@silmaril-security/sdk 0.7.1 → 0.7.3

package/CHANGELOG.md

@@ -2,6 +2,21 @@
 
 All notable changes to the Silmaril Firewall TypeScript SDK are documented here.
 
+## 0.7.3 - 2026-10-07
+
+- Honor effective Warn and Shadow modes when applying the Deep Agents
+  repeated-denial cap, including after genuine denial messages are reconstructed.
+- Correct the README to document native redirect refusals as `TypeError`
+  transport failures rather than `SilmarilApiError` responses.
+
+## 0.7.2 - 2026-10-05
+
+- Clear the attempt timeout immediately on caller cancellation, including when
+  retry-response body disposal never settles. This prevents residual timers
+  from keeping command-hook processes alive beyond their shared deadline.
+- Make retried-response cleanup respect caller cancellation and attempt timeouts
+  even when a stream cancellation promise never settles.
+
 ## 0.7.1 - 2026-10-04
 
 - Reject malformed batch responses and result counts that do not match the

package/README.md

@@ -37,7 +37,7 @@ npm install @silmaril-security/sdk
 For reproducible installs, pin a tagged release:
 
 ```sh
-npm install @silmaril-security/sdk@0.7.1
+npm install @silmaril-security/sdk@0.7.2
 ```
 
 Requires Node 20 or later.
@@ -383,7 +383,14 @@ responses without governance remain valid.
 
 ## Errors
 
-- `SilmarilApiError`: thrown when the firewall API responds with a non-2xx or redirect status. Carries `status`, `statusText`, a 64 KiB-capped `body`, and any parsed malformed-input diagnostics. The default error message omits the body to keep logs clean.
+- `SilmarilApiError`: thrown when native `fetch` returns a non-2xx response to
+  the SDK. Carries `status`, `statusText`, a 64 KiB-capped `body`, and any
+  parsed malformed-input diagnostics. The default error message omits the body
+  to keep logs clean.
+- Native `fetch` transport failures are propagated unchanged as `TypeError`,
+  including redirects refused by the SDK's `redirect: "error"` policy. A
+  refused redirect does not expose a reliable redirect status to JavaScript,
+  particularly in browsers, so it is not reported as `SilmarilApiError`.
 - `FirewallBlockedException`: thrown by the Vercel AI SDK and LangChain.js adapters when a malicious or governance-block decision has effective Block mode. The message distinguishes governance-policy denials from threat-score denials. Carries `score`, `threshold`, `promptText`, and optional `runId`, `hook`, `toolName`, `toolCallId`, and `result`.
 
 `PromptBlockedException` remains as a deprecated alias of
@@ -586,9 +593,10 @@ emitted streaming text cannot be recalled.
 HTTP 429 responses are retried with exponential backoff capped at 30s, up to 5
 times. The retried response body is discarded before the wait, and each request
 payload is serialized once so every attempt sends the same logical event.
-Redirects are rejected rather than followed. Other non-2xx responses are
-surfaced as `SilmarilApiError`, and transport, timeout, or cancellation failures
-are surfaced unchanged.
+Redirects are rejected rather than followed; native `fetch` surfaces that
+refusal as a `TypeError` without a reliable redirect status. Actually received
+non-2xx responses are surfaced as `SilmarilApiError`, and transport, timeout,
+or cancellation failures are surfaced unchanged.
 
 ## Development
 

package/dist/adapters/deepagents.cjs

@@ -167,7 +167,8 @@ function createDeepAgentsMiddleware(firewall, options = {}) {
       const latestUser = [...request.messages].reverse().find(import_messages.HumanMessage.isInstance);
       const inputDecision = latestUser ? await classify(textOf(latestUser), HookLabel.USER_INPUT) : void 0;
       if (inputDecision?.enforce) return new import_messages.AIMessage(SAFE_OUTPUT_MESSAGE);
-      if (blockedCount >= maxBlockedAttempts) {
+      const capMode = effectiveMode ?? inputDecision?.mode ?? "block";
+      if (blockedCount >= maxBlockedAttempts && capMode === "block") {
         return new import_messages.AIMessage(SAFE_FINAL_MESSAGE);
       }
       const response = await handler(request);

package/dist/adapters/deepagents.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/adapters/deepagents.ts","../../src/hooks.ts"],"sourcesContent":["// Copyright (c) 2024-2026 Silmaril Security Inc. All rights reserved.\n\n/** Optional Deep Agents integration. Import from @silmaril-security/sdk/adapters/deepagents. */\nimport { AIMessage, HumanMessage, ToolMessage } from \"@langchain/core/messages\";\nimport { Command } from \"@langchain/langgraph\";\nimport { createDeepAgent, GENERAL_PURPOSE_SUBAGENT, type AnySubAgent, type CompiledSubAgent } from \"deepagents\";\nimport { createAgent, createMiddleware, type CreateAgentParams } from \"langchain\";\n\nimport type { Firewall } from \"../firewall.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { ClassifyEvent, FirewallMode } from \"../types.js\";\n\nexport const SAFE_TOOL_MESSAGE = \"Silmaril Firewall blocked this tool interaction. Choose a different safe action.\";\nexport const SAFE_FINAL_MESSAGE = \"Silmaril Firewall stopped this request after repeated unsafe actions.\";\nexport const SAFE_OUTPUT_MESSAGE = \"Silmaril Firewall blocked this response.\";\nconst BLOCKED_TOOL_MARKER = \"silmaril-firewall:v1:blocked-tool\";\nconst issuedBlockedMessages = new WeakSet<ToolMessage>();\n\n// A protected graph is identified by the exact runnable returned by our factory.\nconst protectedCompiledGraphs = new WeakMap<object, Firewall>();\n\nexport interface DeepAgentsMiddlewareOptions {\n  mode?: FirewallMode;\n  failOpen?: boolean;\n  maxBlockedAttempts?: number;\n  /** A caller-supplied sequence identity; never derived from a LangChain run ID. */\n  conversationId?: string;\n  onClassify?: (event: ClassifyEvent) => void;\n}\n\nfunction textOf(message: { content: unknown }): string {\n  return typeof message.content === \"string\" ? message.content : JSON.stringify(message.content);\n}\n\nfunction textOfStructuredValue(value: unknown, seen = new WeakSet<object>()): string {\n  if (value == null) return \"\";\n  if (typeof value !== \"object\") return String(value);\n  if (seen.has(value)) return \"[circular]\";\n  seen.add(value);\n  if (Array.isArray(value)) return value.map((item) => textOfStructuredValue(item, seen)).join(\"\\n\");\n  return Object.entries(value).map(([key, item]) => `${key}: ${textOfStructuredValue(item, seen)}`).join(\"\\n\");\n}\n\nfunction stripAllowedMarker(result: ToolMessage | Command): ToolMessage | Command {\n  const strip = (message: ToolMessage): ToolMessage => {\n    if (message.additional_kwargs?.silmarilBlocked !== BLOCKED_TOOL_MARKER) return message;\n    if (issuedBlockedMessages.has(message)) return message;\n    const { silmarilBlocked: _marker, ...additional_kwargs } = message.additional_kwargs;\n    // Tool providers may return frozen messages or metadata. Copy rather\n    // than mutating a result owned by the caller.\n    return new ToolMessage({ ...message, additional_kwargs });\n  };\n  if (ToolMessage.isInstance(result)) return strip(result);\n  if (result instanceof Command) {\n    const update = result.update;\n    if (update && !Array.isArray(update) && \"messages\" in update && Array.isArray(update.messages)) {\n      const originalMessages = update.messages;\n      const messages = originalMessages.map((message) => ToolMessage.isInstance(message) ? strip(message) : message);\n      if (messages.some((message, index) => message !== originalMessages[index])) {\n        return new Command({ ...result, update: { ...update, messages } });\n      }\n    }\n  }\n  return result;\n}\n\nexport function createDeepAgentsMiddleware(firewall: Firewall, options: DeepAgentsMiddlewareOptions = {}) {\n  const maxBlockedAttempts = options.maxBlockedAttempts ?? 3;\n  if (!Number.isInteger(maxBlockedAttempts) || maxBlockedAttempts < 1) {\n    throw new Error(\"maxBlockedAttempts must be a positive integer\");\n  }\n  const effectiveMode = options.mode ?? firewall.mode;\n  const classify = async (text: string, hook: HookLabel, toolName?: string): Promise<{ enforce: boolean; mode: FirewallMode | undefined }> => {\n    if (!text.trim()) return { enforce: false, mode: effectiveMode };\n    try {\n      const result = await firewall.classify(text, {\n        hook,\n        ...(toolName === undefined ? {} : { toolName }),\n        ...(effectiveMode === undefined ? {} : { mode: effectiveMode }),\n        ...(options.conversationId === undefined ? {} : { metadata: { conversationId: options.conversationId } }),\n      });\n      const mode = effectiveMode ?? result.mode ?? \"block\";\n      const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n      if (options.onClassify) {\n        try {\n          options.onClassify({ hook, ...(toolName === undefined ? {} : { toolName }), text, result, blocked, mode, shadowMode: mode === \"shadow\" });\n        } catch {\n          // Observation callbacks do not change enforcement.\n        }\n      }\n      return { enforce: blocked && mode === \"block\", mode };\n    } catch (error) {\n      if (options.failOpen === false) throw error;\n      return { enforce: false, mode: effectiveMode };\n    }\n  };\n\n  return createMiddleware({\n    name: \"SilmarilDeepAgentsMiddleware\",\n    wrapModelCall: async (request, handler) => {\n      const history = request.state.messages;\n      let lastUserIndex = -1;\n      for (let i = history.length - 1; i >= 0; i--) {\n        if (HumanMessage.isInstance(history[i])) {\n          lastUserIndex = i;\n          break;\n        }\n      }\n      const blockedCount = history.slice(lastUserIndex + 1).filter(\n        (message) => ToolMessage.isInstance(message) && message.content === SAFE_TOOL_MESSAGE\n          && message.additional_kwargs?.silmarilBlocked === BLOCKED_TOOL_MARKER,\n      ).length;\n      const latestUser = [...request.messages].reverse().find(HumanMessage.isInstance);\n      const inputDecision = latestUser\n        ? await classify(textOf(latestUser), HookLabel.USER_INPUT)\n        : undefined;\n      if (inputDecision?.enforce) return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      // The marker is added only after a Block decision, so neither an\n      // unrelated input mode nor tool output that quotes the safe text affects the cap.\n      if (blockedCount >= maxBlockedAttempts) {\n        return new AIMessage(SAFE_FINAL_MESSAGE);\n      }\n      const response = await handler(request);\n      if (response instanceof Command && (await classify(textOfStructuredValue(response.update), HookLabel.LLM_OUTPUT)).enforce) {\n        return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      }\n      if (AIMessage.isInstance(response) && (await classify(textOf(response), HookLabel.LLM_OUTPUT)).enforce) {\n        return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      }\n      return response;\n    },\n    wrapToolCall: async (request, handler) => {\n      const safe = () => {\n        const message = new ToolMessage({\n          content: SAFE_TOOL_MESSAGE,\n          tool_call_id: request.toolCall.id ?? \"\",\n          name: request.toolCall.name,\n          additional_kwargs: { silmarilBlocked: BLOCKED_TOOL_MARKER },\n        });\n        issuedBlockedMessages.add(message);\n        return message;\n      };\n      if ((await classify(JSON.stringify(request.toolCall.args ?? {}), HookLabel.TOOL_CALL, request.toolCall.name)).enforce) {\n        return safe();\n      }\n      const result = await handler(request);\n      let resultText: string;\n      try {\n        resultText = ToolMessage.isInstance(result) ? textOf(result)\n          : result instanceof Command ? textOfStructuredValue(result.update) : String(result);\n      } catch {\n        // Content cannot be inspected, but the backend still resolves the\n        // enforcement mode. Observation modes retain the original result.\n        const decision = await classify(\"[uninspectable tool result]\", HookLabel.TOOL_RESPONSE, request.toolCall.name);\n        return decision.mode === \"block\" ? safe() : stripAllowedMarker(result);\n      }\n      if ((await classify(resultText, HookLabel.TOOL_RESPONSE, request.toolCall.name)).enforce) {\n        return safe();\n      }\n      return stripAllowedMarker(result);\n    },\n  });\n}\n\nexport interface ProtectedCompiledSubagentOptions extends Omit<CreateAgentParams, \"middleware\"> {\n  name: string;\n  description: string;\n  middleware?: CreateAgentParams[\"middleware\"];\n  silmaril?: DeepAgentsMiddlewareOptions;\n}\n\n/** Compile a subagent with Silmaril middleware and register that exact graph. */\nexport function createProtectedCompiledSubagent(firewall: Firewall, options: ProtectedCompiledSubagentOptions): CompiledSubAgent {\n  const { name, description, silmaril, middleware = [], ...agentOptions } = options;\n  const runnable = createAgent({\n    ...agentOptions,\n    middleware: [...middleware, createDeepAgentsMiddleware(firewall, silmaril)] as const,\n  });\n  protectedCompiledGraphs.set(runnable, firewall);\n  return { name, description, runnable };\n}\n\nexport interface ProtectedDeepAgentOptions extends Omit<NonNullable<Parameters<typeof createDeepAgent>[0]>, \"subagents\" | \"middleware\"> {\n  subagents?: readonly AnySubAgent[];\n  /** Only pass specs returned by createProtectedCompiledSubagent for this client. */\n  protectedCompiledSubagents?: readonly CompiledSubAgent[];\n  middleware?: NonNullable<Parameters<typeof createDeepAgent>[0]>[\"middleware\"];\n  silmaril?: DeepAgentsMiddlewareOptions;\n}\n\n/** Protect root, default general-purpose, and declarative subagents. */\nexport function createProtectedDeepAgent(firewall: Firewall, options: ProtectedDeepAgentOptions = {}) {\n  const { silmaril, subagents = [], protectedCompiledSubagents = [], middleware = [], ...agentOptions } = options;\n  const protectedSubagents = subagents.map((subagent) => {\n    if (\"runnable\" in subagent || \"graphId\" in subagent) {\n      throw new Error(\"Compiled or remote subagents must install Silmaril middleware inside their own graph\");\n    }\n    return { ...subagent, middleware: [...(subagent.middleware ?? []), createDeepAgentsMiddleware(firewall, silmaril)] };\n  });\n  if (!protectedSubagents.some((subagent) => subagent.name === GENERAL_PURPOSE_SUBAGENT.name)) {\n    protectedSubagents.unshift({ ...GENERAL_PURPOSE_SUBAGENT, middleware: [createDeepAgentsMiddleware(firewall, silmaril)] });\n  }\n  for (const spec of protectedCompiledSubagents) {\n    if (!spec.runnable || protectedCompiledGraphs.get(spec.runnable) !== firewall) {\n      throw new Error(\"Compiled subagents must be built with createProtectedCompiledSubagent for this Firewall client\");\n    }\n  }\n  return createDeepAgent({\n    ...agentOptions,\n    middleware: [...middleware, createDeepAgentsMiddleware(firewall, silmaril)],\n    subagents: [...protectedSubagents, ...protectedCompiledSubagents],\n  });\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.TOOL_END,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,sBAAqD;AACrD,uBAAwB;AACxB,wBAAmG;AACnG,uBAAsE;;;ACH/D,IAAM,YAAY;AAAA,EACvB,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,WAAW;AAAA,EACX,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,SAAS;AACX;AAIO,IAAM,eAAe;AAAA,EAC1B,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,UAAU;AAAA,EACV,eAAe;AACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,EAC5E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,EAC1E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,EAC3E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,EACxE,GAAG;AAAA,EACH,GAAG;AACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,EAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,EAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,EACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,EACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,EACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,EAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,EACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;;;ADjD9E,IAAM,oBAAoB;AAC1B,IAAM,qBAAqB;AAC3B,IAAM,sBAAsB;AACnC,IAAM,sBAAsB;AAC5B,IAAM,wBAAwB,oBAAI,QAAqB;AAGvD,IAAM,0BAA0B,oBAAI,QAA0B;AAW9D,SAAS,OAAO,SAAuC;AACrD,SAAO,OAAO,QAAQ,YAAY,WAAW,QAAQ,UAAU,KAAK,UAAU,QAAQ,OAAO;AAC/F;AAEA,SAAS,sBAAsB,OAAgB,OAAO,oBAAI,QAAgB,GAAW;AACnF,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAClD,MAAI,KAAK,IAAI,KAAK,EAAG,QAAO;AAC5B,OAAK,IAAI,KAAK;AACd,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,sBAAsB,MAAM,IAAI,CAAC,EAAE,KAAK,IAAI;AACjG,SAAO,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,GAAG,GAAG,KAAK,sBAAsB,MAAM,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI;AAC7G;AAEA,SAAS,mBAAmB,QAAsD;AAChF,QAAM,QAAQ,CAAC,YAAsC;AACnD,QAAI,QAAQ,mBAAmB,oBAAoB,oBAAqB,QAAO;AAC/E,QAAI,sBAAsB,IAAI,OAAO,EAAG,QAAO;AAC/C,UAAM,EAAE,iBAAiB,SAAS,GAAG,kBAAkB,IAAI,QAAQ;AAGnE,WAAO,IAAI,4BAAY,EAAE,GAAG,SAAS,kBAAkB,CAAC;AAAA,EAC1D;AACA,MAAI,4BAAY,WAAW,MAAM,EAAG,QAAO,MAAM,MAAM;AACvD,MAAI,kBAAkB,0BAAS;AAC7B,UAAM,SAAS,OAAO;AACtB,QAAI,UAAU,CAAC,MAAM,QAAQ,MAAM,KAAK,cAAc,UAAU,MAAM,QAAQ,OAAO,QAAQ,GAAG;AAC9F,YAAM,mBAAmB,OAAO;AAChC,YAAM,WAAW,iBAAiB,IAAI,CAAC,YAAY,4BAAY,WAAW,OAAO,IAAI,MAAM,OAAO,IAAI,OAAO;AAC7G,UAAI,SAAS,KAAK,CAAC,SAAS,UAAU,YAAY,iBAAiB,KAAK,CAAC,GAAG;AAC1E,eAAO,IAAI,yBAAQ,EAAE,GAAG,QAAQ,QAAQ,EAAE,GAAG,QAAQ,SAAS,EAAE,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,2BAA2B,UAAoB,UAAuC,CAAC,GAAG;AACxG,QAAM,qBAAqB,QAAQ,sBAAsB;AACzD,MAAI,CAAC,OAAO,UAAU,kBAAkB,KAAK,qBAAqB,GAAG;AACnE,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,QAAM,gBAAgB,QAAQ,QAAQ,SAAS;AAC/C,QAAM,WAAW,OAAO,MAAc,MAAiB,aAAqF;AAC1I,QAAI,CAAC,KAAK,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,MAAM,cAAc;AAC/D,QAAI;AACF,YAAM,SAAS,MAAM,SAAS,SAAS,MAAM;AAAA,QAC3C;AAAA,QACA,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA,QAC7C,GAAI,kBAAkB,SAAY,CAAC,IAAI,EAAE,MAAM,cAAc;AAAA,QAC7D,GAAI,QAAQ,mBAAmB,SAAY,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,QAAQ,eAAe,EAAE;AAAA,MACzG,CAAC;AACD,YAAM,OAAO,iBAAiB,OAAO,QAAQ;AAC7C,YAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAI,QAAQ,YAAY;AACtB,YAAI;AACF,kBAAQ,WAAW,EAAE,MAAM,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS,GAAI,MAAM,QAAQ,SAAS,MAAM,YAAY,SAAS,SAAS,CAAC;AAAA,QAC1I,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO,EAAE,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,IACtD,SAAS,OAAO;AACd,UAAI,QAAQ,aAAa,MAAO,OAAM;AACtC,aAAO,EAAE,SAAS,OAAO,MAAM,cAAc;AAAA,IAC/C;AAAA,EACF;AAEA,aAAO,mCAAiB;AAAA,IACtB,MAAM;AAAA,IACN,eAAe,OAAO,SAAS,YAAY;AACzC,YAAM,UAAU,QAAQ,MAAM;AAC9B,UAAI,gBAAgB;AACpB,eAAS,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;AAC5C,YAAI,6BAAa,WAAW,QAAQ,CAAC,CAAC,GAAG;AACvC,0BAAgB;AAChB;AAAA,QACF;AAAA,MACF;AACA,YAAM,eAAe,QAAQ,MAAM,gBAAgB,CAAC,EAAE;AAAA,QACpD,CAAC,YAAY,4BAAY,WAAW,OAAO,KAAK,QAAQ,YAAY,qBAC/D,QAAQ,mBAAmB,oBAAoB;AAAA,MACtD,EAAE;AACF,YAAM,aAAa,CAAC,GAAG,QAAQ,QAAQ,EAAE,QAAQ,EAAE,KAAK,6BAAa,UAAU;AAC/E,YAAM,gBAAgB,aAClB,MAAM,SAAS,OAAO,UAAU,GAAG,UAAU,UAAU,IACvD;AACJ,UAAI,eAAe,QAAS,QAAO,IAAI,0BAAU,mBAAmB;AAGpE,UAAI,gBAAgB,oBAAoB;AACtC,eAAO,IAAI,0BAAU,kBAAkB;AAAA,MACzC;AACA,YAAM,WAAW,MAAM,QAAQ,OAAO;AACtC,UAAI,oBAAoB,6BAAY,MAAM,SAAS,sBAAsB,SAAS,MAAM,GAAG,UAAU,UAAU,GAAG,SAAS;AACzH,eAAO,IAAI,0BAAU,mBAAmB;AAAA,MAC1C;AACA,UAAI,0BAAU,WAAW,QAAQ,MAAM,MAAM,SAAS,OAAO,QAAQ,GAAG,UAAU,UAAU,GAAG,SAAS;AACtG,eAAO,IAAI,0BAAU,mBAAmB;AAAA,MAC1C;AACA,aAAO;AAAA,IACT;AAAA,IACA,cAAc,OAAO,SAAS,YAAY;AACxC,YAAM,OAAO,MAAM;AACjB,cAAM,UAAU,IAAI,4BAAY;AAAA,UAC9B,SAAS;AAAA,UACT,cAAc,QAAQ,SAAS,MAAM;AAAA,UACrC,MAAM,QAAQ,SAAS;AAAA,UACvB,mBAAmB,EAAE,iBAAiB,oBAAoB;AAAA,QAC5D,CAAC;AACD,8BAAsB,IAAI,OAAO;AACjC,eAAO;AAAA,MACT;AACA,WAAK,MAAM,SAAS,KAAK,UAAU,QAAQ,SAAS,QAAQ,CAAC,CAAC,GAAG,UAAU,WAAW,QAAQ,SAAS,IAAI,GAAG,SAAS;AACrH,eAAO,KAAK;AAAA,MACd;AACA,YAAM,SAAS,MAAM,QAAQ,OAAO;AACpC,UAAI;AACJ,UAAI;AACF,qBAAa,4BAAY,WAAW,MAAM,IAAI,OAAO,MAAM,IACvD,kBAAkB,2BAAU,sBAAsB,OAAO,MAAM,IAAI,OAAO,MAAM;AAAA,MACtF,QAAQ;AAGN,cAAM,WAAW,MAAM,SAAS,+BAA+B,UAAU,eAAe,QAAQ,SAAS,IAAI;AAC7G,eAAO,SAAS,SAAS,UAAU,KAAK,IAAI,mBAAmB,MAAM;AAAA,MACvE;AACA,WAAK,MAAM,SAAS,YAAY,UAAU,eAAe,QAAQ,SAAS,IAAI,GAAG,SAAS;AACxF,eAAO,KAAK;AAAA,MACd;AACA,aAAO,mBAAmB,MAAM;AAAA,IAClC;AAAA,EACF,CAAC;AACH;AAUO,SAAS,gCAAgC,UAAoB,SAA6D;AAC/H,QAAM,EAAE,MAAM,aAAa,UAAU,aAAa,CAAC,GAAG,GAAG,aAAa,IAAI;AAC1E,QAAM,eAAW,8BAAY;AAAA,IAC3B,GAAG;AAAA,IACH,YAAY,CAAC,GAAG,YAAY,2BAA2B,UAAU,QAAQ,CAAC;AAAA,EAC5E,CAAC;AACD,0BAAwB,IAAI,UAAU,QAAQ;AAC9C,SAAO,EAAE,MAAM,aAAa,SAAS;AACvC;AAWO,SAAS,yBAAyB,UAAoB,UAAqC,CAAC,GAAG;AACpG,QAAM,EAAE,UAAU,YAAY,CAAC,GAAG,6BAA6B,CAAC,GAAG,aAAa,CAAC,GAAG,GAAG,aAAa,IAAI;AACxG,QAAM,qBAAqB,UAAU,IAAI,CAAC,aAAa;AACrD,QAAI,cAAc,YAAY,aAAa,UAAU;AACnD,YAAM,IAAI,MAAM,sFAAsF;AAAA,IACxG;AACA,WAAO,EAAE,GAAG,UAAU,YAAY,CAAC,GAAI,SAAS,cAAc,CAAC,GAAI,2BAA2B,UAAU,QAAQ,CAAC,EAAE;AAAA,EACrH,CAAC;AACD,MAAI,CAAC,mBAAmB,KAAK,CAAC,aAAa,SAAS,SAAS,2CAAyB,IAAI,GAAG;AAC3F,uBAAmB,QAAQ,EAAE,GAAG,4CAA0B,YAAY,CAAC,2BAA2B,UAAU,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC1H;AACA,aAAW,QAAQ,4BAA4B;AAC7C,QAAI,CAAC,KAAK,YAAY,wBAAwB,IAAI,KAAK,QAAQ,MAAM,UAAU;AAC7E,YAAM,IAAI,MAAM,gGAAgG;AAAA,IAClH;AAAA,EACF;AACA,aAAO,mCAAgB;AAAA,IACrB,GAAG;AAAA,IACH,YAAY,CAAC,GAAG,YAAY,2BAA2B,UAAU,QAAQ,CAAC;AAAA,IAC1E,WAAW,CAAC,GAAG,oBAAoB,GAAG,0BAA0B;AAAA,EAClE,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../src/adapters/deepagents.ts","../../src/hooks.ts"],"sourcesContent":["// Copyright (c) 2024-2026 Silmaril Security Inc. All rights reserved.