env:
  contexts:
    - name: nara-paciente
      urls: ["https://www.proyectonara.com"]
      includePaths: ["https://www.proyectonara.com.*"]
      excludePaths:
        - ".*logout.*"
        - ".*salir.*"
        - ".*cerrar-sesion.*"
        - ".*/api/teo.*"
        - ".*/api/auth/login.*"
  parameters:
    failOnError: true
    progressToStdout: true
jobs:
  - type: passiveScan-config
    parameters: { maxAlertsPerRule: 10, scanOnlyInScope: true }
  - type: requestor
    requests:
      - url: "https://www.proyectonara.com/"
        method: GET
      - url: "https://www.proyectonara.com/ingreso"
        method: GET
      - url: "https://www.proyectonara.com/paciente"
        method: GET
        responseCode: 200
      - url: "https://www.proyectonara.com/paciente/animo"
        method: GET
      - url: "https://www.proyectonara.com/paciente/historial"
        method: GET
      - url: "https://www.proyectonara.com/paciente/pendiente"
        method: GET
      - url: "https://www.proyectonara.com/paciente/plan"
        method: GET
      - url: "https://www.proyectonara.com/paciente/resumen"
        method: GET
      - url: "https://www.proyectonara.com/paciente/ruta"
        method: GET
      - url: "https://www.proyectonara.com/paciente/tecnicas"
        method: GET
      - url: "https://www.proyectonara.com/paciente/clinico"
        method: GET
      - url: "https://www.proyectonara.com/paciente/revisita"
        method: GET
      - url: "https://www.proyectonara.com/api/auth/me"
        method: GET
        responseCode: 200
      - url: "https://www.proyectonara.com/api/app-state"
        method: GET
      - url: "https://www.proyectonara.com/api/patients"
        method: GET
      - url: "https://www.proyectonara.com/api/patients/me"
        method: GET
      - url: "https://www.proyectonara.com/api/people"
        method: GET
      - url: "https://www.proyectonara.com/api/territories"
        method: GET
      - url: "https://www.proyectonara.com/api/experts"
        method: GET
      - url: "https://www.proyectonara.com/api/worklists"
        method: GET
      - url: "https://www.proyectonara.com/api/flags"
        method: GET
      - url: "https://www.proyectonara.com/api/assets"
        method: GET
      - url: "https://www.proyectonara.com/api/health"
        method: GET
      - url: "https://www.proyectonara.com/api/health/db"
        method: GET
      - url: "https://www.proyectonara.com/api/accounts"
        method: GET
  - type: spider
    parameters: { context: nara-paciente, maxDuration: 3, maxChildren: 20, processForm: false, postForm: false, threadCount: 2 }
  - type: passiveScan-wait
    parameters: { maxDuration: 5 }
  - type: report
    parameters: { template: traditional-html, reportDir: "D:/WORK/NARA/pruebas/evidencia/2026-10-10-8/5.12-6.9_zap", reportFile: "zap-baseline-paciente.html", reportTitle: "ZAP baseline pasivo autenticado - NARA - rol paciente" }
  - type: report
    parameters: { template: traditional-json, reportDir: "D:/WORK/NARA/pruebas/evidencia/2026-10-10-8/5.12-6.9_zap", reportFile: "zap-baseline-paciente.json" }