@cendor/guardrails 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `@cendor/guardrails` — a local-first gate for LLM apps: define a check, attach it to a stage.
+ * The TS port of `cendor.guardrails`.
+ *
+ * The **Gate** in the Cendor pipeline (`contextkit → squeeze → tokenguard → guardrails → cassette →
+ * acttrace`). Deterministic checks — keyword/regex/URL/length/JSON-schema — run in microseconds for
+ * $0, at four intervention points (`input | tool_call | tool_output | output`). Every trip or flag
+ * emits a `GuardrailDecision` on the `@cendor/core` bus, so `@cendor/acttrace` chains it as
+ * tamper-evident evidence with no import between the two.
+ *
+ * Imports ONLY `@cendor/core` (constitution rule 2). See docs/guardrails.md.
+ */
+import { LLMCall } from '@cendor/core';
+import { type Context, type Guardrail, GuardrailDecision } from './decision.js';
+export { STAGES, ACTIONS, Verdict, GuardrailDecision, GuardrailTripped, defineGuardrail, normalizeStages, } from './decision.js';
+export type { Stage, Action, Context, Check, Guardrail, DefineGuardrailOptions, } from './decision.js';
+export * as rules from './rules.js';
+/** The result of evaluating a stage: the (possibly redacted) payload plus the recorded decisions. */
+export interface EvalResult {
+    payload: unknown;
+    decisions: GuardrailDecision[];
+}
+/**
+ * Run the `stage` guardrails over `payload` **synchronously**. Returns `{ payload, decisions }`
+ * with any redactions applied in order; throws `GuardrailTripped` on the first block. An `async`
+ * check throws here — use {@link evaluateAsync}.
+ */
+export declare function evaluate(guardrails: readonly Guardrail[], stage: string, payload: unknown, ctx?: Context): EvalResult;
+/** Async counterpart of {@link evaluate}: awaits `async` checks, calls sync ones directly. */
+export declare function evaluateAsync(guardrails: readonly Guardrail[], stage: string, payload: unknown, ctx?: Context): Promise<EvalResult>;
+/** Gate `payload` and return the recorded decisions (throws `GuardrailTripped` on a block). */
+export declare function apply(guardrails: readonly Guardrail[], stage: string, payload: unknown, ctx?: Context): GuardrailDecision[];
+/** Async counterpart of {@link apply}. */
+export declare function applyAsync(guardrails: readonly Guardrail[], stage: string, payload: unknown, ctx?: Context): Promise<GuardrailDecision[]>;
+/**
+ * Gate every instrumented call by registering ONE `@cendor/core` interceptor (+ an output
+ * subscriber). Framework-independent. Input: a block raises (nothing spends), a redact reroutes the
+ * cleaned messages, a pass declines. tool_call: a block raises; else record + proceed (tools have
+ * no message-rewrite seam). Output: a bus subscriber raises **post-flight** on a block (same
+ * overshoot semantics as tokenguard's `onExceed:"raise"`). Runs sync checks only. Call
+ * {@link uninstall} to remove.
+ */
+export declare function install(guardrails: readonly Guardrail[]): void;
+/** Remove the interceptor + output subscriber registered by {@link install} (idempotent). */
+export declare function uninstall(): void;
+/** Best-effort assistant text off a completed LLMCall for the standalone output stage. */
+export declare function responseText(call: LLMCall): string | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,OAAO,EAQR,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,SAAS,EACd,iBAAiB,EAGlB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,MAAM,EACN,OAAO,EACP,OAAO,EACP,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,KAAK,EACL,MAAM,EACN,OAAO,EACP,KAAK,EACL,SAAS,EACT,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAEpC,qGAAqG;AACrG,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAyCD;;;;GAIG;AACH,wBAAgB,QAAQ,CACtB,UAAU,EAAE,SAAS,SAAS,EAAE,EAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,OAAO,GACZ,UAAU,CAaZ;AAED,8FAA8F;AAC9F,wBAAsB,aAAa,CACjC,UAAU,EAAE,SAAS,SAAS,EAAE,EAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,OAAO,GACZ,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,+FAA+F;AAC/F,wBAAgB,KAAK,CACnB,UAAU,EAAE,SAAS,SAAS,EAAE,EAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,OAAO,GACZ,iBAAiB,EAAE,CAErB;AAED,0CAA0C;AAC1C,wBAAsB,UAAU,CAC9B,UAAU,EAAE,SAAS,SAAS,EAAE,EAChC,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,OAAO,GACZ,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAE9B;AAOD;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,UAAU,EAAE,SAAS,SAAS,EAAE,GAAG,IAAI,CAoC9D;AAED,6FAA6F;AAC7F,wBAAgB,SAAS,IAAI,IAAI,CAKhC;AAQD,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQzD"}

package/dist/index.js

@@ -0,0 +1,194 @@
+/**
+ * `@cendor/guardrails` — a local-first gate for LLM apps: define a check, attach it to a stage.
