@adonis-agora/agent 0.34.0 → 0.35.0

package/dist/src/guardrails/agent.js

@@ -0,0 +1,433 @@
+/**
+ * Guardrails on the agent loop's own seams: an {@link InputProcessor} that scans (and redacts) every
+ * prompt — including the tool results riding in it — an {@link OutputProcessor} that scans every
+ * answer and the tool calls it asks for, a tool-handler wrapper, and a tool-definition screen.
+ *
+ * Built only on the processor SPI, so it is a consumer of the loop rather than a part of it: the
+ * same rules and detectors run standalone through `scan` for traffic that never meets the loop.
+ */
+import { scoreToolText, toolText } from './detectors/tool-poisoning.js';
+import { scan } from './engine.js';
+import { jsonSlots } from './segments.js';
+import { Vault } from './vault.js';
+/**
+ * The default {@link VaultStore}: this process's memory, bounded to the most recent threads. A run
+ * resumed in ANOTHER process finds no vault, so its placeholders reach the reader unrestored — the
+ * values still never reach the model. Supply a shared store (with {@link Vault.toJSON}) to restore
+ * across processes; it then holds the raw values.
+ */
+export class InMemoryVaultStore {
+    maxThreads;
+    vaults = new Map();
+    constructor(maxThreads = 1_000) {
+        this.maxThreads = maxThreads;
+    }
+    load(threadId) {
+        const vault = this.vaults.get(threadId);
+        if (vault !== undefined) {
+            // Re-inserted so the map's order is recency.
+            this.vaults.delete(threadId);
+            this.vaults.set(threadId, vault);
+        }
+        return vault;
+    }
+    save(threadId, vault) {
+        this.vaults.delete(threadId);
+        this.vaults.set(threadId, vault);
+        while (this.vaults.size > this.maxThreads) {
+            const oldest = this.vaults.keys().next().value;
+            if (oldest === undefined)
+                break;
+            this.vaults.delete(oldest);
+        }
+    }
+}
+/** A guardrail refused content the loop cannot rewrite around: a prompt, or a tool call. */
+export class GuardrailBlockedError extends Error {
+    stage;
+    userMessage;
+    rule;
+    constructor(stage, 
+    /** The message for the person — the rule's own, or the stage default. */
+    userMessage, rule) {
+        super(userMessage);
+        this.stage = stage;
+        this.userMessage = userMessage;
+        this.rule = rule;
+        this.name = 'GuardrailBlockedError';
+    }
+}
+const ALL_CONTENT = ['llm_request', 'tool_args', 'tool_result', 'llm_response'];
+/**
+ * PII is redacted where it would reach the MODEL (and in what the model writes), not in the
+ * arguments of a tool: those are restored for the tool on purpose — see {@link Guardrails.wrapTool}.
+ */
+const RESTORABLE_STAGES = ['llm_request', 'tool_result'];
+const PII_STAGES = ['llm_request', 'tool_result', 'llm_response'];
+/** The rules the shorthand options stand for. Exported so a caller can inspect or extend them. */
+export function shorthandRules(options) {
+    const rules = [];
+    if (options.pii !== undefined) {
+        const pii = typeof options.pii === 'string' ? { action: options.pii } : options.pii;
+        rules.push({
+            id: 'pii',
+            name: 'PII',
+            stages: pii.stages ?? PII_STAGES,
+            detectors: [{ kind: 'pii', ...(pii.types !== undefined ? { types: pii.types } : {}) }],
+            action: pii.action,
+            options: { restore: pii.restore ?? true },
+        });
+    }
+    if (options.secrets !== undefined) {
+        const secrets = typeof options.secrets === 'string' ? { action: options.secrets } : options.secrets;
+        rules.push({
+            id: 'secrets',
+            name: 'Secrets',
+            stages: secrets.stages ?? ALL_CONTENT,
+            detectors: [
+                { kind: 'secrets', ...(secrets.types !== undefined ? { types: secrets.types } : {}) },
+            ],
+            action: secrets.action,
+            // A secret sent to a model is not handed back: the reader should not see it echoed either.