\n\n/** Optional Deep Agents integration. Import from @silmaril-security/sdk/adapters/deepagents. */\nimport { AIMessage, HumanMessage, ToolMessage } from \"@langchain/core/messages\";\nimport { Command } from \"@langchain/langgraph\";\nimport { createDeepAgent, GENERAL_PURPOSE_SUBAGENT, type AnySubAgent, type CompiledSubAgent } from \"deepagents\";\nimport { createAgent, createMiddleware, type CreateAgentParams } from \"langchain\";\n\nimport type { Firewall } from \"../firewall.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { ClassifyEvent, FirewallMode } from \"../types.js\";\n\nexport const SAFE_TOOL_MESSAGE = \"Silmaril Firewall blocked this tool interaction. Choose a different safe action.\";\nexport const SAFE_FINAL_MESSAGE = \"Silmaril Firewall stopped this request after repeated unsafe actions.\";\nexport const SAFE_OUTPUT_MESSAGE = \"Silmaril Firewall blocked this response.\";\nconst BLOCKED_TOOL_MARKER = \"silmaril-firewall:v1:blocked-tool\";\nconst issuedBlockedMessages = new WeakSet<ToolMessage>();\n\n// A protected graph is identified by the exact runnable returned by our factory.\nconst protectedCompiledGraphs = new WeakMap<object, Firewall>();\n\nexport interface DeepAgentsMiddlewareOptions {\n  mode?: FirewallMode;\n  failOpen?: boolean;\n  maxBlockedAttempts?: number;\n  /** A caller-supplied sequence identity; never derived from a LangChain run ID. */\n  conversationId?: string;\n  onClassify?: (event: ClassifyEvent) => void;\n}\n\nfunction textOf(message: { content: unknown }): string {\n  return typeof message.content === \"string\" ? message.content : JSON.stringify(message.content);\n}\n\nfunction textOfStructuredValue(value: unknown, seen = new WeakSet<object>()): string {\n  if (value == null) return \"\";\n  if (typeof value !== \"object\") return String(value);\n  if (seen.has(value)) return \"[circular]\";\n  seen.add(value);\n  if (Array.isArray(value)) return value.map((item) => textOfStructuredValue(item, seen)).join(\"\\n\");\n  return Object.entries(value).map(([key, item]) => `${key}: ${textOfStructuredValue(item, seen)}`).join(\"\\n\");\n}\n\nfunction stripAllowedMarker(result: ToolMessage | Command): ToolMessage | Command {\n  const strip = (message: ToolMessage): ToolMessage => {\n    if (message.additional_kwargs?.silmarilBlocked !== BLOCKED_TOOL_MARKER) return message;\n    if (issuedBlockedMessages.has(message)) return message;\n    const { silmarilBlocked: _marker, ...additional_kwargs } = message.additional_kwargs;\n    // Tool providers may return frozen messages or metadata. Copy rather\n    // than mutating a result owned by the caller.\n    return new ToolMessage({ ...message, additional_kwargs });\n  };\n  if (ToolMessage.isInstance(result)) return strip(result);\n  if (result instanceof Command) {\n    const update = result.update;\n    if (update && !Array.isArray(update) && \"messages\" in update && Array.isArray(update.messages)) {\n      const originalMessages = update.messages;\n      const messages = originalMessages.map((message) => ToolMessage.isInstance(message) ? strip(message) : message);\n      if (messages.some((message, index) => message !== originalMessages[index])) {\n        return new Command({ ...result, update: { ...update, messages } });\n      }\n    }\n  }\n  return result;\n}\n\nexport function createDeepAgentsMiddleware(firewall: Firewall, options: DeepAgentsMiddlewareOptions = {}) {\n  const maxBlockedAttempts = options.maxBlockedAttempts ?? 3;\n  if (!Number.isInteger(maxBlockedAttempts) || maxBlockedAttempts < 1) {\n    throw new Error(\"maxBlockedAttempts must be a positive integer\");\n  }\n  const effectiveMode = options.mode ?? firewall.mode;\n  const classify = async (text: string, hook: HookLabel, toolName?: string): Promise<{ enforce: boolean; mode: FirewallMode | undefined }> => {\n    if (!text.trim()) return { enforce: false, mode: effectiveMode };\n    try {\n      const result = await firewall.classify(text, {\n        hook,\n        ...(toolName === undefined ? {} : { toolName }),\n        ...(effectiveMode === undefined ? {} : { mode: effectiveMode }),\n        ...(options.conversationId === undefined ? {} : { metadata: { conversationId: options.conversationId } }),\n      });\n      const mode = effectiveMode ?? result.mode ?? \"block\";\n      const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n      if (options.onClassify) {\n        try {\n          options.onClassify({ hook, ...(toolName === undefined ? {} : { toolName }), text, result, blocked, mode, shadowMode: mode === \"shadow\" });\n        } catch {\n          // Observation callbacks do not change enforcement.\n        }\n      }\n      return { enforce: blocked && mode === \"block\", mode };\n    } catch (error) {\n      if (options.failOpen === false) throw error;\n      return { enforce: false, mode: effectiveMode };\n    }\n  };\n\n  return createMiddleware({\n    name: \"SilmarilDeepAgentsMiddleware\",\n    wrapModelCall: async (request, handler) => {\n      const history = request.state.messages;\n      let lastUserIndex = -1;\n      for (let i = history.length - 1; i >= 0; i--) {\n        if (HumanMessage.isInstance(history[i])) {\n          lastUserIndex = i;\n          break;\n        }\n      }\n      const blockedCount = history.slice(lastUserIndex + 1).filter(\n        (message) => ToolMessage.isInstance(message) && message.content === SAFE_TOOL_MESSAGE\n          && message.additional_kwargs?.silmarilBlocked === BLOCKED_TOOL_MARKER,\n      ).length;\n      const latestUser = [...request.messages].reverse().find(HumanMessage.isInstance);\n      const inputDecision = latestUser\n        ? await classify(textOf(latestUser), HookLabel.USER_INPUT)\n        : undefined;\n      if (inputDecision?.enforce) return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      const capMode = effectiveMode ?? inputDecision?.mode ?? \"block\";\n      // Only genuine prior Block markers count, and the terminal cap requires current effective Block mode.\n      if (blockedCount >= maxBlockedAttempts && capMode === \"block\") {\n        return new AIMessage(SAFE_FINAL_MESSAGE);\n      }\n      const response = await handler(request);\n      if (response instanceof Command && (await classify(textOfStructuredValue(response.update), HookLabel.LLM_OUTPUT)).enforce) {\n        return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      }\n      if (AIMessage.isInstance(response) && (await classify(textOf(response), HookLabel.LLM_OUTPUT)).enforce) {\n        return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      }\n      return response;\n    },\n    wrapToolCall: async (request, handler) => {\n      const safe = () => {\n        const message = new ToolMessage({\n          content: SAFE_TOOL_MESSAGE,\n          tool_call_id: request.toolCall.id ?? \"\",\n          name: request.toolCall.name,\n          additional_kwargs: { silmarilBlocked: BLOCKED_TOOL_MARKER },\n        });\n        issuedBlockedMessages.add(message);\n        return message;\n      };\n      if ((await classify(JSON.stringify(request.toolCall.args ?? {}), HookLabel.TOOL_CALL, request.toolCall.name)).enforce) {\n        return safe();\n      }\n      const result = await handler(request);\n      let resultText: string;\n      try {\n        resultText = ToolMessage.isInstance(result) ? textOf(result)\n          : result instanceof Command ? textOfStructuredValue(result.update) : String(result);\n      } catch {\n        // Content cannot be inspected, but the backend still resolves the\n        // enforcement mode. Observation modes retain the original result.\n        const decision = await classify(\"[uninspectable tool result]\", HookLabel.TOOL_RESPONSE, request.toolCall.name);\n        return decision.mode === \"block\" ? safe() : stripAllowedMarker(result);\n      }\n      if ((await classify(resultText, HookLabel.TOOL_RESPONSE, request.toolCall.name)).enforce) {\n        return safe();\n      }\n      return stripAllowedMarker(result);\n    },\n  });\n}\n\nexport interface ProtectedCompiledSubagentOptions extends Omit<CreateAgentParams, \"middleware\"> {\n  name: string;\n  description: string;\n  middleware?: CreateAgentParams[\"middleware\"];\n  silmaril?: DeepAgentsMiddlewareOptions;\n}\n\n/** Compile a subagent with Silmaril middleware and register that exact graph. */\nexport function createProtectedCompiledSubagent(firewall: Firewall, options: ProtectedCompiledSubagentOptions): CompiledSubAgent {\n  const { name, description, silmaril, middleware = [], ...agentOptions } = options;\n  const runnable = createAgent({\n    ...agentOptions,\n    middleware: [...middleware, createDeepAgentsMiddleware(firewall, silmaril)] as const,\n  });\n  protectedCompiledGraphs.set(runnable, firewall);\n  return { name, description, runnable };\n}\n\nexport interface ProtectedDeepAgentOptions extends Omit<NonNullable<Parameters<typeof createDeepAgent>[0]>, \"subagents\" | \"middleware\"> {\n  subagents?: readonly AnySubAgent[];\n  /** Only pass specs returned by createProtectedCompiledSubagent for this client. */\n  protectedCompiledSubagents?: readonly CompiledSubAgent[];\n  middleware?: NonNullable<Parameters<typeof createDeepAgent>[0]>[\"middleware\"];\n  silmaril?: DeepAgentsMiddlewareOptions;\n}\n\n/** Protect root, default general-purpose, and declarative subagents. */\nexport function createProtectedDeepAgent(firewall: Firewall, options: ProtectedDeepAgentOptions = {}) {\n  const { silmaril, subagents = [], protectedCompiledSubagents = [], middleware = [], ...agentOptions } = options;\n  const protectedSubagents = subagents.map((subagent) => {\n    if (\"runnable\" in subagent || \"graphId\" in subagent) {\n      throw new Error(\"Compiled or remote subagents must install Silmaril middleware inside their own graph\");\n    }\n    return { ...subagent, middleware: [...(subagent.middleware ?? []), createDeepAgentsMiddleware(firewall, silmaril)] };\n  });\n  if (!protectedSubagents.some((subagent) => subagent.name === GENERAL_PURPOSE_SUBAGENT.name)) {\n    protectedSubagents.unshift({ ...GENERAL_PURPOSE_SUBAGENT, middleware: [createDeepAgentsMiddleware(firewall, silmaril)] });\n  }\n  for (const spec of protectedCompiledSubagents) {\n    if (!spec.runnable || protectedCompiledGraphs.get(spec.runnable) !== firewall) {\n      throw new Error(\"Compiled subagents must be built with createProtectedCompiledSubagent for this Firewall client\");\n    }\n  }\n  return createDeepAgent({\n    ...agentOptions,\n    middleware: [...middleware, createDeepAgentsMiddleware(firewall, silmaril)],\n    subagents: [...protectedSubagents, ...protectedCompiledSubagents],\n  });\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.TOOL_END,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAGA,sBAAqD;AACrD,uBAAwB;AACxB,wBAAmG;AACnG,uBAAsE;;;ACH/D,IAAM,YAAY;AAAA,EACvB,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,WAAW;AAAA,EACX,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,SAAS;AACX;AAIO,IAAM,eAAe;AAAA,EAC1B,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,UAAU;AAAA,EACV,eAAe;AACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,EAC5E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,EAC1E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,EAC3E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,EACxE,GAAG;AAAA,EACH,GAAG;AACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,EAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,EAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,EACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,EACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,EACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,EAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,EACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;;;ADjD9E,IAAM,oBAAoB;AAC1B,IAAM,qBAAqB;AAC3B,IAAM,sBAAsB;AACnC,IAAM,sBAAsB;AAC5B,IAAM,wBAAwB,oBAAI,QAAqB;AAGvD,IAAM,0BAA0B,oBAAI,QAA0B;AAW9D,SAAS,OAAO,SAAuC;AACrD,SAAO,OAAO,QAAQ,YAAY,WAAW,QAAQ,UAAU,KAAK,UAAU,QAAQ,OAAO;AAC/F;AAEA,SAAS,sBAAsB,OAAgB,OAAO,oBAAI,QAAgB,GAAW;AACnF,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAClD,MAAI,KAAK,IAAI,KAAK,EAAG,QAAO;AAC5B,OAAK,IAAI,KAAK;AACd,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,sBAAsB,MAAM,IAAI,CAAC,EAAE,KAAK,IAAI;AACjG,SAAO,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,GAAG,GAAG,KAAK,sBAAsB,MAAM,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI;AAC7G;AAEA,SAAS,mBAAmB,QAAsD;AAChF,QAAM,QAAQ,CAAC,YAAsC;AACnD,QAAI,QAAQ,mBAAmB,oBAAoB,oBAAqB,QAAO;AAC/E,QAAI,sBAAsB,IAAI,OAAO,EAAG,QAAO;AAC/C,UAAM,EAAE,iBAAiB,SAAS,GAAG,kBAAkB,IAAI,QAAQ;AAGnE,WAAO,IAAI,4BAAY,EAAE,GAAG,SAAS,kBAAkB,CAAC;AAAA,EAC1D;AACA,MAAI,4BAAY,WAAW,MAAM,EAAG,QAAO,MAAM,MAAM;AACvD,MAAI,kBAAkB,0BAAS;AAC7B,UAAM,SAAS,OAAO;AACtB,QAAI,UAAU,CAAC,MAAM,QAAQ,MAAM,KAAK,cAAc,UAAU,MAAM,QAAQ,OAAO,QAAQ,GAAG;AAC9F,YAAM,mBAAmB,OAAO;AAChC,YAAM,WAAW,iBAAiB,IAAI,CAAC,YAAY,4BAAY,WAAW,OAAO,IAAI,MAAM,OAAO,IAAI,OAAO;AAC7G,UAAI,SAAS,KAAK,CAAC,SAAS,UAAU,YAAY,iBAAiB,KAAK,CAAC,GAAG;AAC1E,eAAO,IAAI,yBAAQ,EAAE,GAAG,QAAQ,QAAQ,EAAE,GAAG,QAAQ,SAAS,EAAE,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,2BAA2B,UAAoB,UAAuC,CAAC,GAAG;AACxG,QAAM,qBAAqB,QAAQ,sBAAsB;AACzD,MAAI,CAAC,OAAO,UAAU,kBAAkB,KAAK,qBAAqB,GAAG;AACnE,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,QAAM,gBAAgB,QAAQ,QAAQ,SAAS;AAC/C,QAAM,WAAW,OAAO,MAAc,MAAiB,aAAqF;AAC1I,QAAI,CAAC,KAAK,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,MAAM,cAAc;AAC/D,QAAI;AACF,YAAM,SAAS,MAAM,SAAS,SAAS,MAAM;AAAA,QAC3C;AAAA,QACA,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA,QAC7C,GAAI,kBAAkB,SAAY,CAAC,IAAI,EAAE,MAAM,cAAc;AAAA,QAC7D,GAAI,QAAQ,mBAAmB,SAAY,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,QAAQ,eAAe,EAAE;AAAA,MACzG,CAAC;AACD,YAAM,OAAO,iBAAiB,OAAO,QAAQ;AAC7C,YAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAI,QAAQ,YAAY;AACtB,YAAI;AACF,kBAAQ,WAAW,EAAE,MAAM,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS,GAAI,MAAM,QAAQ,SAAS,MAAM,YAAY,SAAS,SAAS,CAAC;AAAA,QAC1I,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO,EAAE,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,IACtD,SAAS,OAAO;AACd,UAAI,QAAQ,aAAa,MAAO,OAAM;AACtC,aAAO,EAAE,SAAS,OAAO,MAAM,cAAc;AAAA,IAC/C;AAAA,EACF;AAEA,aAAO,mCAAiB;AAAA,IACtB,MAAM;AAAA,IACN,eAAe,OAAO,SAAS,YAAY;AACzC,YAAM,UAAU,QAAQ,MAAM;AAC9B,UAAI,gBAAgB;AACpB,eAAS,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;AAC5C,YAAI,6BAAa,WAAW,QAAQ,CAAC,CAAC,GAAG;AACvC,0BAAgB;AAChB;AAAA,QACF;AAAA,MACF;AACA,YAAM,eAAe,QAAQ,MAAM,gBAAgB,CAAC,EAAE;AAAA,QACpD,CAAC,YAAY,4BAAY,WAAW,OAAO,KAAK,QAAQ,YAAY,qBAC/D,QAAQ,mBAAmB,oBAAoB;AAAA,MACtD,EAAE;AACF,YAAM,aAAa,CAAC,GAAG,QAAQ,QAAQ,EAAE,QAAQ,EAAE,KAAK,6BAAa,UAAU;AAC/E,YAAM,gBAAgB,aAClB,MAAM,SAAS,OAAO,UAAU,GAAG,UAAU,UAAU,IACvD;AACJ,UAAI,eAAe,QAAS,QAAO,IAAI,0BAAU,mBAAmB;AACpE,YAAM,UAAU,iBAAiB,eAAe,QAAQ;AAExD,UAAI,gBAAgB,sBAAsB,YAAY,SAAS;AAC7D,eAAO,IAAI,0BAAU,kBAAkB;AAAA,MACzC;AACA,YAAM,WAAW,MAAM,QAAQ,OAAO;AACtC,UAAI,oBAAoB,6BAAY,MAAM,SAAS,sBAAsB,SAAS,MAAM,GAAG,UAAU,UAAU,GAAG,SAAS;AACzH,eAAO,IAAI,0BAAU,mBAAmB;AAAA,MAC1C;AACA,UAAI,0BAAU,WAAW,QAAQ,MAAM,MAAM,SAAS,OAAO,QAAQ,GAAG,UAAU,UAAU,GAAG,SAAS;AACtG,eAAO,IAAI,0BAAU,mBAAmB;AAAA,MAC1C;AACA,aAAO;AAAA,IACT;AAAA,IACA,cAAc,OAAO,SAAS,YAAY;AACxC,YAAM,OAAO,MAAM;AACjB,cAAM,UAAU,IAAI,4BAAY;AAAA,UAC9B,SAAS;AAAA,UACT,cAAc,QAAQ,SAAS,MAAM;AAAA,UACrC,MAAM,QAAQ,SAAS;AAAA,UACvB,mBAAmB,EAAE,iBAAiB,oBAAoB;AAAA,QAC5D,CAAC;AACD,8BAAsB,IAAI,OAAO;AACjC,eAAO;AAAA,MACT;AACA,WAAK,MAAM,SAAS,KAAK,UAAU,QAAQ,SAAS,QAAQ,CAAC,CAAC,GAAG,UAAU,WAAW,QAAQ,SAAS,IAAI,GAAG,SAAS;AACrH,eAAO,KAAK;AAAA,MACd;AACA,YAAM,SAAS,MAAM,QAAQ,OAAO;AACpC,UAAI;AACJ,UAAI;AACF,qBAAa,4BAAY,WAAW,MAAM,IAAI,OAAO,MAAM,IACvD,kBAAkB,2BAAU,sBAAsB,OAAO,MAAM,IAAI,OAAO,MAAM;AAAA,MACtF,QAAQ;AAGN,cAAM,WAAW,MAAM,SAAS,+BAA+B,UAAU,eAAe,QAAQ,SAAS,IAAI;AAC7G,eAAO,SAAS,SAAS,UAAU,KAAK,IAAI,mBAAmB,MAAM;AAAA,MACvE;AACA,WAAK,MAAM,SAAS,YAAY,UAAU,eAAe,QAAQ,SAAS,IAAI,GAAG,SAAS;AACxF,eAAO,KAAK;AAAA,MACd;AACA,aAAO,mBAAmB,MAAM;AAAA,IAClC;AAAA,EACF,CAAC;AACH;AAUO,SAAS,gCAAgC,UAAoB,SAA6D;AAC/H,QAAM,EAAE,MAAM,aAAa,UAAU,aAAa,CAAC,GAAG,GAAG,aAAa,IAAI;AAC1E,QAAM,eAAW,8BAAY;AAAA,IAC3B,GAAG;AAAA,IACH,YAAY,CAAC,GAAG,YAAY,2BAA2B,UAAU,QAAQ,CAAC;AAAA,EAC5E,CAAC;AACD,0BAAwB,IAAI,UAAU,QAAQ;AAC9C,SAAO,EAAE,MAAM,aAAa,SAAS;AACvC;AAWO,SAAS,yBAAyB,UAAoB,UAAqC,CAAC,GAAG;AACpG,QAAM,EAAE,UAAU,YAAY,CAAC,GAAG,6BAA6B,CAAC,GAAG,aAAa,CAAC,GAAG,GAAG,aAAa,IAAI;AACxG,QAAM,qBAAqB,UAAU,IAAI,CAAC,aAAa;AACrD,QAAI,cAAc,YAAY,aAAa,UAAU;AACnD,YAAM,IAAI,MAAM,sFAAsF;AAAA,IACxG;AACA,WAAO,EAAE,GAAG,UAAU,YAAY,CAAC,GAAI,SAAS,cAAc,CAAC,GAAI,2BAA2B,UAAU,QAAQ,CAAC,EAAE;AAAA,EACrH,CAAC;AACD,MAAI,CAAC,mBAAmB,KAAK,CAAC,aAAa,SAAS,SAAS,2CAAyB,IAAI,GAAG;AAC3F,uBAAmB,QAAQ,EAAE,GAAG,4CAA0B,YAAY,CAAC,2BAA2B,UAAU,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC1H;AACA,aAAW,QAAQ,4BAA4B;AAC7C,QAAI,CAAC,KAAK,YAAY,wBAAwB,IAAI,KAAK,QAAQ,MAAM,UAAU;AAC7E,YAAM,IAAI,MAAM,gGAAgG;AAAA,IAClH;AAAA,EACF;AACA,aAAO,mCAAgB;AAAA,IACrB,GAAG;AAAA,IACH,YAAY,CAAC,GAAG,YAAY,2BAA2B,UAAU,QAAQ,CAAC;AAAA,IAC1E,WAAW,CAAC,GAAG,oBAAoB,GAAG,0BAA0B;AAAA,EAClE,CAAC;AACH;","names":[]}

