erosolar-cli 1.7.328 → 1.7.330

package/dist/alpha-zero/security/core.d.ts

@@ -1,125 +0,0 @@
-/**
- * Core Security Research Framework
- *
- * Base authorization system and reconnaissance capabilities.
- * All operations require explicit authorization.
- *
- * Principal Investigator: Bo Shang
- * Framework: erosolar-cli
- */
-/**
- * Scope of authorization for security testing
- */
-export declare enum AuthorizationScope {
-    OWNED_SYSTEMS = "owned_systems",
-    BUG_BOUNTY = "bug_bounty",
-    PENTEST_ENGAGEMENT = "pentest_engagement",
-    CTF_COMPETITION = "ctf_competition",
-    RED_TEAM = "red_team",
-    EDUCATIONAL = "educational"
-}
-/**
- * Authorization record for security testing
- */
-export interface AuthorizationRecord {
-    scope: AuthorizationScope;
-    targetDomain: string;
-    authorizedBy: string;
-    authorizationDate: string;
-    expirationDate?: string;
-    scopeLimitations: string[];
-    outOfScope: string[];
-    notes: string;
-}
-/**
- * Reconnaissance result
- */
-export interface ReconResult {
-    target: string;
-    timestamp: number;
-    dnsRecords: Record<string, string[]>;
-    openPorts: number[];
-    sslInfo: Record<string, unknown>;
-    httpHeaders: Record<string, string>;
-    technologies: string[];
-    subdomains: string[];
-    potentialVectors: string[];
-}
-/**
- * Vulnerability finding
- */
-export interface VulnerabilityFinding {
-    title: string;
-    severity: 'critical' | 'high' | 'medium' | 'low' | 'info';
-    category: string;
-    description: string;
-    evidence: string;
-    remediation: string;
-    cvssScore?: number;
-    cweId?: string;
-    affectedComponent?: string;
-}
-/**
- * Security research engine configuration
- */
-export interface SecurityResearchConfig {
-    dataDir: string;
-    verbose: boolean;
-}
-/**
- * Security Research Engine
- *
- * All operations require explicit authorization records.
- */
-export declare class SecurityResearchEngine {
-    private config;
-    private authorization;
-    findings: VulnerabilityFinding[];
-    reconResults: ReconResult[];
-    constructor(config?: Partial<SecurityResearchConfig>);
-    /**
-     * Set authorization for testing
-     */
-    setAuthorization(authorization: AuthorizationRecord): void;
-    /**
-     * Check if authorization is valid
-     */
-    private checkAuthorization;
-    /**
-     * Perform passive reconnaissance
-     */
-    passiveRecon(target: string): Promise<ReconResult>;
-    /**
-     * Perform active reconnaissance (requires stronger authorization)
-     */
-    activeRecon(target: string, ports?: number[]): Promise<ReconResult>;
-    /**
-     * Scan ports
-     */
-    private scanPorts;
-    /**
-     * Identify potential attack vectors
-     */
-    private identifyVectors;
-    /**
-     * Analyze for vulnerabilities
-     */
-    analyzeForVulnerabilities(recon: ReconResult): VulnerabilityFinding[];
-    /**
-     * Generate report
-     */
-    generateReport(format?: 'text' | 'json'): string;
-}
-/**
- * Create bug bounty authorization
- */
-export declare function createBugBountyAuthorization(targetDomain: string, programName: string, scopeLimitations?: string[], outOfScope?: string[]): AuthorizationRecord;
-/**
- * Create pentest authorization
- */
-export declare function createPentestAuthorization(targetDomain: string, clientName: string, engagementId: string, expirationDate: string): AuthorizationRecord;
-/**
- * Create CTF authorization
- */
-export declare function createCtfAuthorization(targetDomain: string, ctfName: string): AuthorizationRecord;
-//# sourceMappingURL=core.d.ts.map

