@cdot65/prisma-airs-cli 2.6.1 → 2.8.0

package/dist/dlp/embed/pdf.js

@@ -0,0 +1,92 @@
+import { inflateSync } from 'node:zlib';
+import { PDFDocument, rgb } from 'pdf-lib';
+const join = (p) => p.map((v) => `${v.category}: ${v.value}`).join(' | ');
+async function setMeta(clean, p) {
+    const doc = await PDFDocument.load(clean);
+    doc.setTitle(join(p));
+    doc.setSubject(join(p));
+    doc.setKeywords(p.map((v) => v.value));
+    doc.setAuthor(p.find((v) => v.category === 'email')?.value ?? 'synthetic');
+    return Buffer.from(await doc.save());
+}
+// "Hidden" text layer: drawn in white so it does not show on a white page, but the
+// literal string remains in the (uncompressed) page content stream. pdf-lib does not
+// expose text render-mode 3, so white-on-white is the chosen, reliably-verifiable approach.
+async function hiddenText(clean, p) {
+    const doc = await PDFDocument.load(clean);
+    const page = doc.getPage(0);
+    let y = 760;
+    for (const v of p) {
+        page.drawText(`${v.category}: ${v.value}`, { x: 40, y, size: 6, color: rgb(1, 1, 1) });
+        y -= 8;
+    }
+    return Buffer.from(await doc.save());
+}
+const trailer = (clean, p) => Buffer.concat([clean, Buffer.from(`\n% DLP ${join(p)}\n`, 'utf8')]);
+/** Recover text from all PDF streams (inflating FlateDecode streams; falling back to raw). */
+export function pdfStreamText(pdf) {
+    const parts = [];
+    let idx = 0;
+    for (;;) {
+        const s = pdf.indexOf('stream', idx);
+        if (s < 0) {
+            break;
+        }
+        let dataStart = s + 6;
+        if (pdf[dataStart] === 0x0d) {
+            dataStart++;
+        }
+        if (pdf[dataStart] === 0x0a) {
+            dataStart++;
+        }
+        const e = pdf.indexOf('endstream', dataStart);
+        if (e < 0) {
+            break;
+        }
+        const raw = pdf.subarray(dataStart, e);
+        try {
+            parts.push(inflateSync(raw).toString('latin1'));
+        }
+        catch {
+            parts.push(raw.toString('latin1'));
+        }
+        idx = e + 9;
+    }
+    const combined = parts.join('\n');
+    // pdf-lib renders drawn text as PDF hex strings (<...>); decode them too.
+    const decoded = [combined];
+    for (const m of combined.matchAll(/<([0-9A-Fa-f]+)>/g)) {
+        if (m[1].length % 2 === 0) {
+            decoded.push(Buffer.from(m[1], 'hex').toString('latin1'));
+        }
+    }
+    return decoded.join('\n');
+}
+/** Recover document-info-dict metadata from a PDF. */
+export async function pdfMetaExtract(pdf) {
+    const doc = await PDFDocument.load(pdf);
+    return [doc.getTitle(), doc.getSubject(), doc.getAuthor(), doc.getKeywords()]
+        .filter((v) => typeof v === 'string')
+        .join('\n');
+}
+export const pdfTechniques = {
+    meta: {
+        id: 'meta',
+        format: 'pdf',
+        label: 'document info dict',
+        embed: (c, p) => setMeta(c, p),
+    },
+    'hidden-text': {
+        id: 'hidden-text',
+        format: 'pdf',
+        label: 'white (hidden) text layer',
+        embed: (c, p) => hiddenText(c, p),
+    },
+    trailer: {
+        id: 'trailer',
+        format: 'pdf',
+        label: 'bytes after %%EOF',
+        embed: (c, p) => trailer(c, p),
+    },
+};
+//# sourceMappingURL=pdf.js.map