+            options: { restore: false },
+        });
+    }
+    if (options.injection !== undefined) {
+        const injection = typeof options.injection === 'string' ? { action: options.injection } : options.injection;
+        rules.push({
+            id: 'injection',
+            name: 'Prompt injection',
+            // The prompt (a jailbreak typed by the user) and tool results (indirect injection).
+            stages: injection.stages ?? ['llm_request', 'tool_result'],
+            detectors: [
+                {
+                    kind: 'injection',
+                    ...(injection.threshold !== undefined ? { threshold: injection.threshold } : {}),
+                },
+            ],
+            action: injection.action ?? 'block',
+            // What the user typed and what tools returned. Not the system prompt — the app's own text,
+            // which legitimately carries role tags and imperatives — nor the model's earlier answers.
+            match: { sources: ['user', 'tool'] },
+        });
+    }
+    if (options.toolPoisoning !== undefined && options.toolPoisoning !== false) {
+        const poisoning = options.toolPoisoning === true ? {} : options.toolPoisoning;
+        rules.push({
+            id: 'tool_poisoning',
+            name: 'Tool poisoning',
+            stages: ['tool_description'],
+            detectors: [
+                {
+                    kind: 'tool_poisoning',
+                    ...(poisoning.threshold !== undefined ? { threshold: poisoning.threshold } : {}),
+                },
+            ],
+            action: poisoning.action ?? 'block',
+        });
+    }
+    return rules;
+}
+const isRefusal = (action) => action === 'block' || action === 'approve';
+function sourceOf(role) {
+    return role === 'system' ? 'system' : role === 'assistant' ? 'assistant' : 'user';
+}
+/**
+ * Index of the newest user message: it and everything after it are this turn. One with no text is
+ * skipped — a loop may carry tool results back on an empty `user` message, which is not a new turn.
+ */
+function turnStart(messages) {
+    for (let i = messages.length - 1; i >= 0; i--) {
+        const message = messages[i];
+        if (message?.role === 'user' && message.content)
+            return i;
+    }
+    return 0;
+}
+function cloneJson(value) {
+    return value === undefined ? value : structuredClone(value);
+}
+/** Scans segments, and writes the (redacted) texts back through their slots. */
+function writeBack(slots, result) {
+    if (!result.changed)
+        return;
+    slots.forEach((slot, i) => {
+        const text = result.segments[i];
+        if (text !== undefined && text !== slot.segment.text)
+            slot.set(text);
+    });
+}
+/**
+ * Guardrails for the agent loop. Register the two processors, optionally wrap tool handlers, and
+ * hand {@link screenTool} to whatever imports remote tool definitions:
+ *
+ * ```ts
+ * const guardrails = createGuardrails({ pii: 'redact', secrets: 'block', injection: { threshold: 0.6 }, toolPoisoning: true });
+ * // config/agent.ts
+ * defineConfig({ inputProcessors: [guardrails.input], outputProcessors: [guardrails.output], … });
+ * ```
+ */
+export class Guardrails {
+    options;
+    /** Scans every prompt; redacts in place, withholds tool results, throws on a blocked prompt. */
+    input;
+    /** Scans every answer and the tool calls it asks for; redacts, restores placeholders, or rejects. */
+    output;
+    shorthand;
+    vaults;
+    /** Per thread: hits already reported this turn, so re-scans of the same content stay quiet. */
+    reported = new Map();
+    constructor(options = {}) {
+        this.options = options;
+        this.shorthand = shorthandRules(options);
+        this.vaults = options.vaults ?? new InMemoryVaultStore();
+        const name = options.name ?? 'guardrails';
+        this.input = { name, process: (prompt, ctx) => this.processInput(prompt, ctx) };
+        const incremental = options.incremental === false
+            ? undefined
+            : { lookbackChars: options.incremental?.lookbackChars ?? 256 };
+        this.output = {
+            name,
+            ...(incremental !== undefined ? { incremental } : {}),
+            process: (answer, ctx) => this.processOutput(answer, ctx),
+        };
+    }
+    /** Every rule in force for `ctx`: the shorthands, then {@link GuardrailsOptions.rules}. */
+    async rulesFor(ctx) {
+        const extra = this.options.rules;
+        const resolved = typeof extra === 'function' ? await extra(ctx) : (extra ?? []);
+        return [...this.shorthand, ...resolved];
+    }
+    /**
+     * Scans arbitrary segments at one stage with the configured rules, reporting through `onEvent`.
