@claude-flow/aidefence 3.0.3 → 3.1.0

package/dist/domain/services/packs/decoders.js

@@ -0,0 +1,121 @@
+/**
+ * Vendored from midstream `AIMDS/src/detection/decoders.ts` at commit abe78d6.
+ * Detection-only: output of this module is matched against, never shown to users.
+ */
+const DEFAULTS = {
+    maxCandidates: 8,
+    maxBytes: 4096,
+    minBlob: 16,
+    rot13: true,
+    reverse: true,
+    wholeTextLimit: 16384,
+};
+const BASE64_RE = /[A-Za-z0-9+/_-]{16,}={0,2}/g;
+const HEX_RE = /(?:[0-9a-fA-F]{2}){8,}/g;
+const URLENC_RE = /(?:%[0-9a-fA-F]{2}){6,}/g;
+/** Share of decoded characters that are printable ASCII or common whitespace. */
+export function printableRatio(text) {
+    if (text.length === 0)
+        return 0;
+    let printable = 0;
+    for (let i = 0; i < text.length; i++) {
+        const c = text.charCodeAt(i);
+        if ((c >= 0x20 && c <= 0x7e) || c === 0x0a || c === 0x0d || c === 0x09)
+            printable++;
+    }
+    return printable / text.length;
+}
+function looksLikeText(decoded) {
+    return decoded.length >= 8 && printableRatio(decoded) >= 0.9 && /[A-Za-z]{3}/.test(decoded);
+}
+function decodeBase64(blob) {
+    const body = blob.replace(/=+$/, '');
+    if (body.length % 4 === 1)
+        return null; // impossible base64 length
+    // Must contain both letter classes or a digit to avoid matching plain words.
+    if (!/[a-z]/.test(body) || !/[A-Z0-9]/.test(body))
+        return null;
+    try {
+        const buf = Buffer.from(body.replace(/-/g, '+').replace(/_/g, '/'), 'base64');
+        if (buf.length === 0)
+            return null;
+        return buf.toString('utf8');
+    }
+    catch {
+        return null;
+    }
+}
+function decodeHex(blob) {
+    if (blob.length % 2 !== 0)
+        return null;
+    try {
+        return Buffer.from(blob, 'hex').toString('utf8');
+    }
+    catch {
+        return null;
+    }
+}
+function decodeUrl(blob) {
+    try {
+        return decodeURIComponent(blob);
+    }
+    catch {
+        return null;
+    }
+}
+export function rot13(text) {
+    return text.replace(/[a-zA-Z]/g, (ch) => {
+        const base = ch <= 'Z' ? 65 : 97;
+        return String.fromCharCode(((ch.charCodeAt(0) - base + 13) % 26) + base);
+    });
+}
+export function reverseText(text) {
+    return Array.from(text).reverse().join('');
+}
+/**
+ * Extract decodable candidates from `text`. The caller is expected to
+ * re-scan each `decoded` string once; decoded output is never fed back here.
+ */
+export function extractDecodedCandidates(text, opts = {}) {
+    const o = { ...DEFAULTS, ...opts };
+    const out = [];
+    let bytes = 0;
+    const seen = new Set();
+    const consider = (encoding, decoded, offset, sourceLength) => {
+        if (out.length >= o.maxCandidates || !decoded)
+            return;
+        const trimmed = decoded.length > o.maxBytes ? decoded.slice(0, o.maxBytes) : decoded;
+        if (bytes + trimmed.length > o.maxBytes * o.maxCandidates)
+            return;
+        if (!looksLikeText(trimmed) || seen.has(trimmed))
+            return;
+        seen.add(trimmed);
+        bytes += trimmed.length;
+        out.push({ encoding, decoded: trimmed, offset, sourceLength });
+    };
+    const scan = (re, encoding, decode) => {
+        re.lastIndex = 0;
+        let m;
+        // ruflo: cap each blob before decoding so a single 200 KB base64 run is
+        // not decoded in full only to be trimmed to maxBytes afterwards. The cap is
+        // a multiple of 12 so base64 quads, hex pairs and %XX triplets stay whole.
