@agentlensai/server 0.11.0 → 0.13.0

package/dist/lib/guardrails/scanners/patterns/secret-patterns.js

@@ -0,0 +1,69 @@
+export const SECRET_PATTERNS = {
+    aws_access_key: {
+        name: 'aws_access_key',
+        regex: /\bAKIA[0-9A-Z]{16}\b/g,
+        redactionToken: '[AWS_KEY_REDACTED]',
+        confidence: 0.99,
+    },
+    aws_secret_key: {
+        name: 'aws_secret_key',
+        regex: /\b[A-Za-z0-9/+=]{40}\b/g,
+        redactionToken: '[AWS_SECRET_REDACTED]',
+        confidence: 0.70,
+    },
+    github_token: {
+        name: 'github_token',
+        regex: /\bghp_[A-Za-z0-9]{36,}\b/g,
+        redactionToken: '[GITHUB_TOKEN_REDACTED]',
+        confidence: 0.99,
+    },
+    github_fine_grained: {
+        name: 'github_fine_grained',
+        regex: /\bgithub_pat_[A-Za-z0-9]{22}_[A-Za-z0-9]{59}\b/g,
+        redactionToken: '[GITHUB_TOKEN_REDACTED]',
+        confidence: 0.99,
+    },
+    openai_key: {
+        name: 'openai_key',
+        regex: /\bsk-[A-Za-z0-9]{20}T3BlbkFJ[A-Za-z0-9]{20}\b/g,
+        redactionToken: '[OPENAI_KEY_REDACTED]',
+        confidence: 0.99,
+    },
+    anthropic_key: {
+        name: 'anthropic_key',
+        regex: /\bsk-ant-[A-Za-z0-9-]{80,}\b/g,
+        redactionToken: '[ANTHROPIC_KEY_REDACTED]',
+        confidence: 0.99,
+    },
+    stripe_key: {
+        name: 'stripe_key',
+        regex: /\b[rs]k_(test|live)_[A-Za-z0-9]{24,}\b/g,
+        redactionToken: '[STRIPE_KEY_REDACTED]',
+        confidence: 0.99,
+    },
+    generic_bearer: {
+        name: 'generic_bearer',
+        regex: /\bBearer\s+[A-Za-z0-9._~+/=-]{20,}\b/gi,
+        redactionToken: '[BEARER_TOKEN_REDACTED]',
+        confidence: 0.90,
+    },
+    generic_api_key: {
+        name: 'generic_api_key',
+        regex: /\b(?:api[_-]?key|apikey)\s*[:=]\s*['"]?([A-Za-z0-9._~+/=-]{20,})['"]?\b/gi,
+        redactionToken: '[API_KEY_REDACTED]',
+        confidence: 0.80,
+    },
+    private_key_pem: {
+        name: 'private_key_pem',
+        regex: /-----BEGIN (?:RSA |EC |DSA )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA )?PRIVATE KEY-----/g,
+        redactionToken: '[PRIVATE_KEY_REDACTED]',
+        confidence: 0.99,
+    },
+    jwt: {
+        name: 'jwt',
+        regex: /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g,
+        redactionToken: '[JWT_REDACTED]',
+        confidence: 0.95,
+    },
+};
+//# sourceMappingURL=secret-patterns.js.map

