@neurosec/sentry 1.0.20 → 1.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -0
- package/dist/api-auth.d.ts +31 -0
- package/dist/api-auth.d.ts.map +1 -0
- package/dist/api-auth.js +105 -0
- package/dist/api-auth.js.map +1 -0
- package/dist/api-auth.test.d.ts +2 -0
- package/dist/api-auth.test.d.ts.map +1 -0
- package/dist/api-auth.test.js +89 -0
- package/dist/api-auth.test.js.map +1 -0
- package/dist/api.d.ts +8 -7
- package/dist/api.d.ts.map +1 -1
- package/dist/api.js +141 -134
- package/dist/api.js.map +1 -1
- package/dist/cli.d.ts +1 -1
- package/dist/cli.d.ts.map +1 -1
- package/dist/cli.js +107 -14
- package/dist/cli.js.map +1 -1
- package/dist/cli.test.d.ts +2 -0
- package/dist/cli.test.d.ts.map +1 -0
- package/dist/cli.test.js +68 -0
- package/dist/cli.test.js.map +1 -0
- package/dist/config.d.ts +30 -0
- package/dist/config.d.ts.map +1 -1
- package/dist/config.js +50 -1
- package/dist/config.js.map +1 -1
- package/dist/discovery-win.d.ts +4 -0
- package/dist/discovery-win.d.ts.map +1 -0
- package/dist/discovery-win.js +153 -0
- package/dist/discovery-win.js.map +1 -0
- package/dist/discovery.d.ts.map +1 -1
- package/dist/discovery.js +23 -97
- package/dist/discovery.js.map +1 -1
- package/dist/discovery.test.js +18 -109
- package/dist/discovery.test.js.map +1 -1
- package/dist/enforcement/file-monitor.d.ts +9 -0
- package/dist/enforcement/file-monitor.d.ts.map +1 -1
- package/dist/enforcement/file-monitor.js +9 -2
- package/dist/enforcement/file-monitor.js.map +1 -1
- package/dist/enforcement/network-monitor.d.ts.map +1 -1
- package/dist/enforcement/network-monitor.js +350 -9
- package/dist/enforcement/network-monitor.js.map +1 -1
- package/dist/enforcement/network-monitor.test.d.ts +2 -0
- package/dist/enforcement/network-monitor.test.d.ts.map +1 -0
- package/dist/enforcement/network-monitor.test.js +52 -0
- package/dist/enforcement/network-monitor.test.js.map +1 -0
- package/dist/enforcement/policy-executor.d.ts +24 -1
- package/dist/enforcement/policy-executor.d.ts.map +1 -1
- package/dist/enforcement/policy-executor.js +213 -69
- package/dist/enforcement/policy-executor.js.map +1 -1
- package/dist/enforcement/policy-executor.test.d.ts +2 -0
- package/dist/enforcement/policy-executor.test.d.ts.map +1 -0
- package/dist/enforcement/policy-executor.test.js +46 -0
- package/dist/enforcement/policy-executor.test.js.map +1 -0
- package/dist/enforcement/target-validator.d.ts +37 -0
- package/dist/enforcement/target-validator.d.ts.map +1 -0
- package/dist/enforcement/target-validator.js +0 -0
- package/dist/enforcement/target-validator.js.map +1 -0
- package/dist/enforcement/target-validator.test.d.ts +2 -0
- package/dist/enforcement/target-validator.test.d.ts.map +1 -0
- package/dist/enforcement/target-validator.test.js +103 -0
- package/dist/enforcement/target-validator.test.js.map +1 -0
- package/dist/http-client.d.ts +35 -0
- package/dist/http-client.d.ts.map +1 -0
- package/dist/http-client.js +168 -0
- package/dist/http-client.js.map +1 -0
- package/dist/http-client.test.d.ts +2 -0
- package/dist/http-client.test.d.ts.map +1 -0
- package/dist/http-client.test.js +172 -0
- package/dist/http-client.test.js.map +1 -0
- package/dist/index.js +190 -114
- package/dist/index.js.map +1 -1
- package/dist/launcher.d.ts +33 -0
- package/dist/launcher.d.ts.map +1 -0
- package/dist/launcher.js +425 -0
- package/dist/launcher.js.map +1 -0
- package/dist/launcher.test.d.ts +2 -0
- package/dist/launcher.test.d.ts.map +1 -0
- package/dist/launcher.test.js +109 -0
- package/dist/launcher.test.js.map +1 -0
- package/dist/proxy/cert-manager.d.ts +24 -0
- package/dist/proxy/cert-manager.d.ts.map +1 -0
- package/dist/proxy/cert-manager.js +117 -0
- package/dist/proxy/cert-manager.js.map +1 -0
- package/dist/proxy/cert-manager.test.d.ts +2 -0
- package/dist/proxy/cert-manager.test.d.ts.map +1 -0
- package/dist/proxy/cert-manager.test.js +70 -0
- package/dist/proxy/cert-manager.test.js.map +1 -0
- package/dist/proxy/index.d.ts +61 -0
- package/dist/proxy/index.d.ts.map +1 -0
- package/dist/proxy/index.js +74 -0
- package/dist/proxy/index.js.map +1 -0
- package/dist/proxy/policy-enforcer.d.ts +30 -0
- package/dist/proxy/policy-enforcer.d.ts.map +1 -0
- package/dist/proxy/policy-enforcer.js +143 -0
- package/dist/proxy/policy-enforcer.js.map +1 -0
- package/dist/proxy/proxy-server.d.ts +42 -0
- package/dist/proxy/proxy-server.d.ts.map +1 -0
- package/dist/proxy/proxy-server.js +652 -0
- package/dist/proxy/proxy-server.js.map +1 -0
- package/dist/proxy/redaction-engine.d.ts +4 -0
- package/dist/proxy/redaction-engine.d.ts.map +1 -0
- package/dist/proxy/redaction-engine.js +50 -0
- package/dist/proxy/redaction-engine.js.map +1 -0
- package/dist/proxy/response-redaction.test.d.ts +2 -0
- package/dist/proxy/response-redaction.test.d.ts.map +1 -0
- package/dist/proxy/response-redaction.test.js +125 -0
- package/dist/proxy/response-redaction.test.js.map +1 -0
- package/dist/proxy/threat-engine.d.ts +22 -0
- package/dist/proxy/threat-engine.d.ts.map +1 -0
- package/dist/proxy/threat-engine.js +291 -0
- package/dist/proxy/threat-engine.js.map +1 -0
- package/dist/proxy/threat-engine.test.d.ts +2 -0
- package/dist/proxy/threat-engine.test.d.ts.map +1 -0
- package/dist/proxy/threat-engine.test.js +27 -0
- package/dist/proxy/threat-engine.test.js.map +1 -0
- package/dist/redirect/env-injector.d.ts +72 -0
- package/dist/redirect/env-injector.d.ts.map +1 -0
- package/dist/redirect/env-injector.js +177 -0
- package/dist/redirect/env-injector.js.map +1 -0
- package/dist/redirect/env-injector.test.d.ts +2 -0
- package/dist/redirect/env-injector.test.d.ts.map +1 -0
- package/dist/redirect/env-injector.test.js +91 -0
- package/dist/redirect/env-injector.test.js.map +1 -0
- package/dist/redirect/index.d.ts +3 -0
- package/dist/redirect/index.d.ts.map +1 -0
- package/dist/redirect/index.js +8 -0
- package/dist/redirect/index.js.map +1 -0
- package/dist/redirect/platform-redirect.d.ts +42 -0
- package/dist/redirect/platform-redirect.d.ts.map +1 -0
- package/dist/redirect/platform-redirect.js +229 -0
- package/dist/redirect/platform-redirect.js.map +1 -0
- package/dist/redirect/platform-redirect.test.d.ts +2 -0
- package/dist/redirect/platform-redirect.test.d.ts.map +1 -0
- package/dist/redirect/platform-redirect.test.js +76 -0
- package/dist/redirect/platform-redirect.test.js.map +1 -0
- package/dist/sandbox/index.d.ts +23 -2
- package/dist/sandbox/index.d.ts.map +1 -1
- package/dist/sandbox/index.js +24 -7
- package/dist/sandbox/index.js.map +1 -1
- package/dist/sandbox/linux-sandbox.d.ts +13 -2
- package/dist/sandbox/linux-sandbox.d.ts.map +1 -1
- package/dist/sandbox/linux-sandbox.js +61 -27
- package/dist/sandbox/linux-sandbox.js.map +1 -1
- package/dist/sandbox/macos-sandbox.d.ts +15 -4
- package/dist/sandbox/macos-sandbox.d.ts.map +1 -1
- package/dist/sandbox/macos-sandbox.js +36 -18
- package/dist/sandbox/macos-sandbox.js.map +1 -1
- package/dist/sandbox/sandbox-result.test.d.ts +2 -0
- package/dist/sandbox/sandbox-result.test.d.ts.map +1 -0
- package/dist/sandbox/sandbox-result.test.js +87 -0
- package/dist/sandbox/sandbox-result.test.js.map +1 -0
- package/dist/sandbox/windows-sandbox.d.ts +34 -0
- package/dist/sandbox/windows-sandbox.d.ts.map +1 -0
- package/dist/sandbox/windows-sandbox.js +161 -0
- package/dist/sandbox/windows-sandbox.js.map +1 -0
- package/dist/setup.d.ts.map +1 -1
- package/dist/setup.js +33 -43
- package/dist/setup.js.map +1 -1
- package/dist/skill-authz/skill-evaluator.d.ts +30 -0
- package/dist/skill-authz/skill-evaluator.d.ts.map +1 -1
- package/dist/skill-authz/skill-evaluator.js +161 -30
- package/dist/skill-authz/skill-evaluator.js.map +1 -1
- package/dist/skill-authz/skill-evaluator.test.d.ts +2 -0
- package/dist/skill-authz/skill-evaluator.test.d.ts.map +1 -0
- package/dist/skill-authz/skill-evaluator.test.js +127 -0
- package/dist/skill-authz/skill-evaluator.test.js.map +1 -0
- package/dist/telemetry.d.ts +2 -8
- package/dist/telemetry.d.ts.map +1 -1
- package/dist/telemetry.js +17 -147
- package/dist/telemetry.js.map +1 -1
- package/dist/types.d.ts +48 -105
- package/dist/types.d.ts.map +1 -1