+ * The TS port of `cendor.guardrails`.
+ *
+ * The **Gate** in the Cendor pipeline (`contextkit → squeeze → tokenguard → guardrails → cassette →
+ * acttrace`). Deterministic checks — keyword/regex/URL/length/JSON-schema — run in microseconds for
+ * $0, at four intervention points (`input | tool_call | tool_output | output`). Every trip or flag
+ * emits a `GuardrailDecision` on the `@cendor/core` bus, so `@cendor/acttrace` chains it as
+ * tamper-evident evidence with no import between the two.
+ *
+ * Imports ONLY `@cendor/core` (constitution rule 2). See docs/guardrails.md.
+ */
+import { LLMCall, MISS, Reroute, ToolCall, addInterceptor, bus, currentTraceId, removeInterceptor, } from '@cendor/core';
+import { GuardrailDecision, GuardrailTripped, } from './decision.js';
+export { STAGES, ACTIONS, Verdict, GuardrailDecision, GuardrailTripped, defineGuardrail, normalizeStages, } from './decision.js';
+export * as rules from './rules.js';
+function applicable(guardrails, stage) {
+    return guardrails.filter((g) => g.stages.includes(stage));
+}
+function emit(g, stage, verdict, ctx) {
+    const decision = new GuardrailDecision({
+        guardrail: g.name,
+        stage,
+        action: verdict.action,
+        reason: verdict.reason,
+        agent: ctx.agent ?? '',
+        tool: ctx.tool ?? '',
+        traceId: ctx.traceId || currentTraceId(),
+        ts: new Date(),
+        metadata: { ...(ctx.metadata ?? {}) },
+    });
+    bus.emit(decision); // acttrace (if attached) chains this as a guardrail_decision entry
+    return decision;
+}
+function handle(verdict, g, stage, payload, ctx, decisions) {
+    if (verdict === null)
+        return payload;
+    decisions.push(emit(g, stage, verdict, ctx));
+    if (verdict.action === 'block')
+        throw new GuardrailTripped(decisions);
+    if (verdict.action === 'redact' && verdict.replacement != null)
+        return verdict.replacement;
+    return payload;
+}
+function isPromise(x) {
+    return x != null && typeof x.then === 'function';
+}
+/**
+ * Run the `stage` guardrails over `payload` **synchronously**. Returns `{ payload, decisions }`
+ * with any redactions applied in order; throws `GuardrailTripped` on the first block. An `async`
+ * check throws here — use {@link evaluateAsync}.
+ */
+export function evaluate(guardrails, stage, payload, ctx) {
+    const context = ctx ?? { stage };
+    const decisions = [];
+    let current = payload;
+    for (const g of applicable(guardrails, stage)) {
+        const verdict = g.check(current, context);
+        if (isPromise(verdict)) {
+            void verdict.catch(() => { }); // swallow the rejection of the discarded promise
+            throw new TypeError(`guardrail ${JSON.stringify(g.name)} is async; use evaluateAsync`);
+        }
+        current = handle(verdict, g, stage, current, context, decisions);
+    }
+    return { payload: current, decisions };
+}
+/** Async counterpart of {@link evaluate}: awaits `async` checks, calls sync ones directly. */
+export async function evaluateAsync(guardrails, stage, payload, ctx) {
+    const context = ctx ?? { stage };
+    const decisions = [];
+    let current = payload;
+    for (const g of applicable(guardrails, stage)) {
+        const verdict = await g.check(current, context);
+        current = handle(verdict, g, stage, current, context, decisions);
+    }
+    return { payload: current, decisions };
+}
+/** Gate `payload` and return the recorded decisions (throws `GuardrailTripped` on a block). */
+export function apply(guardrails, stage, payload, ctx) {
+    return evaluate(guardrails, stage, payload, ctx).decisions;
+}
+/** Async counterpart of {@link apply}. */
+export async function applyAsync(guardrails, stage, payload, ctx) {
+    return (await evaluateAsync(guardrails, stage, payload, ctx)).decisions;
+}
+// --------------------------------------------------------------------------- standalone wiring
+let installedInterceptor = null;
+let installedSubscriber = null;
+/**
+ * Gate every instrumented call by registering ONE `@cendor/core` interceptor (+ an output
+ * subscriber). Framework-independent. Input: a block raises (nothing spends), a redact reroutes the
+ * cleaned messages, a pass declines. tool_call: a block raises; else record + proceed (tools have
+ * no message-rewrite seam). Output: a bus subscriber raises **post-flight** on a block (same
+ * overshoot semantics as tokenguard's `onExceed:"raise"`). Runs sync checks only. Call
+ * {@link uninstall} to remove.
