@princeverma130104/agentguard 1.0.0 → 1.0.2

package/dist/guard.js

@@ -5,19 +5,34 @@
  * Orchestrates scanning, tokenization, vault storage, and deanonymization.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentGuard = void 0;
+exports.AgentGuard = exports.OutboundApprovalError = void 0;
 const uuid_1 = require("uuid");
+const crypto_1 = require("crypto");
 const scanner_1 = require("./scanner");
 const vault_1 = require("./vault");
+class OutboundApprovalError extends Error {
+    constructor() {
+        super('Outbound LLM request was not approved.');
+        this.name = 'OutboundApprovalError';
+    }
+}
+exports.OutboundApprovalError = OutboundApprovalError;
 class AgentGuard {
     constructor(options = {}) {
         this.options = options;
         this.auditLog = [];
+        const maxTextLength = options.maxTextLength ?? 1000000;
+        if (!Number.isSafeInteger(maxTextLength) || maxTextLength <= 0) {
+            throw new RangeError('maxTextLength must be a positive safe integer.');
+        }
         this.vault = new vault_1.TokenVault({
             redisUrl: options.redisUrl,
             ttlSeconds: options.ttlSeconds,
+            maxTokensPerSession: options.maxTokensPerSession,
+            vaultEncryptionKey: options.vaultEncryptionKey,
         });
         this.verbose = options.verbose ?? false;
+        this.maxTextLength = maxTextLength;
     }
     /**
      * Scans input text, replaces all detected PII with deterministic tokens,
@@ -31,6 +46,15 @@ class AgentGuard {
      * @returns          Sanitized text, session ID, and a redaction summary
      */
     async anonymize(text, sessionId) {
+        if (typeof text !== 'string') {
+            throw new TypeError('text must be a string.');
+        }
+        if (text.length > this.maxTextLength) {
+            throw new RangeError(`text exceeds the configured maximum of ${this.maxTextLength} characters.`);
+        }
+        if (sessionId !== undefined && (typeof sessionId !== 'string' || sessionId.length === 0 || sessionId.length > 512)) {
+            throw new TypeError('sessionId must be a non-empty string of at most 512 characters.');
+        }
         const activeSession = sessionId ?? (0, uuid_1.v4)();
         const scan = (0, scanner_1.scanText)(text, this.options.customPatterns);
         if (!scan.hasSensitiveData) {
@@ -41,46 +65,32 @@ class AgentGuard {
             };
         }
         const uniqueValues = (0, scanner_1.extractUniqueValues)(scan);
-        const typeCounters = {};
         const redactedCounts = {};
-        const existingVault = await this.vault.getVault(activeSession);
-        for (const token of Object.keys(existingVault)) {
-            const match = /^\[([A-Z_]+)_(\d+)\]$/.exec(token);
-            if (match) {
-                typeCounters[match[1]] = Math.max(typeCounters[match[1]] ?? 0, Number(match[2]));
-            }
-        }
-        let sanitizedText = text;
+        const tokenByValue = new Map();
         for (const [rawValue, entityType] of uniqueValues.entries()) {
-            // Check if this value already has a token in the session (deduplication)
-            const existingToken = await this.vault.lookupToken(activeSession, rawValue);
-            let token;
-            if (existingToken) {
-                token = existingToken;
-            }
-            else {
-                typeCounters[entityType] = (typeCounters[entityType] ?? 0) + 1;
-                token = `[${entityType}_${typeCounters[entityType]}]`;
-                while (Object.prototype.hasOwnProperty.call(existingVault, token)) {
-                    typeCounters[entityType]++;
-                    token = `[${entityType}_${typeCounters[entityType]}]`;
-                }
-                await this.vault.store(activeSession, token, rawValue);
-                existingVault[token] = rawValue;
+            const { token, created } = await this.vault.getOrStore(activeSession, entityType, rawValue);
+            tokenByValue.set(rawValue, token);
+            if (created) {
                 redactedCounts[entityType] = (redactedCounts[entityType] ?? 0) + 1;
             }
-            // Replace ALL occurrences of rawValue in the text
-            sanitizedText = sanitizedText.split(rawValue).join(token);
         }
+        let sanitizedText = '';
+        let cursor = 0;
+        for (const entity of scan.entities) {
+            sanitizedText += text.slice(cursor, entity.startIndex);
+            sanitizedText += tokenByValue.get(entity.value);
+            cursor = entity.endIndex;
+        }
+        sanitizedText += text.slice(cursor);
         const redactionSummary = redactedCounts;
         this.recordAudit({
             timestamp: new Date().toISOString(),
-            sessionId: activeSession,
+            sessionIdHash: this.hashSessionId(activeSession),
             operation: 'anonymize',
             entityTypesRedacted: Object.keys(redactionSummary),
         });
         if (this.verbose) {
-            console.log(`[AgentGuard] Anonymized | session=${activeSession} | types=${JSON.stringify(redactionSummary)}`);
+            console.log(`[AgentGuard] Anonymized | sessionHash=${this.hashSessionId(activeSession)} | types=${JSON.stringify(redactionSummary)}`);
         }
         return { sanitizedText, sessionId: activeSession, redactionSummary };
     }
@@ -94,26 +104,122 @@ class AgentGuard {
      * @returns              Text with all tokens replaced by original values
      */
     async deanonymize(tokenizedText, sessionId) {
+        this.validateSessionId(sessionId);
+        if (typeof tokenizedText !== 'string') {
+            throw new TypeError('tokenizedText must be a string.');
+        }
+        if (tokenizedText.length > this.maxTextLength) {
+            throw new RangeError(`tokenizedText exceeds the configured maximum of ${this.maxTextLength} characters.`);
+        }
         const vault = await this.vault.getVault(sessionId);
-        let restoredText = tokenizedText;
         let restoredCount = 0;
-        for (const [token, rawValue] of Object.entries(vault)) {
-            if (restoredText.includes(token)) {
-                restoredText = restoredText.split(token).join(rawValue);
-                restoredCount++;
+        let outputLength = 0;
+        let cursor = 0;
+        const parts = [];
+        const tokenPattern = /\[[A-Z_]+_\d+\]/g;
+        let match;
+        while ((match = tokenPattern.exec(tokenizedText)) !== null) {
+            const token = match[0];
+            const replacement = Object.prototype.hasOwnProperty.call(vault, token)
+                ? vault[token]
+                : token;
+            outputLength += match.index - cursor + replacement.length;
+            if (outputLength > this.maxTextLength) {
+                throw new RangeError(`restored text exceeds the configured maximum of ${this.maxTextLength} characters.`);
             }
+            parts.push(tokenizedText.slice(cursor, match.index), replacement);
+            cursor = match.index + token.length;
+            if (Object.prototype.hasOwnProperty.call(vault, token))
+                restoredCount++;
         }
+        const tail = tokenizedText.slice(cursor);
+        if (outputLength + tail.length > this.maxTextLength) {
+            throw new RangeError(`restored text exceeds the configured maximum of ${this.maxTextLength} characters.`);
+        }
+        parts.push(tail);
+        const restoredText = parts.join('');
