@evalguard/vercel-ai 1.0.0 → 1.0.2

package/CHANGELOG.md

@@ -0,0 +1,51 @@
+# @evalguard/vercel-ai
+
+This package wraps the Vercel AI SDK and routes every `checkInput` / `scoreOutput`
+call through one shared transport, `@evalguard/wrapper-core`'s
+`fetchWithTimeout`. A defect in that transport is a defect here.
+
+## 1.0.2 — unreleased
+
+### Security — a redirect defeated the guardrail verdict
+
+**Affects every published version up to and including `1.0.1`.**
+
+`fetchWithTimeout` called `fetch` with no redirect posture, and WHATWG/undici
+default to `redirect: "follow"` — so an omitted option is not neutral, it is
+the vulnerable setting.
+
+A `3xx` served on the API path rewrote the request to a bodyless `GET`
+(`301`/`302`/`303`), which means the prompt or completion you asked EvalGuard
+to screen **was never transmitted**. The redirect target's
+`{"blocked": false}` came back as an authoritative clean verdict on text it had
+never seen, and the wrapper — sitting on the hot path of your request handler —
+allowed it through. On `307`/`308` the body survives instead, so the text under
+inspection is re-POSTed verbatim to whatever host the redirect names.
+
+The existing reply validation could not catch it. It checks the *shape* of a
+verdict, and a redirected reply is perfectly well shaped: a well-formed verdict
+about nothing. `assertSecureBaseUrl` validates hop 0 only.
+
+**This needs no attacker.** An ordinary infrastructure redirect on the API path
+— an nginx trailing-slash rule, a load balancer, a corporate proxy, a proxy in
+front of a self-hosted deployment — silently converts every guardrail check
+behind it into an ALLOW.
+
+Fixed in `@evalguard/wrapper-core@1.3.0`, which sets `redirect: "error"` on
+that transport so the call fails **closed**.
+
+### How the fix reaches you
+
+The published `@evalguard/vercel-ai@1.0.1` declares
+`"@evalguard/wrapper-core": "^1.2.0"`, so a **fresh** resolve would pick up
+`wrapper-core@1.3.0` on its own. A lockfile will not: it holds you on
+`1.2.0`, which is what most installs are actually running. Upgrading this
+package to `1.0.2` is the reliable fix.
+
+Full advisory, including the other thirteen affected artifacts:
+`docs/security/advisory-2026-08-10-verdict-redirect-bypass.md` (SEC-051).
+
+### Earlier releases
+
+Recorded in the monorepo git history and in
+`packages/NPM_PUBLISH_CHECKLIST.md`; this file starts here.

package/README.md

@@ -161,10 +161,41 @@ withEvalguard(model, {
 });
 ```
 
+`withEvalguard` validates this object and **throws immediately** on a config it
+cannot work with, rather than turning it into a per-request failure:
+
+- `apiKey` must be a non-empty string (or a resolver function). An unset or
+  empty `EVALGUARD_API_KEY` used to be accepted, and then every guardrail check
+  failed — blocking every request under the default `blockOnViolation: true`,
+  and silently running **completely unguarded** under `blockOnViolation: false`.
+- `baseUrl` must be `https://` (or `http://` on loopback, for local testing).
+  Any other scheme — `ftp:`, `file:`, `data:`, `javascript:` — is rejected;
+  previously only plaintext `http:` to a non-loopback host was.
+- Unrecognised options are **warned about**, once per process. They have no
+  effect, so a typo (`blockOnviolation`) or an option that belongs to a
+  different wrapper (`evalOnResponse`, `onViolation`, `retry`, `circuit`,
+  `idempotency`) no longer passes in silence. Every documented boolean fails
+  safe when misspelled — `blockOnViolation`, `disableGuardrails` and
+  `disableLogging` all fall back to the guarded default — which is why this
+  warns rather than throws.
+
 ## Streaming works too
 
-Stream parts pass through verbatim. The trace is logged once on `finish`
-with the assembled text and token totals.
+The rail runs on the **input**, before the provider is called — so a blocked
+prompt throws `EvalguardBlockedError` and no stream is ever opened. Once the
+stream is open, parts pass through verbatim with backpressure preserved, and
+exactly one trace is emitted whichever way the stream ends: normally (assembled
+text + token totals), on an upstream error (`streamStatus: "error"`, and the
+error is surfaced to your consumer — never swallowed into a clean close), or on
+a client cancel (`streamStatus: "cancelled"`, and the cancel is propagated
+upstream so the provider connection is torn down).
+
+> **The model's output is not scanned.** This wrapper runs the input rail only:
+> generated text and stream chunks are returned to you verbatim. There is no
+> `evalOnResponse` option here — that lives in `@evalguard/openai`,
+> `@evalguard/anthropic` and `@evalguard/gemini`. Passing `evalOnResponse` (or
+> any other unrecognised option) to `withEvalguard` logs a warning and has no
+> effect.
 