+ */
+export function install(guardrails) {
+    uninstall();
+    const gl = [...guardrails];
+    const interceptor = (event) => {
+        if (event instanceof LLMCall) {
+            const ctx = { stage: 'input', traceId: event.traceId };
+            const { payload, decisions } = evaluate(gl, 'input', event.messages, ctx);
+            if (decisions.some((d) => d.action === 'redact'))
+                return new Reroute({ messages: payload });
+            return MISS;
+        }
+        if (event instanceof ToolCall) {
+            const ctx = {
+                stage: 'tool_call',
+                tool: event.name,
+                toolArgs: event.arguments,
+                traceId: event.traceId,
+            };
+            evaluate(gl, 'tool_call', event.arguments, ctx); // block throws; else record + proceed
+            return MISS;
+        }
+        return MISS;
+    };
+    const subscriber = (event) => {
+        if (!(event instanceof LLMCall))
+            return;
+        const text = responseText(event);
+        if (text === null)
+            return;
+        const ctx = { stage: 'output', traceId: event.traceId };
+        evaluate(gl, 'output', text, ctx); // block throws post-flight
+    };
+    addInterceptor(interceptor);
+    bus.subscribe(subscriber);
+    installedInterceptor = interceptor;
+    installedSubscriber = subscriber;
+}
+/** Remove the interceptor + output subscriber registered by {@link install} (idempotent). */
+export function uninstall() {
+    if (installedInterceptor)
+        removeInterceptor(installedInterceptor);
+    if (installedSubscriber)
+        bus.unsubscribe(installedSubscriber);
+    installedInterceptor = null;
+    installedSubscriber = null;
+}
+function get(obj, name) {
+    return obj != null && typeof obj === 'object'
+        ? obj[name]
+        : undefined;
+}
+/** Best-effort assistant text off a completed LLMCall for the standalone output stage. */
+export function responseText(call) {
+    const response = call.metadata?.response;
+    if (response == null)
+        return null;
+    try {
+        return extractText(response);
+    }
+    catch {
+        return null; // extraction must never break the passthrough
+    }
+}
+function extractText(response) {
+    const outputText = get(response, 'output_text'); // OpenAI Responses convenience field
+    if (typeof outputText === 'string' && outputText)
+        return outputText;
+    const choices = get(response, 'choices'); // OpenAI/HF Chat Completions
+    if (Array.isArray(choices) && choices.length > 0) {
+        const content = get(get(choices[0], 'message'), 'content');
+        if (typeof content === 'string')
+            return content;
+    }
+    const content = get(response, 'content'); // Anthropic content blocks
+    if (Array.isArray(content)) {
+        const parts = content.map((b) => get(b, 'text')).filter((t) => t != null);
+        if (parts.length > 0)
+            return parts.map(String).join('');
+    }
+    const message = get(response, 'message'); // Ollama
+    if (message != null) {
+        const text = get(message, 'content');
+        if (typeof text === 'string')
+            return text;
+    }
+    const text = get(response, 'text'); // Gemini
+    if (typeof text === 'string' && text)
+        return text;
+    const outMessage = get(get(response, 'output'), 'message'); // Bedrock Converse
+    const outContent = get(outMessage, 'content');
+    if (Array.isArray(outContent)) {
+        const parts = outContent.map((b) => get(b, 'text')).filter((t) => t != null);
+        if (parts.length > 0)
+            return parts.map(String).join('');
+    }
+    return null;
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,OAAO,EACP,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,cAAc,EACd,GAAG,EACH,cAAc,EACd,iBAAiB,GAClB,MAAM,cAAc,CAAC;AACtB,OAAO,EAGL,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,MAAM,EACN,OAAO,EACP,OAAO,EACP,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,eAAe,CAAC;AASvB,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AAQpC,SAAS,UAAU,CAAC,UAAgC,EAAE,KAAa;IACjE,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,IAAI,CAAC,CAAY,EAAE,KAAa,EAAE,OAAgB,EAAE,GAAY;IACvE,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC;QACrC,SAAS,EAAE,CAAC,CAAC,IAAI;QACjB,KAAK;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE;QACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;QACpB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,cAAc,EAAE;QACxC,EAAE,EAAE,IAAI,IAAI,EAAE;QACd,QAAQ,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;KACtC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,mEAAmE;IACvF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CACb,OAAuB,EACvB,CAAY,EACZ,KAAa,EACb,OAAgB,EAChB,GAAY,EACZ,SAA8B;IAE9B,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IACrC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;QAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,WAAW,IAAI,IAAI;QAAE,OAAO,OAAO,CAAC,WAAW,CAAC;IAC3F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,CAAU;IAC3B,OAAO,CAAC,IAAI,IAAI,IAAI,OAAQ,CAAwB,CAAC,IAAI,KAAK,UAAU,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CACtB,UAAgC,EAChC,KAAa,EACb,OAAgB,EAChB,GAAa;IAEb,MAAM,OAAO,GAAY,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACvB,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,iDAAiD;YAC/E,MAAM,IAAI,SAAS,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACzC,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAgC,EAChC,KAAa,EACb,OAAgB,EAChB,GAAa;IAEb,MAAM,OAAO,GAAY,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAwB,EAAE,CAAC;IAC1C,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACzC,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,KAAK,CACnB,UAAgC,EAChC,KAAa,EACb,OAAgB,EAChB,GAAa;IAEb,OAAO,QAAQ,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAAgC,EAChC,KAAa,EACb,OAAgB,EAChB,GAAa;IAEb,OAAO,CAAC,MAAM,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED,gGAAgG;AAEhG,IAAI,oBAAoB,GAAyC,IAAI,CAAC;AACtE,IAAI,mBAAmB,GAAsC,IAAI,CAAC;AAElE;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,UAAgC;IACtD,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;IAE3B,MAAM,WAAW,GAAG,CAAC,KAAc,EAAW,EAAE;QAC9C,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAChE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC1E,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;gBAAE,OAAO,IAAI,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAC5F,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAY;gBACnB,KAAK,EAAE,WAAW;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,QAAQ,EAAE,KAAK,CAAC,SAAS;gBACzB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;YACF,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,sCAAsC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,KAAc,EAAQ,EAAE;QAC1C,IAAI,CAAC,CAAC,KAAK,YAAY,OAAO,CAAC;YAAE,OAAO;QACxC,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO;QAC1B,MAAM,GAAG,GAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QACjE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,2BAA2B;IAChE,CAAC,CAAC;IAEF,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5B,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1B,oBAAoB,GAAG,WAAW,CAAC;IACnC,mBAAmB,GAAG,UAAU,CAAC;AACnC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,SAAS;IACvB,IAAI,oBAAoB;QAAE,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;IAClE,IAAI,mBAAmB;QAAE,GAAG,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAC9D,oBAAoB,GAAG,IAAI,CAAC;IAC5B,mBAAmB,GAAG,IAAI,CAAC;AAC7B,CAAC;AAED,SAAS,GAAG,CAAC,GAAY,EAAE,IAAY;IACrC,OAAO,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAC3C,CAAC,CAAE,GAA+B,CAAC,IAAI,CAAC;QACxC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACzC,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,8CAA8C;IAC7D,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAiB;IACpC,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,qCAAqC;IACtF,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IACpE,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,6BAA6B;IACvE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3D,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,2BAA2B;IACrE,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAC1E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS;IACnD,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QACrC,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS;IAC7C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,mBAAmB;IAC/E,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/rules.d.ts

@@ -0,0 +1,70 @@
+import { type Check, type Context, type Guardrail, Verdict } from './decision.js';
+type Stage = string | readonly string[];
+/** Flatten a payload (string, chat-message array, or a single message object) to scannable text. */
+export declare function payloadText(payload: unknown): string;
+export interface KeywordDenyOptions {
+    stage?: Stage;
+    action?: 'block' | 'redact' | 'flag';
+    name?: string;
+    ignoreCase?: boolean;
+}
+/** Trip when any of `words` appears (substring, case-insensitive by default). */
+export declare function keywordDeny(words: Iterable<string>, opts?: KeywordDenyOptions): Guardrail;
+export interface RegexRuleOptions {
+    action?: 'block' | 'redact' | 'flag';
+    stage?: Stage;
+    name?: string;
+    replacement?: string;
+}
+/** Trip when `pattern` matches the payload text. `action:"redact"` substitutes each match. */
+export declare function regexRule(pattern: RegExp | string, opts?: RegexRuleOptions): Guardrail;
+export interface UrlRuleOptions {
+    stage?: Stage;
+    action?: 'block' | 'redact' | 'flag';
+    name?: string;
+}
+/** Trip when a URL's host is NOT on `domains` (or a subdomain of one). */
+export declare function urlAllowlist(domains: Iterable<string>, opts?: UrlRuleOptions): Guardrail;
+/** Trip when a URL's host is on `domains` (or a subdomain of one). */
+export declare function urlDeny(domains: Iterable<string>, opts?: UrlRuleOptions): Guardrail;
+export interface LengthBoundsOptions {
+    maxChars?: number;
+    maxTokens?: number;
+    model?: string;
+    stage?: Stage;
+    action?: 'block' | 'redact' | 'flag';
+    name?: string;
+}
+/** Trip when the payload exceeds `maxChars` and/or `maxTokens` (exact token counts via core). */
+export declare function lengthBounds(opts?: LengthBoundsOptions): Guardrail;
+export interface JsonSchemaOptions {
+    stage?: Stage;
+    action?: 'block' | 'redact' | 'flag';
+    name?: string;
+}
+/**
+ * Validate structured output against a minimal JSON Schema (`type`/`required`/`properties`/`items`,
+ * recursively). Trips when the payload is not valid JSON or violates the schema. Pass the model's
+ * raw text or an already-parsed object. Not the full spec (no `$ref`/`oneOf`/`pattern`).