         this.recordAudit({
             timestamp: new Date().toISOString(),
-            sessionId,
+            sessionIdHash: this.hashSessionId(sessionId),
             operation: 'deanonymize',
             totalTokensRestored: restoredCount,
         });
         if (this.verbose) {
-            console.log(`[AgentGuard] Deanonymized | session=${sessionId} | tokensRestored=${restoredCount}`);
+            console.log(`[AgentGuard] Deanonymized | sessionHash=${this.hashSessionId(sessionId)} | tokensRestored=${restoredCount}`);
         }
         return restoredText;
     }
+    /**
+     * Anonymizes strings throughout a JSON-compatible value, including property
+     * names, and reuses one vault session for the complete structure.
+     */
+    async anonymizeObject(value, sessionId) {
+        const initial = await this.anonymize('', sessionId);
+        const redactionSummary = {};
+        const sanitizedValue = await this.mapJsonValue(value, async (text) => {
+            const result = await this.anonymize(text, initial.sessionId);
+            for (const [entityType, count] of Object.entries(result.redactionSummary)) {
+                redactionSummary[entityType] = (redactionSummary[entityType] ?? 0) + count;
+            }
+            return result.sanitizedText;
+        }, new WeakSet(), 0, 'Request');
+        return {
+            sanitizedValue,
+            sessionId: initial.sessionId,
+            redactionSummary,
+        };
+    }
+    /**
+     * Restores tokens throughout a JSON-compatible value using one session.
+     * Only call this for a session authorized by the consuming application.
+     */
+    async deanonymizeObject(value, sessionId) {
+        this.validateSessionId(sessionId);
+        return this.mapJsonValue(value, (text) => this.deanonymize(text, sessionId), new WeakSet(), 0, 'Response');
+    }
+    /**
+     * Anonymizes a prompt before invoking the caller's outbound LLM function.
+     * If supplied, approval receives sanitized text only; any result other than
+     * literal true blocks the call. Sanitization or approval errors fail closed.
+     */
+    async sendToLLM(send, prompt, options = {}) {
+        if (typeof send !== 'function') {
+            throw new TypeError('send must be a function.');
+        }
+        if (options.approve !== undefined && typeof options.approve !== 'function') {
+            throw new TypeError('approve must be a function when provided.');
+        }
+        const { sanitizedText, sessionId, redactionSummary } = await this.anonymize(prompt, options.sessionId);
+        if (options.approve) {
+            let approved;
+            try {
+                approved = await options.approve({
+                    sanitizedPrompt: sanitizedText,
+                    redactionSummary: { ...redactionSummary },
+                });
+            }
+            catch (error) {
+                this.recordAudit({
+                    timestamp: new Date().toISOString(),
+                    sessionIdHash: this.hashSessionId(sessionId),
+                    operation: 'outbound_rejected',
+                    entityTypesRedacted: Object.keys(redactionSummary),
+                });
+                throw error;
+            }
+            this.recordAudit({
+                timestamp: new Date().toISOString(),
+                sessionIdHash: this.hashSessionId(sessionId),
+                operation: approved === true ? 'outbound_approved' : 'outbound_rejected',
+                entityTypesRedacted: Object.keys(redactionSummary),
+            });
+            if (approved !== true) {
+                throw new OutboundApprovalError();
+            }
+        }
+        const result = await send(sanitizedText);
+        return { result, sessionId, redactionSummary };
+    }
     /**
      * Wraps an async function, automatically anonymizing its string input
      * and deanonymizing the string output. Useful for wrapping LLM calls.
@@ -139,18 +245,18 @@ class AgentGuard {
         await this.vault.destroySession(sessionId);
         this.recordAudit({
             timestamp: new Date().toISOString(),
-            sessionId,
+            sessionIdHash: this.hashSessionId(sessionId),
             operation: 'session_destroy',
         });
         if (this.verbose) {
-            console.log(`[AgentGuard] Session destroyed | session=${sessionId}`);
+            console.log(`[AgentGuard] Session destroyed | sessionHash=${this.hashSessionId(sessionId)}`);
         }
     }
     /**
      * Returns the in-memory audit log (no PII, only metadata).
      */
     getAuditLog() {
-        return this.auditLog;
+        return this.auditLog.map((entry) => ({ ...entry }));
     }
     /**
      * Checks Redis connectivity. Use in health-check endpoints.
@@ -172,6 +278,65 @@ class AgentGuard {
             this.auditLog.shift();
         }
     }
+    hashSessionId(sessionId) {
+        return (0, crypto_1.createHash)('sha256').update(sessionId).digest('hex').slice(0, 16);
+    }
+    validateSessionId(sessionId) {
+        if (typeof sessionId !== 'string' || sessionId.length === 0 || sessionId.length > 512) {
+            throw new TypeError('sessionId must be a non-empty string of at most 512 characters.');
+        }
+    }
+    async mapJsonValue(value, mapText, ancestors, depth, label) {
+        if (depth > 100) {
+            throw new RangeError(`${label} body exceeds the maximum nesting depth of 100.`);
+        }
+        if (typeof value === 'string')
+            return mapText(value);
+        if (value === null ||
+            typeof value === 'boolean' ||
+            (typeof value === 'number' && Number.isFinite(value))) {
+            return value;
+        }
+        if (typeof value !== 'object') {
+            throw new TypeError(`${label} body must contain only JSON-compatible values.`);
+        }
+        if (ancestors.has(value)) {
+            throw new TypeError(`${label} body must not contain circular references.`);
+        }
+        if (!Array.isArray(value) &&
+            Object.getPrototypeOf(value) !== Object.prototype &&
+            Object.getPrototypeOf(value) !== null) {
+            throw new TypeError(`${label} body must contain only JSON-compatible objects.`);
+        }
+        ancestors.add(value);
+        try {
+            if (Array.isArray(value)) {
+                const result = [];
+                for (const item of value) {
+                    result.push(await this.mapJsonValue(item, mapText, ancestors, depth + 1, label));
+                }
+                return result;
+            }
+            const result = {};
+            for (const [key, item] of Object.entries(value)) {
+                const mappedKey = await mapText(key);
+                const mappedValue = await this.mapJsonValue(item, mapText, ancestors, depth + 1, label);
+                if (Object.prototype.hasOwnProperty.call(result, mappedKey)) {
+                    throw new TypeError(`${label} property names collide after anonymization.`);
+                }
+                Object.defineProperty(result, mappedKey, {
+                    configurable: true,
+                    enumerable: true,
+                    value: mappedValue,
+                    writable: true,
+                });
+            }
+            return result;
+        }
+        finally {
+            ancestors.delete(value);
+        }
+    }
 }
 exports.AgentGuard = AgentGuard;
 //# sourceMappingURL=guard.js.map