package/dist/adapters/deepagents.js

@@ -138,7 +138,8 @@ function createDeepAgentsMiddleware(firewall, options = {}) {
       const latestUser = [...request.messages].reverse().find(HumanMessage.isInstance);
       const inputDecision = latestUser ? await classify(textOf(latestUser), HookLabel.USER_INPUT) : void 0;
       if (inputDecision?.enforce) return new AIMessage(SAFE_OUTPUT_MESSAGE);
-      if (blockedCount >= maxBlockedAttempts) {
+      const capMode = effectiveMode ?? inputDecision?.mode ?? "block";
+      if (blockedCount >= maxBlockedAttempts && capMode === "block") {
         return new AIMessage(SAFE_FINAL_MESSAGE);
       }
       const response = await handler(request);

package/dist/adapters/deepagents.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/adapters/deepagents.ts","../../src/hooks.ts"],"sourcesContent":["// Copyright (c) 2024-2026 Silmaril Security Inc. All rights reserved.\n\n/** Optional Deep Agents integration. Import from @silmaril-security/sdk/adapters/deepagents. */\nimport { AIMessage, HumanMessage, ToolMessage } from \"@langchain/core/messages\";\nimport { Command } from \"@langchain/langgraph\";\nimport { createDeepAgent, GENERAL_PURPOSE_SUBAGENT, type AnySubAgent, type CompiledSubAgent } from \"deepagents\";\nimport { createAgent, createMiddleware, type CreateAgentParams } from \"langchain\";\n\nimport type { Firewall } from \"../firewall.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { ClassifyEvent, FirewallMode } from \"../types.js\";\n\nexport const SAFE_TOOL_MESSAGE = \"Silmaril Firewall blocked this tool interaction. Choose a different safe action.\";\nexport const SAFE_FINAL_MESSAGE = \"Silmaril Firewall stopped this request after repeated unsafe actions.\";\nexport const SAFE_OUTPUT_MESSAGE = \"Silmaril Firewall blocked this response.\";\nconst BLOCKED_TOOL_MARKER = \"silmaril-firewall:v1:blocked-tool\";\nconst issuedBlockedMessages = new WeakSet<ToolMessage>();\n\n// A protected graph is identified by the exact runnable returned by our factory.\nconst protectedCompiledGraphs = new WeakMap<object, Firewall>();\n\nexport interface DeepAgentsMiddlewareOptions {\n  mode?: FirewallMode;\n  failOpen?: boolean;\n  maxBlockedAttempts?: number;\n  /** A caller-supplied sequence identity; never derived from a LangChain run ID. */\n  conversationId?: string;\n  onClassify?: (event: ClassifyEvent) => void;\n}\n\nfunction textOf(message: { content: unknown }): string {\n  return typeof message.content === \"string\" ? message.content : JSON.stringify(message.content);\n}\n\nfunction textOfStructuredValue(value: unknown, seen = new WeakSet<object>()): string {\n  if (value == null) return \"\";\n  if (typeof value !== \"object\") return String(value);\n  if (seen.has(value)) return \"[circular]\";\n  seen.add(value);\n  if (Array.isArray(value)) return value.map((item) => textOfStructuredValue(item, seen)).join(\"\\n\");\n  return Object.entries(value).map(([key, item]) => `${key}: ${textOfStructuredValue(item, seen)}`).join(\"\\n\");\n}\n\nfunction stripAllowedMarker(result: ToolMessage | Command): ToolMessage | Command {\n  const strip = (message: ToolMessage): ToolMessage => {\n    if (message.additional_kwargs?.silmarilBlocked !== BLOCKED_TOOL_MARKER) return message;\n    if (issuedBlockedMessages.has(message)) return message;\n    const { silmarilBlocked: _marker, ...additional_kwargs } = message.additional_kwargs;\n    // Tool providers may return frozen messages or metadata. Copy rather\n    // than mutating a result owned by the caller.\n    return new ToolMessage({ ...message, additional_kwargs });\n  };\n  if (ToolMessage.isInstance(result)) return strip(result);\n  if (result instanceof Command) {\n    const update = result.update;\n    if (update && !Array.isArray(update) && \"messages\" in update && Array.isArray(update.messages)) {\n      const originalMessages = update.messages;\n      const messages = originalMessages.map((message) => ToolMessage.isInstance(message) ? strip(message) : message);\n      if (messages.some((message, index) => message !== originalMessages[index])) {\n        return new Command({ ...result, update: { ...update, messages } });\n      }\n    }\n  }\n  return result;\n}\n\nexport function createDeepAgentsMiddleware(firewall: Firewall, options: DeepAgentsMiddlewareOptions = {}) {\n  const maxBlockedAttempts = options.maxBlockedAttempts ?? 3;\n  if (!Number.isInteger(maxBlockedAttempts) || maxBlockedAttempts < 1) {\n    throw new Error(\"maxBlockedAttempts must be a positive integer\");\n  }\n  const effectiveMode = options.mode ?? firewall.mode;\n  const classify = async (text: string, hook: HookLabel, toolName?: string): Promise<{ enforce: boolean; mode: FirewallMode | undefined }> => {\n    if (!text.trim()) return { enforce: false, mode: effectiveMode };\n    try {\n      const result = await firewall.classify(text, {\n        hook,\n        ...(toolName === undefined ? {} : { toolName }),\n        ...(effectiveMode === undefined ? {} : { mode: effectiveMode }),\n        ...(options.conversationId === undefined ? {} : { metadata: { conversationId: options.conversationId } }),\n      });\n      const mode = effectiveMode ?? result.mode ?? \"block\";\n      const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n      if (options.onClassify) {\n        try {\n          options.onClassify({ hook, ...(toolName === undefined ? {} : { toolName }), text, result, blocked, mode, shadowMode: mode === \"shadow\" });\n        } catch {\n          // Observation callbacks do not change enforcement.\n        }\n      }\n      return { enforce: blocked && mode === \"block\", mode };\n    } catch (error) {\n      if (options.failOpen === false) throw error;\n      return { enforce: false, mode: effectiveMode };\n    }\n  };\n\n  return createMiddleware({\n    name: \"SilmarilDeepAgentsMiddleware\",\n    wrapModelCall: async (request, handler) => {\n      const history = request.state.messages;\n      let lastUserIndex = -1;\n      for (let i = history.length - 1; i >= 0; i--) {\n        if (HumanMessage.isInstance(history[i])) {\n          lastUserIndex = i;\n          break;\n        }\n      }\n      const blockedCount = history.slice(lastUserIndex + 1).filter(\n        (message) => ToolMessage.isInstance(message) && message.content === SAFE_TOOL_MESSAGE\n          && message.additional_kwargs?.silmarilBlocked === BLOCKED_TOOL_MARKER,\n      ).length;\n      const latestUser = [...request.messages].reverse().find(HumanMessage.isInstance);\n      const inputDecision = latestUser\n        ? await classify(textOf(latestUser), HookLabel.USER_INPUT)\n        : undefined;\n      if (inputDecision?.enforce) return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      // The marker is added only after a Block decision, so neither an\n      // unrelated input mode nor tool output that quotes the safe text affects the cap.\n      if (blockedCount >= maxBlockedAttempts) {\n        return new AIMessage(SAFE_FINAL_MESSAGE);\n      }\n      const response = await handler(request);\n      if (response instanceof Command && (await classify(textOfStructuredValue(response.update), HookLabel.LLM_OUTPUT)).enforce) {\n        return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      }\n      if (AIMessage.isInstance(response) && (await classify(textOf(response), HookLabel.LLM_OUTPUT)).enforce) {\n        return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      }\n      return response;\n    },\n    wrapToolCall: async (request, handler) => {\n      const safe = () => {\n        const message = new ToolMessage({\n          content: SAFE_TOOL_MESSAGE,\n          tool_call_id: request.toolCall.id ?? \"\",\n          name: request.toolCall.name,\n          additional_kwargs: { silmarilBlocked: BLOCKED_TOOL_MARKER },\n        });\n        issuedBlockedMessages.add(message);\n        return message;\n      };\n      if ((await classify(JSON.stringify(request.toolCall.args ?? {}), HookLabel.TOOL_CALL, request.toolCall.name)).enforce) {\n        return safe();\n      }\n      const result = await handler(request);\n      let resultText: string;\n      try {\n        resultText = ToolMessage.isInstance(result) ? textOf(result)\n          : result instanceof Command ? textOfStructuredValue(result.update) : String(result);\n      } catch {\n        // Content cannot be inspected, but the backend still resolves the\n        // enforcement mode. Observation modes retain the original result.\n        const decision = await classify(\"[uninspectable tool result]\", HookLabel.TOOL_RESPONSE, request.toolCall.name);\n        return decision.mode === \"block\" ? safe() : stripAllowedMarker(result);\n      }\n      if ((await classify(resultText, HookLabel.TOOL_RESPONSE, request.toolCall.name)).enforce) {\n        return safe();\n      }\n      return stripAllowedMarker(result);\n    },\n  });\n}\n\nexport interface ProtectedCompiledSubagentOptions extends Omit<CreateAgentParams, \"middleware\"> {\n  name: string;\n  description: string;\n  middleware?: CreateAgentParams[\"middleware\"];\n  silmaril?: DeepAgentsMiddlewareOptions;\n}\n\n/** Compile a subagent with Silmaril middleware and register that exact graph. */\nexport function createProtectedCompiledSubagent(firewall: Firewall, options: ProtectedCompiledSubagentOptions): CompiledSubAgent {\n  const { name, description, silmaril, middleware = [], ...agentOptions } = options;\n  const runnable = createAgent({\n    ...agentOptions,\n    middleware: [...middleware, createDeepAgentsMiddleware(firewall, silmaril)] as const,\n  });\n  protectedCompiledGraphs.set(runnable, firewall);\n  return { name, description, runnable };\n}\n\nexport interface ProtectedDeepAgentOptions extends Omit<NonNullable<Parameters<typeof createDeepAgent>[0]>, \"subagents\" | \"middleware\"> {\n  subagents?: readonly AnySubAgent[];\n  /** Only pass specs returned by createProtectedCompiledSubagent for this client. */\n  protectedCompiledSubagents?: readonly CompiledSubAgent[];\n  middleware?: NonNullable<Parameters<typeof createDeepAgent>[0]>[\"middleware\"];\n  silmaril?: DeepAgentsMiddlewareOptions;\n}\n\n/** Protect root, default general-purpose, and declarative subagents. */\nexport function createProtectedDeepAgent(firewall: Firewall, options: ProtectedDeepAgentOptions = {}) {\n  const { silmaril, subagents = [], protectedCompiledSubagents = [], middleware = [], ...agentOptions } = options;\n  const protectedSubagents = subagents.map((subagent) => {\n    if (\"runnable\" in subagent || \"graphId\" in subagent) {\n      throw new Error(\"Compiled or remote subagents must install Silmaril middleware inside their own graph\");\n    }\n    return { ...subagent, middleware: [...(subagent.middleware ?? []), createDeepAgentsMiddleware(firewall, silmaril)] };\n  });\n  if (!protectedSubagents.some((subagent) => subagent.name === GENERAL_PURPOSE_SUBAGENT.name)) {\n    protectedSubagents.unshift({ ...GENERAL_PURPOSE_SUBAGENT, middleware: [createDeepAgentsMiddleware(firewall, silmaril)] });\n  }\n  for (const spec of protectedCompiledSubagents) {\n    if (!spec.runnable || protectedCompiledGraphs.get(spec.runnable) !== firewall) {\n      throw new Error(\"Compiled subagents must be built with createProtectedCompiledSubagent for this Firewall client\");\n    }\n  }\n  return createDeepAgent({\n    ...agentOptions,\n    middleware: [...middleware, createDeepAgentsMiddleware(firewall, silmaril)],\n    subagents: [...protectedSubagents, ...protectedCompiledSubagents],\n  });\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.TOOL_END,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n"],"mappings":";AAGA,SAAS,WAAW,cAAc,mBAAmB;AACrD,SAAS,eAAe;AACxB,SAAS,iBAAiB,gCAAyE;AACnG,SAAS,aAAa,wBAAgD;;;ACH/D,IAAM,YAAY;AAAA,EACvB,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,WAAW;AAAA,EACX,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,SAAS;AACX;AAIO,IAAM,eAAe;AAAA,EAC1B,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,UAAU;AAAA,EACV,eAAe;AACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,EAC5E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,EAC1E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,EAC3E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,EACxE,GAAG;AAAA,EACH,GAAG;AACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,EAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,EAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,EACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,EACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,EACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,EAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,EACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;;;ADjD9E,IAAM,oBAAoB;AAC1B,IAAM,qBAAqB;AAC3B,IAAM,sBAAsB;AACnC,IAAM,sBAAsB;AAC5B,IAAM,wBAAwB,oBAAI,QAAqB;AAGvD,IAAM,0BAA0B,oBAAI,QAA0B;AAW9D,SAAS,OAAO,SAAuC;AACrD,SAAO,OAAO,QAAQ,YAAY,WAAW,QAAQ,UAAU,KAAK,UAAU,QAAQ,OAAO;AAC/F;AAEA,SAAS,sBAAsB,OAAgB,OAAO,oBAAI,QAAgB,GAAW;AACnF,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAClD,MAAI,KAAK,IAAI,KAAK,EAAG,QAAO;AAC5B,OAAK,IAAI,KAAK;AACd,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,sBAAsB,MAAM,IAAI,CAAC,EAAE,KAAK,IAAI;AACjG,SAAO,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,GAAG,GAAG,KAAK,sBAAsB,MAAM,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI;AAC7G;AAEA,SAAS,mBAAmB,QAAsD;AAChF,QAAM,QAAQ,CAAC,YAAsC;AACnD,QAAI,QAAQ,mBAAmB,oBAAoB,oBAAqB,QAAO;AAC/E,QAAI,sBAAsB,IAAI,OAAO,EAAG,QAAO;AAC/C,UAAM,EAAE,iBAAiB,SAAS,GAAG,kBAAkB,IAAI,QAAQ;AAGnE,WAAO,IAAI,YAAY,EAAE,GAAG,SAAS,kBAAkB,CAAC;AAAA,EAC1D;AACA,MAAI,YAAY,WAAW,MAAM,EAAG,QAAO,MAAM,MAAM;AACvD,MAAI,kBAAkB,SAAS;AAC7B,UAAM,SAAS,OAAO;AACtB,QAAI,UAAU,CAAC,MAAM,QAAQ,MAAM,KAAK,cAAc,UAAU,MAAM,QAAQ,OAAO,QAAQ,GAAG;AAC9F,YAAM,mBAAmB,OAAO;AAChC,YAAM,WAAW,iBAAiB,IAAI,CAAC,YAAY,YAAY,WAAW,OAAO,IAAI,MAAM,OAAO,IAAI,OAAO;AAC7G,UAAI,SAAS,KAAK,CAAC,SAAS,UAAU,YAAY,iBAAiB,KAAK,CAAC,GAAG;AAC1E,eAAO,IAAI,QAAQ,EAAE,GAAG,QAAQ,QAAQ,EAAE,GAAG,QAAQ,SAAS,EAAE,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,2BAA2B,UAAoB,UAAuC,CAAC,GAAG;AACxG,QAAM,qBAAqB,QAAQ,sBAAsB;AACzD,MAAI,CAAC,OAAO,UAAU,kBAAkB,KAAK,qBAAqB,GAAG;AACnE,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,QAAM,gBAAgB,QAAQ,QAAQ,SAAS;AAC/C,QAAM,WAAW,OAAO,MAAc,MAAiB,aAAqF;AAC1I,QAAI,CAAC,KAAK,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,MAAM,cAAc;AAC/D,QAAI;AACF,YAAM,SAAS,MAAM,SAAS,SAAS,MAAM;AAAA,QAC3C;AAAA,QACA,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA,QAC7C,GAAI,kBAAkB,SAAY,CAAC,IAAI,EAAE,MAAM,cAAc;AAAA,QAC7D,GAAI,QAAQ,mBAAmB,SAAY,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,QAAQ,eAAe,EAAE;AAAA,MACzG,CAAC;AACD,YAAM,OAAO,iBAAiB,OAAO,QAAQ;AAC7C,YAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAI,QAAQ,YAAY;AACtB,YAAI;AACF,kBAAQ,WAAW,EAAE,MAAM,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS,GAAI,MAAM,QAAQ,SAAS,MAAM,YAAY,SAAS,SAAS,CAAC;AAAA,QAC1I,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO,EAAE,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,IACtD,SAAS,OAAO;AACd,UAAI,QAAQ,aAAa,MAAO,OAAM;AACtC,aAAO,EAAE,SAAS,OAAO,MAAM,cAAc;AAAA,IAC/C;AAAA,EACF;AAEA,SAAO,iBAAiB;AAAA,IACtB,MAAM;AAAA,IACN,eAAe,OAAO,SAAS,YAAY;AACzC,YAAM,UAAU,QAAQ,MAAM;AAC9B,UAAI,gBAAgB;AACpB,eAAS,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;AAC5C,YAAI,aAAa,WAAW,QAAQ,CAAC,CAAC,GAAG;AACvC,0BAAgB;AAChB;AAAA,QACF;AAAA,MACF;AACA,YAAM,eAAe,QAAQ,MAAM,gBAAgB,CAAC,EAAE;AAAA,QACpD,CAAC,YAAY,YAAY,WAAW,OAAO,KAAK,QAAQ,YAAY,qBAC/D,QAAQ,mBAAmB,oBAAoB;AAAA,MACtD,EAAE;AACF,YAAM,aAAa,CAAC,GAAG,QAAQ,QAAQ,EAAE,QAAQ,EAAE,KAAK,aAAa,UAAU;AAC/E,YAAM,gBAAgB,aAClB,MAAM,SAAS,OAAO,UAAU,GAAG,UAAU,UAAU,IACvD;AACJ,UAAI,eAAe,QAAS,QAAO,IAAI,UAAU,mBAAmB;AAGpE,UAAI,gBAAgB,oBAAoB;AACtC,eAAO,IAAI,UAAU,kBAAkB;AAAA,MACzC;AACA,YAAM,WAAW,MAAM,QAAQ,OAAO;AACtC,UAAI,oBAAoB,YAAY,MAAM,SAAS,sBAAsB,SAAS,MAAM,GAAG,UAAU,UAAU,GAAG,SAAS;AACzH,eAAO,IAAI,UAAU,mBAAmB;AAAA,MAC1C;AACA,UAAI,UAAU,WAAW,QAAQ,MAAM,MAAM,SAAS,OAAO,QAAQ,GAAG,UAAU,UAAU,GAAG,SAAS;AACtG,eAAO,IAAI,UAAU,mBAAmB;AAAA,MAC1C;AACA,aAAO;AAAA,IACT;AAAA,IACA,cAAc,OAAO,SAAS,YAAY;AACxC,YAAM,OAAO,MAAM;AACjB,cAAM,UAAU,IAAI,YAAY;AAAA,UAC9B,SAAS;AAAA,UACT,cAAc,QAAQ,SAAS,MAAM;AAAA,UACrC,MAAM,QAAQ,SAAS;AAAA,UACvB,mBAAmB,EAAE,iBAAiB,oBAAoB;AAAA,QAC5D,CAAC;AACD,8BAAsB,IAAI,OAAO;AACjC,eAAO;AAAA,MACT;AACA,WAAK,MAAM,SAAS,KAAK,UAAU,QAAQ,SAAS,QAAQ,CAAC,CAAC,GAAG,UAAU,WAAW,QAAQ,SAAS,IAAI,GAAG,SAAS;AACrH,eAAO,KAAK;AAAA,MACd;AACA,YAAM,SAAS,MAAM,QAAQ,OAAO;AACpC,UAAI;AACJ,UAAI;AACF,qBAAa,YAAY,WAAW,MAAM,IAAI,OAAO,MAAM,IACvD,kBAAkB,UAAU,sBAAsB,OAAO,MAAM,IAAI,OAAO,MAAM;AAAA,MACtF,QAAQ;AAGN,cAAM,WAAW,MAAM,SAAS,+BAA+B,UAAU,eAAe,QAAQ,SAAS,IAAI;AAC7G,eAAO,SAAS,SAAS,UAAU,KAAK,IAAI,mBAAmB,MAAM;AAAA,MACvE;AACA,WAAK,MAAM,SAAS,YAAY,UAAU,eAAe,QAAQ,SAAS,IAAI,GAAG,SAAS;AACxF,eAAO,KAAK;AAAA,MACd;AACA,aAAO,mBAAmB,MAAM;AAAA,IAClC;AAAA,EACF,CAAC;AACH;AAUO,SAAS,gCAAgC,UAAoB,SAA6D;AAC/H,QAAM,EAAE,MAAM,aAAa,UAAU,aAAa,CAAC,GAAG,GAAG,aAAa,IAAI;AAC1E,QAAM,WAAW,YAAY;AAAA,IAC3B,GAAG;AAAA,IACH,YAAY,CAAC,GAAG,YAAY,2BAA2B,UAAU,QAAQ,CAAC;AAAA,EAC5E,CAAC;AACD,0BAAwB,IAAI,UAAU,QAAQ;AAC9C,SAAO,EAAE,MAAM,aAAa,SAAS;AACvC;AAWO,SAAS,yBAAyB,UAAoB,UAAqC,CAAC,GAAG;AACpG,QAAM,EAAE,UAAU,YAAY,CAAC,GAAG,6BAA6B,CAAC,GAAG,aAAa,CAAC,GAAG,GAAG,aAAa,IAAI;AACxG,QAAM,qBAAqB,UAAU,IAAI,CAAC,aAAa;AACrD,QAAI,cAAc,YAAY,aAAa,UAAU;AACnD,YAAM,IAAI,MAAM,sFAAsF;AAAA,IACxG;AACA,WAAO,EAAE,GAAG,UAAU,YAAY,CAAC,GAAI,SAAS,cAAc,CAAC,GAAI,2BAA2B,UAAU,QAAQ,CAAC,EAAE;AAAA,EACrH,CAAC;AACD,MAAI,CAAC,mBAAmB,KAAK,CAAC,aAAa,SAAS,SAAS,yBAAyB,IAAI,GAAG;AAC3F,uBAAmB,QAAQ,EAAE,GAAG,0BAA0B,YAAY,CAAC,2BAA2B,UAAU,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC1H;AACA,aAAW,QAAQ,4BAA4B;AAC7C,QAAI,CAAC,KAAK,YAAY,wBAAwB,IAAI,KAAK,QAAQ,MAAM,UAAU;AAC7E,YAAM,IAAI,MAAM,gGAAgG;AAAA,IAClH;AAAA,EACF;AACA,SAAO,gBAAgB;AAAA,IACrB,GAAG;AAAA,IACH,YAAY,CAAC,GAAG,YAAY,2BAA2B,UAAU,QAAQ,CAAC;AAAA,IAC1E,WAAW,CAAC,GAAG,oBAAoB,GAAG,0BAA0B;AAAA,EAClE,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../../src/adapters/deepagents.ts","../../src/hooks.ts"],"sourcesContent":["// Copyright (c) 2024-2026 Silmaril Security Inc. All rights reserved.\n\n/** Optional Deep Agents integration. Import from @silmaril-security/sdk/adapters/deepagents. */\nimport { AIMessage, HumanMessage, ToolMessage } from \"@langchain/core/messages\";\nimport { Command } from \"@langchain/langgraph\";\nimport { createDeepAgent, GENERAL_PURPOSE_SUBAGENT, type AnySubAgent, type CompiledSubAgent } from \"deepagents\";\nimport { createAgent, createMiddleware, type CreateAgentParams } from \"langchain\";\n\nimport type { Firewall } from \"../firewall.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { ClassifyEvent, FirewallMode } from \"../types.js\";\n\nexport const SAFE_TOOL_MESSAGE = \"Silmaril Firewall blocked this tool interaction. Choose a different safe action.\";\nexport const SAFE_FINAL_MESSAGE = \"Silmaril Firewall stopped this request after repeated unsafe actions.\";\nexport const SAFE_OUTPUT_MESSAGE = \"Silmaril Firewall blocked this response.\";\nconst BLOCKED_TOOL_MARKER = \"silmaril-firewall:v1:blocked-tool\";\nconst issuedBlockedMessages = new WeakSet<ToolMessage>();\n\n// A protected graph is identified by the exact runnable returned by our factory.\nconst protectedCompiledGraphs = new WeakMap<object, Firewall>();\n\nexport interface DeepAgentsMiddlewareOptions {\n  mode?: FirewallMode;\n  failOpen?: boolean;\n  maxBlockedAttempts?: number;\n  /** A caller-supplied sequence identity; never derived from a LangChain run ID. */\n  conversationId?: string;\n  onClassify?: (event: ClassifyEvent) => void;\n}\n\nfunction textOf(message: { content: unknown }): string {\n  return typeof message.content === \"string\" ? message.content : JSON.stringify(message.content);\n}\n\nfunction textOfStructuredValue(value: unknown, seen = new WeakSet<object>()): string {\n  if (value == null) return \"\";\n  if (typeof value !== \"object\") return String(value);\n  if (seen.has(value)) return \"[circular]\";\n  seen.add(value);\n  if (Array.isArray(value)) return value.map((item) => textOfStructuredValue(item, seen)).join(\"\\n\");\n  return Object.entries(value).map(([key, item]) => `${key}: ${textOfStructuredValue(item, seen)}`).join(\"\\n\");\n}\n\nfunction stripAllowedMarker(result: ToolMessage | Command): ToolMessage | Command {\n  const strip = (message: ToolMessage): ToolMessage => {\n    if (message.additional_kwargs?.silmarilBlocked !== BLOCKED_TOOL_MARKER) return message;\n    if (issuedBlockedMessages.has(message)) return message;\n    const { silmarilBlocked: _marker, ...additional_kwargs } = message.additional_kwargs;\n    // Tool providers may return frozen messages or metadata. Copy rather\n    // than mutating a result owned by the caller.\n    return new ToolMessage({ ...message, additional_kwargs });\n  };\n  if (ToolMessage.isInstance(result)) return strip(result);\n  if (result instanceof Command) {\n    const update = result.update;\n    if (update && !Array.isArray(update) && \"messages\" in update && Array.isArray(update.messages)) {\n      const originalMessages = update.messages;\n      const messages = originalMessages.map((message) => ToolMessage.isInstance(message) ? strip(message) : message);\n      if (messages.some((message, index) => message !== originalMessages[index])) {\n        return new Command({ ...result, update: { ...update, messages } });\n      }\n    }\n  }\n  return result;\n}\n\nexport function createDeepAgentsMiddleware(firewall: Firewall, options: DeepAgentsMiddlewareOptions = {}) {\n  const maxBlockedAttempts = options.maxBlockedAttempts ?? 3;\n  if (!Number.isInteger(maxBlockedAttempts) || maxBlockedAttempts < 1) {\n    throw new Error(\"maxBlockedAttempts must be a positive integer\");\n  }\n  const effectiveMode = options.mode ?? firewall.mode;\n  const classify = async (text: string, hook: HookLabel, toolName?: string): Promise<{ enforce: boolean; mode: FirewallMode | undefined }> => {\n    if (!text.trim()) return { enforce: false, mode: effectiveMode };\n    try {\n      const result = await firewall.classify(text, {\n        hook,\n        ...(toolName === undefined ? {} : { toolName }),\n        ...(effectiveMode === undefined ? {} : { mode: effectiveMode }),\n        ...(options.conversationId === undefined ? {} : { metadata: { conversationId: options.conversationId } }),\n      });\n      const mode = effectiveMode ?? result.mode ?? \"block\";\n      const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n      if (options.onClassify) {\n        try {\n          options.onClassify({ hook, ...(toolName === undefined ? {} : { toolName }), text, result, blocked, mode, shadowMode: mode === \"shadow\" });\n        } catch {\n          // Observation callbacks do not change enforcement.\n        }\n      }\n      return { enforce: blocked && mode === \"block\", mode };\n    } catch (error) {\n      if (options.failOpen === false) throw error;\n      return { enforce: false, mode: effectiveMode };\n    }\n  };\n\n  return createMiddleware({\n    name: \"SilmarilDeepAgentsMiddleware\",\n    wrapModelCall: async (request, handler) => {\n      const history = request.state.messages;\n      let lastUserIndex = -1;\n      for (let i = history.length - 1; i >= 0; i--) {\n        if (HumanMessage.isInstance(history[i])) {\n          lastUserIndex = i;\n          break;\n        }\n      }\n      const blockedCount = history.slice(lastUserIndex + 1).filter(\n        (message) => ToolMessage.isInstance(message) && message.content === SAFE_TOOL_MESSAGE\n          && message.additional_kwargs?.silmarilBlocked === BLOCKED_TOOL_MARKER,\n      ).length;\n      const latestUser = [...request.messages].reverse().find(HumanMessage.isInstance);\n      const inputDecision = latestUser\n        ? await classify(textOf(latestUser), HookLabel.USER_INPUT)\n        : undefined;\n      if (inputDecision?.enforce) return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      const capMode = effectiveMode ?? inputDecision?.mode ?? \"block\";\n      // Only genuine prior Block markers count, and the terminal cap requires current effective Block mode.\n      if (blockedCount >= maxBlockedAttempts && capMode === \"block\") {\n        return new AIMessage(SAFE_FINAL_MESSAGE);\n      }\n      const response = await handler(request);\n      if (response instanceof Command && (await classify(textOfStructuredValue(response.update), HookLabel.LLM_OUTPUT)).enforce) {\n        return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      }\n      if (AIMessage.isInstance(response) && (await classify(textOf(response), HookLabel.LLM_OUTPUT)).enforce) {\n        return new AIMessage(SAFE_OUTPUT_MESSAGE);\n      }\n      return response;\n    },\n    wrapToolCall: async (request, handler) => {\n      const safe = () => {\n        const message = new ToolMessage({\n          content: SAFE_TOOL_MESSAGE,\n          tool_call_id: request.toolCall.id ?? \"\",\n          name: request.toolCall.name,\n          additional_kwargs: { silmarilBlocked: BLOCKED_TOOL_MARKER },\n        });\n        issuedBlockedMessages.add(message);\n        return message;\n      };\n      if ((await classify(JSON.stringify(request.toolCall.args ?? {}), HookLabel.TOOL_CALL, request.toolCall.name)).enforce) {\n        return safe();\n      }\n      const result = await handler(request);\n      let resultText: string;\n      try {\n        resultText = ToolMessage.isInstance(result) ? textOf(result)\n          : result instanceof Command ? textOfStructuredValue(result.update) : String(result);\n      } catch {\n        // Content cannot be inspected, but the backend still resolves the\n        // enforcement mode. Observation modes retain the original result.\n        const decision = await classify(\"[uninspectable tool result]\", HookLabel.TOOL_RESPONSE, request.toolCall.name);\n        return decision.mode === \"block\" ? safe() : stripAllowedMarker(result);\n      }\n      if ((await classify(resultText, HookLabel.TOOL_RESPONSE, request.toolCall.name)).enforce) {\n        return safe();\n      }\n      return stripAllowedMarker(result);\n    },\n  });\n}\n\nexport interface ProtectedCompiledSubagentOptions extends Omit<CreateAgentParams, \"middleware\"> {\n  name: string;\n  description: string;\n  middleware?: CreateAgentParams[\"middleware\"];\n  silmaril?: DeepAgentsMiddlewareOptions;\n}\n\n/** Compile a subagent with Silmaril middleware and register that exact graph. */\nexport function createProtectedCompiledSubagent(firewall: Firewall, options: ProtectedCompiledSubagentOptions): CompiledSubAgent {\n  const { name, description, silmaril, middleware = [], ...agentOptions } = options;\n  const runnable = createAgent({\n    ...agentOptions,\n    middleware: [...middleware, createDeepAgentsMiddleware(firewall, silmaril)] as const,\n  });\n  protectedCompiledGraphs.set(runnable, firewall);\n  return { name, description, runnable };\n}\n\nexport interface ProtectedDeepAgentOptions extends Omit<NonNullable<Parameters<typeof createDeepAgent>[0]>, \"subagents\" | \"middleware\"> {\n  subagents?: readonly AnySubAgent[];\n  /** Only pass specs returned by createProtectedCompiledSubagent for this client. */\n  protectedCompiledSubagents?: readonly CompiledSubAgent[];\n  middleware?: NonNullable<Parameters<typeof createDeepAgent>[0]>[\"middleware\"];\n  silmaril?: DeepAgentsMiddlewareOptions;\n}\n\n/** Protect root, default general-purpose, and declarative subagents. */\nexport function createProtectedDeepAgent(firewall: Firewall, options: ProtectedDeepAgentOptions = {}) {\n  const { silmaril, subagents = [], protectedCompiledSubagents = [], middleware = [], ...agentOptions } = options;\n  const protectedSubagents = subagents.map((subagent) => {\n    if (\"runnable\" in subagent || \"graphId\" in subagent) {\n      throw new Error(\"Compiled or remote subagents must install Silmaril middleware inside their own graph\");\n    }\n    return { ...subagent, middleware: [...(subagent.middleware ?? []), createDeepAgentsMiddleware(firewall, silmaril)] };\n  });\n  if (!protectedSubagents.some((subagent) => subagent.name === GENERAL_PURPOSE_SUBAGENT.name)) {\n    protectedSubagents.unshift({ ...GENERAL_PURPOSE_SUBAGENT, middleware: [createDeepAgentsMiddleware(firewall, silmaril)] });\n  }\n  for (const spec of protectedCompiledSubagents) {\n    if (!spec.runnable || protectedCompiledGraphs.get(spec.runnable) !== firewall) {\n      throw new Error(\"Compiled subagents must be built with createProtectedCompiledSubagent for this Firewall client\");\n    }\n  }\n  return createDeepAgent({\n    ...agentOptions,\n    middleware: [...middleware, createDeepAgentsMiddleware(firewall, silmaril)],\n    subagents: [...protectedSubagents, ...protectedCompiledSubagents],\n  });\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.TOOL_END,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n"],"mappings":";AAGA,SAAS,WAAW,cAAc,mBAAmB;AACrD,SAAS,eAAe;AACxB,SAAS,iBAAiB,gCAAyE;AACnG,SAAS,aAAa,wBAAgD;;;ACH/D,IAAM,YAAY;AAAA,EACvB,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,WAAW;AAAA,EACX,eAAe;AAAA,EACf,YAAY;AAAA,EACZ,SAAS;AACX;AAIO,IAAM,eAAe;AAAA,EAC1B,WAAW;AAAA,EACX,kBAAkB;AAAA,EAClB,YAAY;AAAA,EACZ,iBAAiB;AAAA,EACjB,SAAS;AAAA,EACT,UAAU;AAAA,EACV,eAAe;AACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,EAC5E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,EAC1E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,EAC3E,aAAa;AAAA,EACb,aAAa;AAAA,EACb,aAAa;AACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,EACxE,GAAG;AAAA,EACH,GAAG;AACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,EAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,EAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,EACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,EACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,EACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,EAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,EACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;;;ADjD9E,IAAM,oBAAoB;AAC1B,IAAM,qBAAqB;AAC3B,IAAM,sBAAsB;AACnC,IAAM,sBAAsB;AAC5B,IAAM,wBAAwB,oBAAI,QAAqB;AAGvD,IAAM,0BAA0B,oBAAI,QAA0B;AAW9D,SAAS,OAAO,SAAuC;AACrD,SAAO,OAAO,QAAQ,YAAY,WAAW,QAAQ,UAAU,KAAK,UAAU,QAAQ,OAAO;AAC/F;AAEA,SAAS,sBAAsB,OAAgB,OAAO,oBAAI,QAAgB,GAAW;AACnF,MAAI,SAAS,KAAM,QAAO;AAC1B,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAClD,MAAI,KAAK,IAAI,KAAK,EAAG,QAAO;AAC5B,OAAK,IAAI,KAAK;AACd,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,SAAS,sBAAsB,MAAM,IAAI,CAAC,EAAE,KAAK,IAAI;AACjG,SAAO,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,GAAG,GAAG,KAAK,sBAAsB,MAAM,IAAI,CAAC,EAAE,EAAE,KAAK,IAAI;AAC7G;AAEA,SAAS,mBAAmB,QAAsD;AAChF,QAAM,QAAQ,CAAC,YAAsC;AACnD,QAAI,QAAQ,mBAAmB,oBAAoB,oBAAqB,QAAO;AAC/E,QAAI,sBAAsB,IAAI,OAAO,EAAG,QAAO;AAC/C,UAAM,EAAE,iBAAiB,SAAS,GAAG,kBAAkB,IAAI,QAAQ;AAGnE,WAAO,IAAI,YAAY,EAAE,GAAG,SAAS,kBAAkB,CAAC;AAAA,EAC1D;AACA,MAAI,YAAY,WAAW,MAAM,EAAG,QAAO,MAAM,MAAM;AACvD,MAAI,kBAAkB,SAAS;AAC7B,UAAM,SAAS,OAAO;AACtB,QAAI,UAAU,CAAC,MAAM,QAAQ,MAAM,KAAK,cAAc,UAAU,MAAM,QAAQ,OAAO,QAAQ,GAAG;AAC9F,YAAM,mBAAmB,OAAO;AAChC,YAAM,WAAW,iBAAiB,IAAI,CAAC,YAAY,YAAY,WAAW,OAAO,IAAI,MAAM,OAAO,IAAI,OAAO;AAC7G,UAAI,SAAS,KAAK,CAAC,SAAS,UAAU,YAAY,iBAAiB,KAAK,CAAC,GAAG;AAC1E,eAAO,IAAI,QAAQ,EAAE,GAAG,QAAQ,QAAQ,EAAE,GAAG,QAAQ,SAAS,EAAE,CAAC;AAAA,MACnE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,2BAA2B,UAAoB,UAAuC,CAAC,GAAG;AACxG,QAAM,qBAAqB,QAAQ,sBAAsB;AACzD,MAAI,CAAC,OAAO,UAAU,kBAAkB,KAAK,qBAAqB,GAAG;AACnE,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,QAAM,gBAAgB,QAAQ,QAAQ,SAAS;AAC/C,QAAM,WAAW,OAAO,MAAc,MAAiB,aAAqF;AAC1I,QAAI,CAAC,KAAK,KAAK,EAAG,QAAO,EAAE,SAAS,OAAO,MAAM,cAAc;AAC/D,QAAI;AACF,YAAM,SAAS,MAAM,SAAS,SAAS,MAAM;AAAA,QAC3C;AAAA,QACA,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS;AAAA,QAC7C,GAAI,kBAAkB,SAAY,CAAC,IAAI,EAAE,MAAM,cAAc;AAAA,QAC7D,GAAI,QAAQ,mBAAmB,SAAY,CAAC,IAAI,EAAE,UAAU,EAAE,gBAAgB,QAAQ,eAAe,EAAE;AAAA,MACzG,CAAC;AACD,YAAM,OAAO,iBAAiB,OAAO,QAAQ;AAC7C,YAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAI,QAAQ,YAAY;AACtB,YAAI;AACF,kBAAQ,WAAW,EAAE,MAAM,GAAI,aAAa,SAAY,CAAC,IAAI,EAAE,SAAS,GAAI,MAAM,QAAQ,SAAS,MAAM,YAAY,SAAS,SAAS,CAAC;AAAA,QAC1I,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAO,EAAE,SAAS,WAAW,SAAS,SAAS,KAAK;AAAA,IACtD,SAAS,OAAO;AACd,UAAI,QAAQ,aAAa,MAAO,OAAM;AACtC,aAAO,EAAE,SAAS,OAAO,MAAM,cAAc;AAAA,IAC/C;AAAA,EACF;AAEA,SAAO,iBAAiB;AAAA,IACtB,MAAM;AAAA,IACN,eAAe,OAAO,SAAS,YAAY;AACzC,YAAM,UAAU,QAAQ,MAAM;AAC9B,UAAI,gBAAgB;AACpB,eAAS,IAAI,QAAQ,SAAS,GAAG,KAAK,GAAG,KAAK;AAC5C,YAAI,aAAa,WAAW,QAAQ,CAAC,CAAC,GAAG;AACvC,0BAAgB;AAChB;AAAA,QACF;AAAA,MACF;AACA,YAAM,eAAe,QAAQ,MAAM,gBAAgB,CAAC,EAAE;AAAA,QACpD,CAAC,YAAY,YAAY,WAAW,OAAO,KAAK,QAAQ,YAAY,qBAC/D,QAAQ,mBAAmB,oBAAoB;AAAA,MACtD,EAAE;AACF,YAAM,aAAa,CAAC,GAAG,QAAQ,QAAQ,EAAE,QAAQ,EAAE,KAAK,aAAa,UAAU;AAC/E,YAAM,gBAAgB,aAClB,MAAM,SAAS,OAAO,UAAU,GAAG,UAAU,UAAU,IACvD;AACJ,UAAI,eAAe,QAAS,QAAO,IAAI,UAAU,mBAAmB;AACpE,YAAM,UAAU,iBAAiB,eAAe,QAAQ;AAExD,UAAI,gBAAgB,sBAAsB,YAAY,SAAS;AAC7D,eAAO,IAAI,UAAU,kBAAkB;AAAA,MACzC;AACA,YAAM,WAAW,MAAM,QAAQ,OAAO;AACtC,UAAI,oBAAoB,YAAY,MAAM,SAAS,sBAAsB,SAAS,MAAM,GAAG,UAAU,UAAU,GAAG,SAAS;AACzH,eAAO,IAAI,UAAU,mBAAmB;AAAA,MAC1C;AACA,UAAI,UAAU,WAAW,QAAQ,MAAM,MAAM,SAAS,OAAO,QAAQ,GAAG,UAAU,UAAU,GAAG,SAAS;AACtG,eAAO,IAAI,UAAU,mBAAmB;AAAA,MAC1C;AACA,aAAO;AAAA,IACT;AAAA,IACA,cAAc,OAAO,SAAS,YAAY;AACxC,YAAM,OAAO,MAAM;AACjB,cAAM,UAAU,IAAI,YAAY;AAAA,UAC9B,SAAS;AAAA,UACT,cAAc,QAAQ,SAAS,MAAM;AAAA,UACrC,MAAM,QAAQ,SAAS;AAAA,UACvB,mBAAmB,EAAE,iBAAiB,oBAAoB;AAAA,QAC5D,CAAC;AACD,8BAAsB,IAAI,OAAO;AACjC,eAAO;AAAA,MACT;AACA,WAAK,MAAM,SAAS,KAAK,UAAU,QAAQ,SAAS,QAAQ,CAAC,CAAC,GAAG,UAAU,WAAW,QAAQ,SAAS,IAAI,GAAG,SAAS;AACrH,eAAO,KAAK;AAAA,MACd;AACA,YAAM,SAAS,MAAM,QAAQ,OAAO;AACpC,UAAI;AACJ,UAAI;AACF,qBAAa,YAAY,WAAW,MAAM,IAAI,OAAO,MAAM,IACvD,kBAAkB,UAAU,sBAAsB,OAAO,MAAM,IAAI,OAAO,MAAM;AAAA,MACtF,QAAQ;AAGN,cAAM,WAAW,MAAM,SAAS,+BAA+B,UAAU,eAAe,QAAQ,SAAS,IAAI;AAC7G,eAAO,SAAS,SAAS,UAAU,KAAK,IAAI,mBAAmB,MAAM;AAAA,MACvE;AACA,WAAK,MAAM,SAAS,YAAY,UAAU,eAAe,QAAQ,SAAS,IAAI,GAAG,SAAS;AACxF,eAAO,KAAK;AAAA,MACd;AACA,aAAO,mBAAmB,MAAM;AAAA,IAClC;AAAA,EACF,CAAC;AACH;AAUO,SAAS,gCAAgC,UAAoB,SAA6D;AAC/H,QAAM,EAAE,MAAM,aAAa,UAAU,aAAa,CAAC,GAAG,GAAG,aAAa,IAAI;AAC1E,QAAM,WAAW,YAAY;AAAA,IAC3B,GAAG;AAAA,IACH,YAAY,CAAC,GAAG,YAAY,2BAA2B,UAAU,QAAQ,CAAC;AAAA,EAC5E,CAAC;AACD,0BAAwB,IAAI,UAAU,QAAQ;AAC9C,SAAO,EAAE,MAAM,aAAa,SAAS;AACvC;AAWO,SAAS,yBAAyB,UAAoB,UAAqC,CAAC,GAAG;AACpG,QAAM,EAAE,UAAU,YAAY,CAAC,GAAG,6BAA6B,CAAC,GAAG,aAAa,CAAC,GAAG,GAAG,aAAa,IAAI;AACxG,QAAM,qBAAqB,UAAU,IAAI,CAAC,aAAa;AACrD,QAAI,cAAc,YAAY,aAAa,UAAU;AACnD,YAAM,IAAI,MAAM,sFAAsF;AAAA,IACxG;AACA,WAAO,EAAE,GAAG,UAAU,YAAY,CAAC,GAAI,SAAS,cAAc,CAAC,GAAI,2BAA2B,UAAU,QAAQ,CAAC,EAAE;AAAA,EACrH,CAAC;AACD,MAAI,CAAC,mBAAmB,KAAK,CAAC,aAAa,SAAS,SAAS,yBAAyB,IAAI,GAAG;AAC3F,uBAAmB,QAAQ,EAAE,GAAG,0BAA0B,YAAY,CAAC,2BAA2B,UAAU,QAAQ,CAAC,EAAE,CAAC;AAAA,EAC1H;AACA,aAAW,QAAQ,4BAA4B;AAC7C,QAAI,CAAC,KAAK,YAAY,wBAAwB,IAAI,KAAK,QAAQ,MAAM,UAAU;AAC7E,YAAM,IAAI,MAAM,gGAAgG;AAAA,IAClH;AAAA,EACF;AACA,SAAO,gBAAgB;AAAA,IACrB,GAAG;AAAA,IACH,YAAY,CAAC,GAAG,YAAY,2BAA2B,UAAU,QAAQ,CAAC;AAAA,IAC1E,WAAW,CAAC,GAAG,oBAAoB,GAAG,0BAA0B;AAAA,EAClE,CAAC;AACH;","names":[]}

package/dist/index.cjs

@@ -818,7 +818,7 @@ function sanitizeText(text) {
 }
 
 // src/firewall.ts
-var SDK_VERSION = "0.7.1";
+var SDK_VERSION = "0.7.3";
 var DEFAULT_TIMEOUT_MS = 1e4;
 var DEFAULT_MAX_RETRIES = 5;
 var MAX_BACKOFF_SECONDS = 30;
@@ -962,7 +962,7 @@ async function readCappedErrorBody(response) {
   }
   return new TextDecoder().decode(body);
 }
-async function discardResponseBody(response) {
+async function releaseDiscardedResponseBody(response) {
   try {
     if (response.body) {
       if (!response.body.locked) {
@@ -974,6 +974,19 @@ async function discardResponseBody(response) {
   } catch {
   }
 }
+async function discardResponseBody(response, signal) {
+  signal.throwIfAborted();
+  let onAbort;
+  const aborted = new Promise((_resolve, reject) => {
+    onAbort = () => reject(signal.reason);
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+  try {
+    await Promise.race([releaseDiscardedResponseBody(response), aborted]);
+  } finally {
+    signal.removeEventListener("abort", onAbort);
+  }
+}
 function isAbortLikeError(error) {
   if (typeof error !== "object" || error === null) {
     return false;
@@ -999,6 +1012,7 @@ function createAttemptSignal(timeoutMs, callerSignal) {
     );
   }, timeoutMs);
   const onCallerAbort = () => {
+    clearTimeout(timer);
     controller.abort(callerSignal?.reason);
   };
   callerSignal?.addEventListener("abort", onCallerAbort, { once: true });
@@ -1156,7 +1170,7 @@ var Firewall = class {
             attemptSignal.signal
           );
         }
-        await discardResponseBody(response);
+        await discardResponseBody(response, attemptSignal.signal);
       } finally {
         attemptSignal.dispose();
       }

