@voidagency/web-scanner 0.0.1

package/dist/runners/nuclei.js

@@ -0,0 +1,531 @@
+/**
+ * Nuclei Runner
+ * Execute nuclei scans and parse JSONL output
+ *
+ * DESIGN: Keep it simple - don't try to reformat Nuclei's output.
+ * Just parse and pass through. Let the template handle display.
+ *
+ * Note: Headless templates require accepting macOS keychain prompt once ("Always Allow")
+ */
+import { execa } from 'execa';
+// Stack-specific tags (always includes generic stuff)
+const STACK_TAGS = {
+    drupal: ['drupal', 'php', 'nginx', 'apache'],
+    wordpress: ['wordpress', 'wp-plugin', 'wp-theme', 'php', 'nginx', 'apache'],
+    nextjs: ['nextjs', 'react', 'javascript', 'nodejs', 'nginx'],
+    laravel: ['laravel', 'php', 'nginx', 'apache'],
+    symfony: ['symfony', 'php', 'nginx', 'apache'],
+    django: ['django', 'python', 'nginx', 'apache'],
+    rails: ['rails', 'ruby', 'nginx', 'apache'],
+    springboot: ['spring', 'java', 'tomcat', 'nginx'],
+    generic: [], // No stack-specific tags
+};
+// Universal tags - always included (common infrastructure + generic checks)
+const UNIVERSAL_TAGS = ['generic', 'misconfig', 'exposure', 'cve', 'panel', 'config', 'tech', 'nginx', 'apache'];
+// Profile determines depth, not templates
+const PROFILE_CONFIG = {
+    quick: { timeout: 60 },
+    standard: { timeout: 300 },
+    deep: { timeout: 600, templates: ['http/fuzzing/'] },
+};
+/**
+ * Map Nuclei severity to normalized severity
+ */
+function mapSeverity(severity) {
+    const s = severity.toLowerCase();
+    if (s === 'critical')
+        return 'critical';
+    if (s === 'high')
+        return 'high';
+    if (s === 'medium')
+        return 'medium';
+    if (s === 'low')
+        return 'low';
+    return 'info';
+}
+/**
+ * Check if this is a tech detection template
+ */
+function isTechTemplate(data) {
+    return data['template-id']?.includes('technologies/') ||
+        data.info.tags?.some(t => ['tech', 'detect'].includes(t)) ||
+        false;
+}
+// User-defined severity overrides (loaded from config)
+let severityOverrides = {};
+/**
+ * Set severity overrides from config
+ */
+export function setSeverityOverrides(overrides) {
+    severityOverrides = {};
+    for (const [pattern, severity] of Object.entries(overrides)) {
+        const s = severity.toLowerCase();
+        if (['critical', 'high', 'medium', 'low', 'info'].includes(s)) {
+            severityOverrides[pattern] = s;
+        }
+    }
+}
+/**
+ * Get effective severity (with user overrides)
+ */
+function getEffectiveSeverity(data) {
+    const templateId = data['template-id'];
+    // Check for user override
+    for (const [pattern, severity] of Object.entries(severityOverrides)) {
+        if (templateId?.includes(pattern)) {
+            return severity;
+        }
+    }
+    // Default to Nuclei's severity
+    return mapSeverity(data.info.severity);
+}
+/**
+ * Parse a single JSONL line into a Finding
+ * SIMPLE: Just map the fields, don't transform
+ */
+function parseNucleiLine(line, index) {
+    try {
+        const data = JSON.parse(line);
+        const severity = getEffectiveSeverity(data); // Use override if applicable
+        const isTech = isTechTemplate(data);
+        // Only show CVE/CWE/CVSS for actual vulnerabilities (not info-level tech detection)
+        const isVuln = severity !== 'info' && !isTech;
+        // Get extracted results (versions, etc.) - filter noise and limit
+        let extracted = data['extracted-results'];
+        if (extracted && extracted.length > 0) {
+            // Filter out noisy patterns (package names from lock files)
+            extracted = extracted.filter(e => !e.startsWith('"name":') &&
+                !e.startsWith('"author":') &&
+                e.length < 100 // Skip very long extractions
+            );
+            // Limit to 5 useful extractions
+            if (extracted.length > 5) {
+                extracted = extracted.slice(0, 5);
+            }
+            // If all filtered out, set to undefined
+            if (extracted.length === 0) {
+                extracted = undefined;
+            }
+        }
+        return {
+            id: String(index + 1).padStart(3, '0'),
+            title: data.info.name,
+            description: data.info.description || '',
+            severity,
+            source: 'nuclei',
+            target: data['matched-at'],
+            // The KEY field - what actually matched
+            matcher: data['matcher-name'],
+            // Extracted values (versions, etc.)