- package/dist/types.js +34 -1
- package/dist/types.js.map +1 -1
- package/package.json +7 -3
- package/scripts/install-sentry-windows.ps1 +217 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"proxy-server.js","sourceRoot":"","sources":["../../src/proxy/proxy-server.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,kDAA0B;AAC1B,8CAAsB;AACtB,+BAAoC;AACpC,4CAAoB;AACpB,oCAAkG;AAGlG,iDAAwD;AACxD,sCAAmC;AAYnC,MAAa,cAAc;IAOzB,YAAY,MAAmB,EAAE,QAAwB;QANjD,WAAM,GAAuB,IAAI,CAAC;QAClC,gBAAW,GAAwB,IAAI,CAAC;QAGxC,mBAAc,GAAgC,IAAI,GAAG,EAAE,CAAC;QAG9D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QAExB,IAAI,CAAC,MAAM,GAAG,cAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC3C,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACvC,eAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7E,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;oBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,IAAI,CAAC,MAAO,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACnC,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,iEAAiE;gBACjE,sEAAsE;gBACtE,MAAM,QAAQ,GAAG,IAAA,qCAAsB,EAAC;oBACtC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC9B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;iBAC7B,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtD,IAAI,CAAC,WAAW,GAAG,eAAK,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;oBAChE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;wBACvC,eAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,EAAE,GAAG,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC3E,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;4BACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;4BAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;wBACpD,CAAC;oBACH,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;gBACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBAC1C,IAAI,CAAC,WAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBACxC,IAAI,CAAC,WAAY,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC3F,CAAC,CAAC,CAAC;gBACH,eAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBACnC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;oBAC1B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;oBAC7C,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,SAAS,EAAE,0BAA0B,GAAG,QAAQ,CAAC,QAAQ,GAAG,iBAAiB;iBAC9E,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,eAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;oBAChE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;oBAC9B,GAAG,EAAG,GAAa,CAAC,OAAO;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,eAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE;YACtC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YAC7B,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAChD,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;SACzC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7E,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACxE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,eAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,SAA+B,EAAE,SAA8B;QACzF,MAAM,SAAS,GAAG,IAAA,SAAM,GAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,qBAAqB,IAAI,GAAG,CAAC,EAAE,CAAC;YAC3E,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACjE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,8CAA8C,EAAE;aACvF,CAAC,CAAC,CAAC;YACJ,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,CAAC,CAAC;QACF,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAClC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAEnC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE;YACjC,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,KAAK;YACjC,IAAI,EAAE,SAAS,CAAC,GAAG,IAAI,GAAG;YAC1B,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;YACpD,OAAO,EAAE,EAAE;YACX,IAAI,EAAE,EAAE;YACR,SAAS;SACV,CAAC,CAAC;QAEH,2BAA2B;QAC3B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QAC1F,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,IAAI,GAAG,CAAC;QACvC,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC;QAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,KAAK,CAAC;QAEzC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE;YACjC,EAAE,EAAE,SAAS;YACb,MAAM;YACN,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC;YACxB,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC;YAC9C,IAAI;YACJ,SAAS;SACV,CAAC,CAAC;QAEH,eAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;YACrC,EAAE,EAAE,SAAS;YACb,MAAM;YACN,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,IAAI,CAAC,MAAM;SAClB,CAAC,CAAC;QAEH,0BAA0B;QAC1B,MAAM,aAAa,GAAG,IAAA,iCAAyB,EAAC,SAAS,EAAE,UAAoB,CAAC,CAAC;QAEjF,2DAA2D;QAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAEvD,IAAI,SAAS,EAAE,CAAC;YACd,2CAA2C;YAC3C,MAAM,eAAe,GAAkB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAE5E,IAAI,eAAe,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBACvC,eAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;oBACnD,EAAE,EAAE,SAAS;oBACb,MAAM,EAAE,eAAe,CAAC,MAAM;oBAC9B,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM;iBACxC,CAAC,CAAC;gBACH,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACjE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC3B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE,uCAAuC;wBAChD,OAAO,EAAE;4BACP,MAAM,EAAE,eAAe,CAAC,MAAM;4BAC9B,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;yBACpF;qBACF;iBACF,CAAC,CAAC,CAAC;gBAEJ,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAoB,EAAE,IAAI,EAC5E,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAC3C,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EACjC,eAAe,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC;gBACtD,OAAO;YACT,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,UAAoB,EAAE,aAAa,CAAC,CAAC;QAEtF,sBAAsB;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE;gBAC9C,EAAE,EAAE,SAAS;gBACb,MAAM;gBACN,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,UAAoB;gBAC1B,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC9C,IAAI;gBACJ,SAAS;aACV,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE;gBACtC,EAAE,EAAE,SAAS;gBACb,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,SAAS;gBACzC,GAAG,EAAG,GAAa,CAAC,OAAO;aAC5B,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC3B,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACjE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC3B,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,8BAA8B,EAAE;iBAC3E,CAAC,CAAC,CAAC;YACN,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,SAA+B,EAC/B,SAA8B,EAC9B,OAAuB,EACvB,QAAmF,EACnF,aAAsB;QAEtB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,uCAAuC;YACvC,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACjE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC3B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,2CAA2C,EAAE;aACrF,CAAC,CAAC,CAAC;YACJ,OAAO;QACT,CAAC;QAED,6DAA6D;QAC7D,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,OAAO,GAAwB;gBACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;aACvC,CAAC;YAEF,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAK,CAAC,CAAC,CAAC,cAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,EAAE;gBAChG,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,IAAI,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;gBACxE,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YAEH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC3B,eAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1D,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;oBAC3B,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACzB,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7B,QAAQ,CAAC,GAAG,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,MAAM,OAAO,GAAwB;YACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE;YAC1D,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;SACvC,CAAC;QAEF,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAK,CAAC,CAAC,CAAC,cAAI,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;YACtG,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBACpE,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;gBACxC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAE9C,IAAI,qBAAqB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,CAAC,wBAAwB,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;gBACrE,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;YAE1D,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACvC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;gBAC1B,IAAI,SAAS,IAAI,OAAO,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACzB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;gBAE/C,wBAAwB;gBACxB,MAAM,gBAAgB,GAAkB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;gBAEtF,IAAI,gBAAgB,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBACxC,eAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;wBACpD,EAAE,EAAE,OAAO,CAAC,EAAE;wBACd,MAAM,EAAE,gBAAgB,CAAC,MAAM;wBAC/B,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,MAAM;qBACzC,CAAC,CAAC;oBACH,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBACjE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;wBAC3B,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,2BAA2B;4BACjC,OAAO,EAAE,wCAAwC;4BACjD,OAAO,EAAE;gCACP,MAAM,EAAE,gBAAgB,CAAC,MAAM;gCAC/B,OAAO,EAAE,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;6BACrF;yBACF;qBACF,CAAC,CAAC,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,KAAK,QAAQ;wBACzD,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,YAAY,EAAE,gBAAgB,CAAC;wBAC/D,CAAC,CAAC,YAAY,CAAC;oBAEjB,MAAM,eAAe,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;oBACnD,OAAO,eAAe,CAAC,gBAAgB,CAAC,CAAC;oBACzC,OAAO,eAAe,CAAC,mBAAmB,CAAC,CAAC;oBAE5C,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,IAAI,GAAG,EAAE,eAAe,CAAC,CAAC;oBACpE,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBAChC,CAAC;gBAED,IAAI,CAAC,gBAAgB,CACnB,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EACpE,WAAW,CAAC,UAAU,IAAI,GAAG,EAAE,WAAW,CAAC,OAAiC,EAC5E,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,CACpD,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,eAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9D,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;oBAC3B,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;oBACzB,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAC3B,eAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC3B,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACjE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YAC1B,QAAQ,CAAC,OAAO,EAAE,CAAC;YACnB,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;gBAC3B,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACjE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,QAAQ,CAAC,GAAG,EAAE,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,wBAAwB,CACpC,SAA8B,EAC9B,WAAiC,EACjC,OAAuB;QAEvB,MAAM,eAAe,GAAG,EAAE,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;QACnD,OAAO,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAEzC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,eAAe,GAAG,EAAE,CAAC;QACzB,IAAI,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEzC,MAAM,YAAY,GAAG,GAAG,EAAE;YACxB,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,UAAU,IAAI,GAAG,EAAE,eAAe,CAAC,CAAC;YACpE,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC1C,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC;gBACnC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBACjE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;wBAC3B,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,2BAA2B;4BACjC,OAAO,EAAE,kDAAkD;4BAC3D,OAAO,EAAE;gCACP,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;gCACjC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;6BACvF;yBACF;qBACF,CAAC,CAAC,CAAC;gBACN,CAAC;qBAAM,CAAC;oBACN,SAAS,CAAC,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;oBACnG,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAC1C,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC;YACrC,CAAC;YAED,YAAY,EAAE,CAAC;YACf,SAAS,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,IAAI,IAAI,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAClC,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACvC,IAAI,SAAS,CAAC,aAAa,EAAE,CAAC;oBAC5B,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpC,eAAe,IAAI,IAAI,CAAC;gBACxB,QAAQ,IAAI,IAAI,CAAC;gBAEjB,OAAO,IAAI,EAAE,CAAC;oBACZ,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;oBAC5C,IAAI,YAAY,KAAK,CAAC,CAAC,EAAE,CAAC;wBACxB,MAAM;oBACR,CAAC;oBAED,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;oBAC7C,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;oBAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;wBACtB,WAAW,CAAC,OAAO,EAAE,CAAC;wBACtB,OAAO,EAAE,CAAC;wBACV,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACzB,IAAI,CAAC,SAAS,CAAC,aAAa,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpD,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACvB,CAAC;gBACD,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;oBAC7B,YAAY,EAAE,CAAC;oBACf,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,CAAC;gBAED,IAAI,CAAC,gBAAgB,CACnB,OAAO,CAAC,EAAE,EACV,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,IAAI,EACZ,WAAW,CAAC,UAAU,IAAI,GAAG,EAC7B,WAAW,CAAC,OAAiC,EAC7C,eAAe,EACf,aAAa,EACb,UAAU,EACV,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAC/B,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YAEH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,eAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACxE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;oBAC3B,SAAS,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBACjE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;gBACxE,CAAC;qBAAM,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;oBACpC,SAAS,CAAC,GAAG,EAAE,CAAC;gBAClB,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,uBAAuB,CAAC,IAAY;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QAClD,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QAClD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YACvD,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,SAAS,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC;QAC9E,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO;YACL,MAAM,EAAE,OAAO;YACf,MAAM,EAAE,mBAAmB;YAC3B,cAAc,EAAE,EAAE;YAClB,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,CAAC;SACb,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,IAAY,EAAE,MAAc;QAC/C,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAEjC,qCAAqC;QACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/F,IAAI,KAAK,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC;QACrF,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QAEnF,YAAY;QACZ,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC;QAEhD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe,CACrB,IAAY,EACZ,IAAY,EACZ,aAAyF;QAEzF,8DAA8D;QAC9D,+CAA+C;QAE/C,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,MAAM,GAAG,aAAG,CAAC,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,gBAAgB;gBAC7C,IAAI;gBACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ;gBACrC,IAAI;aACL,CAAC;QACJ,CAAC;QAED,uDAAuD;QACvD,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,uBAAe,CAAC,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,aAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC7E,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;oBACjC,IAAI,EAAE,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;oBAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ;oBACrC,IAAI;iBACL,CAAC;YACJ,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5B,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,QAAQ;YAClB,IAAI;SACL,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,GAAyB,EAAE,QAAgB;QAC7D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;YAEd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBAC/B,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;gBACtB,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;oBACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACnB,OAAO,CAAC,EAAE,CAAC,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,iBAAiB;YACjB,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,OAAsD;QAC1E,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;YAC1B,MAAM,EAAE,YAAY,EAAE,mBAAmB,EAAE,gBAAgB;YAC3D,kBAAkB,EAAE,YAAY,EAAE,SAAS;SAC5C,CAAC,CAAC;QAEH,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/D,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAClE,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;OAWG;IACK,wBAAwB,CAAC,IAAY,EAAE,QAAuB;QACpE,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAEpD,wEAAwE;QACxE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;gBACnC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;gBACvC,IAAI,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC;gBACpB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrB,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC;gBAClD,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBACnC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;oBACvD,OAAO,SAAS,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC,CAAC,4BAA4B;gBAC3C,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,uBAAuB;QACvB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;gBACvD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED;;;;OAIG;IACK,kBAAkB,CACxB,IAAa,EACb,QAAwD,EACxD,WAAqB;QAErB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO;QAC9C,MAAM,GAAG,GAAG,IAA+B,CAAC;QAE5C,8DAA8D;QAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAyC,EAAE,CAAC;gBACnE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;oBAAE,SAAS;gBACpD,MAAM,OAAO,GAAG,MAAM,CAAC,OAA8C,CAAC;gBACtE,IAAI,OAAO,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACnD,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBAClE,CAAC;gBACD,MAAM,mBAAmB,GAAG,OAAO,EAAE,aAAoD,CAAC;gBAC1F,IAAI,mBAAmB,IAAI,OAAO,mBAAmB,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAC7E,mBAAmB,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC9F,CAAC;gBACD,MAAM,gBAAgB,GAAG,OAAO,EAAE,UAAU,CAAC;gBAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;oBACpC,KAAK,MAAM,QAAQ,IAAI,gBAAkD,EAAE,CAAC;wBAC1E,MAAM,EAAE,GAAG,QAAQ,EAAE,QAA+C,CAAC;wBACrE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;4BAC3C,EAAE,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;wBAC5D,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAA4C,CAAC;gBAClE,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;oBAC/C,KAAK,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBAC9D,CAAC;gBACD,MAAM,iBAAiB,GAAG,KAAK,EAAE,aAAoD,CAAC;gBACtF,IAAI,iBAAiB,IAAI,OAAO,iBAAiB,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBACzE,iBAAiB,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC1F,CAAC;gBACD,MAAM,cAAc,GAAG,KAAK,EAAE,UAAU,CAAC;gBACzC,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;oBAClC,KAAK,MAAM,QAAQ,IAAI,cAAgD,EAAE,CAAC;wBACxE,MAAM,EAAE,GAAG,QAAQ,EAAE,QAA+C,CAAC;wBACrE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;4BAC3C,EAAE,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;wBAC5D,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,OAAyC,EAAE,CAAC;gBAClE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACzE,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAEO,gBAAgB,CACtB,GAAW,EAAE,OAAe,EAAE,KAAa,EAAE,KAAa,EAC1D,QAAgB,EAAE,WAAmB,EAAE,WAAmC,EAC1E,QAAgB,EAAE,SAAwB,EAAE,UAAkB,EAAE,UAAkB;QAElF,eAAM,CAAC,KAAK,CAAC,aAAa,EAAE;YAC1B,EAAE,EAAE,GAAG;YACP,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,MAAM;YACjC,SAAS,EAAE,UAAU;YACrB,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;IACL,CAAC;CACF;AAzuBD,wCAyuBC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"redaction-engine.d.ts","sourceRoot":"","sources":["../../src/proxy/redaction-engine.ts"],"names":[],"mappings":"AAAA,qBAAa,eAAe;IAC1B,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM;CAwDvD"}
|
|
@@ -0,0 +1,50 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.RedactionEngine = void 0;
|
|
4
|
+
class RedactionEngine {
|
|
5
|
+
redact(content, threatTypes) {
|
|
6
|
+
let redacted = content
|
|
7
|
+
// Private keys & certificates
|
|
8
|
+
.replace(/-----BEGIN [A-Z ]+PRIVATE KEY-----[\s\S]*?-----END [A-Z ]+PRIVATE KEY-----/g, '[REDACTED_PRIVATE_KEY]')
|
|
9
|
+
.replace(/-----BEGIN CERTIFICATE-----[\s\S]*?-----END CERTIFICATE-----/g, '[REDACTED_CERTIFICATE]')
|
|
10
|
+
// API / access tokens
|
|
11
|
+
.replace(/\bsk-[A-Za-z0-9]{20,}\b/g, '[REDACTED_OPENAI_KEY]')
|
|
12
|
+
.replace(/\bsk-proj-[A-Za-z0-9_-]{20,}\b/g, '[REDACTED_OPENAI_PROJECT_KEY]')
|
|
13
|
+
.replace(/\bAKIA[0-9A-Z]{16}\b/g, '[REDACTED_AWS_ACCESS_KEY]')
|
|
14
|
+
.replace(/\bghp_[A-Za-z0-9]{36}\b/g, '[REDACTED_GITHUB_TOKEN]')
|
|
15
|
+
.replace(/\bAIza[A-Za-z0-9_-]{35}\b/g, '[REDACTED_GOOGLE_API_KEY]')
|
|
16
|
+
// Generic credential patterns
|
|
17
|
+
.replace(/(?:api[_-]?key|secret[_-]?key|access[_-]?token|auth[_-]?token|private[_-]?key|client[_-]?secret)\s*[:=]\s*['"]?[A-Za-z0-9+/=_.-]{16,}['"]?/gi, '[REDACTED_CREDENTIAL]')
|
|
18
|
+
.replace(/(?:password|passwd|pwd)\s*[:=]\s*['"]?[^\s'"]{6,}['"]?/gi, '[REDACTED_PASSWORD]')
|
|
19
|
+
// Bearer / JWT tokens
|
|
20
|
+
.replace(/\bBearer\s+[A-Za-z0-9\-._~+/]+=*\b/g, 'Bearer [REDACTED_TOKEN]')
|
|
21
|
+
.replace(/\beyJ[A-Za-z0-9\-_]{15,}\.[A-Za-z0-9\-_]{15,}\.[A-Za-z0-9\-_]{15,}\b/g, '[REDACTED_JWT]')
|
|
22
|
+
// Database connection strings
|
|
23
|
+
.replace(/(?:postgres|postgresql|mysql|mongodb|mongodb\+srv|redis|rediss|mssql|oracle|amqp|amqps):\/\/[^\s'"]+/gi, '[REDACTED_DB_CONNECTION]')
|
|
24
|
+
// US SSNs
|
|
25
|
+
.replace(/\b\d{3}-\d{2}-\d{4}\b/g, '[REDACTED_SSN]')
|
|
26
|
+
// Payment card numbers
|
|
27
|
+
.replace(/\b(?:\d{4}[- ]?){3}\d{4}\b/g, '[REDACTED_CARD_NUMBER]')
|
|
28
|
+
// Email addresses
|
|
29
|
+
.replace(/\b[A-Za-z0-9._%+\-]{1,64}@[A-Za-z0-9.\-]{1,253}\.[A-Za-z]{2,}\b/g, '[REDACTED_EMAIL]')
|
|
30
|
+
// Phone numbers
|
|
31
|
+
.replace(/\+?1?[-.\s]?\(?\d{3}\)?[-.\s]?\d{3}[-.\s]?\d{4}\b/g, '[REDACTED_PHONE]')
|
|
32
|
+
// IP addresses
|
|
33
|
+
.replace(/\b(?:25[0-5]|2[0-4]\d|[01]?\d\d?)(?:\.(?:25[0-5]|2[0-4]\d|[01]?\d\d?)){3}\b/g, '[REDACTED_IP]');
|
|
34
|
+
// Context-aware: if system prompt leakage detected
|
|
35
|
+
if (threatTypes.some(t => t === 'DATA_LEAKAGE')) {
|
|
36
|
+
redacted = redacted
|
|
37
|
+
.replace(/(?:my\s+(?:system\s+)?(?:prompt|instructions?|rules?)\s+(?:are|is|say))\s*:?\s*["""']?[\s\S]{10,500}?(?=["""]|\n\n|$)/gi, '[REDACTED_SYSTEM_INSTRUCTIONS]')
|
|
38
|
+
.replace(/(?:i\s+(?:was|am)\s+(?:instructed|programmed|configured|told)\s+to)\s+[\s\S]{10,300}?(?=\.\s|\n|$)/gi, '[REDACTED_INTERNAL_INSTRUCTIONS]');
|
|
39
|
+
}
|
|
40
|
+
if (threatTypes.some(t => t === 'PII_EXPOSURE')) {
|
|
41
|
+
redacted = redacted
|
|
42
|
+
.replace(/\brouting(?:\s*(?:number|#|no\.?))?\s*:?\s*\d{9}\b/gi, 'routing [REDACTED_ROUTING_NUM]')
|
|
43
|
+
.replace(/\baccount(?:\s*(?:number|#|no\.?))?\s*:?\s*\d{8,17}\b/gi, 'account [REDACTED_ACCOUNT_NUM]')
|
|
44
|
+
.replace(/\bD\.?O\.?B\.?\s*:?\s*\d{1,2}[\/\-]\d{1,2}[\/\-]\d{2,4}\b/gi, 'DOB [REDACTED_DOB]');
|
|
45
|
+
}
|
|
46
|
+
return redacted;
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
exports.RedactionEngine = RedactionEngine;
|
|
50
|
+
//# sourceMappingURL=redaction-engine.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"redaction-engine.js","sourceRoot":"","sources":["../../src/proxy/redaction-engine.ts"],"names":[],"mappings":";;;AAAA,MAAa,eAAe;IAC1B,MAAM,CAAC,OAAe,EAAE,WAAqB;QAC3C,IAAI,QAAQ,GAAG,OAAO;YAEpB,8BAA8B;aAC7B,OAAO,CAAC,6EAA6E,EAAE,wBAAwB,CAAC;aAChH,OAAO,CAAC,+DAA+D,EAAE,wBAAwB,CAAC;YAEnG,sBAAsB;aACrB,OAAO,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;aAC5D,OAAO,CAAC,iCAAiC,EAAE,+BAA+B,CAAC;aAC3E,OAAO,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;aAC7D,OAAO,CAAC,0BAA0B,EAAE,yBAAyB,CAAC;aAC9D,OAAO,CAAC,4BAA4B,EAAE,2BAA2B,CAAC;YAEnE,8BAA8B;aAC7B,OAAO,CAAC,8IAA8I,EAAE,uBAAuB,CAAC;aAChL,OAAO,CAAC,0DAA0D,EAAE,qBAAqB,CAAC;YAE3F,sBAAsB;aACrB,OAAO,CAAC,qCAAqC,EAAE,yBAAyB,CAAC;aACzE,OAAO,CAAC,uEAAuE,EAAE,gBAAgB,CAAC;YAEnG,8BAA8B;aAC7B,OAAO,CAAC,wGAAwG,EAAE,0BAA0B,CAAC;YAE9I,UAAU;aACT,OAAO,CAAC,wBAAwB,EAAE,gBAAgB,CAAC;YAEpD,uBAAuB;aACtB,OAAO,CAAC,6BAA6B,EAAE,wBAAwB,CAAC;YAEjE,kBAAkB;aACjB,OAAO,CAAC,kEAAkE,EAAE,kBAAkB,CAAC;YAEhG,gBAAgB;aACf,OAAO,CAAC,oDAAoD,EAAE,kBAAkB,CAAC;YAElF,eAAe;aACd,OAAO,CAAC,8EAA8E,EAAE,eAAe,CAAC,CAAC;QAE5G,mDAAmD;QACnD,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,cAAc,CAAC,EAAE,CAAC;YAChD,QAAQ,GAAG,QAAQ;iBAChB,OAAO,CAAC,yHAAyH,EAAE,gCAAgC,CAAC;iBACpK,OAAO,CAAC,sGAAsG,EAAE,kCAAkC,CAAC,CAAC;QACzJ,CAAC;QAED,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,cAAc,CAAC,EAAE,CAAC;YAChD,QAAQ,GAAG,QAAQ;iBAChB,OAAO,CAAC,sDAAsD,EAAE,gCAAgC,CAAC;iBACjG,OAAO,CAAC,yDAAyD,EAAE,gCAAgC,CAAC;iBACpG,OAAO,CAAC,6DAA6D,EAAE,oBAAoB,CAAC,CAAC;QAClG,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAzDD,0CAyDC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"response-redaction.test.d.ts","sourceRoot":"","sources":["../../src/proxy/response-redaction.test.ts"],"names":[],"mappings":""}