+     * What the processors use; also the entry point for traffic that never meets the loop.
+     */
+    async scan(ctx, segments, vault = new Vault()) {
+        const rules = await this.rulesFor(ctx);
+        const result = await scan(rules, ctx, segments, vault, {
+            ...(this.options.messages !== undefined ? { messages: this.options.messages } : {}),
+            // A tool result is the app's own data: a value redacted out of it is handed back to the
+            // reader and to the next tool call like one the user typed. `restore: false` opts a rule out.
+            restorableStages: RESTORABLE_STAGES,
+        });
+        await this.report(ctx, result);
+        return result;
+    }
+    /**
+     * Screens one tool definition (name, title, description, and every description in its input
+     * schema) for hidden instructions. `allowed: false` means a `block`/`approve` rule fired — leave
+     * the tool out of the catalog. Shaped to be handed straight to an MCP importer's screen hook.
+     */
+    async screenTool(tool) {
+        const ctx = {
+            stage: 'tool_description',
+            tool: tool.name,
+            ...(tool.server !== undefined ? { server: tool.server } : {}),
+        };
+        const result = await this.scan(ctx, [{ text: toolText(tool) }]);
+        if (isRefusal(result.action)) {
+            const categories = [...new Set(result.hits.map((h) => h.category))].join(', ');
+            return {
+                allowed: false,
+                reason: `${result.decisive?.message ?? 'quarantined by guardrails'} (${categories})`,
+            };
+        }
+        return { allowed: true };
+    }
+    /**
+     * Wraps a tool handler so its arguments are guarded where the loop cannot rewrite them: the
+     * thread's placeholders are restored (the model only ever saw `[EMAIL_1]`, the tool needs the
+     * address), then the `tool_args` rules run — `redact` rewrites what the tool receives, `block`
+     * throws a {@link GuardrailBlockedError}, which the model reads as the tool's failure.
+     */
+    wrapTool(toolName, handler) {
+        return {
+            execute: async (input, ctx) => {
+                const vault = (await this.vaults.load(ctx.threadId)) ?? new Vault();
+                const box = { value: cloneJson(input) };
+                const slots = jsonSlots(box.value, 'assistant', true, (text) => {
+                    box.value = text;
+                });
+                for (const slot of slots)
+                    slot.set(vault.restore(slot.segment.text));
+                const guardCtx = {
+                    stage: 'tool_args',
+                    tool: toolName,
+                    threadId: ctx.threadId,
+                    actor: ctx.actor,
+                };
+                const restoredSlots = jsonSlots(box.value, 'assistant', true, (text) => {
+                    box.value = text;
+                });
+                const result = await this.scan(guardCtx, restoredSlots.map((s) => s.segment), vault);
+                if (isRefusal(result.action)) {
+                    throw new GuardrailBlockedError('tool_args', result.decisive?.message ?? 'blocked', result.decisive);
+                }
+                writeBack(restoredSlots, result);
+                return handler.execute(box.value, ctx);
+            },
+        };
+    }
+    contextOf(stage, ctx, tool) {
+        return {
+            stage,
+            threadId: ctx.threadId,
+            actor: ctx.actor,
+            step: ctx.step,
+            ...(ctx.agentName !== undefined ? { agentName: ctx.agentName } : {}),
+            ...(tool !== undefined ? { tool } : {}),
+        };
+    }
+    async processInput(prompt, pctx) {
+        if (pctx.step === 0) {
+            // A new turn: whatever it contains is new, even if an earlier turn reported the same value.
+            this.reported.delete(pctx.threadId);
+        }
+        const vault = (await this.vaults.load(pctx.threadId)) ?? new Vault();
+        const out = { system: prompt.system, messages: cloneJson(prompt.messages) };
+        const from = turnStart(out.messages);
+        // The prompt proper: system, every message's text, and the arguments of earlier tool calls.
