@itphx/synth-core 0.2.0

package/dist/engine/gateway/rate-limiter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limiter.test.js","sourceRoot":"","sources":["../../../src/engine/gateway/rate-limiter.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3C,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B;QACnE,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,0BAA0B;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAEnC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,yBAAyB;QAChE,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB;QAE5D,sDAAsD;QACtD,MAAM,CAAC,eAAe,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACnC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/gateway/secret-detector.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Детекция секретов по регулярным выражениям (AD-036).
+ * Чистая функция: text → уникальные значения секретов.
+ * Паттерны можно передавать извне (SecretPatternStore), по умолчанию — встроенный список.
+ */
+/** Паттерн детекции: тип секрета + regex (готовый RegExp или сериализуемая строка-source). */
+export interface SecretDetectorPattern {
+    type: string;
+    regex: RegExp | string;
+}
+/** Встроенный список паттернов по умолчанию (полностью заменяется пользовательским override). */
+export declare const DEFAULT_PATTERNS: SecretDetectorPattern[];
+/**
+ * Находит подстроки-секреты в тексте.
+ * Возвращает уникальные значения. Для ключей применяется порог длины MIN_KEY_LENGTH,
+ * для номеров карт — проверка Luhn.
+ * @param patterns паттерны детекции; по умолчанию — DEFAULT_PATTERNS.
+ */
+export declare function detectSecrets(text: string, patterns?: SecretDetectorPattern[]): string[];
+/**
+ * Маскирует секрет для логов и warning: только узнаваемый префикс, без полного значения.
+ * Примеры: sk-***, ghp_***, Bearer ***, email***, card***.
+ */
+export declare function maskSecret(secret: string): string;
+//# sourceMappingURL=secret-detector.d.ts.map

package/dist/engine/gateway/secret-detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-detector.d.ts","sourceRoot":"","sources":["../../../src/engine/gateway/secret-detector.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,8FAA8F;AAC9F,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;CACxB;AAED,iGAAiG;AACjG,eAAO,MAAM,gBAAgB,EAAE,qBAAqB,EAWnD,CAAC;AA6BF;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,qBAAqB,EAAqB,GACnD,MAAM,EAAE,CAyBV;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAejD"}