+ */
+export declare function jsonSchema(schema: Record<string, unknown>, opts?: JsonSchemaOptions): Guardrail;
+export interface CustomOptions {
+    stage?: Stage;
+    name?: string;
+}
+/** Wrap any `fn(payload, ctx) -> Verdict | null` as a `Guardrail` (sync or async). */
+export declare function custom(fn: Check, opts?: CustomOptions): Guardrail;
+export interface LlmJudgeOptions {
+    stage?: Stage;
+    action?: 'block' | 'redact' | 'flag';
+    name?: string;
+}
+/**
+ * Adapter **contract** for a bring-your-own model judge — not a built-in classifier. `judge` is
+ * *your* (sync or async) callable that makes whatever model call you want and returns a `Verdict`,
+ * `true` to trip with the default `action`, a reason string, or `null`/`false` to pass. cendor ships
+ * no model here: the extra call costs real tokens and latency — measure it. See "Honest limits".
+ */
+export declare function llmJudge(judge: (payload: unknown, ctx: Context) => Verdict | boolean | string | null | Promise<Verdict | boolean | string | null>, opts?: LlmJudgeOptions): Guardrail;
+export {};
+//# sourceMappingURL=rules.d.ts.map

package/dist/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,OAAO,EAAmB,MAAM,eAAe,CAAC;AAGnG,KAAK,KAAK,GAAG,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;AAIxC,oGAAoG;AACpG,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAepD;AAiDD,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,kBAAuB,GAAG,SAAS,CAyB7F;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,8FAA8F;AAC9F,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,SAAS,CAuB1F;AAoBD,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,SAAS,CAW5F;AAED,sEAAsE;AACtE,wBAAgB,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE,cAAmB,GAAG,SAAS,CAWvF;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,iGAAiG;AACjG,wBAAgB,YAAY,CAAC,IAAI,GAAE,mBAAwB,GAAG,SAAS,CAwBtE;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,IAAI,GAAE,iBAAsB,GAC3B,SAAS,CAgBX;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,sFAAsF;AACtF,wBAAgB,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,GAAE,aAAkB,GAAG,SAAS,CAErE;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,CACL,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,OAAO,KACT,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC,EACnF,IAAI,GAAE,eAAoB,GACzB,SAAS,CAIX"}

package/dist/rules.js

@@ -0,0 +1,270 @@
+/**
+ * Deterministic, local-first built-in rules — the microsecond, $0 tier. The TS port of
+ * `cendor.guardrails.rules`. Regex/arithmetic only: no model, no network, no heavy dependency.
+ *
+ * Deliberately NOT here: PII/secret detection (that is `@cendor/acttrace`'s detector catalogue —
+ * use `guard(Policy…)`), ML classifiers, jailbreak detection. `llmJudge` is an adapter *contract*
+ * (you supply the model call), never a bundled classifier. Deterministic checks do not stop a novel
+ * adversarial attack — see docs/guardrails.md "Honest limits".
+ */
+import { tokens } from '@cendor/core';
+import { Verdict, normalizeStages } from './decision.js';
+// --------------------------------------------------------------------------- payload helpers
+/** Flatten a payload (string, chat-message array, or a single message object) to scannable text. */
+export function payloadText(payload) {
+    if (typeof payload === 'string')
+        return payload;
+    if (Array.isArray(payload)) {
+        return payload
+            .filter((m) => m != null)
+            .map((m) => (isMessageLike(m) ? messageText(m) : String(m)))
+            .join('\n');
+    }
+    if (payload && typeof payload === 'object') {
+        const o = payload;
+        // a chat message ({role,content}) -> its text; any other object (e.g. tool args) -> its JSON.