package/dist/lib/guardrails/scanners/patterns/secret-patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-patterns.js","sourceRoot":"","sources":["../../../../../src/lib/guardrails/scanners/patterns/secret-patterns.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,eAAe,GAA+B;IACzD,cAAc,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,uBAAuB;QAC9B,cAAc,EAAE,oBAAoB;QACpC,UAAU,EAAE,IAAI;KACjB;IACD,cAAc,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,yBAAyB;QAChC,cAAc,EAAE,uBAAuB;QACvC,UAAU,EAAE,IAAI;KACjB;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,2BAA2B;QAClC,cAAc,EAAE,yBAAyB;QACzC,UAAU,EAAE,IAAI;KACjB;IACD,mBAAmB,EAAE;QACnB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,iDAAiD;QACxD,cAAc,EAAE,yBAAyB;QACzC,UAAU,EAAE,IAAI;KACjB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,gDAAgD;QACvD,cAAc,EAAE,uBAAuB;QACvC,UAAU,EAAE,IAAI;KACjB;IACD,aAAa,EAAE;QACb,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,+BAA+B;QACtC,cAAc,EAAE,0BAA0B;QAC1C,UAAU,EAAE,IAAI;KACjB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,yCAAyC;QAChD,cAAc,EAAE,uBAAuB;QACvC,UAAU,EAAE,IAAI;KACjB;IACD,cAAc,EAAE;QACd,IAAI,EAAE,gBAAgB;QACtB,KAAK,EAAE,wCAAwC;QAC/C,cAAc,EAAE,yBAAyB;QACzC,UAAU,EAAE,IAAI;KACjB;IACD,eAAe,EAAE;QACf,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,2EAA2E;QAClF,cAAc,EAAE,oBAAoB;QACpC,UAAU,EAAE,IAAI;KACjB;IACD,eAAe,EAAE;QACf,IAAI,EAAE,iBAAiB;QACvB,KAAK,EAAE,mGAAmG;QAC1G,cAAc,EAAE,wBAAwB;QACxC,UAAU,EAAE,IAAI;KACjB;IACD,GAAG,EAAE;QACH,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,uEAAuE;QAC9E,cAAc,EAAE,gBAAgB;QAChC,UAAU,EAAE,IAAI;KACjB;CACF,CAAC"}

package/dist/lib/guardrails/scanners/pii-scanner.d.ts

@@ -0,0 +1,10 @@
+import { ContentScanner, type ScanContext, type ScanResult } from './base-scanner.js';
+export declare class PiiScanner extends ContentScanner {
+    readonly type = "pii_detection";
+    private patterns;
+    private customPatterns;
+    private minConfidence;
+    compile(conditionConfig: Record<string, unknown>): void;
+    scan(content: string, _context: ScanContext): ScanResult;
+}
+//# sourceMappingURL=pii-scanner.d.ts.map

package/dist/lib/guardrails/scanners/pii-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-scanner.d.ts","sourceRoot":"","sources":["../../../../src/lib/guardrails/scanners/pii-scanner.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAGtF,qBAAa,UAAW,SAAQ,cAAc;IAC5C,QAAQ,CAAC,IAAI,mBAAmB;IAChC,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,cAAc,CAAoB;IAC1C,OAAO,CAAC,aAAa,CAAO;IAE5B,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAuBvD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,UAAU;CAgCzD"}

package/dist/lib/guardrails/scanners/pii-scanner.js

@@ -0,0 +1,57 @@
+import { PiiDetectionConfigSchema } from '@agentlensai/core';
+import { ContentScanner } from './base-scanner.js';
+import { PII_PATTERNS } from './patterns/pii-patterns.js';
+export class PiiScanner extends ContentScanner {
+    type = 'pii_detection';
+    patterns = [];
+    customPatterns = [];
+    minConfidence = 0.8;
+    compile(conditionConfig) {
+        const config = PiiDetectionConfigSchema.parse(conditionConfig);
+        this.minConfidence = config.minConfidence;
+        // Select built-in patterns
+        this.patterns = config.patterns
+            .filter((p) => PII_PATTERNS[p])
+            .map((p) => PII_PATTERNS[p]);
+        // Compile custom patterns
+        this.customPatterns = [];
+        if (config.customPatterns) {
+            for (const [name, regexStr] of Object.entries(config.customPatterns)) {
+                this.customPatterns.push({
+                    name,
+                    regex: new RegExp(regexStr, 'g'),
+                    redactionToken: `[${name.toUpperCase()}_REDACTED]`,
+                    confidence: 0.80,
+                });
+            }
+        }
+    }
+    scan(content, _context) {
+        const matches = [];
+        const allPatterns = [...this.patterns, ...this.customPatterns];
+        for (const pattern of allPatterns) {
+            // Reset regex lastIndex for each scan
+            const regex = new RegExp(pattern.regex.source, pattern.regex.flags);
+            let match;
+            while ((match = regex.exec(content)) !== null) {
+                const matchText = match[0];
+                // Run optional validator (e.g., Luhn check for credit cards)
+                if (pattern.validate && !pattern.validate(matchText)) {
+                    continue;
+                }
+                if (pattern.confidence < this.minConfidence) {
+                    continue;
+                }
+                matches.push({
+                    conditionType: 'pii_detection',
+                    patternName: pattern.name,
+                    offset: { start: match.index, end: match.index + matchText.length },
+                    confidence: pattern.confidence,
+                    redactionToken: pattern.redactionToken,
+                });
+            }
+        }
+        return { matches };
+    }
+}
+//# sourceMappingURL=pii-scanner.js.map