package/dist/alpha-zero/security/core.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../../../src/alpha-zero/security/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,aAAa,kBAAkB;IAC/B,UAAU,eAAe;IACzB,kBAAkB,uBAAuB;IACzC,eAAe,oBAAoB;IACnC,QAAQ,aAAa;IACrB,WAAW,gBAAgB;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACrC,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAOD;;;;GAIG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,aAAa,CAAoC;IAClD,QAAQ,EAAE,oBAAoB,EAAE,CAAM;IACtC,YAAY,EAAE,WAAW,EAAE,CAAM;gBAE5B,MAAM,GAAE,OAAO,CAAC,sBAAsB,CAAM;IAIxD;;OAEG;IACH,gBAAgB,CAAC,aAAa,EAAE,mBAAmB,GAAG,IAAI;IAO1D;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAuB1B;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAwCxD;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,MAAM,EAA0B,GAAG,OAAO,CAAC,WAAW,CAAC;IA0BhG;;OAEG;YACW,SAAS;IAiCvB;;OAEG;IACH,OAAO,CAAC,eAAe;IAkBvB;;OAEG;IACH,yBAAyB,CAAC,KAAK,EAAE,WAAW,GAAG,oBAAoB,EAAE;IAoBrE;;OAEG;IACH,cAAc,CAAC,MAAM,GAAE,MAAM,GAAG,MAAe,GAAG,MAAM;CA+BzD;AAED;;GAEG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,gBAAgB,GAAE,MAAM,EAAO,EAC/B,UAAU,GAAE,MAAM,EAAO,GACxB,mBAAmB,CAUrB;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,GACrB,mBAAmB,CAWrB;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,mBAAmB,CAUrB"}

package/dist/alpha-zero/security/core.js

@@ -1,271 +0,0 @@
-/**
- * Core Security Research Framework
- *
- * Base authorization system and reconnaissance capabilities.
- * All operations require explicit authorization.
- *
- * Principal Investigator: Bo Shang
- * Framework: erosolar-cli
- */
-import * as dns from 'dns/promises';
-import * as net from 'net';
-/**
- * Scope of authorization for security testing
- */
-export var AuthorizationScope;
-(function (AuthorizationScope) {
-    AuthorizationScope["OWNED_SYSTEMS"] = "owned_systems";
-    AuthorizationScope["BUG_BOUNTY"] = "bug_bounty";
-    AuthorizationScope["PENTEST_ENGAGEMENT"] = "pentest_engagement";
-    AuthorizationScope["CTF_COMPETITION"] = "ctf_competition";
-    AuthorizationScope["RED_TEAM"] = "red_team";
-    AuthorizationScope["EDUCATIONAL"] = "educational";
-})(AuthorizationScope || (AuthorizationScope = {}));
-const DEFAULT_CONFIG = {
-    dataDir: '.security_research',
-    verbose: false,
-};
-/**
- * Security Research Engine
- *
- * All operations require explicit authorization records.
- */
-export class SecurityResearchEngine {
-    config;
-    authorization = null;
-    findings = [];
-    reconResults = [];
-    constructor(config = {}) {
-        this.config = { ...DEFAULT_CONFIG, ...config };
-    }
-    /**
-     * Set authorization for testing
-     */
-    setAuthorization(authorization) {
-        this.authorization = authorization;
-        if (this.config.verbose) {
-            console.log(`[Authorization] Set for ${authorization.targetDomain}`);
-        }
-    }
-    /**
-     * Check if authorization is valid
-     */
-    checkAuthorization(target) {
-        if (!this.authorization) {
-            throw new Error('No authorization record set.');
-        }
-        // Check expiration
-        if (this.authorization.expirationDate) {
-            const exp = new Date(this.authorization.expirationDate);
-            if (new Date() > exp) {
-                throw new Error('Authorization has expired.');
-            }
-        }
-        // Check scope
-        const inScope = this.authorization.targetDomain.includes(target) ||
-            target.endsWith(this.authorization.targetDomain);
-        const outOfScope = this.authorization.outOfScope.some(oos => target.includes(oos));
-        if (!inScope || outOfScope) {
-            throw new Error(`Target ${target} is not within authorized scope.`);
-        }
-    }
-    /**
-     * Perform passive reconnaissance
-     */
-    async passiveRecon(target) {
-        this.checkAuthorization(target);
-        if (this.config.verbose) {
-            console.log(`[Recon] Starting passive recon on ${target}`);
-        }
-        const result = {
-            target,
-            timestamp: Date.now(),
-            dnsRecords: {},
-            openPorts: [],
-            sslInfo: {},
-            httpHeaders: {},
-            technologies: [],
-            subdomains: [],
-            potentialVectors: [],
-        };
-        // DNS lookup
-        try {
-            result.dnsRecords['A'] = await dns.resolve4(target);
-        }
-        catch { /* ignore */ }
-        try {
-            result.dnsRecords['MX'] = (await dns.resolveMx(target)).map(r => r.exchange);
-        }
-        catch { /* ignore */ }
-        try {
-            result.dnsRecords['TXT'] = await dns.resolveTxt(target).then(r => r.flat());
-        }
-        catch { /* ignore */ }