 ```ts
 import { streamText } from "ai";
@@ -181,12 +212,25 @@ for await (const chunk of textStream) {
 > "guarantee" ("falls back to allow + don't log"). The wrappers went
 > fail-closed on 2026-05-28; the docs were never updated.
 
-If EvalGuard's API is unreachable, slow, or returns an error:
+If EvalGuard's API is unreachable, slow, returns an error, or answers `200`
+with a body that is not a firewall verdict (an empty body, `null`, non-JSON,
+`{}`, or an unrelated payload injected by a proxy):
 
 - `blockOnViolation: true` (**default**) — the wrapper **throws**
   `EvalguardBlockedError` with a `guardrail_unavailable` violation. The
   provider call is not made.
-- `blockOnViolation: false` — the call proceeds and the outage is recorded.
+- `blockOnViolation: false` — the call proceeds, and the outage is recorded on
+  the emitted trace as a `guardrail_unavailable` violation in
+  `guardrailResult.violations`, so an unguarded call is distinguishable from a
+  guarded one in your dashboard.
+
+> Corrected again 2026-08-07. The `blockOnViolation: false` half of that
+> sentence had nothing behind it: the outage was swallowed and `guardrailResult`
+> was left `undefined`, so the trace's metadata carried only
+> provider/model/cost/costPricingSource/timestamp and nothing said the rail had
+> not run. Now pinned by
+> `src/__tests__/config-validation-and-rail-blindspots.test.ts` on both the
+> `doGenerate` and `doStream` paths.
 
 Trace-log errors are silently swallowed in both modes.
 

package/dist/guardrail-client.d.ts

@@ -0,0 +1,41 @@
+export interface GuardrailCheckResult {
+    allowed: boolean;
+    violations: GuardrailViolation[];
+}
+export interface GuardrailViolation {
+    type: string;
+    severity: "critical" | "high" | "medium" | "low" | "info";
+    message: string;
+}
+export interface TraceLogData {
+    model: string;
+    provider: string;
+    input: unknown;
+    output: unknown;
+    latencyMs: number;
+    tokenUsage: {
+        input: number;
+        output: number;
+    };
+    cost: number;
+    projectId?: string;
+    metadata?: Record<string, unknown>;
+    guardrailResult?: GuardrailCheckResult;
+}
+export declare class GuardrailClient {
+    private readonly apiKey;
+    private readonly baseUrl;
+    constructor(apiKey: string, baseUrl?: string);
+    /**
+     * Pre-request guardrail check. Returns { allowed: true, violations: [] }
+     * on any error so the customer's LLM call never fails because of us.
+     */
+    checkInput(prompt: string, metadata?: Record<string, unknown>): Promise<GuardrailCheckResult>;
+    /**
+     * Post-request trace log. Fire-and-forget — errors silently swallowed.
+     */
+    logTrace(data: TraceLogData): Promise<void>;
+    private headers;
+    private fetchWithTimeout;
+}
+//# sourceMappingURL=guardrail-client.d.ts.map

package/dist/guardrail-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail-client.d.ts","sourceRoot":"","sources":["../src/guardrail-client.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,kBAAkB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACxC;AAKD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM;IAK5C;;;OAGG;IACG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA4BnG;;OAEG;IACG,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBjD,OAAO,CAAC,OAAO;IAQf,OAAO,CAAC,gBAAgB;CAKzB"}