package/dist/engine/gateway/secret-detector.js

@@ -0,0 +1,109 @@
+/**
+ * Детекция секретов по регулярным выражениям (AD-036).
+ * Чистая функция: text → уникальные значения секретов.
+ * Паттерны можно передавать извне (SecretPatternStore), по умолчанию — встроенный список.
+ */
+/** Минимальная длина для «ключевых» секретов. */
+const MIN_KEY_LENGTH = 12;
+/** Встроенный список паттернов по умолчанию (полностью заменяется пользовательским override). */
+export const DEFAULT_PATTERNS = [
+    { type: 'openai', regex: /\bsk-[A-Za-z0-9_-]{20,}/g },
+    { type: 'github', regex: /\bghp_[A-Za-z0-9]{36}\b/g },
+    { type: 'github_pat', regex: /\bgithub_pat_[A-Za-z0-9_]{50,}/g },
+    { type: 'aws', regex: /\bAKIA[0-9A-Z]{16}\b/g },
+    { type: 'google', regex: /\bAIza[0-9A-Za-z_-]{35}\b/g },
+    { type: 'stripe', regex: /\bsk_live_[0-9a-zA-Z]{24,}/g },
+    { type: 'bearer', regex: /\bBearer\s+[A-Za-z0-9\-._~+/]{20,}/g },
+    { type: 'email', regex: /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b/g },
+    { type: 'card', regex: /\b\d{13,16}\b/g },
+    { type: 'base64', regex: /[A-Za-z0-9+/]{40,}={0,2}/g },
+];
+/**
+ * Компилирует паттерн в глобальный RegExp (детектор использует regex.exec в цикле,
+ * поэтому без флага 'g' exec зациклится на первом совпадении).
+ */
+function _toRegExp(regex) {
+    if (typeof regex === 'string')
+        return new RegExp(regex, 'g');
+    return regex.global ? regex : new RegExp(regex.source, 'g');
+}
+/** base64-подобная строка — только если без пробелов (regex уже исключает пробелы). */
+function _isValidLuhn(candidate) {
+    if (!/^\d+$/.test(candidate))
+        return false;
+    let sum = 0;
+    let double = false;
+    for (let i = candidate.length - 1; i >= 0; i--) {
+        let digit = candidate.charCodeAt(i) - 48;
+        if (double) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+        double = !double;
+    }
+    return sum % 10 === 0;
+}
+/**
+ * Находит подстроки-секреты в тексте.
+ * Возвращает уникальные значения. Для ключей применяется порог длины MIN_KEY_LENGTH,
+ * для номеров карт — проверка Luhn.
+ * @param patterns паттерны детекции; по умолчанию — DEFAULT_PATTERNS.
+ */
+export function detectSecrets(text, patterns = DEFAULT_PATTERNS) {
+    if (!text)
+        return [];
+    const found = new Set();
+    for (const { type, regex } of patterns) {
+        const re = _toRegExp(regex);
+        re.lastIndex = 0;
+        let match;
+        while ((match = re.exec(text)) !== null) {
+            const raw = match[0].trim();
+            if (!raw)
+                continue;
+            if (type === 'card') {
+                if (!_isValidLuhn(raw))
+                    continue;
+            }
+            else if (type !== 'email' && type !== 'base64') {
+                if (raw.length < MIN_KEY_LENGTH)
+                    continue;
+            }
+            found.add(raw);
+            if (re.lastIndex === match.index)
+                re.lastIndex++;
+        }
+    }
+    return [...found];
+}
+/**
+ * Маскирует секрет для логов и warning: только узнаваемый префикс, без полного значения.
+ * Примеры: sk-***, ghp_***, Bearer ***, email***, card***.
+ */
+export function maskSecret(secret) {
+    const trimmed = secret.trim();
+    if (!trimmed)
+        return '';
+    if (/^sk_live_/i.test(trimmed))
+        return 'sk_live_***';
+    if (/^sk-/i.test(trimmed))
+        return 'sk-***';
+    if (/^ghp_/i.test(trimmed))
+        return 'ghp_***';
+    if (/^github_pat_/i.test(trimmed))
+        return 'github_pat_***';
+    if (/^AKIA/.test(trimmed))
+        return 'AKIA***';
+    if (/^AIza/.test(trimmed))
+        return 'AIza***';
+    if (/^Bearer\s+/i.test(trimmed))
+        return 'Bearer ***';
+    if (/^[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}$/.test(trimmed))
+        return 'email***';
+    if (/^\d{13,16}$/.test(trimmed))
+        return 'card***';
+    return `${trimmed.slice(0, 6)}***`;
+}
+//# sourceMappingURL=secret-detector.js.map

package/dist/engine/gateway/secret-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-detector.js","sourceRoot":"","sources":["../../../src/engine/gateway/secret-detector.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,iDAAiD;AACjD,MAAM,cAAc,GAAG,EAAE,CAAC;AAQ1B,iGAAiG;AACjG,MAAM,CAAC,MAAM,gBAAgB,GAA4B;IACvD,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,0BAA0B,EAAE;IACrD,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,0BAA0B,EAAE;IACrD,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,iCAAiC,EAAE;IAChE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE;IAC/C,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,4BAA4B,EAAE;IACvD,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,6BAA6B,EAAE;IACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,qCAAqC,EAAE;IAChE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,qDAAqD,EAAE;IAC/E,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE;IACzC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,2BAA2B,EAAE;CACvD,CAAC;AAEF;;;GAGG;AACH,SAAS,SAAS,CAAC,KAAsB;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CAAC,SAAiB;IACrC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,IAAI,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,CAAC;YACX,IAAI,KAAK,GAAG,CAAC;gBAAE,KAAK,IAAI,CAAC,CAAC;QAC5B,CAAC;QACD,GAAG,IAAI,KAAK,CAAC;QACb,MAAM,GAAG,CAAC,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,WAAoC,gBAAgB;IAEpD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAErB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5B,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACjB,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG;gBAAE,SAAS;YAEnB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;oBAAE,SAAS;YACnC,CAAC;iBAAM,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACjD,IAAI,GAAG,CAAC,MAAM,GAAG,cAAc;oBAAE,SAAS;YAC5C,CAAC;YAED,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACf,IAAI,EAAE,CAAC,SAAS,KAAK,KAAK,CAAC,KAAK;gBAAE,EAAE,CAAC,SAAS,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,IAAI,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,aAAa,CAAC;IACrD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,gBAAgB,CAAC;IAC3D,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,YAAY,CAAC;IACrD,IAAI,kDAAkD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAC;IACxF,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAElD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC;AACrC,CAAC"}

package/dist/engine/gateway/secret-detector.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Юнит-тесты детектора секретов (AD-036).
+ * Чистая функция: text → уникальные значения секретов.
+ */
+export {};
+//# sourceMappingURL=secret-detector.test.d.ts.map

package/dist/engine/gateway/secret-detector.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-detector.test.d.ts","sourceRoot":"","sources":["../../../src/engine/gateway/secret-detector.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/engine/gateway/secret-detector.test.js