+        if ('content' in o || 'role' in o)
+            return messageText(o);
+        return JSON.stringify(o);
+    }
+    return String(payload);
+}
+function isMessageLike(m) {
+    return m != null && typeof m === 'object';
+}
+function messageText(msg) {
+    const content = msg.content;
+    if (Array.isArray(content)) {
+        return content
+            .map((p) => (p && typeof p === 'object' ? String(p.text ?? '') : ''))
+            .join('');
+    }
+    return content == null ? '' : String(content);
+}
+/** Apply `sub` to every text field of `payload`, returning a new structure of the same shape. */
+function redactPayload(payload, sub) {
+    if (typeof payload === 'string')
+        return sub(payload);
+    if (Array.isArray(payload)) {
+        return payload.map((m) => isMessageLike(m) ? redactMessage(m, sub) : typeof m === 'string' ? sub(m) : m);
+    }
+    if (payload && typeof payload === 'object')
+        return redactMessage(payload, sub);
+    return payload;
+}
+function redactMessage(msg, sub) {
+    const out = { ...msg };
+    const content = out.content;
+    if (typeof content === 'string') {
+        out.content = sub(content);
+    }
+    else if (Array.isArray(content)) {
+        out.content = content.map((p) => p && typeof p === 'object' && typeof p.text === 'string'
+            ? { ...p, text: sub(p.text) }
+            : p);
+    }
+    return out;
+}
+function mkGuardrail(name, stage, check) {
+    return { name, stages: normalizeStages(stage), check };
+}
+/** Trip when any of `words` appears (substring, case-insensitive by default). */
+export function keywordDeny(words, opts = {}) {
+    const { stage = 'input', action = 'block', name = 'keyword_deny', ignoreCase = true } = opts;
+    const terms = [...words].filter(Boolean);
+    const pattern = terms.length > 0
+        ? new RegExp(terms.map((w) => w.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('|'), ignoreCase ? 'i' : '')
+        : null;
+    return mkGuardrail(name, stage, (payload) => {
+        if (pattern === null)
+            return null;
+        const match = pattern.exec(payloadText(payload));
+        if (match === null)
+            return null;
+        const reason = `denied keyword: ${JSON.stringify(match[0])}`;
+        if (action === 'redact') {
+            const g = new RegExp(pattern.source, ignoreCase ? 'gi' : 'g');
+            return new Verdict('redact', reason, redactPayload(payload, (s) => s.replace(g, '[redacted]')));
+        }
+        return new Verdict(action, reason);
+    });
+}
+/** Trip when `pattern` matches the payload text. `action:"redact"` substitutes each match. */
+export function regexRule(pattern, opts = {}) {
+    const { action = 'flag', stage = 'input', name = 'regex_rule', replacement = '[redacted]', } = opts;
+    const flags = typeof pattern === 'string' ? '' : pattern.flags.replace('g', '');
+    const source = typeof pattern === 'string' ? pattern : pattern.source;
+    const test = new RegExp(source, flags);
+    return mkGuardrail(name, stage, (payload) => {
+        if (!test.test(payloadText(payload)))
+            return null;
+        const reason = `matched /${source}/`;
+        if (action === 'redact') {
+            const g = new RegExp(source, `${flags.replace('g', '')}g`);
+            return new Verdict('redact', reason, redactPayload(payload, (s) => s.replace(g, replacement)));
+        }
+        return new Verdict(action, reason);
+    });
+}
+const URL_RE = /https?:\/\/[^\s<>)\]}"']+/gi;
+function* iterHosts(text) {
+    for (const match of text.matchAll(URL_RE)) {
+        try {
+            const host = new URL(match[0]).hostname.toLowerCase();
+            if (host)
+                yield host;
+        }
+        catch {
+            // not a parseable URL — skip
+        }
+    }
+}
+function hostMatches(host, domain) {
+    const d = domain.toLowerCase().replace(/^\.+/, '');
+    return host === d || host.endsWith(`.${d}`);
+}
+/** Trip when a URL's host is NOT on `domains` (or a subdomain of one). */
+export function urlAllowlist(domains, opts = {}) {
+    const { stage = 'input', action = 'block', name = 'url_allowlist' } = opts;
+    const allowed = [...domains].filter(Boolean);
+    return mkGuardrail(name, stage, (payload) => {
+        for (const host of iterHosts(payloadText(payload))) {
+            if (!allowed.some((d) => hostMatches(host, d))) {
+                return new Verdict(action, `URL host not allowlisted: ${host}`);
+            }
+        }
+        return null;
+    });
+}
+/** Trip when a URL's host is on `domains` (or a subdomain of one). */
+export function urlDeny(domains, opts = {}) {
+    const { stage = 'input', action = 'block', name = 'url_deny' } = opts;
+    const denied = [...domains].filter(Boolean);
+    return mkGuardrail(name, stage, (payload) => {
+        for (const host of iterHosts(payloadText(payload))) {
+            if (denied.some((d) => hostMatches(host, d))) {
+                return new Verdict(action, `URL host denied: ${host}`);
+            }
+        }
+        return null;
+    });
+}
+/** Trip when the payload exceeds `maxChars` and/or `maxTokens` (exact token counts via core). */
+export function lengthBounds(opts = {}) {
+    const { maxChars, maxTokens, model = 'gpt-4o', stage = 'input', action = 'block', name = 'length_bounds', } = opts;
+    if (maxChars === undefined && maxTokens === undefined) {
+        throw new Error('lengthBounds needs at least one of maxChars / maxTokens');
+    }
+    return mkGuardrail(name, stage, (payload) => {
+        const text = payloadText(payload);
+        if (maxChars !== undefined && text.length > maxChars) {
+            return new Verdict(action, `${text.length} chars exceeds max ${maxChars}`);
+        }
+        if (maxTokens !== undefined) {
+            const countable = (Array.isArray(payload) ? payload : text);
+            const n = tokens.count(countable, model);
+            if (n > maxTokens)
+                return new Verdict(action, `${n} tokens exceeds max ${maxTokens}`);
+        }
+        return null;
+    });
+}
+/**
+ * Validate structured output against a minimal JSON Schema (`type`/`required`/`properties`/`items`,
+ * recursively). Trips when the payload is not valid JSON or violates the schema. Pass the model's
+ * raw text or an already-parsed object. Not the full spec (no `$ref`/`oneOf`/`pattern`).