package/dist/guard.js.map

@@ -1 +1 @@
-{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,+BAAoC;AACpC,uCAA0D;AAC1D,mCAAmD;AAiCnD,MAAa,UAAU;IAKrB,YAA6B,UAAwB,EAAE;QAA1B,YAAO,GAAP,OAAO,CAAmB;QAFtC,aAAQ,GAAiB,EAAE,CAAC;QAG3C,IAAI,CAAC,KAAK,GAAG,IAAI,kBAAU,CAAC;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,SAAkB;QAC9C,MAAM,aAAa,GAAG,SAAS,IAAI,IAAA,SAAM,GAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAEzD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,OAAO;gBACL,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,aAAa;gBACxB,gBAAgB,EAAE,EAAE;aACrB,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,6BAAmB,EAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,YAAY,GAA2B,EAAE,CAAC;QAChD,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QAE/D,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,KAAK,EAAE,CAAC;gBACV,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAC/B,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAC3B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACjB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,aAAa,GAAG,IAAI,CAAC;QAEzB,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,yEAAyE;YACzE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YAE5E,IAAI,KAAa,CAAC;YAClB,IAAI,aAAa,EAAE,CAAC;gBAClB,KAAK,GAAG,aAAa,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC/D,KAAK,GAAG,IAAI,UAAU,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;gBACtD,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,EAAE,CAAC;oBAClE,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3B,KAAK,GAAG,IAAI,UAAU,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;gBACxD,CAAC;gBACD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACvD,aAAa,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC;gBAChC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACrE,CAAC;YAED,kDAAkD;YAClD,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,gBAAgB,GAAG,cAAc,CAAC;QAExC,IAAI,CAAC,WAAW,CAAC;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS,EAAE,aAAa;YACxB,SAAS,EAAE,WAAW;YACtB,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;SACnD,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,qCAAqC,aAAa,YAAY,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CACjG,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC;IACvE,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,SAAiB;QACxD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,YAAY,GAAG,aAAa,CAAC;QACjC,IAAI,aAAa,GAAG,CAAC,CAAC;QAEtB,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxD,aAAa,EAAE,CAAC;YAClB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,CAAC;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS;YACT,SAAS,EAAE,aAAa;YACxB,mBAAmB,EAAE,aAAa;SACnC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,uCAAuC,SAAS,qBAAqB,aAAa,EAAE,CACrF,CAAC;QACJ,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CACZ,EAA0C,EAC1C,QAAgB,EAChB,SAAkB,EAClB,eAAuC,EACvC,cAAmD;QAEnD,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC;QAEvC,IAAI,eAAe,IAAI,cAAc,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QAC5E,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,SAAS;YACT,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,4CAA4C,SAAS,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEO,WAAW,CAAC,KAAiB;QACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,8CAA8C;QAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AA1MD,gCA0MC"}
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../src/guard.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,+BAAoC;AACpC,mCAAoC;AACpC,uCAA0D;AAC1D,mCAAmD;AAyEnD,MAAa,qBAAsB,SAAQ,KAAK;IAC9C;QACE,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AAED,MAAa,UAAU;IAKrB,YAA6B,UAAwB,EAAE;QAA1B,YAAO,GAAP,OAAO,CAAmB;QAFtC,aAAQ,GAAiB,EAAE,CAAC;QAG3C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,OAAS,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,UAAU,CAAC,gDAAgD,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,kBAAU,CAAC;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;SAC/C,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;QACxC,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAID;;;;;;;;;;OAUG;IACH,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,SAAkB;QAC9C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACrC,MAAM,IAAI,UAAU,CAAC,0CAA0C,IAAI,CAAC,aAAa,cAAc,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,IAAI,CAC7B,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,CAClF,EAAE,CAAC;YACF,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;QACzF,CAAC;QAED,MAAM,aAAa,GAAG,SAAS,IAAI,IAAA,SAAM,GAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAEzD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3B,OAAO;gBACL,aAAa,EAAE,IAAI;gBACnB,SAAS,EAAE,aAAa;gBACxB,gBAAgB,EAAE,EAAE;aACrB,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAA,6BAAmB,EAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE/C,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5D,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CACpD,aAAa,EACb,UAAU,EACV,QAAQ,CACT,CAAC;YACF,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAClC,IAAI,OAAO,EAAE,CAAC;gBACZ,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,IAAI,aAAa,GAAG,EAAE,CAAC;QACvB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnC,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;YACvD,aAAa,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC;YACjD,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,CAAC;QACD,aAAa,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAEpC,MAAM,gBAAgB,GAAG,cAAc,CAAC;QAExC,IAAI,CAAC,WAAW,CAAC;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC;YAChD,SAAS,EAAE,WAAW;YACtB,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;SACnD,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,yCAAyC,