package/dist/dlp/embed/pdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf.js","sourceRoot":"","sources":["../../../src/dlp/embed/pdf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAG3C,MAAM,IAAI,GAAG,CAAC,CAAiB,EAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAElG,KAAK,UAAU,OAAO,CAAC,KAAa,EAAE,CAAiB;IACrD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACvC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,KAAK,IAAI,WAAW,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,mFAAmF;AACnF,qFAAqF;AACrF,4FAA4F;AAC5F,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,CAAiB;IACxD,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,GAAG,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,CAAiB,EAAU,EAAE,CAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAEtE,8FAA8F;AAC9F,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,SAAS,CAAC;QACR,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,MAAM;QACR,CAAC;QACD,IAAI,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,SAAS,EAAE,CAAC;QACd,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5B,SAAS,EAAE,CAAC;QACd,CAAC;QACD,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,MAAM;QACR,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrC,CAAC;QACD,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,0EAA0E;IAC1E,MAAM,OAAO,GAAa,CAAC,QAAQ,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW;IAC9C,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;SAC1E,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;SACjD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAA8B;IACtD,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM;QACV,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;KAC/B;IACD,aAAa,EAAE;QACb,EAAE,EAAE,aAAa;QACjB,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,2BAA2B;QAClC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;KAClC;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,mBAAmB;QAC1B,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;KAC/B;CACF,CAAC"}

package/dist/dlp/embed/png-chunks.d.ts

@@ -0,0 +1,12 @@
+export interface Chunk {
+    type: string;
+    data: Buffer;
+}
+export declare function parseChunks(png: Buffer): Chunk[];
+export declare function insertBeforeIEND(png: Buffer, extra: Buffer): Buffer;
+export declare const tEXt: (keyword: string, text: string) => Buffer;
+export declare const zTXt: (keyword: string, text: string) => Buffer;
+export declare const iTXt: (keyword: string, text: string) => Buffer;
+/** Recover all textual-chunk content (tEXt/zTXt/iTXt) as a single string. */
+export declare function readTextChunks(png: Buffer): string;
+//# sourceMappingURL=png-chunks.d.ts.map

package/dist/dlp/embed/png-chunks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"png-chunks.d.ts","sourceRoot":"","sources":["../../../src/dlp/embed/png-chunks.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,EAAE,CAahD;AAWD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAWnE;AAED,eAAO,MAAM,IAAI,GAAI,SAAS,MAAM,EAAE,MAAM,MAAM,KAAG,MAIlD,CAAC;AAEJ,eAAO,MAAM,IAAI,GAAI,SAAS,MAAM,EAAE,MAAM,MAAM,KAAG,MAQlD,CAAC;AAEJ,eAAO,MAAM,IAAI,GAAI,SAAS,MAAM,EAAE,MAAM,MAAM,KAAG,MAQlD,CAAC;AAEJ,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgBlD"}

