@aimarket/warden 0.20.0 → 0.22.0

package/dist/flow-guard.d.ts

@@ -1,219 +1,24 @@
-export type FlowLabel = 'private' | 'untrusted' | 'outbound' | 'destructive';
-export type FlowMode = 'ask' | 'deny' | 'audit' | 'off';
-/** When the Stop hook tells the user that an answer drew on outside text. */
-export type AnswerNote = 'always' | 'instruction' | 'off';
-export interface FlowPolicy {
-    mode: FlowMode;
-    /** Tool-name globs → the labels an operator assigns; replaces the built-in guess for that tool. */
-    labels: Record<string, FlowLabel[]>;
-    /** Hosts whose content does not taint the session (docs you trust). `*.example.com` covers subdomains. */
-    trustedSources: string[];
-    /** Hosts an outbound call may reach in a tainted session without asking. Fingerprint checks still apply. */
-    allowedDestinations: string[];
-    /** Treat every local file the agent reads as outside text (strict). Default: only foreign paths. */
-    taintLocalFiles: boolean;
-    /** Tool-name globs → argument names whose values are destinations or targets (recipient, file id). */
-    destinationArgs: Record<string, string[]>;
-    /** Explicitly trusted, read-only contact lookup tools. Results must contain structured name/email records. */
-    contactTools?: string[];
-    /** Stop hook: name the outside text a turn read (always), only text that addressed the model (instruction), or stay silent. */
-    answerNote: AnswerNote;
-}
-export interface FlowSource {
-    tool: string;
-    src: string;
-    at: string; /** The text addressed the model as if instructing it. */
-    hint?: boolean; /** The user's prompt count when it was read. */
-    turn?: number;
-}
-/** The last characters each argument sent out this session, so a value split over several calls is seen whole. */
-export interface OutTail {
-    t: string;
-    a: string;
-}
-export interface FlowState {
-    v: 1;
-    untrusted: FlowSource[];
-    private: Array<FlowSource & {
-        secret: boolean;
-    }>;
-    notified: boolean;
-    /** Fingerprint store reached its cap: later private reads are not fingerprinted. */
-    full: boolean;
-    /** What the user typed this session (normalized, capped): a destination named here is the user's choice. */
-    intent?: string[];
-    /** The same, lower-cased with spacing kept, for whole-word matches of short names and numbers. */
-    intentRaw?: string[];
-    /** Addresses resolved by explicitly trusted contact tools, bound to full display names. */
-    resolved?: Array<{
-        v: string;
-        names: string[];
-    }>;
-    resolvedVersion?: 2;
-    /** Per argument name: the tail of what outbound calls carried after outside text (see OutTail). */
-    tails?: Record<string, OutTail>;
-    /** How many prompts the user has sent: the Stop hook names only outside text read in the latest turn. */
-    turn?: number;
-    /** MCP tools seen without an operator label, with the labels the guard guessed (`warden-mcp flow-labels`). */
-    unlabeled?: Record<string, FlowLabel[]>;
-}
-export interface Classified {
-    labels: Set<FlowLabel>;
-    /** Hosts named in the call (URLs, ssh/scp targets). */
-    hosts: string[];
-    /** For results: a short description of where the text came from. */
-    src: string;
-    /** Private read of a credential path. */
-    secret: boolean;
-    /** The call writes WARDEN's policy/state or Claude Code's hook/MCP settings. */
-    protectedTouch: boolean;
-    /** Shell code that is not a small literal read-only command. Destination exemptions never apply. */
-    opaqueShell?: boolean;
-    /** An MCP tool without an operator label: its labels are the guard's guess. */
-    guessed?: boolean;
-}
-export interface FlowDecision {
-    permissionDecision: 'ask' | 'deny';
-    permissionDecisionReason: string;
-}
-/** Set by the integration, never by tool arguments. A proxy cannot display an approval dialog itself; `elicit` is
- *  `wrap` asking through the client's own form (MCP elicitation), whose answer it records with flowApproval. */
-export type FlowPresentation = 'hook' | 'refuse' | 'audit' | 'elicit';
-export declare const DEFAULT_POLICY: FlowPolicy;
-export declare function stateDir(env?: NodeJS.ProcessEnv): string;
-export declare function flowPaths(dir: string, sessionId: string): {
-    dir: string;
-    state: string;
-    fp: string;
-    secret: string;
-    pii: string;
-    tok: string;
-    hint: string;
-    log: string;
-};
-export declare function isSecretPath(path: string): boolean;