+ */
+export function jsonSchema(schema, opts = {}) {
+    const { stage = 'output', action = 'block', name = 'json_schema' } = opts;
+    return mkGuardrail(name, stage, (payload) => {
+        let data;
+        if (payload !== null && typeof payload === 'object') {
+            data = payload;
+        }
+        else {
+            try {
+                data = JSON.parse(payloadText(payload));
+            }
+            catch (e) {
+                return new Verdict(action, `output is not valid JSON: ${e.message}`);
+            }
+        }
+        const error = validate(data, schema, '$');
+        return error === null ? null : new Verdict(action, `schema violation: ${error}`);
+    });
+}
+/** Wrap any `fn(payload, ctx) -> Verdict | null` as a `Guardrail` (sync or async). */
+export function custom(fn, opts = {}) {
+    return mkGuardrail(opts.name ?? (fn.name || 'custom'), opts.stage ?? 'input', fn);
+}
+/**
+ * Adapter **contract** for a bring-your-own model judge — not a built-in classifier. `judge` is
+ * *your* (sync or async) callable that makes whatever model call you want and returns a `Verdict`,
+ * `true` to trip with the default `action`, a reason string, or `null`/`false` to pass. cendor ships
+ * no model here: the extra call costs real tokens and latency — measure it. See "Honest limits".
+ */
+export function llmJudge(judge, opts = {}) {
+    const { stage = 'output', action = 'block', name = 'llm_judge' } = opts;
+    const check = async (payload, ctx) => coerce(await judge(payload, ctx), action);
+    return mkGuardrail(name, stage, check);
+}
+function coerce(result, action) {
+    if (result === null || result === false)
+        return null;
+    if (result instanceof Verdict)
+        return result;
+    if (result === true)
+        return new Verdict(action, 'llmJudge tripped');
+    if (typeof result === 'string')
+        return new Verdict(action, result);
+    return new Verdict(action, 'llmJudge tripped');
+}
+// --------------------------------------------------------------------------- minimal JSON Schema
+const TYPE_CHECK = {
+    object: (d) => d !== null && typeof d === 'object' && !Array.isArray(d),
+    array: (d) => Array.isArray(d),
+    string: (d) => typeof d === 'string',
+    number: (d) => typeof d === 'number',
+    integer: (d) => typeof d === 'number' && Number.isInteger(d),
+    boolean: (d) => typeof d === 'boolean',
+    null: (d) => d === null,
+};
+function validate(data, schema, path) {
+    const expected = schema.type;
+    if (expected !== undefined) {
+        const checker = TYPE_CHECK[expected];
+        if (checker && !checker(data))
+            return `${path}: expected ${expected}, got ${typeName(data)}`;
+    }
+    if (data !== null && typeof data === 'object' && !Array.isArray(data)) {
+        const obj = data;
+        for (const key of schema.required ?? []) {
+            if (!(key in obj))
+                return `${path}: missing required key ${JSON.stringify(key)}`;
+        }
+        const props = schema.properties ?? {};
+        for (const [key, sub] of Object.entries(props)) {
+            if (key in obj && sub && typeof sub === 'object') {
+                const err = validate(obj[key], sub, `${path}.${key}`);
+                if (err !== null)
+                    return err;
+            }
+        }
+    }
+    if (Array.isArray(data) && schema.items && typeof schema.items === 'object') {
+        for (let i = 0; i < data.length; i++) {
+            const err = validate(data[i], schema.items, `${path}[${i}]`);
+            if (err !== null)
+                return err;
+        }
+    }
+    return null;
+}
+function typeName(d) {
+    if (d === null)
+        return 'null';
+    if (Array.isArray(d))
+        return 'array';
+    return typeof d;
+}
+//# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAA4C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAKnG,8FAA8F;AAE9F,oGAAoG;AACpG,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC;aACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;aACtE,IAAI,CAAC,IAAI,CAAC,CAAC;IAChB,CAAC;IACD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,OAAkB,CAAC;QAC7B,8FAA8F;QAC9F,IAAI,SAAS,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,CAAC,IAAI,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC;AAC5C,CAAC;AAED,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAE,CAAa,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;aACjF,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IACD,OAAO,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,iGAAiG;AACjG,SAAS,aAAa,CAAC,OAAgB,EAAE,GAA0B;IACjE,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACvB,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAY,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACzF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,aAAa,CAAC,OAAkB,EAAE,GAAG,CAAC,CAAC;IAC1F,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,GAA0B;IAC7D,MAAM,GAAG,GAAY,EAAE,GAAG,GAAG,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9B,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAQ,CAAa,CAAC,IAAI,KAAK,QAAQ;YACnE,CAAC,CAAC,EAAE,GAAI,CAAa,EAAE,IAAI,EAAE,GAAG,CAAE,CAAa,CAAC,IAAc,CAAC,EAAE;YACjE,CAAC,CAAC,CAAC,CACN,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAY,EAAE,KAAY;IAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