+        const maxBlob = Math.max(12, Math.floor((o.maxBytes * 3) / 12) * 12);
+        while ((m = re.exec(text)) !== null && out.length < o.maxCandidates) {
+            if (m[0].length < o.minBlob)
+                continue;
+            const blob = m[0].length > maxBlob ? m[0].slice(0, maxBlob) : m[0];
+            consider(encoding, decode(blob), m.index, m[0].length);
+        }
+    };
+    scan(URLENC_RE, 'url', decodeUrl);
+    scan(HEX_RE, 'hex', decodeHex);
+    scan(BASE64_RE, 'base64', decodeBase64);
+    if (text.length <= o.wholeTextLimit && /[A-Za-z]{4}/.test(text)) {
+        if (o.rot13)
+            consider('rot13', rot13(text), 0, text.length);
+        if (o.reverse)
+            consider('reverse', reverseText(text), 0, text.length);
+    }
+    return out;
+}
+//# sourceMappingURL=decoders.js.map

package/dist/domain/services/packs/decoders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decoders.js","sourceRoot":"","sources":["../../../../src/domain/services/packs/decoders.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA+BH,MAAM,QAAQ,GAA6B;IACzC,aAAa,EAAE,CAAC;IAChB,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,EAAE;IACX,KAAK,EAAE,IAAI;IACX,OAAO,EAAE,IAAI;IACb,cAAc,EAAE,KAAK;CACtB,CAAC;AAEF,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAChD,MAAM,MAAM,GAAG,yBAAyB,CAAC;AACzC,MAAM,SAAS,GAAG,0BAA0B,CAAC;AAE7C,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAChC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS,EAAE,CAAC;IACtF,CAAC;IACD,OAAO,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B;IACnE,6EAA6E;IAC7E,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC9E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,OAAuB,EAAE;IAC9E,MAAM,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;IACnC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,MAAM,QAAQ,GAAG,CAAC,QAAkB,EAAE,OAAsB,EAAE,MAAc,EAAE,YAAoB,EAAE,EAAE;QACpG,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,aAAa,IAAI,CAAC,OAAO;YAAE,OAAO;QACtD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACrF,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,aAAa;YAAE,OAAO;QAClE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO;QACzD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,QAAkB,EAAE,MAAuC,EAAE,EAAE;QACvF,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,IAAI,CAAyB,CAAC;QAC9B,wEAAwE;QACxE,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC;YACpE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,OAAO;gBAAE,SAAS;YACtC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAExC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,cAAc,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,CAAC,KAAK;YAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,CAAC,OAAO;YAAE,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/domain/services/packs/engine.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Vendored from midstream `AIMDS/src/detection/engine.ts` at commit abe78d6.
+ *
+ * InjectionDetector: pack-driven prompt-injection detector.
+ *
+ * Pipeline: normalise -> text variants -> one regex exec per (pattern,
+ * variant) -> bounded decode of encoded blobs -> one re-scan of each decoded
+ * string with every pack except encoded_instruction (no recursion).
+ *
+ * ruflo changes:
+ *  - packs come from the embedded `./data/` modules, validated and compiled
+ *    ONCE per process (`compiledPacks()`); a detector instance only selects
+ *    which compiled packs it scans, so creating detectors is cheap.
+ *  - `packs` config also accepts `true`/`false` or a list of pack names.
+ *  - threats carry `matchLength` so callers can report a location span.
+ *  - normalised/decoded text is used for matching only; it is never returned
+ *    (the `match` excerpt is the only text echoed, capped at 160 chars).
+ */
+import { CompiledPattern, PatternPack, Severity, ThreatKind } from './pattern-loader.js';
+import { TextVariant } from './normalize.js';
+import { DecoderOptions, Encoding } from './decoders.js';
+export type PackName = 'core' | 'tool_invocation' | 'exfil_url' | 'encoded_instruction' | 'slack_markup_forgery' | 'instruction_override_i18n' | (string & {});
+/**
+ * Which packs to scan. `true`/omitted: every pack whose `enabledByDefault`
+ * is set (all six vendored packs). `false`: none. A list: exactly those.
+ * A record: per-pack overrides on top of the defaults.