@@ -0,0 +1,107 @@
+/**
+ * Юнит-тесты детектора секретов (AD-036).
+ * Чистая функция: text → уникальные значения секретов.
+ */
+import { describe, it, expect } from 'vitest';
+import { detectSecrets, maskSecret } from './secret-detector.js';
+// Валидные секреты по regex детектора (см. secret-detector.ts)
+const SK_KEY = 'sk-abcdefghijklmnopqrst'; // 20 символов после sk-
+const GHP_TOKEN = 'ghp_' + 'A'.repeat(36); // ровно 36 символов
+const AWS_KEY = 'AKIA' + 'B'.repeat(16); // 16 [0-9A-Z]
+const GOOGLE_KEY = 'AIza' + 'C'.repeat(35); // 35 [0-9A-Za-z_-]
+const EMAIL = 'user@example.com';
+const CARD_VALID = '4111111111111111'; // VISA, Luhn-валидна
+const CARD_INVALID = '4111111111111112'; // Luhn невалидна
+const BASE64_LONG = 'A'.repeat(45); // >= 40 base64-символов
+const BEARER_TOKEN = 'Bearer ' + 'x'.repeat(24);
+describe('detectSecrets', () => {
+    it('находит OpenAI sk-ключ', () => {
+        expect(detectSecrets(`мой ключ ${SK_KEY} используй для подключения`)).toContain(SK_KEY);
+    });
+    it('находит GitHub ghp_ токен', () => {
+        expect(detectSecrets(`токен ${GHP_TOKEN}`)).toContain(GHP_TOKEN);
+    });
+    it('находит AWS AKIA ключ', () => {
+        expect(detectSecrets(`aws=${AWS_KEY}`)).toContain(AWS_KEY);
+    });
+    it('находит Google AIza ключ', () => {
+        expect(detectSecrets(`gkey ${GOOGLE_KEY}`)).toContain(GOOGLE_KEY);
+    });
+    it('находит email', () => {
+        expect(detectSecrets(`пишите на ${EMAIL}`)).toContain(EMAIL);
+    });
+    it('находит валидную по Luhn карту', () => {
+        expect(detectSecrets(`номер ${CARD_VALID}`)).toContain(CARD_VALID);
+    });
+    it('НЕ находит невалидную по Luhn карту', () => {
+        expect(detectSecrets(`номер ${CARD_INVALID}`)).toEqual([]);
+    });
+    it('находит длинную base64-строку', () => {
+        expect(detectSecrets(`base64=${BASE64_LONG}`)).toContain(BASE64_LONG);
+    });
+    it('находит Bearer-токен', () => {
+        expect(detectSecrets(BEARER_TOKEN)).toContain(BEARER_TOKEN);
+    });
+    it('короткие строки (<12) не дают false positive', () => {
+        expect(detectSecrets('sk-abc')).toEqual([]);
+        expect(detectSecrets('ghp_123')).toEqual([]);
+        expect(detectSecrets('AIza9')).toEqual([]);
+        expect(detectSecrets('Bearer xyz')).toEqual([]);
+        expect(detectSecrets('123456789012')).toEqual([]); // 12 цифр < 13 (card regex)
+    });
+    it('чистый текст без секретов → пустой массив', () => {
+        expect(detectSecrets('обычный текст без секретов, привет мир')).toEqual([]);
+        expect(detectSecrets('')).toEqual([]);
+        expect(detectSecrets('')).toEqual([]);
+    });
+    it('возвращает уникальные значения (без дубликатов)', () => {
+        const result = detectSecrets(`${SK_KEY} ... ${SK_KEY} ... ${SK_KEY}`);
+        expect(result).toEqual([SK_KEY]);
+    });
+    it('находит несколько секретов разных типов в одном тексте', () => {
+        const result = detectSecrets(`ключ ${SK_KEY}, почта ${EMAIL}, карта ${CARD_VALID}`);
+        expect(result).toContain(SK_KEY);
+        expect(result).toContain(EMAIL);
+        expect(result).toContain(CARD_VALID);
+    });
+    it('принимает кастомные паттерны вторым аргументом (RegExp)', () => {
+        const custom = [{ type: 'custom', regex: /\bcustom-[A-Za-z0-9]{20,}/g }];
+        expect(detectSecrets('секрет custom-abcdefghijklmnopqrstuvwxyz', custom)).toContain('custom-abcdefghijklmnopqrstuvwxyz');
+        expect(detectSecrets(SK_KEY, custom)).toEqual([]);
+    });
+    it('принимает паттерны как строки и компилирует их с флагом g', () => {
+        const custom = [{ type: 'custom', regex: 'custom-[A-Za-z0-9]{20,}' }];
+        const result = detectSecrets('a custom-abcdefghijklmnopqrst b custom-abcdefghijklmnopqrst', custom);
+        expect(result).toEqual(['custom-abcdefghijklmnopqrst']);
+    });
+    it('пустой список паттернов → ничего не детектится', () => {
+        expect(detectSecrets(`ключ ${SK_KEY}`, [])).toEqual([]);
+    });
+});
+describe('maskSecret', () => {
+    it('маскирует sk-ключ', () => {
+        expect(maskSecret(SK_KEY)).toBe('sk-***');
+    });
+    it('маскирует ghp_ токен', () => {
+        expect(maskSecret(GHP_TOKEN)).toBe('ghp_***');
+    });
+    it('маскирует AWS ключ', () => {
+        expect(maskSecret(AWS_KEY)).toBe('AKIA***');
+    });
+    it('маскирует email и карту', () => {
+        expect(maskSecret(EMAIL)).toBe('email***');
+        expect(maskSecret(CARD_VALID)).toBe('card***');
+    });
+    it('маскирует Bearer-токен', () => {
+        expect(maskSecret(BEARER_TOKEN)).toBe('Bearer ***');
+    });
+    it('не содержит полного значения секрета', () => {
+        const masked = maskSecret(SK_KEY);
+        expect(masked).not.toContain(SK_KEY);
+    });
+    it('пустая строка → пустая строка', () => {
+        expect(maskSecret('')).toBe('');
+        expect(maskSecret('   ')).toBe('');
+    });
+});
+//# sourceMappingURL=secret-detector.test.js.map