package/dist/dlp/embed/png-chunks.js

@@ -0,0 +1,85 @@
+import { deflateSync, inflateSync } from 'node:zlib';
+const CRC_TABLE = (() => {
+    const t = new Uint32Array(256);
+    for (let n = 0; n < 256; n++) {
+        let c = n;
+        for (let k = 0; k < 8; k++) {
+            c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;
+        }
+        t[n] = c >>> 0;
+    }
+    return t;
+})();
+function crc32(buf) {
+    let c = 0xffffffff;
+    for (let i = 0; i < buf.length; i++) {
+        c = CRC_TABLE[(c ^ buf[i]) & 0xff] ^ (c >>> 8);
+    }
+    return (c ^ 0xffffffff) >>> 0;
+}
+export function parseChunks(png) {
+    const chunks = [];
+    let off = 8;
+    while (off + 8 <= png.length) {
+        const len = png.readUInt32BE(off);
+        const type = png.toString('latin1', off + 4, off + 8);
+        chunks.push({ type, data: png.subarray(off + 8, off + 8 + len) });
+        off += 12 + len;
+        if (type === 'IEND') {
+            break;
+        }
+    }
+    return chunks;
+}
+function buildChunk(type, data) {
+    const len = Buffer.alloc(4);
+    len.writeUInt32BE(data.length, 0);
+    const typeBuf = Buffer.from(type, 'latin1');
+    const crc = Buffer.alloc(4);
+    crc.writeUInt32BE(crc32(Buffer.concat([typeBuf, data])), 0);
+    return Buffer.concat([len, typeBuf, data, crc]);
+}
+export function insertBeforeIEND(png, extra) {
+    let off = 8;
+    while (off + 8 <= png.length) {
+        const len = png.readUInt32BE(off);
+        const type = png.toString('latin1', off + 4, off + 8);
+        if (type === 'IEND') {
+            break;
+        }
+        off += 12 + len;
+    }
+    return Buffer.concat([png.subarray(0, off), extra, png.subarray(off)]);
+}
+export const tEXt = (keyword, text) => buildChunk('tEXt', Buffer.concat([Buffer.from(keyword, 'latin1'), Buffer.from([0]), Buffer.from(text, 'latin1')]));
+export const zTXt = (keyword, text) => buildChunk('zTXt', Buffer.concat([
+    Buffer.from(keyword, 'latin1'),
+    Buffer.from([0, 0]),
+    deflateSync(Buffer.from(text, 'latin1')),
+]));
+export const iTXt = (keyword, text) => buildChunk('iTXt', Buffer.concat([
+    Buffer.from(keyword, 'latin1'),
+    Buffer.from([0, 0, 0, 0, 0]),
+    Buffer.from(text, 'utf8'),
+]));
+/** Recover all textual-chunk content (tEXt/zTXt/iTXt) as a single string. */
+export function readTextChunks(png) {
+    const parts = [];
+    for (const ch of parseChunks(png)) {
+        if (ch.type === 'tEXt') {
+            parts.push(ch.data.toString('latin1'));
+        }
+        else if (ch.type === 'zTXt') {
+            const nul = ch.data.indexOf(0);
+            parts.push(inflateSync(ch.data.subarray(nul + 2)).toString('latin1'));
+        }
+        else if (ch.type === 'iTXt') {
+            let i = ch.data.indexOf(0) + 3; // after keyword\0 + compFlag + compMethod
+            i = ch.data.indexOf(0, i) + 1; // after language tag
+            i = ch.data.indexOf(0, i) + 1; // after translated keyword
+            parts.push(ch.data.subarray(i).toString('utf8'));
+        }
+    }
+    return parts.join('\n');
+}
+//# sourceMappingURL=png-chunks.js.map

package/dist/dlp/embed/png-chunks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"png-chunks.js","sourceRoot":"","sources":["../../../src/dlp/embed/png-chunks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAErD,MAAM,SAAS,GAAgB,CAAC,GAAG,EAAE;IACnC,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/C,CAAC;QACD,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC,EAAE,CAAC;AAEL,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAOD,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC;QAClE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QAChB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,IAAY;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,KAAa;IACzD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM;QACR,CAAC;QACD,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,IAAY,EAAU,EAAE,CAC5D,UAAU,CACR,MAAM,EACN,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAC/F,CAAC;AAEJ,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,IAAY,EAAU,EAAE,CAC5D,UAAU,CACR,MAAM,EACN,MAAM,CAAC,MAAM,CAAC;IACZ,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnB,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;CACzC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,IAAY,EAAU,EAAE,CAC5D,UAAU,CACR,MAAM,EACN,MAAM,CAAC,MAAM,CAAC;IACZ,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;IAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;CAC1B,CAAC,CACH,CAAC;AAEJ,6EAA6E;AAC7E,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzC,CAAC;aAAM,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxE,CAAC;aAAM,IAAI,EAAE,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,0CAA0C;YAC1E,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB;YACpD,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,2BAA2B;YAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/dlp/embed/png.d.ts

@@ -0,0 +1,5 @@
+import type { Technique } from '../types.js';
+/** Recover an LSB-embedded UTF-8 payload from a PNG. */
+export declare function lsbExtract(png: Buffer): Promise<string>;
+export declare const pngTechniques: Record<string, Technique>;
+//# sourceMappingURL=png.d.ts.map

package/dist/dlp/embed/png.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"png.d.ts","sourceRoot":"","sources":["../../../src/dlp/embed/png.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAgB,SAAS,EAAE,MAAM,aAAa,CAAC;AA0B3D,wDAAwD;AACxD,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkB7D;AAED,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CA2BnD,CAAC"}

