@voidagency/web-scanner 0.0.1

package/dist/cli.js

@@ -0,0 +1,457 @@
+#!/usr/bin/env node
+/**
+ * VoidSec Scanner CLI
+ * Security scanning orchestrator
+ *
+ * Architecture:
+ * - ZAP (primary): JS CVEs, Headers, CORS, CSRF, XSS hints
+ * - Nuclei (supplementary): CMS detection, exposed files, takeovers
+ * - testssl.sh: SSL/TLS analysis
+ */
+import { Command } from 'commander';
+import { writeFile } from 'fs/promises';
+import { execa } from 'execa';
+import { runNuclei, isNucleiInstalled, getAvailableStacks, getStackTags, setSeverityOverrides, runDrupalDynamicScans } from './runners/nuclei.js';
+import { loadConfig, generateExampleConfig } from './config.js';
+import { runTestssl, isTestsslInstalled } from './runners/testssl.js';
+import { runZap, checkZapAvailable, pullZapImage } from './runners/zap.js';
+import { aggregateFindings, mergeTechnologies } from './aggregator.js';
+import { generateHtmlReport, generateJsonReport } from './report.js';
+const program = new Command();
+program
+    .name('voidsec')
+    .description('Security scanning CLI - ZAP primary with Nuclei supplementary')
+    .version('0.0.1');
+const availableStacks = getAvailableStacks();
+program
+    .command('scan')
+    .description('Scan a target URL for security vulnerabilities')
+    .argument('<target>', 'Target URL to scan')
+    .option('-p, --profile <profile>', 'Scan profile: quick, standard, deep', 'standard')
+    .option('-s, --stack <stack>', `Tech stack: ${availableStacks.join(', ')}`, 'generic')
+    .option('-o, --output <file>', 'Output file path')
+    .option('--json', 'Output JSON instead of HTML')
+    .option('--rate-limit <n>', 'Rate limit for requests per second', '50')
+    .option('--enrich', 'Full NVD enrichment (slower, queries API for all findings)')
+    .option('--no-cve', 'Disable CVE lookups for detected technologies')
+    .option('--tech <specs...>', 'Specify known technologies for CVE lookup (e.g., drupal:10.5.3 php:8.3)')
+    .option('--no-zap', 'Skip ZAP scan (use Nuclei only)')
+    .option('--no-nuclei', 'Skip Nuclei scan (use ZAP only)')
+    .option('--ssl', 'Enable SSL/TLS analysis (testssl.sh)')
+    .action(async (target, options) => {
+    const profile = options.profile;
+    const stack = options.stack;
+    const runZapScan = options.zap !== false;
+    const runNucleiScan = options.nuclei !== false;
+    const runSslScan = options.ssl === true;
+    if (!['quick', 'standard', 'deep'].includes(profile)) {
+        console.error('❌ Invalid profile. Use: quick, standard, or deep');
+        process.exit(1);
+    }
+    if (!availableStacks.includes(stack)) {
+        console.error(`❌ Invalid stack. Use: ${availableStacks.join(', ')}`);
+        process.exit(1);
+    }
+    const tags = getStackTags(stack);
+    // Load config
+    const config = await loadConfig();
+    // Apply severity overrides from config
+    if (config.severity_overrides) {
+        setSeverityOverrides(config.severity_overrides);
+        console.log('📋 Loaded severity overrides from config');
+    }
+    console.log('🔍 VoidSec Security Scanner v0.2');
+    console.log('━'.repeat(40));
+    console.log(`Target: ${target}`);
+    console.log(`Profile: ${profile}`);
+    console.log(`Stack: ${stack}`);
+    console.log(`Scanners: ${[runZapScan && 'ZAP', runNucleiScan && 'Nuclei', runSslScan && 'testssl'].filter(Boolean).join(', ')}`);
+    console.log(`CVE lookup: ${options.cve === false ? 'disabled' : options.enrich ? 'full (NVD)' : 'auto (nginx, drupal, php, nextjs)'}`);
+    console.log('');
+    // Check tool availability
+    console.log('Checking tools...');
+    const [zapOk, nucleiOk, testsslOk] = await Promise.all([
+        runZapScan ? checkZapAvailable() : Promise.resolve(false),
+        runNucleiScan ? isNucleiInstalled() : Promise.resolve(false),