package/dist/guardrail-client.js

@@ -0,0 +1,88 @@
+// ── EvalGuard Guardrail Client (Vercel AI variant) ─────────────────────────
+// Mirrors openai-wrapper / anthropic-wrapper guardrail client. Class
+// itself is kept inline. Safety-critical escape-hatch logic now imports
+// from wrapper-core — see langchain-wrapper/guardrail-client.ts header
+// for the rationale.
+import { isLegacyFailOpen, warnLegacyFailOpenOnce, parseFirewallCheckResult } from "@evalguard/wrapper-core";
+const DEFAULT_BASE_URL = "https://evalguard.ai/api/v1";
+const REQUEST_TIMEOUT_MS = 5_000;
+export class GuardrailClient {
+    apiKey;
+    baseUrl;
+    constructor(apiKey, baseUrl) {
+        this.apiKey = apiKey;
+        this.baseUrl = (baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, "");
+    }
+    /**
+     * Pre-request guardrail check. Returns { allowed: true, violations: [] }
+     * on any error so the customer's LLM call never fails because of us.
+     */
+    async checkInput(prompt, metadata) {
+        // 2026-05-28: fail-CLOSED on outages. Escape-hatch env flag via
+        // shared wrapper-core helper (single source of truth).
+        try {
+            const res = await this.fetchWithTimeout(`${this.baseUrl}/firewall/check`, {
+                method: "POST",
+                headers: this.headers(),
+                body: JSON.stringify({ input: prompt, metadata }),
+            });
+            if (!res.ok) {
+                if (isLegacyFailOpen()) {
+                    warnLegacyFailOpenOnce();
+                    return { allowed: true, violations: [] };
+                }
+                throw new Error(`firewall/check returned ${res.status}`);
+            }
+            // Shared parser — reads the apiSuccess envelope data.blocked, NOT the
+            // non-existent body.action that silently ALLOWED every server block. P0 2026-05-30.
+            return parseFirewallCheckResult(await res.json());
+        }
+        catch (err) {
+            if (isLegacyFailOpen()) {
+                warnLegacyFailOpenOnce();
+                return { allowed: true, violations: [] };
+            }
+            throw err;
+        }
+    }
+    /**
+     * Post-request trace log. Fire-and-forget — errors silently swallowed.
+     */
+    async logTrace(data) {
+        try {
+            await this.fetchWithTimeout(`${this.baseUrl}/traces`, {
+                method: "POST",
+                headers: this.headers(),
+                body: JSON.stringify({
+                    projectId: data.projectId,
+                    provider: data.provider,
+                    model: data.model,
+                    input: data.input,
+                    output: data.output,
+                    latencyMs: data.latencyMs,
+                    tokenUsage: data.tokenUsage,
+                    cost: data.cost,
+                    metadata: data.metadata,
+                    guardrailResult: data.guardrailResult,
+                    timestamp: new Date().toISOString(),
+                }),
+            });
+        }
+        catch {
+            // logging failure must never break the user's call
+        }
+    }
+    headers() {
+        return {
+            "Content-Type": "application/json",
+            Authorization: `Bearer ${this.apiKey}`,
+            "User-Agent": "@evalguard/vercel-ai/1.0.0",
+        };
+    }
+    fetchWithTimeout(url, init) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+        return fetch(url, { ...init, signal: controller.signal }).finally(() => clearTimeout(timer));
+    }
+}
+//# sourceMappingURL=guardrail-client.js.map

package/dist/guardrail-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guardrail-client.js","sourceRoot":"","sources":["../src/guardrail-client.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,qEAAqE;AACrE,wEAAwE;AACxE,uEAAuE;AACvE,qBAAqB;AACrB,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AA0B7G,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AACvD,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,MAAM,OAAO,eAAe;IACT,MAAM,CAAS;IACf,OAAO,CAAS;IAEjC,YAAY,MAAc,EAAE,OAAgB;QAC1C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,QAAkC;QACjE,gEAAgE;QAChE,uDAAuD;QACvD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,OAAO,iBAAiB,EAAE;gBACxE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;gBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;aAClD,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,gBAAgB,EAAE,EAAE,CAAC;oBACvB,sBAAsB,EAAE,CAAC;oBACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;gBAC3C,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,sEAAsE;YACtE,oFAAoF;YACpF,OAAO,wBAAwB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,gBAAgB,EAAE,EAAE,CAAC;gBACvB,sBAAsB,EAAE,CAAC;gBACzB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;YAC3C,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAkB;QAC/B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,OAAO,SAAS,EAAE;gBACpD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;gBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;IAEO,OAAO;QACb,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE;YACtC,YAAY,EAAE,4BAA4B;SAC3C,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,GAAW,EAAE,IAAiB;QACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/F,CAAC;CACF"}