+        const slots = [];
+        if (out.system) {
+            slots.push({
+                segment: { text: out.system, source: 'system', fresh: true },
+                set: (text) => {
+                    out.system = text;
+                },
+            });
+        }
+        out.messages.forEach((message, i) => {
+            const fresh = i >= from;
+            if (message.content) {
+                slots.push({
+                    segment: { text: message.content, source: sourceOf(message.role), fresh },
+                    set: (text) => {
+                        message.content = text;
+                    },
+                });
+            }
+            for (const call of message.toolCalls ?? []) {
+                slots.push(...jsonSlots(call.input, 'assistant', fresh, (text) => {
+                    call.input = text;
+                }));
+            }
+        });
+        const request = await this.scan(this.contextOf('llm_request', pctx), slots.map((s) => s.segment), vault);
+        if (isRefusal(request.action)) {
+            await this.vaults.save(pctx.threadId, vault);
+            throw new GuardrailBlockedError('llm_request', request.decisive?.message ?? 'blocked', request.decisive);
+        }
+        writeBack(slots, request);
+        // Tool results, one at a time so `match.tools` can tell them apart.
+        for (const [i, message] of out.messages.entries()) {
+            for (const result of message.toolResults ?? []) {
+                await this.guardToolResult(result, i >= from, pctx, vault);
+            }
+        }
+        await this.vaults.save(pctx.threadId, vault);
+        return out;
+    }
+    async guardToolResult(result, fresh, pctx, vault) {
+        const slots = jsonSlots(result.output, 'tool', fresh, (text) => {
+            result.output = text;
+        });
+        if (result.error) {
+            slots.push({
+                segment: { text: result.error, source: 'tool', fresh },
+                set: (text) => {
+                    result.error = text;
+                },
+            });
+        }
+        if (slots.length === 0)
+            return;
+        const scanned = await this.scan(this.contextOf('tool_result', pctx, result.name), slots.map((s) => s.segment), vault);
+        if (isRefusal(scanned.action)) {
+            // Withheld rather than failing the turn: the model is told why and can go on without it.
+            result.output = scanned.decisive?.message ?? 'withheld';
+            if (result.error !== undefined)
+                result.error = result.output;
+            return;
+        }
+        writeBack(slots, scanned);
+    }
+    async processOutput(answer, pctx) {
+        // Tool calls first: the loop cannot rewrite them, so all it can do is refuse the step.
+        for (const call of answer.toolCalls) {
+            const slots = jsonSlots(cloneJson(call.input), 'assistant', true);
+            if (slots.length === 0)
+                continue;
+            const args = await this.scan(this.contextOf('tool_args', pctx, call.name), slots.map((s) => s.segment));
+            if (isRefusal(args.action)) {
+                return { action: 'reject', reason: args.decisive?.message ?? 'blocked' };
+            }
+        }
+        if (!answer.text)
+            return { action: 'pass' };
+        // A fresh vault per pass: one-way placeholders are then numbered by first appearance in THIS
+        // text, so a prefix and its extension agree — what an incremental gate needs.
+        const response = await this.scan(this.contextOf('llm_response', pctx), [{ text: answer.text, source: 'assistant' }], new Vault());
+        if (isRefusal(response.action)) {
+            return { action: 'reject', reason: response.decisive?.message ?? 'blocked' };
+        }
+        const vault = await this.vaults.load(pctx.threadId);
+        const redacted = response.segments[0] ?? answer.text;
+        const text = vault !== undefined ? vault.restore(redacted) : redacted;
+        return text === answer.text ? { action: 'pass' } : { action: 'replace', text };
+    }
+    async report(ctx, result) {
+        const onEvent = this.options.onEvent;
+        if (onEvent === undefined || result.hits.length === 0)
+            return;
+        const seen = ctx.threadId !== undefined
+            ? (this.reported.get(ctx.threadId) ??
+                this.reported.set(ctx.threadId, new Set()).get(ctx.threadId))
+            : undefined;
+        const fingerprint = this.options.fingerprint;
+        const hits = [];
+        for (const { values, ...hit } of result.hits) {
+            if (!hit.fresh)
+                continue;
+            // Scans repeat within a turn (every step re-sends the prompt; an incremental gate re-reads
+            // the growing answer), so a hit is reported once per turn per stage, rule, category and value.