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CACzH,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC;IACvE,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,WAAW,CAAC,aAAqB,EAAE,SAAiB;QACxD,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC9C,MAAM,IAAI,UAAU,CAAC,mDAAmD,IAAI,CAAC,aAAa,cAAc,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACxC,IAAI,KAA6B,CAAC;QAElC,OAAO,CAAC,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,WAAW,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;gBACpE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;gBACd,CAAC,CAAC,KAAK,CAAC;YACV,YAAY,IAAI,KAAK,CAAC,KAAK,GAAG,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;YAC1D,IAAI,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;gBACtC,MAAM,IAAI,UAAU,CAAC,mDAAmD,IAAI,CAAC,aAAa,cAAc,CAAC,CAAC;YAC5G,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;YAClE,MAAM,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;YACpC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;gBAAE,aAAa,EAAE,CAAC;QAC1E,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACpD,MAAM,IAAI,UAAU,CAAC,mDAAmD,IAAI,CAAC,aAAa,cAAc,CAAC,CAAC;QAC5G,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC,WAAW,CAAC;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;YAC5C,SAAS,EAAE,aAAa;YACxB,mBAAmB,EAAE,aAAa;SACnC,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,2CAA2C,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,qBAAqB,aAAa,EAAE,CAC7G,CAAC;QACJ,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,KAAc,EACd,SAAkB;QAElB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,gBAAgB,GAA2B,EAAE,CAAC;QACpD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,YAAY,CAC5C,KAAK,EACL,KAAK,EAAE,IAAI,EAAE,EAAE;YACb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAC7D,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC1E,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;YAC7E,CAAC;YACD,OAAO,MAAM,CAAC,aAAa,CAAC;QAC9B,CAAC,EACD,IAAI,OAAO,EAAU,EACrB,CAAC,EACD,SAAS,CACV,CAAC;QAEF,OAAO;YACL,cAAc;YACd,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,gBAAgB;SACjB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAc,EAAE,SAAiB;QACvD,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,YAAY,CACtB,KAAK,EACL,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,EAC3C,IAAI,OAAO,EAAU,EACrB,CAAC,EACD,UAAU,CACX,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,SAAS,CACb,IAA6C,EAC7C,MAAc,EACd,UAA+B,EAAE;QAEjC,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3E,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CACzE,MAAM,EACN,OAAO,CAAC,SAAS,CAClB,CAAC;QACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,QAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC;oBAC/B,eAAe,EAAE,aAAa;oBAC9B,gBAAgB,EAAE,EAAE,GAAG,gBAAgB,EAAE;iBAC1C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,WAAW,CAAC;oBACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;oBAC5C,SAAS,EAAE,mBAAmB;oBAC9B,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;iBACnD,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,WAAW,CAAC;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;gBAC5C,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB;gBACxE,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;aACnD,CAAC,CAAC;YACH,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,IAAI,qBAAqB,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC;IACjD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,QAAQ,CACZ,EAA0C,EAC1C,QAAgB,EAChB,SAAkB,EAClB,eAAuC,EACvC,cAAmD;QAEnD,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC;QAEvC,IAAI,eAAe,IAAI,cAAc,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YAC9D,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QAC5E,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,WAAW,CAAC;YACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC;YAC5C,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,gDAAgD,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW;QACf,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEO,WAAW,CAAC,KAAiB;QACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,8CAA8C;QAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,SAAiB;QACrC,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEO,iBAAiB,CAAC,SAAiB;QACzC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACtF,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,KAAc,EACd,OAA0C,EAC1C,SAA0B,EAC1B,KAAa,EACb,KAA6B;QAE7B,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAChB,MAAM,IAAI,UAAU,CAAC,GAAG,KAAK,iDAAiD,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;QACrD,IACE,KAAK,KAAK,IAAI;YACd,OAAO,KAAK,KAAK,SAAS;YAC1B,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EACrD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,iDAAiD,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;QAC7E,CAAC;QACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACrB,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;YACjD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,EACrC,CAAC;YACD,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,kDAAkD,CAAC,CAAC;QAClF,CAAC;QAED,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAgB,EAAE,CAAC;gBAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBACnF,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,MAAM,MAAM,GAAiC,EAAE,CAAC;YAChD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CACzC,IAAI,EACJ,OAAO,EACP,SAAS,EACT,KAAK,GAAG,CAAC,EACT,KAAK,CACN,CAAC;gBACF,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;oBAC5D,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,8CAA8C,CAAC,CAAC;gBAC9E,CAAC;gBACD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE;oBACvC,YAAY,EAAE,IAAI;oBAClB,UAAU,EAAE,IAAI;oBAChB,KAAK,EAAE,WAAW;oBAClB,QAAQ,EAAE,IAAI;iBACf,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;CACF;AAxZD,gCAwZC"}