package/dist/index.d.ts

@@ -8,10 +8,17 @@
  * EvalGuard project. Guardrail semantics are fail-CLOSED when
  * blockOnViolation is on (the default): if the firewall is unreachable the
  * call is BLOCKED with an EvalguardBlockedError, matching the langchain /
- * llamaindex wrappers. In monitor-only mode (blockOnViolation:false) a
- * guardrail outage is swallowed and the call proceeds. Trace logging always
+ * llamaindex wrappers. In monitor-only mode (blockOnViolation:false) the call
+ * proceeds and the outage is RECORDED on the trace as a `guardrail_unavailable`
+ * violation — it used to be silently swallowed, which made an unguarded call
+ * indistinguishable from a guarded one (audit 2026-08-07). Trace logging always
  * fails open — a logging error never breaks or delays the user's call.
  *
+ * SCOPE: this wrapper runs the INPUT rail only. Model output is streamed and
+ * returned verbatim and is never scanned — there is no `evalOnResponse` here,
+ * unlike @evalguard/openai, @evalguard/anthropic and @evalguard/gemini. Passing
+ * `evalOnResponse` to `withEvalguard` logs a warning and has no effect.
+ *
  * Usage:
  *
  *   import { openai } from "@ai-sdk/openai";
@@ -51,9 +58,26 @@
  *
  * Instead of importing `wrapLanguageModel` we re-implement the same "delegate
  * to the model, override doGenerate/doStream" shape directly, as a PROXY over
- * the original model. Everything except the two call methods is forwarded to the
- * real instance, so capability fields — most importantly `supportedUrls` —
- * pass through untouched. Two earlier versions got this wrong:
+ * the original model.
+ *
+ * That proxy is DEFAULT-DENY as of 2026-08-08. Until then it forwarded
+ * everything except `doGenerate` / `doStream` straight to `Reflect.get` — a
+ * denylist of two guarded names — on the recorded argument that the AI SDK model
+ * interface is "a fixed, tiny surface". `@ai-sdk/provider@3.0.10` in fact
+ * declares FOUR call methods across SEVEN model specifications, and `doEmbed`
+ * (embedding models) and `doRerank` (reranking models) were measured delivering
+ * attack text to the provider on ZERO firewall calls, as were speech and
+ * transcription calls whose payload lives in `options.text` / `options.audio`
+ * rather than `options.prompt`. Every property is now guarded unless
+ * `./surface.ts` names it, using the same wrapper-core machinery as
+ * `@evalguard/anthropic` and `@evalguard/gemini`, so a method the AI SDK ships
+ * tomorrow is gated on the day it lands.
+ *
+ * Capability fields — most importantly `supportedUrls` — still pass through
+ * untouched; they are on the policy's justified passthrough set for exactly that
+ * reason, and `src/__tests__/model-spec-surface-matrix.test.ts` asserts a
+ * wrapped model's `supportedUrls` RegExps still work and cost zero firewall
+ * requests. Two earlier versions got this wrong:
  *   1. hand-copying a fixed list of V1 props (`supportsUrl`,
  *      `supportsImageUrls`, …) that no longer exist on a V2 model, which
  *      silently STRIPPED `supportedUrls` (audit MEDIUM 2026-07-14);
@@ -211,6 +235,8 @@ export interface WithEvalguardConfig {
     /** Free-form metadata attached to every trace. */
     metadata?: Record<string, unknown>;
 }
+/** Internal — lets the test suite re-arm the once-per-process unknown-option warning. */
+export declare function _resetConfigWarningsForTests(): void;
 /**
  * Error thrown when blockOnViolation=true and the input is rejected by
  * EvalGuard's firewall. Customers can catch this distinctly from provider
@@ -241,11 +267,15 @@ export declare class EvalguardBlockedError extends Error {
  * ai@6 + @ai-sdk/openai@3 and ai@7 + @ai-sdk/openai@4 from packed tarballs on
  * 2026-08-02, and pinned by `src/__tests__/ai-sdk-assignability.test.ts`.
  *
- * Only `doGenerate` / `doStream` are intercepted; every other property read
- * (including prototype getters such as `supportedUrls` on a class-based
- * provider model) is forwarded to the real instance, so capability fields
- * compose with other middleware (caching, logging) the customer may already
- * have.
+ * `doGenerate` / `doStream` get the rich interception (stream teeing, token
+ * accounting, cost, trace logging). Every OTHER property is default-deny: a
+ * capability or identity field named on `./surface.ts`'s justified passthrough