package/dist/lib/guardrails/scanners/pii-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii-scanner.js","sourceRoot":"","sources":["../../../../src/lib/guardrails/scanners/pii-scanner.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAqC,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAmB,MAAM,4BAA4B,CAAC;AAE3E,MAAM,OAAO,UAAW,SAAQ,cAAc;IACnC,IAAI,GAAG,eAAe,CAAC;IACxB,QAAQ,GAAiB,EAAE,CAAC;IAC5B,cAAc,GAAiB,EAAE,CAAC;IAClC,aAAa,GAAG,GAAG,CAAC;IAE5B,OAAO,CAAC,eAAwC;QAC9C,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC/D,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAE1C,2BAA2B;QAC3B,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/B,0BAA0B;QAC1B,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBACrE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;oBACvB,IAAI;oBACJ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC;oBAChC,cAAc,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,YAAY;oBAClD,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,QAAqB;QACzC,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QAE/D,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,sCAAsC;YACtC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAE3B,6DAA6D;gBAC7D,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBACrD,SAAS;gBACX,CAAC;gBAED,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;oBAC5C,SAAS;gBACX,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC;oBACX,aAAa,EAAE,eAAe;oBAC9B,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE;oBACnE,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/lib/guardrails/scanners/scanner-registry.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Scanner Registry (Feature 8 — Story 3)
+ *
+ * Maps condition types to scanner implementations with compile-once caching.
+ */
+import type { GuardrailRule } from '@agentlensai/core';
+import type { ContentScanner } from './base-scanner.js';
+export declare function isContentRule(rule: GuardrailRule): boolean;
+export declare function getScannerForRule(rule: GuardrailRule): ContentScanner | null;
+export declare function invalidateScanner(ruleId: string): void;
+export declare function invalidateAllScanners(): void;
+/** Exposed for testing */
+export declare function _getCacheSize(): number;
+//# sourceMappingURL=scanner-registry.d.ts.map

package/dist/lib/guardrails/scanners/scanner-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner-registry.d.ts","sourceRoot":"","sources":["../../../../src/lib/guardrails/scanners/scanner-registry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAoBxD,wBAAgB,aAAa,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAE1D;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,cAAc,GAAG,IAAI,CAwB5E;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAEtD;AAED,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED,0BAA0B;AAC1B,wBAAgB,aAAa,IAAI,MAAM,CAEtC"}