package/dist/index.d.ts

@@ -6,7 +6,8 @@
  * Import from 'agentguard/langchain' for LangChain.js integration.
  */
 export { AgentGuard } from './guard';
-export type { GuardOptions, AnonymizeResult, AuditEntry } from './guard';
+export type { GuardOptions, AnonymizeResult, AnonymizeObjectResult, AuditEntry, JsonValue, OutboundApprovalRequest, OutboundCallOptions, OutboundCallResult, } from './guard';
+export { OutboundApprovalError } from './guard';
 export { TokenVault } from './vault';
 export type { VaultOptions } from './vault';
 export { scanText, extractUniqueValues } from './scanner';
@@ -14,7 +15,7 @@ export type { DetectedEntity, ScanResult } from './scanner';
 export { PATTERN_REGISTRY, PATTERN_ORDER } from './patterns';
 export type { PatternKey } from './patterns';
 export { createRequestMiddleware, createResponseMiddleware, createGuardMiddleware, } from './middleware';
-export type { GuardRequest, GuardResponse } from './middleware';
+export type { GuardRequest, GuardResponse, GuardMiddlewareStack } from './middleware';
 export { createMastraGuard } from './mastra';
 export type { MastraGuard, MastraStepContext, MastraStepResult } from './mastra';
 export { createLangChainGuard } from './langchain';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGzE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG5C,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC7D,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,YAAY,EACV,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,UAAU,EACV,SAAS,EACT,uBAAuB,EACvB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAGhD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAG5C,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG5D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC7D,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG7C,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,YAAY,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -7,10 +7,12 @@
  * Import from 'agentguard/langchain' for LangChain.js integration.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createLangChainGuard = exports.createMastraGuard = exports.createGuardMiddleware = exports.createResponseMiddleware = exports.createRequestMiddleware = exports.PATTERN_ORDER = exports.PATTERN_REGISTRY = exports.extractUniqueValues = exports.scanText = exports.TokenVault = exports.AgentGuard = void 0;
+exports.createLangChainGuard = exports.createMastraGuard = exports.createGuardMiddleware = exports.createResponseMiddleware = exports.createRequestMiddleware = exports.PATTERN_ORDER = exports.PATTERN_REGISTRY = exports.extractUniqueValues = exports.scanText = exports.TokenVault = exports.OutboundApprovalError = exports.AgentGuard = void 0;
 // Core engine
 var guard_1 = require("./guard");
 Object.defineProperty(exports, "AgentGuard", { enumerable: true, get: function () { return guard_1.AgentGuard; } });
+var guard_2 = require("./guard");
+Object.defineProperty(exports, "OutboundApprovalError", { enumerable: true, get: function () { return guard_2.OutboundApprovalError; } });
 // Vault
 var vault_1 = require("./vault");
 Object.defineProperty(exports, "TokenVault", { enumerable: true, get: function () { return vault_1.TokenVault; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEH,cAAc;AACd,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AAGnB,QAAQ;AACR,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AAGnB,UAAU;AACV,qCAA0D;AAAjD,mGAAA,QAAQ,OAAA;AAAE,8GAAA,mBAAmB,OAAA;AAGtC,WAAW;AACX,uCAA6D;AAApD,4GAAA,gBAAgB,OAAA;AAAE,yGAAA,aAAa,OAAA;AAGxC,aAAa;AACb,2CAIsB;AAHpB,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AAIvB,yBAAyB;AACzB,mCAA6C;AAApC,2GAAA,iBAAiB,OAAA;AAG1B,yCAAmD;AAA1C,iHAAA,oBAAoB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEH,cAAc;AACd,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AAWnB,iCAAgD;AAAvC,8GAAA,qBAAqB,OAAA;AAE9B,QAAQ;AACR,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AAGnB,UAAU;AACV,qCAA0D;AAAjD,mGAAA,QAAQ,OAAA;AAAE,8GAAA,mBAAmB,OAAA;AAGtC,WAAW;AACX,uCAA6D;AAApD,4GAAA,gBAAgB,OAAA;AAAE,yGAAA,aAAa,OAAA;AAGxC,aAAa;AACb,2CAIsB;AAHpB,qHAAA,uBAAuB,OAAA;AACvB,sHAAA,wBAAwB,OAAA;AACxB,mHAAA,qBAAqB,OAAA;AAIvB,yBAAyB;AACzB,mCAA6C;AAApC,2GAAA,iBAAiB,OAAA;AAG1B,yCAAmD;AAA1C,iHAAA,oBAAoB,OAAA"}