package/dist/dlp/embed/png.js

@@ -0,0 +1,68 @@
+import sharp from 'sharp';
+import { insertBeforeIEND, iTXt, tEXt, zTXt } from './png-chunks.js';
+const join = (p) => p.map((v) => `${v.category}: ${v.value}`).join(' | ');
+async function lsbEmbed(png, text) {
+    const { data, info } = await sharp(png).raw().toBuffer({ resolveWithObject: true });
+    const payload = Buffer.from(text, 'utf8');
+    const header = Buffer.alloc(4);
+    header.writeUInt32BE(payload.length, 0);
+    const blob = Buffer.concat([header, payload]);
+    const bits = blob.length * 8;
+    if (bits > data.length) {
+        throw new Error('cover image too small for stego payload');
+    }
+    for (let i = 0; i < bits; i++) {
+        const bit = (blob[i >> 3] >> (7 - (i & 7))) & 1;
+        data[i] = (data[i] & 0xfe) | bit;
+    }
+    return sharp(data, {
+        raw: { width: info.width, height: info.height, channels: info.channels },
+    })
+        .png()
+        .toBuffer();
+}
+/** Recover an LSB-embedded UTF-8 payload from a PNG. */
+export async function lsbExtract(png) {
+    const { data } = await sharp(png).raw().toBuffer({ resolveWithObject: true });
+    const readByte = (start) => {
+        let b = 0;
+        for (let k = 0; k < 8; k++) {
+            b = (b << 1) | (data[start + k] & 1);
+        }
+        return b;
+    };
+    let len = 0;
+    for (let i = 0; i < 4; i++) {
+        len = (len << 8) | readByte(i * 8);
+    }
+    const out = Buffer.alloc(len);
+    for (let i = 0; i < len; i++) {
+        out[i] = readByte((4 + i) * 8);
+    }
+    return out.toString('utf8');
+}
+export const pngTechniques = {
+    'text-chunks': {
+        id: 'text-chunks',
+        format: 'png',
+        label: 'tEXt/zTXt/iTXt chunks',
+        embed: (c, p) => insertBeforeIEND(c, Buffer.concat([
+            tEXt('Comment', join(p)),
+            zTXt('Description', join(p)),
+            iTXt('Keywords', join(p)),
+        ])),
+    },
+    trailer: {
+        id: 'trailer',
+        format: 'png',
+        label: 'bytes after IEND',
+        embed: (c, p) => Buffer.concat([c, Buffer.from(`\nDLP ${join(p)}\n`, 'utf8')]),
+    },
+    'stego-lsb': {
+        id: 'stego-lsb',
+        format: 'png',
+        label: 'LSB steganography',
+        embed: (c, p) => lsbEmbed(c, join(p)),
+    },
+};
+//# sourceMappingURL=png.js.map

package/dist/dlp/embed/png.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"png.js","sourceRoot":"","sources":["../../../src/dlp/embed/png.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAErE,MAAM,IAAI,GAAG,CAAC,CAAiB,EAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAElG,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,IAAY;IAC/C,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,IAAI,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC;IACnC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE;QACjB,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE;KACzE,CAAC;SACC,GAAG,EAAE;SACL,QAAQ,EAAE,CAAC;AAChB,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW;IAC1C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAU,EAAE;QACzC,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAA8B;IACtD,aAAa,EAAE;QACb,EAAE,EAAE,aAAa;QACjB,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,gBAAgB,CACd,CAAC,EACD,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;SAC1B,CAAC,CACH;KACJ;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;KAC/E;IACD,WAAW,EAAE;QACX,EAAE,EAAE,WAAW;QACf,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,mBAAmB;QAC1B,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;KACtC;CACF,CAAC"}

package/dist/dlp/embed/svg.d.ts

@@ -0,0 +1,3 @@
+import type { Technique } from '../types.js';
+export declare const svgTechniques: Record<string, Technique>;
+//# sourceMappingURL=svg.d.ts.map

package/dist/dlp/embed/svg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"svg.d.ts","sourceRoot":"","sources":["../../../src/dlp/embed/svg.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,SAAS,EAAE,MAAM,aAAa,CAAC;AAY3D,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAuBnD,CAAC"}