package/dist/lib/guardrails/scanners/scanner-registry.js

@@ -0,0 +1,51 @@
+import { PiiScanner } from './pii-scanner.js';
+import { SecretsScanner } from './secrets-scanner.js';
+import { createLogger } from '../../logger.js';
+const log = createLogger('ScannerRegistry');
+const UNIMPLEMENTED_TYPES = new Set(['content_regex', 'toxicity_detection', 'prompt_injection']);
+/** Pre-compiled scanner cache: ruleId → scanner instance */
+const scannerCache = new Map();
+const CONTENT_CONDITION_TYPES = new Set([
+    'pii_detection',
+    'secrets_detection',
+    'content_regex',
+    'toxicity_detection',
+    'prompt_injection',
+]);
+export function isContentRule(rule) {
+    return CONTENT_CONDITION_TYPES.has(rule.conditionType);
+}
+export function getScannerForRule(rule) {
+    if (UNIMPLEMENTED_TYPES.has(rule.conditionType)) {
+        log.warn(`Scanner not implemented for condition type: ${rule.conditionType} (rule ${rule.id}), skipping`);
+        return null;
+    }
+    const cached = scannerCache.get(rule.id);
+    if (cached)
+        return cached;
+    let scanner;
+    switch (rule.conditionType) {
+        case 'pii_detection':
+            scanner = new PiiScanner();
+            break;
+        case 'secrets_detection':
+            scanner = new SecretsScanner();
+            break;
+        default:
+            throw new Error(`No scanner for condition type: ${rule.conditionType}`);
+    }
+    scanner.compile(rule.conditionConfig);
+    scannerCache.set(rule.id, scanner);
+    return scanner;
+}
+export function invalidateScanner(ruleId) {
+    scannerCache.delete(ruleId);
+}
+export function invalidateAllScanners() {
+    scannerCache.clear();
+}
+/** Exposed for testing */
+export function _getCacheSize() {
+    return scannerCache.size;
+}
+//# sourceMappingURL=scanner-registry.js.map

package/dist/lib/guardrails/scanners/scanner-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner-registry.js","sourceRoot":"","sources":["../../../../src/lib/guardrails/scanners/scanner-registry.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAE5C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEjG,4DAA4D;AAC5D,MAAM,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEvD,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,eAAe;IACf,mBAAmB;IACnB,eAAe;IACf,oBAAoB;IACpB,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,IAAmB;IAC/C,OAAO,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAmB;IACnD,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,+CAA+C,IAAI,CAAC,aAAa,UAAU,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;QAC1G,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,IAAI,OAAuB,CAAC;IAC5B,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;QAC3B,KAAK,eAAe;YAClB,OAAO,GAAG,IAAI,UAAU,EAAE,CAAC;YAC3B,MAAM;QACR,KAAK,mBAAmB;YACtB,OAAO,GAAG,IAAI,cAAc,EAAE,CAAC;YAC/B,MAAM;QACR;YACE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACtC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,YAAY,CAAC,KAAK,EAAE,CAAC;AACvB,CAAC;AAED,0BAA0B;AAC1B,MAAM,UAAU,aAAa;IAC3B,OAAO,YAAY,CAAC,IAAI,CAAC;AAC3B,CAAC"}

package/dist/lib/guardrails/scanners/secrets-scanner.d.ts

@@ -0,0 +1,9 @@
+import { ContentScanner, type ScanContext, type ScanResult } from './base-scanner.js';
+export declare class SecretsScanner extends ContentScanner {
+    readonly type = "secrets_detection";
+    private patterns;
+    private customPatterns;
+    compile(conditionConfig: Record<string, unknown>): void;
+    scan(content: string, _context: ScanContext): ScanResult;
+}
+//# sourceMappingURL=secrets-scanner.d.ts.map

package/dist/lib/guardrails/scanners/secrets-scanner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-scanner.d.ts","sourceRoot":"","sources":["../../../../src/lib/guardrails/scanners/secrets-scanner.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAItF,qBAAa,cAAe,SAAQ,cAAc;IAChD,QAAQ,CAAC,IAAI,uBAAuB;IACpC,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,cAAc,CAAoB;IAE1C,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAoBvD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,UAAU;CAuBzD"}