+        runSslScan ? isTestsslInstalled() : Promise.resolve(false),
+    ]);
+    if (runZapScan) {
+        if (!zapOk) {
+            console.error('❌ Docker not found. ZAP requires Docker.');
+            console.error('   Install OrbStack: https://orbstack.dev/');
+            process.exit(1);
+        }
+        console.log('  ✓ Docker (for ZAP)');
+        // Ensure ZAP image is available
+        await pullZapImage((msg) => console.log(`  ${msg}`));
+    }
+    if (runNucleiScan) {
+        if (!nucleiOk) {
+            console.warn('  ⚠ Nuclei not found (supplementary scans will be skipped)');
+            console.warn('    Install with: brew install nuclei');
+        }
+        else {
+            console.log('  ✓ Nuclei');
+        }
+    }
+    if (runSslScan) {
+        if (!testsslOk) {
+            console.warn('  ⚠ testssl.sh not found (SSL checks will be skipped)');
+        }
+        else {
+            console.log('  ✓ testssl.sh');
+        }
+    }
+    // macOS Keychain permission warning (show before scans start)
+    if (runNucleiScan && nucleiOk) {
+        console.log('');
+        console.log('\x1b[93m⚠️  macOS Keychain Permission:\x1b[0m');
+        console.log('\x1b[93m   When Nuclei runs headless browser checks, macOS may prompt:\x1b[0m');
+        console.log('\x1b[93m   "Chromium wants to use your keychain" → Click "Always Allow"\x1b[0m');
+    }
+    console.log('');
+    const startTime = new Date();
+    const allFindings = [];
+    const allTechnologies = [];
+    // 1. Run ZAP scan (PRIMARY)
+    if (runZapScan && zapOk) {
+        console.log('🔵 Running ZAP baseline scan (primary)...');
+        console.log('   This scans for: JS CVEs, Security Headers, CORS, CSRF, XSS');
+        try {
+            const { findings, technologies } = await runZap(target, {
+                outputDir: process.cwd(),
+                timeout: profile === 'quick' ? 180 : profile === 'standard' ? 300 : 600,
+                onProgress: (msg) => console.log(`   ${msg}`),
+            });
+            allFindings.push(...findings);
+            allTechnologies.push(technologies);
+            console.log(`   ✓ Found ${findings.length} issues`);
+        }
+        catch (error) {
+            console.error(`   ❌ ZAP scan failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+        console.log('');
+    }
+    // 2. Run Nuclei scan (SUPPLEMENTARY)
+    if (runNucleiScan && nucleiOk) {
+        // Update templates before scanning (quick check, won't update if already latest)
+        try {
+            const { stdout } = await execa('nuclei', ['-update-templates'], {
+                stdio: 'pipe',
+                reject: false
+            });
+            // Only show message if there were actual updates (not just "No new updates found")
+            if (stdout && !stdout.includes('No new updates found')) {
+                console.log('Updating Nuclei templates...');
+                console.log(stdout);
+            }
+        }
+        catch {
+            // Ignore errors, continue with scan
+        }
+        console.log('🟡 Running Nuclei scan (supplementary)...');
+        console.log(`   Stack: ${stack} | Tags: ${tags.join(', ')}`);
+        try {
+            const { findings, technologies } = await runNuclei(target, profile, {
+                rateLimit: parseInt(options.rateLimit, 10),
+                stack,
+            });
+            allFindings.push(...findings);
+            allTechnologies.push(technologies);
+            console.log(`   ✓ Found ${findings.length} issues`);
+        }
+        catch (error) {
+            console.error(`   ❌ Nuclei scan failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+        console.log('');
+        // Run Drupal-specific dynamic scans (extracts themes from HTML, etc.)