+ * set is forwarded to the real instance verbatim — including prototype getters
+ * such as `supportedUrls` on a class-based provider model, so capability fields
+ * still compose with other middleware (caching, logging) the customer may
+ * already have — and anything else that is callable is put behind the firewall.
+ * See `./surface.ts` for why: `Reflect.get` for everything unlisted was measured
+ * shipping attack text to the provider on zero firewall calls.
  */
 export declare function withEvalguard<TModel extends LanguageModelV2>(model: TModel, config: WithEvalguardConfig): TModel;
 export type { GuardrailCheckResult, GuardrailViolation, TraceLogData } from "@evalguard/wrapper-core";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsEG;AAEH,OAAO,EAAuC,KAAK,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAqBzG;;;;;;;;;;;;;;GAcG;AACH,KAAK,uBAAuB,GACxB,MAAM,GACN;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GACpD,SAAS,CAAC;AAEd,UAAU,oBAAoB;IAE5B,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAGvC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,8BAA8B;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,KAAK,0BAA0B,GAC3B,8BAA8B,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAoB3C,UAAU,0BAA0B;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,UAAU,6BAA6B;IAErC,OAAO,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAEvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,UAAU,2BAA2B;IACnC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;OAQG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,aAAa,CAAC,EACV,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GACxB,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1C,UAAU,CAAC,OAAO,EAAE,0BAA0B,GAAG,WAAW,CAAC,6BAA6B,CAAC,CAAC;IAC5F,QAAQ,CAAC,OAAO,EAAE,0BAA0B,GAAG,WAAW,CAAC,2BAA2B,CAAC,CAAC;CASzF;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,eAAe,CAAC;AAE9C,MAAM,WAAW,mBAAmB;IAClC,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,qEAAqE;IACrE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;gBAC5C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,oBAAoB,CAAC,YAAY,CAAC;CAK5E;AA0CD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,aAAa,CAAC,MAAM,SAAS,eAAe,EAC1D,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,mBAAmB,GAC1B,MAAM,CAkPR;AA0BD,YAAY,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAStG,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC9E,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8FG;AAEH,OAAO,EAQL,KAAK,oBAAoB,EAE1B,MAAM,yBAAyB,CAAC;AAsBjC;;;;;;;;;;;;;;GAcG;AACH,KAAK,uBAAuB,GACxB,MAAM,GACN;IAAE,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GACpD,SAAS,CAAC;AAEd,UAAU,oBAAoB;IAE5B,WAAW,CAAC,EAAE,uBAAuB,CAAC;IACtC,YAAY,CAAC,EAAE,uBAAuB,CAAC;IAGvC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,8BAA8B;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,KAAK,0BAA0B,GAC3B,8BAA8B,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAoB3C,UAAU,0BAA0B;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,UAAU,6BAA6B;IAErC,OAAO,CAAC,EAAE,0BAA0B,EAAE,CAAC;IAEvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,UAAU,2BAA2B;IACnC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;;;OAQG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,aAAa,CAAC,EACV,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,GACxB,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1C,UAAU,CAAC,OAAO,EAAE,0BAA0B,GAAG,WAAW,CAAC,6BAA6B,CAAC,CAAC;IAC5F,QAAQ,CAAC,OAAO,EAAE,0BAA0B,GAAG,WAAW,CAAC,2BAA2B,CAAC,CAAC;CASzF;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,eAAe,CAAC;AAE9C,MAAM,WAAW,mBAAmB;IAClC,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,qEAAqE;IACrE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AA4HD,yFAAyF;AACzF,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAED;;;;GAIG;AACH,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC,YAAY,CAAC,CAAC;gBAC5C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,oBAAoB,CAAC,YAAY,CAAC;CAK5E;AA0CD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,aAAa,CAAC,MAAM,SAAS,eAAe,EAC1D,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,mBAAmB,GAC1B,MAAM,CAyUR;AAmID,YAAY,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAStG,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC9E,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC"}