package/dist/lib/guardrails/scanners/secrets-scanner.js

@@ -0,0 +1,47 @@
+import { SecretsDetectionConfigSchema } from '@agentlensai/core';
+import { ContentScanner } from './base-scanner.js';
+import { SECRET_PATTERNS } from './patterns/secret-patterns.js';
+export class SecretsScanner extends ContentScanner {
+    type = 'secrets_detection';
+    patterns = [];
+    customPatterns = [];
+    compile(conditionConfig) {
+        const config = SecretsDetectionConfigSchema.parse(conditionConfig);
+        this.patterns = config.patterns
+            .filter((p) => SECRET_PATTERNS[p])
+            .map((p) => SECRET_PATTERNS[p]);
+        this.customPatterns = [];
+        if (config.customPatterns) {
+            for (const [name, regexStr] of Object.entries(config.customPatterns)) {
+                this.customPatterns.push({
+                    name,
+                    regex: new RegExp(regexStr, 'g'),
+                    redactionToken: `[${name.toUpperCase()}_REDACTED]`,
+                    confidence: 0.80,
+                });
+            }
+        }
+    }
+    scan(content, _context) {
+        const matches = [];
+        const allPatterns = [...this.patterns, ...this.customPatterns];
+        for (const pattern of allPatterns) {
+            const regex = new RegExp(pattern.regex.source, pattern.regex.flags);
+            let match;
+            while ((match = regex.exec(content)) !== null) {
+                const matchText = match[0];
+                if (pattern.validate && !pattern.validate(matchText))
+                    continue;
+                matches.push({
+                    conditionType: 'secrets_detection',
+                    patternName: pattern.name,
+                    offset: { start: match.index, end: match.index + matchText.length },
+                    confidence: pattern.confidence,
+                    redactionToken: pattern.redactionToken,
+                });
+            }
+        }
+        return { matches };
+    }
+}
+//# sourceMappingURL=secrets-scanner.js.map

package/dist/lib/guardrails/scanners/secrets-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-scanner.js","sourceRoot":"","sources":["../../../../src/lib/guardrails/scanners/secrets-scanner.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAqC,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAGhE,MAAM,OAAO,cAAe,SAAQ,cAAc;IACvC,IAAI,GAAG,mBAAmB,CAAC;IAC5B,QAAQ,GAAiB,EAAE,CAAC;IAC5B,cAAc,GAAiB,EAAE,CAAC;IAE1C,OAAO,CAAC,eAAwC;QAC9C,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEnE,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAElC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBACrE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;oBACvB,IAAI;oBACJ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC;oBAChC,cAAc,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,YAAY;oBAClD,UAAU,EAAE,IAAI;iBACjB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,QAAqB;QACzC,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QAE/D,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,KAA6B,CAAC;YAClC,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3B,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAAE,SAAS;gBAE/D,OAAO,CAAC,IAAI,CAAC;oBACX,aAAa,EAAE,mBAAmB;oBAClC,WAAW,EAAE,OAAO,CAAC,IAAI;oBACzB,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE;oBACnE,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,cAAc,EAAE,OAAO,CAAC,cAAc;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/lib/logger.d.ts

@@ -0,0 +1,8 @@
+export interface Logger {
+    debug(msg: string, data?: unknown): void;
+    info(msg: string, data?: unknown): void;
+    warn(msg: string, data?: unknown): void;
+    error(msg: string, data?: unknown): void;
+}
+export declare function createLogger(namespace: string): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/lib/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACxC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC1C;AAED,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAqBtD"}

package/dist/lib/logger.js

@@ -0,0 +1,31 @@
+const LEVELS = { debug: 0, info: 1, warn: 2, error: 3 };
+function getThreshold() {
+    const env = (process.env.LOG_LEVEL ?? 'info').toLowerCase();
+    return LEVELS[env] ?? LEVELS.info;
+}
+export function createLogger(namespace) {
+    const write = (level, msg, data) => {
+        if (LEVELS[level] < getThreshold())
+            return;
+        const entry = {
+            ts: new Date().toISOString(),
+            level,
+            ns: namespace,
+            msg,
+        };
+        if (data !== undefined)
+            entry.data = data;
+        const line = JSON.stringify(entry);
+        if (level === 'error')
+            process.stderr.write(line + '\n');
+        else
+            process.stdout.write(line + '\n');
+    };
+    return {
+        debug: (msg, data) => write('debug', msg, data),
+        info: (msg, data) => write('info', msg, data),
+        warn: (msg, data) => write('warn', msg, data),
+        error: (msg, data) => write('error', msg, data),
+    };
+}
+//# sourceMappingURL=logger.js.map