-        // Common subdomain patterns
-        const prefixes = ['www', 'mail', 'api', 'dev', 'staging', 'admin'];
-        result.subdomains = prefixes.map(p => `${p}.${target}`);
-        this.reconResults.push(result);
-        return result;
-    }
-    /**
-     * Perform active reconnaissance (requires stronger authorization)
-     */
-    async activeRecon(target, ports = [80, 443, 8080, 8443]) {
-        this.checkAuthorization(target);
-        // Active recon requires stronger authorization
-        const allowed = [
-            AuthorizationScope.OWNED_SYSTEMS,
-            AuthorizationScope.PENTEST_ENGAGEMENT,
-            AuthorizationScope.RED_TEAM,
-            AuthorizationScope.CTF_COMPETITION,
-        ];
-        if (!allowed.includes(this.authorization.scope)) {
-            throw new Error('Active recon requires stronger authorization.');
-        }
-        const result = await this.passiveRecon(target);
-        // Port scan
-        result.openPorts = await this.scanPorts(target, ports);
-        // Identify vectors
-        result.potentialVectors = this.identifyVectors(result);
-        return result;
-    }
-    /**
-     * Scan ports
-     */
-    async scanPorts(host, ports) {
-        const checkPort = (port) => {
-            return new Promise(resolve => {
-                const socket = new net.Socket();
-                socket.setTimeout(2000);
-                socket.on('connect', () => {
-                    socket.destroy();
-                    resolve(true);
-                });
-                socket.on('error', () => {
-                    socket.destroy();
-                    resolve(false);
-                });
-                socket.on('timeout', () => {
-                    socket.destroy();
-                    resolve(false);
-                });
-                socket.connect(port, host);
-            });
-        };
-        const results = await Promise.all(ports.map(async (port) => {
-            const isOpen = await checkPort(port);
-            return isOpen ? port : null;
-        }));
-        return results.filter((p) => p !== null);
-    }
-    /**
-     * Identify potential attack vectors
-     */
-    identifyVectors(recon) {
-        const vectors = [];
-        // Missing security headers (would need HTTP request to determine)
-        // Placeholder for now
-        vectors.push('Check for missing security headers');
-        // Open ports analysis
-        if (recon.openPorts.includes(21)) {
-            vectors.push('FTP port open - check for anonymous access');
-        }
-        if (recon.openPorts.includes(22)) {
-            vectors.push('SSH port open - check for weak credentials');
-        }
-        return vectors;
-    }
-    /**
-     * Analyze for vulnerabilities
-     */
-    analyzeForVulnerabilities(recon) {
-        this.checkAuthorization(recon.target);
-        const findings = [];
-        // Example: missing HSTS (would need actual HTTP response)
-        findings.push({
-            title: 'Missing HSTS Header (Verify Required)',
-            severity: 'medium',
-            category: 'config',
-            description: 'Verify HSTS header is present.',
-            evidence: 'Requires HTTP response analysis',
-            remediation: 'Add Strict-Transport-Security header',
-            cweId: 'CWE-319',
-        });
-        this.findings.push(...findings);
-        return findings;
-    }
-    /**
-     * Generate report
-     */
-    generateReport(format = 'text') {
-        if (format === 'json') {
-            return JSON.stringify({
-                generated: new Date().toISOString(),
-                authorization: this.authorization,
-                findings: this.findings,
-                reconResults: this.reconResults,
-            }, null, 2);
-        }
-        const lines = [
-            '='.repeat(60),
-            'SECURITY RESEARCH REPORT',
-            '='.repeat(60),
-            `Generated: ${new Date().toISOString()}`,
-        ];
-        if (this.authorization) {
-            lines.push(`Target: ${this.authorization.targetDomain}`);
-            lines.push(`Scope: ${this.authorization.scope}`);
-        }