package/dist/langchain.d.ts

@@ -33,6 +33,8 @@ export interface LangChainGuardHandler {
             text: string;
         }>>;
     }, runId: string): Promise<void>;
+    /** Failure hook: releases the session association for a failed run. */
+    handleLLMError(error: unknown, runId: string): Promise<void>;
     /** Chat message hook: anonymizes HumanMessages in-place */
     handleChatModelStart(llm: Record<string, unknown>, messages: LangChainMessage[][], runId: string): Promise<void>;
 }
@@ -41,7 +43,8 @@ export interface LangChainGuard {
     guard: AgentGuard;
     /**
      * Manually restore tokens in any output string.
-     * Uses the handler's current sessionId.
+     * Uses the latest completed/in-progress sessionId. Supply an explicit ID
+     * when multiple LLM runs may be in flight concurrently.
      */
     restore(text: string, sessionId?: string): Promise<string>;
 }

package/dist/langchain.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"langchain.d.ts","sourceRoot":"","sources":["../src/langchain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,6DAA6D;IAC7D,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B,yDAAyD;IACzD,cAAc,CACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,OAAO,EAAE,MAAM,EAAE,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,wDAAwD;IACxD,YAAY,CACV,MAAM,EAAE;QAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAA;KAAE,EACvD,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,2DAA2D;IAC3D,oBAAoB,CAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,QAAQ,EAAE,gBAAgB,EAAE,EAAE,EAC9B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,qBAAqB,CAAC;IAC/B,KAAK,EAAE,UAAU,CAAC;IAClB;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,cAAc,CAmD3E"}
+{"version":3,"file":"langchain.d.ts","sourceRoot":"","sources":["../src/langchain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,6DAA6D;IAC7D,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAE9B,yDAAyD;IACzD,cAAc,CACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,OAAO,EAAE,MAAM,EAAE,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,wDAAwD;IACxD,YAAY,CACV,MAAM,EAAE;QAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAA;KAAE,EACvD,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB,uEAAuE;IACvE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE7D,2DAA2D;IAC3D,oBAAoB,CAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,QAAQ,EAAE,gBAAgB,EAAE,EAAE,EAC9B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,qBAAqB,CAAC;IAC/B,KAAK,EAAE,UAAU,CAAC;IAClB;;;;OAIG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5D;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,cAAc,CA+D3E"}

package/dist/langchain.js

@@ -25,35 +25,53 @@ const guard_1 = require("./guard");
  * the LLM call lifecycle to apply AgentGuard protection.
  */
 function createLangChainGuard(options) {
-    const guard = new guard_1.AgentGuard({ verbose: true, ...options });
+    const guard = new guard_1.AgentGuard(options);
+    const sessionsByRunId = new Map();
     const handler = {
         sessionId: undefined,
         async handleLLMStart(_llm, prompts, _runId) {
+            let sessionId = sessionsByRunId.get(_runId);
             for (let i = 0; i < prompts.length; i++) {
-                const { sanitizedText, sessionId } = await guard.anonymize(prompts[i], handler.sessionId);
-                prompts[i] = sanitizedText;
+                const result = await guard.anonymize(prompts[i], sessionId);
+                sessionId = result.sessionId;
+                prompts[i] = result.sanitizedText;
+            }
+            if (sessionId) {
+                sessionsByRunId.set(_runId, sessionId);
                 handler.sessionId = sessionId;
             }
         },
         async handleLLMEnd(output, _runId) {
-            if (!handler.sessionId)
+            const sessionId = sessionsByRunId.get(_runId);
+            if (!sessionId)
                 return;
-            for (const generationBatch of output.generations) {
-                for (const gen of generationBatch) {
-                    gen.text = await guard.deanonymize(gen.text, handler.sessionId);
+            try {
+                for (const generationBatch of output.generations) {
+                    for (const gen of generationBatch) {
+                        gen.text = await guard.deanonymize(gen.text, sessionId);
+                    }
                 }
             }
+            finally {
+                sessionsByRunId.delete(_runId);
+            }
+        },
+        async handleLLMError(_error, _runId) {
+            sessionsByRunId.delete(_runId);
         },
         async handleChatModelStart(_llm, messages, _runId) {
+            let sessionId = sessionsByRunId.get(_runId);
             for (const batch of messages) {
                 for (const msg of batch) {
-                    if (msg.role !== 'system') {
-                        const { sanitizedText, sessionId } = await guard.anonymize(msg.content, handler.sessionId);
-                        msg.content = sanitizedText;
-                        handler.sessionId = sessionId;
-                    }
+                    const result = await guard.anonymize(msg.content, sessionId);
+                    sessionId = result.sessionId;
+                    msg.content = result.sanitizedText;
                 }
             }
+            if (sessionId) {
+                sessionsByRunId.set(_runId, sessionId);
+                handler.sessionId = sessionId;
+            }
         },
     };
     return {