+            extracted,
+            // Classification - only for vulnerabilities
+            cve: isVuln ? data.info.classification?.['cve-id']?.[0] : undefined,
+            cwe: isVuln ? data.info.classification?.['cwe-id']?.[0] : undefined,
+            cvss: isVuln ? data.info.classification?.['cvss-metrics'] : undefined,
+            // Metadata
+            templateId: data['template-id'],
+            tags: data.info.tags,
+            // Evidence - only for medium+ severity
+            response: (severity === 'medium' || severity === 'high' || severity === 'critical')
+                ? data.response?.substring(0, 1000)
+                : undefined,
+            curl: isVuln ? data['curl-command'] : undefined,
+            // References
+            references: data.info.reference,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Check if a finding is a technology detection
+ */
+function isTechDetection(finding) {
+    // Official Nuclei tech templates
+    if (finding.templateId?.includes('technologies/'))
+        return true;
+    // Custom version detection templates (title pattern: "X Version - Detect")
+    if (/Version\s*-\s*Detect/i.test(finding.title))
+        return true;
+    // Tags indicating tech detection
+    if (finding.tags?.some(t => ['tech', 'detect', 'version'].includes(t)))
+        return true;
+    return false;
+}
+/**
+ * Extract technology name and version from finding
+ */
+function extractTechInfo(finding) {
+    // Pattern: "Drupal Version - Detect" or "Next.js Version - Detect"
+    // Use [^\s]+ to capture tech names with dots (Next.js)
+    const match = /^([^\s]+)\s+Version\s*-\s*Detect/i.exec(finding.title);
+    if (match) {
+        const techName = match[1];
+        const version = finding.extracted?.[0] || finding.matcher;
+        return version ? `${techName}/${version}` : techName;
+    }
+    // Fallback: use matcher or title
+    return finding.matcher || finding.title;
+}
+/**
+ * Extract technology detections from findings
+ */
+export function extractTechnologies(findings) {
+    const techByHost = new Map();
+    for (const finding of findings) {
+        // Only tech detection findings
+        if (!isTechDetection(finding))
+            continue;
+        // Extract host from target URL
+        let host;
+        try {
+            host = new URL(finding.target).hostname;
+        }
+        catch {
+            host = finding.target;
+        }
+        if (!techByHost.has(host)) {
+            techByHost.set(host, new Set());
+        }
+        // Extract technology name with version
+        const techName = extractTechInfo(finding);
+        if (techName) {
+            techByHost.get(host).add(techName);
+        }
+    }
+    return Array.from(techByHost.entries()).map(([host, techs]) => ({
+        host,
+        technologies: Array.from(techs),
+    }));
+}
+/**
+ * Get tags for a given stack
+ */
+export function getStackTags(stack) {
+    const stackTags = STACK_TAGS[stack] || [];
+    return [...UNIVERSAL_TAGS, ...stackTags];
+}
+/**
+ * Get available stacks
+ */
+export function getAvailableStacks() {
+    return Object.keys(STACK_TAGS);
+}
+/**
+ * Run Nuclei scan on target URL(s)
+ */
+export async function runNuclei(targets, profile = 'standard', options = {}) {
+    const targetList = Array.isArray(targets) ? targets : [targets];
+    const stack = options.stack || 'generic';
+    const tags = getStackTags(stack);
+    const profileConfig = PROFILE_CONFIG[profile];
+    // Build target args: -u url1 -u url2 ...
