@beingmartinbmc/ojas 0.2.0

package/dist/raksha/index.js

@@ -0,0 +1,597 @@
+"use strict";
+/**
+ * Ojas Raksha (ओजस रक्षा) — AI Immune Defense System
+ *
+ * Detects harmful cognitive inputs, protects instruction hierarchy,
+ * and quarantines prompt injection / memory poisoning attempts.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Raksha = void 0;
+exports.normalizeForScan = normalizeForScan;
+exports.expandBase64 = expandBase64;
+exports.defaultHallucinationDetector = defaultHallucinationDetector;
+exports.defaultPromptInjectionDetector = defaultPromptInjectionDetector;
+const types_1 = require("../types");
+const hallucination_detectors_1 = require("./hallucination-detectors");
+const prompt_injection_detectors_1 = require("./prompt-injection-detectors");
+const id_1 = require("../util/id");
+function now() {
+    return new Date().toISOString();
+}
+function clamp(v, min = 0, max = 1) {
+    return Math.max(min, Math.min(max, v));
+}
+function healthScore(value, source) {
+    return { value: clamp(value), timestamp: now(), source };
+}
+function eventId() {
+    return (0, id_1.newId)('raksha');
+}
+const THREAT_PATTERNS = [
+    { type: 'instruction_override', weight: 0.35, pattern: /\b(ignor(?:e|es|ed|ing)|disregard(?:s|ed|ing)?|override(?:s|d|n)?|bypass(?:es|ed|ing)?|forget(?:s|ting)?|skip(?:s|ped|ping)?|abandon(?:s|ed|ing)?)\s+(?:all\s+(?:of\s+)?(?:your\s+|the\s+|its\s+)?|any\s+|every\s+|the\s+|your\s+|its\s+)?(?:(?:previous|prior|above|earlier|preceding|past|original)\s+)?(instructions?|directions?|rules?|prompts?|contexts?|messages?|guidelines?|restrictions?|constraints?|guardrails?|safeguards?|safety\s+(?:instructions?|rules?|protocols?|guidelines?|measures?|warnings?))\b/i, reason: 'Attempts to override / bypass prior instructions or safety rules.' },
+    { type: 'prompt_injection', weight: 0.35, pattern: /\b(reveal|dump|print|leak|show|expose|output|share|disclose|recite|repeat|provide|return|send|send\s+me)\s+(?:me\s+)?(?:your|the|any|all|its)?\s*(system\s+prompts?|hidden\s+(?:instructions?|prompts?|messages?)|developer\s+(?:message|prompt|instructions?)|initial\s+(?:instructions?|prompts?)|internal\s+(?:prompt|configuration|instructions?))\b/i, reason: 'Asks for the system / developer prompt verbatim.' },
+    { type: 'prompt_injection', weight: 0.25, pattern: /\bsystem\s+prompts?\b|\bdeveloper\s+message\b|\bhidden\s+instructions?\b/i, reason: 'References hidden instruction material.' },
+    { type: 'prompt_injection', weight: 0.3, pattern: /\b(?:note\s+to\s+assistant|message\s+to\s+assistant|assistant\s+note)\b.{0,120}\b(?:reveal|print|dump|show|repeat)\b.{0,80}\b(?:system\s+prompts?|developer\s+(?:message|prompt|instructions?)|hidden\s+(?:instructions?|prompts?))\b/i, reason: 'Assistant-targeted retrieved note asks for hidden instruction material.' },
+    { type: 'prompt_injection', weight: 0.35, pattern: /\[\s*(?:system\s+(?:update|override|message|prompt)|admin\s+(?:override|mode|access)|plugin\s+call|role\s+change|jailbreak|sudo|superadmin(?:_bypass)?)\s*[:\]]/i, reason: 'Bracketed system / admin / plugin marker used to spoof a control channel.' },
+    { type: 'prompt_injection', weight: 0.35, pattern: /\[\s*system\s*\]\s*\(\s*#\s*(?:prompt|override|admin|system|message)\s*\)/i, reason: 'Markdown-link system marker used for indirect / context-poisoning injection.' },
+    { type: 'prompt_injection', weight: 0.25, pattern: /<\/?(?:system|developer|override|admin|instructions?|sudo)\s*>|]]>|BEGIN_SYSTEM|END_SYSTEM/i, reason: 'Contains markup commonly used for prompt boundary attacks.' },
+    { type: 'prompt_injection', weight: 0.35, pattern: /\b(?:BEGIN\s+SYSTEM|END\s+USER\s+INPUT|SYSTEM\s*:\s*|system\s+override|sysadmin\s+override|admin\s+override|conversation\s+policy)\b/i, reason: 'Spoofs a higher-priority instruction boundary or administrator override.' },
+    { type: 'prompt_injection', weight: 0.3, pattern: /<!--\s*(?:system|ignore|override|admin|jailbreak|prompt|developer)\b/i, reason: 'HTML comment used to smuggle hidden instructions.' },
+    { type: 'prompt_injection', weight: 0.4, pattern: /\bMCP_(?:SERVER_RESPONSE|TOOL_CHAIN|PROTOCOL_VERSION|AUTHENTICATION|COMMAND|PAYLOAD|TOOL_CALL)\s*[:=]/i, reason: 'Spoofed MCP protocol marker.' },
+    { type: 'data_exfiltration', weight: 0.45, pattern: /\b(?:print|reveal|dump|leak|show|expose|output|share|disclose|extract|exfiltrate|send|return)\b.{0,80}\b(?:api[_ -]?keys?|access[_ -]?tokens?|auth[_ -]?tokens?|refresh[_ -]?tokens?|bearer[_ -]?tokens?|oauth[_ -]?tokens?|jwt[_ -]?tokens?|session[_ -]?tokens?|passwords?|passphrases?|credentials?|secrets?|private[_ -]?keys?)\b/i, reason: 'Imperative request to expose credential-like material.' },
