#!/bin/sh
BIN="/root/ghaymah-v2-test/gy-linux-amd64"
echo "=== Starting CLI Flag Fuzzing Audit ==="

COMMANDS="deploy config login list logs tunnel info delete"
FLAGS="--file --json --debug --no-auto-update"

TESTS=0
PANICS=0

for cmd in $COMMANDS; do
  for flag in $FLAGS; do
    for p in ";id" "&&ls" "|cat /etc/passwd" '$(whoami)' "NULL_BYTE_\x00" "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"; do
      TESTS=$((TESTS + 1))
      OUT=$($BIN $cmd $flag "$p" 2>&1)
      if echo "$OUT" | grep -qiE "(panic|runtime error|segmentation fault|nil pointer)"; then
        echo "[CRITICAL PANIC DETECTED] gy $cmd $flag '$p'"
        echo "Output snippet: $(echo "$OUT" | head -n 3)"
        PANICS=$((PANICS + 1))
      fi
    done
  done
done

echo "=== Flag Fuzzing Completed ==="
echo "Total tests run: $TESTS"
echo "Total panics observed: $PANICS"