package/dist/langchain.js.map

@@ -1 +1 @@
-{"version":3,"file":"langchain.js","sourceRoot":"","sources":["../src/langchain.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;AAiDH,oDAmDC;AAlGD,mCAAmD;AA2CnD;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,OAAsB;IACzD,MAAM,KAAK,GAAG,IAAI,kBAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAE5D,MAAM,OAAO,GAA0B;QACrC,SAAS,EAAE,SAAS;QAEpB,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM;YACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CACxD,OAAO,CAAC,CAAC,CAAC,EACV,OAAO,CAAC,SAAS,CAClB,CAAC;gBACF,OAAO,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;gBAC3B,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;YAChC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM;YAC/B,IAAI,CAAC,OAAO,CAAC,SAAS;gBAAE,OAAO;YAC/B,KAAK,MAAM,eAAe,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACjD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;oBAClC,GAAG,CAAC,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM;YAC/C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;oBACxB,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC1B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CACxD,GAAG,CAAC,OAAO,EACX,OAAO,CAAC,SAAS,CAClB,CAAC;wBACF,GAAG,CAAC,OAAO,GAAG,aAAa,CAAC;wBAC5B,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;oBAChC,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO;QACL,OAAO;QACP,KAAK;QACL,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS;YAC3B,MAAM,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;YAC3C,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"langchain.js","sourceRoot":"","sources":["../src/langchain.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;AAqDH,oDA+DC;AAlHD,mCAAmD;AA+CnD;;;GAGG;AACH,SAAgB,oBAAoB,CAAC,OAAsB;IACzD,MAAM,KAAK,GAAG,IAAI,kBAAU,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,MAAM,OAAO,GAA0B;QACrC,SAAS,EAAE,SAAS;QAEpB,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM;YACxC,IAAI,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC5D,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBAC7B,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;YACpC,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBACvC,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;YAChC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM;YAC/B,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,CAAC,SAAS;gBAAE,OAAO;YACvB,IAAI,CAAC;gBACH,KAAK,MAAM,eAAe,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACjD,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;wBAClC,GAAG,CAAC,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;oBAC1D,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM;YACjC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM;YAC/C,IAAI,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC5C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC7B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;oBACxB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBAC7D,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;oBAC7B,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC;gBACrC,CAAC;YACH,CAAC;YACD,IAAI,SAAS,EAAE,CAAC;gBACd,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBACvC,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;YAChC,CAAC;QACH,CAAC;KACF,CAAC;IAEF,OAAO;QACL,OAAO;QACP,KAAK;QACL,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS;YAC3B,MAAM,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC;YAC3C,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/mastra.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mastra.d.ts","sourceRoot":"","sources":["../src/mastra.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,UAAU,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,SAAS,iBAAiB,EAAE,OAAO,SAAS,gBAAgB,EAC3E,EAAE,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,GACtC,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC;;;OAGG;IACH,eAAe,CACb,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD;;OAEG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CAsErE"}
+{"version":3,"file":"mastra.d.ts","sourceRoot":"","sources":["../src/mastra.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,UAAU,CAAC;IAClB;;;OAGG;IACH,QAAQ,CAAC,QAAQ,SAAS,iBAAiB,EAAE,OAAO,SAAS,gBAAgB,EAC3E,EAAE,EAAE,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,GACtC,CAAC,GAAG,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC;;;OAGG;IACH,eAAe,CACb,MAAM,EAAE,MAAM,EACd,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD;;OAEG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACnE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,WAAW,CAkErE"}

package/dist/mastra.js

@@ -28,7 +28,7 @@ const guard_1 = require("./guard");
  * @param options  AgentGuard configuration
  */
 function createMastraGuard(options) {
-    const guard = new guard_1.AgentGuard({ verbose: true, ...options });
+    const guard = new guard_1.AgentGuard(options);
     return {
         guard,
         wrapStep(fn) {
@@ -49,14 +49,9 @@ function createMastraGuard(options) {
                 if (ctx.messages) {
                     const sanitizedMessages = [];
                     for (const msg of ctx.messages) {
-                        if (msg.role !== 'system') {
-                            const { sanitizedText, sessionId: sid } = await guard.anonymize(msg.content, sessionId);
-                            sessionId = sid;
-                            sanitizedMessages.push({ ...msg, content: sanitizedText });
-                        }
-                        else {
-                            sanitizedMessages.push(msg);
-                        }
+                        const { sanitizedText, sessionId: sid } = await guard.anonymize(msg.content, sessionId);
+                        sessionId = sid;
+                        sanitizedMessages.push({ ...msg, content: sanitizedText });
                     }
                     sanitizedCtx.messages = sanitizedMessages;
                 }