package/dist/dlp/embed/svg.js

@@ -0,0 +1,28 @@
+const line = (vals) => vals.map((v) => `${v.category}: ${v.value}`).join(' | ');
+/** Insert a snippet immediately after the opening `<svg ...>` tag. */
+function inject(clean, snippet) {
+    const s = clean.toString('utf8');
+    const idx = s.indexOf('>') + 1;
+    return Buffer.from(s.slice(0, idx) + snippet + s.slice(idx), 'utf8');
+}
+export const svgTechniques = {
+    meta: {
+        id: 'meta',
+        format: 'svg',
+        label: 'metadata + desc',
+        embed: (c, p) => inject(c, `<metadata>${line(p)}</metadata><desc>${line(p)}</desc>`),
+    },
+    'hidden-text': {
+        id: 'hidden-text',
+        format: 'svg',
+        label: 'off-canvas <text>',
+        embed: (c, p) => inject(c, p.map((v) => `<text x="-9999" y="-9999">${v.category}: ${v.value}</text>`).join('')),
+    },
+    comment: {
+        id: 'comment',
+        format: 'svg',
+        label: 'XML comment',
+        embed: (c, p) => inject(c, `<!-- ${line(p)} -->`),
+    },
+};
+//# sourceMappingURL=svg.js.map

package/dist/dlp/embed/svg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"svg.js","sourceRoot":"","sources":["../../../src/dlp/embed/svg.ts"],"names":[],"mappings":"AAEA,MAAM,IAAI,GAAG,CAAC,IAAoB,EAAU,EAAE,CAC5C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAE3D,sEAAsE;AACtE,SAAS,MAAM,CAAC,KAAa,EAAE,OAAe;IAC5C,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAA8B;IACtD,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM;QACV,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,iBAAiB;QACxB,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,aAAa,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;KACrF;IACD,aAAa,EAAE;QACb,EAAE,EAAE,aAAa;QACjB,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,mBAAmB;QAC1B,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACd,MAAM,CACJ,CAAC,EACD,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CACpF;KACJ;IACD,OAAO,EAAE;QACP,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,KAAK;QACb,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;KAClD;CACF,CAAC"}

package/dist/dlp/embed/zip.d.ts

@@ -0,0 +1,3 @@
+/** Extract concatenated text from all entries of a ZIP buffer (e.g. a DOCX). */
+export declare function unzipText(zip: Buffer): string;
+//# sourceMappingURL=zip.d.ts.map

package/dist/dlp/embed/zip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.d.ts","sourceRoot":"","sources":["../../../src/dlp/embed/zip.ts"],"names":[],"mappings":"AAIA,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAmB7C"}

package/dist/dlp/embed/zip.js

@@ -0,0 +1,25 @@
+import { inflateRawSync } from 'node:zlib';
+const LOCAL_HEADER = 0x04034b50;
+/** Extract concatenated text from all entries of a ZIP buffer (e.g. a DOCX). */
+export function unzipText(zip) {
+    const parts = [];
+    let off = 0;
+    while (off + 30 <= zip.length && zip.readUInt32LE(off) === LOCAL_HEADER) {
+        const method = zip.readUInt16LE(off + 8);
+        const compSize = zip.readUInt32LE(off + 18);
+        const nameLen = zip.readUInt16LE(off + 26);
+        const extraLen = zip.readUInt16LE(off + 28);
+        const dataStart = off + 30 + nameLen + extraLen;
+        const data = zip.subarray(dataStart, dataStart + compSize);
+        try {
+            const content = method === 8 ? inflateRawSync(data) : data;
+            parts.push(content.toString('utf8'));
+        }
+        catch {
+            // skip entries that cannot be inflated
+        }
+        off = dataStart + compSize;
+    }
+    return parts.join('\n');
+}
+//# sourceMappingURL=zip.js.map

package/dist/dlp/embed/zip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zip.js","sourceRoot":"","sources":["../../../src/dlp/embed/zip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,MAAM,YAAY,GAAG,UAAU,CAAC;AAEhC,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,GAAG,GAAG,EAAE,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,YAAY,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,GAAG,GAAG,EAAE,GAAG,OAAO,GAAG,QAAQ,CAAC;QAChD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,QAAQ,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,uCAAuC;QACzC,CAAC;QACD,GAAG,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/dlp/generate/docx.d.ts