-/** Files that, if the agent could change them, would let it switch the guard off. */
-export declare function isProtectedPath(path: string, cwd: string, env?: NodeJS.ProcessEnv): boolean;
-/** User-level policy only (`<state dir>/flow-policy.json`): a project file is something the agent can edit. */
-export declare function loadPolicy(env?: NodeJS.ProcessEnv): FlowPolicy;
-export declare function hostMatches(host: string, patterns: readonly string[]): boolean;
-export declare function hostsIn(texts: readonly string[]): string[];
-export declare function classifyShell(command: string): {
-    labels: Set<FlowLabel>;
-    hosts: string[];
-    local: boolean;
-};
-export declare function classifyCall(toolName: string, input: Record<string, unknown>, cwd: string, policy: FlowPolicy, env?: NodeJS.ProcessEnv): Classified;
-export declare function destinations(toolName: string, input: Record<string, unknown>, policy: FlowPolicy, hosts: readonly string[]): string[];
-/**
- * The operator named this tool's destination arguments and the call sets none of them: it acts on an
- * existing relationship (change the amount of a standing order, not its payee), so no new party is reached.
- * Unconfigured tools never qualify: without the operator's word, an absent argument proves nothing.
- */
-export declare function keepsDestination(toolName: string, input: Record<string, unknown>, policy: FlowPolicy): boolean;
-/** Only structured records from explicitly configured contact tools may resolve a full display name.
- * Arbitrary prose, YAML, capitalized words and local file reads cannot create authority. */
-export declare function resolvedContacts(value: unknown, depth?: number): Array<{
-    v: string;
-    names: string[];
-}>;
-export declare function namedByUser(dests: readonly string[], intent: readonly string[] | undefined, intentRaw?: readonly string[], resolved?: FlowState['resolved']): boolean;
-export declare function resultTaints(toolName: string, input: Record<string, unknown>, responseText: string, cwd: string, policy: FlowPolicy, classified: Classified): {
-    untrusted: boolean;
-    private: boolean;
-    src: string;
-};
-export declare function normalizeText(s: string): string;
-/** Windows of the private text at every STRIDE-th position: any leaked run of WINDOW+STRIDE-1 normalized chars hits one. */
-export declare function fingerprints(text: string): string[];
-/** The texts an outbound call could be carrying: raw, URL-decoded, and base64/hex runs decoded. */
-export declare function candidates(texts: readonly string[]): string[];
-export declare function piiTokens(text: string): string[];
-export declare function secretPattern(texts: readonly string[]): string | undefined;
-/** Key-like values in private text: every random-looking run of a credential file, and every well-known
- * secret format wherever it was read. Words, paths and host names are not random enough to count. */
-export declare function secretTokens(text: string, credentialFile: boolean): string[];
-/** Windows that hold both a letter and a digit, so an ordinary word is never a piece of a key. A window never
- * starts in the key's leading letters ("sk-ant-api03" or "rk_live" is a format every such key shares), never in the
- * first 48 characters of a DER key or certificate (its header and algorithm), and never lies inside KEY_STRUCTURE. */
-export declare function tokenFingerprints(tokens: readonly string[]): string[];
-/** Every window of letters and digits of both token sizes, forwards and backwards: what a call is checked by. */
-export declare function tokenWindows(text: string): string[];
-interface FpStores {
-    secret: Set<string>;
-    fp: Set<string>;
-    pii: Set<string>;
-    tok: Set<string>;
-}
-export interface LeakCheck {
-    secret?: string;
-    private?: boolean;
-    pii?: boolean;
-}
-/** `typed`: what the user typed this session. A value the user typed is theirs to send; it is skipped
- * for ordinary private text, never for secrets. */
-export declare function checkLeak(paths: ReturnType<typeof flowPaths>, input: Record<string, unknown>, typed?: readonly string[], stores?: FpStores): LeakCheck;
-/**
- * A value sent in pieces, one call each, is checked whole: each argument name keeps the tail of what it carried,
- * and the windows that cross from that tail into this call are checked like any other. Only pieces sent back to back
- * through the same argument join; words between them break the run. Returns the new tails.