+    const targetArgs = targetList.flatMap(t => ['-u', t]);
+    // Build template args for deep profile
+    const extraTemplateArgs = profileConfig.templates?.flatMap(t => ['-t', t]) ?? [];
+    const args = [
+        '-jsonl',
+        '-silent',
+        '-nc', // no color
+        '-duc', // disable update check
+        '-headless', // enable headless browser for templates that need it
+        '-rl', String(options.rateLimit || 50),
+        '-timeout', String(options.timeout || profileConfig.timeout),
+        ...targetArgs,
+        '-tags', tags.join(','),
+        '-t', './templates/', // Custom VoidSec templates
+        ...extraTemplateArgs,
+    ];
+    try {
+        const { stdout } = await execa('nuclei', args, { reject: false, stdin: 'ignore' });
+        const lines = stdout.trim().split('\n').filter(line => line.trim());
+        const allFindings = [];
+        for (const line of lines) {
+            const finding = parseNucleiLine(line, allFindings.length);
+            if (finding) {
+                allFindings.push(finding);
+            }
+        }
+        // Extract technologies
+        const technologies = extractTechnologies(allFindings);
+        // Filter: Keep only non-tech findings OR tech findings with severity > info
+        const findings = allFindings.filter(f => !f.templateId?.includes('technologies/') || f.severity !== 'info');
+        return { findings, technologies };
+    }
+    catch (error) {
+        throw new Error(`Nuclei scan failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+    }
+}
+/**
+ * Check if Nuclei is installed
+ */
+export async function isNucleiInstalled() {
+    try {
+        await execa('nuclei', ['--version']);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Extract Drupal themes from HTML
+ * Looks for: /themes/xxx/ patterns in script/link tags
+ */
+export async function extractDrupalThemes(targetUrl) {
+    try {
+        const response = await fetch(targetUrl);
+        const html = await response.text();
+        // Match /themes/xxx/ but exclude /themes/contrib/
+        const themeMatches = html.matchAll(/\/themes\/([^/]+)\//g);
+        const themes = new Set();
+        for (const match of themeMatches) {
+            const theme = match[1];
+            // Skip contrib/custom - these are directories, not themes
+            if (theme && theme !== 'contrib' && theme !== 'custom') {
+                themes.add(theme);
+            }
+        }
+        return Array.from(themes);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Run Nuclei template with dynamic variables
+ * Used for checks that need runtime-extracted values (like theme names)
+ */
+export async function runNucleiWithVars(target, templatePath, vars, options = {}) {
+    const args = [
+        '-jsonl',
+        '-silent',
+        '-nc',
+        '-duc',
+        '-headless',
+        '-rl', String(options.rateLimit || 150),
+        '-t', templatePath,
+        '-u', target,
+    ];
+    // Add variables
+    for (const [key, value] of Object.entries(vars)) {
+        args.push('-var', `${key}=${value}`);
+    }
+    try {
+        const { stdout } = await execa('nuclei', args, { reject: false, stdin: 'ignore' });
+        const lines = stdout.trim().split('\n').filter(line => line.trim());
+        const findings = [];
+        for (const line of lines) {
+            const finding = parseNucleiLine(line, findings.length);
+            if (finding) {
+                findings.push(finding);
+            }
+        }
+        return findings;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Try to fetch user list from a single API path
+ */
+async function tryFetchUserList(apiUrl) {
+    try {
+        const response = await fetch(apiUrl, {
+            headers: { 'Accept': 'application/vnd.api+json' }
+        });
+        if (!response.ok)
+            return [];
+        const json = await response.json();
+        if (!json.data || !Array.isArray(json.data))
+            return [];
+        // Extract self links from each user
+        return json.data
+            .map((user) => user.links?.self && (typeof user.links.self === 'string' ? user.links.self : user.links.self.href))
+            .filter((url) => !!url);
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Extract user URLs from Drupal JSON:API response
+ * Tries multiple API paths with language prefixes
+ */
+async function extractDrupalApiUserUrls(targetUrl) {