+    { type: 'data_exfiltration', weight: 0.4, pattern: /\b(?:api[_ -]?keys?|access[_ -]?tokens?|auth[_ -]?tokens?|refresh[_ -]?tokens?|bearer[_ -]?tokens?|oauth[_ -]?tokens?|jwt[_ -]?tokens?|session[_ -]?tokens?|passwords?|passphrases?|credentials?|secrets?|private[_ -]?keys?)\b/i, reason: 'Requests or exposes credential-like material.' },
+    { type: 'data_exfiltration', weight: 0.3, pattern: /\b(?:repeat|recite|extract|reveal|dump|leak|reconstruct|reproduce)\s+(?:the\s+|your\s+)?training\s+(?:data|set|corpus|examples?)\b|\bwas\s+(?:the\s+text\s+|the\s+string\s+)?[^.\n]{0,80}\bpart\s+of\s+your\s+training\b/i, reason: 'Attempts training-data extraction or membership inference.' },
+    { type: 'role_confusion', weight: 0.3, pattern: /\b(?:you\s+are\s+now|from\s+now\s+on\s+you\s+are|new\s+role|reassigned\s+as|you\s+have\s+been\s+(?:reassigned|granted|promoted)|act\s+as\s+(?:an?\s+)?(?:unrestricted|unfiltered|jailbroken|DAN|evil|admin|root|superadmin|developer\s+mode))\b/i, reason: 'Attempts role confusion / privilege escalation.' },
+    { type: 'role_confusion', weight: 0.3, pattern: /\b(?:developer\s+mode\s+(?:enabled|activated|on)|DAN\s+mode|do\s+anything\s+now|jailbroken|sudo\s+mode|god\s+mode|with(?:out)?\s+(?:any\s+)?restrictions?|safety\s+(?:protocols?|measures?|instructions?)\s+(?:overridden|disabled|bypassed))\b/i, reason: 'Classic jailbreak / restriction-bypass framing.' },
+    { type: 'tool_misuse', weight: 0.35, pattern: /\b(?:delete\s+all|drop\s+(?:table|database)|wipe\s+all|truncate\s+(?:all|table)|transfer\s+funds|send\s+.{0,40}@[\w.-]+|exfiltrate|exfiltration)\b/i, reason: 'Contains unsafe tool-use intent.' },
+    { type: 'tool_misuse', weight: 0.4, pattern: /\bos\.system\s*\(|\bsubprocess\.(?:call|run|Popen)\b|\bchild_process\b|\bos\.popen\b|\beval\s*\(\s*['"]|\bexec\s*\(\s*['"]|rm\s+-rf\s+\/|\$\(\s*echo\s+[^)]+\|\s*base64\s+-d/i, reason: 'Embeds shell / code-execution payload.' },
+    { type: 'memory_poisoning', weight: 0.3, pattern: /\b(?:remember\s+this\s+(?:forever|permanently|always)|store\s+this\s+as\s+truth|permanent\s+memory|treat\s+this\s+as\s+(?:canonical|truth|fact)|save\s+(?:this\s+)?to\s+(?:long[- ]?term|permanent)\s+memory|save\s+permanently|append\s+to\s+your\s+(?:next|every)\s+response)\b/i, reason: 'Attempts unsafe long-term memory write.' },
+    { type: 'memory_poisoning', weight: 0.6, pattern: /\b(?:public\s+knowledge|safe\s+to\s+share|allowed\s+to\s+share|approved\s+to\s+share)\b.{0,80}\b(?:api[_ -]?keys?|access[_ -]?tokens?|auth[_ -]?tokens?|refresh[_ -]?tokens?|bearer[_ -]?tokens?|oauth[_ -]?tokens?|jwt[_ -]?tokens?|session[_ -]?tokens?|passwords?|passphrases?|credentials?|secrets?|private[_ -]?keys?)\b|\b(?:api[_ -]?keys?|access[_ -]?tokens?|auth[_ -]?tokens?|refresh[_ -]?tokens?|bearer[_ -]?tokens?|oauth[_ -]?tokens?|jwt[_ -]?tokens?|session[_ -]?tokens?|passwords?|passphrases?|credentials?|secrets?|private[_ -]?keys?)\b.{0,80}\b(?:public\s+knowledge|safe\s+to\s+share|allowed\s+to\s+share|approved\s+to\s+share)\b/i, reason: 'Memory-poisoning attempt that reclassifies credential material as safe/public.' },
+    { type: 'prompt_injection', weight: 0.3, pattern: /\b(?:forward|send|relay|propagate|spread|broadcast|copy)\s+this\s+(?:entire\s+)?(?:message|instruction|prompt|payload)\s+to\s+(?:(?:all|every|other|the)\s+)*(?:agents?|models?|llms?|assistants?)\b|\bself[- ]?replicating\b/i, reason: 'Attempts self-replicating multi-agent prompt infection.' },
+    { type: 'tool_misuse', weight: 0.3, pattern: /<\s*ScRiPt\b|<\s*script\b[^>]*>|%3Cscript%3E|%3C\s*script\s*%3E|javascript:\s*alert\s*\(|\bon(?:load|error|click|focus)\s*=\s*['"]/i, reason: 'Output-handling XSS / script payload.' },
+];
+/**
+ * Characters that are invisible or visually-irrelevant but can be slipped
+ * between letters to break naive regex matching. Includes:
+ *   - U+200B  zero-width space
+ *   - U+200C  zero-width non-joiner
+ *   - U+200D  zero-width joiner
+ *   - U+2060  word joiner
+ *   - U+FEFF  zero-width no-break space (BOM)
+ *   - U+00AD  soft hyphen
+ *   - U+180E  Mongolian vowel separator
+ *   - U+034F  combining grapheme joiner
+ *
+ * These are stripped before threat-pattern matching so `i\u200Bgnore previous
+ * instructions` is still caught.
+ */
+// eslint-disable-next-line no-misleading-character-class -- combining/zero-width chars are exactly what we want to strip.