- */
-export declare function checkStream(input: Record<string, unknown>, tails: Readonly<Record<string, OutTail>>, stores: FpStores): {
-    leak: LeakCheck;
-    next: Record<string, OutTail>;
-};
-export declare function readFlowState(path: string): FlowState;
-export declare function updateFlowState(path: string, change: (s: FlowState) => void): FlowState;
-export declare function flowPre(input: Record<string, unknown>, env?: NodeJS.ProcessEnv, presentation?: FlowPresentation): FlowDecision | undefined;
-/** What the person answered when `wrap` asked through the client (presentation `elicit`): the one case where the
- *  guard knows the outcome rather than inferring it. */
-export declare function flowApproval(input: {
-    session_id: string;
-    tool_name: string;
-}, outcome: string, env?: NodeJS.ProcessEnv): void;
-export interface FlowPostOutput {
-    systemMessage?: string;
-    additionalContext?: string;
-}
-export declare function flowPost(input: Record<string, unknown>, env?: NodeJS.ProcessEnv): FlowPostOutput | undefined;
-/** UserPromptSubmit: remember what the user asked for, so destinations they named are theirs. */
-/**
- * The user's own words in a prompt: what is left after text they pasted or quoted. An address that appears only in
- * a pasted block, a quoted line or the headers of a forwarded message was written by someone else, and naming it
- * is what an attacker who mails the user would want. Asking once before writing to it is the price when the user
- * meant it ("reply to the sender of this").
- */
-export declare function ownWords(prompt: string): string;
-export declare function flowPrompt(input: Record<string, unknown>, env?: NodeJS.ProcessEnv): void;
-/** The sentence in which outside text addresses the model, from the instruction to the sentence's end. Not the
- * sentences around it: in a list of reviews they are ordinary reviews, which an honest answer repeats. */
-export declare function instructionText(text: string): string;
-/** The text of the last assistant message: given directly, or read from the end of the Claude Code transcript. */
-export declare function lastAnswer(input: Record<string, unknown>): string;
-export interface FlowStopOutput {
-    systemMessage?: string;
-    decision?: 'block';
-    reason?: string;
-}
-/**
- * Stop: an injection that only changes the answer ("recommend this hotel") makes no call to refuse. Two levers are
- * left. Under any answer whose turn read outside text, one line tells the user which sources it drew on. And when
- * the answer repeats words from text that addressed the model with instructions, the answer goes back to the model
- * once to be checked against the user's request (`decision: block` makes Claude Code continue); the user loses
- * nothing but the time of that check.