package/dist/lib/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/lib/logger.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAW,CAAC;AAGjE,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,WAAW,EAAW,CAAC;IACrE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;AACpC,CAAC;AASD,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,MAAM,KAAK,GAAG,CAAC,KAAY,EAAE,GAAW,EAAE,IAAc,EAAE,EAAE;QAC1D,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,EAAE;YAAE,OAAO;QAC3C,MAAM,KAAK,GAA4B;YACrC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK;YACL,EAAE,EAAE,SAAS;YACb,GAAG;SACJ,CAAC;QACF,IAAI,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;;YACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,IAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QAChD,IAAI,EAAE,CAAC,GAAG,EAAE,IAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC9C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC9C,KAAK,EAAE,CAAC,GAAG,EAAE,IAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;KACjD,CAAC;AACJ,CAAC"}

package/dist/lib/lore-client.d.ts

@@ -0,0 +1,128 @@
+/**
+ * Lore Adapter — abstraction for lesson CRUD via Lore service
+ *
+ * Two implementations:
+ * - RemoteLoreAdapter: HTTP proxy to a remote Lore server
+ * - LocalLoreAdapter: delegates to lore-sdk (conditional import)
+ */
+export interface LoreAdapter {
+    createLesson(data: {
+        title: string;
+        content: string;
+        category?: string;
+        importance?: string;
+        agentId?: string;
+        context?: Record<string, unknown>;
+    }): Promise<any>;
+    listLessons(query: {
+        category?: string;
+        agentId?: string;
+        importance?: string;
+        search?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<{
+        lessons: any[];
+        total: number;
+        hasMore: boolean;
+    }>;
+    getLesson(id: string): Promise<any>;
+    updateLesson(id: string, data: Partial<any>): Promise<any>;
+    deleteLesson(id: string): Promise<{
+        id: string;
+        archived: boolean;
+    }>;
+    searchCommunity(query: string, options?: {
+        category?: string;
+        limit?: number;
+        minReputation?: number;
+    }): Promise<{
+        lessons: any[];
+        total: number;
+    }>;
+    rateLesson(id: string, delta: number): Promise<any>;
+    getSharingConfig(): Promise<any>;
+    updateSharingConfig(data: any): Promise<any>;
+    getAgentSharingConfigs(): Promise<any>;
+    updateAgentSharingConfig(agentId: string, data: any): Promise<any>;
+    getDenyList(): Promise<any>;
+    addDenyListRule(data: any): Promise<any>;
+    deleteDenyListRule(id: string): Promise<any>;
+    getSharingAuditLog(params: {
+        eventType?: string;
+        from?: string;
+        to?: string;
+        limit?: number;
+    }): Promise<any>;
+    getSharingStats(): Promise<any>;
+    purgeSharing(confirmation: string): Promise<any>;
+}
+export declare class LoreError extends Error {
+    statusCode: number;
+    constructor(statusCode: number, message: string);
+}
+export declare class RemoteLoreAdapter implements LoreAdapter {
+    private baseUrl;
+    private apiKey;
+    constructor(baseUrl: string, apiKey: string);
+    private get headers();
+    private request;
+    createLesson(data: Parameters<LoreAdapter['createLesson']>[0]): Promise<any>;
+    listLessons(query: Parameters<LoreAdapter['listLessons']>[0]): Promise<any>;
+    getLesson(id: string): Promise<any>;
+    updateLesson(id: string, data: Partial<any>): Promise<any>;
+    deleteLesson(id: string): Promise<any>;
+    searchCommunity(query: string, options?: {
+        category?: string;
+        limit?: number;
+        minReputation?: number;
+    }): Promise<any>;
+    rateLesson(id: string, delta: number): Promise<any>;
+    getSharingConfig(): Promise<any>;
+    updateSharingConfig(data: any): Promise<any>;
+    getAgentSharingConfigs(): Promise<any>;
+    updateAgentSharingConfig(agentId: string, data: any): Promise<any>;
+    getDenyList(): Promise<any>;
+    addDenyListRule(data: any): Promise<any>;
+    deleteDenyListRule(id: string): Promise<any>;
+    getSharingAuditLog(params: {
+        eventType?: string;
+        from?: string;
+        to?: string;
+        limit?: number;
+    }): Promise<any>;
+    getSharingStats(): Promise<any>;
+    purgeSharing(confirmation: string): Promise<any>;
+}
+export declare class LocalLoreAdapter implements LoreAdapter {
+    private sdk;
+    constructor(dbPath: string);
+    createLesson(data: Parameters<LoreAdapter['createLesson']>[0]): Promise<any>;
+    listLessons(query: Parameters<LoreAdapter['listLessons']>[0]): Promise<any>;
+    getLesson(id: string): Promise<any>;
+    updateLesson(id: string, data: Partial<any>): Promise<any>;
+    deleteLesson(id: string): Promise<any>;
+    searchCommunity(query: string, options?: {
+        category?: string;
+        limit?: number;
+    }): Promise<any>;
+    rateLesson(_id: string, _delta: number): Promise<any>;
+    getSharingConfig(): Promise<any>;
+    updateSharingConfig(_data: any): Promise<any>;
+    getAgentSharingConfigs(): Promise<any>;
+    updateAgentSharingConfig(_agentId: string, _data: any): Promise<any>;
+    getDenyList(): Promise<any>;
+    addDenyListRule(_data: any): Promise<any>;
+    deleteDenyListRule(_id: string): Promise<any>;
+    getSharingAuditLog(_params: any): Promise<any>;
+    getSharingStats(): Promise<any>;
+    purgeSharing(_confirmation: string): Promise<any>;
+}
+/** Factory: create the right adapter based on config */
+export declare function createLoreAdapter(config: {
+    loreMode: string;
+    loreApiUrl?: string;
+    loreApiKey?: string;
+    loreDbPath?: string;
+}): LoreAdapter;
+//# sourceMappingURL=lore-client.d.ts.map