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/exceptions.ts","../src/hooks.ts","../src/utils/extract.ts","../src/adapters/langchain.ts","../src/index.ts","../src/firewall.ts","../src/adapters/vercel.ts","../src/outcomes.ts","../src/sanitization.ts"],"sourcesContent":["// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { HookLabel } from \"./hooks.js\";\nimport type { BlockResult } from \"./types.js\";\n\nconst MAX_PROMPT_DISPLAY_LEN = 100;\n\nexport interface MalformedInputDetails {\n  field?: string;\n  inputIndex?: number;\n  charOffset?: number;\n  malformedToken?: string;\n  codePoint?: string;\n  reason?: string;\n}\n\nexport class FirewallBlockedException extends Error {\n  readonly score: number;\n  readonly threshold: number;\n  readonly promptText: string;\n  readonly runId: string | undefined;\n  readonly hook: HookLabel | undefined;\n  readonly toolName: string | undefined;\n  readonly toolCallId: string | undefined;\n  readonly result: BlockResult | undefined;\n\n  constructor(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    runId?: string;\n    hook?: HookLabel;\n    toolName?: string;\n    toolCallId?: string;\n    result?: BlockResult;\n  }) {\n    super(FirewallBlockedException.formatMessage(params));\n    this.name = \"FirewallBlockedException\";\n    this.score = params.score;\n    this.threshold = params.threshold;\n    this.promptText = params.promptText;\n    this.runId = params.runId;\n    this.hook = params.hook;\n    this.toolName = params.toolName;\n    this.toolCallId = params.toolCallId;\n    this.result = params.result;\n    Object.setPrototypeOf(this, FirewallBlockedException.prototype);\n  }\n\n  private static formatMessage(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    result?: BlockResult;\n  }): string {\n    const truncated =\n      params.promptText.length > MAX_PROMPT_DISPLAY_LEN\n        ? `${params.promptText.slice(0, MAX_PROMPT_DISPLAY_LEN)}...`\n        : params.promptText;\n    if (\n      params.result?.prediction !== \"MALICIOUS\" &&\n      params.result?.governance?.action === \"block\"\n    ) {\n      return `Request blocked by Silmaril Firewall governance policy: '${truncated}'`;\n    }\n    return (\n      `Request blocked by Silmaril Firewall ` +\n      `(score=${params.score.toFixed(4)}, threshold=${params.threshold.toFixed(4)}): ` +\n      `'${truncated}'`\n    );\n  }\n}\n\n/** @deprecated Use FirewallBlockedException instead. */\nexport const PromptBlockedException = FirewallBlockedException;\n/** @deprecated Use FirewallBlockedException instead. */\nexport type PromptBlockedException = FirewallBlockedException;\n\nexport class SilmarilApiError extends Error {\n  readonly status: number;\n  readonly statusText: string;\n  readonly body: string;\n  readonly details: MalformedInputDetails | undefined;\n  readonly error: string | undefined;\n  readonly apiMessage: string | undefined;\n\n  constructor(params: {\n    status: number;\n    statusText: string;\n    body: string;\n    details?: MalformedInputDetails;\n    error?: string;\n    apiMessage?: string;\n  }) {\n    const statusText = params.statusText ? ` ${params.statusText}` : \"\";\n    super(`Silmaril API error ${params.status}${statusText}`);\n    this.name = \"SilmarilApiError\";\n    this.status = params.status;\n    this.statusText = params.statusText;\n    this.body = params.body;\n    const parsed = parseErrorBody(params.body);\n    this.details = params.details ?? parsed.details;\n    this.error = params.error ?? parsed.error;\n    this.apiMessage = params.apiMessage ?? parsed.apiMessage;\n    Object.setPrototypeOf(this, SilmarilApiError.prototype);\n  }\n}\n\nfunction parseErrorBody(body: string): {\n  details: MalformedInputDetails | undefined;\n  error: string | undefined;\n  apiMessage: string | undefined;\n} {\n  try {\n    const parsed = JSON.parse(body) as unknown;\n    if (!parsed || typeof parsed !== \"object\") {\n      return { details: undefined, error: undefined, apiMessage: undefined };\n    }\n    const data = parsed as Record<string, unknown>;\n    return {\n      details:\n        data.details && typeof data.details === \"object\"\n          ? (data.details as MalformedInputDetails)\n          : undefined,\n      error: typeof data.error === \"string\" ? data.error : undefined,\n      apiMessage: typeof data.message === \"string\" ? data.message : undefined,\n    };\n  } catch {\n    return { details: undefined, error: undefined, apiMessage: undefined };\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.TOOL_END,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nconst SKIP_ROLES: ReadonlySet<string> = new Set([\"ai\", \"assistant\"]);\nconst SYSTEM_ROLES: ReadonlySet<string> = new Set([\"system\"]);\nconst TOOL_ROLES: ReadonlySet<string> = new Set([\"tool\", \"function\"]);\n\ntype MessageContent = string | ReadonlyArray<string | { type?: string; text?: string }>;\n\ninterface DucktypedMessage {\n  role?: string;\n  type?: string;\n  content?: MessageContent;\n}\n\ninterface DucktypedGeneration {\n  text?: string;\n}\n\ninterface DucktypedLLMResult {\n  generations?: ReadonlyArray<ReadonlyArray<DucktypedGeneration>>;\n}\n\ninterface DucktypedDocument {\n  pageContent?: string;\n}\n\nfunction extractContentText(content: MessageContent | undefined): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  if (Array.isArray(content)) {\n    const parts: string[] = [];\n    for (const block of content) {\n      if (typeof block === \"string\") {\n        parts.push(block);\n      } else if (block && typeof block === \"object\" && block.type === \"text\") {\n        parts.push(block.text ?? \"\");\n      }\n    }\n    return parts.join(\" \");\n  }\n  return \"\";\n}\n\nfunction getRole(message: DucktypedMessage): string {\n  if (message.role !== undefined) {\n    return message.role.toLowerCase();\n  }\n  if (typeof message.type === \"string\") {\n    return message.type.toLowerCase();\n  }\n  return \"\";\n}\n\nexport function extractTextFromMessages(\n  messages: ReadonlyArray<DucktypedMessage>,\n  options: { includeSystem?: boolean; includeTool?: boolean } = {},\n): string {\n  const includeSystem = options.includeSystem ?? true;\n  const includeTool = options.includeTool ?? true;\n  const parts: string[] = [];\n  for (const message of messages) {\n    const role = getRole(message);\n    if (SKIP_ROLES.has(role)) {\n      continue;\n    }\n    if (!includeSystem && SYSTEM_ROLES.has(role)) {\n      continue;\n    }\n    if (!includeTool && TOOL_ROLES.has(role)) {\n      continue;\n    }\n    const text = extractContentText(message.content);\n    const stripped = text.trim();\n    if (stripped) {\n      parts.push(stripped);\n    }\n  }\n  return parts.join(\"\\n\");\n}\n\nexport function extractTextFromPrompts(prompts: readonly string[]): string {\n  return prompts\n    .map((p) => p.trim())\n    .filter((p) => p.length > 0)\n    .join(\"\\n\");\n}\n\nexport function extractTextFromToolInput(inputStr: string): string {\n  return inputStr.trim();\n}\n\nexport function extractTextFromLLMResult(response: DucktypedLLMResult): string {\n  const parts: string[] = [];\n  for (const genList of response.generations ?? []) {\n    for (const gen of genList) {\n      const text = (gen.text ?? \"\").trim();\n      if (text) {\n        parts.push(text);\n      }\n    }\n  }\n  return parts.join(\"\\n\");\n}\n\nexport function extractTextFromDocuments(documents: ReadonlyArray<DucktypedDocument>): string {\n  const parts: string[] = [];\n  for (const doc of documents) {\n    const text = (doc.pageContent ?? \"\").trim();\n    if (text) {\n      parts.push(text);\n    }\n  }\n  return parts.join(\"\\n\");\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { BaseCallbackHandler } from \"@langchain/core/callbacks/base\";\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport {\n  FIREWALL_HOOK_TO_LABEL,\n  FirewallHook,\n  HookLabel,\n  resolveHooks,\n} from \"../hooks.js\";\nimport type { BlockResult, ClassifyEvent, LangChainAdapterOptions } from \"../types.js\";\nimport {\n  extractTextFromDocuments,\n  extractTextFromLLMResult,\n  extractTextFromPrompts,\n  extractTextFromToolInput,\n} from \"../utils/extract.js\";\n\nconst USER_ROLES: ReadonlySet<string> = new Set([\"human\", \"user\"]);\n\ninterface LangChainDucktypedMessage {\n  role?: string;\n  type?: string;\n  content?: string | ReadonlyArray<string | { type?: string; text?: string }>;\n}\n\nfunction getMessageRole(message: LangChainDucktypedMessage): string {\n  if (typeof message.role === \"string\") {\n    return message.role.toLowerCase();\n  }\n  if (typeof message.type === \"string\") {\n    return message.type.toLowerCase();\n  }\n  return \"\";\n}\n\nfunction extractMessageText(content: LangChainDucktypedMessage[\"content\"]): string {\n  if (content === undefined) {\n    return \"\";\n  }\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<LangChainDucktypedMessage>,\n): LangChainDucktypedMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (USER_ROLES.has(getMessageRole(msg))) {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport async function createLangChainHandler(\n  firewall: Firewall,\n  options: LangChainAdapterOptions = {},\n): Promise<BaseCallbackHandler> {\n  const { BaseCallbackHandler } = await import(\"@langchain/core/callbacks/base\");\n\n  const enabledHooks = resolveHooks(options.hooks);\n  // includeSystem remains inert for the user-only chat-model scan.\n  // includeTool still controls the explicit tool start and end callbacks.\n  const includeTool = options.includeTool ?? true;\n  const failOpen = options.failOpen ?? true;\n  const logger =\n    options.logger ??\n    ((message: string, error: unknown): void => {\n      // eslint-disable-next-line no-console\n      console.warn(`silmaril.firewall: ${message}`, error);\n    });\n  const requestedMode = options.mode ?? (\n    options.shadowMode === undefined\n      ? firewall.mode\n      : options.shadowMode ? \"shadow\" : \"block\"\n  );\n  const onClassify = options.onClassify;\n\n  const fireOnClassify = (event: ClassifyEvent): void => {\n    if (!onClassify) {\n      return;\n    }\n    try {\n      onClassify(event);\n    } catch (err) {\n      logger(\"onClassify callback threw\", err);\n    }\n  };\n\n  const classify = async (\n    text: string,\n    hookLabel: HookLabel,\n    runId: string,\n    toolName?: string,\n  ): Promise<void> => {\n    let result: BlockResult;\n    try {\n      result = await firewall.classify(text, {\n        hook: hookLabel,\n        metadata: {\n          langgraph: { run_id: runId },\n          ...(options.conversationId === undefined ? {} : { conversationId: options.conversationId }),\n        },\n        ...(requestedMode !== undefined ? { mode: requestedMode } : {}),\n        ...(toolName !== undefined ? { toolName } : {}),\n      });\n    } catch (err) {\n      if (!failOpen) {\n        throw err;\n      }\n      logger(\"classification failed, allowing prompt through\", err);\n      return;\n    }\n    const threshold = result.threshold;\n    const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n    const effectiveMode = requestedMode ?? result.mode ?? \"block\";\n    const commonEventFields = {\n      hook: hookLabel,\n      ...(toolName !== undefined ? { toolName } : {}),\n      runId,\n      text,\n      result,\n    };\n    fireOnClassify({\n      ...commonEventFields,\n      blocked,\n      mode: effectiveMode,\n      shadowMode: effectiveMode === \"shadow\",\n    });\n    if (!blocked || effectiveMode !== \"block\") {\n      return;\n    }\n\n    throw new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      runId,\n      hook: hookLabel,\n      ...(toolName !== undefined ? { toolName } : {}),\n      result,\n    });\n  };\n\n  class SilmarilFirewallHandler extends BaseCallbackHandler {\n    override name = \"silmaril_firewall_handler\";\n    override raiseError = true;\n    override awaitHandlers = true;\n\n    override async handleChatModelStart(\n      _llm: unknown,\n      messages: unknown,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.CHAT_MODEL_START)) {\n        return;\n      }\n      const batches = messages as ReadonlyArray<ReadonlyArray<LangChainDucktypedMessage>>;\n      const flat: LangChainDucktypedMessage[] = [];\n      for (const batch of batches) {\n        for (const m of batch) {\n          flat.push(m);\n        }\n      }\n      const lastUser = findLastUserMessage(flat);\n      if (!lastUser) {\n        return;\n      }\n      const text = extractMessageText(lastUser.content).trim();\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.CHAT_MODEL_START], runId);\n    }\n\n    override async handleLLMStart(\n      _llm: unknown,\n      prompts: string[],\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.LLM_START)) {\n        return;\n      }\n      const text = extractTextFromPrompts(prompts);\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.LLM_START], runId);\n    }\n\n    override async handleToolStart(\n      tool: { name?: string } | undefined,\n      inputStr: string,\n      runId: string,\n    ): Promise<void> {\n      if (!includeTool || !enabledHooks.has(FirewallHook.TOOL_START)) {\n        return;\n      }\n      const text = extractTextFromToolInput(inputStr);\n      if (!text) {\n        return;\n      }\n      const toolName = tool?.name;\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.TOOL_START], runId, toolName);\n    }\n\n    override async handleRetrieverStart(\n      _retriever: unknown,\n      query: string,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.RETRIEVER_START)) {\n        return;\n      }\n      const text = query.trim();\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.RETRIEVER_START], runId);\n    }\n\n    override async handleLLMEnd(output: unknown, runId: string): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.LLM_END)) {\n        return;\n      }\n      const text = extractTextFromLLMResult(output as { generations?: ReadonlyArray<ReadonlyArray<{ text?: string }>> });\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.LLM_END], runId);\n    }\n\n    override async handleToolEnd(\n      output: unknown,\n      runId: string,\n      _parentRunId?: string,\n      _tags?: string[],\n      _kwargs?: { name?: string },\n    ): Promise<void> {\n      if (!includeTool || !enabledHooks.has(FirewallHook.TOOL_END)) {\n        return;\n      }\n      const text = String(output).trim();\n      if (!text) {\n        return;\n      }\n      const toolName = _kwargs?.name;\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.TOOL_END], runId, toolName);\n    }\n\n    override async handleRetrieverEnd(\n      documents: ReadonlyArray<{ pageContent?: string }>,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.RETRIEVER_END)) {\n        return;\n      }\n      const text = extractTextFromDocuments(documents);\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.RETRIEVER_END], runId);\n    }\n  }\n\n  return new SilmarilFirewallHandler();\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport {\n  Firewall,\n  DEFAULT_TIMEOUT_MS,\n} from \"./firewall.js\";\n\nexport { FirewallBlockedException, PromptBlockedException, SilmarilApiError } from \"./exceptions.js\";\nexport type { MalformedInputDetails } from \"./exceptions.js\";\n\nexport type { FirewallMiddleware } from \"./adapters/vercel.js\";\n\nexport {\n  HookLabel,\n  FirewallHook,\n  DEFAULT_HOOKS,\n  INPUT_HOOKS,\n  OUTPUT_HOOKS,\n  ALL_HOOKS,\n  FIREWALL_HOOK_TO_LABEL,\n  resolveHooks,\n  prependHook,\n  prependToolName,\n} from \"./hooks.js\";\n\nexport {\n  Outcome,\n  PRIMARY_OUTCOMES,\n  HARMFUL_OUTCOMES,\n  OUTCOME_DESCRIPTIONS,\n  isPrimaryOutcome,\n  isHarmfulOutcome,\n  normalizePrimaryOutcome,\n  normalizeHarmfulOutcome,\n  normalizeHarmfulOutcomeMap,\n} from \"./outcomes.js\";\n\nexport type {\n  KnownPrimaryOutcome,\n  KnownHarmfulOutcome,\n  PrimaryOutcome,\n  HarmfulOutcome,\n  UnknownOutcome,\n} from \"./outcomes.js\";\n\nexport type {\n  BlockResult,\n  ClassifyEvent,\n  Prediction,\n  FirewallMode,\n  GovernanceAction,\n  GovernanceResourceKind,\n  GovernanceResource,\n  GovernanceContext,\n  GovernanceDecision,\n  ClassificationMetadata,\n  FirewallOptions,\n  ClassifyOptions,\n  ClassifyBatchOptions,\n  LangChainAdapterOptions,\n  LangChainFirewallHandler,\n  MiddlewareOptions,\n} from \"./types.js\";\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport { randomUUID } from \"node:crypto\";\n\nimport { createMiddleware, type FirewallMiddleware } from \"./adapters/vercel.js\";\nimport { SilmarilApiError } from \"./exceptions.js\";\nimport { normalizeHarmfulOutcomeMap, normalizePrimaryOutcome } from \"./outcomes.js\";\nimport { sanitizeText } from \"./sanitization.js\";\nimport type {\n  BlockResult,\n  ClassifyBatchOptions,\n  ClassifyOptions,\n  ClassificationMetadata,\n  FirewallOptions,\n  FirewallMode,\n  GovernanceContext,\n  GovernanceDecision,\n  LangChainAdapterOptions,\n  LangChainFirewallHandler,\n  MiddlewareOptions,\n  Prediction,\n} from \"./types.js\";\n\nexport const SDK_VERSION = \"0.7.1\";\nexport const DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_RETRIES = 5;\nconst MAX_BACKOFF_SECONDS = 30;\nconst MAX_ERROR_BODY_BYTES = 1 << 16;\n/**\n * Largest delay a timer can represent. Both `setTimeout` and the\n * `AbortSignal.timeout` this client used before silently collapse a larger\n * delay to 1 ms, which would turn a long timeout into an immediate abort.\n */\nconst MAX_TIMEOUT_MS = 2_147_483_647;\n\ninterface SingleClassifyPayload {\n  text: string;\n  mode?: FirewallMode;\n  hook?: string;\n  tool_name?: string;\n  metadata?: ClassificationMetadata;\n}\n\ninterface BatchClassifyPayload {\n  texts: readonly string[];\n  mode?: FirewallMode;\n  hooks?: readonly string[];\n  tool_names?: readonly (string | null)[];\n  metadata?: readonly (ClassificationMetadata | null)[];\n}\n\ninterface SingleClassifyResponse {\n  prediction: Prediction;\n  score: number;\n  threshold: number;\n  mode?: unknown;\n  primary_outcome?: unknown;\n  outcome_scores?: unknown;\n  detector_scores?: unknown;\n  detector_counts?: unknown;\n  governance?: unknown;\n}\n\ninterface BatchClassifyResponse {\n  predictions: readonly SingleClassifyResponse[];\n}\n\nfunction resolveMode(value: unknown, requestedMode?: FirewallMode): FirewallMode | undefined {\n  let responseMode: FirewallMode | undefined;\n  if (value === \"shadow\" || value === \"warn\" || value === \"block\") {\n    responseMode = value;\n  } else if (value !== undefined) {\n    throw new Error(\"Firewall: response mode must be shadow, warn, or block\");\n  }\n\n  // A supplied mode is the per-request override contract. Prefer it during\n  // rolling upgrades so a missing or stale response field cannot strengthen\n  // enforcement beyond what the caller requested.\n  return requestedMode ?? responseMode;\n}\n\nfunction legacyMode(shadowMode: boolean | undefined): FirewallMode | undefined {\n  return shadowMode === undefined ? undefined : shadowMode ? \"shadow\" : \"block\";\n}\n\nfunction blockResultFromResponse(\n  data: SingleClassifyResponse,\n  requestedMode?: FirewallMode,\n): BlockResult {\n  if (data.prediction !== \"BENIGN\" && data.prediction !== \"MALICIOUS\") {\n    throw new Error(\"Firewall: response prediction must be BENIGN or MALICIOUS\");\n  }\n  const result: {\n    prediction: Prediction;\n    score: number;\n    threshold: number;\n    mode?: FirewallMode;\n    primaryOutcome?: NonNullable<BlockResult[\"primaryOutcome\"]>;\n    outcomeScores?: NonNullable<BlockResult[\"outcomeScores\"]>;\n    detectorScores?: NonNullable<BlockResult[\"detectorScores\"]>;\n    detectorCounts?: NonNullable<BlockResult[\"detectorCounts\"]>;\n    governance?: GovernanceDecision;\n  } = {\n    prediction: data.prediction,\n    score: Number(data.score),\n    threshold: Number(data.threshold),\n  };\n  const mode = resolveMode(data.mode, requestedMode);\n  if (mode !== undefined) {\n    result.mode = mode;\n  }\n  if (data.primary_outcome !== undefined) {\n    result.primaryOutcome = normalizePrimaryOutcome(data.primary_outcome);\n  }\n  if (data.outcome_scores !== undefined) {\n    const outcomeScores = normalizeHarmfulOutcomeMap(data.outcome_scores, \"outcome_scores\");\n    if (outcomeScores !== undefined) {\n      result.outcomeScores = outcomeScores;\n    }\n  }\n  if (data.detector_scores !== undefined) {\n    const detectorScores = normalizeHarmfulOutcomeMap(data.detector_scores, \"detector_scores\");\n    if (detectorScores !== undefined) {\n      result.detectorScores = detectorScores;\n    }\n  }\n  if (data.detector_counts !== undefined) {\n    const detectorCounts = normalizeHarmfulOutcomeMap(data.detector_counts, \"detector_counts\");\n    if (detectorCounts !== undefined) {\n      result.detectorCounts = detectorCounts;\n    }\n  }\n  if (data.governance !== undefined) {\n    result.governance = governanceDecisionFromResponse(data.governance);\n  }\n  return Object.freeze(result);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction withSdkMetadata(\n  metadata: ClassificationMetadata | undefined,\n  info: {\n    requestId: string;\n    inputIndex?: number;\n    governance?: GovernanceContext;\n  },\n): ClassificationMetadata {\n  const payload: Record<string, unknown> = { ...(metadata ?? {}) };\n  const existing = payload.silmaril;\n  if (existing !== undefined && !isRecord(existing)) {\n    throw new Error(\"Firewall: metadata.silmaril must be an object when provided\");\n  }\n  payload.silmaril = {\n    ...(isRecord(existing) ? existing : {}),\n    sdk_language: \"typescript\",\n    sdk_version: SDK_VERSION,\n    request_id: info.requestId,\n    ...(info.inputIndex === undefined ? {} : { input_index: info.inputIndex }),\n    ...(info.governance === undefined\n      ? {}\n      : { governance: governanceContextToWire(info.governance) }),\n  };\n  return payload;\n}\n\nfunction governanceContextToWire(context: GovernanceContext): Record<string, unknown> {\n  return {\n    ...(context.agent === undefined ? {} : { agent: context.agent }),\n    ...(context.resource === undefined\n      ? {}\n      : {\n          resource: {\n            kind: context.resource.kind,\n            ...(context.resource.id === undefined ? {} : { id: context.resource.id }),\n            ...(context.resource.parentId === undefined\n              ? {}\n              : { parent_id: context.resource.parentId }),\n          },\n        }),\n  };\n}\n\nfunction governanceDecisionFromResponse(value: unknown): GovernanceDecision {\n  if (!isRecord(value)) {\n    throw new Error(\"Firewall: response governance must be an object\");\n  }\n  if (value.action !== \"allow\" && value.action !== \"block\") {\n    throw new Error(\"Firewall: response governance action must be allow or block\");\n  }\n  if (typeof value.policy_version !== \"string\" || value.policy_version.length === 0) {\n    throw new Error(\"Firewall: response governance policy_version must be a non-empty string\");\n  }\n  if (value.rule_id !== undefined && typeof value.rule_id !== \"string\") {\n    throw new Error(\"Firewall: response governance rule_id must be a string when provided\");\n  }\n  return Object.freeze({\n    action: value.action,\n    ...(value.rule_id === undefined ? {} : { ruleId: value.rule_id }),\n    policyVersion: value.policy_version,\n  });\n}\n\nasync function readCappedErrorBody(response: Response): Promise<string> {\n  if (!response.body) {\n    return response.text().then((body) => body.slice(0, MAX_ERROR_BODY_BYTES)).catch(() => \"\");\n  }\n\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let remaining = MAX_ERROR_BODY_BYTES;\n  try {\n    while (remaining > 0) {\n      const { done, value } = await reader.read();\n      if (done) {\n        break;\n      }\n      if (!value) {\n        continue;\n      }\n      const chunk = value.byteLength > remaining ? value.slice(0, remaining) : value;\n      chunks.push(chunk);\n      remaining -= chunk.byteLength;\n      if (chunk.byteLength < value.byteLength) {\n        break;\n      }\n    }\n  } catch {\n    return \"\";\n  } finally {\n    await reader.cancel().catch(() => undefined);\n  }\n\n  const total = chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0);\n  const body = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    body.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return new TextDecoder().decode(body);\n}\n\n/** Releases a response we will not read so a retry does not leak its socket. */\nasync function discardResponseBody(response: Response): Promise<void> {\n  try {\n    if (response.body) {\n      if (!response.body.locked) {\n        await response.body.cancel();\n      }\n      return;\n    }\n    await response.text();\n  } catch {\n    // The discarded body belongs to a response we already decided to retry.\n  }\n}\n\nfunction isAbortLikeError(error: unknown): boolean {\n  if (typeof error !== \"object\" || error === null) {\n    return false;\n  }\n  const name = (error as { name?: unknown }).name;\n  return name === \"AbortError\" || name === \"TimeoutError\";\n}\n\n/**\n * Reads a decoded body under an attempt signal. Native fetch can reject a body\n * read that the signal cancelled with a generic `AbortError`, which would drop\n * the caller's abort reason or the timeout reason. Only abort-caused failures\n * are rewritten; decode and transport errors are surfaced unchanged.\n */\nasync function readBodyUnderSignal<T>(read: () => Promise<T>, signal: AbortSignal): Promise<T> {\n  try {\n    return await read();\n  } catch (error) {\n    if (signal.aborted && isAbortLikeError(error)) {\n      throw signal.reason;\n    }\n    throw error;\n  }\n}\n\ninterface AttemptSignal {\n  readonly signal: AbortSignal;\n  dispose(): void;\n}\n\n/**\n * Combines the per-attempt timeout with an optional caller signal. The caller\n * signal is shared across sibling calls, so the listener and the timer are\n * released by `dispose()` once the attempt no longer needs them.\n */\nfunction createAttemptSignal(timeoutMs: number, callerSignal?: AbortSignal): AttemptSignal {\n  const controller = new AbortController();\n  const timer = setTimeout(() => {\n    controller.abort(\n      new DOMException(\"The operation was aborted due to timeout\", \"TimeoutError\"),\n    );\n  }, timeoutMs);\n  const onCallerAbort = (): void => {\n    controller.abort(callerSignal?.reason);\n  };\n  callerSignal?.addEventListener(\"abort\", onCallerAbort, { once: true });\n  return {\n    signal: controller.signal,\n    dispose: () => {\n      clearTimeout(timer);\n      callerSignal?.removeEventListener(\"abort\", onCallerAbort);\n    },\n  };\n}\n\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise<void>((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(signal.reason);\n      return;\n    }\n    const onAbort = (): void => {\n      clearTimeout(timer);\n      reject(signal?.reason);\n    };\n    const timer = setTimeout(() => {\n      signal?.removeEventListener(\"abort\", onAbort);\n      resolve();\n    }, ms);\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n  });\n}\n\n/**\n * Firewall client for the `/classify` API.\n *\n * Instance state is set once in the constructor and never mutated by a request,\n * so one client is safe to share across any number of concurrent `classify()`\n * and `classifyBatch()` promises within a single JavaScript runtime. Each\n * worker thread owns its own client: `Firewall` instances are not transferable\n * across `worker_threads` boundaries.\n */\nexport class Firewall {\n  readonly apiKey: string;\n  readonly apiUrl: string;\n  readonly timeoutMs: number;\n  readonly shadowMode: boolean;\n  readonly mode: FirewallMode | undefined;\n\n  private readonly headers: Readonly<Record<string, string>>;\n\n  constructor(options: FirewallOptions) {\n    if (!options.apiKey) {\n      throw new Error(\"Firewall: apiKey is required\");\n    }\n    if (!options.apiUrl) {\n      throw new Error(\"Firewall: apiUrl is required\");\n    }\n    this.apiKey = options.apiKey;\n    this.apiUrl = options.apiUrl;\n    this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n    if (typeof this.timeoutMs !