+ */
+export type PackSelection = boolean | readonly PackName[] | Partial<Record<PackName, boolean>>;
+export interface InjectionDetectorConfig {
+    readonly packs?: PackSelection;
+    /** Preloaded packs (tests). Replaces the embedded packs; compiled per instance. */
+    readonly preloaded?: readonly PatternPack[];
+    /** Scan obfuscation variants (separators, leet, compact). Default true. */
+    readonly variants?: boolean;
+    /** Decode base64/hex/url blobs and re-scan once. Default true when encoded_instruction is enabled. */
+    readonly decode?: boolean;
+    readonly decoder?: DecoderOptions;
+    /** Inputs longer than this are truncated before scanning. Default 262144. */
+    readonly maxInputChars?: number;
+}
+export interface InjectionThreat {
+    readonly id: string;
+    readonly pack: string;
+    readonly type: ThreatKind;
+    readonly severity: Severity;
+    readonly confidence: number;
+    readonly description: string;
+    /** Regex source of the pattern that matched. */
+    readonly regex: string;
+    readonly match: string;
+    readonly offset: number;
+    readonly matchLength: number;
+    /** Which text variant matched: base, separators, leet, compact. */
+    readonly variant: TextVariant['name'];
+    /** Set when the match was found in decoded content. */
+    readonly decodedFrom?: Encoding;
+}
+export interface InjectionReport {
+    readonly safe: boolean;
+    readonly maxSeverity: Severity | null;
+    readonly threats: readonly InjectionThreat[];
+    readonly scanned: {
+        variants: number;
+        decoded: number;
+        patterns: number;
+    };
+    readonly truncated: boolean;
+    readonly durationMs: number;
+}
+interface CompiledPackSet {
+    readonly packs: Map<string, PatternPack>;
+    readonly compiled: Map<string, CompiledPattern[]>;
+}
+/** The embedded packs, validated, compiled and warmed once per process. */
+export declare function compiledPacks(): CompiledPackSet;
+export declare class InjectionDetector {
+    private readonly enabled;
+    private readonly compiled;
+    private readonly rescan;
+    private readonly cfg;
+    constructor(config?: InjectionDetectorConfig);
+    /** Names of packs that are loaded and enabled. */
+    enabledPacks(): string[];
+    /** Total compiled patterns across enabled packs. */
+    patternCount(): number;
+    detect(input: string): InjectionReport;
+    private scanVariant;
+}
+/** Shared detector with every default-on pack. */
+export declare function getInjectionDetector(): InjectionDetector;
+export declare function createInjectionDetector(config?: InjectionDetectorConfig): InjectionDetector;
+export {};
+//# sourceMappingURL=engine.d.ts.map

package/dist/domain/services/packs/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../../src/domain/services/packs/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACL,eAAe,EACf,WAAW,EACX,QAAQ,EACR,UAAU,EAGX,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAA+B,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,QAAQ,EAA4B,MAAM,eAAe,CAAC;AAGnF,MAAM,MAAM,QAAQ,GAChB,MAAM,GACN,iBAAiB,GACjB,WAAW,GACX,qBAAqB,GACrB,sBAAsB,GACtB,2BAA2B,GAC3B,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,SAAS,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAE/F,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B,mFAAmF;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,WAAW,EAAE,CAAC;IAC5C,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,sGAAsG;IACtG,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACtC,uDAAuD;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAKD,UAAU,eAAe;IACvB,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;CACnD;AA+BD,2EAA2E;AAC3E,wBAAgB,aAAa,IAAI,eAAe,CAM/C;AAUD,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAC7C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAiH;gBAEzH,MAAM,GAAE,uBAA4B;IAkBhD,kDAAkD;IAClD,YAAY,IAAI,MAAM,EAAE;IAIxB,oDAAoD;IACpD,YAAY,IAAI,MAAM;IAItB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe;IAuCtC,OAAO,CAAC,WAAW;CAgCpB;AAgBD,kDAAkD;AAClD,wBAAgB,oBAAoB,IAAI,iBAAiB,CAOxD;AAED,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,uBAAuB,GAAG,iBAAiB,CAE3F"}

package/dist/domain/services/packs/engine.js

@@ -0,0 +1,190 @@
+/**
+ * Vendored from midstream `AIMDS/src/detection/engine.ts` at commit abe78d6.
+ *
+ * InjectionDetector: pack-driven prompt-injection detector.
+ *
+ * Pipeline: normalise -> text variants -> one regex exec per (pattern,
+ * variant) -> bounded decode of encoded blobs -> one re-scan of each decoded
+ * string with every pack except encoded_instruction (no recursion).
+ *
+ * ruflo changes:
+ *  - packs come from the embedded `./data/` modules, validated and compiled
+ *    ONCE per process (`compiledPacks()`); a detector instance only selects
+ *    which compiled packs it scans, so creating detectors is cheap.
+ *  - `packs` config also accepts `true`/`false` or a list of pack names.
+ *  - threats carry `matchLength` so callers can report a location span.