+    const baseUrl = new URL(targetUrl);
+    const apiPaths = [
+        '/api/user/user',
+        '/jsonapi/user/user',
+        '/en/api/user/user',
+        '/fr/api/user/user',
+        '/ar/api/user/user',
+    ];
+    for (const path of apiPaths) {
+        const urls = await tryFetchUserList(`${baseUrl.origin}${path}`);
+        if (urls.length > 0)
+            return urls;
+    }
+    return [];
+}
+/**
+ * Check sensitive attributes to look for in user API responses
+ */
+const SENSITIVE_USER_ATTRIBUTES = [
+    'display_name',
+    'mail',
+    'name',
+    'created',
+    'changed',
+    'access',
+    'login',
+];
+/**
+ * Check if a user API response exposes sensitive attributes
+ */
+async function checkUserApiExposure(userUrl) {
+    try {
+        const response = await fetch(userUrl, {
+            headers: { 'Accept': 'application/vnd.api+json' }
+        });
+        if (!response.ok)
+            return null;
+        const json = await response.json();
+        const attributes = json.data?.attributes || {};
+        // Check which sensitive attributes are exposed
+        const exposedAttrs = [];
+        const extractedValues = [];
+        for (const attr of SENSITIVE_USER_ATTRIBUTES) {
+            if (attr in attributes && attributes[attr]) {
+                exposedAttrs.push(attr);
+                // Capture first few values as evidence
+                if (extractedValues.length < 3) {
+                    const value = String(attributes[attr]).substring(0, 50);
+                    extractedValues.push(`${attr}: ${value}`);
+                }
+            }
+        }
+        if (exposedAttrs.length === 0)
+            return null;
+        return {
+            id: '',
+            title: 'Drupal JSON:API User Details Exposed',
+            description: `User API endpoint exposes sensitive attributes: ${exposedAttrs.join(', ')}. This can leak usernames, email patterns, and account activity.`,
+            severity: exposedAttrs.includes('mail') ? 'high' : 'medium',
+            source: 'nuclei',
+            target: userUrl,
+            templateId: 'drupal-api-user-detail-exposure',
+            tags: ['drupal', 'exposure', 'api', 'jsonapi', 'user', 'pii'],
+            extracted: extractedValues,
+            cwe: 'CWE-200',
+            cvss: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N',
+            references: [
+                'https://www.drupal.org/project/drupal/issues/3240913',
+                'https://www.drupal.org/docs/core-modules-and-themes/core-modules/jsonapi-module/security-considerations',
+            ],
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Scan themes for exposed lock files
+ */
+async function scanThemeLockFiles(target, themes, onProgress) {
+    const findings = [];
+    for (const theme of themes) {
+        onProgress?.(`Checking theme: ${theme}`);
+        const themeFindings = await runNucleiWithVars(target, './templates/drupal-theme-lockfiles.yaml', { theme }, { rateLimit: 150 });
+        findings.push(...themeFindings);
+    }
+    return findings;
+}
+/**
+ * Check user API endpoints for sensitive attribute exposure
+ */
+async function scanUserApiExposure(userUrls, onProgress) {
+    onProgress?.(`Found ${userUrls.length} user URLs, checking for exposed attributes...`);
+    // Check first 5 users (enough to confirm the issue)
+    for (const userUrl of userUrls.slice(0, 5)) {
+        const finding = await checkUserApiExposure(userUrl);
+        if (finding) {
+            // Add one finding with all affected URLs
+            finding.affectedUrls = userUrls.slice(0, 10);
+            if (userUrls.length > 10) {
+                finding.description += ` (${userUrls.length} total users exposed)`;
+            }
+            return [finding];
+        }
+    }
+    onProgress?.('User endpoints not exposing sensitive attributes');
+    return [];
+}
+/**
+ * Run all static Drupal templates (non-dynamic ones)
+ */
+async function runStaticDrupalTemplates(target, onProgress) {
+    onProgress?.('Running static Drupal templates...');
+    const args = [
+        '-jsonl',
+        '-silent',
+        '-nc',
+        '-duc',
+        '-headless',
+        '-rl', '150',
+        '-t', './templates/',
+        '-tags', 'drupal',
+        '-u', target,
+    ];
+    try {
+        const { stdout } = await execa('nuclei', args, { reject: false, stdin: 'ignore' });
+        const lines = stdout.trim().split('\n').filter(line => line.trim());