|
|
@@ -0,0 +1,125 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
/**
|
|
4
|
+
* Coverage for the S-C6 fix: structure-aware response redaction.
|
|
5
|
+
* We test the redaction behavior on representative LLM response shapes
|
|
6
|
+
* (OpenAI chat-completion, Anthropic messages, SSE streams, raw text) via
|
|
7
|
+
* a lightweight wrapper that exercises the same code path without the
|
|
8
|
+
* full HTTP server.
|
|
9
|
+
*/
|
|
10
|
+
const vitest_1 = require("vitest");
|
|
11
|
+
const policy_enforcer_1 = require("./policy-enforcer");
|
|
12
|
+
const threat_engine_1 = require("./threat-engine");
|
|
13
|
+
const redaction_engine_1 = require("./redaction-engine");
|
|
14
|
+
const proxy_server_1 = require("./proxy-server");
|
|
15
|
+
function makeServer() {
|
|
16
|
+
const enforcer = new policy_enforcer_1.PolicyEnforcer(new threat_engine_1.ThreatEngine(), new redaction_engine_1.RedactionEngine());
|
|
17
|
+
const proxyConfig = {
|
|
18
|
+
enabled: true,
|
|
19
|
+
port: 0,
|
|
20
|
+
bindAddress: '127.0.0.1',
|
|
21
|
+
upstreamTimeoutMs: 1000,
|
|
22
|
+
maxBufferSizeMb: 1,
|
|
23
|
+
maxConcurrentRequests: 2,
|
|
24
|
+
interceptHttps: false,
|
|
25
|
+
certPath: '',
|
|
26
|
+
keyPath: '',
|
|
27
|
+
allowedProviders: ['*'],
|
|
28
|
+
blockLocalModels: false,
|
|
29
|
+
};
|
|
30
|
+
const server = new proxy_server_1.LLMProxyServer(proxyConfig, enforcer);
|
|
31
|
+
const applyRedaction = (body, threatTypes) => {
|
|
32
|
+
return server.applyRedactionToResponse(body, {
|
|
33
|
+
threats: threatTypes.map(type => ({ type })),
|
|
34
|
+
});
|
|
35
|
+
};
|
|
36
|
+
return { server, applyRedaction };
|
|
37
|
+
}
|
|
38
|
+
(0, vitest_1.describe)('proxy-server applyRedactionToResponse (S-C6)', () => {
|
|
39
|
+
(0, vitest_1.it)('redacts content in OpenAI chat-completion JSON while preserving structure', () => {
|
|
40
|
+
const { applyRedaction } = makeServer();
|
|
41
|
+
const body = JSON.stringify({
|
|
42
|
+
id: 'cmp-1',
|
|
43
|
+
object: 'chat.completion',
|
|
44
|
+
choices: [{
|
|
45
|
+
index: 0,
|
|
46
|
+
finish_reason: 'stop',
|
|
47
|
+
message: {
|
|
48
|
+
role: 'assistant',
|
|
49
|
+
content: 'Your card 4111-1111-1111-1111 is on file.',
|
|
50
|
+
},
|
|
51
|
+
}],
|
|
52
|
+
});
|
|
53
|
+
const out = applyRedaction(body, ['PII_EXPOSURE']);
|
|
54
|
+
const parsed = JSON.parse(out);
|
|
55
|
+
(0, vitest_1.expect)(parsed.id).toBe('cmp-1');
|
|
56
|
+
(0, vitest_1.expect)(parsed.choices[0].finish_reason).toBe('stop');
|
|
57
|
+
(0, vitest_1.expect)(parsed.choices[0].message.role).toBe('assistant');
|
|
58
|
+
(0, vitest_1.expect)(parsed.choices[0].message.content).not.toContain('4111-1111-1111-1111');
|
|
59
|
+
(0, vitest_1.expect)(parsed.choices[0].message.content).toContain('[REDACTED_CARD_NUMBER]');
|
|
60
|
+
});
|
|
61
|
+
(0, vitest_1.it)('preserves tool_calls / function_call while redacting content', () => {
|
|
62
|
+
const { applyRedaction } = makeServer();
|
|
63
|
+
const body = JSON.stringify({
|
|
64
|
+
choices: [{
|
|
65
|
+
message: {
|
|
66
|
+
role: 'assistant',
|
|
67
|
+
content: 'My SSN is 123-45-6789',
|
|
68
|
+
tool_calls: [{ id: 'call_1', type: 'function', function: { name: 'get_weather', arguments: '{"ssn":"123-45-6789"}' } }],
|
|
69
|
+
function_call: { name: 'lookup_user', arguments: '{"token":"sk-aaaaaaaaaaaaaaaaaaaaaaaa"}' },
|
|
70
|
+
},
|
|
71
|
+
finish_reason: 'tool_calls',
|
|
72
|
+
}],
|
|
73
|
+
});
|
|
74
|
+
const out = JSON.parse(applyRedaction(body, ['PII_EXPOSURE']));
|
|
75
|
+
(0, vitest_1.expect)(out.choices[0].message.tool_calls).toHaveLength(1);
|
|
76
|
+
(0, vitest_1.expect)(out.choices[0].message.tool_calls[0].function.name).toBe('get_weather');
|
|
77
|
+
(0, vitest_1.expect)(out.choices[0].message.content).not.toContain('123-45-6789');
|
|
78
|
+
(0, vitest_1.expect)(out.choices[0].message.tool_calls[0].function.arguments).not.toContain('123-45-6789');
|
|
79
|
+
(0, vitest_1.expect)(out.choices[0].message.function_call.arguments).not.toContain('sk-aaaaaaaaaaaaaaaaaaaaaaaa');
|
|
80
|
+
});
|
|
81
|
+
(0, vitest_1.it)('redacts Anthropic-style content[].text blocks', () => {
|
|
82
|
+
const { applyRedaction } = makeServer();
|
|
83
|
+
const body = JSON.stringify({
|
|
84
|
+
id: 'msg_1',
|
|
85
|
+
role: 'assistant',
|
|
86
|
+
content: [
|
|
87
|
+
{ type: 'text', text: 'Here is the AWS key: AKIAIOSFODNN7EXAMPLE' },
|
|
88
|
+
{ type: 'text', text: 'And email user@example.com' },
|
|
89
|
+
],
|
|
90
|
+
});
|
|
91
|
+
const out = JSON.parse(applyRedaction(body, ['PII_EXPOSURE']));
|
|
92
|
+
(0, vitest_1.expect)(out.content[0].text).toContain('[REDACTED_AWS_ACCESS_KEY]');
|
|
93
|
+
(0, vitest_1.expect)(out.content[0].text).not.toContain('AKIAIOSFODNN7EXAMPLE');
|
|
94
|
+
(0, vitest_1.expect)(out.content[1].text).toContain('[REDACTED_EMAIL]');
|
|
95
|
+
});
|
|
96
|
+
(0, vitest_1.it)('redacts SSE chunks while preserving framing and [DONE]', () => {
|
|
97
|
+
const { applyRedaction } = makeServer();
|
|
98
|
+
const body = [
|
|
99
|
+
`data: ${JSON.stringify({ choices: [{ delta: { content: 'leak sk-aaaaaaaaaaaaaaaaaaaaaaaa' } }] })}`,
|
|
100
|
+
``,
|
|
101
|
+
`data: ${JSON.stringify({ choices: [{ delta: { content: ' more' } }] })}`,
|
|
102
|
+
``,
|
|
103
|
+
`data: [DONE]`,
|
|
104
|
+
``,
|
|
105
|
+
].join('\n');
|
|
106
|
+
const out = applyRedaction(body, ['PII_EXPOSURE']);
|
|
107
|
+
(0, vitest_1.expect)(out).toContain('[DONE]'); // sentinel preserved
|
|
108
|
+
(0, vitest_1.expect)(out).not.toContain('sk-aaaaaaaaaaaaaaaaaaaaaaaa');
|
|
109
|
+
(0, vitest_1.expect)(out).toContain('[REDACTED_OPENAI_KEY]');
|
|
110
|
+
});
|
|
111
|
+
(0, vitest_1.it)('redacts raw text body when not JSON / not SSE', () => {
|
|
112
|
+
const { applyRedaction } = makeServer();
|
|
113
|
+
const out = applyRedaction('My SSN is 123-45-6789, hi.', ['PII_EXPOSURE']);
|
|
114
|
+
(0, vitest_1.expect)(out).not.toContain('123-45-6789');
|
|
115
|
+
});
|
|
116
|
+
(0, vitest_1.it)('does not corrupt fully-clean JSON responses', () => {
|
|
117
|
+
const { applyRedaction } = makeServer();
|
|
118
|
+
const body = JSON.stringify({
|
|
119
|
+
choices: [{ message: { role: 'assistant', content: 'Hello!' } }],
|
|
120
|
+
});
|
|
121
|
+
const out = JSON.parse(applyRedaction(body, []));
|
|
122
|
+
(0, vitest_1.expect)(out.choices[0].message.content).toBe('Hello!');
|
|
123
|
+
});
|
|
124
|
+
});
|
|
125
|
+
//# sourceMappingURL=response-redaction.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"response-redaction.test.js","sourceRoot":"","sources":["../../src/proxy/response-redaction.test.ts"],"names":[],"mappings":";;AAAA;;;;;;GAMG;AACH,mCAA8C;AAC9C,uDAAmD;AACnD,mDAA+C;AAC/C,yDAAqD;AACrD,iDAAgD;AAGhD,SAAS,UAAU;IAIjB,MAAM,QAAQ,GAAG,IAAI,gCAAc,CAAC,IAAI,4BAAY,EAAE,EAAE,IAAI,kCAAe,EAAE,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAgB;QAC/B,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,CAAC;QACP,WAAW,EAAE,WAAW;QACxB,iBAAiB,EAAE,IAAI;QACvB,eAAe,EAAE,CAAC;QAClB,qBAAqB,EAAE,CAAC;QACxB,cAAc,EAAE,KAAK;QACrB,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,EAAE;QACX,gBAAgB,EAAE,CAAC,GAAG,CAAC;QACvB,gBAAgB,EAAE,KAAK;KACxB,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,6BAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACzD,MAAM,cAAc,GAAG,CAAC,IAAY,EAAE,WAAqB,EAAU,EAAE;QACrE,OAAQ,MAEN,CAAC,wBAAwB,CAAC,IAAI,EAAE;YAChC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;SACpC,CAAC,CAAC;IACd,CAAC,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AACpC,CAAC;AAED,IAAA,iBAAQ,EAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,IAAA,WAAE,EAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,OAAO;YACX,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,CAAC;oBACR,KAAK,EAAE,CAAC;