package/dist/engine/gateway/secret-detector.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-detector.test.js","sourceRoot":"","sources":["../../../src/engine/gateway/secret-detector.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAEjE,+DAA+D;AAC/D,MAAM,MAAM,GAAG,yBAAyB,CAAC,CAAC,wBAAwB;AAClE,MAAM,SAAS,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB;AAC/D,MAAM,OAAO,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc;AACvD,MAAM,UAAU,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB;AAC/D,MAAM,KAAK,GAAG,kBAAkB,CAAC;AACjC,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,qBAAqB;AAC5D,MAAM,YAAY,GAAG,kBAAkB,CAAC,CAAC,iBAAiB;AAC1D,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB;AAC5D,MAAM,YAAY,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEhD,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,aAAa,CAAC,YAAY,MAAM,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,aAAa,CAAC,SAAS,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,aAAa,CAAC,OAAO,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,aAAa,CAAC,QAAQ,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;QACvB,MAAM,CAAC,aAAa,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,aAAa,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,aAAa,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,aAAa,CAAC,UAAU,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,4BAA4B;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,aAAa,CAAC,wCAAwC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5E,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,MAAM,QAAQ,MAAM,QAAQ,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,MAAM,WAAW,KAAK,WAAW,UAAU,EAAE,CAAC,CAAC;QACpF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,aAAa,CAAC,0CAA0C,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CACjF,mCAAmC,CACpC,CAAC;QACF,MAAM,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,aAAa,CAAC,6DAA6D,EAAE,MAAM,CAAC,CAAC;QACpG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,aAAa,CAAC,QAAQ,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/engine/gateway/secret-pattern-store.d.ts