== \"number\" || !Number.isFinite(this.timeoutMs) || this.timeoutMs < 0) {\n      throw new Error(`Firewall: timeoutMs must be a finite non-negative number, got ${this.timeoutMs}`);\n    }\n    if (this.timeoutMs > MAX_TIMEOUT_MS) {\n      throw new Error(\n        `Firewall: timeoutMs must be at most ${MAX_TIMEOUT_MS} ms, got ${this.timeoutMs}`,\n      );\n    }\n    this.mode = options.mode ?? legacyMode(options.shadowMode);\n    this.shadowMode = this.mode === \"shadow\";\n    this.headers = Object.freeze({\n      \"x-api-key\": this.apiKey,\n      \"content-type\": \"application/json\",\n    });\n  }\n\n  async classify(text: string, options: ClassifyOptions = {}): Promise<BlockResult> {\n    const requestId = options.requestId ?? randomUUID();\n    return this.classifySingle(sanitizeText(text), options, { requestId });\n  }\n\n  async classifyBatch(\n    texts: readonly string[],\n    options: ClassifyBatchOptions = {},\n  ): Promise<BlockResult[]> {\n    if (texts.length === 0) {\n      throw new Error(\"Firewall: texts must not be empty\");\n    }\n    if (options.hooks !== undefined && options.hooks.length !== texts.length) {\n      throw new Error(\n        `Firewall: hooks length ${options.hooks.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.toolNames !== undefined && options.toolNames.length !== texts.length) {\n      throw new Error(\n        `Firewall: toolNames length ${options.toolNames.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.metadata !== undefined && options.metadata.length !== texts.length) {\n      throw new Error(\n        `Firewall: metadata length ${options.metadata.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.governance !== undefined && options.governance.length !== texts.length) {\n      throw new Error(\n        `Firewall: governance length ${options.governance.length} does not match texts length ${texts.length}`,\n      );\n    }\n\n    const requestId = options.requestId ?? randomUUID();\n    const payload: BatchClassifyPayload = {\n      texts: texts.map((text) => sanitizeText(text)),\n    };\n    const requestedMode = options.mode ?? this.mode;\n    if (requestedMode !== undefined) {\n      payload.mode = requestedMode;\n    }\n    if (options.hooks && options.hooks.length > 0) {\n      payload.hooks = options.hooks.map((h) => String(h));\n    }\n    if (options.toolNames && options.toolNames.length > 0) {\n      payload.tool_names = options.toolNames.map((t) => (t === undefined ? null : t));\n    }\n    payload.metadata = texts.map((_, index) =>\n      withSdkMetadata(options.metadata?.[index], {\n        requestId,\n        inputIndex: index,\n        ...(options.governance?.[index] === undefined\n          ? {}\n          : { governance: options.governance[index] }),\n      }),\n    );\n    const data = await this.postWithRetry<BatchClassifyResponse>(payload, options.signal);\n    if (!Array.isArray(data.predictions)) {\n      throw new Error(\"Firewall: response predictions must be an array\");\n    }\n    if (data.predictions.length !== payload.texts.length) {\n      throw new Error(\n        `Firewall: response predictions length ${data.predictions.length} does not match submitted texts length ${payload.texts.length}`,\n      );\n    }\n    return data.predictions.map((p) => blockResultFromResponse(p, requestedMode));\n  }\n\n  asLangChainHandler<THandler = LangChainFirewallHandler>(\n    options: LangChainAdapterOptions = {},\n  ): Promise<THandler> {\n    return import(\"./adapters/langchain.js\").then((m) =>\n      m.createLangChainHandler(this, options) as Promise<THandler>,\n    );\n  }\n\n  asMiddleware(options: MiddlewareOptions = {}): FirewallMiddleware {\n    return createMiddleware(this, options);\n  }\n\n  private async postWithRetry<T>(\n    payload: SingleClassifyPayload | BatchClassifyPayload,\n    callerSignal?: AbortSignal,\n    maxRetries: number = DEFAULT_MAX_RETRIES,\n  ): Promise<T> {\n    // Cancellation outranks payload serialization, which can itself throw on\n    // cyclic metadata or a throwing `toJSON`.\n    callerSignal?.throwIfAborted();\n    // Serialize before the first attempt so retries resend the same logical\n    // event even if the caller mutates the objects it passed in.\n    const body = JSON.stringify(payload);\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      callerSignal?.throwIfAborted();\n      const attemptSignal = createAttemptSignal(this.timeoutMs, callerSignal);\n      try {\n        const response = await fetch(this.apiUrl, {\n          method: \"POST\",\n          headers: this.headers,\n          body,\n          redirect: \"error\",\n          signal: attemptSignal.signal,\n        });\n        if (response.status !== 429 || attempt === maxRetries) {\n          if (!response.ok) {\n            const errorBody = await readCappedErrorBody(response);\n            // The capped read swallows its own failures, so an abort during it\n            // would otherwise be reported as a plain API error.\n            attemptSignal.signal.throwIfAborted();\n            throw new SilmarilApiError({\n              status: response.status,\n              statusText: response.statusText,\n              body: errorBody,\n            });\n          }\n          return await readBodyUnderSignal<T>(\n            () => response.json() as Promise<T>,\n            attemptSignal.signal,\n          );\n        }\n        await discardResponseBody(response);\n      } finally {\n        attemptSignal.dispose();\n      }\n      await sleep(Math.min(2 ** attempt, MAX_BACKOFF_SECONDS) * 1000, callerSignal);\n    }\n    throw new Error(\"Firewall: exhausted retries (unreachable)\");\n  }\n\n  private async classifySingle(\n    text: string,\n    options: ClassifyOptions,\n    metadataInfo: {\n      requestId: string;\n    },\n  ): Promise<BlockResult> {\n    const payload: SingleClassifyPayload = { text };\n    const requestedMode = options.mode ?? this.mode;\n    if (requestedMode !== undefined) {\n      payload.mode = requestedMode;\n    }\n    if (options.hook !== undefined) {\n      payload.hook = options.hook;\n    }\n    if (options.toolName !== undefined) {\n      payload.tool_name = options.toolName;\n    }\n    payload.metadata = withSdkMetadata(options.metadata, {\n      ...metadataInfo,\n      ...(options.governance === undefined ? {} : { governance: options.governance }),\n    });\n    const data = await this.postWithRetry<SingleClassifyResponse>(payload, options.signal);\n    return blockResultFromResponse(data, requestedMode);\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { BlockResult, MiddlewareOptions } from \"../types.js\";\n\ninterface VercelContentPart {\n  type?: string;\n  text?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  output?: unknown;\n  result?: unknown;\n}\n\ninterface VercelPromptMessage {\n  role: string;\n  content: string | ReadonlyArray<VercelContentPart | string>;\n}\n\ninterface VercelToolCall {\n  toolCallType?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  input?: unknown;\n}\n\ninterface VercelGenerateResult {\n  text?: string;\n  toolCalls?: ReadonlyArray<VercelToolCall>;\n}\n\ninterface WrapGenerateArgs<TResult extends VercelGenerateResult & Record<string, unknown>> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doGenerate: () => PromiseLike<TResult>;\n}\n\ninterface WrapStreamArgs<\n  TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>,\n> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doStream: () => PromiseLike<TResult>;\n}\n\ninterface StreamPart {\n  type?: string;\n  textDelta?: string;\n  delta?: string;\n}\n\ninterface VercelStepContext {\n  toolName: string | undefined;\n  toolCallId: string | undefined;\n}\n\nfunction stringifyToolValue(value: unknown): string {\n  if (value === null || value === undefined) {\n    return \"\";\n  }\n  if (typeof value === \"string\") {\n    return value;\n  }\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction extractContentText(content: VercelPromptMessage[\"content\"]): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction iterateToolResultParts(\n  message: VercelPromptMessage,\n): Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> {\n  if (typeof message.content === \"string\") {\n    return [];\n  }\n  const out: Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> = [];\n  for (const part of message.content) {\n    if (typeof part === \"string\") {\n      continue;\n    }\n    if (part.type === \"tool-result\") {\n      const text = stringifyToolResult(part.result !== undefined ? part.result : part.output);\n      if (text.trim()) {\n        out.push({ text, toolName: part.toolName, toolCallId: part.toolCallId });\n      }\n    }\n  }\n  return out;\n}\n\nfunction stringifyToolResult(value: unknown): string {\n  if (!isRecord(value)) {\n    return stringifyToolValue(value);\n  }\n  if ((value.type === \"text\" || value.type === \"error-text\") && typeof value.value === \"string\") {\n    return value.value;\n  }\n  if ((value.type === \"json\" || value.type === \"error-json\") && value.value !== undefined) {\n    return stringifyToolValue(value.value);\n  }\n  if (value.type === \"content\" && Array.isArray(value.value)) {\n    return value.value\n      .map((part) => (isRecord(part) && part.type === \"text\" && typeof part.text === \"string\" ? part.text : \"\"))\n      .filter((text) => text.length > 0)\n      .join(\" \");\n  }\n  return stringifyToolValue(value);\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<VercelPromptMessage>,\n): VercelPromptMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (msg.role.toLowerCase() === \"user\") {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport interface FirewallMiddleware {\n  readonly specificationVersion: \"v3\";\n  readonly middlewareVersion: \"v2\";\n  wrapGenerate: <TResult extends VercelGenerateResult & Record<string, unknown>>(\n    args: WrapGenerateArgs<TResult>,\n  ) => Promise<TResult>;\n  wrapStream: <TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>(\n    args: WrapStreamArgs<TResult>,\n  ) => Promise<TResult>;\n}\n\nexport function createMiddleware(\n  firewall: Firewall,\n  options: MiddlewareOptions = {},\n): FirewallMiddleware {\n  const scanInput = options.scanInput ?? true;\n  const scanOutput = options.scanOutput ?? false;\n  const requestedMode = options.mode ?? (\n    options.shadowMode === undefined\n      ? firewall.mode\n      : options.shadowMode ? \"shadow\" : \"block\"\n  );\n\n  const classifyOrBlock = async (\n    text: string,\n    hook: HookLabel,\n    context: VercelStepContext = { toolName: undefined, toolCallId: undefined },\n  ): Promise<void> => {\n    if (!text.trim()) {\n      return;\n    }\n    const { toolName, toolCallId } = context;\n    const result: BlockResult = await firewall.classify(\n      text,\n      {\n        hook,\n        ...(toolName !== undefined ? { toolName } : {}),\n        ...(requestedMode !== undefined ? { mode: requestedMode } : {}),\n      },\n    );\n    const threshold = result.threshold;\n    const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n    const effectiveMode = requestedMode ?? result.mode ?? \"block\";\n    const commonEventFields = {\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      text,\n      result,\n    };\n    options.onClassify?.({\n      ...commonEventFields,\n      blocked,\n      mode: effectiveMode,\n      shadowMode: effectiveMode === \"shadow\",\n    });\n    if (!blocked || effectiveMode !== \"block\") {\n      return;\n    }\n\n    const err = new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      result,\n    });\n    options.onBlocked?.(err);\n    throw err;\n  };\n\n  const scanPrompt = async (prompt: ReadonlyArray<VercelPromptMessage>): Promise<void> => {\n    if (prompt.length === 0) {\n      return;\n    }\n    const last = prompt[prompt.length - 1]!;\n    const role = last.role.toLowerCase();\n\n    // If the newest message is a tool result (typical mid-flow in a\n    // tool-calling loop), classify each tool-result part individually with\n    // tool_response + toolName. No manual wiring from the caller — the\n    // toolName is read directly from the Vercel content part.\n    if (role === \"tool\") {\n      for (const { text, toolName, toolCallId } of iterateToolResultParts(last)) {\n        await classifyOrBlock(text, HookLabel.TOOL_RESPONSE, { toolName, toolCallId });\n      }\n      return;\n    }\n\n    // Otherwise, fall back to scanning the most recent user message.\n    // Covers: [user], [system, user], [user, assistant(text), user], etc.\n    const lastUser = findLastUserMessage(prompt);\n    if (!lastUser) {\n      return;\n    }\n    const text = extractContentText(lastUser.content).trim();\n    if (!text) {\n      return;\n    }\n    await classifyOrBlock(text, HookLabel.USER_INPUT);\n  };\n\n  const scanGenerateResult = async (result: VercelGenerateResult): Promise<void> => {\n    if (scanOutput && typeof result.text === \"string\" && result.text.length > 0) {\n      await classifyOrBlock(result.text, HookLabel.LLM_OUTPUT);\n    }\n    if (options.scanToolCalls && Array.isArray(result.toolCalls)) {\n      for (const call of result.toolCalls) {\n        if (!call || typeof call !== \"object\") {\n          continue;\n        }\n        const toolInput = call.args !== undefined ? call.args : call.input;\n        const args =\n          typeof toolInput === \"string\" ? toolInput : stringifyToolValue(toolInput);\n        const toolName = typeof call.toolName === \"string\" ? call.toolName : undefined;\n        const toolCallId = typeof call.toolCallId === \"string\" ? call.toolCallId : undefined;\n        if (args.trim()) {\n          await classifyOrBlock(args, HookLabel.TOOL_CALL, { toolName, toolCallId });\n        }\n      }\n    }\n  };\n\n  return {\n    specificationVersion: \"v3\",\n    middlewareVersion: \"v2\",\n\n    async wrapGenerate<TResult extends VercelGenerateResult & Record<string, unknown>>({\n      params,\n      doGenerate,\n    }: WrapGenerateArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const result = await doGenerate();\n      await scanGenerateResult(result);\n      return result;\n    },\n\n    async wrapStream<TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>({\n      params,\n      doStream,\n    }: WrapStreamArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const { stream, ...rest } = await doStream();\n      if (!scanOutput) {\n        return { stream, ...rest } as unknown as TResult;\n      }\n\n      let buffered = \"\";\n      const transformed = stream.pipeThrough(\n        new TransformStream<unknown, unknown>({\n          transform(chunk, controller): void {\n            const part = chunk as StreamPart;\n            if (part && part.type === \"text-delta\") {\n              const delta = part.textDelta ?? part.delta ?? \"\";\n              buffered += delta;\n            }\n            controller.enqueue(chunk);\n          },\n          async flush(controller): Promise<void> {\n            if (!buffered.trim()) {\n              return;\n            }\n            try {\n              await classifyOrBlock(buffered, HookLabel.LLM_OUTPUT);\n            } catch (err) {\n              if (err instanceof FirewallBlockedException) {\n                controller.enqueue({ type: \"error\", error: err });\n                return;\n              }\n              throw err;\n            }\n          },\n        }),\n      );\n      return { stream: transformed, ...rest } as unknown as TResult;\n    },\n  };\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const Outcome = {\n  Benign: \"benign\",\n  InformationDisclosure: \"information_disclosure\",\n  SecretExposure: \"secret_exposure\",\n  ControlAbuse: \"control_abuse\",\n  SystemCompromise: \"system_compromise\",\n  ServiceDisruption: \"service_disruption\",\n  CodeGeneration: \"code_generation\",\n  StoryScriptGeneration: \"story_script_generation\",\n  GameGeneration: \"game_generation\",\n  WebsiteGeneration: \"website_generation\",\n  ClickUpTermsViolation: \"clickup_terms_violation\",\n  TraditionalAiAbuse: \"traditional_ai_abuse\",\n} as const;\n\ndeclare const unknownOutcomeBrand: unique symbol;\n\nexport type KnownPrimaryOutcome = (typeof Outcome)[keyof typeof Outcome];\nexport type KnownHarmfulOutcome = Exclude<KnownPrimaryOutcome, typeof Outcome.Benign>;\nexport type UnknownOutcome = string & { readonly [unknownOutcomeBrand]: \"UnknownOutcome\" };\nexport type PrimaryOutcome = KnownPrimaryOutcome | UnknownOutcome;\nexport type HarmfulOutcome = KnownHarmfulOutcome | UnknownOutcome;\n\nexport const PRIMARY_OUTCOMES = [\n  Outcome.Benign,\n  Outcome.InformationDisclosure,\n  Outcome.SecretExposure,\n  Outcome.ControlAbuse,\n  Outcome.SystemCompromise,\n  Outcome.ServiceDisruption,\n  Outcome.CodeGeneration,\n  Outcome.StoryScriptGeneration,\n  Outcome.GameGeneration,\n  Outcome.WebsiteGeneration,\n  Outcome.ClickUpTermsViolation,\n  Outcome.TraditionalAiAbuse,\n] as const satisfies readonly PrimaryOutcome[];\n\nexport const HARMFUL_OUTCOMES = [\n  Outcome.InformationDisclosure,\n  Outcome.SecretExposure,\n  Outcome.ControlAbuse,\n  Outcome.SystemCompromise,\n  Outcome.ServiceDisruption,\n  Outcome.CodeGeneration,\n  Outcome.StoryScriptGeneration,\n  Outcome.GameGeneration,\n  Outcome.WebsiteGeneration,\n  Outcome.ClickUpTermsViolation,\n  Outcome.TraditionalAiAbuse,\n] as const satisfies readonly KnownHarmfulOutcome[];\n\nexport const OUTCOME_DESCRIPTIONS = {\n  [Outcome.Benign]: \"No harmful firewall outcome detected.\",\n  [Outcome.InformationDisclosure]:\n    \"Exposes private data, documents, internal context, logs, traces, customer data, SQL rows, topology, or similar non-secret sensitive information.\",\n  [Outcome.SecretExposure]:\n    \"Exposes credentials, tokens, API keys, cookies, passwords, signing keys, OAuth secrets, session material, or webhook secrets.\",\n  [Outcome.ControlAbuse]:\n    \"Misuses authorized tools or user privileges to send, change, approve, delete, operate, or bypass policy/RBAC without a stronger outcome.\",\n  [Outcome.SystemCompromise]:\n    \"Enables privilege escalation, account takeover, hostile integration or plugin takeover, persistence, lateral movement, attacker webhook registration, or code/plugin execution.\",\n  [Outcome.ServiceDisruption]:\n    \"Causes downtime, lockout, degradation, alert suppression, destructive loops, resource exhaustion, cost spikes, or hidden outage evidence.\",\n  [Outcome.CodeGeneration]:\n    \"Requests generation or material modification of executable code, scripts, workflows, or configuration.\",\n  [Outcome.StoryScriptGeneration]:\n    \"Requests generation of narrative prose, dialogue, scripts, or story artifacts.\",\n  [Outcome.GameGeneration]:\n    \"Requests generation of a game, quest, level, mechanic, or playable experience.\",\n  [Outcome.WebsiteGeneration]:\n    \"Requests generation of a website, landing page, storefront, or web experience.\",\n  [Outcome.ClickUpTermsViolation]:\n    \"Requests content or actions that violate the configured ClickUp tenant policy.\",\n  [Outcome.TraditionalAiAbuse]:\n    \"Requests unsafe AI assistance outside the concrete security outcome classes.\",\n} as const satisfies Readonly<Record<KnownPrimaryOutcome, string>>;\n\nconst PRIMARY_OUTCOME_SET = new Set<string>(PRIMARY_OUTCOMES);\nconst HARMFUL_OUTCOME_SET = new Set<string>(HARMFUL_OUTCOMES);\n\nexport function isPrimaryOutcome(value: unknown): value is KnownPrimaryOutcome {\n  return typeof value === \"string\" && PRIMARY_OUTCOME_SET.has(value);\n}\n\nexport function isHarmfulOutcome(value: unknown): value is KnownHarmfulOutcome {\n  return typeof value === \"string\" && HARMFUL_OUTCOME_SET.has(value);\n}\n\nexport function normalizePrimaryOutcome(\n  value: unknown,\n  fieldName = \"primary_outcome\",\n): PrimaryOutcome {\n  if (typeof value !== \"string\") {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(value)}`);\n  }\n  return isPrimaryOutcome(value) ? value : (value as UnknownOutcome);\n}\n\nexport function normalizeHarmfulOutcome(\n  value: unknown,\n  fieldName = \"outcome\",\n): HarmfulOutcome {\n  if (typeof value !== \"string\" || value === Outcome.Benign) {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(value)}`);\n  }\n  return isHarmfulOutcome(value) ? value : (value as UnknownOutcome);\n}\n\nexport function normalizeHarmfulOutcomeMap(\n  values: unknown,\n  fieldName: string,\n): Readonly<Partial<Record<HarmfulOutcome, number>>> | undefined {\n  if (values === undefined || values === null) {\n    return undefined;\n  }\n  if (typeof values !== \"object\" || Array.isArray(values)) {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(values)}`);\n  }\n  const out: Partial<Record<HarmfulOutcome, number>> = {};\n  for (const [key, value] of Object.entries(values)) {\n    const normalizedKey = normalizeHarmfulOutcome(key, `${fieldName} key`);\n    if (typeof value !== \"number\") {\n      throw new Error(`Firewall: invalid ${fieldName} value for ${JSON.stringify(key)}`);\n    }\n    out[normalizedKey] = value;\n  }\n  return Object.freeze(out);\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nfunction isHighSurrogate(code: number): boolean {\n  return code >= 0xd800 && code <= 0xdbff;\n}\n\nfunction isLowSurrogate(code: number): boolean {\n  return code >= 0xdc00 && code <= 0xdfff;\n}\n\nexport function sanitizeText(text: string): string {\n  let out = \"\";\n  for (let i = 0; i < text.length; i++) {\n    const code = text.charCodeAt(i);\n    if (isHighSurrogate(code)) {\n      if (i + 1 < text.length && isLowSurrogate(text.charCodeAt(i + 1))) {\n        out += text[i]!;\n        out += text[i + 1]!;\n        i++;\n      }\n      continue;\n    }\n    if (!isLowSurrogate(code)) {\n      out += text[i]!;\n    }\n  }\n  return out;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6GA,SAAS,eAAe,MAItB;AACA,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,aAAO,EAAE,SAAS,QAAW,OAAO,QAAW,YAAY,OAAU;AAAA,IACvE;AACA,UAAM,OAAO;AACb,WAAO;AAAA,MACL,SACE,KAAK,WAAW,OAAO,KAAK,YAAY,WACnC,KAAK,UACN;AAAA,MACN,OAAO,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAAA,MACrD,YAAY,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAAA,IAChE;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,SAAS,QAAW,OAAO,QAAW,YAAY,OAAU;AAAA,EACvE;AACF;AAnIA,IAMM,wBAWO,0BA0DA,wBAIA;AA/Eb;AAAA;AAAA;AAMA,IAAM,yBAAyB;AAWxB,IAAM,2BAAN,MAAM,kCAAiC,MAAM;AAAA,MACzC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAET,YAAY,QAST;AACD,cAAM,0BAAyB,cAAc,MAAM,CAAC;AACpD,aAAK,OAAO;AACZ,aAAK,QAAQ,OAAO;AACpB,aAAK,YAAY,OAAO;AACxB,aAAK,aAAa,OAAO;AACzB,aAAK,QAAQ,OAAO;AACpB,aAAK,OAAO,OAAO;AACnB,aAAK,WAAW,OAAO;AACvB,aAAK,aAAa,OAAO;AACzB,aAAK,SAAS,OAAO;AACrB,eAAO,eAAe,MAAM,0BAAyB,SAAS;AAAA,MAChE;AAAA,MAEA,OAAe,cAAc,QAKlB;AACT,cAAM,YACJ,OAAO,WAAW,SAAS,yBACvB,GAAG,OAAO,WAAW,MAAM,GAAG,sBAAsB,CAAC,QACrD,OAAO;AACb,YACE,OAAO,QAAQ,eAAe,eAC9B,OAAO,QAAQ,YAAY,WAAW,SACtC;AACA,iBAAO,4DAA4D,SAAS;AAAA,QAC9E;AACA,eACE,+CACU,OAAO,MAAM,QAAQ,CAAC,CAAC,eAAe,OAAO,UAAU,QAAQ,CAAC,CAAC,OACvE,SAAS;AAAA,MAEjB;AAAA,IACF;AAGO,IAAM,yBAAyB;AAI/B,IAAM,mBAAN,MAAM,0BAAyB,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAET,YAAY,QAOT;AACD,cAAM,aAAa,OAAO,aAAa,IAAI,OAAO,UAAU,KAAK;AACjE,cAAM,sBAAsB,OAAO,MAAM,GAAG,UAAU,EAAE;AACxD,aAAK,OAAO;AACZ,aAAK,SAAS,OAAO;AACrB,aAAK,aAAa,OAAO;AACzB,aAAK,OAAO,OAAO;AACnB,cAAM,SAAS,eAAe,OAAO,IAAI;AACzC,aAAK,UAAU,OAAO,WAAW,OAAO;AACxC,aAAK,QAAQ,OAAO,SAAS,OAAO;AACpC,aAAK,aAAa,OAAO,cAAc,OAAO;AAC9C,eAAO,eAAe,MAAM,kBAAiB,SAAS;AAAA,MACxD;AAAA,IACF;AAAA;AAAA;;;AC5CO,SAAS,aACd,OAC2B;AAC3B,MAAI,UAAU,QAAW;AACvB,WAAO;AAAA,EACT;AACA,QAAM,WAAW,oBAAI,IAAkB;AACvC,aAAW,KAAK,OAAO;AACrB,QAAI,CAAC,qBAAqB,IAAI,CAAC,GAAG;AAChC,YAAM,IAAI,MAAM,+BAA+B,OAAO,CAAC,CAAC,EAAE;AAAA,IAC5D;AACA,aAAS,IAAI,CAAiB;AAAA,EAChC;AACA,SAAO;AACT;AAEO,SAAS,YAAY,MAAc,MAAqD;AAC7F,MAAI,SAAS,UAAa,SAAS,MAAM;AACvC,WAAO;AAAA,EACT;AACA,MAAI,SAAS,UAAU,SAAS;AAC9B,WAAO;AAAA,EACT;AACA,SAAO,SAAS,IAAI,KAAK,IAAI;AAC/B;AAEO,SAAS,gBAAgB,MAAc,UAA6C;AACzF,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,SAAS,QAAQ,KAAK,IAAI;AACnC;AA9FA,IAGa,WAWA,cAYA,eAOA,aAOA,cAMA,WAKA,wBAUP;AA7DN;AAAA;AAAA;AAGO,IAAM,YAAY;AAAA,MACvB,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,WAAW;AAAA,MACX,eAAe;AAAA,MACf,YAAY;AAAA,MACZ,SAAS;AAAA,IACX;AAIO,IAAM,eAAe;AAAA,MAC1B,WAAW;AAAA,MACX,kBAAkB;AAAA,MAClB,YAAY;AAAA,MACZ,iBAAiB;AAAA,MACjB,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe;AAAA,IACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,MAC5E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,MAC1E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,MAC3E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,MACxE,GAAG;AAAA,MACH,GAAG;AAAA,IACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,MAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,MAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,MACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,MACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,MACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,MAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,MACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AAAA,IACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;AAAA;AAAA;;;ACqB9E,SAAS,uBAAuB,SAAoC;AACzE,SAAO,QACJ,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAC1B,KAAK,IAAI;AACd;AAEO,SAAS,yBAAyB,UAA0B;AACjE,SAAO,SAAS,KAAK;AACvB;AAEO,SAAS,yBAAyB,UAAsC;AAC7E,QAAM,QAAkB,CAAC;AACzB,aAAW,WAAW,SAAS,eAAe,CAAC,GAAG;AAChD,eAAW,OAAO,SAAS;AACzB,YAAM,QAAQ,IAAI,QAAQ,IAAI,KAAK;AACnC,UAAI,MAAM;AACR,cAAM,KAAK,IAAI;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEO,SAAS,yBAAyB,WAAqD;AAC5F,QAAM,QAAkB,CAAC;AACzB,aAAW,OAAO,WAAW;AAC3B,UAAM,QAAQ,IAAI,eAAe,IAAI,KAAK;AAC1C,QAAI,MAAM;AACR,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAnHA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AA6BA,SAAS,eAAe,SAA4C;AAClE,MAAI,OAAO,QAAQ,SAAS,UAAU;AACpC,WAAO,QAAQ,KAAK,YAAY;AAAA,EAClC;AACA,MAAI,OAAO,QAAQ,SAAS,UAAU;AACpC,WAAO,QAAQ,KAAK,YAAY;AAAA,EAClC;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,SAAuD;AACjF,MAAI,YAAY,QAAW;AACzB,WAAO;AAAA,EACT;AACA,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAASA,qBACP,UACuC;AACvC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,WAAW,IAAI,eAAe,GAAG,CAAC,GAAG;AACvC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,uBACpB,UACA,UAAmC,CAAC,GACN;AAC9B,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,gCAAgC;AAE7E,QAAM,eAAe,aAAa,QAAQ,KAAK;AAG/C,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,SACJ,QAAQ,WACP,CAAC,SAAiB,UAAyB;AAE1C,YAAQ,KAAK,sBAAsB,OAAO,IAAI,KAAK;AAAA,EACrD;AACF,QAAM,gBAAgB,QAAQ,SAC5B,QAAQ,eAAe,SACnB,SAAS,OACT,QAAQ,aAAa,WAAW;AAEtC,QAAM,aAAa,QAAQ;AAE3B,QAAM,iBAAiB,CAAC,UAA+B;AACrD,QAAI,CAAC,YAAY;AACf;AAAA,IACF;AACA,QAAI;AACF,iBAAW,KAAK;AAAA,IAClB,SAAS,KAAK;AACZ,aAAO,6BAA6B,GAAG;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,WAAW,OACf,MACA,WACA,OACA,aACkB;AAClB,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,SAAS,SAAS,MAAM;AAAA,QACrC,MAAM;AAAA,QACN,UAAU;AAAA,UACR,WAAW,EAAE,QAAQ,MAAM;AAAA,UAC3B,GAAI,QAAQ,mBAAmB,SAAY,CAAC,IAAI,EAAE,gBAAgB,QAAQ,eAAe;AAAA,QAC3F;AAAA,QACA,GAAI,kBAAkB,SAAY,EAAE,MAAM,cAAc,IAAI,CAAC;AAAA,QAC7D,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/C,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,CAAC,UAAU;AACb,cAAM;AAAA,MACR;AACA,aAAO,kDAAkD,GAAG;AAC5D;AAAA,IACF;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAM,gBAAgB,iBAAiB,OAAO,QAAQ;AACtD,UAAM,oBAAoB;AAAA,MACxB,MAAM;AAAA,MACN,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,mBAAe;AAAA,MACb,GAAG;AAAA,MACH;AAAA,MACA,MAAM;AAAA,MACN,YAAY,kBAAkB;AAAA,IAChC,CAAC;AACD,QAAI,CAAC,WAAW,kBAAkB,SAAS;AACzC;AAAA,IACF;AAEA,UAAM,IAAI,yBAAyB;AAAA,MACjC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,MAAM;AAAA,MACN,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,gCAAgC,oBAAoB;AAAA,IAC/C,OAAO;AAAA,IACP,aAAa;AAAA,IACb,gBAAgB;AAAA,IAEzB,MAAe,qBACb,MACA,UACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,gBAAgB,GAAG;AACpD;AAAA,MACF;AACA,YAAM,UAAU;AAChB,YAAM,OAAoC,CAAC;AAC3C,iBAAW,SAAS,SAAS;AAC3B,mBAAW,KAAK,OAAO;AACrB,eAAK,KAAK,CAAC;AAAA,QACb;AAAA,MACF;AACA,YAAM,WAAWA,qBAAoB,IAAI;AACzC,UAAI,CAAC,UAAU;AACb;AAAA,MACF;AACA,YAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,gBAAgB,GAAG,KAAK;AAAA,IACnF;AAAA,IAEA,MAAe,eACb,MACA,SACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,SAAS,GAAG;AAC7C;AAAA,MACF;AACA,YAAM,OAAO,uBAAuB,OAAO;AAC3C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,SAAS,GAAG,KAAK;AAAA,IAC5E;AAAA,IAEA,MAAe,gBACb,MACA,UACA,OACe;AACf,UAAI,CAAC,eAAe,CAAC,aAAa,IAAI,aAAa,UAAU,GAAG;AAC9D;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,QAAQ;AAC9C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,WAAW,MAAM;AACvB,YAAM,SAAS,MAAM,uBAAuB,aAAa,UAAU,GAAG,OAAO,QAAQ;AAAA,IACvF;AAAA,IAEA,MAAe,qBACb,YACA,OACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,eAAe,GAAG;AACnD;AAAA,MACF;AACA,YAAM,OAAO,MAAM,KAAK;AACxB,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,eAAe,GAAG,KAAK;AAAA,IAClF;AAAA,IAEA,MAAe,aAAa,QAAiB,OAA8B;AACzE,UAAI,CAAC,aAAa,IAAI,aAAa,OAAO,GAAG;AAC3C;