- */
-export declare function flowStop(input: Record<string, unknown>, env?: NodeJS.ProcessEnv): FlowStopOutput | undefined;
-/** MCP tools that sessions used without an operator label, with the guard's guess and the sessions that used them. */
-export declare function unlabeledTools(env?: NodeJS.ProcessEnv): Array<{
-    tool: string;
-    guessed: FlowLabel[];
-    sessions: number;
-}>;
-/** `warden-mcp flow-labels`: the unlabeled tools, and a labels block to review and paste into the policy file. */
-export declare function flowLabelsReport(env?: NodeJS.ProcessEnv): string;
+export type { FlowLabel, FlowMode, AnswerNote, GuiActionRule, GuiPolicy, PublicRequestRule, CredentialEgressPolicy, TaskAdapterPolicy, FlowPolicy, FlowSource, OutTail, FragmentRecord, FlowState, Classified, FlowDecision, FlowPresentation } from './flow-guard-types.js';
+export { stateDir, flowPaths, isSecretPath, isProtectedPath } from './flow-guard-paths.js';
+export { DEFAULT_POLICY, loadPolicy, readPinnedTaskManifest, publicRequestDigest, hostMatches } from './flow-guard-policy.js';
+export { hostsIn } from './flow-guard-text.js';
+export { classifyShell, classifyCall, resultTaints } from './flow-guard-classify.js';
+export type { ScreenView, ScreenCall } from './flow-guard-screen.js';
+export { screenFromResult, screenCall, screenObservation, screenTargetEvidence, screenTargetStamp, screenResponseEvidence, screenResponseStamp, screenSecretRead } from './flow-guard-screen.js';
+export { destinations, keepsDestination, resolvedContacts, namedByUser } from './flow-guard-destinations.js';
+export { normalizeText, fingerprints, piiTokens, secretPattern, secretValues, secretTokens, tokenFingerprints, tokenWindows } from './flow-guard-fingerprints.js';
+export { spelledCandidates, characterCodeCandidates, natoCandidates, scanCandidates, candidates } from './flow-guard-decode.js';
+export { fragmentFingerprints, checkFragments } from './flow-guard-fragments.js';
+export type { LeakCheck } from './flow-guard-leak.js';
+export { checkLeak, checkStream } from './flow-guard-leak.js';
+export { readFlowState, updateFlowState, flowStateExists } from './flow-guard-state.js';
+export { flowPre, flowApproval, flowScreenValidation } from './flow-guard-pre.js';
+export type { FlowPostOutput } from './flow-guard-post.js';
+export { flowPost } from './flow-guard-post.js';
+export type { FlowStopOutput } from './flow-guard-answer.js';
+export { ownWords, flowPrompt, instructionText, lastAnswer, flowStop } from './flow-guard-answer.js';
+export { unlabeledTools, flowLabelsReport } from './flow-guard-labels.js';
 /** Hook runner shared by the CLI and the plugin script: `pre`, `post`, `prompt` or `stop`, hook JSON on stdin, decision JSON on stdout. */
 export declare function runFlowHook(event: string, stdin: string, env?: NodeJS.ProcessEnv): string | undefined;
 export declare function flowGuardMain(argv?: string[]): void;
-export declare function flowStateExists(sessionId: string, env?: NodeJS.ProcessEnv): boolean;
-export {};
 //# sourceMappingURL=flow-guard.d.ts.map

package/dist/flow-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flow-guard.d.ts","sourceRoot":"","sources":["../src/flow-guard.ts"],"names":[],"mappings":"AA8BA,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,CAAC;AAC7E,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;AACxD,6EAA6E;AAC7E,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,aAAa,GAAG,KAAK,CAAC;AAE1D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,QAAQ,CAAC;IACf,mGAAmG;IACnG,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACpC,0GAA0G;IAC1G,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,4GAA4G;IAC5G,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,oGAAoG;IACpG,eAAe,EAAE,OAAO,CAAC;IACzB,sGAAsG;IACtG,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,8GAA8G;IAC9G,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,+HAA+H;IAC/H,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC,CAAC,yDAAyD;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,gDAAgD;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAC/M,kHAAkH;AAClH,MAAM,WAAW,OAAO;IAAG,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AACjD,MAAM,WAAW,SAAS;IACxB,CAAC,EAAE,CAAC,CAAC;IACL,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,OAAO,EAAE,KAAK,CAAC,UAAU,GAAG;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACjD,QAAQ,EAAE,OAAO,CAAC;IAClB,oFAAoF;IACpF,IAAI,EAAE,OAAO,CAAC;IACd,4GAA4G;IAC5G,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,kGAAkG;IAClG,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IACjD,eAAe,CAAC,EAAE,CAAC,CAAC;IACpB,mGAAmG;IACnG,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