+        if (stack === 'drupal') {
+            console.log('🟣 Running Drupal dynamic scans...');
+            try {
+                const drupalFindings = await runDrupalDynamicScans(target, (msg) => console.log(`   ${msg}`));
+                allFindings.push(...drupalFindings);
+                console.log(`   ✓ Found ${drupalFindings.length} theme-related issues`);
+            }
+            catch (error) {
+                console.error(`   ❌ Drupal dynamic scan failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            }
+            console.log('');
+        }
+    }
+    // 3. Run testssl.sh scan
+    if (runSslScan && testsslOk && target.startsWith('https://')) {
+        console.log('🟢 Running SSL/TLS analysis...');
+        try {
+            const sslFindings = await runTestssl(target, profile, {
+                startIndex: allFindings.length,
+            });
+            allFindings.push(...sslFindings);
+            console.log(`   ✓ Found ${sslFindings.length} issues`);
+        }
+        catch (error) {
+            console.error(`   ❌ testssl scan failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+        console.log('');
+    }
+    const endTime = new Date();
+    // Parse manual tech specs (e.g., drupal:10.5.3)
+    const manualTech = [];
+    if (options.tech) {
+        for (const spec of options.tech) {
+            const [tech, version] = spec.split(':');
+            if (tech && version) {
+                manualTech.push({ tech: tech.toLowerCase(), version });
+            }
+        }
+    }
+    // Aggregate results
+    console.log('Aggregating results...');
+    const technologies = mergeTechnologies(allTechnologies);
+    const report = await aggregateFindings(target, profile, startTime, endTime, allFindings, technologies, {
+        enableNvd: options.enrich,
+        disableCve: options.cve === false,
+        manualTech,
+        onProgress: (msg) => console.log(`  ${msg}`),
+    });
+    // Generate output
+    const output = options.json
+        ? generateJsonReport(report)
+        : generateHtmlReport(report);
+    // Generate default filename from sanitized target + date
+    const sanitizeForFilename = (url) => {
+        return url
+            .replace(/^https?:\/\//, '') // Remove protocol
+            .replace(/[/:?#\[\]@!$&'()*+,;=]/g, '-') // Replace special chars
+            .replace(/-+/g, '-') // Collapse multiple dashes
+            .replace(/^-|-$/g, '') // Trim leading/trailing dashes
+            .toLowerCase();
+    };
+    const dateStr = startTime.toISOString().split('T')[0]; // YYYY-MM-DD
+    const defaultFilename = `${sanitizeForFilename(target)}-${dateStr}.${options.json ? 'json' : 'html'}`;
+    // Write or print output
+    if (options.output) {
+        await writeFile(options.output, output);
+        console.log(`✓ Report saved to: ${options.output}`);
+    }
+    else if (!options.json) {
+        // Only print to stdout if not saving and not JSON (HTML is too long)
+        await writeFile(defaultFilename, output);
+        console.log(`✓ Report saved to: ${defaultFilename}`);
+    }
+    else {
+        console.log(output);
+    }
+    // Print summary
+    console.log('');
+    console.log('━'.repeat(40));
+    console.log('📊 Summary:');
+    if (report.summary.critical > 0)
+        console.log(`  🔴 Critical: ${report.summary.critical}`);
+    if (report.summary.high > 0)
+        console.log(`  🟠 High: ${report.summary.high}`);
+    if (report.summary.medium > 0)
+        console.log(`  🟡 Medium: ${report.summary.medium}`);
+    if (report.summary.low > 0)
+        console.log(`  🔵 Low: ${report.summary.low}`);
+    if (report.summary.info > 0)
+        console.log(`  ⚪ Info: ${report.summary.info}`);
+    console.log(`  📋 Total: ${report.totalFindings}`);
+    console.log(`  ⏱️  Duration: ${report.duration}`);
+});
+program
+    .command('check')
+    .description('Check if required tools are installed')
+    .action(async () => {
+    console.log('Checking installed tools...');
+    console.log('');
+    const [zapOk, nucleiOk, testsslOk] = await Promise.all([
+        checkZapAvailable(),
+        isNucleiInstalled(),
+        isTestsslInstalled(),
+    ]);
+    console.log(`Docker/ZAP: ${zapOk ? '✓ Installed' : '✗ Not found'}`);