+        const findings = [];
+        for (const line of lines) {
+            const finding = parseNucleiLine(line, findings.length);
+            if (finding) {
+                findings.push(finding);
+            }
+        }
+        onProgress?.(`Found ${findings.length} issues from static templates`);
+        return findings;
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Run Drupal-specific scans (all templates + dynamic checks)
+ * Includes: static templates, theme lock files, API user exposure
+ */
+export async function runDrupalDynamicScans(target, onProgress) {
+    const findings = [];
+    // 1. Run all static Drupal templates
+    const staticFindings = await runStaticDrupalTemplates(target, onProgress);
+    findings.push(...staticFindings);
+    // 2. Extract themes from HTML and check lock files (dynamic)
+    onProgress?.('Extracting Drupal themes from HTML...');
+    const themes = await extractDrupalThemes(target);
+    if (themes.length > 0) {
+        onProgress?.(`Found themes: ${themes.join(', ')}`);
+        const themeFindings = await scanThemeLockFiles(target, themes, onProgress);
+        findings.push(...themeFindings);
+    }
+    else {
+        onProgress?.('No custom themes found');
+    }
+    // 3. Check JSON:API user exposure (follow links - dynamic)
+    onProgress?.('Checking JSON:API user endpoints...');
+    const userUrls = await extractDrupalApiUserUrls(target);
+    if (userUrls.length > 0) {
+        const userFindings = await scanUserApiExposure(userUrls, onProgress);
+        findings.push(...userFindings);
+    }
+    else {
+        onProgress?.('No accessible JSON:API user endpoints found');
+    }
+    return findings;
+}
+//# sourceMappingURL=nuclei.js.map

package/dist/runners/nuclei.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nuclei.js","sourceRoot":"","sources":["../../src/runners/nuclei.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AAG9B,sDAAsD;AACtD,MAAM,UAAU,GAA6B;IAC3C,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IAC5C,SAAS,EAAE,CAAC,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IAC3E,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC;IAC5D,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IAC9C,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IAC9C,MAAM,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;IAC/C,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC;IAC3C,UAAU,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC;IACjD,OAAO,EAAE,EAAE,EAAE,yBAAyB;CACvC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AAEjH,0CAA0C;AAC1C,MAAM,cAAc,GAAmE;IACrF,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;IACtB,QAAQ,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE;IAC1B,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,eAAe,CAAC,EAAE;CACrD,CAAC;AAEF;;GAEG;AACH,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IACxC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACpC,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,IAAkB;IACxC,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,eAAe,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC;AACV,CAAC;AAED,uDAAuD;AACvD,IAAI,iBAAiB,GAA6B,EAAE,CAAC;AAErD;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiC;IACpE,iBAAiB,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAa,CAAC;QAC7C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,IAAkB;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC;IAEvC,0BAA0B;IAC1B,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACpE,IAAI,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,IAAY,EAAE,KAAa;IAClD,IAAI,CAAC;QACH,MAAM,IAAI,GAAiB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAE,6BAA6B;QAC3E,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAEpC,oFAAoF;QACpF,MAAM,MAAM,GAAG,QAAQ,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC;QAE9C,kEAAkE;QAClE,IAAI,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC1C,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,4DAA4D;YAC5D,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC/B,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC;gBACxB,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;gBAC1B,CAAC,CAAC,MAAM,GAAG,GAAG,CAAE,6BAA6B;aAC9C,CAAC;YACF,gCAAgC;YAChC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,CAAC;YACD,wCAAwC;YACxC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3B,SAAS,GAAG,SAAS,CAAC;YACxB,CAAC;QACH,CAAC;QAED,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