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,MAA2E;AACjH,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,OAAO,GAAG,KAAK;AAAA,IAC1E;AAAA,IAEA,MAAe,cACb,QACA,OACA,cACA,OACA,SACe;AACf,UAAI,CAAC,eAAe,CAAC,aAAa,IAAI,aAAa,QAAQ,GAAG;AAC5D;AAAA,MACF;AACA,YAAM,OAAO,OAAO,MAAM,EAAE,KAAK;AACjC,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,WAAW,SAAS;AAC1B,YAAM,SAAS,MAAM,uBAAuB,aAAa,QAAQ,GAAG,OAAO,QAAQ;AAAA,IACrF;AAAA,IAEA,MAAe,mBACb,WACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,aAAa,GAAG;AACjD;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,SAAS;AAC/C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,aAAa,GAAG,KAAK;AAAA,IAChF;AAAA,EACF;AAEA,SAAO,IAAI,wBAAwB;AACrC;AAzRA,IAqBM;AArBN;AAAA;AAAA;AAMA;AACA;AAOA;AAOA,IAAM,aAAkC,oBAAI,IAAI,CAAC,SAAS,MAAM,CAAC;AAAA;AAAA;;;ACrBjE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACGA,yBAA2B;;;ACC3B;AACA;AAsDA,SAAS,mBAAmB,OAAwB;AAClD,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,mBAAmB,SAAiD;AAC3E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,uBACP,SACuF;AACvF,MAAI,OAAO,QAAQ,YAAY,UAAU;AACvC,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAA6F,CAAC;AACpG,aAAW,QAAQ,QAAQ,SAAS;AAClC,QAAI,OAAO,SAAS,UAAU;AAC5B;AAAA,IACF;AACA,QAAI,KAAK,SAAS,eAAe;AAC/B,YAAM,OAAO,oBAAoB,KAAK,WAAW,SAAY,KAAK,SAAS,KAAK,MAAM;AACtF,UAAI,KAAK,KAAK,GAAG;AACf,YAAI,KAAK,EAAE,MAAM,UAAU,KAAK,UAAU,YAAY,KAAK,WAAW,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO,mBAAmB,KAAK;AAAA,EACjC;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,OAAO,MAAM,UAAU,UAAU;AAC7F,WAAO,MAAM;AAAA,EACf;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,MAAM,UAAU,QAAW;AACvF,WAAO,mBAAmB,MAAM,KAAK;AAAA,EACvC;AACA,MAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC1D,WAAO,MAAM,MACV,IAAI,CAAC,SAAU,SAAS,IAAI,KAAK,KAAK,SAAS,UAAU,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,EAAG,EACxG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAChC,KAAK,GAAG;AAAA,EACb;AACA,SAAO,mBAAmB,KAAK;AACjC;AAEA,SAAS,oBACP,UACiC;AACjC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,IAAI,KAAK,YAAY,MAAM,QAAQ;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAaO,SAAS,iBACd,UACA,UAA6B,CAAC,GACV;AACpB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,gBAAgB,QAAQ,SAC5B,QAAQ,eAAe,SACnB,SAAS,OACT,QAAQ,aAAa,WAAW;AAGtC,QAAM,kBAAkB,OACtB,MACA,MACA,UAA6B,EAAE,UAAU,QAAW,YAAY,OAAU,MACxD;AAClB,QAAI,CAAC,KAAK,KAAK,GAAG;AAChB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,WAAW,IAAI;AACjC,UAAM,SAAsB,MAAM,SAAS;AAAA,MACzC;AAAA,MACA;AAAA,QACE;AAAA,QACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,QAC7C,GAAI,kBAAkB,SAAY,EAAE,MAAM,cAAc,IAAI,CAAC;AAAA,MAC/D;AAAA,IACF;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAM,gBAAgB,iBAAiB,OAAO,QAAQ;AACtD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,MACA;AAAA,IACF;AACA,YAAQ,aAAa;AAAA,MACnB,GAAG;AAAA,MACH;AAAA,MACA,MAAM;AAAA,MACN,YAAY,kBAAkB;AAAA,IAChC,CAAC;AACD,QAAI,CAAC,WAAW,kBAAkB,SAAS;AACzC;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,yBAAyB;AAAA,MACvC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,IACF,CAAC;AACD,YAAQ,YAAY,GAAG;AACvB,UAAM;AAAA,EACR;AAEA,QAAM,aAAa,OAAO,WAA8D;AACtF,QAAI,OAAO,WAAW,GAAG;AACvB;AAAA,IACF;AACA,UAAM,OAAO,OAAO,OAAO,SAAS,CAAC;AACrC,UAAM,OAAO,KAAK,KAAK,YAAY;AAMnC,QAAI,SAAS,QAAQ;AACnB,iBAAW,EAAE,MAAAC,OAAM,UAAU,WAAW,KAAK,uBAAuB,IAAI,GAAG;AACzE,cAAM,gBAAgBA,OAAM,UAAU,eAAe,EAAE,UAAU,WAAW,CAAC;AAAA,MAC/E;AACA;AAAA,IACF;AAIA,UAAM,WAAW,oBAAoB,MAAM;AAC3C,QAAI,CAAC,UAAU;AACb;AAAA,IACF;AACA,UAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,QAAI,CAAC,MAAM;AACT;AAAA,IACF;AACA,UAAM,gBAAgB,MAAM,UAAU,UAAU;AAAA,EAClD;AAEA,QAAM,qBAAqB,OAAO,WAAgD;AAChF,QAAI,cAAc,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,GAAG;AAC3E,YAAM,gBAAgB,OAAO,MAAM,UAAU,UAAU;AAAA,IACzD;AACA,QAAI,QAAQ,iBAAiB,MAAM,QAAQ,OAAO,SAAS,GAAG;AAC5D,iBAAW,QAAQ,OAAO,WAAW;AACnC,YAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,QACF;AACA,cAAM,YAAY,KAAK,SAAS,SAAY,KAAK,OAAO,KAAK;AAC7D,cAAM,OACJ,OAAO,cAAc,WAAW,YAAY,mBAAmB,SAAS;AAC1E,cAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,cAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC3E,YAAI,KAAK,KAAK,GAAG;AACf,gBAAM,gBAAgB,MAAM,UAAU,WAAW,EAAE,UAAU,WAAW,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IAEnB,MAAM,aAA6E;AAAA,MACjF;AAAA,MACA;AAAA,IACF,GAAgD;AAC9C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,SAAS,MAAM,WAAW;AAChC,YAAM,mBAAmB,MAAM;AAC/B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAA0F;AAAA,MAC9F;AAAA,MACA;AAAA,IACF,GAA8C;AAC5C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,EAAE,QAAQ,GAAG,KAAK,IAAI,MAAM,SAAS;AAC3C,UAAI,CAAC,YAAY;AACf,eAAO,EAAE,QAAQ,GAAG,KAAK;AAAA,MAC3B;AAEA,UAAI,WAAW;AACf,YAAM,cAAc,OAAO;AAAA,QACzB,IAAI,gBAAkC;AAAA,UACpC,UAAU,OAAO,YAAkB;AACjC,kBAAM,OAAO;AACb,gBAAI,QAAQ,KAAK,SAAS,cAAc;AACtC,oBAAM,QAAQ,KAAK,aAAa,KAAK,SAAS;AAC9C,0BAAY;AAAA,YACd;AACA,uBAAW,QAAQ,KAAK;AAAA,UAC1B;AAAA,UACA,MAAM,MAAM,YAA2B;AACrC,gBAAI,CAAC,SAAS,KAAK,GAAG;AACpB;AAAA,YACF;AACA,gBAAI;AACF,oBAAM,gBAAgB,UAAU,UAAU,UAAU;AAAA,YACtD,SAAS,KAAK;AACZ,kBAAI,eAAe,0BAA0B;AAC3C,2BAAW,QAAQ,EAAE,MAAM,SAAS,OAAO,IAAI,CAAC;AAChD;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,EAAE,QAAQ,aAAa,GAAG,KAAK;AAAA,IACxC;AAAA,EACF;AACF;;;ADjUA;;;AEHO,IAAM,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,mBAAmB;AAAA,EACnB,gBAAgB;AAAA,EAChB,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,mBAAmB;AAAA,EACnB,uBAAuB;AAAA,EACvB,oBAAoB;AACtB;AAUO,IAAM,mBAAmB;AAAA,EAC9B,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,IAAM,mBAAmB;AAAA,EAC9B,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,IAAM,uBAAuB;AAAA,EAClC,CAAC,QAAQ,MAAM,GAAG;AAAA,EAClB,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,YAAY,GACnB;AAAA,EACF,CAAC,QAAQ,gBAAgB,GACvB;AAAA,EACF,CAAC,QAAQ,iBAAiB,GACxB;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,iBAAiB,GACxB;AAAA,EACF,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,kBAAkB,GACzB;AACJ;AAEA,IAAM,sBAAsB,IAAI,IAAY,gBAAgB;AAC5D,IAAM,sBAAsB,IAAI,IAAY,gBAAgB;AAErD,SAAS,iBAAiB,OAA8C;AAC7E,SAAO,OAAO,UAAU,YAAY,oBAAoB,IAAI,KAAK;AACnE;AAEO,SAAS,iBAAiB,OAA8C;AAC7E,SAAO,OAAO,UAAU,YAAY,oBAAoB,IAAI,KAAK;AACnE;AAEO,SAAS,wBACd,OACA,YAAY,mBACI;AAChB,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO,iBAAiB,KAAK,IAAI,QAAS;AAC5C;AAEO,SAAS,wBACd,OACA,YAAY,WACI;AAChB,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,QAAQ;AACzD,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO,iBAAiB,KAAK,IAAI,QAAS;AAC5C;AAEO,SAAS,2BACd,QACA,WAC+D;AAC/D,MAAI,WAAW,UAAa,WAAW,MAAM;AAC3C,WAAO;AAAA,EACT;AACA,MAAI,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AACvD,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,MAAM,CAAC,EAAE;AAAA,EAC5E;AACA,QAAM,MAA+C,CAAC;AACtD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,UAAM,gBAAgB,wBAAwB,KAAK,GAAG,SAAS,MAAM;AACrE,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,IAAI,MAAM,qBAAqB,SAAS,cAAc,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IACnF;AACA,QAAI,aAAa,IAAI;AAAA,EACvB;AACA,SAAO,OAAO,OAAO,GAAG;AAC1B;;;AChIA,SAAS,gBAAgB,MAAuB;AAC9C,SAAO,QAAQ,SAAU,QAAQ;AACnC;AAEA,SAAS,eAAe,MAAuB;AAC7C,SAAO,QAAQ,SAAU,QAAQ;AACnC;AAEO,SAAS,aAAa,MAAsB;AACjD,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,OAAO,KAAK,WAAW,CAAC;AAC9B,QAAI,gBAAgB,IAAI,GAAG;AACzB,UAAI,IAAI,IAAI,KAAK,UAAU,eAAe,KAAK,WAAW,IAAI,CAAC,CAAC,GAAG;AACjE,eAAO,KAAK,CAAC;AACb,eAAO,KAAK,IAAI,CAAC;AACjB;AAAA,MACF;AACA;AAAA,IACF;AACA,QAAI,CAAC,eAAe,IAAI,GAAG;AACzB,aAAO,KAAK,CAAC;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;;;AHJO,IAAM,cAAc;AACpB,IAAM,qBAAqB;AAClC,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,uBAAuB,KAAK;AAMlC,IAAM,iBAAiB;AAkCvB,SAAS,YAAY,OAAgB,eAAwD;AAC3F,MAAI;AACJ,MAAI,UAAU,YAAY,UAAU,UAAU,UAAU,SAAS;AAC/D,mBAAe;AAAA,EACjB,WAAW,UAAU,QAAW;AAC9B,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AAKA,SAAO,iBAAiB;AAC1B;AAEA,SAAS,WAAW,YAA2D;AAC7E,SAAO,eAAe,SAAY,SAAY,aAAa,WAAW;AACxE;AAEA,SAAS,wBACP,MACA,eACa;AACb,MAAI,KAAK,eAAe,YAAY,KAAK,eAAe,aAAa;AACnE,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACA,QAAM,SAUF;AAAA,IACF,YAAY,KAAK;AAAA,IACjB,OAAO,OAAO,KAAK,KAAK;AAAA,IACxB,WAAW,OAAO,KAAK,SAAS;AAAA,EAClC;AACA,QAAM,OAAO,YAAY,KAAK,MAAM,aAAa;AACjD,MAAI,SAAS,QAAW;AACtB,WAAO,OAAO;AAAA,EAChB;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,WAAO,iBAAiB,wBAAwB,KAAK,eAAe;AAAA,EACtE;AACA,MAAI,KAAK,mBAAmB,QAAW;AACrC,UAAM,gBAAgB,2BAA2B,KAAK,gBAAgB,gBAAgB;AACtF,QAAI,kBAAkB,QAAW;AAC/B,aAAO,gBAAgB;AAAA,IACzB;AAAA,EACF;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,UAAM,iBAAiB,2BAA2B,KAAK,iBAAiB,iBAAiB;AACzF,QAAI,mBAAmB,QAAW;AAChC,aAAO,iBAAiB;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,UAAM,iBAAiB,2BAA2B,KAAK,iBAAiB,iBAAiB;AACzF,QAAI,mBAAmB,QAAW;AAChC,aAAO,iBAAiB;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,KAAK,eAAe,QAAW;AACjC,WAAO,aAAa,+BAA+B,KAAK,UAAU;AAAA,EACpE;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAASC,UAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,gBACP,UACA,MAKwB;AACxB,QAAM,UAAmC,EAAE,GAAI,YAAY,CAAC,EAAG;AAC/D,QAAM,WAAW,QAAQ;AACzB,MAAI,aAAa,UAAa,CAACA,UAAS,QAAQ,GAAG;AACjD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,UAAQ,WAAW;AAAA,IACjB,GAAIA,UAAS,QAAQ,IAAI,WAAW,CAAC;AAAA,IACrC,cAAc;AAAA,IACd,aAAa;AAAA,IACb,YAAY,KAAK;AAAA,IACjB,GAAI,KAAK,eAAe,SAAY,CAAC,IAAI,EAAE,aAAa,KAAK,WAAW;AAAA,IACxE,GAAI,KAAK,eAAe,SACpB,CAAC,IACD,EAAE,YAAY,wBAAwB,KAAK,UAAU,EAAE;AAAA,EAC7D;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,SAAqD;AACpF,SAAO;AAAA,IACL,GAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,IAC9D,GAAI,QAAQ,aAAa,SACrB,CAAC,IACD;AAAA,MACE,UAAU;AAAA,QACR,MAAM,QAAQ,SAAS;AAAA,QACvB,GAAI,QAAQ,SAAS,OAAO,SAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,SAAS,GAAG;AAAA,QACvE,GAAI,QAAQ,SAAS,aAAa,SAC9B,CAAC,IACD,EAAE,WAAW,QAAQ,SAAS,SAAS;AAAA,MAC7C;AAAA,IACF;AAAA,EACN;AACF;AAEA,SAAS,+BAA+B,OAAoC;AAC1E,MAAI,CAACA,UAAS,KAAK,GAAG;AACpB,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,MAAI,MAAM,WAAW,WAAW,MAAM,WAAW,SAAS;AACxD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,MAAI,OAAO,MAAM,mBAAmB,YAAY,MAAM,eAAe,WAAW,GAAG;AACjF,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AACA,MAAI,MAAM,YAAY,UAAa,OAAO,MAAM,YAAY,UAAU;AACpE,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,SAAO,OAAO,OAAO;AAAA,IACnB,QAAQ,MAAM;AAAA,IACd,GAAI,MAAM,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ;AAAA,IAC/D,eAAe,MAAM;AAAA,EACvB,CAAC;AACH;AAEA,eAAe,oBAAoB,UAAqC;AACtE,MAAI,CAAC,SAAS,MAAM;AAClB,WAAO,SAAS,KAAK,EAAE,KAAK,CAACC,UAASA,MAAK,MAAM,GAAG,oBAAoB,CAAC,EAAE,MAAM,MAAM,EAAE;AAAA,EAC3F;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,SAAuB,CAAC;AAC9B,MAAI,YAAY;AAChB,MAAI;AACF,WAAO,YAAY,GAAG;AACpB,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,MAAM;AACR;AAAA,MACF;AACA,UAAI,CAAC,OAAO;AACV;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,aAAa,YAAY,MAAM,MAAM,GAAG,SAAS,IAAI;AACzE,aAAO,KAAK,KAAK;AACjB,mBAAa,MAAM;AACnB,UAAI,MAAM,aAAa,MAAM,YAAY;AACvC;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,UAAM,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EAC7C;AAEA,QAAM,QAAQ,OAAO,OAAO,CAAC,KAAK,UAAU,MAAM,MAAM,YAAY,CAAC;AACrE,QAAM,OAAO,IAAI,WAAW,KAAK;AACjC,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,SAAK,IAAI,OAAO,MAAM;AACtB,cAAU,MAAM;AAAA,EAClB;AACA,SAAO,IAAI,YAAY,EAAE,OAAO,IAAI;AACtC;AAGA,eAAe,oBAAoB,UAAmC;AACpE,MAAI;AACF,QAAI,SAAS,MAAM;AACjB,UAAI,CAAC,SAAS,KAAK,QAAQ;AACzB,cAAM,SAAS,KAAK,OAAO;AAAA,MAC7B;AACA;AAAA,IACF;AACA,UAAM,SAAS,KAAK;AAAA,EACtB,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,iBAAiB,OAAyB;AACjD,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,MAA6B;AAC3C,SAAO,SAAS,gBAAgB,SAAS;AAC3C;AAQA,eAAe,oBAAuB,MAAwB,QAAiC;AAC7F,MAAI;AACF,WAAO,MAAM,KAAK;AAAA,EACpB,SAAS,OAAO;AACd,QAAI,OAAO,WAAW,iBAAiB,KAAK,GAAG;AAC7C,YAAM,OAAO;AAAA,IACf;AACA,UAAM;AAAA,EACR;AACF;AAYA,SAAS,oBAAoB,WAAmB,cAA2C;AACzF,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM;AAC7B,eAAW;AAAA,MACT,IAAI,aAAa,4CAA4C,cAAc;AAAA,IAC7E;AAAA,EACF,GAAG,SAAS;AACZ,QAAM,gBAAgB,MAAY;AAChC,eAAW,MAAM,cAAc,MAAM;AAAA,EACvC;AACA,gBAAc,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AACrE,SAAO;AAAA,IACL,QAAQ,WAAW;AAAA,IACnB,SAAS,MAAM;AACb,mBAAa,KAAK;AAClB,oBAAc,oBAAoB,SAAS,aAAa;AAAA,IAC1D;AAAA,EACF;AACF;AAEA,SAAS,MAAM,IAAY,QAAqC;AAC9D,SAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC5C,QAAI,QAAQ,SAAS;AACnB,aAAO,OAAO,MAAM;AACpB;AAAA,IACF;AACA,UAAM,UAAU,MAAY;AAC1B,mBAAa,KAAK;AAClB,aAAO,QAAQ,MAAM;AAAA,IACvB;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAQ,oBAAoB,SAAS,OAAO;AAC5C,cAAQ;AAAA,IACV,GAAG,EAAE;AACL,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAC3D,CAAC;AACH;AAWO,IAAM,WAAN,MAAe;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEQ;AAAA,EAEjB,YAAY,SAA0B;AACpC,QAAI,CAAC,QAAQ,QAAQ;AACnB,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AACA,QAAI,CAAC,QAAQ,QAAQ;AACnB,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AACA,SAAK,SAAS,QAAQ;AACtB,SAAK,SAAS,QAAQ;AACtB,SAAK,YAAY,QAAQ,aAAa;AACtC,QAAI,OAAO,KAAK,cAAc,YAAY,CAAC,OAAO,SAAS,KAAK,SAAS,KAAK,KAAK,YAAY,GAAG;AAChG,YAAM,IAAI,MAAM,iEAAiE,KAAK,SAAS,EAAE;AAAA,IACnG;AACA,QAAI,KAAK,YAAY,gBAAgB;AACnC,YAAM,IAAI;AAAA,QACR,uCAAuC,cAAc,YAAY,KAAK,SAAS;AAAA,MACjF;AAAA,IACF;AACA,SAAK,OAAO,QAAQ,QAAQ,WAAW,QAAQ,UAAU;AACzD,SAAK,aAAa,KAAK,SAAS;AAChC,SAAK,UAAU,OAAO,OAAO;AAAA,MAC3B,aAAa,KAAK;AAAA,MAClB,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,SAAS,MAAc,UAA2B,CAAC,GAAyB;AAChF,UAAM,YAAY,QAAQ,iBAAa,+BAAW;AAClD,WAAO,KAAK,eAAe,aAAa,IAAI,GAAG,SAAS,EAAE,UAAU,CAAC;AAAA,EACvE;AAAA,EAEA,MAAM,cACJ,OACA,UAAgC,CAAC,GACT;AACxB,QAAI,MAAM,WAAW,GAAG;AACtB,YAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AACA,QAAI,QAAQ,UAAU,UAAa,QAAQ,MAAM,WAAW,MAAM,QAAQ;AACxE,YAAM,IAAI;AAAA,QACR,0BAA0B,QAAQ,MAAM,MAAM,gCAAgC,MAAM,MAAM;AAAA,MAC5F;AAAA,IACF;AACA,QAAI,QAAQ,cAAc,UAAa,QAAQ,UAAU,WAAW,MAAM,QAAQ;AAChF,YAAM,IAAI;AAAA,QACR,8BAA8B,QAAQ,UAAU,MAAM,gCAAgC,MAAM,MAAM;AAAA,MACpG;AAAA,IACF;AACA,QAAI,QAAQ,aAAa,UAAa,QAAQ,SAAS,WAAW,MAAM,QAAQ;AAC9E,YAAM,IAAI;AAAA,QACR,6BAA6B,QAAQ,SAAS,MAAM,gCAAgC,MAAM,MAAM;AAAA,MAClG;AAAA,IACF;AACA,QAAI,QAAQ,eAAe,UAAa,QAAQ,WAAW,WAAW,MAAM,QAAQ;AAClF,YAAM,IAAI;AAAA,QACR,+BAA+B,QAAQ,WAAW,MAAM,gCAAgC,MAAM,MAAM;AAAA,MACtG;AAAA,IACF;AAEA,UAAM,YAAY,QAAQ,iBAAa,+BAAW;AAClD,UAAM,UAAgC;AAAA,MACpC,OAAO,MAAM,IAAI,CAAC,SAAS,aAAa,IAAI,CAAC;AAAA,IAC/C;AACA,UAAM,gBAAgB,QAAQ,QAAQ,KAAK;AAC3C,QAAI,kBAAkB,QAAW;AAC/B,cAAQ,OAAO;AAAA,IACjB;AACA,QAAI,QAAQ,SAAS,QAAQ,MAAM,SAAS,GAAG;AAC7C,cAAQ,QAAQ,QAAQ,MAAM,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;AAAA,IACpD;AACA,QAAI,QAAQ,aAAa,QAAQ,UAAU,SAAS,GAAG;AACrD,cAAQ,aAAa,QAAQ,UAAU,IAAI,CAAC,MAAO,MAAM,SAAY,OAAO,CAAE;AAAA,IAChF;AACA,YAAQ,WAAW,MAAM;AAAA,MAAI,CAAC,GAAG,UAC/B,gBAAgB,QAAQ,WAAW,KAAK,GAAG;AAAA,QACzC;AAAA,QACA,YAAY;AAAA,QACZ,GAAI,QAAQ,aAAa,KAAK,MAAM,SAChC,CAAC,IACD,EAAE,YAAY,QAAQ,WAAW,KAAK,EAAE;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,UAAM,OAAO,MAAM,KAAK,cAAqC,SAAS,QAAQ,MAAM;AACpF,QAAI,CAAC,MAAM,QAAQ,KAAK,WAAW,GAAG;AACpC,YAAM,IAAI,MAAM,iDAAiD;AAAA,IACnE;AACA,QAAI,KAAK,YAAY,WAAW,QAAQ,MAAM,QAAQ;AACpD,YAAM,IAAI;AAAA,QACR,yCAAyC,KAAK,YAAY,MAAM,0CAA0C,QAAQ,MAAM,MAAM;AAAA,MAChI;AAAA,IACF;AACA,WAAO,KAAK,YAAY,IAAI,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAAA,EAC9E;AAAA,EAEA,mBACE,UAAmC,CAAC,GACjB;AACnB,WAAO,oEAAkC;AAAA,MAAK,CAAC,MAC7C,EAAE,uBAAuB,MAAM,OAAO;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,aAAa,UAA6B,CAAC,GAAuB;AAChE,WAAO,iBAAiB,MAAM,OAAO;AAAA,EACvC;AAAA,EAEA,MAAc,cACZ,SACA,cACA,aAAqB,qBACT;AAGZ,kBAAc,eAAe;AAG7B,UAAM,OAAO,KAAK,UAAU,OAAO;AACnC,aAAS,UAAU,GAAG,WAAW,YAAY,WAAW;AACtD,oBAAc,eAAe;AAC7B,YAAM,gBAAgB,oBAAoB,KAAK,WAAW,YAAY;AACtE,UAAI;AACF,cAAM,WAAW,MAAM,MAAM,KAAK,QAAQ;AAAA,UACxC,QAAQ;AAAA,UACR,SAAS,KAAK;AAAA,UACd;AAAA,UACA,UAAU;AAAA,UACV,QAAQ,cAAc;AAAA,QACxB,CAAC;AACD,YAAI,SAAS,WAAW,OAAO,YAAY,YAAY;AACrD,cAAI,CAAC,SAAS,IAAI;AAChB,kBAAM,YAAY,MAAM,oBAAoB,QAAQ;AAGpD,0BAAc,OAAO,eAAe;AACpC,kBAAM,IAAI,iBAAiB;AAAA,cACzB,QAAQ,SAAS;AAAA,cACjB,YAAY,SAAS;AAAA,cACrB,MAAM;AAAA,YACR,CAAC;AAAA,UACH;AACA,iBAAO,MAAM;AAAA,YACX,MAAM,SAAS,KAAK;AAAA,YACpB,cAAc;AAAA,UAChB;AAAA,QACF;AACA,cAAM,oBAAoB,QAAQ;AAAA,MACpC,UAAE;AACA,sBAAc,QAAQ;AAAA,MACxB;AACA,YAAM,MAAM,KAAK,IAAI,KAAK,SAAS,mBAAmB,IAAI,KAAM,YAAY;AAAA,IAC9E;AACA,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAAA,EAEA,MAAc,eACZ,MACA,SACA,cAGsB;AACtB,UAAM,UAAiC,EAAE,KAAK;AAC9C,UAAM,gBAAgB,QAAQ,QAAQ,KAAK;AAC3C,QAAI,kBAAkB,QAAW;AAC/B,cAAQ,OAAO;AAAA,IACjB;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,OAAO,QAAQ;AAAA,IACzB;AACA,QAAI,QAAQ,aAAa,QAAW;AAClC,cAAQ,YAAY,QAAQ;AAAA,IAC9B;AACA,YAAQ,WAAW,gBAAgB,QAAQ,UAAU;AAAA,MACnD,GAAG;AAAA,MACH,GAAI,QAAQ,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;AAAA,IAC/E,CAAC;AACD,UAAM,OAAO,MAAM,KAAK,cAAsC,SAAS,QAAQ,MAAM;AACrF,WAAO,wBAAwB,MAAM,aAAa;AAAA,EACpD;AACF;;;AD3gBA;AAKA;","names":["findLastUserMessage","text","isRecord","body"]}
+{"version":3,"sources":["../src/exceptions.ts","../src/hooks.ts","../src/utils/extract.ts","../src/adapters/langchain.ts","../src/index.ts","../src/firewall.ts","../src/adapters/vercel.ts","../src/outcomes.ts","../src/sanitization.ts"],"sourcesContent":["// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { HookLabel } from \"./hooks.js\";\nimport type { BlockResult } from \"./types.js\";\n\nconst MAX_PROMPT_DISPLAY_LEN = 100;\n\nexport interface MalformedInputDetails {\n  field?: string;\n  inputIndex?: number;\n  charOffset?: number;\n  malformedToken?: string;\n  codePoint?: string;\n  reason?: string;\n}\n\nexport class FirewallBlockedException extends Error {\n  readonly score: number;\n  readonly threshold: number;\n  readonly promptText: string;\n  readonly runId: string | undefined;\n  readonly hook: HookLabel | undefined;\n  readonly toolName: string | undefined;\n  readonly toolCallId: string | undefined;\n  readonly result: BlockResult | undefined;\n\n  constructor(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    runId?: string;\n    hook?: HookLabel;\n    toolName?: string;\n    toolCallId?: string;\n    result?: BlockResult;\n  }) {\n    super(FirewallBlockedException.formatMessage(params));\n    this.name = \"FirewallBlockedException\";\n    this.score = params.score;\n    this.threshold = params.threshold;\n    this.promptText = params.promptText;\n    this.runId = params.runId;\n    this.hook = params.hook;\n    this.toolName = params.toolName;\n    this.toolCallId = params.toolCallId;\n    this.result = params.result;\n    Object.setPrototypeOf(this, FirewallBlockedException.prototype);\n  }\n\n  private static formatMessage(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    result?: BlockResult;\n  }): string {\n    const truncated =\n      params.promptText.length > MAX_PROMPT_DISPLAY_LEN\n        ? `${params.promptText.slice(0, MAX_PROMPT_DISPLAY_LEN)}...`\n        : params.promptText;\n    if (\n      params.result?.prediction !== \"MALICIOUS\" &&\n      params.result?.governance?.action === \"block\"\n    ) {\n      return `Request blocked by Silmaril Firewall governance policy: '${truncated}'`;\n    }\n    return (\n      `Request blocked by Silmaril Firewall ` +\n      `(score=${params.score.toFixed(4)}, threshold=${params.threshold.toFixed(4)}): ` +\n      `'${truncated}'`\n    );\n  }\n}\n\n/** @deprecated Use FirewallBlockedException instead. */\nexport const PromptBlockedException = FirewallBlockedException;\n/** @deprecated Use FirewallBlockedException instead. */\nexport type PromptBlockedException = FirewallBlockedException;\n\nexport class SilmarilApiError extends Error {\n  readonly status: number;\n  readonly statusText: string;\n  readonly body: string;\n  readonly details: MalformedInputDetails | undefined;\n  readonly error: string | undefined;\n  readonly apiMessage: string | undefined;\n\n  constructor(params: {\n    status: number;\n    statusText: string;\n    body: string;\n    details?: MalformedInputDetails;\n    error?: string;\n    apiMessage?: string;\n  }) {\n    const statusText = params.statusText ? ` ${params.statusText}` : \"\";\n    super(`Silmaril API error ${params.status}${statusText}`);\n    this.name = \"SilmarilApiError\";\n    this.status = params.status;\n    this.statusText = params.statusText;\n    this.body = params.body;\n    const parsed = parseErrorBody(params.body);\n    this.details = params.details ?? parsed.details;\n    this.error = params.error ?? parsed.error;\n    this.apiMessage = params.apiMessage ?? parsed.apiMessage;\n    Object.setPrototypeOf(this, SilmarilApiError.prototype);\n  }\n}\n\nfunction parseErrorBody(body: string): {\n  details: MalformedInputDetails | undefined;\n  error: string | undefined;\n  apiMessage: string | undefined;\n} {\n  try {\n    const parsed = JSON.parse(body) as unknown;\n    if (!parsed || typeof parsed !== \"object\") {\n      return { details: undefined, error: undefined, apiMessage: undefined };\n    }\n    const data = parsed as Record<string, unknown>;\n    return {\n      details:\n        data.details && typeof data.details === \"object\"\n          ? (data.details as MalformedInputDetails)\n          : undefined,\n      error: typeof data.error === \"string\" ? data.error : undefined,\n      apiMessage: typeof data.message === \"string\" ? data.message : undefined,\n    };\n  } catch {\n    return { details: undefined, error: undefined, apiMessage: undefined };\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.TOOL_END,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nconst SKIP_ROLES: ReadonlySet<string> = new Set([\"ai\", \"assistant\"]);\nconst SYSTEM_ROLES: ReadonlySet<string> = new Set([\"system\"]);\nconst TOOL_ROLES: ReadonlySet<string> = new Set([\"tool\", \"function\"]);\n\ntype MessageContent = string | ReadonlyArray<string | { type?: string; text?: string }>;\n\ninterface DucktypedMessage {\n  role?: string;\n  type?: string;\n  content?: MessageContent;\n}\n\ninterface DucktypedGeneration {\n  text?: string;\n}\n\ninterface DucktypedLLMResult {\n  generations?: ReadonlyArray<ReadonlyArray<DucktypedGeneration>>;\n}\n\ninterface DucktypedDocument {\n  pageContent?: string;\n}\n\nfunction extractContentText(content: MessageContent | undefined): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  if (Array.isArray(content)) {\n    const parts: string[] = [];\n    for (const block of content) {\n      if (typeof block === \"string\") {\n        parts.push(block);\n      } else if (block && typeof block === \"object\" && block.type === \"text\") {\n        parts.push(block.text ?? \"\");\n      }\n    }\n    return parts.join(\" \");\n  }\n  return \"\";\n}\n\nfunction getRole(message: DucktypedMessage): string {\n  if (message.role !== undefined) {\n    return message.role.toLowerCase();\n  }\n  if (typeof message.type === \"string\") {\n    return message.type.toLowerCase();\n  }\n  return \"\";\n}\n\nexport function extractTextFromMessages(\n  messages: ReadonlyArray<DucktypedMessage>,\n  options: { includeSystem?: boolean; includeTool?: boolean } = {},\n): string {\n  const includeSystem = options.includeSystem ?? true;\n  const includeTool = options.includeTool ?? true;\n  const parts: string[] = [];\n  for (const message of messages) {\n    const role = getRole(message);\n    if (SKIP_ROLES.has(role)) {\n      continue;\n    }\n    if (!includeSystem && SYSTEM_ROLES.has(role)) {\n      continue;\n    }\n    if (!includeTool && TOOL_ROLES.has(role)) {\n      continue;\n    }\n    const text = extractContentText(message.content);\n    const stripped = text.trim();\n    if (stripped) {\n      parts.push(stripped);\n    }\n  }\n  return parts.join(\"\\n\");\n}\n\nexport function extractTextFromPrompts(prompts: readonly string[]): string {\n  return prompts\n    .map((p) => p.trim())\n    .filter((p) => p.length > 0)\n    .join(\"\\n\");\n}\n\nexport function extractTextFromToolInput(inputStr: string): string {\n  return inputStr.trim();\n}\n\nexport function extractTextFromLLMResult(response: DucktypedLLMResult): string {\n  const parts: string[] = [];\n  for (const genList of response.generations ?? []) {\n    for (const gen of genList) {\n      const text = (gen.text ?? \"\").trim();\n      if (text) {\n        parts.push(text);\n      }\n    }\n  }\n  return parts.join(\"\\n\");\n}\n\nexport function extractTextFromDocuments(documents: ReadonlyArray<DucktypedDocument>): string {\n  const parts: string[] = [];\n  for (const doc of documents) {\n    const text = (doc.pageContent ?? \"\").trim();\n    if (text) {\n      parts.push(text);\n    }\n  }\n  return parts.join(\"\\n\");\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { BaseCallbackHandler } from \"@langchain/core/callbacks/base\";\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport {\n  FIREWALL_HOOK_TO_LABEL,\n  FirewallHook,\n  HookLabel,\n  resolveHooks,\n} from \"../hooks.js\";\nimport type { BlockResult, ClassifyEvent, LangChainAdapterOptions } from \"../types.js\";\nimport {\n  extractTextFromDocuments,\n  extractTextFromLLMResult,\n  extractTextFromPrompts,\n  extractTextFromToolInput,\n} from \"../utils/extract.js\";\n\nconst USER_ROLES: ReadonlySet<string> = new Set([\"human\", \"user\"]);\n\ninterface LangChainDucktypedMessage {\n  role?: string;\n  type?: string;\n  content?: string | ReadonlyArray<string | { type?: string; text?: string }>;\n}\n\nfunction getMessageRole(message: LangChainDucktypedMessage): string {\n  if (typeof message.role === \"string\") {\n    return message.role.toLowerCase();\n  }\n  if (typeof message.type === \"string\") {\n    return message.type.toLowerCase();\n  }\n  return \"\";\n}\n\nfunction extractMessageText(content: LangChainDucktypedMessage[\"content\"]): string {\n  if (content === undefined) {\n    return \"\";\n  }\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<LangChainDucktypedMessage>,\n): LangChainDucktypedMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (USER_ROLES.has(getMessageRole(msg))) {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport async function createLangChainHandler(\n  firewall: Firewall,\n  options: LangChainAdapterOptions = {},\n): Promise<BaseCallbackHandler> {\n  const { BaseCallbackHandler } = await import(\"@langchain/core/callbacks/base\");\n\n  const enabledHooks = resolveHooks(options.hooks);\n  // includeSystem remains inert for the user-only chat-model scan.\n  // includeTool still controls the explicit tool start and end callbacks.\n  const includeTool = options.includeTool ?? true;\n  const failOpen = options.failOpen ?? true;\n  const logger =\n    options.logger ??\n    ((message: string, error: unknown): void => {\n      // eslint-disable-next-line no-console\n      console.warn(`silmaril.firewall: ${message}`, error);\n    });\n  const requestedMode = options.mode ?? (\n    options.shadowMode === undefined\n      ? firewall.mode\n      : options.shadowMode ? \"shadow\" : \"block\"\n  );\n  const onClassify = options.onClassify;\n\n  const fireOnClassify = (event: ClassifyEvent): void => {\n    if (!onClassify) {\n      return;\n    }\n    try {\n      onClassify(event);\n    } catch (err) {\n      logger(\"onClassify callback threw\", err);\n    }\n  };\n\n  const classify = async (\n    text: string,\n    hookLabel: HookLabel,\n    runId: string,\n    toolName?: string,\n  ): Promise<void> => {\n    let result: BlockResult;\n    try {\n      result = await firewall.classify(text, {\n        hook: hookLabel,\n        metadata: {\n          langgraph: { run_id: runId },\n          ...(options.conversationId === undefined ? {} : { conversationId: options.conversationId }),\n        },\n        ...(requestedMode !== undefined ? { mode: requestedMode } : {}),\n        ...(toolName !== undefined ? { toolName } : {}),\n      });\n    } catch (err) {\n      if (!failOpen) {\n        throw err;\n      }\n      logger(\"classification failed, allowing prompt through\", err);\n      return;\n    }\n    const threshold = result.threshold;\n    const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n    const effectiveMode = requestedMode ?? result.mode ?? \"block\";\n    const commonEventFields = {\n      hook: hookLabel,\n      ...(toolName !== undefined ? { toolName } : {}),\n      runId,\n      text,\n      result,\n    };\n    fireOnClassify({\n      ...commonEventFields,\n      blocked,\n      mode: effectiveMode,\n      shadowMode: effectiveMode === \"shadow\",\n    });\n    if (!blocked || effectiveMode !== \"block\") {\n      return;\n    }\n\n    throw new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      runId,\n      hook: hookLabel,\n      ...(toolName !