package/dist/mastra.js.map

@@ -1 +1 @@
-{"version":3,"file":"mastra.js","sourceRoot":"","sources":["../src/mastra.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AA8CH,8CAsEC;AAlHD,mCAAmD;AAwCnD;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,OAAsB;IACtD,MAAM,KAAK,GAAG,IAAI,kBAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAE5D,OAAO;QACL,KAAK;QAEL,QAAQ,CACN,EAAuC;YAEvC,OAAO,KAAK,EAAE,GAAa,EAAoB,EAAE;gBAC/C,qEAAqE;gBACrE,IAAI,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;gBAC9B,MAAM,YAAY,GAAa,EAAE,GAAG,GAAG,EAAE,CAAC;gBAE1C,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;oBACf,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBACvF,YAAY,CAAC,MAAM,GAAG,aAAa,CAAC;oBACpC,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;gBAED,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;oBAC1F,YAAY,CAAC,SAAS,GAAG,aAAa,CAAC;oBACvC,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;gBAED,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACjB,MAAM,iBAAiB,GAAwB,EAAE,CAAC;oBAClD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;wBAC/B,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;4BAC1B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;4BACxF,SAAS,GAAG,GAAG,CAAC;4BAChB,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;wBAC7D,CAAC;6BAAM,CAAC;4BACN,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAC9B,CAAC;oBACH,CAAC;oBACD,YAAY,CAAC,QAAQ,GAAG,iBAAiB,CAAC;gBAC5C,CAAC;gBAED,YAAY,CAAC,SAAS,GAAG,SAAS,CAAC;gBAEnC,qEAAqE;gBACrE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;gBAEtC,qEAAqE;gBACrE,IAAI,CAAC,SAAS;oBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC;gBAEhD,MAAM,cAAc,GAAY,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC;gBAEzD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAChB,cAAc,CAAC,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACxE,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,cAAc,CAAC,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAC9E,CAAC;gBAED,OAAO,cAAc,CAAC;YACxB,CAAC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,SAAkB;YACtD,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACnF,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACtD,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,SAAiB;YACnD,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"mastra.js","sourceRoot":"","sources":["../src/mastra.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;AA8CH,8CAkEC;AA9GD,mCAAmD;AAwCnD;;;GAGG;AACH,SAAgB,iBAAiB,CAAC,OAAsB;IACtD,MAAM,KAAK,GAAG,IAAI,kBAAU,CAAC,OAAO,CAAC,CAAC;IAEtC,OAAO;QACL,KAAK;QAEL,QAAQ,CACN,EAAuC;YAEvC,OAAO,KAAK,EAAE,GAAa,EAAoB,EAAE;gBAC/C,qEAAqE;gBACrE,IAAI,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;gBAC9B,MAAM,YAAY,GAAa,EAAE,GAAG,GAAG,EAAE,CAAC;gBAE1C,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;oBACf,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBACvF,YAAY,CAAC,MAAM,GAAG,aAAa,CAAC;oBACpC,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;gBAED,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;oBAClB,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;oBAC1F,YAAY,CAAC,SAAS,GAAG,aAAa,CAAC;oBACvC,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;gBAED,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACjB,MAAM,iBAAiB,GAAwB,EAAE,CAAC;oBAClD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;wBAC/B,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;wBACxF,SAAS,GAAG,GAAG,CAAC;wBAChB,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;oBAC7D,CAAC;oBACD,YAAY,CAAC,QAAQ,GAAG,iBAAiB,CAAC;gBAC5C,CAAC;gBAED,YAAY,CAAC,SAAS,GAAG,SAAS,CAAC;gBAEnC,qEAAqE;gBACrE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;gBAEtC,qEAAqE;gBACrE,IAAI,CAAC,SAAS;oBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC;gBAEhD,MAAM,cAAc,GAAY,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC;gBAEzD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;oBAChB,cAAc,CAAC,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;gBACxE,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,cAAc,CAAC,OAAO,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAC9E,CAAC;gBAED,OAAO,cAAc,CAAC;YACxB,CAAC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,SAAkB;YACtD,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACnF,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACtD,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,SAAiB;YACnD,OAAO,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/middleware.d.ts

@@ -8,21 +8,26 @@ import { IncomingMessage, ServerResponse } from 'http';
 import { AgentGuard, GuardOptions } from './guard';
 export type NextFunction = (err?: unknown) => void;
 export interface GuardRequest extends IncomingMessage {
-    agentGuardSessionId?: string;
     body?: unknown;
 }
 export interface GuardResponse extends ServerResponse {
-    agentGuardSessionId?: string;
     /** Express adds this method at runtime — typed here for middleware compatibility */
     json?: (body: unknown) => GuardResponse;
 }
+export type GuardMiddlewareStack = [
+    ReturnType<typeof createRequestMiddleware>,
+    ReturnType<typeof createResponseMiddleware>
+] & {
+    guard: AgentGuard;
+    close(): Promise<void>;
+};
 /**
  * Creates an Express-compatible middleware that:
  * 1. Reads the raw request body
  * 2. Applies AgentGuard anonymization to any string fields
- * 3. Attaches the session ID to the request for downstream deanonymization
+ * 3. Keeps the session ID private for paired response restoration
  */
-export declare function createRequestMiddleware(guard: AgentGuard): (req: GuardRequest, res: GuardResponse, next: NextFunction) => Promise<void>;
+export declare function createRequestMiddleware(guard: AgentGuard): (req: GuardRequest, _res: GuardResponse, next: NextFunction) => Promise<void>;
 /**
  * Creates an Express-compatible middleware that deanonymizes response bodies
  * before sending them to the downstream tool/browser.
@@ -32,5 +37,5 @@ export declare function createResponseMiddleware(guard: AgentGuard): (req: Guard
  * Standalone factory to create a full guard middleware stack.
  * Usage: app.use(...createGuardMiddleware({ redisUrl: '...' }));
  */
-export declare function createGuardMiddleware(options?: GuardOptions): ((req: GuardRequest, res: GuardResponse, next: NextFunction) => Promise<void>)[];
+export declare function createGuardMiddleware(options?: GuardOptions): GuardMiddlewareStack;
 //# sourceMappingURL=middleware.d.ts.map

package/dist/middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;AAEnD,MAAM,WAAW,YAAa,SAAQ,eAAe;IACnD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,aAAa,CAAC;CACzC;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,IAErD,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,MAAM,YAAY,KACjB,OAAO,CAAC,IAAI,CAAC,CAajB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,UAAU,IAEtD,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,MAAM,YAAY,KACjB,OAAO,CAAC,IAAI,CAAC,CAmBjB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,YAAY,UApDnD,YAAY,OACZ,aAAa,QACZ,YAAY,KACjB,OAAO,CAAC,IAAI,CAAC,IAuDjB"}
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../src/middleware.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,MAAM,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;AAEnD,MAAM,WAAW,YAAa,SAAQ,eAAe;IACnD,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,oFAAoF;IACpF,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,aAAa,CAAC;CACzC;AAID,MAAM,MAAM,oBAAoB,GAAG;IACjC,UAAU,CAAC,OAAO,uBAAuB,CAAC;IAC1C,UAAU,CAAC,OAAO,wBAAwB,CAAC;CAC5C,GAAG;IACF,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,IAErD,KAAK,YAAY,EACjB,MAAM,aAAa,EACnB,MAAM,YAAY,KACjB,OAAO,CAAC,IAAI,CAAC,CAYjB;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,UAAU,IAEtD,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,MAAM,YAAY,KACjB,OAAO,CAAC,IAAI,CAAC,CAoBjB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,oBAAoB,CAYlF"}