@@ -0,0 +1,54 @@
+/**
+ * SecretPatternStore (AD-036) — редактируемый список regex-паттернов детекции секретов.
+ *
+ * Схема «системный + override» (по аналогии с ContextConfig):
+ * - дефолтный список встроен в код (DEFAULT_PATTERNS из secret-detector.ts);
+ * - пользовательский override — JSON-файл {dataDir}/gateway/patterns.json;
+ * - если override существует, он ПОЛНОСТЬЮ заменяет дефолтный;
+ * - сброс = удаление override-файла → снова дефолт.
+ *
+ * Формат каждого паттерна: { type: string, regex: string }.
+ * regex — строка-source без слешей и флагов; при компиляции в детекторе добавляется флаг 'g'.
+ */
+/** Сериализуемый паттерн детекции: regex — строка (source), компилируется с флагом 'g'. */
+export interface SecretPattern {
+    type: string;
+    regex: string;
+}
+export interface SecretPatternStoreOptions {
+    dataDir: string;
+    /** Кастомный путь к override-файлу (для тестов). По умолчанию: {dataDir}/gateway/patterns.json. */
+    patternsFile?: string;
+}
+export interface SecretPatternsRaw {
+    isOverridden: boolean;
+    patterns: SecretPattern[];
+    defaultPatterns: SecretPattern[];
+}
+export declare class SecretPatternStore {
+    readonly overridePath: string;
+    private readonly _defaultPatterns;
+    constructor(options: SecretPatternStoreOptions);
+    /** Существует ли пользовательский override-файл. */
+    hasOverride(): boolean;
+    /** Дефолтный список (независимо от наличия override), всегда свежая копия. */
+    getDefaultPatterns(): SecretPattern[];
+    /**
+     * Актуальный список паттернов: override ?? дефолт.
+     * Если override-файл повреждён (битый JSON или невалидные элементы) — warning
+     * и fallback на дефолт: детекция не должна падать из-за конфигурации.
+     */
+    getPatterns(): SecretPattern[];
+    /** Алиас getPatterns для единообразия вызовов. */
+    getEffectivePatterns(): SecretPattern[];
+    /**
+     * Сохраняет override-файл (атомарная запись через atomicWrite).
+     * Пустой массив — валиден: детекция секретов полностью отключается (предупреждаем об этом).
+     */
+    savePatterns(patterns: SecretPattern[]): Promise<boolean>;
+    /** Удаляет override-файл → снова дефолт. true — файл удалён, false — override не существовал. */
+    reset(): Promise<boolean>;
+    /** Полное состояние: есть ли override, эффективный список и дефолтный. */
+    getRawPatterns(): SecretPatternsRaw;
+}
+//# sourceMappingURL=secret-pattern-store.d.ts.map

package/dist/engine/gateway/secret-pattern-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-pattern-store.d.ts","sourceRoot":"","sources":["../../../src/engine/gateway/secret-pattern-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH,2FAA2F;AAC3F,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,OAAO,CAAC;IACtB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,eAAe,EAAE,aAAa,EAAE,CAAC;CAClC;AAuBD,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAkB;gBAEvC,OAAO,EAAE,yBAAyB;IAK9C,oDAAoD;IACpD,WAAW,IAAI,OAAO;IAItB,8EAA8E;IAC9E,kBAAkB,IAAI,aAAa,EAAE;IAIrC;;;;OAIG;IACH,WAAW,IAAI,aAAa,EAAE;IAmB9B,kDAAkD;IAClD,oBAAoB,IAAI,aAAa,EAAE;IAIvC;;;OAGG;IACG,YAAY,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB/D,iGAAiG;IAC3F,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;IAY/B,0EAA0E;IAC1E,cAAc,IAAI,iBAAiB;CAQpC"}