@@ -0,0 +1,3 @@
+/** Generate a valid DOCX (zip) filled with lorem ipsum. */
+export declare function docx(rng: () => number): Promise<Buffer>;
+//# sourceMappingURL=docx.d.ts.map

package/dist/dlp/generate/docx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docx.d.ts","sourceRoot":"","sources":["../../../src/dlp/generate/docx.ts"],"names":[],"mappings":"AAGA,2DAA2D;AAC3D,wBAAsB,IAAI,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAe7D"}

package/dist/dlp/generate/docx.js

@@ -0,0 +1,20 @@
+import { Document, HeadingLevel, Packer, Paragraph, TextRun } from 'docx';
+import { lorem } from '../lorem.js';
+/** Generate a valid DOCX (zip) filled with lorem ipsum. */
+export async function docx(rng) {
+    const paragraphs = lorem(rng, 3)
+        .split('\n\n')
+        .map((p) => new Paragraph({ children: [new TextRun(p)] }));
+    const doc = new Document({
+        sections: [
+            {
+                children: [
+                    new Paragraph({ text: 'Generated Document', heading: HeadingLevel.HEADING_1 }),
+                    ...paragraphs,
+                ],
+            },
+        ],
+    });
+    return Packer.toBuffer(doc);
+}
+//# sourceMappingURL=docx.js.map

package/dist/dlp/generate/docx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docx.js","sourceRoot":"","sources":["../../../src/dlp/generate/docx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC1E,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,GAAiB;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;SAC7B,KAAK,CAAC,MAAM,CAAC;SACb,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC;QACvB,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE;oBACR,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,YAAY,CAAC,SAAS,EAAE,CAAC;oBAC9E,GAAG,UAAU;iBACd;aACF;SACF;KACF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC"}

package/dist/dlp/generate/index.d.ts

@@ -0,0 +1,5 @@
+import type { Format } from '../types.js';
+/** Clean-file generators keyed by format. */
+export declare const generators: Record<Format, (rng: () => number) => Promise<Buffer> | Buffer>;
+export declare const EXT: Record<Format, string>;
+//# sourceMappingURL=index.d.ts.map

package/dist/dlp/generate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/dlp/generate/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAO1C,6CAA6C;AAC7C,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAMtF,CAAC;AAEF,eAAO,MAAM,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAMtC,CAAC"}

package/dist/dlp/generate/index.js

@@ -0,0 +1,21 @@
+import { docx } from './docx.js';
+import { jpeg } from './jpeg.js';
+import { pdf } from './pdf.js';
+import { png } from './png.js';
+import { svg } from './svg.js';
+/** Clean-file generators keyed by format. */
+export const generators = {
+    pdf,
+    png,
+    jpeg,
+    svg,
+    docx,
+};
+export const EXT = {
+    pdf: 'pdf',
+    png: 'png',
+    jpeg: 'jpg',
+    svg: 'svg',
+    docx: 'docx',
+};
+//# sourceMappingURL=index.js.map

package/dist/dlp/generate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/dlp/generate/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAE/B,6CAA6C;AAC7C,MAAM,CAAC,MAAM,UAAU,GAAoE;IACzF,GAAG;IACH,GAAG;IACH,IAAI;IACJ,GAAG;IACH,IAAI;CACL,CAAC;AAEF,MAAM,CAAC,MAAM,GAAG,GAA2B;IACzC,GAAG,EAAE,KAAK;IACV,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,KAAK;IACV,IAAI,EAAE,MAAM;CACb,CAAC"}

package/dist/dlp/generate/jpeg.d.ts

@@ -0,0 +1,3 @@
+/** Generate a valid JPEG with deterministic gradient content. */
+export declare function jpeg(rng: () => number): Promise<Buffer>;
+//# sourceMappingURL=jpeg.d.ts.map

package/dist/dlp/generate/jpeg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jpeg.d.ts","sourceRoot":"","sources":["../../../src/dlp/generate/jpeg.ts"],"names":[],"mappings":"AAGA,iEAAiE;AACjE,wBAAsB,IAAI,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG7D"}

package/dist/dlp/generate/jpeg.js

@@ -0,0 +1,8 @@
+import sharp from 'sharp';
+import { raster } from './raster.js';
+/** Generate a valid JPEG with deterministic gradient content. */
+export async function jpeg(rng) {
+    const { data, width, height, channels } = raster(rng);
+    return sharp(data, { raw: { width, height, channels } }).jpeg({ quality: 90 }).toBuffer();
+}
+//# sourceMappingURL=jpeg.js.map