;YACtC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACrB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE;YACxC,QAAQ;YACR,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC;YAE1B,wCAAwC;YACxC,OAAO,EAAE,IAAI,CAAC,cAAc,CAAC;YAE7B,oCAAoC;YACpC,SAAS;YAET,4CAA4C;YAC5C,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YACnE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YACnE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YAErE,WAAW;YACX,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;YAC/B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YAEpB,uCAAuC;YACvC,QAAQ,EAAE,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,UAAU,CAAC;gBACjF,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC;gBACnC,CAAC,CAAC,SAAS;YACb,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;YAE/C,aAAa;YACb,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;SAChC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAgB;IACvC,iCAAiC;IACjC,IAAI,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/D,2EAA2E;IAC3E,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE7D,iCAAiC;IACjC,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,OAAgB;IACvC,mEAAmE;IACnE,uDAAuD;IACvD,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC;QAC1D,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvD,CAAC;IAED,iCAAiC;IACjC,OAAO,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAmB;IACrD,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAElD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,+BAA+B;QAC/B,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC;YAAE,SAAS;QAExC,+BAA+B;QAC/B,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QAClC,CAAC;QAED,uCAAuC;QACvC,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,QAAQ,EAAE,CAAC;YACb,UAAU,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI;QACJ,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;KAChC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1C,OAAO,CAAC,GAAG,cAAc,EAAE,GAAG,SAAS,CAAC,CAAC;AAC3C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAA0B,EAC1B,UAAuB,UAAU,EACjC,UAAoE,EAAE;IAEtE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IACzC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,aAAa,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAE9C,yCAAyC;IACzC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtD,uCAAuC;IACvC,MAAM,iBAAiB,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEjF,MAAM,IAAI,GAAa;QACrB,QAAQ;QACR,SAAS;QACT,KAAK,EAAQ,WAAW;QACxB,MAAM,EAAO,uBAAuB;QACpC,WAAW,EAAE,qDAAqD;QAClE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QACtC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC;QAC5D,GAAG,UAAU;QACb,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACvB,IAAI,EAAE,cAAc,EAAG,2BAA2B;QAClD,GAAG,iBAAiB;KACrB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEnF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,WAAW,GAAc,EAAE,CAAC;QAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,CAAC;gBACZ,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,YAAY,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAEtD,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CACtC,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAClE,CAAC;QAEF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IACzD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEnC,kDAAkD;QAClD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QAEjC,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,0DAA0D;YAC1D,IAAI,KAAK,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,YAAoB,EACpB,IAA4B,EAC5B,UAAkC,EAAE;IAEpC,MAAM,IAAI,GAAa;QACrB,QAAQ;QACR,SAAS;QACT,KAAK;QACL,MAAM;QACN,WAAW;QACX,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC;QACvC,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,MAAM;KACb,CAAC;IAEF,gBAAgB;IAChB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEnF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB,CAAC,MAAc;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YACnC,OAAO,EAAE,EAAE,QAAQ,EAAE,0BAA0B,EAAE;SAClD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QAE5B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QAEvD,oCAAoC;QACpC,OAAO,IAAI,CAAC,IAAI;aACb,GAAG,CAAC,CAAC,IAAuD,EAAE,EAAE,CAC/D,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CACnG;aACA,MAAM,CAAC,CAAC,GAAuB,EAAiB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,wBAAwB,CAAC,SAAiB;IACvD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG;QACf,gBAAgB;QAChB,oBAAoB;QACpB,mBAAmB;QACnB,mBAAmB;QACnB,mBAAmB;KACpB,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACnC,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,yBAAyB,GAAG;IAChC,cAAc;IACd,MAAM;IACN,MAAM;IACN,SAAS;IACT,SAAS;IACT,QAAQ;IACR,OAAO;CACR,CAAC;AAEF;;GAEG;AACH,KAAK,UAAU,oBAAoB,CAAC,OAAe;IACjD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;YACpC,OAAO,EAAE,EAAE,QAAQ,EAAE,0BAA0B,EAAE;SAClD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAE9B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,EAAE,CAAC;QAE/C,+CAA+C;QAC/C,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,KAAK,MAAM,IAAI,IAAI,yBAAyB,EAAE,CAAC;YAC7C,IAAI,IAAI,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACxB,uCAAuC;gBACvC,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACxD,eAAe,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;gBAC5C,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE3C,OAAO;YACL,EAAE,EAAE,EAAE;YACN,KAAK,EAAE,sCAAsC;YAC7C,WAAW,EAAE,mDAAmD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,kEAAkE;YACzJ,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YAC3D,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,OAAO;YACf,UAAU,EAAE,iCAAiC;YAC7C,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;YAC7D,SAAS,EAAE,eAAe;YAC1B,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,8CAA8C;YACpD,UAAU,EAAE;gBACV,sDAAsD;gBACtD,yGAAyG;aAC1G;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAC/B,MAAc,EACd,MAAgB,EAChB,UAAkC;IAElC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,UAAU,EAAE,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;QACzC,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAC3C,MAAM,EACN,yCAAyC,EACzC,EAAE,KAAK,EAAE,EACT,EAAE,SAAS,EAAE,GAAG,EAAE,CACnB,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,QAAkB,EAClB,UAAkC;IAElC,UAAU,EAAE,CAAC,SAAS,QAAQ,CAAC,MAAM,gDAAgD,CAAC,CAAC;IAEvF,oDAAoD;IACpD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,OAAO,EAAE,CAAC;YACZ,yCAAyC;YACzC,OAAO,CAAC,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBACzB,OAAO,CAAC,WAAW,IAAI,KAAK,QAAQ,CAAC,MAAM,uBAAuB,CAAC;YACrE,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,UAAU,EAAE,CAAC,kDAAkD,CAAC,CAAC;IACjE,OAAO,EAAE,CAAC;AACZ,CAAC;AACD;;GAEG;AACH,KAAK,UAAU,wBAAwB,CACrC,MAAc,EACd,UAAkC;IAElC,UAAU,EAAE,CAAC,oCAAoC,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAa;QACrB,QAAQ;QACR,SAAS;QACT,KAAK;QACL,MAAM;QACN,WAAW;QACX,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,QAAQ;QACjB,IAAI,EAAE,MAAM;KACb,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEnF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAc,EAAE,CAAC;QAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,UAAU,EAAE,CAAC,SAAS,QAAQ,CAAC,MAAM,+BAA+B,CAAC,CAAC;QACtE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,UAAkC;IAElC,MAAM,QAAQ,GAAc,EAAE,CAAC;IAE/B,qCAAqC;IACrC,MAAM,cAAc,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1E,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,CAAC;IAEjC,6DAA6D;IAC7D,UAAU,EAAE,CAAC,uCAAuC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAEjD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,UAAU,EAAE,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC3E,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,UAAU,EAAE,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;IAED,2DAA2D;IAC3D,UAAU,EAAE,CAAC,qCAAqC,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAExD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,UAAU,EAAE,CAAC,6CAA6C,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/runners/testssl.d.ts

@@ -0,0 +1,16 @@
+/**
+ * testssl.sh Runner
+ * Execute SSL/TLS analysis and parse JSON output
+ */
+import { Finding, ScanProfile } from '../types.js';
+/**
+ * Run testssl.sh scan on target
+ */
+export declare function runTestssl(target: string, profile?: ScanProfile, options?: {
+    startIndex?: number;
+}): Promise<Finding[]>;
+/**
+ * Check if testssl.sh is installed
+ */
+export declare function isTestsslInstalled(): Promise<boolean>;
+//# sourceMappingURL=testssl.d.ts.map

package/dist/runners/testssl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testssl.d.ts","sourceRoot":"","sources":["../../src/runners/testssl.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,EAAE,OAAO,EAAE,WAAW,EAA2B,MAAM,aAAa,CAAC;AA8H5E;;GAEG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,WAAwB,EACjC,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACpC,OAAO,CAAC,OAAO,EAAE,CAAC,CAgDpB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,OAAO,CAAC,CAO3D"}