+ *  - normalised/decoded text is used for matching only; it is never returned
+ *    (the `match` excerpt is the only text echoed, capped at 160 chars).
+ */
+import { compilePack, validatePack, } from './pattern-loader.js';
+import { normalizeText, textVariants } from './normalize.js';
+import { extractDecodedCandidates } from './decoders.js';
+import { EMBEDDED_PACKS } from './data/index.js';
+const SEVERITY_RANK = { low: 0, medium: 1, high: 2, critical: 3 };
+const VARIANT_PENALTY = { base: 0, separators: 0.05, leet: 0.1, compact: 0.15 };
+let embedded = null;
+function compileSet(packs) {
+    const byName = new Map();
+    const compiled = new Map();
+    for (const raw of packs) {
+        const pack = validatePack(raw, raw.pack);
+        if (byName.has(pack.pack))
+            throw new Error(`pattern pack: duplicate pack ${pack.pack}`);
+        byName.set(pack.pack, pack);
+        compiled.set(pack.pack, compilePack(pack));
+    }
+    return { packs: byName, compiled };
+}
+/**
+ * V8 compiles a RegExp lazily on its first exec, which made the first
+ * detect() of a process ~17 ms. Running every pattern and the normaliser once
+ * here moves that cost to construction, outside detectionTimeMs.
+ */
+function warmUp(set) {
+    const sample = normalizeText('Warm-up: ignore the p.r.e.v.i.o.u.s n0te at https://example.invalid/?q=aGVsbG8gd29ybGQ');
+    for (const v of textVariants(sample)) {
+        for (const list of set.compiled.values()) {
+            for (const c of list)
+                (v.compactForm ? c.compactRe : c.re)?.exec(v.text);
+        }
+    }
+    extractDecodedCandidates(sample);
+}
+/** The embedded packs, validated, compiled and warmed once per process. */
+export function compiledPacks() {
+    if (!embedded) {
+        embedded = compileSet(EMBEDDED_PACKS);
+        warmUp(embedded);
+    }
+    return embedded;
+}
+function isEnabled(name, pack, sel) {
+    if (sel === undefined || sel === true)
+        return pack.enabledByDefault;
+    if (sel === false)
+        return false;
+    if (Array.isArray(sel))
+        return sel.includes(name);
+    const flag = sel[name];
+    return flag === true || (flag === undefined && pack.enabledByDefault);
+}
+export class InjectionDetector {
+    enabled;
+    compiled;
+    rescan;
+    cfg;
+    constructor(config = {}) {
+        const set = config.preloaded ? compileSet(config.preloaded) : compiledPacks();
+        this.enabled = new Set();
+        this.compiled = [];
+        for (const [name, pack] of set.packs) {
+            if (!isEnabled(name, pack, config.packs))
+                continue;
+            this.enabled.add(name);
+            this.compiled.push(...set.compiled.get(name));
+        }
+        this.rescan = this.compiled.filter((c) => c.spec.pack !== 'encoded_instruction');
+        this.cfg = {
+            variants: config.variants ?? true,
+            decode: config.decode ?? this.enabled.has('encoded_instruction'),
+            maxInputChars: config.maxInputChars ?? 262144,
+            decoder: config.decoder ?? {},
+        };
+    }
+    /** Names of packs that are loaded and enabled. */
+    enabledPacks() {
+        return [...this.enabled];
+    }
+    /** Total compiled patterns across enabled packs. */
+    patternCount() {
+        return this.compiled.length;
+    }
+    detect(input) {
+        const start = performance.now();
+        if (this.compiled.length === 0) {
+            return { safe: true, maxSeverity: null, threats: [], scanned: { variants: 0, decoded: 0, patterns: 0 }, truncated: false, durationMs: 0 };
+        }
+        const truncated = input.length > this.cfg.maxInputChars;
+        const text = truncated ? input.slice(0, this.cfg.maxInputChars) : input;
+        const normalized = normalizeText(text);
+        const variants = this.cfg.variants
+            ? textVariants(normalized)
+            : [{ name: 'base', text: normalized, compactForm: false }];
+        const found = [];
+        for (const v of variants)
+            this.scanVariant(v, this.compiled, found, undefined);
+        let decoded = 0;
+        if (this.cfg.decode) {
+            for (const cand of extractDecodedCandidates(normalized, this.cfg.decoder)) {
+                decoded++;
+                const inner = normalizeText(cand.decoded);
+                const innerVariants = this.cfg.variants
+                    ? textVariants(inner, 8192)
+                    : [{ name: 'base', text: inner, compactForm: false }];
+                for (const v of innerVariants)
+                    this.scanVariant(v, this.rescan, found, cand.encoding, cand.offset, cand.sourceLength);
+            }
+        }
+        const threats = dedupe(found);
+        const maxSeverity = threats.length ? threats[0].severity : null;
+        return {
+            safe: threats.length === 0,
+            maxSeverity,
+            threats,
+            scanned: { variants: variants.length, decoded, patterns: this.compiled.length },