package/dist/engine/gateway/secret-pattern-store.js

@@ -0,0 +1,133 @@
+/**
+ * SecretPatternStore (AD-036) — редактируемый список regex-паттернов детекции секретов.
+ *
+ * Схема «системный + override» (по аналогии с ContextConfig):
+ * - дефолтный список встроен в код (DEFAULT_PATTERNS из secret-detector.ts);
+ * - пользовательский override — JSON-файл {dataDir}/gateway/patterns.json;
+ * - если override существует, он ПОЛНОСТЬЮ заменяет дефолтный;
+ * - сброс = удаление override-файла → снова дефолт.
+ *
+ * Формат каждого паттерна: { type: string, regex: string }.
+ * regex — строка-source без слешей и флагов; при компиляции в детекторе добавляется флаг 'g'.
+ */
+import { existsSync, readFileSync } from 'node:fs';
+import { writeFile, rename, mkdir, unlink } from 'node:fs/promises';
+import { join, dirname } from 'node:path';
+import { atomicWrite } from '@itphx/synth-shared';
+import { info, warning } from '../../logger.js';
+import { DEFAULT_PATTERNS } from './secret-detector.js';
+/** Дефолтные паттерны в сериализуемом виде (RegExp.source → строка). */
+function _defaultPatternsAsStrings() {
+    return DEFAULT_PATTERNS.map((p) => ({
+        type: p.type,
+        regex: typeof p.regex === 'string' ? p.regex : p.regex.source,
+    }));
+}
+function _isValidPattern(p) {
+    if (typeof p !== 'object' || p === null)
+        return false;
+    const { type, regex } = p;
+    if (typeof type !== 'string' || type.trim() === '')
+        return false;
+    if (typeof regex !== 'string')
+        return false;
+    try {
+        new RegExp(regex);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export class SecretPatternStore {
+    overridePath;
+    _defaultPatterns;
+    constructor(options) {
+        this.overridePath = options.patternsFile ?? join(options.dataDir, 'gateway', 'patterns.json');
+        this._defaultPatterns = _defaultPatternsAsStrings();
+    }
+    /** Существует ли пользовательский override-файл. */
+    hasOverride() {
+        return existsSync(this.overridePath);
+    }
+    /** Дефолтный список (независимо от наличия override), всегда свежая копия. */
+    getDefaultPatterns() {
+        return this._defaultPatterns.map((p) => ({ ...p }));
+    }
+    /**
+     * Актуальный список паттернов: override ?? дефолт.
+     * Если override-файл повреждён (битый JSON или невалидные элементы) — warning
+     * и fallback на дефолт: детекция не должна падать из-за конфигурации.
+     */
+    getPatterns() {
+        if (!this.hasOverride())
+            return this.getDefaultPatterns();
+        try {
+            const raw = JSON.parse(readFileSync(this.overridePath, 'utf-8'));
+            if (!Array.isArray(raw)) {
+                warning('GATEWAY', `Невалидный override паттернов (ожидается массив): ${this.overridePath}`);
+                return this.getDefaultPatterns();
+            }
+            const patterns = raw.filter(_isValidPattern).map((p) => ({ type: p.type, regex: p.regex }));
+            if (patterns.length !== raw.length) {
+                warning('GATEWAY', `Часть элементов override-паттернов пропущена (${raw.length - patterns.length} шт): ${this.overridePath}`);
+            }
+            return patterns;
+        }
+        catch (e) {
+            warning('GATEWAY', `Не удалось прочитать паттерны обфускации (${this.overridePath}): ${e}`);
+            return this.getDefaultPatterns();
+        }
+    }
+    /** Алиас getPatterns для единообразия вызовов. */
+    getEffectivePatterns() {
+        return this.getPatterns();
+    }
+    /**
+     * Сохраняет override-файл (атомарная запись через atomicWrite).
+     * Пустой массив — валиден: детекция секретов полностью отключается (предупреждаем об этом).
+     */
+    async savePatterns(patterns) {
+        if (!Array.isArray(patterns) || !patterns.every(_isValidPattern)) {
+            warning('GATEWAY', 'Отказ: невалидные паттерны (ожидается [{type, regex}] с компилируемым regex)');
+            return false;
+        }
+        if (patterns.length === 0) {
+            info('GATEWAY', 'Сохранён пустой список паттернов обфускации: детекция секретов отключена');
+        }
+        try {
+            await mkdir(dirname(this.overridePath), { recursive: true });
+            await atomicWrite((p, d) => writeFile(p, d, 'utf-8'), rename, this.overridePath, JSON.stringify(patterns, null, 2));
+            info('GATEWAY', `Сохранены паттерны обфускации (${patterns.length} шт): ${this.overridePath}`);
+            return true;
+        }
+        catch (e) {
+            warning('GATEWAY', `Не удалось сохранить паттерны обфускации: ${e}`);
+            return false;
+        }
+    }
+    /** Удаляет override-файл → снова дефолт. true — файл удалён, false — override не существовал. */
+    async reset() {
+        if (!this.hasOverride())
+            return false;
+        try {
+            await unlink(this.overridePath);
+            info('GATEWAY', 'Паттерны обфускации сброшены к дефолтным');
+            return true;
+        }
+        catch (e) {
+            warning('GATEWAY', `Не удалось сбросить паттерны обфускации: ${e}`);
+            return false;
+        }
+    }
+    /** Полное состояние: есть ли override, эффективный список и дефолтный. */
+    getRawPatterns() {
+        const isOverridden = this.hasOverride();
+        return {
+            isOverridden,
+            patterns: this.getPatterns(),
+            defaultPatterns: this.getDefaultPatterns(),
+        };
+    }
+}
+//# sourceMappingURL=secret-pattern-store.js.map