-        if (this.findings.length > 0) {
-            lines.push('', `Findings: ${this.findings.length}`);
-            for (const f of this.findings) {
-                lines.push(`  [${f.severity.toUpperCase()}] ${f.title}`);
-            }
-        }
-        return lines.join('\n');
-    }
-}
-/**
- * Create bug bounty authorization
- */
-export function createBugBountyAuthorization(targetDomain, programName, scopeLimitations = [], outOfScope = []) {
-    return {
-        scope: AuthorizationScope.BUG_BOUNTY,
-        targetDomain,
-        authorizedBy: `Bug Bounty: ${programName}`,
-        authorizationDate: new Date().toISOString(),
-        scopeLimitations,
-        outOfScope,
-        notes: 'Testing authorized under bug bounty program terms',
-    };
-}
-/**
- * Create pentest authorization
- */
-export function createPentestAuthorization(targetDomain, clientName, engagementId, expirationDate) {
-    return {
-        scope: AuthorizationScope.PENTEST_ENGAGEMENT,
-        targetDomain,
-        authorizedBy: `Client: ${clientName} (${engagementId})`,
-        authorizationDate: new Date().toISOString(),
-        expirationDate,
-        scopeLimitations: [],
-        outOfScope: [],
-        notes: 'Testing authorized under penetration testing agreement',
-    };
-}
-/**
- * Create CTF authorization
- */
-export function createCtfAuthorization(targetDomain, ctfName) {
-    return {
-        scope: AuthorizationScope.CTF_COMPETITION,
-        targetDomain,
-        authorizedBy: `CTF: ${ctfName}`,
-        authorizationDate: new Date().toISOString(),
-        scopeLimitations: [],
-        outOfScope: [],
-        notes: 'CTF competition testing',
-    };
-}
-//# sourceMappingURL=core.js.map

package/dist/alpha-zero/security/core.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../../../src/alpha-zero/security/core.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAE3B;;GAEG;AACH,MAAM,CAAN,IAAY,kBAOX;AAPD,WAAY,kBAAkB;IAC5B,qDAA+B,CAAA;IAC/B,+CAAyB,CAAA;IACzB,+DAAyC,CAAA;IACzC,yDAAmC,CAAA;IACnC,2CAAqB,CAAA;IACrB,iDAA2B,CAAA;AAC7B,CAAC,EAPW,kBAAkB,KAAlB,kBAAkB,QAO7B;AAsDD,MAAM,cAAc,GAA2B;IAC7C,OAAO,EAAE,oBAAoB;IAC7B,OAAO,EAAE,KAAK;CACf,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,sBAAsB;IACzB,MAAM,CAAyB;IAC/B,aAAa,GAA+B,IAAI,CAAC;IAClD,QAAQ,GAA2B,EAAE,CAAC;IACtC,YAAY,GAAkB,EAAE,CAAC;IAExC,YAAY,SAA0C,EAAE;QACtD,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,aAAkC;QACjD,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,2BAA2B,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,MAAc;QACvC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,mBAAmB;QACnB,IAAI,IAAI,CAAC,aAAa,CAAC,cAAc,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC;YACxD,IAAI,IAAI,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,cAAc;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAEnF,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,UAAU,MAAM,kCAAkC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,MAAM,GAAgB;YAC1B,MAAM;YACN,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,UAAU,EAAE,EAAE;YACd,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,EAAE;YACf,YAAY,EAAE,EAAE;YAChB,UAAU,EAAE,EAAE;YACd,gBAAgB,EAAE,EAAE;SACrB,CAAC;QAEF,aAAa;QACb,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC;QAExD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,QAAkB,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;QACvE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAEhC,+CAA+C;QAC/C,MAAM,OAAO,GAAG;YACd,kBAAkB,CAAC,aAAa;YAChC,kBAAkB,CAAC,kBAAkB;YACrC,kBAAkB,CAAC,QAAQ;YAC3B,kBAAkB,CAAC,eAAe;SACnC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAE/C,YAAY;QACZ,MAAM,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEvD,mBAAmB;QACnB,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAEvD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,KAAe;QACnD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAoB,EAAE;YACnD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;gBAC3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBAExB,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBACxB,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACtB,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