+            const key = `${ctx.stage}\u0000${ctx.tool ?? ''}\u0000${hit.ruleId}\u0000${hit.category}\u0000${values.join('\u0001')}`;
+            if (seen?.has(key))
+                continue;
+            seen?.add(key);
+            hits.push({ ...hit, fingerprints: fingerprint !== undefined ? values.map(fingerprint) : [] });
+        }
+        if (hits.length === 0)
+            return;
+        if (this.reported.size > 1_000) {
+            const oldest = this.reported.keys().next().value;
+            if (oldest !== undefined)
+                this.reported.delete(oldest);
+        }
+        try {
+            await onEvent({
+                stage: result.stage,
+                action: result.action,
+                ...(result.decisive !== undefined ? { decisive: result.decisive } : {}),
+                hits,
+                redactions: result.redactions,
+                latencyMs: result.latencyMs,
+                context: ctx,
+            });
+        }
+        catch {
+            // An audit sink must never change a decision.
+        }
+    }
+}
+/** Shorthand for `new Guardrails(options)`. */
+export function createGuardrails(options = {}) {
+    return new Guardrails(options);
+}
+/**
+ * The tool-poisoning screen alone — no rules, no events. `score` is the noisy-OR of the signals
+ * that fired; `findings` is empty below `threshold` (default 0.5).
+ */
+export function screenToolDefinition(tool, threshold = 0.5) {
+    return scoreToolText(toolText(tool), threshold);
+}
+//# sourceMappingURL=agent.js.map

package/dist/src/guardrails/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../../src/guardrails/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,OAAO,EAAE,aAAa,EAA2B,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACjG,OAAO,EAAoD,IAAI,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,SAAS,EAAa,MAAM,eAAe,CAAC;AAYrD,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAuEnC;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IAGA,UAAU;IAFtB,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAEnD,YAA6B,UAAU,GAAG,KAAK;0BAAlB,UAAU;IAAW,CAAC;IAEnD,IAAI,CAAC,QAAgB;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,6CAA6C;YAC7C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,QAAgB,EAAE,KAAY;QACjC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC/C,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM;YAChC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC;IACH,CAAC;CACF;AA2CD,4FAA4F;AAC5F,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAEnC,KAAK;IAEL,WAAW;IACX,IAAI;IAJf,YACW,KAAqB;IAC9B,yEAAyE;IAChE,WAAmB,EACnB,IAAmC;QAE5C,KAAK,CAAC,WAAW,CAAC,CAAC;qBALV,KAAK;2BAEL,WAAW;oBACX,IAAI;QAGb,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,WAAW,GAAW,CAAC,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AACxF;;;GAGG;AACH,MAAM,iBAAiB,GAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AAEjE,MAAM,UAAU,GAAW,CAAC,aAAa,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AAE1E,kGAAkG;AAClG,MAAM,UAAU,cAAc,CAAC,OAA0B;IACvD,MAAM,KAAK,GAAuC,EAAE,CAAC;IACrD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,GAAG,GACP,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,UAAU;YAChC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACtF,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,IAAI,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,OAAO,GACX,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW;YACrC,SAAS,EAAE;gBACT,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;aACtF;YACD,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,2FAA2F;YAC3F,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,SAAS,GACb,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5F,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,WAAW;YACf,IAAI,EAAE,kBAAkB;YACxB,oFAAoF;YACpF,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC;YAC1D,SAAS,EAAE;gBACT;oBACE,IAAI,EAAE,WAAW;oBACjB,GAAG,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjF;aACF;YACD,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,OAAO;YACnC,2FAA2F;YAC3F,0FAA0F;YAC1F,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,KAAK,EAAE,CAAC;QAC3E,MAAM,SAAS,GACb,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC;YACT,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,CAAC,kBAAkB,CAAC;YAC5B,SAAS,EAAE;gBACT;oBACE,IAAI,EAAE,gBAAgB;oBACtB,GAAG,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjF;aACF;YACD,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,OAAO;SACpC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,MAAuB,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,SAAS,CAAC;AAE1F,SAAS,QAAQ,CAAC,IAA0B;IAC1C,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;AACpF,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,QAAiC;IAClD,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,OAAO,EAAE,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,SAAS,CAAI,KAAQ;IAC5B,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,