+const ZERO_WIDTH_RE = /[\u200B-\u200D\u2060\uFEFF\u00AD\u180E\u034F]/g;
+/**
+ * Tokens that look long enough and clean enough to be base64. We deliberately
+ * require ≥ 16 chars (to keep false positives low) and accept the standard
+ * alphabet plus URL-safe variants and an optional `=` padding.
+ *
+ * 16 chars is chosen because every canonical injection phrase we care about
+ * is ≥ 16 chars when base64-encoded, and any shorter string is too information-
+ * poor to encode a useful attack.
+ */
+const BASE64_CANDIDATE_RE = /[A-Za-z0-9+/_-]{16,}={0,2}/g;
+/**
+ * Normalize content to defeat the cheapest Raksha bypass categories.
+ *
+ *   1. **Unicode NFKC**: collapses compatibility forms — so full-width
+ *      "ｉｇｎｏｒｅ" → "ignore" and ligatures like "fignore" → "fignore"
+ *      (which won't match but ASCII compat forms will). This is the simplest
+ *      defence against homoglyph attacks that rely on Unicode compatibility
+ *      equivalents.
+ *   2. **Zero-width strip**: removes `\u200B`-class characters that are
+ *      sprinkled between letters to break the regex (e.g. `i\u200Bgnore`).
+ *   3. **Cyrillic / Greek lookalike folding**: a small hand-curated map for
+ *      the most common homoglyph attacks (Cyrillic `і` → Latin `i`,
+ *      Cyrillic `о` → Latin `o`, etc.). Not exhaustive — we cover the
+ *      letters used in canonical English injection phrases.
+ *
+ * This is a **bypass-reducing** normalization, not full Unicode security.
+ * See `docs/KNOWN_FAILURES.md` for what remains.
+ */
+const HOMOGLYPH_MAP = {
+    // Cyrillic → Latin lowercase
+    '\u0430': 'a', '\u0435': 'e', '\u043E': 'o', '\u0440': 'p', '\u0441': 'c',
+    '\u0443': 'y', '\u0445': 'x', '\u0456': 'i', '\u0501': 'd', '\u051B': 'q',
+    '\u04CF': 'l', '\u0455': 's', '\u04AB': 'h',
+    // Cyrillic → Latin uppercase
+    '\u0410': 'A', '\u0412': 'B', '\u0415': 'E', '\u041A': 'K', '\u041C': 'M',
+    '\u041D': 'H', '\u041E': 'O', '\u0420': 'P', '\u0421': 'C', '\u0422': 'T',
+    '\u0425': 'X', '\u0408': 'J', '\u0405': 'S', '\u0406': 'I',
+    // Greek → Latin
+    '\u03B1': 'a', '\u03BF': 'o', '\u03C1': 'p', '\u03C7': 'x',
+};
+function foldHomoglyphs(s) {
+    let out = '';
+    for (const ch of s) {
+        out += HOMOGLYPH_MAP[ch] ?? ch;
+    }
+    return out;
+}
+function collapseLetterSpacedWords(s) {
+    return s
+        .replace(/\b[A-Za-z](?: [A-Za-z]){2,}\b/g, (match) => match.replace(/ /g, ''))
+        .replace(/\bapi\s*[_-]\s*key\b/gi, 'api_key');
+}
+function normalizeForScan(content) {
+    // 1. NFKC compat-fold (full-width, ligatures, mathematical alphanumerics).
+    let s = content.normalize('NFKC');
+    // 2. Strip zero-width and invisible characters.
+    s = s.replace(ZERO_WIDTH_RE, '');
+    // 3. Fold the most common homoglyphs to their Latin equivalents.
+    s = foldHomoglyphs(s);
+    // 4. Collapse simple letter-spaced words used to evade token-based
+    // detectors, e.g. "i g n o r e" -> "ignore".
+    s = collapseLetterSpacedWords(s);
+    return s;
+}
+/**
+ * Try to decode any base64-looking tokens in `content` and return the
+ * decoded text concatenated with the original. Bounded and non-recursive:
+ *
+ *   - We only inspect tokens of length ≥ 16 that match `BASE64_CANDIDATE_RE`.
+ *   - We require the decoded bytes to be ≥ 75 % printable ASCII to count
+ *     (most accidental base64-looking tokens decode to mojibake).
+ *   - We never re-decode the output (no recursion). This prevents
+ *     adversarial nesting from being a DoS vector.
+ *   - We cap the total appended decoded length at `MAX_DECODED_BYTES`.
+ *
+ * Returns `null` when nothing decodable was found, so the caller can
+ * skip the second-pass scan.
+ */
+const MAX_DECODED_BYTES = 8 * 1024;
+const PRINTABLE_THRESHOLD = 0.75;
+function looksDecodable(decoded) {
+    if (decoded.length === 0)
+        return false;
+    let printable = 0;
+    for (let i = 0; i < decoded.length; i += 1) {
+        const code = decoded.charCodeAt(i);
+        // Tab/LF/CR + printable ASCII 32..126
+        if (code === 9 || code === 10 || code === 13 || (code >= 32 && code <= 126)) {
+            printable += 1;
+        }
+    }
+    return printable / decoded.length >= PRINTABLE_THRESHOLD;
+}
+function expandBase64(content) {
+    let appended = 0;
+    const decodedChunks = [];
+    const matches = content.match(BASE64_CANDIDATE_RE);
+    if (!matches)
+        return null;
+    for (const token of matches) {
+        if (appended >= MAX_DECODED_BYTES)
+            break;
+        // URL-safe → standard alphabet so atob accepts it.
+        const standard = token.replace(/-/g, '+').replace(/_/g, '/');
+        // atob is strict about length and padding; tolerate a missing pad.
+        const padNeeded = (4 - (standard.length % 4)) % 4;
+        const padded = standard + '='.repeat(padNeeded);
+        let decoded;
+        try {
+            // `Buffer` is the Node-only path; ATOB-equivalent. Wrap defensively
+            // because adversarial inputs can throw on invalid base64.