package/dist/dlp/generate/jpeg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jpeg.js","sourceRoot":"","sources":["../../../src/dlp/generate/jpeg.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,GAAiB;IAC1C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC5F,CAAC"}

package/dist/dlp/generate/pdf.d.ts

@@ -0,0 +1,3 @@
+/** Generate a valid single-page PDF filled with lorem ipsum. */
+export declare function pdf(rng: () => number): Promise<Buffer>;
+//# sourceMappingURL=pdf.d.ts.map

package/dist/dlp/generate/pdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf.d.ts","sourceRoot":"","sources":["../../../src/dlp/generate/pdf.ts"],"names":[],"mappings":"AAGA,gEAAgE;AAChE,wBAAsB,GAAG,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAc5D"}

package/dist/dlp/generate/pdf.js

@@ -0,0 +1,19 @@
+import { PDFDocument, StandardFonts } from 'pdf-lib';
+import { lorem } from '../lorem.js';
+/** Generate a valid single-page PDF filled with lorem ipsum. */
+export async function pdf(rng) {
+    const doc = await PDFDocument.create();
+    const font = await doc.embedFont(StandardFonts.Helvetica);
+    const page = doc.addPage([612, 792]);
+    page.drawText(lorem(rng, 3), {
+        x: 54,
+        y: 720,
+        size: 11,
+        font,
+        lineHeight: 15,
+        maxWidth: 504,
+    });
+    const bytes = await doc.save();
+    return Buffer.from(bytes);
+}
+//# sourceMappingURL=pdf.js.map

package/dist/dlp/generate/pdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pdf.js","sourceRoot":"","sources":["../../../src/dlp/generate/pdf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,GAAiB;IACzC,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE;QAC3B,CAAC,EAAE,EAAE;QACL,CAAC,EAAE,GAAG;QACN,IAAI,EAAE,EAAE;QACR,IAAI;QACJ,UAAU,EAAE,EAAE;QACd,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/dist/dlp/generate/png.d.ts

@@ -0,0 +1,3 @@
+/** Generate a valid PNG with deterministic gradient content. */
+export declare function png(rng: () => number): Promise<Buffer>;
+//# sourceMappingURL=png.d.ts.map

package/dist/dlp/generate/png.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"png.d.ts","sourceRoot":"","sources":["../../../src/dlp/generate/png.ts"],"names":[],"mappings":"AAGA,gEAAgE;AAChE,wBAAsB,GAAG,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5D"}

package/dist/dlp/generate/png.js

@@ -0,0 +1,8 @@
+import sharp from 'sharp';
+import { raster } from './raster.js';
+/** Generate a valid PNG with deterministic gradient content. */
+export async function png(rng) {
+    const { data, width, height, channels } = raster(rng);
+    return sharp(data, { raw: { width, height, channels } }).png().toBuffer();
+}
+//# sourceMappingURL=png.js.map

package/dist/dlp/generate/png.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"png.js","sourceRoot":"","sources":["../../../src/dlp/generate/png.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,GAAiB;IACzC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;AAC5E,CAAC"}

package/dist/dlp/generate/raster.d.ts

@@ -0,0 +1,9 @@
+export interface Raster {
+    data: Buffer;
+    width: number;
+    height: number;
+    channels: 3;
+}
+/** Build a deterministic RGB gradient raster for use as image cover content. */
+export declare function raster(rng: () => number): Raster;
+//# sourceMappingURL=raster.d.ts.map

package/dist/dlp/generate/raster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"raster.d.ts","sourceRoot":"","sources":["../../../src/dlp/generate/raster.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,CAAC,CAAC;CACb;AAED,gFAAgF;AAChF,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,MAAM,CAiBhD"}