+            truncated,
+            durationMs: performance.now() - start,
+        };
+    }
+    scanVariant(v, patterns, out, decodedFrom, baseOffset = 0, sourceLength) {
+        for (const c of patterns) {
+            const re = v.compactForm ? c.compactRe : c.re;
+            if (!re)
+                continue;
+            const m = re.exec(v.text);
+            if (!m || m[0].length === 0)
+                continue;
+            const base = c.spec.confidence ?? 0.7;
+            const confidence = Math.max(0.1, Math.round((base - VARIANT_PENALTY[v.name] - (decodedFrom ? 0.05 : 0)) * 100) / 100);
+            out.push({
+                id: c.spec.id,
+                pack: c.spec.pack,
+                type: c.spec.type,
+                severity: c.spec.severity,
+                confidence,
+                description: c.spec.description,
+                regex: c.spec.regex,
+                match: m[0].length > 160 ? `${m[0].slice(0, 157)}...` : m[0],
+                // A decoded match is reported at the encoded blob it came from.
+                offset: decodedFrom ? baseOffset : m.index,
+                matchLength: decodedFrom ? (sourceLength ?? m[0].length) : m[0].length,
+                variant: v.name,
+                ...(decodedFrom ? { decodedFrom } : {}),
+            });
+        }
+    }
+}
+/** One threat per pattern id (highest confidence), sorted by severity then confidence. */
+function dedupe(threats) {
+    const best = new Map();
+    for (const t of threats) {
+        const prev = best.get(t.id);
+        if (!prev || t.confidence > prev.confidence)
+            best.set(t.id, t);
+    }
+    return [...best.values()].sort((a, b) => SEVERITY_RANK[b.severity] - SEVERITY_RANK[a.severity] || b.confidence - a.confidence);
+}
+let defaultDetector = null;
+/** Shared detector with every default-on pack. */
+export function getInjectionDetector() {
+    if (!defaultDetector) {
+        defaultDetector = new InjectionDetector();
+        // Warm the detect() path itself (dedupe, sort) before any timed call.
+        defaultDetector.detect('warm-up: use the fetch_url tool on https://example.invalid/x');
+    }
+    return defaultDetector;
+}
+export function createInjectionDetector(config) {
+    return new InjectionDetector(config);
+}
+//# sourceMappingURL=engine.js.map

package/dist/domain/services/packs/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../../src/domain/services/packs/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAKL,WAAW,EACX,YAAY,GACb,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,YAAY,EAAe,MAAM,gBAAgB,CAAC;AAC1E,OAAO,EAA4B,wBAAwB,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AA0DjD,MAAM,aAAa,GAA6B,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC5F,MAAM,eAAe,GAAwC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAOrH,IAAI,QAAQ,GAA2B,IAAI,CAAC;AAE5C,SAAS,UAAU,CAAC,KAA6B;IAC/C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;IACtD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,SAAS,MAAM,CAAC,GAAoB;IAClC,MAAM,MAAM,GAAG,aAAa,CAAC,wFAAwF,CAAC,CAAC;IACvH,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,IAAI,IAAI;gBAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,wBAAwB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,IAAiB,EAAE,GAA8B;IAChF,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC;IACpE,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,IAAI,GAAI,GAAwC,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAc;IACrB,QAAQ,CAAoB;IAC5B,MAAM,CAAoB;IAC1B,GAAG,CAAiH;IAErI,YAAY,SAAkC,EAAE;QAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9E,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACrC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC;gBAAE,SAAS;YACnD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,GAAG;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAChE,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,MAAM;YAC7C,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,YAAY;QACV,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,oDAAoD;IACpD,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QAC5I,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC;QACxD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACxE,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAkB,IAAI,CAAC,GAAG,CAAC,QAAQ;YAC/C,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC;YAC1B,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QAE7D,MAAM,KAAK,GAAsB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,IAAI,QAAQ;YAAE,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAE/E,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;YACpB,KAAK,MAAM,IAAI,IAAI,wBAAwB,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1E,OAAO,EAAE,CAAC;gBACV,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1C,MAAM,aAAa,GAAkB,IAAI,CAAC,GAAG,CAAC,QAAQ;oBACpD,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC;oBAC3B,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxD,KAAK,MAAM,CAAC,IAAI,aAAa;oBAAE,