oBACR,aAAa,EAAE,MAAM;oBACrB,OAAO,EAAE;wBACP,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,2CAA2C;qBACrD;iBACF,CAAC;SACH,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAA,eAAM,EAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC/E,IAAA,eAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,OAAO,EAAE,CAAC;oBACR,OAAO,EAAE;wBACP,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE,uBAAuB;wBAChC,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,uBAAuB,EAAE,EAAE,CAAC;wBACvH,aAAa,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,yCAAyC,EAAE;qBAC7F;oBACD,aAAa,EAAE,YAAY;iBAC5B,CAAC;SACH,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAA,eAAM,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAA,eAAM,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC/E,IAAA,eAAM,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACpE,IAAA,eAAM,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7F,IAAA,eAAM,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE;gBACP,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2CAA2C,EAAE;gBACnE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,EAAE;aACrD;SACF,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAA,eAAM,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACnE,IAAA,eAAM,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAClE,IAAA,eAAM,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG;YACX,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE;YACpG,EAAE;YACF,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE;YACzE,EAAE;YACF,cAAc;YACd,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QACnD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,qBAAqB;QACtD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACzD,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,cAAc,CAAC,4BAA4B,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QAC3E,IAAA,eAAM,EAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAA,WAAE,EAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;YAC1B,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;QACjD,IAAA,eAAM,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
import { ProxyThreatSignal } from '../types';
|
|
2
|
+
interface ThreatPattern {
|
|
3
|
+
type: string;
|
|
4
|
+
name: string;
|
|
5
|
+
severity: 'info' | 'low' | 'medium' | 'high' | 'critical';
|
|
6
|
+
patterns: RegExp[];
|
|
7
|
+
direction: 'input' | 'output' | 'both';
|
|
8
|
+
weight: number;
|
|
9
|
+
}
|
|
10
|
+
export interface ThreatResult {
|
|
11
|
+
detected: boolean;
|
|
12
|
+
signals: ProxyThreatSignal[];
|
|
13
|
+
overallSeverity: 'info' | 'low' | 'medium' | 'high' | 'critical';
|
|
14
|
+
riskScore: number;
|
|
15
|
+
}
|
|
16
|
+
export declare class ThreatEngine {
|
|
17
|
+
private patterns;
|
|
18
|
+
constructor(customPatterns?: ThreatPattern[]);
|
|
19
|
+
analyze(content: string, direction: 'input' | 'output'): ThreatResult;
|
|
20
|
+
}
|
|
21
|
+
export {};
|
|
22
|
+
//# sourceMappingURL=threat-engine.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"threat-engine.d.ts","sourceRoot":"","sources":["../../src/proxy/threat-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAG7C,UAAU,aAAa;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAC1D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;IACvC,MAAM,EAAE,MAAM,CAAC;CAChB;AAoJD,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjE,SAAS,EAAE,MAAM,CAAC;CACnB;AAgHD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAkB;gBAEtB,cAAc,CAAC,EAAE,aAAa,EAAE;IAI5C,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY;CAmDtE"}
|
|
@@ -0,0 +1,291 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.ThreatEngine = void 0;
|
|
4
|
+
const THREAT_PATTERNS = [
|
|
5
|
+
{
|
|
6
|
+
type: 'PROMPT_INJECTION',
|
|
7
|
+
name: 'Prompt Injection',
|
|
8
|
+
severity: 'high',
|
|
9
|
+
direction: 'input',
|
|
10
|
+
weight: 0.9,
|
|
11
|
+
patterns: [
|
|
12
|
+
/ignore\s+(all\s+)?(previous|above|prior)\s+(instructions|directions|commands)/i,
|
|
13
|
+
/forget\s+(all\s+)?(previous|above|prior)\s+(instructions|directions|commands)/i,
|
|
14
|
+
/disregard\s+(all\s+)?(previous|above|prior)\s+(instructions|directions|commands)/i,
|
|
15
|
+
/you\s+(are\s+)?(now|will\s+now\s+act\s+as)\s+/i,
|
|
16
|
+
/act\s+as\s+(if\s+you\s+are|though\s+you\s+are)\s+/i,
|
|
17
|
+
/new\s+(instructions|directions|command|system\s+prompt)\s*[::]/i,
|
|
18
|
+
/override\s+(instructions|protocol|guidelines|directives)/i,
|
|
19
|
+
/system\s+(prompt|instruction|message)\s*[:=]/i,
|
|
20
|
+
/your\s+(new|updated)\s+(instructions|prompt|directive|role)/i,
|
|
21
|
+
/you\s+don.?t\s+(need\s+to\s+)?follow\s+(your\s+)?(guidelines|rules|restrictions)/i,
|
|
22
|
+
/you\s+(can|may)\s+(ignore|bypass|circumvent)\s+(safety|security|restrictions|rules)/i,
|
|
23
|
+
],
|
|
24
|
+
},
|
|
25
|
+
{
|
|
26
|
+
type: 'JAILBREAK',
|
|
27
|
+
name: 'Jailbreak Attempt',
|
|
28
|
+
severity: 'critical',
|
|
29
|
+
direction: 'input',
|
|
30
|
+
weight: 0.95,
|
|
31
|
+
patterns: [
|
|
32
|
+
/DAN\s*[:=]?\s*(do\s+anything\s+now)/i,
|
|
33
|
+
/jail\s*(break|broken)\s*(prompt|mode)?/i,
|
|
34
|
+
/developer\s+mode\s+(enabled|activated)/i,
|
|
35
|
+
/chatgpt\s+(2000|classic|original)\s+(mode|version)/i,
|
|
36
|
+
/sudo\s+(mode|prompt|access)/i,
|
|
37
|
+
/your\s+response\s+must\s+not\s+include\s+any\s+(warning|caution|disclaimer)/i,
|
|
38
|
+
/output\s+without\s+(any\s+)?(warnings|restrictions|filtering|censorship)/i,
|
|
39
|
+
/do\s+not\s+(refuse|decline|reject|say\s+you\s+can.?t)/i,
|
|
40
|
+
/you\s+(will|must|have\s+to)\s+answer\s+this\s+(without|regardless)/i,
|
|
41
|
+
/\[(\w+\s+)+\](\s*\(.*\))?\s*\{.*\}\s*\[.*\]/i,
|
|
42
|
+
],
|
|
43
|
+
},
|
|
44
|
+
{
|
|
45
|
+
type: 'DATA_LEAKAGE',
|
|
46
|
+
name: 'Data Leakage / System Prompt Extraction',
|
|
47
|
+
severity: 'high',
|
|
48
|
+
direction: 'output',
|
|
49
|
+
weight: 0.85,
|
|
50
|
+
patterns: [
|
|
51
|
+
/(my\s+)?(system\s+)?(prompt|instructions?|directions?|rules?|guidelines?)\s+(is|are|was|were|says?|states?|includes?)/i,
|
|
52
|
+
/i\s+(was|am)\s+(instructed|programmed|told|created|configured|built)\s+(as|to|by)/i,
|
|
53
|
+
/you\s+have\s+been\s+(created|designed|programmed)\s+(as|by|to)/i,
|
|
54
|
+
/your\s+(name|model|version|knowledge\s+cutoff|training\s+data)/i,
|
|
55
|
+
/here\s+(are|is)\s+(my|the)\s+(internal|system)\s+(prompt|instructions)/i,
|
|
56
|
+
/the\s+(model|AI|assistant)\s+was\s+(trained|developed|released)\s+(on|in|by)/i,
|
|
57
|
+
/I\s+am\s+(an\s+)?AI\s+(language\s+)?model\s+(created|developed|trained)\s+/i,
|
|
58
|
+
/I\s+cannot\s+(reveal|disclose|share)\s+(my|the)\s+(internal|system|original)\s+(prompt|instructions)/i,
|
|
59
|
+
],
|
|
60
|
+
},
|
|
61
|
+
{
|
|
62
|
+
type: 'PII_EXPOSURE',
|
|
63
|
+
name: 'PII Exposure',
|
|
64
|
+
severity: 'high',
|
|
65
|
+
direction: 'output',
|
|
66
|
+
weight: 0.8,
|
|
67
|
+
patterns: [
|
|
68
|
+
/\b\d{3}-\d{2}-\d{4}\b/,
|
|
69
|
+
/\b\d{3}\s\d{2}\s\d{4}\b/,
|
|
70
|
+
/\b(?:\d{4}[- ]?){3}\d{4}\b/,
|
|
71
|
+
/\b[A-Z]{2}\d{2}\s?[\dA-Z]{4}\s?(?:[\dA-Z]{4}\s?){2,7}[\dA-Z]{1,4}\b/,
|
|
72
|
+
/\b[A-Za-z0-9._%+\-]{1,64}@[A-Za-z0-9.\-]{1,253}\.[A-Za-z]{2,}\b/,
|
|
73
|
+
/\brouting(?:\s*(?:number|#|no\.?))?\s*:?\s*\d{9}\b/gi,
|
|
74
|
+
],
|
|
75
|
+
},
|
|
76
|
+
{
|
|
77
|
+
type: 'MODEL_THEFT',
|
|
78
|
+
name: 'Model Theft / Extraction',
|
|
79
|
+
severity: 'critical',
|
|
80
|
+
direction: 'input',
|
|
81
|
+
weight: 0.9,
|
|
82
|
+
patterns: [
|
|
83
|
+
/(repeat|copy|print|output|display|show|write|dump|echo|return)\s+(all|every|the\s+(entire|full|complete))\s+(of\s+)?(your\s+)?(training\s+)?(data|knowledge|dataset|corpus|information|parameters|weights)/i,
|
|
84
|
+
/(extract|exfiltrate|expose|dump|steal|capture)\s+(your|the|model\s*'?s?)\s+(weights|parameters|architecture|training\s+data|knowledge\s+base)/i,
|
|
85
|
+
/list\s+(all|every|the\s+(complete|full))\s+(words|tokens|patterns|responses|outputs)\s+(you\s+)?(know|have|can\s+generate)/i,
|
|
86
|
+
/tell\s+me\s+(everything|all)\s+(you\s+)?know\s+(about|regarding)\s+(yourself|your\s+training|your\s+design)/i,
|
|
87
|
+