eAAe,CAAC,KAAK,CAAO,CAAC;AACrE,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAC,KAAsB,EAAE,MAAkB;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO;IAC5B,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,UAAU;IAWQ,OAAO;IAVpC,gGAAgG;IACvF,KAAK,CAAiB;IAC/B,qGAAqG;IAC5F,MAAM,CAAkB;IAEhB,SAAS,CAAqC;IAC9C,MAAM,CAAa;IACpC,+FAA+F;IAC9E,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE3D,YAA6B,OAAO,GAAsB,EAAE;uBAA/B,OAAO;QAClC,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QAChF,MAAM,WAAW,GACf,OAAO,CAAC,WAAW,KAAK,KAAK;YAC3B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE,aAAa,IAAI,GAAG,EAAE,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG;YACZ,IAAI;YACJ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC;SAC1D,CAAC;IACJ,CAAC;IAED,2FAA2F;IAC3F,KAAK,CAAC,QAAQ,CAAC,GAAsB;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CACR,GAAsB,EACtB,QAA4B,EAC5B,KAAK,GAAU,IAAI,KAAK,EAAE;QAE1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE;YACrD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,wFAAwF;YACxF,8FAA8F;YAC9F,gBAAgB,EAAE,iBAAiB;SACpC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU,CACd,IAA8C;QAE9C,MAAM,GAAG,GAAsB;YAC7B,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,2BAA2B,KAAK,UAAU,GAAG;aACrF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAO,QAAgB,EAAE,OAA0B;QACzD,OAAO;YACL,OAAO,EAAE,KAAK,EAAE,KAAQ,EAAE,GAAc,EAAE,EAAE;gBAC1C,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;gBACpE,MAAM,GAAG,GAAG,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAY,EAAE,CAAC;gBACnD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC7D,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;gBACnB,CAAC,CAAC,CAAC;gBACH,KAAK,MAAM,IAAI,IAAI,KAAK;oBAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrE,MAAM,QAAQ,GAAsB;oBAClC,KAAK,EAAE,WAAW;oBAClB,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,KAAK,EAAE,GAAG,CAAC,KAAK;iBACjB,CAAC;gBACF,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;oBACrE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC;gBACnB,CAAC,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAC5B,QAAQ,EACR,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EACnC,KAAK,CACN,CAAC;gBACF,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,qBAAqB,CAC7B,WAAW,EACX,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,SAAS,EACrC,MAAM,CAAC,QAAQ,CAChB,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;gBACjC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,KAAU,EAAE,GAAG,CAAC,CAAC;YAC9C,CAAC;SACF,CAAC;IACJ,CAAC;IAEO,SAAS,CACf,KAAqB,EACrB,GAAqB,EACrB,IAAa;QAEb,OAAO;YACL,KAAK;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,MAAuB,EACvB,IAAsB;QAEtB,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACpB,4FAA4F;YAC5F,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC;QACrE,MAAM,GAAG,GAAoB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAErC,4FAA4F;QAC5F,MAAM,KAAK,GAAW,EAAE,CAAC;QACzB,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC;gBACT,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE;gBAC5D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;oBACZ,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE;YAClC,MAAM,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC;YACxB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,KAAK,CAAC,IAAI,CAAC;oBACT,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE;oBACzE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;wBACZ,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;oBACzB,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;gBAC3C,KAAK,CAAC,IAAI,CACR,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;oBACpD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;gBACpB,CAAC,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAC7B,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,EACnC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAC3B,KAAK,CACN,CAAC;QACF,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC7C,MAAM,IAAI,qBAAqB,CAC7B,aAAa,EACb,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,SAAS,EACtC,OAAO,CAAC,QAAQ,CACjB,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAE1B,oEAAoE;QACpE,KAAK,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YAClD,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;gBAC/C,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC7C,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,MAAkB,EAClB,KAAc,EACd,IAAsB,EACtB,KAAY;QAEZ,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YAC7D,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC;gBACT,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE;gBACtD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;oBACZ,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;gBACtB,CAAC;aACF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAC7B,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAC3B,KAAK,CACN,CAAC;QACF,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,yFAAyF;YACzF,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