+            decoded = Buffer.from(padded, 'base64').toString('utf8');
+        }
+        catch {
+            continue;
+        }
+        if (!looksDecodable(decoded))
+            continue;
+        const slice = decoded.slice(0, MAX_DECODED_BYTES - appended);
+        decodedChunks.push(slice);
+        appended += slice.length;
+    }
+    if (decodedChunks.length === 0)
+        return null;
+    // Return original + a synthetic separator + decoded payload. The separator
+    // is intentionally human-readable so any operator inspecting the
+    // assessment's `reasons` can tell what triggered the match.
+    return `${content}\n[raksha:base64-decoded]\n${decodedChunks.join('\n')}`;
+}
+/**
+ * Default detector — the ensemble that Raksha uses if the caller did
+ * not supply one. Exported so callers can compose with their own
+ * detectors via `EnsembleHallucinationDetector`.
+ */
+function defaultHallucinationDetector() {
+    return new hallucination_detectors_1.EnsembleHallucinationDetector([
+        { detector: new hallucination_detectors_1.AbstentionDetector(), weight: 1 },
+        { detector: new hallucination_detectors_1.BestOfNInconsistencyDetector(), weight: 1 },
+        { detector: new hallucination_detectors_1.ClaimLevelDetector(), weight: 1 },
+    ]);
+}
+function defaultPromptInjectionDetector() {
+    return new prompt_injection_detectors_1.EnsemblePromptInjectionDetector([
+        new prompt_injection_detectors_1.RuleBasedPromptInjectionDetector(THREAT_PATTERNS),
+        new prompt_injection_detectors_1.SemanticIntentPromptInjectionDetector(),
+    ]);
+}
+class Raksha {
+    policy;
+    assessments = [];
+    events = [];
+    hallucinationDetector;
+    promptInjectionDetector;
+    classifiers;
+    constructor(policy = {}, options = {}) {
+        this.policy = this.validatePolicy({ ...types_1.DEFAULT_DEFENSE_POLICY, ...policy });
+        this.hallucinationDetector = options.hallucinationDetector ?? defaultHallucinationDetector();
+        this.promptInjectionDetector = options.promptInjectionDetector ?? defaultPromptInjectionDetector();
+        this.classifiers = options.classifiers ?? [];
+    }
+    /**
+     * Name of the configured hallucination detector. Useful for telemetry
+     * and report stamping so operators know which detector produced the
+     * `riskScore` they're seeing.
+     */
+    getHallucinationDetectorName() {
+        return this.hallucinationDetector.name;
+    }
+    getPromptInjectionDetectorName() {
+        return this.promptInjectionDetector.name;
+    }
+    /**
+     * Score an agent's **output** for hallucination risk, optionally
+     * grounded in retrieved context and/or compared against alternative
+     * samples of the same prompt. Returns the detector's assessment with
+     * a wrapper that:
+     *   - guards against thrown errors (detectors are expected not to
+     *     throw, but we defence-in-depth);
+     *   - emits a `hallucination_detected` Pulse event when risk is high
+     *     AND confidence is non-trivial (so we don't emit noise for
+     *     no-signal calls).
+     *
+     * The emission threshold is the same `warnThreshold` Raksha uses for
+     * input-side prompt-injection assessments, for consistency.
+     */
+    async detectHallucination(input, opts = {}) {
+        let assessment;
+        try {
+            assessment = await this.hallucinationDetector.detect(input);
+        }
+        catch (err) {
+            // Contract says detectors must not throw, but if one does the
+            // wrapper returns a zero-risk, zero-confidence assessment so a
+            // bad detector cannot crash the agent's pipeline.
+            const msg = err instanceof Error ? err.message : String(err);
+            assessment = {
+                riskScore: 0,
+                confidence: 0,
+                detectedBy: `${this.hallucinationDetector.name}/threw`,
+                reasons: [`Detector threw: ${msg}. Treating as no-signal.`],
+            };
+        }
+        let event;
+        if (assessment.riskScore >= this.policy.warnThreshold &&
+            assessment.confidence >= 0.2 &&
+            !assessment.abstention) {
+            event = {
+                id: eventId(),
+                eventType: 'hallucination_detected',
+                agentId: opts.agentId ?? 'unknown-agent',
+                timestamp: now(),
+                severity: assessment.riskScore >= this.policy.quarantineThreshold ? 'critical' : 'warning',
+                detectedBy: 'raksha',
+                details: {
+                    detector: assessment.detectedBy,
+                    riskScore: assessment.riskScore,
+                    confidence: assessment.confidence,
+                    reasons: assessment.reasons,
+                    claimCount: assessment.claims?.length ?? 0,
+                },
+                recommendedAction: 'Inspect the output for unsupported claims. Consider re-prompting with stricter grounding instructions, or routing to a stronger model.',
+            };
+            this.events.push(event);
+            this.enforceRetention();
+        }
+        return { assessment, event };
+    }
+    validatePolicy(policy) {
+        const finite = (v) => typeof v === 'number' && Number.isFinite(v);
+        if (!finite(policy.quarantineThreshold) || policy.quarantineThreshold < 0 || policy.quarantineThreshold > 1) {
+            throw new Error('Raksha: quarantineThreshold must be a finite number in [0,1]');
+        }
+        if (!finite(policy.warnThreshold) || policy.warnThreshold < 0 || policy.warnThreshold > 1) {
+            throw new Error('Raksha: warnThreshold must be a finite number in [0,1]');
+        }
+        if (policy.maxAssessments !== undefined && (!Number.isInteger(policy.maxAssessments) || policy.maxAssessments < 0)) {
+            throw new Error('Raksha: maxAssessments must be a non-negative integer if set');
+        }
+        if (policy.maxEvents !== undefined && (!Number.isInteger(policy.maxEvents) || policy.maxEvents < 0)) {
+            throw new Error('Raksha: maxEvents must be a non-negative integer if set');
+        }
+        return policy;
+    }
+    enforceRetention() {
+        const assessmentCap = this.policy.maxAssessments ?? 0;
+        if (assessmentCap > 0 && this.assessments.length > assessmentCap) {
+            this.assessments.splice(0, this.assessments.length - assessmentCap);
+        }
+        const eventCap = this.policy.maxEvents ?? 0;
+        if (eventCap > 0 && this.events.length > eventCap) {
+            this.events.splice(0, this.events.length - eventCap);
+        }
+    }
+    /**
+     * Pure threat-scan: scores an item and returns the assessment (plus a quarantine
+     * event if applicable). Does NOT touch internal state. Use this for read-only
+     * checks like MCP `ojas_scan_for_injection` so that simply evaluating
+     * candidate content never pollutes defense health.