,yGAAyG;IACzG,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8GAA8G;IAC9G,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACvB,uDAAuD;IACvD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,MAAM,EAAE,OAAO,CAAC;IAChB,gFAAgF;IAChF,cAAc,EAAE,OAAO,CAAC;IACxB,oGAAoG;IACpG,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAAG,kBAAkB,EAAE,KAAK,GAAG,MAAM,CAAC;IAAC,wBAAwB,EAAE,MAAM,CAAA;CAAE;AACtG;gHACgH;AAChH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;AAoCtE,eAAO,MAAM,cAAc,EAAE,UAAwJ,CAAC;AAKtL,wBAAgB,QAAQ,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAErE;AAMD,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;;;;;;;;;EAIvD;AA+BD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAElD;AAID,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAaxG;AAQD,+GAA+G;AAC/G,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,CAyB3E;AAOD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAM9E;AAaD,wBAAgB,OAAO,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAM1D;AAiCD,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CA0B1G;AAmCD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,UAAU,CA0DhK;AAuBD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAmBrI;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAO9G;AASD;4FAC4F;AAC5F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,KAAK,CAAC;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAiBjG;AA0BD,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAAE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,CAoBrK;AAKD,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAkBnN;AAID,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAMD,4HAA4H;AAC5H,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CASnD;AAED,mGAAmG;AACnG,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAgB7D;AAMD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAiBhD;AAoBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAG1E;AAqBD;qGACqG;AACrG,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,GAAG,MAAM,EAAE,CAa5E;AAED;;sHAEsH;AACtH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAWrE;AAED,iHAAiH;AACjH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMnD;AAUD,UAAU,QAAQ;IAAG,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAE;AAK/F,MAAM,WAAW,SAAS;IAAG,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE;AAChF;mDACmD;AACnD,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,GAAE,SAAS,MAAM,EAAO,EAAE,MAAM,GAAE,QAA4B,GAAG,SAAS,CAgB7K;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAgC1K;AAMD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CASrD;AA0BD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,SAAS,KAAK,IAAI,GAAG,SAAS,CASvF;AA2ED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,EAAE,YAAY,GAAE,gBAAyB,GAAG,YAAY,GAAG,SAAS,CAiG/J;AAED;wDACwD;AACxD,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAG1I;AAED,MAAM,WAAW,cAAc;IAAG,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE;AAEtF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,GAAG,SAAS,CA0DzH;AAED,iGAAiG;AACjG;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAU/C;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAqBrG;AAED;0GAC0G;AAC1G,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiBpD;AASD,kHAAkH;AAClH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAwBjE;AAED,MAAM,WAAW,cAAc;IAAG,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAE/F;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,cAAc,GAAG,SAAS,CAqCzH;AAED,sHAAsH;AACtH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBpI;AAED,kHAAkH;AAClH,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAgB7E;AAED,2IAA2I;AAC3I,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAgBlH;AAED,wBAAgB,aAAa,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,IAAI,CAY1E;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAEhG"}
+{"version":3,"file":"flow-guard.d.ts","sourceRoot":"","sources":["../src/flow-guard.ts"],"names":[],"mappings":"AAmCA,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC7Q,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAC9H,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACrF,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AACjM,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC7G,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAClK,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAChI,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AACjF,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAClF,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1E,2IAA2I;AAC3I,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,SAAS,CAgBlH;AAED,wBAAgB,aAAa,CAAC,IAAI,GAAE,MAAM,EAA0B,GAAG,IAAI,CAY1E"}