+    console.log(`Nuclei:     ${nucleiOk ? '✓ Installed' : '✗ Not found'}`);
+    console.log(`testssl.sh: ${testsslOk ? '✓ Installed' : '✗ Not found'}`);
+    console.log('');
+    if (!zapOk || !nucleiOk || !testsslOk) {
+        console.log('Install missing tools:');
+        if (!zapOk)
+            console.log('  Docker: https://orbstack.dev/');
+        if (!nucleiOk)
+            console.log('  Nuclei: brew install nuclei');
+        if (!testsslOk)
+            console.log('  testssl: brew install testssl');
+    }
+    else {
+        console.log('All tools ready! ✓');
+    }
+});
+program
+    .command('setup')
+    .description('Setup required tools (check brew, install nuclei, pull ZAP image)')
+    .option('--skip-brew-check', 'Skip Homebrew check')
+    .action(async (options) => {
+    console.log('🔧 VoidSec Setup');
+    console.log('━'.repeat(40));
+    console.log('');
+    // Check Homebrew
+    let brewAvailable = false;
+    if (!options.skipBrewCheck) {
+        console.log('Checking Homebrew...');
+        try {
+            await execa('brew', ['--version'], { reject: true });
+            brewAvailable = true;
+            console.log('  ✓ Homebrew installed');
+        }
+        catch {
+            console.log('  ✗ Homebrew not found');
+            console.log('    Install from: https://brew.sh');
+            console.log('');
+        }
+    }
+    else {
+        brewAvailable = true; // Assume brew is available if skipping check
+    }
+    // Check Docker
+    console.log('Checking Docker...');
+    const dockerOk = await checkZapAvailable();
+    if (dockerOk) {
+        console.log('  ✓ Docker is running');
+    }
+    else {
+        console.log('  ✗ Docker not running or not installed');
+        console.log('    Install OrbStack: https://orbstack.dev/');
+        console.log('');
+    }
+    // Check and install Nuclei
+    console.log('Checking Nuclei...');
+    const nucleiOk = await isNucleiInstalled();
+    if (nucleiOk) {
+        console.log('  ✓ Nuclei installed');
+    }
+    else {
+        if (brewAvailable) {
+            console.log('  ✗ Nuclei not found');
+            console.log('  Installing Nuclei via Homebrew...');
+            try {
+                await execa('brew', ['install', 'nuclei'], {
+                    stdio: 'inherit',
+                    reject: true
+                });
+                console.log('  ✓ Nuclei installed successfully');
+            }
+            catch (error) {
+                console.error(`  ❌ Failed to install Nuclei: ${error instanceof Error ? error.message : 'Unknown error'}`);
+                console.log('    Try manually: brew install nuclei');
+            }
+        }
+        else {
+            console.log('  ✗ Nuclei not found');
+            console.log('    Install manually: brew install nuclei');
+        }
+    }
+    // macOS Keychain permission note
+    if (nucleiOk || brewAvailable) {
+        console.log('');
+        console.log('\x1b[93m📋 macOS Keychain Permission:\x1b[0m');
+        console.log('\x1b[93m   When Nuclei runs headless browser checks (e.g., Next.js detection),\x1b[0m');
+        console.log('\x1b[93m   macOS may prompt: "Chromium wants to use your keychain"\x1b[0m');
+        console.log('\x1b[93m   → Click "Always Allow" (only asked once)\x1b[0m');
+        console.log('');
+    }
+    // Update Nuclei templates
+    const nucleiInstalled = await isNucleiInstalled();
+    if (nucleiInstalled) {
+        console.log('Updating Nuclei templates...');
+        try {
+            await execa('nuclei', ['-update-templates'], {
+                stdio: 'inherit',
+                reject: false
+            });
+            console.log('  ✓ Nuclei templates updated');
+        }
+        catch (error) {
+            console.warn(`  ⚠ Failed to update templates: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+        console.log('');
+    }
+    // Pull ZAP Docker image
+    if (dockerOk) {
+        console.log('Checking ZAP Docker image...');
+        try {
+            await pullZapImage((msg) => console.log(`  ${msg}`));
+            console.log('');
+        }
+        catch (error) {
+            console.error(`  ❌ Failed to pull ZAP image: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            console.log('');