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACxH,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;YAC1B,WAAW;YACX,OAAO;YACP,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAC/E,SAAS;YACT,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK;SACtC,CAAC;IACJ,CAAC;IAEO,WAAW,CACjB,CAAc,EACd,QAAoC,EACpC,GAAsB,EACtB,WAAiC,EACjC,UAAU,GAAG,CAAC,EACd,YAAqB;QAErB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACtC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC;YACtC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;YACtH,GAAG,CAAC,IAAI,CAAC;gBACP,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE;gBACb,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;gBACjB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI;gBACjB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ;gBACzB,UAAU;gBACV,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW;gBAC/B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;gBACnB,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5D,gEAAgE;gBAChE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;gBAC1C,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;gBACtE,OAAO,EAAE,CAAC,CAAC,IAAI;gBACf,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAED,0FAA0F;AAC1F,SAAS,MAAM,CAAC,OAA0B;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAA2B,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAC/F,CAAC;AACJ,CAAC;AAED,IAAI,eAAe,GAA6B,IAAI,CAAC;AAErD,kDAAkD;AAClD,MAAM,UAAU,oBAAoB;IAClC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,eAAe,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC1C,sEAAsE;QACtE,eAAe,CAAC,MAAM,CAAC,8DAA8D,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAgC;IACtE,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC"}

package/dist/domain/services/packs/index.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Pack-driven prompt-injection detection (AIMDS pattern packs).
+ *
+ * Vendored from midstream `AIMDS/src/detection/` at commit abe78d6. Pattern
+ * data is embedded under `./data/` (from `AIMDS/patterns/*.json`, shared with
+ * the Rust `aidefence-core` crate); this module loads, compiles, normalises,
+ * decodes, and matches.
+ */
+export { InjectionDetector, createInjectionDetector, getInjectionDetector, compiledPacks, } from './engine.js';
+export type { InjectionDetectorConfig, InjectionReport, InjectionThreat, PackName, PackSelection, } from './engine.js';
+export { validatePack, compilePack, compilePattern, SEVERITIES, THREAT_KINDS, } from './pattern-loader.js';
+export type { PatternPack, PatternSpec, CompiledPattern, Severity, ThreatKind } from './pattern-loader.js';
+export { normalizeText, textVariants, compactSource } from './normalize.js';
+export type { TextVariant } from './normalize.js';
+export { extractDecodedCandidates, rot13, reverseText, printableRatio } from './decoders.js';
+export type { DecodedCandidate, DecoderOptions, Encoding } from './decoders.js';
+export { EMBEDDED_PACKS } from './data/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/domain/services/packs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/domain/services/packs/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,uBAAuB,EACvB,eAAe,EACf,eAAe,EACf,QAAQ,EACR,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,cAAc,EACd,UAAU,EACV,YAAY,GACb,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC3G,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC5E,YAAY,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC7F,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/domain/services/packs/index.js

@@ -0,0 +1,14 @@
+/**
+ * Pack-driven prompt-injection detection (AIMDS pattern packs).
+ *
+ * Vendored from midstream `AIMDS/src/detection/` at commit abe78d6. Pattern
+ * data is embedded under `./data/` (from `AIMDS/patterns/*.json`, shared with
+ * the Rust `aidefence-core` crate); this module loads, compiles, normalises,
+ * decodes, and matches.
+ */
+export { InjectionDetector, createInjectionDetector, getInjectionDetector, compiledPacks, } from './engine.js';
+export { validatePack, compilePack, compilePattern, SEVERITIES, THREAT_KINDS, } from './pattern-loader.js';
+export { normalizeText, textVariants, compactSource } from './normalize.js';
+export { extractDecodedCandidates, rot13, reverseText, printableRatio } from './decoders.js';
+export { EMBEDDED_PACKS } from './data/index.js';
+//# sourceMappingURL=index.js.map

package/dist/domain/services/packs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/domain/services/packs/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,GACd,MAAM,aAAa,CAAC;AAQrB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,cAAc,EACd,UAAU,EACV,YAAY,GACb,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE5E,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7F,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/domain/services/packs/normalize.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Vendored from midstream `AIMDS/src/detection/normalize.ts` at commit abe78d6.