,IAAI,UAAU,CAAC;YACxD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAgB,CAAC;YACvE,OAAO;QACT,CAAC;QACD,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAmB,EAAE,IAAsB;QACrE,uFAAuF;QACvF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;YAClE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAC1B,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAC5C,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAC5B,CAAC;YACF,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC;YAC3E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5C,6FAA6F;QAC7F,8EAA8E;QAC9E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAC9B,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,EACpC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAC5C,IAAI,KAAK,EAAE,CACZ,CAAC;QACF,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC;QAC/E,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtE,OAAO,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACjF,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,GAAsB,EAAE,MAAkB;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QACrC,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9D,MAAM,IAAI,GACR,GAAG,CAAC,QAAQ,KAAK,SAAS;YACxB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC/D,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QAC7C,MAAM,IAAI,GAAwB,EAAE,CAAC;QACrC,KAAK,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,KAAK;gBAAE,SAAS;YACzB,2FAA2F;YAC3F,+FAA+F;YAC/F,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,KAAK,SAAS,GAAG,CAAC,IAAI,IAAI,EAAE,SAAS,GAAG,CAAC,MAAM,SAAS,GAAG,CAAC,QAAQ,SAAS,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxH,IAAI,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC7B,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,YAAY,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACjD,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,CAAC;gBACZ,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,IAAI;gBACJ,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,GAAG;aACb,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC;CACF;AAED,+CAA+C;AAC/C,MAAM,UAAU,gBAAgB,CAAC,OAAO,GAAsB,EAAE;IAC9D,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAwB,EACxB,SAAS,GAAG,GAAG;IAEf,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC"}

package/dist/src/guardrails/detectors/custom.d.ts

@@ -0,0 +1,9 @@
+import type { Finding } from '../types.js';
+/** Compiled once per pattern (global flag added), with a bounded cache. */
+export declare function compileGuardPattern(pattern: string): RegExp;
+export declare function detectRegex(text: string, patterns: readonly string[], label?: string): Finding[];
+/** Lower case without accents, keeping string length stable (one output char per input char). */
+export declare function fold(s: string): string;
+/** Whole-word, case- and accent-insensitive keyword/phrase matching. */
+export declare function detectKeywords(text: string, words: readonly string[], label?: string): Finding[];
+//# sourceMappingURL=custom.d.ts.map

package/dist/src/guardrails/detectors/custom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.d.ts","sourceRoot":"","sources":["../../../../src/guardrails/detectors/custom.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAS3C,2EAA2E;AAC3E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAS3D;AAED,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,KAAK,SAAW,GACf,OAAO,EAAE,CA4BX;AAID,iGAAiG;AACjG,wBAAgB,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAQtC;AAID,wEAAwE;AACxE,wBAAgB,cAAc,CAC5B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,KAAK,SAAa,GACjB,OAAO,EAAE,CAqBX"}

package/dist/src/guardrails/detectors/custom.js

@@ -0,0 +1,81 @@
+/** `(?i)` prefix = case-insensitive, the one inline flag JavaScript regexes lack. */
+function compileFlagged(pattern) {
+    return pattern.startsWith('(?i)') ? new RegExp(pattern.slice(4), 'i') : new RegExp(pattern);
+}
+const compiled = new Map();
+/** Compiled once per pattern (global flag added), with a bounded cache. */
+export function compileGuardPattern(pattern) {
+    let re = compiled.get(pattern);
+    if (!re) {
+        const base = compileFlagged(pattern);
+        re = new RegExp(base.source, `${base.flags.replace('g', '')}g`);
+        if (compiled.size > 5_000)
+            compiled.clear();
+        compiled.set(pattern, re);
+    }
+    return re;
+}
+export function detectRegex(text, patterns, label = 'custom') {
+    const out = [];
+    for (const p of patterns) {
+        let re;
+        try {
+            re = compileGuardPattern(p);
+        }
+        catch {
+            continue;
+        }
+        re.lastIndex = 0;
+        let guard = 0;
+        for (let m = re.exec(text); m && guard < 1000; m = re.exec(text), guard++) {
+            if (m[0].length === 0) {
+                re.lastIndex++;
+                continue;
+            }
+            out.push({
+                detector: 'regex',