+        }
+    }
+    else {
+        console.log('Skipping ZAP image pull (Docker not available)');
+        console.log('');
+    }
+    // Final status
+    console.log('━'.repeat(40));
+    const finalNucleiOk = await isNucleiInstalled();
+    const finalDockerOk = await checkZapAvailable();
+    if (finalNucleiOk && finalDockerOk) {
+        console.log('✅ Setup complete! All tools ready.');
+    }
+    else {
+        console.log('⚠️  Setup incomplete:');
+        if (!finalNucleiOk)
+            console.log('  - Nuclei still missing');
+        if (!finalDockerOk)
+            console.log('  - Docker still not available');
+    }
+});
+program
+    .command('stacks')
+    .description('List available tech stacks and their tags')
+    .action(() => {
+    console.log('Available tech stacks:');
+    console.log('');
+    for (const stack of availableStacks) {
+        const tags = getStackTags(stack);
+        console.log(`  ${stack}`);
+        console.log(`    Tags: ${tags.join(', ')}`);
+        console.log('');
+    }
+});
+program
+    .command('init')
+    .description('Generate example config file')
+    .action(async () => {
+    const configContent = generateExampleConfig();
+    await writeFile('voidsec.config.yaml', configContent);
+    console.log('✓ Created voidsec.config.yaml');
+    console.log('');
+    console.log('Edit this file to customize severity overrides for your context.');
+});
+program
+    .command('test-drupal')
+    .description('Quick test: Run only Drupal-specific checks (themes, API, file IDOR)')
+    .argument('<target>', 'Target URL to test')
+    .action(async (target) => {
+    console.log(`🧪 Quick Drupal test: ${target}\n`);
+    const findings = await runDrupalDynamicScans(target, (msg) => console.log(`  ${msg}`));
+    console.log('\n' + '━'.repeat(40));
+    if (findings.length === 0) {
+        console.log('✅ No issues found');
+    }
+    else {
+        console.log(`Found ${findings.length} issue(s):\n`);
+        for (const f of findings) {
+            console.log(`🔴 ${f.title} [${f.severity.toUpperCase()}]`);
+            console.log(`   Target: ${f.target}`);
+            if (f.extracted?.length)
+                console.log(`   Extracted: ${f.extracted.slice(0, 3).join(', ')}`);
+            if (f.affectedUrls?.length)
+                console.log(`   Affected: ${f.affectedUrls.length} URLs`);
+            console.log('');
+        }
+    }
+});
+program.parse();
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAClJ,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGrE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,SAAS,CAAC;KACf,WAAW,CAAC,+DAA+D,CAAC;KAC5E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;AAE7C,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,gDAAgD,CAAC;KAC7D,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;KAC1C,MAAM,CAAC,yBAAyB,EAAE,qCAAqC,EAAE,UAAU,CAAC;KACpF,MAAM,CAAC,qBAAqB,EAAE,eAAe,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,CAAC;KACrF,MAAM,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;KACjD,MAAM,CAAC,QAAQ,EAAE,6BAA6B,CAAC;KAC/C,MAAM,CAAC,kBAAkB,EAAE,oCAAoC,EAAE,IAAI,CAAC;KACtE,MAAM,CAAC,UAAU,EAAE,4DAA4D,CAAC;KAChF,MAAM,CAAC,UAAU,EAAE,+CAA+C,CAAC;KACnE,MAAM,CAAC,mBAAmB,EAAE,yEAAyE,CAAC;KACtG,MAAM,CAAC,UAAU,EAAE,iCAAiC,CAAC;KACrD,MAAM,CAAC,aAAa,EAAE,iCAAiC,CAAC;KACxD,MAAM,CAAC,OAAO,EAAE,sCAAsC,CAAC;KACvD,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,OAY9B,EAAE,EAAE;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAsB,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;IAC/C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC;IAExC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,yBAAyB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEjC,cAAc;IACd,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAElC,uCAAuC;IACvC,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,oBAAoB,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;IAC/B,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,IAAI,KAAK,EAAE,aAAa,IAAI,QAAQ,EAAE,UAAU,IAAI,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjI,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,mCAAmC,EAAE,CAAC,CAAC;IACvI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,0BAA0B;IAC1B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAEjC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrD,UAAU,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QACzD,aAAa,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;QAC5D,UAAU,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC;KAC3D,CAAC,CAAC;IAEH,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC1D,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QAEpC,gCAAgC;QAChC,MAAM,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,IAAI,aAAa,IAAI,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;QAC7F,OAAO,CAAC,GAAG,CAAC,gFAAgF,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAc,EAAE,CAAC;IAClC,MAAM,eAAe,GAAsB,EAAE,CAAC;IAE9C,4BAA4B;IAC5B,IAAI,UAAU,IAAI,KAAK,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QAC7E,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE;gBACtD,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE;gBACxB,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;gBACvE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;aAC9C,CAAC,CAAC;YACH,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YAC9B,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,SAAS,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,qCAAqC;IACrC,IAAI,aAAa,IAAI,QAAQ,EAAE,CAAC;QAC9B,iFAAiF;QACjF,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,mBAAmB,CAAC,EAAE;gBAC9D,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,mFAAmF;YACnF,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE;gBAClE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC1C,KAAK;aACN,CAAC,CAAC;YACH,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;YAC9B,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,cAAc,QAAQ,CAAC,MAAM,SAAS,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,sEAAsE;QACtE,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC9F,WAAW,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,cAAc,cAAc,CAAC,MAAM,uBAAuB,CAAC,CAAC;YAC1E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,oCAAoC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAChH,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,IAAI,UAAU,IAAI,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE;gBACpD,UAAU,EAAE,WAAW,CAAC,MAAM;aAC/B,CAAC,CAAC;YACH,WAAW,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,CAAC,MAAM,SAAS,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,IAAI,EAAE,CAAC;IAE3B,gDAAgD;IAChD,MAAM,UAAU,GAA6C,EAAE,CAAC;IAChE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACxC,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC,MAAM,EACN,OAAO,EACP,SAAS,EACT,OAAO,EACP,WAAW,EACX,YAAY,EACZ;QACE,SAAS,EAAE,OAAO,CAAC,MAAM;QACzB,UAAU,EAAE,OAAO,CAAC,GAAG,KAAK,KAAK;QACjC,UAAU;QACV,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC;KAC7C,CACF,CAAC;IAEF,kBAAkB;IAClB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI;QACzB,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC5B,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAE/B,yDAAyD;IACzD,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAU,EAAE;QAClD,OAAO,GAAG;aACP,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAE,kBAAkB;aAC/C,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAE,wBAAwB;aACjE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAE,2BAA2B;aAChD,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAE,+BAA+B;aACtD,WAAW,EAAE,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,aAAa;IACrE,MAAM,eAAe,GAAG,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAEtG,wBAAwB;IACxB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACzB,qEAAqE;QACrE,MAAM,SAAS,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,sBAAsB,eAAe,EAAE,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IAED,gBAAgB;IAChB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,uCAAuC,CAAC;KACpD,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrD,iBAAiB,EAAE;QACnB,iBAAiB,EAAE;QACnB,kBAAkB,EAAE;KACrB,CAAC,CAAC;IAEH,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,eAAe,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC3D,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACpC,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,mEAAmE,CAAC;KAChF,MAAM,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;KAClD,MAAM,CAAC,KAAK,EAAE,OAAoC,EAAE,EAAE;IACrD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAChC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