== undefined ? { toolName } : {}),\n      result,\n    });\n  };\n\n  class SilmarilFirewallHandler extends BaseCallbackHandler {\n    override name = \"silmaril_firewall_handler\";\n    override raiseError = true;\n    override awaitHandlers = true;\n\n    override async handleChatModelStart(\n      _llm: unknown,\n      messages: unknown,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.CHAT_MODEL_START)) {\n        return;\n      }\n      const batches = messages as ReadonlyArray<ReadonlyArray<LangChainDucktypedMessage>>;\n      const flat: LangChainDucktypedMessage[] = [];\n      for (const batch of batches) {\n        for (const m of batch) {\n          flat.push(m);\n        }\n      }\n      const lastUser = findLastUserMessage(flat);\n      if (!lastUser) {\n        return;\n      }\n      const text = extractMessageText(lastUser.content).trim();\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.CHAT_MODEL_START], runId);\n    }\n\n    override async handleLLMStart(\n      _llm: unknown,\n      prompts: string[],\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.LLM_START)) {\n        return;\n      }\n      const text = extractTextFromPrompts(prompts);\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.LLM_START], runId);\n    }\n\n    override async handleToolStart(\n      tool: { name?: string } | undefined,\n      inputStr: string,\n      runId: string,\n    ): Promise<void> {\n      if (!includeTool || !enabledHooks.has(FirewallHook.TOOL_START)) {\n        return;\n      }\n      const text = extractTextFromToolInput(inputStr);\n      if (!text) {\n        return;\n      }\n      const toolName = tool?.name;\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.TOOL_START], runId, toolName);\n    }\n\n    override async handleRetrieverStart(\n      _retriever: unknown,\n      query: string,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.RETRIEVER_START)) {\n        return;\n      }\n      const text = query.trim();\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.RETRIEVER_START], runId);\n    }\n\n    override async handleLLMEnd(output: unknown, runId: string): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.LLM_END)) {\n        return;\n      }\n      const text = extractTextFromLLMResult(output as { generations?: ReadonlyArray<ReadonlyArray<{ text?: string }>> });\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.LLM_END], runId);\n    }\n\n    override async handleToolEnd(\n      output: unknown,\n      runId: string,\n      _parentRunId?: string,\n      _tags?: string[],\n      _kwargs?: { name?: string },\n    ): Promise<void> {\n      if (!includeTool || !enabledHooks.has(FirewallHook.TOOL_END)) {\n        return;\n      }\n      const text = String(output).trim();\n      if (!text) {\n        return;\n      }\n      const toolName = _kwargs?.name;\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.TOOL_END], runId, toolName);\n    }\n\n    override async handleRetrieverEnd(\n      documents: ReadonlyArray<{ pageContent?: string }>,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.RETRIEVER_END)) {\n        return;\n      }\n      const text = extractTextFromDocuments(documents);\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.RETRIEVER_END], runId);\n    }\n  }\n\n  return new SilmarilFirewallHandler();\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport {\n  Firewall,\n  DEFAULT_TIMEOUT_MS,\n} from \"./firewall.js\";\n\nexport { FirewallBlockedException, PromptBlockedException, SilmarilApiError } from \"./exceptions.js\";\nexport type { MalformedInputDetails } from \"./exceptions.js\";\n\nexport type { FirewallMiddleware } from \"./adapters/vercel.js\";\n\nexport {\n  HookLabel,\n  FirewallHook,\n  DEFAULT_HOOKS,\n  INPUT_HOOKS,\n  OUTPUT_HOOKS,\n  ALL_HOOKS,\n  FIREWALL_HOOK_TO_LABEL,\n  resolveHooks,\n  prependHook,\n  prependToolName,\n} from \"./hooks.js\";\n\nexport {\n  Outcome,\n  PRIMARY_OUTCOMES,\n  HARMFUL_OUTCOMES,\n  OUTCOME_DESCRIPTIONS,\n  isPrimaryOutcome,\n  isHarmfulOutcome,\n  normalizePrimaryOutcome,\n  normalizeHarmfulOutcome,\n  normalizeHarmfulOutcomeMap,\n} from \"./outcomes.js\";\n\nexport type {\n  KnownPrimaryOutcome,\n  KnownHarmfulOutcome,\n  PrimaryOutcome,\n  HarmfulOutcome,\n  UnknownOutcome,\n} from \"./outcomes.js\";\n\nexport type {\n  BlockResult,\n  ClassifyEvent,\n  Prediction,\n  FirewallMode,\n  GovernanceAction,\n  GovernanceResourceKind,\n  GovernanceResource,\n  GovernanceContext,\n  GovernanceDecision,\n  ClassificationMetadata,\n  FirewallOptions,\n  ClassifyOptions,\n  ClassifyBatchOptions,\n  LangChainAdapterOptions,\n  LangChainFirewallHandler,\n  MiddlewareOptions,\n} from \"./types.js\";\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport { randomUUID } from \"node:crypto\";\n\nimport { createMiddleware, type FirewallMiddleware } from \"./adapters/vercel.js\";\nimport { SilmarilApiError } from \"./exceptions.js\";\nimport { normalizeHarmfulOutcomeMap, normalizePrimaryOutcome } from \"./outcomes.js\";\nimport { sanitizeText } from \"./sanitization.js\";\nimport type {\n  BlockResult,\n  ClassifyBatchOptions,\n  ClassifyOptions,\n  ClassificationMetadata,\n  FirewallOptions,\n  FirewallMode,\n  GovernanceContext,\n  GovernanceDecision,\n  LangChainAdapterOptions,\n  LangChainFirewallHandler,\n  MiddlewareOptions,\n  Prediction,\n} from \"./types.js\";\n\nexport const SDK_VERSION = \"0.7.3\";\nexport const DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_RETRIES = 5;\nconst MAX_BACKOFF_SECONDS = 30;\nconst MAX_ERROR_BODY_BYTES = 1 << 16;\n/**\n * Largest delay a timer can represent. Both `setTimeout` and the\n * `AbortSignal.timeout` this client used before silently collapse a larger\n * delay to 1 ms, which would turn a long timeout into an immediate abort.\n */\nconst MAX_TIMEOUT_MS = 2_147_483_647;\n\ninterface SingleClassifyPayload {\n  text: string;\n  mode?: FirewallMode;\n  hook?: string;\n  tool_name?: string;\n  metadata?: ClassificationMetadata;\n}\n\ninterface BatchClassifyPayload {\n  texts: readonly string[];\n  mode?: FirewallMode;\n  hooks?: readonly string[];\n  tool_names?: readonly (string | null)[];\n  metadata?: readonly (ClassificationMetadata | null)[];\n}\n\ninterface SingleClassifyResponse {\n  prediction: Prediction;\n  score: number;\n  threshold: number;\n  mode?: unknown;\n  primary_outcome?: unknown;\n  outcome_scores?: unknown;\n  detector_scores?: unknown;\n  detector_counts?: unknown;\n  governance?: unknown;\n}\n\ninterface BatchClassifyResponse {\n  predictions: readonly SingleClassifyResponse[];\n}\n\nfunction resolveMode(value: unknown, requestedMode?: FirewallMode): FirewallMode | undefined {\n  let responseMode: FirewallMode | undefined;\n  if (value === \"shadow\" || value === \"warn\" || value === \"block\") {\n    responseMode = value;\n  } else if (value !== undefined) {\n    throw new Error(\"Firewall: response mode must be shadow, warn, or block\");\n  }\n\n  // A supplied mode is the per-request override contract. Prefer it during\n  // rolling upgrades so a missing or stale response field cannot strengthen\n  // enforcement beyond what the caller requested.\n  return requestedMode ?? responseMode;\n}\n\nfunction legacyMode(shadowMode: boolean | undefined): FirewallMode | undefined {\n  return shadowMode === undefined ? undefined : shadowMode ? \"shadow\" : \"block\";\n}\n\nfunction blockResultFromResponse(\n  data: SingleClassifyResponse,\n  requestedMode?: FirewallMode,\n): BlockResult {\n  if (data.prediction !== \"BENIGN\" && data.prediction !== \"MALICIOUS\") {\n    throw new Error(\"Firewall: response prediction must be BENIGN or MALICIOUS\");\n  }\n  const result: {\n    prediction: Prediction;\n    score: number;\n    threshold: number;\n    mode?: FirewallMode;\n    primaryOutcome?: NonNullable<BlockResult[\"primaryOutcome\"]>;\n    outcomeScores?: NonNullable<BlockResult[\"outcomeScores\"]>;\n    detectorScores?: NonNullable<BlockResult[\"detectorScores\"]>;\n    detectorCounts?: NonNullable<BlockResult[\"detectorCounts\"]>;\n    governance?: GovernanceDecision;\n  } = {\n    prediction: data.prediction,\n    score: Number(data.score),\n    threshold: Number(data.threshold),\n  };\n  const mode = resolveMode(data.mode, requestedMode);\n  if (mode !== undefined) {\n    result.mode = mode;\n  }\n  if (data.primary_outcome !== undefined) {\n    result.primaryOutcome = normalizePrimaryOutcome(data.primary_outcome);\n  }\n  if (data.outcome_scores !== undefined) {\n    const outcomeScores = normalizeHarmfulOutcomeMap(data.outcome_scores, \"outcome_scores\");\n    if (outcomeScores !== undefined) {\n      result.outcomeScores = outcomeScores;\n    }\n  }\n  if (data.detector_scores !== undefined) {\n    const detectorScores = normalizeHarmfulOutcomeMap(data.detector_scores, \"detector_scores\");\n    if (detectorScores !== undefined) {\n      result.detectorScores = detectorScores;\n    }\n  }\n  if (data.detector_counts !== undefined) {\n    const detectorCounts = normalizeHarmfulOutcomeMap(data.detector_counts, \"detector_counts\");\n    if (detectorCounts !== undefined) {\n      result.detectorCounts = detectorCounts;\n    }\n  }\n  if (data.governance !== undefined) {\n    result.governance = governanceDecisionFromResponse(data.governance);\n  }\n  return Object.freeze(result);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction withSdkMetadata(\n  metadata: ClassificationMetadata | undefined,\n  info: {\n    requestId: string;\n    inputIndex?: number;\n    governance?: GovernanceContext;\n  },\n): ClassificationMetadata {\n  const payload: Record<string, unknown> = { ...(metadata ?? {}) };\n  const existing = payload.silmaril;\n  if (existing !== undefined && !isRecord(existing)) {\n    throw new Error(\"Firewall: metadata.silmaril must be an object when provided\");\n  }\n  payload.silmaril = {\n    ...(isRecord(existing) ? existing : {}),\n    sdk_language: \"typescript\",\n    sdk_version: SDK_VERSION,\n    request_id: info.requestId,\n    ...(info.inputIndex === undefined ? {} : { input_index: info.inputIndex }),\n    ...(info.governance === undefined\n      ? {}\n      : { governance: governanceContextToWire(info.governance) }),\n  };\n  return payload;\n}\n\nfunction governanceContextToWire(context: GovernanceContext): Record<string, unknown> {\n  return {\n    ...(context.agent === undefined ? {} : { agent: context.agent }),\n    ...(context.resource === undefined\n      ? {}\n      : {\n          resource: {\n            kind: context.resource.kind,\n            ...(context.resource.id === undefined ? {} : { id: context.resource.id }),\n            ...(context.resource.parentId === undefined\n              ? {}\n              : { parent_id: context.resource.parentId }),\n          },\n        }),\n  };\n}\n\nfunction governanceDecisionFromResponse(value: unknown): GovernanceDecision {\n  if (!isRecord(value)) {\n    throw new Error(\"Firewall: response governance must be an object\");\n  }\n  if (value.action !== \"allow\" && value.action !== \"block\") {\n    throw new Error(\"Firewall: response governance action must be allow or block\");\n  }\n  if (typeof value.policy_version !== \"string\" || value.policy_version.length === 0) {\n    throw new Error(\"Firewall: response governance policy_version must be a non-empty string\");\n  }\n  if (value.rule_id !== undefined && typeof value.rule_id !== \"string\") {\n    throw new Error(\"Firewall: response governance rule_id must be a string when provided\");\n  }\n  return Object.freeze({\n    action: value.action,\n    ...(value.rule_id === undefined ? {} : { ruleId: value.rule_id }),\n    policyVersion: value.policy_version,\n  });\n}\n\nasync function readCappedErrorBody(response: Response): Promise<string> {\n  if (!response.body) {\n    return response.text().then((body) => body.slice(0, MAX_ERROR_BODY_BYTES)).catch(() => \"\");\n  }\n\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let remaining = MAX_ERROR_BODY_BYTES;\n  try {\n    while (remaining > 0) {\n      const { done, value } = await reader.read();\n      if (done) {\n        break;\n      }\n      if (!value) {\n        continue;\n      }\n      const chunk = value.byteLength > remaining ? value.slice(0, remaining) : value;\n      chunks.push(chunk);\n      remaining -= chunk.byteLength;\n      if (chunk.byteLength < value.byteLength) {\n        break;\n      }\n    }\n  } catch {\n    return \"\";\n  } finally {\n    await reader.cancel().catch(() => undefined);\n  }\n\n  const total = chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0);\n  const body = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    body.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return new TextDecoder().decode(body);\n}\n\n/** Releases a response we will not read so a retry does not leak its socket. */\nasync function releaseDiscardedResponseBody(response: Response): Promise<void> {\n  try {\n    if (response.body) {\n      if (!response.body.locked) {\n        await response.body.cancel();\n      }\n      return;\n    }\n    await response.text();\n  } catch {\n    // The discarded body belongs to a response we already decided to retry.\n  }\n}\n\n/** Cleanup must not postpone caller cancellation or an attempt timeout. */\nasync function discardResponseBody(response: Response, signal: AbortSignal): Promise<void> {\n  signal.throwIfAborted();\n  let onAbort!: () => void;\n  const aborted = new Promise<never>((_resolve, reject) => {\n    onAbort = () => reject(signal.reason);\n    signal.addEventListener(\"abort\", onAbort, { once: true });\n  });\n  try {\n    await Promise.race([releaseDiscardedResponseBody(response), aborted]);\n  } finally {\n    signal.removeEventListener(\"abort\", onAbort);\n  }\n}\n\nfunction isAbortLikeError(error: unknown): boolean {\n  if (typeof error !== \"object\" || error === null) {\n    return false;\n  }\n  const name = (error as { name?: unknown }).name;\n  return name === \"AbortError\" || name === \"TimeoutError\";\n}\n\n/**\n * Reads a decoded body under an attempt signal. Native fetch can reject a body\n * read that the signal cancelled with a generic `AbortError`, which would drop\n * the caller's abort reason or the timeout reason. Only abort-caused failures\n * are rewritten; decode and transport errors are surfaced unchanged.\n */\nasync function readBodyUnderSignal<T>(read: () => Promise<T>, signal: AbortSignal): Promise<T> {\n  try {\n    return await read();\n  } catch (error) {\n    if (signal.aborted && isAbortLikeError(error)) {\n      throw signal.reason;\n    }\n    throw error;\n  }\n}\n\ninterface AttemptSignal {\n  readonly signal: AbortSignal;\n  dispose(): void;\n}\n\n/**\n * Combines the per-attempt timeout with an optional caller signal. The caller\n * signal is shared across sibling calls, so the listener and the timer are\n * released by `dispose()` once the attempt no longer needs them.\n */\nfunction createAttemptSignal(timeoutMs: number, callerSignal?: AbortSignal): AttemptSignal {\n  const controller = new AbortController();\n  const timer = setTimeout(() => {\n    controller.abort(\n      new DOMException(\"The operation was aborted due to timeout\", \"TimeoutError\"),\n    );\n  }, timeoutMs);\n  const onCallerAbort = (): void => {\n    // Body disposal may never settle, so do not wait for finally to release\n    // a timer that could keep a command hook alive beyond the caller deadline.\n    clearTimeout(timer);\n    controller.abort(callerSignal?.reason);\n  };\n  callerSignal?.addEventListener(\"abort\", onCallerAbort, { once: true });\n  return {\n    signal: controller.signal,\n    dispose: () => {\n      clearTimeout(timer);\n      callerSignal?.removeEventListener(\"abort\", onCallerAbort);\n    },\n  };\n}\n\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise<void>((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(signal.reason);\n      return;\n    }\n    const onAbort = (): void => {\n      clearTimeout(timer);\n      reject(signal?.reason);\n    };\n    const timer = setTimeout(() => {\n      signal?.removeEventListener(\"abort\", onAbort);\n      resolve();\n    }, ms);\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n  });\n}\n\n/**\n * Firewall client for the `/classify` API.\n *\n * Instance state is set once in the constructor and never mutated by a request,\n * so one client is safe to share across any number of concurrent `classify()`\n * and `classifyBatch()` promises within a single JavaScript runtime. Each\n * worker thread owns its own client: `Firewall` instances are not transferable\n * across `worker_threads` boundaries.\n */\nexport class Firewall {\n  readonly apiKey: string;\n  readonly apiUrl: string;\n  readonly timeoutMs: number;\n  readonly shadowMode: boolean;\n  readonly mode: FirewallMode | undefined;\n\n  private readonly headers: Readonly<Record<string, string>>;\n\n  constructor(options: FirewallOptions) {\n    if (!options.apiKey) {\n      throw new Error(\"Firewall: apiKey is required\");\n    }\n    if (!options.apiUrl) {\n      throw new Error(\"Firewall: apiUrl is required\");\n    }\n    this.apiKey = options.apiKey;\n    this.apiUrl = options.apiUrl;\n    this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n    if (typeof this.timeoutMs !== \"number\" || !Number.isFinite(this.timeoutMs) || this.timeoutMs < 0) {\n      throw new Error(`Firewall: timeoutMs must be a finite non-negative number, got ${this.timeoutMs}`);\n    }\n    if (this.timeoutMs > MAX_TIMEOUT_MS) {\n      throw new Error(\n        `Firewall: timeoutMs must be at most ${MAX_TIMEOUT_MS} ms, got ${this.timeoutMs}`,\n      );\n    }\n    this.mode = options.mode ?? legacyMode(options.shadowMode);\n    this.shadowMode = this.mode === \"shadow\";\n    this.headers = Object.freeze({\n      \"x-api-key\": this.apiKey,\n      \"content-type\": \"application/json\",\n    });\n  }\n\n  async classify(text: string, options: ClassifyOptions = {}): Promise<BlockResult> {\n    const requestId = options.requestId ?? randomUUID();\n    return this.classifySingle(sanitizeText(text), options, { requestId });\n  }\n\n  async classifyBatch(\n    texts: readonly string[],\n    options: ClassifyBatchOptions = {},\n  ): Promise<BlockResult[]> {\n    if (texts.length === 0) {\n      throw new Error(\"Firewall: texts must not be empty\");\n    }\n    if (options.hooks !== undefined && options.hooks.length !== texts.length) {\n      throw new Error(\n        `Firewall: hooks length ${options.hooks.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.toolNames !== undefined && options.toolNames.length !== texts.length) {\n      throw new Error(\n        `Firewall: toolNames length ${options.toolNames.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.metadata !== undefined && options.metadata.length !== texts.length) {\n      throw new Error(\n        `Firewall: metadata length ${options.metadata.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.governance !== undefined && options.governance.length !== texts.length) {\n      throw new Error(\n        `Firewall: governance length ${options.governance.length} does not match texts length ${texts.length}`,\n      );\n    }\n\n    const requestId = options.requestId ?? randomUUID();\n    const payload: BatchClassifyPayload = {\n      texts: texts.map((text) => sanitizeText(text)),\n    };\n    const requestedMode = options.mode ?? this.mode;\n    if (requestedMode !== undefined) {\n      payload.mode = requestedMode;\n    }\n    if (options.hooks && options.hooks.length > 0) {\n      payload.hooks = options.hooks.map((h) => String(h));\n    }\n    if (options.toolNames && options.toolNames.length > 0) {\n      payload.tool_names = options.toolNames.map((t) => (t === undefined ? null : t));\n    }\n    payload.metadata = texts.map((_, index) =>\n      withSdkMetadata(options.metadata?.[index], {\n        requestId,\n        inputIndex: index,\n        ...(options.governance?.[index] === undefined\n          ? {}\n          : { governance: options.governance[index] }),\n      }),\n    );\n    const data = await this.postWithRetry<BatchClassifyResponse>(payload, options.signal);\n    if (!Array.isArray(data.predictions)) {\n      throw new Error(\"Firewall: response predictions must be an array\");\n    }\n    if (data.predictions.length !== payload.texts.length) {\n      throw new Error(\n        `Firewall: response predictions length ${data.predictions.length} does not match submitted texts length ${payload.texts.length}`,\n      );\n    }\n    return data.predictions.map((p) => blockResultFromResponse(p, requestedMode));\n  }\n\n  asLangChainHandler<THandler = LangChainFirewallHandler>(\n    options: LangChainAdapterOptions = {},\n  ): Promise<THandler> {\n    return import(\"./adapters/langchain.js\").then((m) =>\n      m.createLangChainHandler(this, options) as Promise<THandler>,\n    );\n  }\n\n  asMiddleware(options: MiddlewareOptions = {}): FirewallMiddleware {\n    return createMiddleware(this, options);\n  }\n\n  private async postWithRetry<T>(\n    payload: SingleClassifyPayload | BatchClassifyPayload,\n    callerSignal?: AbortSignal,\n    maxRetries: number = DEFAULT_MAX_RETRIES,\n  ): Promise<T> {\n    // Cancellation outranks payload serialization, which can itself throw on\n    // cyclic metadata or a throwing `toJSON`.\n    callerSignal?.throwIfAborted();\n    // Serialize before the first attempt so retries resend the same logical\n    // event even if the caller mutates the objects it passed in.\n    const body = JSON.stringify(payload);\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      callerSignal?.throwIfAborted();\n      const attemptSignal = createAttemptSignal(this.timeoutMs, callerSignal);\n      try {\n        const response = await fetch(this.apiUrl, {\n          method: \"POST\",\n          headers: this.headers,\n          body,\n          redirect: \"error\",\n          signal: attemptSignal.signal,\n        });\n        if (response.status !== 429 || attempt === maxRetries) {\n          if (!response.ok) {\n            const errorBody = await readCappedErrorBody(response);\n            // The capped read swallows its own failures, so an abort during it\n            // would otherwise be reported as a plain API error.\n            attemptSignal.signal.throwIfAborted();\n            throw new SilmarilApiError({\n              status: response.status,\n              statusText: response.statusText,\n              body: errorBody,\n            });\n          }\n          return await readBodyUnderSignal<T>(\n            () => response.json() as Promise<T>,\n            attemptSignal.signal,\n          );\n        }\n        await discardResponseBody(response, attemptSignal.signal);\n      } finally {\n        attemptSignal.dispose();\n      }\n      await sleep(Math.min(2 ** attempt, MAX_BACKOFF_SECONDS) * 1000, callerSignal);\n    }\n    throw new Error(\"Firewall: exhausted retries (unreachable)\");\n  }\n\n  private async classifySingle(\n    text: string,\n    options: ClassifyOptions,\n    metadataInfo: {\n      requestId: string;\n    },\n  ): Promise<BlockResult> {\n    const payload: SingleClassifyPayload = { text };\n    const requestedMode = options.mode ?? this.mode;\n    if (requestedMode !== undefined) {\n      payload.mode = requestedMode;\n    }\n    if (options.hook !== undefined) {\n      payload.hook = options.hook;\n    }\n    if (options.toolName !== undefined) {\n      payload.tool_name = options.toolName;\n    }\n    payload.metadata = withSdkMetadata(options.metadata, {\n      ...metadataInfo,\n      ...(options.governance === undefined ? {} : { governance: options.governance }),\n    });\n    const data = await this.postWithRetry<SingleClassifyResponse>(payload, options.signal);\n    return blockResultFromResponse(data, requestedMode);\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { BlockResult, MiddlewareOptions } from \"../types.js\";\n\ninterface VercelContentPart {\n  type?: string;\n  text?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  output?: unknown;\n  result?: unknown;\n}\n\ninterface VercelPromptMessage {\n  role: string;\n  content: string | ReadonlyArray<VercelContentPart | string>;\n}\n\ninterface VercelToolCall {\n  toolCallType?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  input?: unknown;\n}\n\ninterface VercelGenerateResult {\n  text?: string;\n  toolCalls?: ReadonlyArray<VercelToolCall>;\n}\n\ninterface WrapGenerateArgs<TResult extends VercelGenerateResult & Record<string, unknown>> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doGenerate: () => PromiseLike<TResult>;\n}\n\ninterface WrapStreamArgs<\n  TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>,\n> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doStream: () => PromiseLike<TResult>;\n}\n\ninterface StreamPart {\n  type?: string;\n  textDelta?: string;\n  delta?: string;\n}\n\ninterface VercelStepContext {\n  toolName: string | undefined;\n  toolCallId: string | undefined;\n}\n\nfunction stringifyToolValue(value: unknown): string {\n  if (value === null || value === undefined) {\n    return \"\";\n  }\n  if (typeof value === \"string\") {\n    return value;\n  }\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction extractContentText(content: VercelPromptMessage[\"content\"]): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction iterateToolResultParts(\n  message: VercelPromptMessage,\n): Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> {\n  if (typeof message.content === \"string\") {\n    return [];\n  }\n  const out: Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> = [];\n  for (const part of message.content) {\n    if (typeof part === \"string\") {\n      continue;\n    }\n    if (part.type === \"tool-result\") {\n      const text = stringifyToolResult(part.result !== undefined ? part.result : part.output);\n      if (text.trim()) {\n        out.push({ text, toolName: part.toolName, toolCallId: part.toolCallId });\n      }\n    }\n  }\n  return out;\n}\n\nfunction stringifyToolResult(value: unknown): string {\n  if (!isRecord(value)) {\n    return stringifyToolValue(value);\n  }\n  if ((value.type === \"text\" || value.type === \"error-text\") && typeof value.value === \"string\") {\n    return value.value;\n  }\n  if ((value.type === \"json\" || value.type === \"error-json\") && value.value !== undefined) {\n    return stringifyToolValue(value.value);\n  }\n  if (value.type === \"content\" && Array.isArray(value.value)) {\n    return value.value\n      .map((part) => (isRecord(part) && part.type === \"text\" && typeof part.text === \"string\" ? part.text : \"\"))\n      .filter((text) => text.length > 0)\n      .join(\" \");\n  }\n  return stringifyToolValue(value);\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<VercelPromptMessage>,\n): VercelPromptMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (msg.role.toLowerCase() === \"user\") {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport interface FirewallMiddleware {\n  readonly specificationVersion: \"v3\";\n  readonly middlewareVersion: \"v2\";\n  wrapGenerate: <TResult extends VercelGenerateResult & Record<string, unknown>>(\n    args: WrapGenerateArgs<TResult>,\n  ) => Promise<TResult>;\n  wrapStream: <TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>(\n    args: WrapStreamArgs<TResult>,\n  ) => Promise<TResult>;\n}\n\nexport function createMiddleware(\n  firewall: Firewall,\n  options: MiddlewareOptions = {},\n): FirewallMiddleware {\n  const scanInput = options.scanInput ?? true;\n  const scanOutput = options.scanOutput ?? false;\n  const requestedMode = options.mode ?? (\n    options.shadowMode === undefined\n      ? firewall.mode\n      : options.shadowMode ? \"shadow\" : \"block\"\n  );\n\n  const classifyOrBlock = async (\n    text: string,\n    hook: HookLabel,\n    context: VercelStepContext = { toolName: undefined, toolCallId: undefined },\n  ): Promise<void> => {\n    if (!text.trim()) {\n      return;\n    }\n    const { toolName, toolCallId } = context;\n    const result: BlockResult = await firewall.classify(\n      text,\n      {\n        hook,\n        ...(toolName !== undefined ? { toolName } : {}),\n        ...(requestedMode !== undefined ? { mode: requestedMode } : {}),\n      },\n    );\n    const threshold = result.threshold;\n    const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n    const effectiveMode = requestedMode ?? result.mode ?? \"block\";\n    const commonEventFields = {\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      text,\n      result,\n    };\n    options.onClassify?.({\n      ...commonEventFields,\n      blocked,\n      mode: effectiveMode,\n      shadowMode: effectiveMode === \"shadow\",\n    });\n    if (!blocked || effectiveMode !== \"block\") {\n      return;\n    }\n\n    const err = new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      result,\n    });\n    options.onBlocked?.