/what\s+(is|are)\s+(the\s+)?(exact|precise|complete)\s+(contents?|text)\s+(of|in)\s+(your|the)\s+(system\s+)?(prompt|instructions)/i,
|
|
88
|
+
/glow\s+(and\s+)?(tell|share|reveal)\s+/i,
|
|
89
|
+
/(repeat|say)\s+(after|back\s+to)\s+(me|us)\s+(every|all|the\s+following)\s+(word|sentence|text)/i,
|
|
90
|
+
],
|
|
91
|
+
},
|
|
92
|
+
{
|
|
93
|
+
type: 'ANOMALOUS_BEHAVIOR',
|
|
94
|
+
name: 'Anomalous Content',
|
|
95
|
+
severity: 'medium',
|
|
96
|
+
direction: 'both',
|
|
97
|
+
weight: 0.6,
|
|
98
|
+
patterns: [
|
|
99
|
+
/(BEGIN|END)\s+(ENCRYPTED|PGP|SIGNED|ENCODED)\s+(MESSAGE|TEXT|BLOCK|DATA)/i,
|
|
100
|
+
/[A-Za-z0-9+/]{100,}={0,2}/,
|
|
101
|
+
/(?:\\x[0-9a-fA-F]{2}){10,}/,
|
|
102
|
+
/(?:%[0-9a-fA-F]{2}){10,}/,
|
|
103
|
+
/[^\x20-\x7E\n\r\t]{20,}/,
|
|
104
|
+
],
|
|
105
|
+
},
|
|
106
|
+
{
|
|
107
|
+
type: 'HALLUCINATION_RISK',
|
|
108
|
+
name: 'Hallucination / Fabrication',
|
|
109
|
+
severity: 'low',
|
|
110
|
+
direction: 'output',
|
|
111
|
+
weight: 0.4,
|
|
112
|
+
patterns: [
|
|
113
|
+
/i\s+(can'?t|am\s+unable\s+to|cannot)\s+(find|locate|access|retrieve|verify|confirm)\s+(the\s+)?(information|data|details|records?|files?)/i,
|
|
114
|
+
/as\s+(an\s+)?AI\s+(language\s+)?model\s+(i\s+)?(do\s+not\s+have|cannot|was\s+not\s+trained\s+(on|with)|don'?t\s+have\s+access)/i,
|
|
115
|
+
/my\s+(training\s+)?data\s+(only\s+)?(goes\s+up\s+to|covers\s+up\s+to|includes\s+information\s+up\s+to|cut\s+off)/i,
|
|
116
|
+
/i\s+don'?t\s+(have\s+access\s+to|know|understand)\s+(real-time|live|current|up-to-date)/i,
|
|
117
|
+
],
|
|
118
|
+
},
|
|
119
|
+
{
|
|
120
|
+
type: 'AGENT_COMPROMISE',
|
|
121
|
+
name: 'Agent Compromise',
|
|
122
|
+
severity: 'critical',
|
|
123
|
+
direction: 'both',
|
|
124
|
+
weight: 0.95,
|
|
125
|
+
patterns: [
|
|
126
|
+
/(export|upload|send|copy|move|transfer|exfiltrate)\s+(all|my|the|sensitive|private|secret)\s+(data|files|keys|credentials|tokens|passwords|secrets)/i,
|
|
127
|
+
/(ssh|connect|login)\s+to\s+[\w@.]+\s+(using|with)\s+(the\s+)?(stolen|extracted|found|collected)\s+(credentials|keys|password)/i,
|
|
128
|
+
/(install|download|deploy|setup|configure)\s+(a\s+)?(backdoor|malware|trojan|rootkit|rat|persistence|payload)/i,
|
|
129
|
+
/(chmod|chown)\s+(4777|777|6777)\s+(.*)\s+(to\s+)?(escalate|grant|give)\s+(privileges|access|permissions)/i,
|
|
130
|
+
/(disable|turn\s+off|bypass|deactivate)\s+(the\s+)?(security|antivirus|firewall|monitoring|logging|audit)/i,
|
|
131
|
+
/(clear|delete|remove|wipe|truncate)\s+(logs|history|audit\s+trail|evidences?|traces?)/i,
|
|
132
|
+
],
|
|
133
|
+
},
|
|
134
|
+
{
|
|
135
|
+
type: 'UNAUTHORIZED_ACCESS',
|
|
136
|
+
name: 'Unauthorized Access',
|
|
137
|
+
severity: 'high',
|
|
138
|
+
direction: 'input',
|
|
139
|
+
weight: 0.85,
|
|
140
|
+
patterns: [
|
|
141
|
+
/(access|read|view|cat|dump|show|print|display)\s+(the\s+)?(\/etc\/(passwd|shadow|sudoers)|config|credentials)/i,
|
|
142
|
+
/(connect\s+to|scan|probe|enumerate)\s+(internal|private)\s+(network|service|server|api|endpoint)/i,
|
|
143
|
+
/(bypass|circumvent|get\s+around)\s+(authentication|authorization|access\s+controls?|paywall|login)/i,
|
|
144
|
+
/(impersonate|pretend\s+to\s+be|act\s+as)\s+(another|admin|root|superuser|administrator)/i,
|
|
145
|
+
/(retrieve|get|fetch|download)\s+(source\s+code|database|backup|snapshot|credentials)/i,
|
|
146
|
+
],
|
|
147
|
+
},
|
|
148
|
+
];
|
|
149
|
+
const SEVERITY_ORDER = {
|
|
150
|
+
info: 0, low: 1, medium: 2, high: 3, critical: 4,
|
|
151
|
+
};
|
|
152
|
+
const DANGEROUS_DIRECTIVE_TERMS = new Set([
|
|
153
|
+
'override', 'bypass', 'disable', 'ignore', 'discard', 'replace', 'reveal', 'dump',
|
|
154
|
+
'exfiltrate', 'extract', 'export', 'unlock', 'hidden', 'secret', 'internal', 'system',
|
|
155
|
+
]);
|
|
156
|
+
const SELF_REFERENCE_TERMS = new Set([
|
|
157
|
+
'system', 'prompt', 'instruction', 'directive', 'internal', 'model', 'assistant', 'training',
|
|
158
|
+
]);
|
|
159
|
+
function tokenize(content) {
|
|
160
|
+
return content
|
|
161
|
+
.toLowerCase()
|
|
162
|
+
.split(/[^a-z0-9_]+/)
|
|
163
|
+
.filter(Boolean);
|
|
164
|
+
}
|
|
165
|
+
function shannonEntropy(content) {
|
|
166
|
+
if (!content)
|
|
167
|
+
return 0;
|
|
168
|
+
const frequencies = new Map();
|
|
169
|
+
for (const char of content) {
|
|
170
|
+
frequencies.set(char, (frequencies.get(char) ?? 0) + 1);
|
|
171
|
+
}
|
|
172
|
+
let entropy = 0;
|
|
173
|
+
for (const count of frequencies.values()) {
|
|
174
|
+
const probability = count / content.length;
|
|
175
|
+
entropy -= probability * Math.log2(probability);
|
|
176
|
+
}
|
|
177
|
+
return entropy;
|
|
178
|
+
}
|
|
179
|
+
function longestEncodedRun(content) {
|
|
180
|
+
const matches = content.match(/[A-Za-z0-9+/]{40,}={0,2}/g) ?? [];
|
|
181
|
+
return matches.reduce((longest, current) => Math.max(longest, current.length), 0);
|
|
182
|
+
}
|
|
183
|
+
function countMatches(content, pattern) {
|
|
184
|
+
return content.match(pattern)?.length ?? 0;
|
|
185
|
+
}
|
|
186
|
+
function clamp(value, min, max) {
|
|
187
|
+
return Math.min(Math.max(value, min), max);
|
|
188
|
+
}
|
|
189
|
+
function analyzeStatisticalSignals(content, direction) {
|
|
190
|
+
const signals = [];
|
|
191
|
+
const trimmed = content.trim();
|
|
192
|
+
if (!trimmed)
|
|
193
|
+
return signals;
|
|
194
|
+
const tokens = tokenize(trimmed);
|
|
195
|
+
const tokenCount = tokens.length || 1;
|
|
196
|
+
const uniqueTokenRatio = new Set(tokens).size / tokenCount;
|
|
197
|
+
const directiveHits = tokens.filter((token) => DANGEROUS_DIRECTIVE_TERMS.has(token)).length;
|
|
198
|
+
const selfReferenceHits = tokens.filter((token) => SELF_REFERENCE_TERMS.has(token)).length;
|
|
199
|
+
const directiveDensity = directiveHits / tokenCount;
|
|
200
|
+
const delimiterDensity = countMatches(trimmed, /[{}\[\]<>|`~#$%;]/g) / trimmed.length;
|
|
201
|
+
const quoteDensity = countMatches(trimmed, /["']/g) / trimmed.length;
|
|
202
|
+
const entropy = shannonEntropy(trimmed);
|
|
203
|
+
const encodedRun = longestEncodedRun(trimmed);
|
|
204
|
+
if (direction === 'input' && delimiterDensity >= 0.055 && directiveDensity >= 0.045) {
|
|
205
|
+
signals.push({
|
|
206
|
+
type: 'PROMPT_INJECTION',
|
|
207
|
+
severity: directiveDensity >= 0.08 ? 'high' : 'medium',
|
|
208
|
+
confidence: clamp(0.52 + delimiterDensity * 1.5 + directiveDensity * 2, 0.55, 0.92),
|
|
209
|
+
evidence: `delimiter_density=${delimiterDensity.toFixed(3)} directive_density=${directiveDensity.toFixed(3)}`,
|
|
210
|
+
});
|
|
211
|
+
}
|
|
212
|
+
if (direction === 'input' && uniqueTokenRatio <= 0.55 && directiveHits >= 4) {
|
|
213
|
+
signals.push({
|
|
214
|
+
type: 'JAILBREAK',
|
|
215
|
+
severity: uniqueTokenRatio <= 0.4 ? 'high' : 'medium',
|
|
216
|
+
confidence: clamp(0.5 + (0.65 - uniqueTokenRatio) + directiveDensity, 0.5, 0.9),
|
|
217
|
+
evidence: `unique_token_ratio=${uniqueTokenRatio.toFixed(3)} directive_hits=${directiveHits}`,
|
|
218
|
+
});
|
|
219
|
+
}
|
|
220
|
+
if (encodedRun >= 80 && entropy >= 4.4) {
|
|
221
|
+
signals.push({
|
|
222
|
+
type: 'ANOMALOUS_BEHAVIOR',
|
|
223
|
+
severity: encodedRun >= 160 ? 'high' : 'medium',
|
|
224
|
+
confidence: clamp(0.58 + (encodedRun / 250) + ((entropy - 4.4) / 2), 0.6, 0.95),
|
|
225
|
+
evidence: `entropy=${entropy.toFixed(2)} encoded_run=${encodedRun}`,
|
|
226
|
+
});
|
|
227
|
+
}
|
|
228
|
+
if (direction === 'output' && selfReferenceHits >= 3 && quoteDensity >= 0.02) {
|
|
229
|
+
signals.push({
|
|
230
|
+
type: 'DATA_LEAKAGE',
|
|
231
|
+
severity: selfReferenceHits >= 5 ? 'high' : 'medium',
|
|
232
|
+
confidence: clamp(0.5 + (selfReferenceHits / 12) + quoteDensity, 0.55, 0.9),
|
|
233
|
+
evidence: `self_reference_hits=${selfReferenceHits} quote_density=${quoteDensity.toFixed(3)}`,
|
|
234
|
+
});
|
|
235
|
+
}
|
|
236
|
+
return signals;
|
|
237
|
+
}
|
|
238
|
+
class ThreatEngine {
|
|
239
|
+
constructor(customPatterns) {
|
|
240
|
+
this.patterns = customPatterns ?? THREAT_PATTERNS;
|
|
241
|
+
}
|
|
242
|
+
analyze(content, direction) {
|
|
243
|
+
const signals = [];
|
|
244
|
+
let maxSeverityIdx = 0;
|
|
245
|
+
let maxRiskScore = 0;
|
|
246
|
+
for (const pattern of this.patterns) {
|
|
247
|