package/dist/engine/gateway/secret-pattern-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-pattern-store.js","sourceRoot":"","sources":["../../../src/engine/gateway/secret-pattern-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAoBxD,wEAAwE;AACxE,SAAS,yBAAyB;IAChC,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;KAC9D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,eAAe,CAAC,CAAU;IACjC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAA4B,CAAC;IACrD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,OAAO,kBAAkB;IACpB,YAAY,CAAS;IACb,gBAAgB,CAAkB;IAEnD,YAAY,OAAkC;QAC5C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QAC9F,IAAI,CAAC,gBAAgB,GAAG,yBAAyB,EAAE,CAAC;IACtD,CAAC;IAED,oDAAoD;IACpD,WAAW;QACT,OAAO,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;QAChB,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,WAAW;QACT,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,CAAC,CAAY,CAAC;YAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,SAAS,EAAE,qDAAqD,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;gBAC7F,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnC,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5F,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;gBACnC,OAAO,CAAC,SAAS,EAAE,iDAAiD,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YAChI,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,SAAS,EAAE,6CAA6C,IAAI,CAAC,YAAY,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5F,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,oBAAoB;QAClB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,QAAyB;QAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;YACjE,OAAO,CAAC,SAAS,EAAE,8EAA8E,CAAC,CAAC;YACnG,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,EAAE,0EAA0E,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7D,MAAM,WAAW,CACf,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,EAClC,MAAM,EACN,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAClC,CAAC;YACF,IAAI,CAAC,SAAS,EAAE,kCAAkC,QAAQ,CAAC,MAAM,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YAC/F,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,SAAS,EAAE,6CAA6C,CAAC,EAAE,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,iGAAiG;IACjG,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAChC,IAAI,CAAC,SAAS,EAAE,0CAA0C,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,SAAS,EAAE,4CAA4C,CAAC,EAAE,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,cAAc;QACZ,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO;YACL,YAAY;YACZ,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE;YAC5B,eAAe,EAAE,IAAI,CAAC,kBAAkB,EAAE;SAC3C,CAAC;IACJ,CAAC;CACF"}

package/dist/engine/gateway/secret-pattern-store.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Юнит-тесты SecretPatternStore (AD-036): редактируемый список regex-паттернов.
+ * Схема: дефолт в коде (DEFAULT_PATTERNS) → override в {dataDir}/gateway/patterns.json,
+ * сброс = удаление override-файла.
+ */
+export {};
+//# sourceMappingURL=secret-pattern-store.test.d.ts.map

package/dist/engine/gateway/secret-pattern-store.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-pattern-store.test.d.ts","sourceRoot":"","sources":["../../../src/engine/gateway/secret-pattern-store.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/engine/gateway/secret-pattern-store.test.js