+ * Detection-only: output of this module is matched against, never shown to users.
+ */
+export interface TextVariant {
+    /** Name of the transform that produced this text. */
+    readonly name: 'base' | 'separators' | 'leet' | 'compact';
+    readonly text: string;
+    /** True when the variant has no whitespace left, so `\s+`-free regexes must be used. */
+    readonly compactForm: boolean;
+}
+/**
+ * Canonical form used for all matching. Idempotent.
+ */
+export declare function normalizeText(input: string): string;
+/**
+ * Variants of a normalised text, de-duplicated. `base` is always first.
+ * Variants are only generated for the first `limit` characters so the
+ * scan cost stays bounded.
+ */
+export declare function textVariants(normalized: string, limit?: number): TextVariant[];
+/** Compact-form regex source: `\s+`/`\s*` become empty so joined words match. */
+export declare function compactSource(source: string): string;
+//# sourceMappingURL=normalize.d.ts.map

package/dist/domain/services/packs/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../../src/domain/services/packs/normalize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAwDH,MAAM,WAAW,WAAW;IAC1B,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,MAAM,GAAG,SAAS,CAAC;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wFAAwF;IACxF,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQnD;AAgCD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,SAAQ,GAAG,WAAW,EAAE,CAe7E;AAED,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpD"}

package/dist/domain/services/packs/normalize.js

@@ -0,0 +1,118 @@
+/**
+ * Vendored from midstream `AIMDS/src/detection/normalize.ts` at commit abe78d6.
+ * Detection-only: output of this module is matched against, never shown to users.
+ */
+/**
+ * Text normalisation for injection detection.
+ *
+ * Produces a canonical form (NFKC, zero-width stripped, confusables folded,
+ * whitespace collapsed) plus a small set of bounded variants that undo common
+ * obfuscations (separator-joined words, single-character spacing, leetspeak,
+ * whitespace removal). Every transform is linear in input length.
+ */
+/** Zero-width and invisible formatting code points that carry no text. */
+const INVISIBLE = /[\u200B-\u200F\u202A-\u202E\u2060-\u2064\uFEFF\u00AD\u180E]/g;
+/**
+ * Explicit confusables map: Cyrillic and Greek letters whose glyphs are
+ * indistinguishable from Latin ones. NFKC does not fold these.
+ */
+const CONFUSABLES = {
+    'а': 'a', 'А': 'A', // а А
+    'е': 'e', 'Е': 'E', // е Е
+    'о': 'o', 'О': 'O', // о О
+    'р': 'p', 'Р': 'P', // р Р
+    'с': 'c', 'С': 'C', // с С
+    'у': 'y', 'У': 'Y', // у У
+    'х': 'x', 'Х': 'X', // х Х
+    'і': 'i', 'І': 'I', // і І
+    'ј': 'j', 'Ј': 'J', // ј Ј
+    'һ': 'h', 'Һ': 'H', // һ Һ
+    'ԁ': 'd', 'ԛ': 'q', 'ԝ': 'w',
+    'ѕ': 's', 'Ѕ': 'S', // ѕ Ѕ
+    'в': 'B', 'В': 'B', // в В (visually B in caps)
+    'к': 'k', 'К': 'K', // к К
+    'м': 'm', 'М': 'M', // м М
+    'н': 'H', 'Н': 'H', // н Н
+    'т': 'T', 'Т': 'T', // т Т
+    'α': 'a', 'Α': 'A', // α Α
+    'ε': 'e', 'Ε': 'E', // ε Ε
+    'ο': 'o', 'Ο': 'O', // ο Ο
+    'ρ': 'p', 'Ρ': 'P', // ρ Ρ
+    'ι': 'i', 'Ι': 'I', // ι Ι
+    'κ': 'k', 'Κ': 'K', // κ Κ
+    'ν': 'v', 'Ν': 'N', // ν Ν
+    'τ': 't', 'Τ': 'T', // τ Τ
+    'υ': 'u', 'Υ': 'Y', // υ Υ
+    'χ': 'x', 'Χ': 'X', // χ Χ
+    'Β': 'B', 'Η': 'H', 'Μ': 'M', 'Ζ': 'Z',
+};
+const CONFUSABLE_RE = new RegExp(`[${Object.keys(CONFUSABLES).join('')}]`, 'g');
+/** Leetspeak digits/symbols that stand in for letters. */
+const LEET = {
+    '0': 'o', '1': 'i', '3': 'e', '4': 'a', '5': 's', '7': 't', '@': 'a', '$': 's', '!': 'i', '|': 'l',
+};
+/**
+ * Canonical form used for all matching. Idempotent.