,iBAAiB;IACjB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACrD,aAAa,GAAG,IAAI,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACtC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,aAAa,GAAG,IAAI,CAAC,CAAC,6CAA6C;IACrE,CAAC;IAED,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,2BAA2B;IAC3B,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAC3C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE;oBACzC,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,IAAI;iBACb,CAAC,CAAC;gBACH,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;gBAC3G,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,iCAAiC;IACjC,IAAI,QAAQ,IAAI,aAAa,EAAE,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;QACrG,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,0BAA0B;IAC1B,MAAM,eAAe,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAClD,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,mBAAmB,CAAC,EAAE;gBAC3C,KAAK,EAAE,SAAS;gBAChB,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAC9G,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,iCAAiC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAC3G,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,eAAe;IACf,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,MAAM,aAAa,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAChD,MAAM,aAAa,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEhD,IAAI,aAAa,IAAI,aAAa,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;IACpD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,IAAI,CAAC,aAAa;YAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa;YAAE,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,2CAA2C,CAAC;KACxD,MAAM,CAAC,GAAG,EAAE;IACX,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,8BAA8B,CAAC;KAC3C,MAAM,CAAC,KAAK,IAAI,EAAE;IACjB,MAAM,aAAa,GAAG,qBAAqB,EAAE,CAAC;IAC9C,MAAM,SAAS,CAAC,qBAAqB,EAAE,aAAa,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;AAClF,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,aAAa,CAAC;KACtB,WAAW,CAAC,sEAAsE,CAAC;KACnF,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;KAC1C,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE;IAC/B,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,IAAI,CAAC,CAAC;IAEjD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC;IAEvF,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,SAAS,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5F,IAAI,CAAC,CAAC,YAAY,EAAE,MAAM;gBAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,YAAY,CAAC,MAAM,OAAO,CAAC,CAAC;YACtF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Configuration loader
+ * Reads voidsec.config.yaml or voidsec.config.json
+ */
+export interface VoidSecConfig {
+    severity_overrides?: Record<string, string>;
+    default_stack?: string;
+    default_profile?: string;
+    rate_limit?: number;
+}
+/**
+ * Load config from file
+ */
+export declare function loadConfig(dir?: string): Promise<VoidSecConfig>;
+/**
+ * Generate example config file
+ */
+export declare function generateExampleConfig(): string;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,MAAM,WAAW,aAAa;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAgED;;GAEG;AACH,wBAAsB,UAAU,CAAC,GAAG,GAAE,MAAsB,GAAG,OAAO,CAAC,aAAa,CAAC,CAqBpF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,CA+B9C"}

package/dist/config.js

@@ -0,0 +1,121 @@
+/**
+ * Configuration loader
+ * Reads voidsec.config.yaml or voidsec.config.json
+ */
+import { readFile } from 'fs/promises';
+import { existsSync } from 'fs';
+import { join } from 'path';
+const CONFIG_FILES = [
+    'voidsec.config.yaml',
+    'voidsec.config.yml',
+    'voidsec.config.json',
+    '.voidsec.yaml',
+    '.voidsec.json',
+];
+/**
+ * Simple YAML parser for our config format
+ * Only supports key: value pairs and nested objects
+ */
+function parseSimpleYaml(content) {
+    const result = {};
+    let currentSection = null;
+    let currentObject = {};
+    const lines = content.split('\n');
+    for (const line of lines) {
+        const trimmed = line.trim();
+        // Skip empty lines and comments
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        // Check indentation
+        const indent = line.length - line.trimStart().length;
+        if (indent === 0 && trimmed.includes(':')) {
+            // Top-level key