@@ -0,0 +1,102 @@
+/**
+ * Юнит-тесты SecretPatternStore (AD-036): редактируемый список regex-паттернов.
+ * Схема: дефолт в коде (DEFAULT_PATTERNS) → override в {dataDir}/gateway/patterns.json,
+ * сброс = удаление override-файла.
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { mkdtemp, rm, readFile, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { DEFAULT_PATTERNS, detectSecrets } from './secret-detector.js';
+import { SecretPatternStore } from './secret-pattern-store.js';
+function defaultAsStrings() {
+    return DEFAULT_PATTERNS.map((p) => ({
+        type: p.type,
+        regex: typeof p.regex === 'string' ? p.regex : p.regex.source,
+    }));
+}
+describe('SecretPatternStore', () => {
+    let dir;
+    let store;
+    beforeEach(async () => {
+        dir = await mkdtemp(join(tmpdir(), 'synth-patterns-'));
+        store = new SecretPatternStore({ dataDir: dir });
+    });
+    afterEach(async () => {
+        await rm(dir, { recursive: true, force: true });
+    });
+    it('без override getPatterns = DEFAULT_PATTERNS (как строки)', () => {
+        expect(store.hasOverride()).toBe(false);
+        expect(store.getPatterns()).toEqual(defaultAsStrings());
+        expect(store.getEffectivePatterns()).toEqual(defaultAsStrings());
+    });
+    it('savePatterns → getPatterns возвращает сохранённые паттерны', async () => {
+        const custom = [{ type: 'custom', regex: '\\bsk-custom-[A-Za-z0-9]{20,}' }];
+        expect(await store.savePatterns(custom)).toBe(true);
+        expect(store.hasOverride()).toBe(true);
+        expect(store.getPatterns()).toEqual(custom);
+        // файл реально записан как JSON-массив
+        const raw = JSON.parse(await readFile(store.overridePath, 'utf-8'));
+        expect(raw).toEqual(custom);
+    });
+    it('reset удаляет override → снова дефолт', async () => {
+        await store.savePatterns([{ type: 'custom', regex: 'x{5,}' }]);
+        expect(store.hasOverride()).toBe(true);
+        expect(await store.reset()).toBe(true);
+        expect(store.hasOverride()).toBe(false);
+        expect(store.getPatterns()).toEqual(defaultAsStrings());
+    });
+    it('reset без override → false', async () => {
+        expect(await store.reset()).toBe(false);
+    });
+    it('невалидный regex → savePatterns false, файл не создаётся', async () => {
+        const invalid = [{ type: 'bad', regex: '(' }];
+        expect(await store.savePatterns(invalid)).toBe(false);
+        expect(store.hasOverride()).toBe(false);
+        expect(store.getPatterns()).toEqual(defaultAsStrings());
+    });
+    it('невалидный элемент (пустой type / не строка) → savePatterns false', async () => {
+        expect(await store.savePatterns([{ type: '', regex: 'abc{3}' }])).toBe(false);
+        expect(await store.savePatterns([{ type: 'x', regex: 123 }])).toBe(false);
+        expect(store.hasOverride()).toBe(false);
+    });
+    it('пустой массив валиден: детекция секретов отключается (документировано)', async () => {
+        expect(await store.savePatterns([])).toBe(true);
+        expect(store.getPatterns()).toEqual([]);
+        expect(detectSecrets('секрет sk-abcdefghijklmnopqrst', store.getPatterns())).toEqual([]);
+    });
+    it('hasOverride отражает наличие override-файла', async () => {
+        expect(store.hasOverride()).toBe(false);
+        await store.savePatterns([{ type: 'custom', regex: 'abc{3}' }]);
+        expect(store.hasOverride()).toBe(true);
+        await store.reset();
+        expect(store.hasOverride()).toBe(false);
+    });
+    it('getRawPatterns отдаёт isOverridden + эффективный и дефолтный списки', async () => {
+        const raw = store.getRawPatterns();
+        expect(raw.isOverridden).toBe(false);
+        expect(raw.patterns).toEqual(raw.defaultPatterns);
+        const custom = [{ type: 'custom', regex: 'abc{3}' }];
+        await store.savePatterns(custom);
+        const overridden = store.getRawPatterns();
+        expect(overridden.isOverridden).toBe(true);
+        expect(overridden.patterns).toEqual(custom);
+        expect(overridden.defaultPatterns).toEqual(defaultAsStrings());
+    });
+    it('паттерны из store работают в live-детекции', async () => {
+        const custom = [{ type: 'custom', regex: '\\bsk-custom-[A-Za-z0-9]{20,}' }];
+        await store.savePatterns(custom);
+        const secrets = detectSecrets('ключ sk-custom-abcdefghijklmnopqrstuvwxyz', store.getPatterns());
+        expect(secrets).toContain('sk-custom-abcdefghijklmnopqrstuvwxyz');
+        // override полностью заменяет дефолт: openai-ключ уже не детектится
+        expect(detectSecrets('ключ sk-abcdefghijklmnopqrst', store.getPatterns())).toEqual([]);
+    });
+    it('повреждённый override-файл → warning и fallback на дефолт', async () => {
+        await store.savePatterns([{ type: 'custom', regex: 'abc{3}' }]);
+        // повреждаем файл вручную
+        await writeFile(store.overridePath, 'not-json{', 'utf-8');
+        expect(store.hasOverride()).toBe(true);
+        expect(store.getPatterns()).toEqual(defaultAsStrings());
+    });
+});
+//# sourceMappingURL=secret-pattern-store.test.js.map

package/dist/engine/gateway/secret-pattern-store.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-pattern-store.test.js","sourceRoot":"","sources":["../../../src/engine/gateway/secret-pattern-store.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAsB,MAAM,2BAA2B,CAAC;AAEnF,SAAS,gBAAgB;IACvB,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,KAAK,EAAE,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM;KAC9D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,GAAW,CAAC;IAChB,IAAI,KAAyB,CAAC;IAE9B,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACvD,KAAK,GAAG,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAE7F,MAAM,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE5C,uCAAuC;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAY,CAAC;QAC/E,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,CAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,CAAC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,OAAO,GAAoB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QAE/D,MAAM,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAwB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/F,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,CAAC,MAAM,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxC,MAAM,CAAC,aAAa,CAAC,gCAAgC,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAElD,MAAM,MAAM,GAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtE,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAEjC,MAAM,UAAU,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;QAC7F,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,aAAa,CAAC,2CAA2C,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QAElE,oEAAoE;QACpE,MAAM,CAAC,aAAa,CAAC,8BAA8B,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChE,0BAA0B;QAC1B,MAAM,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAE1D,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}