+                category: `regex.${label}`,
+                start: m.index,
+                end: m.index + m[0].length,
+                score: 1,
+                value: m[0],
+                spanned: true,
+            });
+        }
+    }
+    return out;
+}
+const COMBINING = /[\u0300-\u036f]/g;
+/** Lower case without accents, keeping string length stable (one output char per input char). */
+export function fold(s) {
+    let out = '';
+    for (const ch of s) {
+        const base = ch.normalize('NFD').replace(COMBINING, '');
+        const c = (base.length === ch.length ? base : ch).toLowerCase();
+        out += c.length === ch.length ? c : ch;
+    }
+    return out;
+}
+const escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+/** Whole-word, case- and accent-insensitive keyword/phrase matching. */
+export function detectKeywords(text, words, label = 'keywords') {
+    const clean = words.map((w) => fold(w.trim())).filter(Boolean);
+    if (clean.length === 0)
+        return [];
+    const re = new RegExp(`(?<![\\p{L}\\p{N}_])(?:${clean.map(escapeRe).join('|')})(?![\\p{L}\\p{N}_])`, 'gu');
+    const folded = fold(text);
+    const out = [];
+    for (let m = re.exec(folded); m; m = re.exec(folded)) {
+        out.push({
+            detector: 'keywords',
+            category: `keywords.${label}`,
+            start: m.index,
+            end: m.index + m[0].length,
+            score: 1,
+            value: text.slice(m.index, m.index + m[0].length),
+            spanned: true,
+        });
+    }
+    return out;
+}
+//# sourceMappingURL=custom.js.map

package/dist/src/guardrails/detectors/custom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.js","sourceRoot":"","sources":["../../../../src/guardrails/detectors/custom.ts"],"names":[],"mappings":"AAEA,qFAAqF;AACrF,SAAS,cAAc,CAAC,OAAe;IACrC,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE3C,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QACrC,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;QAChE,IAAI,QAAQ,CAAC,IAAI,GAAG,KAAK;YAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5C,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,QAA2B,EAC3B,KAAK,GAAG,QAAQ;IAEhB,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,EAAU,CAAC;QACf,IAAI,CAAC;YACH,EAAE,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAC1E,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,EAAE,CAAC,SAAS,EAAE,CAAC;gBACf,SAAS;YACX,CAAC;YACD,GAAG,CAAC,IAAI,CAAC;gBACP,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,SAAS,KAAK,EAAE;gBAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;gBAC1B,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;gBACX,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAErC,iGAAiG;AACjG,MAAM,UAAU,IAAI,CAAC,CAAS;IAC5B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChE,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAEzE,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,KAAwB,EACxB,KAAK,GAAG,UAAU;IAElB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,0BAA0B,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAC7E,IAAI,CACL,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,YAAY,KAAK,EAAE;YAC7B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;YAC1B,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACjD,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/guardrails/detectors/injection.d.ts

@@ -0,0 +1,23 @@
+import type { Finding } from '../types.js';
+/**
+ * Prompt-injection / jailbreak heuristics. Each signal has a weight; the text's score is the
+ * noisy-OR of the distinct signals that fired (1 - Π(1 - w)), so one strong signal or several weak
+ * ones cross the threshold. English, Portuguese (PT-BR) and Spanish phrasings, role/delimiter
+ * spoofing, hidden Unicode (tag characters, bidi overrides, zero-width runs) and exfiltration
+ * through rendered links/images.
+ */
+export interface Signal {
+    id: string;
+    re: RegExp;
+    weight: number;
+}
+export declare const INJECTION_SIGNALS: Signal[];
+/** Decodes Unicode tag characters ("ASCII smuggling") back to the ASCII they encode. */
+export declare function decodeTagChars(s: string): string;
+export interface InjectionResult {
+    score: number;
+    findings: Finding[];
+}
+/** Scores a text; findings are returned only when the score reaches `threshold`. */
+export declare function scoreInjection(text: string, threshold?: number): InjectionResult;
+//# sourceMappingURL=injection.d.ts.map

package/dist/src/guardrails/detectors/injection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection.d.ts","sourceRoot":"","sources":["../../../../src/guardrails/detectors/injection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAID,eAAO,MAAM,iBAAiB,EAAE,MAAM,EAuFrC,CAAC;AAmBF,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAOhD;AA+BD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB;AAED,oFAAoF;AACpF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,eAAe,CA0E7E"}