+            if (currentSection && Object.keys(currentObject).length > 0) {
+                result[currentSection] = currentObject;
+                currentObject = {};
+            }
+            const [key, ...valueParts] = trimmed.split(':');
+            const value = valueParts.join(':').trim();
+            if (value) {
+                // Simple key: value
+                result[key.trim()] = value;
+                currentSection = null;
+            }
+            else {
+                // Section header
+                currentSection = key.trim();
+            }
+        }
+        else if (indent > 0 && currentSection && trimmed.includes(':')) {
+            // Nested key: value
+            const [key, ...valueParts] = trimmed.split(':');
+            const value = valueParts.join(':').trim();
+            currentObject[key.trim()] = value;
+        }
+    }
+    // Save last section
+    if (currentSection && Object.keys(currentObject).length > 0) {
+        result[currentSection] = currentObject;
+    }
+    return result;
+}
+/**
+ * Load config from file
+ */
+export async function loadConfig(dir = process.cwd()) {
+    for (const filename of CONFIG_FILES) {
+        const filepath = join(dir, filename);
+        if (existsSync(filepath)) {
+            try {
+                const content = await readFile(filepath, 'utf-8');
+                if (filename.endsWith('.json')) {
+                    return JSON.parse(content);
+                }
+                else {
+                    return parseSimpleYaml(content);
+                }
+            }
+            catch (error) {
+                console.warn(`Warning: Failed to parse ${filename}: ${error}`);
+            }
+        }
+    }
+    // No config file found, return defaults
+    return {};
+}
+/**
+ * Generate example config file
+ */
+export function generateExampleConfig() {
+    return `# VoidSec Scanner Configuration
+# Place this file as voidsec.config.yaml in your project root
+
+# Default settings
+default_stack: generic
+default_profile: standard
+rate_limit: 50
+
+# Severity overrides
+# Map template patterns to custom severities
+# Available: critical, high, medium, low, info
+severity_overrides:
+  # Dependency files - enables CVE targeting
+  composer-config: high
+  package-json: high
+  
+  # Credential exposure
+  env-file: critical
+  dotenv: critical
+  git-credentials: critical
+  aws-credentials: critical
+  
+  # Source code exposure
+  exposed-git: critical
+  git-config: high
+  
+  # Architecture disclosure
+  phpinfo: high
+  docker-compose: medium
+`;
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,MAAM,YAAY,GAAG;IACnB,qBAAqB;IACrB,oBAAoB;IACpB,qBAAqB;IACrB,eAAe;IACf,eAAe;CAChB,CAAC;AAEF;;;GAGG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,cAAc,GAAkB,IAAI,CAAC;IACzC,IAAI,aAAa,GAA2B,EAAE,CAAC;IAE/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAE5B,gCAAgC;QAChC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,oBAAoB;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;QAErD,IAAI,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,gBAAgB;YAChB,IAAI,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5D,MAAM,CAAC,cAAc,CAAC,GAAG,aAAa,CAAC;gBACvC,aAAa,GAAG,EAAE,CAAC;YACrB,CAAC;YAED,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAE1C,IAAI,KAAK,EAAE,CAAC;gBACV,oBAAoB;gBACpB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;gBAC3B,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,iBAAiB;gBACjB,cAAc,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,GAAG,CAAC,IAAI,cAAc,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACjE,oBAAoB;YACpB,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1C,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;QACpC,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,cAAc,CAAC,GAAG,aAAa,CAAC;IACzC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IAC1D,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAErC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAElD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAkB,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,OAAO,eAAe,CAAC,OAAO,CAAkB,CAAC;gBACnD,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,4BAA4B,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BR,CAAC;AACF,CAAC"}