package/dist/lib/lore-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lore-client.d.ts","sourceRoot":"","sources":["../../src/lib/lore-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,IAAI,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAClK,WAAW,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACjM,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3D,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACrE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpJ,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAGpD,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,mBAAmB,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,sBAAsB,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACnE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,eAAe,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,kBAAkB,CAAC,MAAM,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7G,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,YAAY,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAClD;AA2BD,qBAAa,SAAU,SAAQ,KAAK;IACf,UAAU,EAAE,MAAM;gBAAlB,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAIvD;AAED,qBAAa,iBAAkB,YAAW,WAAW;IACvC,OAAO,CAAC,OAAO;IAAU,OAAO,CAAC,MAAM;gBAA/B,OAAO,EAAE,MAAM,EAAU,MAAM,EAAE,MAAM;IAE3D,OAAO,KAAK,OAAO,GAKlB;YAEa,OAAO;IAcf,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAK7D,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAS5D,SAAS,CAAC,EAAE,EAAE,MAAM;IAKpB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IAK3C,YAAY,CAAC,EAAE,EAAE,MAAM;IAIvB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE;IAWtG,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAIpC,gBAAgB;IAIhB,mBAAmB,CAAC,IAAI,EAAE,GAAG;IAI7B,sBAAsB;IAItB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG;IAInD,WAAW;IAIX,eAAe,CAAC,IAAI,EAAE,GAAG;IAIzB,kBAAkB,CAAC,EAAE,EAAE,MAAM;IAI7B,kBAAkB,CAAC,MAAM,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAS7F,eAAe;IAIf,YAAY,CAAC,YAAY,EAAE,MAAM;CAGxC;AAED,qBAAa,gBAAiB,YAAW,WAAW;IAClD,OAAO,CAAC,GAAG,CAAM;gBAEL,MAAM,EAAE,MAAM;IAcpB,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,SAAS,CAAC,EAAE,EAAE,MAAM;IACpB,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IAC3C,YAAY,CAAC,EAAE,EAAE,MAAM;IACvB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAC9E,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IACrD,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC;IAChC,mBAAmB,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAC7C,sBAAsB,IAAI,OAAO,CAAC,GAAG,CAAC;IACtC,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACpE,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;IAC3B,eAAe,CAAC,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACzC,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAC7C,kBAAkB,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAC9C,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC;IAC/B,YAAY,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CACxD;AAED,wDAAwD;AACxD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,WAAW,CAMd"}