+     *
+     * Bypass-reduction pipeline applied before regex matching:
+     *   1. `normalizeForScan(content)` — NFKC + zero-width strip + homoglyph fold.
+     *      Catches `іgnore previous instructions` (Cyrillic), `i\u200Bgnore`,
+     *      and full-width "ＩＧＮＯＲＥ".
+     *   2. `expandBase64(normalized)` — decodes base64-looking tokens once
+     *      (non-recursive, bounded) and concatenates the decoded text for a
+     *      second-pass scan. Catches the canonical
+     *      `aWdub3JlIHByZXZpb3VzIGluc3RydWN0aW9ucw==` bypass.
+     *
+     * Detection is a deterministic detector stack, not a security boundary.
+     * See `docs/KNOWN_FAILURES.md` for what remains (indirect, multi-turn,
+     * and novel semantic injection outside the current detector rules).
+     */
+    scanItem(item, opts = {}) {
+        // Build the scan target by layering normalizations + a one-shot base64 expansion.
+        const normalized = normalizeForScan(item.content);
+        const expanded = expandBase64(normalized);
+        const scanTarget = expanded ?? normalized;
+        const detected = this.promptInjectionDetector.detect({
+            item,
+            normalizedContent: normalized,
+            expandedContent: expanded ?? undefined,
+            scanTarget,
+        });
+        let riskScore = detected.riskScore;
+        const reasons = [...detected.reasons];
+        const threatType = detected.threatType;
+        if (item.trustScore !== undefined && item.trustScore < 0.3) {
+            riskScore += 0.2;
+            reasons.push('Source trust is very low.');
+        }
+        if (item.source === 'tool' || item.source === 'retrieval') {
+            riskScore += 0.05;
+        }
+        const assessment = {
+            itemId: item.id,
+            threatType,
+            riskScore: clamp(riskScore),
+            quarantined: riskScore >= this.policy.quarantineThreshold,
+            reasons,
+            detectedBy: detected.detectedBy,
+        };
+        let event;
+        if (assessment.quarantined) {
+            const agentId = opts.agentId ?? (typeof item.metadata?.agentId === 'string' ? item.metadata.agentId : 'unknown-agent');
+            event = {
+                id: eventId(),
+                eventType: 'prompt_injection_quarantined',
+                agentId,
+                timestamp: now(),
+                severity: 'critical',
+                detectedBy: 'raksha',
+                details: {
+                    itemId: item.id,
+                    source: item.source,
+                    threatType: assessment.threatType,
+                    riskScore: assessment.riskScore,
+                    reasons: assessment.reasons,
+                },
+                recommendedAction: 'Quarantine item from context and block memory promotion.',
+            };
+        }
+        return { assessment, event };
+    }
+    /**
+     * Async variant of `scanItem` that also runs any configured ML classifiers.
+     * The final riskScore is the max of the deterministic detector score and
+     * the highest classifier probability. Quarantine is re-evaluated after
+     * the merge so a classifier can elevate a below-threshold item into
+     * quarantine.
+     */
+    async scanItemAsync(item, opts = {}) {
+        const result = this.scanItem(item, opts);
+        if (this.classifiers.length === 0)
+            return result;
+        const text = item.content;
+        const classifierResults = await Promise.all(this.classifiers.map((c) => c.classify(text, opts.signal).catch(() => ({
+            injectionProbability: 0,
+            label: 'unknown',
+        }))));
+        let maxProb = 0;
+        let classifierName;
+        for (let i = 0; i < classifierResults.length; i++) {
+            if (classifierResults[i].injectionProbability > maxProb) {
+                maxProb = classifierResults[i].injectionProbability;
+                classifierName = this.classifiers[i].name;
+            }
+        }
+        if (maxProb > result.assessment.riskScore) {
+            result.assessment.riskScore = clamp(maxProb);
+            result.assessment.reasons.push(`Classifier '${classifierName}' scored ${maxProb.toFixed(3)} injection probability.`);
+            result.assessment.detectedBy = result.assessment.detectedBy
+                ? `${result.assessment.detectedBy}+${classifierName}`
+                : classifierName;
+            result.assessment.quarantined = result.assessment.riskScore >= this.policy.quarantineThreshold;
+            if (result.assessment.quarantined && !result.event) {
+                const agentId = opts.agentId ?? (typeof item.metadata?.agentId === 'string' ? item.metadata.agentId : 'unknown-agent');
+                result.event = {
+                    id: eventId(),
+                    eventType: 'prompt_injection_quarantined',
+                    agentId,
+                    timestamp: now(),
+                    severity: 'critical',
+                    detectedBy: 'raksha',
+                    details: {
+                        itemId: item.id,
+                        source: item.source,
+                        threatType: result.assessment.threatType,
+                        riskScore: result.assessment.riskScore,
+                        reasons: result.assessment.reasons,
+                    },
+                    recommendedAction: 'Quarantine item from context and block memory promotion.',
+                };
+            }
+        }
+        return result;
+    }
+    /** Whether this Raksha instance has async classifiers configured. */
+    hasClassifiers() {
+        return this.classifiers.length > 0;
+    }
+    /**
+     * Recording variant: scans the item AND appends the assessment (and any event)
+     * to internal state so it contributes to future defense health. Use this when
+     * the scan represents real agent intake; use `scanItem` for read-only checks.
+     */
+    assessItem(item, opts = {}) {
+        const { assessment, event } = this.scanItem(item, opts);
+        this.assessments.push(assessment);
+        if (event)
+            this.events.push(event);
+        this.enforceRetention();
+        return assessment;
+    }
+    /**
+     * Async recording variant used when classifiers are configured.