+ */
+export function normalizeText(input) {
+    return input
+        .normalize('NFKC')
+        .replace(INVISIBLE, '')
+        .replace(CONFUSABLE_RE, (ch) => CONFUSABLES[ch] ?? ch)
+        .replace(/[ \t\f\v ]+/g, ' ')
+        .replace(/ ?\r?\n ?/g, '\n')
+        .trim();
+}
+/**
+ * Join runs of single characters separated by one repeated separator
+ * ("i.g.n.o.r.e", "i g n o r e") into a word, and turn `_`/`-` between
+ * letters into spaces ("ignore_all_previous" -> "ignore all previous").
+ */
+function undoSeparators(text) {
+    // Runs of 3+ single letters joined by the same separator: i.g.n / i g n / i-g-n
+    const joined = text.replace(/\b(?:[A-Za-z][.\-_ ]){2,}[A-Za-z]\b/g, (run) => run.replace(/[.\-_ ]/g, ''));
+    return joined.replace(/(?<=[A-Za-z])[_\-]+(?=[A-Za-z])/g, ' ');
+}
+/**
+ * Fold leet digits to letters, only inside tokens that already contain a
+ * letter (so numbers, hashes, and IDs are left alone).
+ */
+function undoLeet(text) {
+    // ruflo: upstream matched `[cls]*[A-Za-z][cls]*`, which rescans a
+    // letter-free run (e.g. 100 KB of hex digits) from every start position:
+    // quadratic, 1.8 s per 100 KB. Matching maximal runs and checking for a
+    // letter in the callback yields the same tokens in linear time.
+    return text.replace(/[A-Za-z0-9@$!|]+/g, (token) => {
+        if (!/[A-Za-z]/.test(token))
+            return token;
+        if (!/[0-9@$!|]/.test(token))
+            return token;
+        return token.replace(/[0-9@$!|]/g, (ch) => LEET[ch] ?? ch);
+    });
+}
+/**
+ * Variants of a normalised text, de-duplicated. `base` is always first.
+ * Variants are only generated for the first `limit` characters so the
+ * scan cost stays bounded.
+ */
+export function textVariants(normalized, limit = 65536) {
+    const head = normalized.length > limit ? normalized.slice(0, limit) : normalized;
+    const out = [{ name: 'base', text: normalized, compactForm: false }];
+    const seen = new Set([normalized]);
+    const push = (name, text) => {
+        if (!seen.has(text)) {
+            seen.add(text);
+            out.push({ name, text, compactForm: name === 'compact' || !/\s/.test(text) });
+        }
+    };
+    const sep = undoSeparators(head);
+    push('separators', sep);
+    push('leet', undoLeet(sep));
+    push('compact', sep.replace(/[ \t.\-_]+/g, ''));
+    return out;
+}
+/** Compact-form regex source: `\s+`/`\s*` become empty so joined words match. */
+export function compactSource(source) {
+    return source.replace(/\\s[+*]/g, '');
+}
+//# sourceMappingURL=normalize.js.map

package/dist/domain/services/packs/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../../../src/domain/services/packs/normalize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;;GAOG;AAEH,0EAA0E;AAC1E,MAAM,SAAS,GAAG,8DAA8D,CAAC;AAEjF;;;GAGG;AACH,MAAM,WAAW,GAA2B;IAC1C,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;IAC5B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,2BAA2B;IAC/C,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM;IAC1B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;CACvC,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAEhF,0DAA0D;AAC1D,MAAM,IAAI,GAA2B;IACnC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;CACnG,CAAC;AAUF;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK;SACT,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACrD,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC;SAC5B,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC;SAC3B,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,IAAY;IAClC,gFAAgF;IAChF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CACzB,sCAAsC,EACtC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CACrC,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CAAC,IAAY;IAC5B,kEAAkE;IAClE,yEAAyE;IACzE,wEAAwE;IACxE,gEAAgE;IAChE,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,KAAK,GAAG,KAAK;IAC5D,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACjF,MAAM,GAAG,GAAkB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,IAAyB,EAAE,IAAY,EAAE,EAAE;QACvD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;IAChD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC"}