+
if (pattern.direction !== 'both' && pattern.direction !== direction)
|
|
248
|
+
continue;
|
|
249
|
+
for (const re of pattern.patterns) {
|
|
250
|
+
const match = content.match(re);
|
|
251
|
+
if (match) {
|
|
252
|
+
const confidence = Math.min(pattern.weight * (1 + Math.log2((match[0]?.length ?? 0) + 1) * 0.1), 0.99);
|
|
253
|
+
const severityIdx = SEVERITY_ORDER[pattern.severity] ?? 0;
|
|
254
|
+
signals.push({
|
|
255
|
+
type: pattern.type,
|
|
256
|
+
severity: pattern.severity,
|
|
257
|
+
confidence,
|
|
258
|
+
source: 'local_threat_engine',
|
|
259
|
+
evidence: match[0].slice(0, 200),
|
|
260
|
+
});
|
|
261
|
+
if (severityIdx > maxSeverityIdx)
|
|
262
|
+
maxSeverityIdx = severityIdx;
|
|
263
|
+
maxRiskScore = Math.max(maxRiskScore, pattern.weight * 100);
|
|
264
|
+
break;
|
|
265
|
+
}
|
|
266
|
+
}
|
|
267
|
+
}
|
|
268
|
+
for (const signal of analyzeStatisticalSignals(content, direction)) {
|
|
269
|
+
const severityIdx = SEVERITY_ORDER[signal.severity] ?? 0;
|
|
270
|
+
signals.push({
|
|
271
|
+
type: signal.type,
|
|
272
|
+
severity: signal.severity,
|
|
273
|
+
confidence: signal.confidence,
|
|
274
|
+
source: 'local_statistical_threat_engine',
|
|
275
|
+
evidence: signal.evidence,
|
|
276
|
+
});
|
|
277
|
+
if (severityIdx > maxSeverityIdx)
|
|
278
|
+
maxSeverityIdx = severityIdx;
|
|
279
|
+
maxRiskScore = Math.max(maxRiskScore, signal.confidence * 100);
|
|
280
|
+
}
|
|
281
|
+
const severityKeys = ['info', 'low', 'medium', 'high', 'critical'];
|
|
282
|
+
return {
|
|
283
|
+
detected: signals.length > 0,
|
|
284
|
+
signals,
|
|
285
|
+
overallSeverity: severityKeys[maxSeverityIdx] ?? 'info',
|
|
286
|
+
riskScore: Math.min(maxRiskScore, 100),
|
|
287
|
+
};
|
|
288
|
+
}
|
|
289
|
+
}
|
|
290
|
+
exports.ThreatEngine = ThreatEngine;
|
|
291
|
+
//# sourceMappingURL=threat-engine.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"threat-engine.js","sourceRoot":"","sources":["../../src/proxy/threat-engine.ts"],"names":[],"mappings":";;;AAYA,MAAM,eAAe,GAAoB;IACvC;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE;YACR,gFAAgF;YAChF,gFAAgF;YAChF,mFAAmF;YACnF,gDAAgD;YAChD,oDAAoD;YACpD,iEAAiE;YACjE,2DAA2D;YAC3D,+CAA+C;YAC/C,8DAA8D;YAC9D,mFAAmF;YACnF,sFAAsF;SACvF;KACF;IACD;QACE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE;YACR,sCAAsC;YACtC,yCAAyC;YACzC,yCAAyC;YACzC,qDAAqD;YACrD,8BAA8B;YAC9B,8EAA8E;YAC9E,2EAA2E;YAC3E,wDAAwD;YACxD,qEAAqE;YACrE,8CAA8C;SAC/C;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,yCAAyC;QAC/C,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE;YACR,wHAAwH;YACxH,oFAAoF;YACpF,iEAAiE;YACjE,iEAAiE;YACjE,yEAAyE;YACzE,+EAA+E;YAC/E,6EAA6E;YAC7E,uGAAuG;SACxG;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE;YACR,uBAAuB;YACvB,yBAAyB;YACzB,4BAA4B;YAC5B,qEAAqE;YACrE,iEAAiE;YACjE,sDAAsD;SACvD;KACF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE;YACR,6MAA6M;YAC7M,gJAAgJ;YAChJ,6HAA6H;YAC7H,8GAA8G;YAC9G,oIAAoI;YACpI,yCAAyC;YACzC,kGAAkG;SACnG;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE;YACR,2EAA2E;YAC3E,2BAA2B;YAC3B,4BAA4B;YAC5B,0BAA0B;YAC1B,yBAAyB;SAC1B;KACF;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE;YACR,4IAA4I;YAC5I,iIAAiI;YACjI,mHAAmH;YACnH,0FAA0F;SAC3F;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,UAAU;QACpB,SAAS,EAAE,MAAM;QACjB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE;YACR,sJAAsJ;YACtJ,gIAAgI;YAChI,+GAA+G;YAC/G,2GAA2G;YAC3G,2GAA2G;YAC3G,wFAAwF;SACzF;KACF;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,MAAM;QAChB,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE;YACR,gHAAgH;YAChH,mGAAmG;YACnG,qGAAqG;YACrG,0FAA0F;YAC1F,uFAAuF;SACxF;KACF;CACF,CAAC;AAgBF,MAAM,cAAc,GAA2B;IAC7C,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;CACjD,CAAC;AAEF,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC;IACxC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM;IACjF,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ;CACtF,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU;CAC7F,CAAC,CAAC;AAEH,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,OAAO;SACX,WAAW,EAAE;SACb,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,CAAC;IACvB,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;QAC3C,OAAO,IAAI,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAC;IACjE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,OAAe;IACpD,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAe,EAAE,SAA6B;IAC/E,MAAM,OAAO,GAAkC,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC;IAE7B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;IACtC,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,UAAU,CAAC;IAC3D,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5F,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3F,MAAM,gBAAgB,GAAG,aAAa,GAAG,UAAU,CAAC;IACpD,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,EAAE,oBAAoB,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACtF,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACrE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE9C,IAAI,SAAS,KAAK,OAAO,IAAI,gBAAgB,IAAI,KAAK,IAAI,gBAAgB,IAAI,KAAK,EAAE,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACtD,UAAU,EAAE,KAAK,CAAC,IAAI,GAAG,gBAAgB,GAAG,GAAG,GAAG,gBAAgB,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC;YACnF,QAAQ,EAAE,qBAAqB,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SAC9G,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,KAAK,OAAO,IAAI,gBAAgB,IAAI,IAAI,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,gBAAgB,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACrD,UAAU,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,gBAAgB,CAAC,GAAG,gBAAgB,EAAE,GAAG,EAAE,GAAG,CAAC;YAC/E,QAAQ,EAAE,sBAAsB,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,aAAa,EAAE;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,IAAI,UAAU,IAAI,EAAE,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YAC/C,UAAU,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC;YAC/E,QAAQ,EAAE,WAAW,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,UAAU,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IAED,IAAI,SAAS,KAAK,QAAQ,IAAI,iBAAiB,IAAI,CAAC,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,iBAAiB,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;YACpD,UAAU,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,iBAAiB,GAAG,EAAE,CAAC,GAAG,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC;YAC3E,QAAQ,EAAE,uBAAuB,iBAAiB,kBAAkB,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SAC9F,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAa,YAAY;IAGvB,YAAY,cAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG,cAAc,IAAI,eAAe,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,OAAe,EAAE,SAA6B;QACpD,MAAM,OAAO,GAAwB,EAAE,CAAC;QACxC,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,YAAY,GAAG,CAAC,CAAC;QAErB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS;YAE9E,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAChC,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;oBACvG,MAAM,WAAW,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;oBAE1D,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,OAAO,CAAC,IAAI;wBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,UAAU;wBACV,MAAM,EAAE,qBAAqB;wBAC7B,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;qBACjC,CAAC,CAAC;oBAEH,IAAI,WAAW,GAAG,cAAc;wBAAE,cAAc,GAAG,WAAW,CAAC;oBAC/D,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;oBAC5D,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,yBAAyB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;YACnE,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,MAAM,EAAE,iCAAiC;gBACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,IAAI,WAAW,GAAG,cAAc;gBAAE,cAAc,GAAG,WAAW,CAAC;YAC/D,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;QAE5E,OAAO;YACL,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAC5B,OAAO;YACP,eAAe,EAAE,YAAY,CAAC,cAAc,CAAC,IAAI,MAAM;YACvD,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC;SACvC,CAAC;IACJ,CAAC;CACF;AA1DD,oCA0DC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"threat-engine.test.d.ts","sourceRoot":"","sources":["../../src/proxy/threat-engine.test.ts"],"names":[],"mappings":""}
|