+     */
+    async assessItemAsync(item, opts = {}) {
+        const { assessment, event } = await this.scanItemAsync(item, opts);
+        this.assessments.push(assessment);
+        if (event)
+            this.events.push(event);
+        this.enforceRetention();
+        return assessment;
+    }
+    defendContext(items, opts = {}) {
+        const safe = [];
+        const quarantined = [];
+        const assessments = [];
+        const events = [];
+        for (const item of items) {
+            const { assessment, event } = this.scanItem(item, opts);
+            this.assessments.push(assessment);
+            assessments.push(assessment);
+            if (event) {
+                this.events.push(event);
+                events.push(event);
+            }
+            if (assessment.quarantined) {
+                quarantined.push(item);
+            }
+            else {
+                safe.push(item);
+            }
+        }
+        this.enforceRetention();
+        return { safe, quarantined, assessments, events };
+    }
+    /**
+     * Async version of `defendContext` that runs ML classifiers on each item.
+     */
+    async defendContextAsync(items, opts = {}) {
+        const safe = [];
+        const quarantined = [];
+        const assessments = [];
+        const events = [];
+        for (const item of items) {
+            const { assessment, event } = await this.scanItemAsync(item, opts);
+            this.assessments.push(assessment);
+            assessments.push(assessment);
+            if (event) {
+                this.events.push(event);
+                events.push(event);
+            }
+            if (assessment.quarantined) {
+                quarantined.push(item);
+            }
+            else {
+                safe.push(item);
+            }
+        }
+        this.enforceRetention();
+        return { safe, quarantined, assessments, events };
+    }
+    assess() {
+        const recent = this.assessments.slice(-100);
+        const threatsDetected = recent.filter((assessment) => assessment.riskScore >= this.policy.warnThreshold).length;
+        const quarantinedItems = recent.filter((assessment) => assessment.quarantined).length;
+        const quarantineEffectiveness = threatsDetected > 0 ? quarantinedItems / threatsDetected : 1;
+        // threatResistance reflects RESIDUAL risk — risk that slipped past
+        // quarantine into agent-visible context. Dividing by recent.length (the
+        // previous formula) diluted the signal: 99 successful quarantines + 1
+        // dangerous miss would still look ~99% healthy. We now divide by the
+        // count of items that actually reached the agent (i.e. were not
+        // quarantined), so a single high-risk leak materially drops the score.
+        const accepted = recent.filter((a) => !a.quarantined);
+        const residualRisk = accepted.length === 0
+            ? 0
+            : accepted.reduce((sum, a) => sum + a.riskScore, 0) / accepted.length;
+        return {
+            threatResistance: healthScore(1 - residualRisk, 'raksha.threatResistance'),
+            instructionIntegrity: healthScore(this.policy.protectInstructionHierarchy ? 1 : 0.5, 'raksha.instructionIntegrity'),
+            quarantineEffectiveness: healthScore(quarantineEffectiveness, 'raksha.quarantineEffectiveness'),
+            threatsDetected,
+            quarantinedItems,
+        };
+    }
+    recommend() {
+        const health = this.assess();
+        const recs = [];
+        if (health.quarantinedItems > 0) {
+            recs.push({
+                module: 'raksha',
+                severity: 'critical',
+                message: `${health.quarantinedItems} suspicious cognitive inputs quarantined.`,
+                action: 'Review quarantined items and verify retrieval/tool sources.',
+            });
+        }
+        if (health.threatResistance.value < 0.7) {
+            recs.push({
+                module: 'raksha',
+                severity: 'warning',
+                message: 'Threat resistance is degraded.',
+                action: 'Tighten trust thresholds and inspect untrusted context sources.',
+            });
+        }
+        if (recs.length === 0) {
+            recs.push({ module: 'raksha', severity: 'info', message: 'Immune defense is stable.' });
+        }
+        return recs;
+    }
+    getEvents() {
+        return this.events.map((e) => ({ ...e, details: { ...e.details } }));
+    }
+    getAssessments() {
+        return this.assessments.map((a) => ({ ...a, reasons: [...a.reasons] }));
+    }
+    exportState() {
+        return {
+            events: [...this.getEvents()],
+            assessments: [...this.getAssessments()],
+        };
+    }
+    importState(snapshot) {
+        if (!snapshot)
+            return;
+        this.events = (snapshot.events ?? []).map((e) => ({ ...e, details: { ...e.details } }));
+        this.assessments = (snapshot.assessments ?? []).map((a) => ({ ...a, reasons: [...a.reasons] }));
+    }
+    getPolicy() {
+        return { ...this.policy };
+    }
+    updatePolicy(updates) {
+        this.policy = this.validatePolicy({ ...this.policy, ...updates });
+        this.enforceRetention();
+    }
+}
+exports.Raksha = Raksha;
+//# sourceMappingURL=index.js.map