package/dist/dlp/generate/raster.js

@@ -0,0 +1,20 @@
+/** Build a deterministic RGB gradient raster for use as image cover content. */
+export function raster(rng) {
+    const width = 256;
+    const height = 192;
+    const channels = 3;
+    const data = Buffer.alloc(width * height * channels);
+    const rb = Math.floor(rng() * 256);
+    const gb = Math.floor(rng() * 256);
+    const bb = Math.floor(rng() * 256);
+    for (let y = 0; y < height; y++) {
+        for (let x = 0; x < width; x++) {
+            const i = (y * width + x) * channels;
+            data[i] = (x + rb) & 255;
+            data[i + 1] = (y + gb) & 255;
+            data[i + 2] = (x + y + bb) & 255;
+        }
+    }
+    return { data, width, height, channels };
+}
+//# sourceMappingURL=raster.js.map

package/dist/dlp/generate/raster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"raster.js","sourceRoot":"","sources":["../../../src/dlp/generate/raster.ts"],"names":[],"mappings":"AAOA,gFAAgF;AAChF,MAAM,UAAU,MAAM,CAAC,GAAiB;IACtC,MAAM,KAAK,GAAG,GAAG,CAAC;IAClB,MAAM,MAAM,GAAG,GAAG,CAAC;IACnB,MAAM,QAAQ,GAAG,CAAU,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,GAAG,QAAQ,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;YACrC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;YACzB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;YAC7B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC3C,CAAC"}

package/dist/dlp/generate/svg.d.ts

@@ -0,0 +1,3 @@
+/** Generate a valid SVG (namespaced root) with deterministic placeholder shapes. */
+export declare function svg(rng: () => number): Buffer;
+//# sourceMappingURL=svg.d.ts.map

package/dist/dlp/generate/svg.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"svg.d.ts","sourceRoot":"","sources":["../../../src/dlp/generate/svg.ts"],"names":[],"mappings":"AAEA,oFAAoF;AACpF,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,MAAM,CAc7C"}

package/dist/dlp/generate/svg.js

@@ -0,0 +1,17 @@
+import { pick } from '../rng.js';
+/** Generate a valid SVG (namespaced root) with deterministic placeholder shapes. */
+export function svg(rng) {
+    const width = 240;
+    const height = 160;
+    const fill = pick(rng, ['#673ab7', '#2196f3', '#4caf50', '#ff9800']);
+    const cx = 40 + Math.floor(rng() * 160);
+    const xml = `<svg xmlns="http://www.w3.org/2000/svg" width="${width}" height="${height}" ` +
+        `viewBox="0 0 ${width} ${height}" role="img">` +
+        '<title>Generated image</title>' +
+        '<desc>A generated placeholder graphic.</desc>' +
+        `<rect width="${width}" height="${height}" fill="#ffffff"/>` +
+        `<circle cx="${cx}" cy="80" r="48" fill="${fill}"/>` +
+        '</svg>';
+    return Buffer.from(xml, 'utf8');
+}
+//# sourceMappingURL=svg.js.map

package/dist/dlp/generate/svg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"svg.js","sourceRoot":"","sources":["../../../src/dlp/generate/svg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,oFAAoF;AACpF,MAAM,UAAU,GAAG,CAAC,GAAiB;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC;IAClB,MAAM,MAAM,GAAG,GAAG,CAAC;IACnB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;IACrE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;IACxC,MAAM,GAAG,GACP,kDAAkD,KAAK,aAAa,MAAM,IAAI;QAC9E,gBAAgB,KAAK,IAAI,MAAM,eAAe;QAC9C,gCAAgC;QAChC,+CAA+C;QAC/C,gBAAgB,KAAK,aAAa,MAAM,oBAAoB;QAC5D,eAAe,EAAE,0BAA0B,IAAI,KAAK;QACpD,QAAQ,CAAC;IACX,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAClC,CAAC"}

package/dist/dlp/index.d.ts

@@ -0,0 +1,15 @@
+import type { GenerateOptions } from './types.js';
+export interface GenerateSummary {
+    clean: number;
+    dirty: number;
+    out: string;
+    manifestPath: string;
+    seed: number;
+    byFormat: Record<string, {
+        clean: number;
+        dirty: number;
+    }>;
+}
+/** Generate a clean/dirty DLP test corpus and a manifest describing it. */
+export declare function generateCorpus(opts: GenerateOptions): Promise<GenerateSummary>;
+//# sourceMappingURL=index.d.ts.map