;oBACxB,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC,CAAC,CAAC;gBAEH,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;YACvD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9B,CAAC,CAAC,CAAC,CAAC;QAEJ,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACK,eAAe,CAAC,KAAkB;QACxC,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,kEAAkE;QAClE,sBAAsB;QACtB,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAEnD,sBAAsB;QACtB,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,yBAAyB,CAAC,KAAkB;QAC1C,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEtC,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAE5C,0DAA0D;QAC1D,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,uCAAuC;YAC9C,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,QAAQ;YAClB,WAAW,EAAE,gCAAgC;YAC7C,QAAQ,EAAE,iCAAiC;YAC3C,WAAW,EAAE,sCAAsC;YACnD,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC;QAChC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,SAA0B,MAAM;QAC7C,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,YAAY,EAAE,IAAI,CAAC,YAAY;aAChC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACd,0BAA0B;YAC1B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACd,cAAc,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE;SACzC,CAAC;QAEF,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACpD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,4BAA4B,CAC1C,YAAoB,EACpB,WAAmB,EACnB,mBAA6B,EAAE,EAC/B,aAAuB,EAAE;IAEzB,OAAO;QACL,KAAK,EAAE,kBAAkB,CAAC,UAAU;QACpC,YAAY;QACZ,YAAY,EAAE,eAAe,WAAW,EAAE;QAC1C,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC3C,gBAAgB;QAChB,UAAU;QACV,KAAK,EAAE,mDAAmD;KAC3D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,YAAoB,EACpB,UAAkB,EAClB,YAAoB,EACpB,cAAsB;IAEtB,OAAO;QACL,KAAK,EAAE,kBAAkB,CAAC,kBAAkB;QAC5C,YAAY;QACZ,YAAY,EAAE,WAAW,UAAU,KAAK,YAAY,GAAG;QACvD,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC3C,cAAc;QACd,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,wDAAwD;KAChE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,OAAe;IAEf,OAAO;QACL,KAAK,EAAE,kBAAkB,CAAC,eAAe;QACzC,YAAY;QACZ,YAAY,EAAE,QAAQ,OAAO,EAAE;QAC/B,iBAAiB,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC3C,gBAAgB,EAAE,EAAE;QACpB,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,yBAAyB;KACjC,CAAC;AACJ,CAAC"}

package/dist/alpha-zero/security/google.d.ts

@@ -1,125 +0,0 @@
-/**
- * Google Infrastructure Persistence Vector Research
- *
- * OPTIONAL MODULE - Only loaded when Google security research is enabled.
- *
- * Provides research tools for identifying persistence mechanisms
- * in Google Cloud Platform and Google Workspace environments.
- *
- * AUTHORIZATION: Designed for authorized red team engagements and
- * penetration testing of Google infrastructure under contract.
- *
- * Principal Investigator: Bo Shang
- * Framework: erosolar-cli
- */
-import { AuthorizationRecord } from './core.js';
-/**
- * Google services for persistence research
- */
-export declare enum GoogleService {
-    GCP_COMPUTE = "gcp_compute_engine",
-    GCP_GKE = "gcp_kubernetes_engine",
-    GCP_CLOUD_FUNCTIONS = "gcp_cloud_functions",
-    GCP_IAM = "gcp_iam",
-    GCP_SERVICE_ACCOUNTS = "gcp_service_accounts",
-    GCP_CLOUD_STORAGE = "gcp_cloud_storage",
-    GCP_SECRETS_MANAGER = "gcp_secrets_manager",
-    WORKSPACE_GMAIL = "workspace_gmail",
-    WORKSPACE_DRIVE = "workspace_drive",
-    WORKSPACE_ADMIN = "workspace_admin",
-    WORKSPACE_APPS_SCRIPT = "workspace_apps_script",
-    GOOGLE_OAUTH = "google_oauth"
-}
-/**
- * Categories of persistence mechanisms
- */
-export declare enum PersistenceCategory {
-    SERVICE_ACCOUNT_ABUSE = "service_account_abuse",
-    IAM_POLICY_MODIFICATION = "iam_policy_modification",
-    OAUTH_APP_CONSENT = "oauth_app_consent",
-    API_KEYS = "api_keys",
-    CLOUD_FUNCTION_TRIGGER = "cloud_function_trigger",
-    APPS_SCRIPT_TRIGGER = "apps_script_trigger",
-    DELEGATION_ABUSE = "delegation_abuse"
-}
-/**
- * Persistence vector definition
- */
-export interface PersistenceVector {
-    name: string;
-    service: GoogleService;
-    category: PersistenceCategory;
-    description: string;
-    techniqueId: string;
