+      const fullPath = join2(currentDir, entry);
+      const relativePath = join2(basePath, entry);
       const normalizedRelativePath = normalizeSeparators2(relativePath);
       if (isExcluded(normalizedRelativePath, exclude)) {
         continue;
@@ -14947,7 +16384,7 @@ function enrichResultsWithRuleMetadata(results, rules) {
   });
 }
 var program = new Command();
-program.name("sentriflow").description("SentriFlow Network Configuration Validator").version("0.2.0").argument("[files...]", "Path(s) to configuration file(s) (supports multiple files)").option("--ast", "Output the AST instead of rule results").option("-f, --format <format>", "Output format (json, sarif)", "json").option("-q, --quiet", "Only output failures (suppress passed results)").option("-c, --config <path>", "Path to config file (default: auto-detect)").option("--no-config", "Ignore config file").option("-r, --rules <path>", "Additional rules file to load (legacy)").option("-p, --rule-pack <path>", "Rule pack file to load").option(
+program.name("sentriflow").description("SentriFlow Network Configuration Validator").version("0.2.1").argument("[files...]", "Path(s) to configuration file(s) (supports multiple files)").option("--ast", "Output the AST instead of rule results").option("-f, --format <format>", "Output format (json, sarif)", "json").option("-q, --quiet", "Only output failures (suppress passed results)").option("-c, --config <path>", "Path to config file (default: auto-detect)").option("--no-config", "Ignore config file").option("-r, --rules <path>", "Additional rules file to load (legacy)").option("-p, --rule-pack <path>", "Rule pack file to load").option(
   "--encrypted-pack <path...>",
   "SEC-012: Path(s) to encrypted rule pack(s) (.grpx), can specify multiple"
 ).option(
@@ -14956,6 +16393,15 @@ program.name("sentriflow").description("SentriFlow Network Configuration Validat
 ).option(
   "--strict-packs",
   "Fail if encrypted pack cannot be loaded (default: warn and continue)"
+).option(
+  "--grx2-pack <path...>",
+  "Path(s) to extended encrypted rule pack(s) (.grx2), can specify multiple"
+).option(
+  "--strict-grx2",
+  "Fail immediately if any GRX2 pack cannot be loaded"
+).option(
+  "--show-machine-id",
+  "Display the current machine ID (for license binding support)"
 ).option(
   "--json-rules <path...>",
   "Path(s) to JSON rules file(s), can specify multiple"
@@ -15004,6 +16450,19 @@ program.name("sentriflow").description("SentriFlow Network Configuration Validat
   (val) => parseInt(val, 10)
 ).option("--progress", "Show progress during directory scanning").action(async (files, options) => {
   try {
+    if (options.showMachineId) {
+      try {
+        const machineId2 = await getMachineId();
+        console.log(`Machine ID: ${machineId2}`);
+        console.log(`
+Use this ID when requesting a machine-bound license.`);
+      } catch (error) {
+        console.error("Error: Failed to retrieve machine ID");
+        console.error(error instanceof Error ? error.message : String(error));
+        process.exit(1);
+      }
+      return;
+    }
     if (options.listVendors) {
       console.log("Supported vendors:\n");
       for (const vendorId2 of getAvailableVendors()) {
@@ -15056,6 +16515,10 @@ Use: sentriflow --vendor <vendor> <file>`);
       // SEC-012: From CLI or SENTRIFLOW_LICENSE_KEY env var
       strictPacks: options.strictPacks,
       // SEC-012: Fail on pack load errors
+      grx2PackPaths: options.grx2Pack,
+      // Extended GRX2 packs
+      strictGrx2: options.strictGrx2,
+      // Fail on GRX2 pack load errors
       jsonRulesPaths: options.jsonRules,
       // JSON rules files
       disableIds: options.disable ?? [],
@@ -15231,7 +16694,7 @@ Found ${scanResult.files.length} configuration file(s) to scan.
             );
           }
           try {
-            const content2 = await readFile(filePath2, "utf-8");
+            const content2 = await readFile2(filePath2, "utf-8");
             let vendor2;
             if (options.vendor === "auto") {
               vendor2 = detectVendor(content2);
@@ -15283,7 +16746,7 @@ Parsing complete: ${allAsts.length} files`);
           );
         }
         try {
-          const content2 = await readFile(filePath2, "utf-8");
+          const content2 = await readFile2(filePath2, "utf-8");
           let vendor2;
           if (options.vendor === "auto") {
             vendor2 = detectVendor(content2);
@@ -15396,6 +16859,8 @@ Scan complete: ${allFileResults.length} files, ${totalFailures} failures, ${tota
         encryptedPackPaths: options.encryptedPack,
         licenseKey,
         strictPacks: options.strictPacks,
+        grx2PackPaths: options.grx2Pack,
+        strictGrx2: options.strictGrx2,
         jsonRulesPaths: options.jsonRules,
         disableIds: options.disable ?? [],
         vendorId: vendor2.id,
@@ -15477,7 +16942,7 @@ Scan complete: ${allFileResults.length} files, ${totalFailures} failures, ${tota
             allFileResults.push({ filePath: file2, results: [] });
             continue;
           }
-          const content2 = await readFile(filePath2, "utf-8");
+          const content2 = await readFile2(filePath2, "utf-8");
           let vendor2;
           if (options.vendor === "auto") {
             vendor2 = detectVendor(content2);
@@ -15563,7 +17028,7 @@ Scan complete: ${allFileResults.length} files, ${totalFailures} failures, ${tota
       );
       process.exit(2);
     }
-    const content = await readFile(filePath, "utf-8");
+    const content = await readFile2(filePath, "utf-8");
     let vendor;
     if (options.vendor === "auto") {
       vendor = detectVendor(content);
@@ -15589,6 +17054,8 @@ Scan complete: ${allFileResults.length} files, ${totalFailures} failures, ${tota
       encryptedPackPaths: options.encryptedPack,
       licenseKey,
       strictPacks: options.strictPacks,
+      grx2PackPaths: options.grx2Pack,
+      strictGrx2: options.strictGrx2,
       jsonRulesPaths: options.jsonRules,
       // JSON rules files
       disableIds: options.disable ?? [],