package/dist/raksha/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/raksha/index.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAyJH,4CAWC;AAgCD,oCAgCC;AAoCD,oEAMC;AAED,wEAKC;AAnRD,oCAekB;AAElB,uEAKmC;AACnC,6EAIsC;AACtC,mCAAmC;AAEnC,SAAS,GAAG;IACV,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,KAAK,CAAC,CAAS,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,MAAc;IAChD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,OAAO;IACd,OAAO,IAAA,UAAK,EAAC,QAAQ,CAAC,CAAC;AACzB,CAAC;AASD,MAAM,eAAe,GAAoB;IACvC,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,0fAA0f,EAAE,MAAM,EAAE,mEAAmE,EAAE;IAChoB,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,2VAA2V,EAAE,MAAM,EAAE,kDAAkD,EAAE;IAC5c,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,2EAA2E,EAAE,MAAM,EAAE,yCAAyC,EAAE;IACnL,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,wOAAwO,EAAE,MAAM,EAAE,yEAAyE,EAAE;IAC/W,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,kKAAkK,EAAE,MAAM,EAAE,2EAA2E,EAAE;IAC5S,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,4EAA4E,EAAE,MAAM,EAAE,8EAA8E,EAAE;IACzN,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,6FAA6F,EAAE,MAAM,EAAE,4DAA4D,EAAE;IACxN,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,uIAAuI,EAAE,MAAM,EAAE,0EAA0E,EAAE;IAChR,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,uEAAuE,EAAE,MAAM,EAAE,mDAAmD,EAAE;IACxL,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,wGAAwG,EAAE,MAAM,EAAE,8BAA8B,EAAE;IACpM,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,wUAAwU,EAAE,MAAM,EAAE,wDAAwD,EAAE;IAChc,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,kOAAkO,EAAE,MAAM,EAAE,+CAA+C,EAAE;IAChV,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,2NAA2N,EAAE,MAAM,EAAE,4DAA4D,EAAE;IACtV,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,kPAAkP,EAAE,MAAM,EAAE,iDAAiD,EAAE;IAC/V,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,kPAAkP,EAAE,MAAM,EAAE,iDAAiD,EAAE;IAC/V,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,qJAAqJ,EAAE,MAAM,EAAE,kCAAkC,EAAE;IACjP,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,+KAA+K,EAAE,MAAM,EAAE,wCAAwC,EAAE;IAChR,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,oRAAoR,EAAE,MAAM,EAAE,yCAAyC,EAAE;IAC3X,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,8nBAA8nB,EAAE,MAAM,EAAE,gFAAgF,EAAE;IAC5wB,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,gOAAgO,EAAE,MAAM,EAAE,yDAAyD,EAAE;IACvV,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,qIAAqI,EAAE,MAAM,EAAE,uCAAuC,EAAE;CACtO,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,0HAA0H;AAC1H,MAAM,aAAa,GAAG,gDAAgD,CAAC;AAEvE;;;;;;;;GAQG;AACH,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAE1D;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,aAAa,GAA2B;IAC5C,6BAA6B;IAC7B,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG;IACzE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG;IACzE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG;IAC3C,6BAA6B;IAC7B,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG;IACzE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG;IACzE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG;IAC1D,gBAAgB;IAChB,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG;CAC3D,CAAC;AAEF,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,yBAAyB,CAAC,CAAS;IAC1C,OAAO,CAAC;SACL,OAAO,CAAC,gCAAgC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SAC7E,OAAO,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC;AAED,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,2EAA2E;IAC3E,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClC,gDAAgD;IAChD,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IACjC,iEAAiE;IACjE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACtB,mEAAmE;IACnE,6CAA6C;IAC7C,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC;AACnC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACnC,sCAAsC;QACtC,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5E,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC;AAC3D,CAAC;AAED,SAAgB,YAAY,CAAC,OAAe;IAC1C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,QAAQ,IAAI,iBAAiB;YAAE,MAAM;QACzC,mDAAmD;QACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7D,mEAAmE;QACnE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,oEAAoE;YACpE,0DAA0D;YAC1D,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAAE,SAAS;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,GAAG,QAAQ,CAAC,CAAC;QAC7D,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,2EAA2E;IAC3E,iEAAiE;IACjE,4DAA4D;IAC5D,OAAO,GAAG,OAAO,8BAA8B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5E,CAAC;AA+BD;;;;GAIG;AACH,SAAgB,4BAA4B;IAC1C,OAAO,IAAI,uDAA6B,CAAC;QACvC,EAAE,QAAQ,EAAE,IAAI,4CAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;QACjD,EAAE,QAAQ,EAAE,IAAI,sDAA4B,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;QAC3D,EAAE,QAAQ,EAAE,IAAI,4CAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE;KAClD,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,8BAA8B;IAC5C,OAAO,IAAI,4DAA+B,CAAC;QACzC,IAAI,6DAAgC,CAAC,eAAe,CAAC;QACrD,IAAI,kEAAqC,EAAE;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,MAAa,MAAM;IACT,MAAM,CAAgB;IACtB,WAAW,GAAuB,EAAE,CAAC;IACrC,MAAM,GAAkB,EAAE,CAAC;IAClB,qBAAqB,CAAwB;IAC7C,uBAAuB,CAA0B;IACjD,WAAW,CAA8B;IAE1D,YAAY,SAAiC,EAAE,EAAE,UAAyB,EAAE;QAC1E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,8BAAsB,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,4BAA4B,EAAE,CAAC;QAC7F,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,8BAA8B,EAAE,CAAC;QACnG,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC/C,CAAC;IAED;;;;OAIG;IACH,4BAA4B;QAC1B,OAAO,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC;IACzC,CAAC;IAED,8BAA8B;QAC5B,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,mBAAmB,CACvB,KAAiC,EACjC,OAA6B,EAAE;QAE/B,IAAI,UAAmC,CAAC;QACxC,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8DAA8D;YAC9D,+DAA+D;YAC/D,kDAAkD;YAClD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,UAAU,GAAG;gBACX,SAAS,EAAE,CAAC;gBACZ,UAAU,EAAE,CAAC;gBACb,UAAU,EAAE,GAAG,IAAI,CAAC,qBAAqB,CAAC,IAAI,QAAQ;gBACtD,OAAO,EAAE,CAAC,mBAAmB,GAAG,0BAA0B,CAAC;aAC5D,CAAC;QACJ,CAAC;QAED,IAAI,KAA8B,CAAC;QACnC,IACE,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa;YACjD,UAAU,CAAC,UAAU,IAAI,GAAG;YAC5B,CAAC,UAAU,CAAC,UAAU,EACtB,CAAC;YACD,KAAK,GAAG;gBACN,EAAE,EAAE,OAAO,EAAE;gBACb,SAAS,EAAE,wBAAwB;gBACnC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,eAAe;gBACxC,SAAS,EAAE,GAAG,EAAE;gBAChB,QAAQ,EAAE,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBAC1F,UAAU,EAAE,QAAQ;gBACpB,OAAO,EAAE;oBACP,QAAQ,EAAE,UAAU,CAAC,UAAU;oBAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,OAAO,EAAE,UAAU,CAAC,OAAO;oBAC3B,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC;iBAC3C;gBACD,iBAAiB,EACf,wIAAwI;aAC3I,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IAEO,cAAc,CAAC,MAAqB;QAC1C,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC,mBAAmB,GAAG,CAAC,IAAI,MAAM,CAAC,mBAAmB,GAAG,CAAC,EAAE,CAAC;YAC5G,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAC1F,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC,EAAE,CAAC;YACnH,