-    requiredPermissions: string[];
-    detectionMethods: string[];
-    mitigations: string[];
-    stealthRating: number;
-}
-/**
- * Persistence test result
- */
-export interface PersistenceTestResult {
-    vector: PersistenceVector;
-    targetProject: string;
-    timestamp: number;
-    testable: boolean;
-    permissionsVerified: string[];
-    missingPermissions: string[];
-    detectionRisk: string;
-    notes: string;
-}
-/**
- * GCP Persistence Vectors
- */
-export declare const GCP_PERSISTENCE_VECTORS: Record<string, PersistenceVector>;
-/**
- * Workspace Persistence Vectors
- */
-export declare const WORKSPACE_PERSISTENCE_VECTORS: Record<string, PersistenceVector>;
-/**
- * Google Persistence Researcher
- */
-export declare class GooglePersistenceResearcher {
-    private authorization;
-    private verbose;
-    testResults: PersistenceTestResult[];
-    constructor(authorization: AuthorizationRecord, verbose?: boolean);
-    /**
-     * Check authorization
-     */
-    private checkAuthorization;
-    /**
-     * Get all Google persistence vectors
-     */
-    getAllVectors(): Record<string, PersistenceVector>;
-    /**
-     * Get vectors by service
-     */
-    getVectorsByService(service: GoogleService): PersistenceVector[];
-    /**
-     * Get vectors by category
-     */
-    getVectorsByCategory(category: PersistenceCategory): PersistenceVector[];
-    /**
-     * Get stealthy vectors
-     */
-    getStealthyVectors(minRating?: number): PersistenceVector[];
-    /**
-     * Analyze a persistence vector
-     */
-    analyzeVector(vectorId: string, targetProject: string): PersistenceTestResult;
-    /**
-     * Generate attack playbook
-     */
-    generateAttackPlaybook(targetProject: string, vectors?: PersistenceVector[]): Record<string, unknown>;
-    /**
-     * Generate detection report (blue team)
-     */
-    generateDetectionReport(): string;
-}
-/**
- * Create Google authorization
- */
-export declare function createGoogleAuthorization(engagementType: 'bug_bounty' | 'pentest' | 'red_team' | 'owned', authorizedBy: string, targetProject?: string, scopeNotes?: string): AuthorizationRecord;
-//# sourceMappingURL=google.d.ts.map

package/dist/alpha-zero/security/google.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../../src/alpha-zero/security/google.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,mBAAmB,EAAsB,MAAM,WAAW,CAAC;AAEpE;;GAEG;AACH,oBAAY,aAAa;IAEvB,WAAW,uBAAuB;IAClC,OAAO,0BAA0B;IACjC,mBAAmB,wBAAwB;IAC3C,OAAO,YAAY;IACnB,oBAAoB,yBAAyB;IAC7C,iBAAiB,sBAAsB;IACvC,mBAAmB,wBAAwB;IAG3C,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IACnC,eAAe,oBAAoB;IACnC,qBAAqB,0BAA0B;IAG/C,YAAY,iBAAiB;CAC9B;AAED;;GAEG;AACH,oBAAY,mBAAmB;IAC7B,qBAAqB,0BAA0B;IAC/C,uBAAuB,4BAA4B;IACnD,iBAAiB,sBAAsB;IACvC,QAAQ,aAAa;IACrB,sBAAsB,2BAA2B;IACjD,mBAAmB,wBAAwB;IAC3C,gBAAgB,qBAAqB;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,aAAa,CAAC;IACvB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,iBAAiB,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;IAClB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAkCrE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,6BAA6B,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAkC3E,CAAC;AAEF;;GAEG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,aAAa,CAAsB;IAC3C,OAAO,CAAC,OAAO,CAAU;IAClB,WAAW,EAAE,qBAAqB,EAAE,CAAM;gBAErC,aAAa,EAAE,mBAAmB,EAAE,OAAO,UAAQ;IAK/D;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAiB1B;;OAEG;IACH,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAIlD;;OAEG;IACH,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,iBAAiB,EAAE;IAKhE;;OAEG;IACH,oBAAoB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,iBAAiB,EAAE;IAKxE;;OAEG;IACH,kBAAkB,CAAC,SAAS,SAAI,GAAG,iBAAiB,EAAE;IAKtD;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,qBAAqB;IAmC7E;;OAEG;IACH,sBAAsB,CACpB,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,iBAAiB,EAAE,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IA4B1B;;OAEG;IACH,uBAAuB,IAAI,MAAM;CAsDlC;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,cAAc,EAAE,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,EAC/D,YAAY,EAAE,MAAM,EACpB,aAAa,SAAM,EACnB,UAAU,SAAK,GACd,mBAAmB,CAiBrB"}