AACzD,CAAC;AAWD,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,KAAuB,EAAE,OAA2B,EAAE;IAChF,MAAM,EAAE,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,cAAc,EAAE,UAAU,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC;IAC7F,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,OAAO,GACX,KAAK,CAAC,MAAM,GAAG,CAAC;QACd,CAAC,CAAC,IAAI,MAAM,CACR,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EACpE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACtB;QACH,CAAC,CAAC,IAAI,CAAC;IACX,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1C,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,MAAM,GAAG,mBAAmB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC9D,OAAO,IAAI,OAAO,CAChB,QAAQ,EACR,MAAM,EACN,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AASD,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,OAAwB,EAAE,OAAyB,EAAE;IAC7E,MAAM,EACJ,MAAM,GAAG,MAAM,EACf,KAAK,GAAG,OAAO,EACf,IAAI,GAAG,YAAY,EACnB,WAAW,GAAG,YAAY,GAC3B,GAAG,IAAI,CAAC;IACT,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACtE,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvC,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,MAAM,MAAM,GAAG,YAAY,MAAM,GAAG,CAAC;QACrC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YAC3D,OAAO,IAAI,OAAO,CAChB,QAAQ,EACR,MAAM,EACN,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CACzD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,MAAM,GAAG,6BAA6B,CAAC;AAE7C,QAAQ,CAAC,CAAC,SAAS,CAAC,IAAY;IAC9B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACtD,IAAI,IAAI;gBAAE,MAAM,IAAI,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAc;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9C,CAAC;AAQD,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,OAAyB,EAAE,OAAuB,EAAE;IAC/E,MAAM,EAAE,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,eAAe,EAAE,GAAG,IAAI,CAAC;IAC3E,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/C,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,6BAA6B,IAAI,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,OAAO,CAAC,OAAyB,EAAE,OAAuB,EAAE;IAC1E,MAAM,EAAE,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC;IACtE,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1C,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACnD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAWD,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,OAA4B,EAAE;IACzD,MAAM,EACJ,QAAQ,EACR,SAAS,EACT,KAAK,GAAG,QAAQ,EAChB,KAAK,GAAG,OAAO,EACf,MAAM,GAAG,OAAO,EAChB,IAAI,GAAG,eAAe,GACvB,GAAG,IAAI,CAAC;IACT,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YACrD,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAuB,CAAC;YAClF,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,CAAC,GAAG,SAAS;gBAAE,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,uBAAuB,SAAS,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAQD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,MAA+B,EAC/B,OAA0B,EAAE;IAE5B,MAAM,EAAE,KAAK,GAAG,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,aAAa,EAAE,GAAG,IAAI,CAAC;IAC1E,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;QAC1C,IAAI,IAAa,CAAC;QAClB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpD,IAAI,GAAG,OAAO,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,6BAA8B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,qBAAqB,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,sFAAsF;AACtF,MAAM,UAAU,MAAM,CAAC,EAAS,EAAE,OAAsB,EAAE;IACxD,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;AACpF,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CACtB,KAGmF,EACnF,OAAwB,EAAE;IAE1B,MAAM,EAAE,KAAK,GAAG,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE,IAAI,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;IACxE,MAAM,KAAK,GAAU,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACvF,OAAO,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,MAAM,CACb,MAAyC,EACzC,MAAmC;IAEnC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,MAAM,YAAY,OAAO;QAAE,OAAO,MAAM,CAAC;IAC7C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACpE,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnE,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;AACjD,CAAC;AAED,kGAAkG;AAElG,MAAM,UAAU,GAA4C;IAC1D,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ;IACpC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ;IACpC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,SAAS;IACtC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI;CACxB,CAAC;AAEF,SAAS,QAAQ,CAAC,IAAa,EAAE,MAA+B,EAAE,IAAY;IAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAA0B,CAAC;IACnD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,IAAI,cAAc,QAAQ,SAAS,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAK,MAAM,CAAC,QAAqB,IAAI,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;gBAAE,OAAO,GAAG,IAAI,0BAA0B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACnF,CAAC;QACD,MAAM,KAAK,GAAI,MAAM,CAAC,UAAsC,IAAI,EAAE,CAAC;QACnE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAA8B,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;gBACjF,IAAI,GAAG,KAAK,IAAI;oBAAE,OAAO,GAAG,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAgC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;YACxF,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,GAAG,CAAC;QAC/B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACrC,OAAO,OAAO,CAAC,CAAC;AAClB,CAAC"}