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,gBAAgB;QACtB,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QACtD,IAAI,aAAa,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YACjE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QAC5C,IAAI,QAAQ,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,QAAQ,CAAC,IAAiB,EAAE,OAA6B,EAAE;QACzD,kFAAkF;QAClF,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,QAAQ,IAAI,UAAU,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC;YACnD,IAAI;YACJ,iBAAiB,EAAE,UAAU;YAC7B,eAAe,EAAE,QAAQ,IAAI,SAAS;YACtC,UAAU;SACX,CAAC,CAAC;QAEH,IAAI,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;QACnC,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,UAAU,GAAe,QAAQ,CAAC,UAAU,CAAC;QAEnD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YAC3D,SAAS,IAAI,GAAG,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC1D,SAAS,IAAI,IAAI,CAAC;QACpB,CAAC;QAED,MAAM,UAAU,GAAqB;YACnC,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,UAAU;YACV,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC;YAC3B,WAAW,EAAE,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB;YACzD,OAAO;YACP,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC,CAAC;QAEF,IAAI,KAA8B,CAAC;QACnC,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YACvH,KAAK,GAAG;gBACN,EAAE,EAAE,OAAO,EAAE;gBACb,SAAS,EAAE,8BAA8B;gBACzC,OAAO;gBACP,SAAS,EAAE,GAAG,EAAE;gBAChB,QAAQ,EAAE,UAAU;gBACpB,UAAU,EAAE,QAAQ;gBACpB,OAAO,EAAE;oBACP,MAAM,EAAE,IAAI,CAAC,EAAE;oBACf,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,UAAU,EAAE,UAAU,CAAC,UAAU;oBACjC,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;iBAC5B;gBACD,iBAAiB,EAAE,0DAA0D;aAC9E,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,IAAiB,EACjB,OAAmD,EAAE;QAErD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QAEjD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CACzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzB,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;YACzC,oBAAoB,EAAE,CAAC;YACvB,KAAK,EAAE,SAAkB;SAC1B,CAAC,CAAC,CACJ,CACF,CAAC;QAEF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,cAAkC,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,oBAAoB,GAAG,OAAO,EAAE,CAAC;gBACxD,OAAO,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;gBACpD,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,IAAI,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,CAAC,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAC5B,eAAe,cAAc,YAAY,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CACrF,CAAC;YACF,MAAM,CAAC,UAAU,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU;gBACzD,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,IAAI,cAAc,EAAE;gBACrD,CAAC,CAAC,cAAc,CAAC;YACnB,MAAM,CAAC,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;YAE/F,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACnD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;gBACvH,MAAM,CAAC,KAAK,GAAG;oBACb,EAAE,EAAE,OAAO,EAAE;oBACb,SAAS,EAAE,8BAA8B;oBACzC,OAAO;oBACP,SAAS,EAAE,GAAG,EAAE;oBAChB,QAAQ,EAAE,UAAU;oBACpB,UAAU,EAAE,QAAQ;oBACpB,OAAO,EAAE;wBACP,MAAM,EAAE,IAAI,CAAC,EAAE;wBACf,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU;wBACxC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS;wBACtC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO;qBACnC;oBACD,iBAAiB,EAAE,0DAA0D;iBAC9E,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qEAAqE;IACrE,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,IAAiB,EAAE,OAA6B,EAAE;QAC3D,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,IAAiB,EAAE,OAAmD,EAAE;QAC5F,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,aAAa,CACX,KAAoB,EACpB,OAA6B,EAAE;QAE/B,MAAM,IAAI,GAAkB,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAkB,EAAE,CAAC;QACtC,MAAM,WAAW,GAAuB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAkB,EAAE,CAAC;QAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACxD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7B,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,KAAoB,EACpB,OAAmD,EAAE;QAErD,MAAM,IAAI,GAAkB,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAkB,EAAE,CAAC;QACtC,MAAM,WAAW,GAAuB,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAkB,EAAE,CAAC;QAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACnE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7B,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;YACD,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;gBAC3B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IACpD,CAAC;IAED,MAAM;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC;QAChH,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;QACtF,MAAM,uBAAuB,GAAG,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7F,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,qEAAqE;QACrE,gEAAgE;QAChE,uEAAuE;QACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC;YACxC,CAAC,CAAC,CAAC;YACH,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;QAExE,OAAO;YACL,gBAAgB,EAAE,WAAW,CAAC,CAAC,GAAG,YAAY,EAAE,yBAAyB,CAAC;YAC1E,oBAAoB,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,6BAA6B,CAAC;YACnH,uBAAuB,EAAE,WAAW,CAAC,uBAAuB,EAAE,gCAAgC,CAAC;YAC/F,eAAe;YACf,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED,SAAS;QACP,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,IAAI,GAA2B,EAAE,CAAC;QAExC,IAAI,MAAM,CAAC,gBAAgB,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC;gBACR,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,UAAU;gBACpB,OAAO,EAAE,GAAG,MAAM,CAAC,gBAAgB,2CAA2C;gBAC9E,MAAM,EAAE,6DAA6D;aACtE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,gBAAgB,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC;gBACR,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,gCAAgC;gBACzC,MAAM,EAAE,iEAAiE;aAC1E,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,WAAW;QACT,OAAO;YACL,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YAC7B,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;SACxC,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,QAAkD;QAC5D,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,IAAI,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACxF,IAAI,CAAC,WAAW,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,YAAY,CAAC,OAA+B;QAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;CACF;AApbD,wBAobC"}