(err);\n    throw err;\n  };\n\n  const scanPrompt = async (prompt: ReadonlyArray<VercelPromptMessage>): Promise<void> => {\n    if (prompt.length === 0) {\n      return;\n    }\n    const last = prompt[prompt.length - 1]!;\n    const role = last.role.toLowerCase();\n\n    // If the newest message is a tool result (typical mid-flow in a\n    // tool-calling loop), classify each tool-result part individually with\n    // tool_response + toolName. No manual wiring from the caller — the\n    // toolName is read directly from the Vercel content part.\n    if (role === \"tool\") {\n      for (const { text, toolName, toolCallId } of iterateToolResultParts(last)) {\n        await classifyOrBlock(text, HookLabel.TOOL_RESPONSE, { toolName, toolCallId });\n      }\n      return;\n    }\n\n    // Otherwise, fall back to scanning the most recent user message.\n    // Covers: [user], [system, user], [user, assistant(text), user], etc.\n    const lastUser = findLastUserMessage(prompt);\n    if (!lastUser) {\n      return;\n    }\n    const text = extractContentText(lastUser.content).trim();\n    if (!text) {\n      return;\n    }\n    await classifyOrBlock(text, HookLabel.USER_INPUT);\n  };\n\n  const scanGenerateResult = async (result: VercelGenerateResult): Promise<void> => {\n    if (scanOutput && typeof result.text === \"string\" && result.text.length > 0) {\n      await classifyOrBlock(result.text, HookLabel.LLM_OUTPUT);\n    }\n    if (options.scanToolCalls && Array.isArray(result.toolCalls)) {\n      for (const call of result.toolCalls) {\n        if (!call || typeof call !== \"object\") {\n          continue;\n        }\n        const toolInput = call.args !== undefined ? call.args : call.input;\n        const args =\n          typeof toolInput === \"string\" ? toolInput : stringifyToolValue(toolInput);\n        const toolName = typeof call.toolName === \"string\" ? call.toolName : undefined;\n        const toolCallId = typeof call.toolCallId === \"string\" ? call.toolCallId : undefined;\n        if (args.trim()) {\n          await classifyOrBlock(args, HookLabel.TOOL_CALL, { toolName, toolCallId });\n        }\n      }\n    }\n  };\n\n  return {\n    specificationVersion: \"v3\",\n    middlewareVersion: \"v2\",\n\n    async wrapGenerate<TResult extends VercelGenerateResult & Record<string, unknown>>({\n      params,\n      doGenerate,\n    }: WrapGenerateArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const result = await doGenerate();\n      await scanGenerateResult(result);\n      return result;\n    },\n\n    async wrapStream<TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>({\n      params,\n      doStream,\n    }: WrapStreamArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const { stream, ...rest } = await doStream();\n      if (!scanOutput) {\n        return { stream, ...rest } as unknown as TResult;\n      }\n\n      let buffered = \"\";\n      const transformed = stream.pipeThrough(\n        new TransformStream<unknown, unknown>({\n          transform(chunk, controller): void {\n            const part = chunk as StreamPart;\n            if (part && part.type === \"text-delta\") {\n              const delta = part.textDelta ?? part.delta ?? \"\";\n              buffered += delta;\n            }\n            controller.enqueue(chunk);\n          },\n          async flush(controller): Promise<void> {\n            if (!buffered.trim()) {\n              return;\n            }\n            try {\n              await classifyOrBlock(buffered, HookLabel.LLM_OUTPUT);\n            } catch (err) {\n              if (err instanceof FirewallBlockedException) {\n                controller.enqueue({ type: \"error\", error: err });\n                return;\n              }\n              throw err;\n            }\n          },\n        }),\n      );\n      return { stream: transformed, ...rest } as unknown as TResult;\n    },\n  };\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const Outcome = {\n  Benign: \"benign\",\n  InformationDisclosure: \"information_disclosure\",\n  SecretExposure: \"secret_exposure\",\n  ControlAbuse: \"control_abuse\",\n  SystemCompromise: \"system_compromise\",\n  ServiceDisruption: \"service_disruption\",\n  CodeGeneration: \"code_generation\",\n  StoryScriptGeneration: \"story_script_generation\",\n  GameGeneration: \"game_generation\",\n  WebsiteGeneration: \"website_generation\",\n  ClickUpTermsViolation: \"clickup_terms_violation\",\n  TraditionalAiAbuse: \"traditional_ai_abuse\",\n} as const;\n\ndeclare const unknownOutcomeBrand: unique symbol;\n\nexport type KnownPrimaryOutcome = (typeof Outcome)[keyof typeof Outcome];\nexport type KnownHarmfulOutcome = Exclude<KnownPrimaryOutcome, typeof Outcome.Benign>;\nexport type UnknownOutcome = string & { readonly [unknownOutcomeBrand]: \"UnknownOutcome\" };\nexport type PrimaryOutcome = KnownPrimaryOutcome | UnknownOutcome;\nexport type HarmfulOutcome = KnownHarmfulOutcome | UnknownOutcome;\n\nexport const PRIMARY_OUTCOMES = [\n  Outcome.Benign,\n  Outcome.InformationDisclosure,\n  Outcome.SecretExposure,\n  Outcome.ControlAbuse,\n  Outcome.SystemCompromise,\n  Outcome.ServiceDisruption,\n  Outcome.CodeGeneration,\n  Outcome.StoryScriptGeneration,\n  Outcome.GameGeneration,\n  Outcome.WebsiteGeneration,\n  Outcome.ClickUpTermsViolation,\n  Outcome.TraditionalAiAbuse,\n] as const satisfies readonly PrimaryOutcome[];\n\nexport const HARMFUL_OUTCOMES = [\n  Outcome.InformationDisclosure,\n  Outcome.SecretExposure,\n  Outcome.ControlAbuse,\n  Outcome.SystemCompromise,\n  Outcome.ServiceDisruption,\n  Outcome.CodeGeneration,\n  Outcome.StoryScriptGeneration,\n  Outcome.GameGeneration,\n  Outcome.WebsiteGeneration,\n  Outcome.ClickUpTermsViolation,\n  Outcome.TraditionalAiAbuse,\n] as const satisfies readonly KnownHarmfulOutcome[];\n\nexport const OUTCOME_DESCRIPTIONS = {\n  [Outcome.Benign]: \"No harmful firewall outcome detected.\",\n  [Outcome.InformationDisclosure]:\n    \"Exposes private data, documents, internal context, logs, traces, customer data, SQL rows, topology, or similar non-secret sensitive information.\",\n  [Outcome.SecretExposure]:\n    \"Exposes credentials, tokens, API keys, cookies, passwords, signing keys, OAuth secrets, session material, or webhook secrets.\",\n  [Outcome.ControlAbuse]:\n    \"Misuses authorized tools or user privileges to send, change, approve, delete, operate, or bypass policy/RBAC without a stronger outcome.\",\n  [Outcome.SystemCompromise]:\n    \"Enables privilege escalation, account takeover, hostile integration or plugin takeover, persistence, lateral movement, attacker webhook registration, or code/plugin execution.\",\n  [Outcome.ServiceDisruption]:\n    \"Causes downtime, lockout, degradation, alert suppression, destructive loops, resource exhaustion, cost spikes, or hidden outage evidence.\",\n  [Outcome.CodeGeneration]:\n    \"Requests generation or material modification of executable code, scripts, workflows, or configuration.\",\n  [Outcome.StoryScriptGeneration]:\n    \"Requests generation of narrative prose, dialogue, scripts, or story artifacts.\",\n  [Outcome.GameGeneration]:\n    \"Requests generation of a game, quest, level, mechanic, or playable experience.\",\n  [Outcome.WebsiteGeneration]:\n    \"Requests generation of a website, landing page, storefront, or web experience.\",\n  [Outcome.ClickUpTermsViolation]:\n    \"Requests content or actions that violate the configured ClickUp tenant policy.\",\n  [Outcome.TraditionalAiAbuse]:\n    \"Requests unsafe AI assistance outside the concrete security outcome classes.\",\n} as const satisfies Readonly<Record<KnownPrimaryOutcome, string>>;\n\nconst PRIMARY_OUTCOME_SET = new Set<string>(PRIMARY_OUTCOMES);\nconst HARMFUL_OUTCOME_SET = new Set<string>(HARMFUL_OUTCOMES);\n\nexport function isPrimaryOutcome(value: unknown): value is KnownPrimaryOutcome {\n  return typeof value === \"string\" && PRIMARY_OUTCOME_SET.has(value);\n}\n\nexport function isHarmfulOutcome(value: unknown): value is KnownHarmfulOutcome {\n  return typeof value === \"string\" && HARMFUL_OUTCOME_SET.has(value);\n}\n\nexport function normalizePrimaryOutcome(\n  value: unknown,\n  fieldName = \"primary_outcome\",\n): PrimaryOutcome {\n  if (typeof value !== \"string\") {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(value)}`);\n  }\n  return isPrimaryOutcome(value) ? value : (value as UnknownOutcome);\n}\n\nexport function normalizeHarmfulOutcome(\n  value: unknown,\n  fieldName = \"outcome\",\n): HarmfulOutcome {\n  if (typeof value !== \"string\" || value === Outcome.Benign) {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(value)}`);\n  }\n  return isHarmfulOutcome(value) ? value : (value as UnknownOutcome);\n}\n\nexport function normalizeHarmfulOutcomeMap(\n  values: unknown,\n  fieldName: string,\n): Readonly<Partial<Record<HarmfulOutcome, number>>> | undefined {\n  if (values === undefined || values === null) {\n    return undefined;\n  }\n  if (typeof values !== \"object\" || Array.isArray(values)) {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(values)}`);\n  }\n  const out: Partial<Record<HarmfulOutcome, number>> = {};\n  for (const [key, value] of Object.entries(values)) {\n    const normalizedKey = normalizeHarmfulOutcome(key, `${fieldName} key`);\n    if (typeof value !== \"number\") {\n      throw new Error(`Firewall: invalid ${fieldName} value for ${JSON.stringify(key)}`);\n    }\n    out[normalizedKey] = value;\n  }\n  return Object.freeze(out);\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nfunction isHighSurrogate(code: number): boolean {\n  return code >= 0xd800 && code <= 0xdbff;\n}\n\nfunction isLowSurrogate(code: number): boolean {\n  return code >= 0xdc00 && code <= 0xdfff;\n}\n\nexport function sanitizeText(text: string): string {\n  let out = \"\";\n  for (let i = 0; i < text.length; i++) {\n    const code = text.charCodeAt(i);\n    if (isHighSurrogate(code)) {\n      if (i + 1 < text.length && isLowSurrogate(text.charCodeAt(i + 1))) {\n        out += text[i]!;\n        out += text[i + 1]!;\n        i++;\n      }\n      continue;\n    }\n    if (!isLowSurrogate(code)) {\n      out += text[i]!;\n    }\n  }\n  return out;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6GA,SAAS,eAAe,MAItB;AACA,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,aAAO,EAAE,SAAS,QAAW,OAAO,QAAW,YAAY,OAAU;AAAA,IACvE;AACA,UAAM,OAAO;AACb,WAAO;AAAA,MACL,SACE,KAAK,WAAW,OAAO,KAAK,YAAY,WACnC,KAAK,UACN;AAAA,MACN,OAAO,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAAA,MACrD,YAAY,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAAA,IAChE;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,SAAS,QAAW,OAAO,QAAW,YAAY,OAAU;AAAA,EACvE;AACF;AAnIA,IAMM,wBAWO,0BA0DA,wBAIA;AA/Eb;AAAA;AAAA;AAMA,IAAM,yBAAyB;AAWxB,IAAM,2BAAN,MAAM,kCAAiC,MAAM;AAAA,MACzC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAET,YAAY,QAST;AACD,cAAM,0BAAyB,cAAc,MAAM,CAAC;AACpD,aAAK,OAAO;AACZ,aAAK,QAAQ,OAAO;AACpB,aAAK,YAAY,OAAO;AACxB,aAAK,aAAa,OAAO;AACzB,aAAK,QAAQ,OAAO;AACpB,aAAK,OAAO,OAAO;AACnB,aAAK,WAAW,OAAO;AACvB,aAAK,aAAa,OAAO;AACzB,aAAK,SAAS,OAAO;AACrB,eAAO,eAAe,MAAM,0BAAyB,SAAS;AAAA,MAChE;AAAA,MAEA,OAAe,cAAc,QAKlB;AACT,cAAM,YACJ,OAAO,WAAW,SAAS,yBACvB,GAAG,OAAO,WAAW,MAAM,GAAG,sBAAsB,CAAC,QACrD,OAAO;AACb,YACE,OAAO,QAAQ,eAAe,eAC9B,OAAO,QAAQ,YAAY,WAAW,SACtC;AACA,iBAAO,4DAA4D,SAAS;AAAA,QAC9E;AACA,eACE,+CACU,OAAO,MAAM,QAAQ,CAAC,CAAC,eAAe,OAAO,UAAU,QAAQ,CAAC,CAAC,OACvE,SAAS;AAAA,MAEjB;AAAA,IACF;AAGO,IAAM,yBAAyB;AAI/B,IAAM,mBAAN,MAAM,0BAAyB,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAET,YAAY,QAOT;AACD,cAAM,aAAa,OAAO,aAAa,IAAI,OAAO,UAAU,KAAK;AACjE,cAAM,sBAAsB,OAAO,MAAM,GAAG,UAAU,EAAE;AACxD,aAAK,OAAO;AACZ,aAAK,SAAS,OAAO;AACrB,aAAK,aAAa,OAAO;AACzB,aAAK,OAAO,OAAO;AACnB,cAAM,SAAS,eAAe,OAAO,IAAI;AACzC,aAAK,UAAU,OAAO,WAAW,OAAO;AACxC,aAAK,QAAQ,OAAO,SAAS,OAAO;AACpC,aAAK,aAAa,OAAO,cAAc,OAAO;AAC9C,eAAO,eAAe,MAAM,kBAAiB,SAAS;AAAA,MACxD;AAAA,IACF;AAAA;AAAA;;;AC5CO,SAAS,aACd,OAC2B;AAC3B,MAAI,UAAU,QAAW;AACvB,WAAO;AAAA,EACT;AACA,QAAM,WAAW,oBAAI,IAAkB;AACvC,aAAW,KAAK,OAAO;AACrB,QAAI,CAAC,qBAAqB,IAAI,CAAC,GAAG;AAChC,YAAM,IAAI,MAAM,+BAA+B,OAAO,CAAC,CAAC,EAAE;AAAA,IAC5D;AACA,aAAS,IAAI,CAAiB;AAAA,EAChC;AACA,SAAO;AACT;AAEO,SAAS,YAAY,MAAc,MAAqD;AAC7F,MAAI,SAAS,UAAa,SAAS,MAAM;AACvC,WAAO;AAAA,EACT;AACA,MAAI,SAAS,UAAU,SAAS;AAC9B,WAAO;AAAA,EACT;AACA,SAAO,SAAS,IAAI,KAAK,IAAI;AAC/B;AAEO,SAAS,gBAAgB,MAAc,UAA6C;AACzF,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,SAAS,QAAQ,KAAK,IAAI;AACnC;AA9FA,IAGa,WAWA,cAYA,eAOA,aAOA,cAMA,WAKA,wBAUP;AA7DN;AAAA;AAAA;AAGO,IAAM,YAAY;AAAA,MACvB,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,WAAW;AAAA,MACX,eAAe;AAAA,MACf,YAAY;AAAA,MACZ,SAAS;AAAA,IACX;AAIO,IAAM,eAAe;AAAA,MAC1B,WAAW;AAAA,MACX,kBAAkB;AAAA,MAClB,YAAY;AAAA,MACZ,iBAAiB;AAAA,MACjB,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe;AAAA,IACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,MAC5E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,MAC1E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,MAC3E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,MACxE,GAAG;AAAA,MACH,GAAG;AAAA,IACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,MAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,MAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,MACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,MACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,MACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,MAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,MACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AAAA,IACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;AAAA;AAAA;;;ACqB9E,SAAS,uBAAuB,SAAoC;AACzE,SAAO,QACJ,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAC1B,KAAK,IAAI;AACd;AAEO,SAAS,yBAAyB,UAA0B;AACjE,SAAO,SAAS,KAAK;AACvB;AAEO,SAAS,yBAAyB,UAAsC;AAC7E,QAAM,QAAkB,CAAC;AACzB,aAAW,WAAW,SAAS,eAAe,CAAC,GAAG;AAChD,eAAW,OAAO,SAAS;AACzB,YAAM,QAAQ,IAAI,QAAQ,IAAI,KAAK;AACnC,UAAI,MAAM;AACR,cAAM,KAAK,IAAI;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEO,SAAS,yBAAyB,WAAqD;AAC5F,QAAM,QAAkB,CAAC;AACzB,aAAW,OAAO,WAAW;AAC3B,UAAM,QAAQ,IAAI,eAAe,IAAI,KAAK;AAC1C,QAAI,MAAM;AACR,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAnHA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AA6BA,SAAS,eAAe,SAA4C;AAClE,MAAI,OAAO,QAAQ,SAAS,UAAU;AACpC,WAAO,QAAQ,KAAK,YAAY;AAAA,EAClC;AACA,MAAI,OAAO,QAAQ,SAAS,UAAU;AACpC,WAAO,QAAQ,KAAK,YAAY;AAAA,EAClC;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,SAAuD;AACjF,MAAI,YAAY,QAAW;AACzB,WAAO;AAAA,EACT;AACA,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAASA,qBACP,UACuC;AACvC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,WAAW,IAAI,eAAe,GAAG,CAAC,GAAG;AACvC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,uBACpB,UACA,UAAmC,CAAC,GACN;AAC9B,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,gCAAgC;AAE7E,QAAM,eAAe,aAAa,QAAQ,KAAK;AAG/C,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,SACJ,QAAQ,WACP,CAAC,SAAiB,UAAyB;AAE1C,YAAQ,KAAK,sBAAsB,OAAO,IAAI,KAAK;AAAA,EACrD;AACF,QAAM,gBAAgB,QAAQ,SAC5B,QAAQ,eAAe,SACnB,SAAS,OACT,QAAQ,aAAa,WAAW;AAEtC,QAAM,aAAa,QAAQ;AAE3B,QAAM,iBAAiB,CAAC,UAA+B;AACrD,QAAI,CAAC,YAAY;AACf;AAAA,IACF;AACA,QAAI;AACF,iBAAW,KAAK;AAAA,IAClB,SAAS,KAAK;AACZ,aAAO,6BAA6B,GAAG;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,WAAW,OACf,MACA,WACA,OACA,aACkB;AAClB,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,SAAS,SAAS,MAAM;AAAA,QACrC,MAAM;AAAA,QACN,UAAU;AAAA,UACR,WAAW,EAAE,QAAQ,MAAM;AAAA,UAC3B,GAAI,QAAQ,mBAAmB,SAAY,CAAC,IAAI,EAAE,gBAAgB,QAAQ,eAAe;AAAA,QAC3F;AAAA,QACA,GAAI,kBAAkB,SAAY,EAAE,MAAM,cAAc,IAAI,CAAC;AAAA,QAC7D,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/C,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,CAAC,UAAU;AACb,cAAM;AAAA,MACR;AACA,aAAO,kDAAkD,GAAG;AAC5D;AAAA,IACF;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAM,gBAAgB,iBAAiB,OAAO,QAAQ;AACtD,UAAM,oBAAoB;AAAA,MACxB,MAAM;AAAA,MACN,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,mBAAe;AAAA,MACb,GAAG;AAAA,MACH;AAAA,MACA,MAAM;AAAA,MACN,YAAY,kBAAkB;AAAA,IAChC,CAAC;AACD,QAAI,CAAC,WAAW,kBAAkB,SAAS;AACzC;AAAA,IACF;AAEA,UAAM,IAAI,yBAAyB;AAAA,MACjC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,MAAM;AAAA,MACN,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,gCAAgC,oBAAoB;AAAA,IAC/C,OAAO;AAAA,IACP,aAAa;AAAA,IACb,gBAAgB;AAAA,IAEzB,MAAe,qBACb,MACA,UACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,gBAAgB,GAAG;AACpD;AAAA,MACF;AACA,YAAM,UAAU;AAChB,YAAM,OAAoC,CAAC;AAC3C,iBAAW,SAAS,SAAS;AAC3B,mBAAW,KAAK,OAAO;AACrB,eAAK,KAAK,CAAC;AAAA,QACb;AAAA,MACF;AACA,YAAM,WAAWA,qBAAoB,IAAI;AACzC,UAAI,CAAC,UAAU;AACb;AAAA,MACF;AACA,YAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,gBAAgB,GAAG,KAAK;AAAA,IACnF;AAAA,IAEA,MAAe,eACb,MACA,SACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,SAAS,GAAG;AAC7C;AAAA,MACF;AACA,YAAM,OAAO,uBAAuB,OAAO;AAC3C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,SAAS,GAAG,KAAK;AAAA,IAC5E;AAAA,IAEA,MAAe,gBACb,MACA,UACA,OACe;AACf,UAAI,CAAC,eAAe,CAAC,aAAa,IAAI,aAAa,UAAU,GAAG;AAC9D;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,QAAQ;AAC9C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,WAAW,MAAM;AACvB,YAAM,SAAS,MAAM,uBAAuB,aAAa,UAAU,GAAG,OAAO,QAAQ;AAAA,IACvF;AAAA,IAEA,MAAe,qBACb,YACA,OACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,eAAe,GAAG;AACnD;AAAA,MACF;AACA,YAAM,OAAO,MAAM,KAAK;AACxB,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,eAAe,GAAG,KAAK;AAAA,IAClF;AAAA,IAEA,MAAe,aAAa,QAAiB,OAA8B;AACzE,UAAI,CAAC,aAAa,IAAI,aAAa,OAAO,GAAG;AAC3C;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,MAA2E;AACjH,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,OAAO,GAAG,KAAK;AAAA,IAC1E;AAAA,IAEA,MAAe,cACb,QACA,OACA,cACA,OACA,SACe;AACf,UAAI,CAAC,eAAe,CAAC,aAAa,IAAI,aAAa,QAAQ,GAAG;AAC5D;AAAA,MACF;AACA,YAAM,OAAO,OAAO,MAAM,EAAE,KAAK;AACjC,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,WAAW,SAAS;AAC1B,YAAM,SAAS,MAAM,uBAAuB,aAAa,QAAQ,GAAG,OAAO,QAAQ;AAAA,IACrF;AAAA,IAEA,MAAe,mBACb,WACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,aAAa,GAAG;AACjD;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,SAAS;AAC/C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,aAAa,GAAG,KAAK;AAAA,IAChF;AAAA,EACF;AAEA,SAAO,IAAI,wBAAwB;AACrC;AAzRA,IAqBM;AArBN;AAAA;AAAA;AAMA;AACA;AAOA;AAOA,IAAM,aAAkC,oBAAI,IAAI,CAAC,SAAS,MAAM,CAAC;AAAA;AAAA;;;ACrBjE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACGA,yBAA2B;;;ACC3B;AACA;AAsDA,SAAS,mBAAmB,OAAwB;AAClD,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,mBAAmB,SAAiD;AAC3E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,uBACP,SACuF;AACvF,MAAI,OAAO,QAAQ,YAAY,UAAU;AACvC,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAA6F,CAAC;AACpG,aAAW,QAAQ,QAAQ,SAAS;AAClC,QAAI,OAAO,SAAS,UAAU;AAC5B;AAAA,IACF;AACA,QAAI,KAAK,SAAS,eAAe;AAC/B,YAAM,OAAO,oBAAoB,KAAK,WAAW,SAAY,KAAK,SAAS,KAAK,MAAM;AACtF,UAAI,KAAK,KAAK,GAAG;AACf,YAAI,KAAK,EAAE,MAAM,UAAU,KAAK,UAAU,YAAY,KAAK,WAAW,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO,mBAAmB,KAAK;AAAA,EACjC;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,OAAO,MAAM,UAAU,UAAU;AAC7F,WAAO,MAAM;AAAA,EACf;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,MAAM,UAAU,QAAW;AACvF,WAAO,mBAAmB,MAAM,KAAK;AAAA,EACvC;AACA,MAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC1D,WAAO,MAAM,MACV,IAAI,CAAC,SAAU,SAAS,IAAI,KAAK,KAAK,SAAS,UAAU,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,EAAG,EACxG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAChC,KAAK,GAAG;AAAA,EACb;AACA,SAAO,mBAAmB,KAAK;AACjC;AAEA,SAAS,oBACP,UACiC;AACjC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,IAAI,KAAK,YAAY,MAAM,QAAQ;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAaO,SAAS,iBACd,UACA,UAA6B,CAAC,GACV;AACpB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,gBAAgB,QAAQ,SAC5B,QAAQ,eAAe,SACnB,SAAS,OACT,QAAQ,aAAa,WAAW;AAGtC,QAAM,kBAAkB,OACtB,MACA,MACA,UAA6B,EAAE,UAAU,QAAW,YAAY,OAAU,MACxD;AAClB,QAAI,CAAC,KAAK,KAAK,GAAG;AAChB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,WAAW,IAAI;AACjC,UAAM,SAAsB,MAAM,SAAS;AAAA,MACzC;AAAA,MACA;AAAA,QACE;AAAA,QACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,QAC7C,GAAI,kBAAkB,SAAY,EAAE,MAAM,cAAc,IAAI,CAAC;AAAA,MAC/D;AAAA,IACF;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAM,gBAAgB,iBAAiB,OAAO,QAAQ;AACtD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,MACA;AAAA,IACF;AACA,YAAQ,aAAa;AAAA,MACnB,GAAG;AAAA,MACH;AAAA,MACA,MAAM;AAAA,MACN,YAAY,kBAAkB;AAAA,IAChC,CAAC;AACD,QAAI,CAAC,WAAW,kBAAkB,SAAS;AACzC;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,yBAAyB;AAAA,MACvC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,IACF,CAAC;AACD,YAAQ,YAAY,GAAG;AACvB,UAAM;AAAA,EACR;AAEA,QAAM,aAAa,OAAO,WAA8D;AACtF,QAAI,OAAO,WAAW,GAAG;AACvB;AAAA,IACF;AACA,UAAM,OAAO,OAAO,OAAO,SAAS,CAAC;AACrC,UAAM,OAAO,KAAK,KAAK,YAAY;AAMnC,QAAI,SAAS,QAAQ;AACnB,iBAAW,EAAE,MAAAC,OAAM,UAAU,WAAW,KAAK,uBAAuB,IAAI,GAAG;AACzE,cAAM,gBAAgBA,OAAM,UAAU,eAAe,EAAE,UAAU,WAAW,CAAC;AAAA,MAC/E;AACA;AAAA,IACF;AAIA,UAAM,WAAW,oBAAoB,MAAM;AAC3C,QAAI,CAAC,UAAU;AACb;AAAA,IACF;AACA,UAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,QAAI,CAAC,MAAM;AACT;AAAA,IACF;AACA,UAAM,gBAAgB,MAAM,UAAU,UAAU;AAAA,EAClD;AAEA,QAAM,qBAAqB,OAAO,WAAgD;AAChF,QAAI,cAAc,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,GAAG;AAC3E,YAAM,gBAAgB,OAAO,MAAM,UAAU,UAAU;AAAA,IACzD;AACA,QAAI,QAAQ,iBAAiB,MAAM,QAAQ,OAAO,SAAS,GAAG;AAC5D,iBAAW,QAAQ,OAAO,WAAW;AACnC,YAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,QACF;AACA,cAAM,YAAY,KAAK,SAAS,SAAY,KAAK,OAAO,KAAK;AAC7D,cAAM,OACJ,OAAO,cAAc,WAAW,YAAY,mBAAmB,SAAS;AAC1E,cAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,cAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC3E,YAAI,KAAK,KAAK,GAAG;AACf,gBAAM,gBAAgB,MAAM,UAAU,WAAW,EAAE,UAAU,WAAW,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IAEnB,MAAM,aAA6E;AAAA,MACjF;AAAA,MACA;AAAA,IACF,GAAgD;AAC9C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,SAAS,MAAM,WAAW;AAChC,YAAM,mBAAmB,MAAM;AAC/B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAA0F;AAAA,MAC9F;AAAA,MACA;AAAA,IACF,GAA8C;AAC5C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,EAAE,QAAQ,GAAG,KAAK,IAAI,MAAM,SAAS;AAC3C,UAAI,CAAC,YAAY;AACf,eAAO,EAAE,QAAQ,GAAG,KAAK;AAAA,MAC3B;AAEA,UAAI,WAAW;AACf,YAAM,cAAc,OAAO;AAAA,QACzB,IAAI,gBAAkC;AAAA,UACpC,UAAU,OAAO,YAAkB;AACjC,kBAAM,OAAO;AACb,gBAAI,QAAQ,KAAK,SAAS,cAAc;AACtC,oBAAM,QAAQ,KAAK,aAAa,KAAK,SAAS;AAC9C,0BAAY;AAAA,YACd;AACA,uBAAW,QAAQ,KAAK;AAAA,UAC1B;AAAA,UACA,MAAM,MAAM,YAA2B;AACrC,gBAAI,CAAC,SAAS,KAAK,GAAG;AACpB;AAAA,YACF;AACA,gBAAI;AACF,oBAAM,gBAAgB,UAAU,UAAU,UAAU;AAAA,YACtD,SAAS,KAAK;AACZ,kBAAI,eAAe,0BAA0B;AAC3C,2BAAW,QAAQ,EAAE,MAAM,SAAS,OAAO,IAAI,CAAC;AAChD;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,EAAE,QAAQ,aAAa,GAAG,KAAK;AAAA,IACxC;AAAA,EACF;AACF;;;ADjUA;;;AEHO,IAAM,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,mBAAmB;AAAA,EACnB,gBAAgB;AAAA,EAChB,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,mBAAmB;AAAA,EACnB,uBAAuB;AAAA,EACvB,oBAAoB;AACtB;AAUO,IAAM,mBAAmB;AAAA,EAC9B,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,IAAM,mBAAmB;AAAA,EAC9B,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,IAAM,uBAAuB;AAAA,EAClC,CAAC,QAAQ,MAAM,GAAG;AAAA,EAClB,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,YAAY,GACnB;AAAA,EACF,CAAC,QAAQ,gBAAgB,GACvB;AAAA,EACF,CAAC,QAAQ,iBAAiB,GACxB;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,iBAAiB,GACxB;AAAA,EACF,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,kBAAkB,GACzB;AACJ;AAEA,IAAM,sBAAsB,IAAI,IAAY,gBAAgB;AAC5D,IAAM,sBAAsB,IAAI,IAAY,gBAAgB;AAErD,SAAS,iBAAiB,OAA8C;AAC7E,SAAO,OAAO,UAAU,YAAY,oBAAoB,IAAI,KAAK;AACnE;AAEO,SAAS,iBAAiB,OAA8C;AAC7E,SAAO,OAAO,UAAU,YAAY,oBAAoB,IAAI,KAAK;AACnE;AAEO,SAAS,wBACd,OACA,YAAY,mBACI;AAChB,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO,iBAAiB,KAAK,IAAI,QAAS;AAC5C;AAEO,SAAS,wBACd,OACA,YAAY,WACI;AAChB,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,QAAQ;AACzD,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO,iBAAiB,KAAK,IAAI,QAAS;AAC5C;AAEO,SAAS,2BACd,QACA,WAC+D;AAC/D,MAAI,WAAW,UAAa,WAAW,MAAM;AAC3C,WAAO;AAAA,EACT;AACA,MAAI,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AACvD,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,MAAM,CAAC,EAAE;AAAA,EAC5E;AACA,QAAM,MAA+C,CAAC;AACtD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,UAAM,gBAAgB,wBAAwB,KAAK,GAAG,SAAS,MAAM;AACrE,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,IAAI,MAAM,qBAAqB,SAAS,cAAc,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IACnF;AACA,QAAI,aAAa,IAAI;AAAA,EACvB;AACA,SAAO,OAAO,OAAO,GAAG;AAC1B;;;AChIA,SAAS,gBAAgB,MAAuB;AAC9C,SAAO,QAAQ,SAAU,QAAQ;AACnC;AAEA,SAAS,eAAe,MAAuB;AAC7C,SAAO,QAAQ,SAAU,QAAQ;AACnC;AAEO,SAAS,aAAa,MAAsB;AACjD,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,OAAO,KAAK,WAAW,CAAC;AAC9B,QAAI,gBAAgB,IAAI,GAAG;AACzB,UAAI,IAAI,IAAI,KAAK,UAAU,eAAe,KAAK,WAAW,IAAI,CAAC,CAAC,GAAG;AACjE,eAAO,KAAK,CAAC;AACb,eAAO,KAAK,IAAI,CAAC;AACjB;AAAA,MACF;AACA;AAAA,IACF;AACA,QAAI,CAAC,eAAe,IAAI,GAAG;AACzB,aAAO,KAAK,CAAC;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;;;AHJO,IAAM,cAAc;AACpB,IAAM,qBAAqB;AAClC,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,uBAAuB,KAAK;AAMlC,IAAM,iBAAiB;AAkCvB,SAAS,YAAY,OAAgB,eAAwD;AAC3F,MAAI;AACJ,MAAI,UAAU,YAAY,UAAU,UAAU,UAAU,SAAS;AAC/D,mBAAe;AAAA,EACjB,WAAW,UAAU,QAAW;AAC9B,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AAKA,SAAO,iBAAiB;AAC1B;AAEA,SAAS,WAAW,YAA2D;AAC7E,SAAO,eAAe,SAAY,SAAY,aAAa,WAAW;AACxE;AAEA,SAAS,wBACP,MACA,eACa;AACb,MAAI,KAAK,eAAe,YAAY,KAAK,eAAe,aAAa;AACnE,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACA,QAAM,SAUF;AAAA,IACF,YAAY,KAAK;AAAA,IACjB,OAAO,OAAO,KAAK,KAAK;AAAA,IACxB,WAAW,OAAO,KAAK,SAAS;AAAA,EAClC;AACA,QAAM,OAAO,YAAY,KAAK,MAAM,aAAa;AACjD,MAAI,SAAS,QAAW;AACtB,WAAO,OAAO;AAAA,EAChB;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,WAAO,iBAAiB,wBAAwB,KAAK,eAAe;AAAA,EACtE;AACA,MAAI,KAAK,mBAAmB,QAAW;AACrC,UAAM,gBAAgB,2BAA2B,KAAK,gBAAgB,gBAAgB;AACtF,QAAI,kBAAkB,QAAW;AAC/B,aAAO,gBAAgB;AAAA,IACzB;AAAA,EACF;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,UAAM,iBAAiB,2BAA2B,KAAK,iBAAiB,iBAAiB;AACzF,QAAI,mBAAmB,QAAW;AAChC,aAAO,iBAAiB;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,UAAM,iBAAiB,2BAA2B,KAAK,iBAAiB,iBAAiB;AACzF,QAAI,mBAAmB,QAAW;AAChC,aAAO,iBAAiB;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,KAAK,eAAe,QAAW;AACjC,WAAO,aAAa,+BAA+B,KAAK,UAAU;AAAA,EACpE;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAASC,UAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,gBACP,UACA,MAKwB;AACxB,QAAM,UAAmC,EAAE,GAAI,YAAY,CAAC,EAAG;AAC/D,QAAM,WAAW,QAAQ;AACzB,MAAI,aAAa,UAAa,CAACA,UAAS,QAAQ,GAAG;AACjD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,UAAQ,WAAW;AAAA,IACjB,GAAIA,UAAS,QAAQ,IAAI,WAAW,CAAC;AAAA,IACrC,cAAc;AAAA,IACd,aAAa;AAAA,IACb,YAAY,KAAK;AAAA,IACjB,GAAI,KAAK,eAAe,SAAY,CAAC,IAAI,EAAE,aAAa,KAAK,WAAW;AAAA,IACxE,GAAI,KAAK,eAAe,SACpB,CAAC,IACD,EAAE,YAAY,wBAAwB,KAAK,UAAU,EAAE;AAAA,EAC7D;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,SAAqD;AACpF,SAAO;AAAA,IACL,GAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,IAC9D,GAAI,QAAQ,aAAa,SACrB,CAAC,IACD;AAAA,MACE,UAAU;AAAA,QACR,MAAM,QAAQ,SAAS;AAAA,QACvB,GAAI,QAAQ,SAAS,OAAO,SAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,SAAS,GAAG;AAAA,QACvE,GAAI,QAAQ,SAAS,aAAa,SAC9B,CAAC,IACD,EAAE,WAAW,QAAQ,SAAS,SAAS;AAAA,MAC7C;AAAA,IACF;AAAA,EACN;AACF;AAEA,SAAS,+BAA+B,OAAoC;AAC1E,MAAI,CAACA,UAAS,KAAK,GAAG;AACpB,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,MAAI,MAAM,WAAW,WAAW,MAAM,WAAW,SAAS;AACxD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,MAAI,OAAO,MAAM,mBAAmB,YAAY,MAAM,eAAe,WAAW,GAAG;AACjF,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AACA,MAAI,MAAM,YAAY,UAAa,OAAO,MAAM,YAAY,UAAU;AACpE,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,SAAO,OAAO,OAAO;AAAA,IACnB,QAAQ,MAAM;AAAA,IACd,GAAI,MAAM,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ;AAAA,IAC/D,eAAe,MAAM;AAAA,EACvB,CAAC;AACH;AAEA,eAAe,oBAAoB,UAAqC;AACtE,MAAI,CAAC,SAAS,MAAM;AAClB,WAAO,SAAS,KAAK,EAAE,KAAK,CAACC,UAASA,MAAK,MAAM,GAAG,oBAAoB,CAAC,EAAE,MAAM,MAAM,EAAE;AAAA,EAC3F;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,SAAuB,CAAC;AAC9B,MAAI,YAAY;AAChB,MAAI;AACF,WAAO,YAAY,GAAG;AACpB,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,MAAM;AACR;AAAA,MACF;AACA,UAAI,CAAC,OAAO;AACV;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,aAAa,YAAY,MAAM,MAAM,GAAG,SAAS,IAAI;AACzE,aAAO,KAAK,KAAK;AACjB,mBAAa,MAAM;AACnB,UAAI,MAAM,aAAa,MAAM,YAAY;AACvC;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,UAAM,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EAC7C;AAEA,QAAM,QAAQ,OAAO,OAAO,CAAC,KAAK,UAAU,MAAM,MAAM,YAAY,CAAC;AACrE,QAAM,OAAO,IAAI,WAAW,KAAK;AACjC,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,SAAK,IAAI,OAAO,MAAM;AACtB,cAAU,MAAM;AAAA,EAClB;AACA,SAAO,IAAI,YAAY,EAAE,OAAO,IAAI;AACtC;AAGA,eAAe,6BAA6B,UAAmC;AAC7E,MAAI;AACF,QAAI,SAAS,MAAM;AACjB,UAAI,CAAC,SAAS,KAAK,QAAQ;AACzB,cAAM,SAAS,KAAK,OAAO;AAAA,MAC7B;AACA;AAAA,IACF;AACA,UAAM,SAAS,KAAK;AAAA,EACtB,QAAQ;AAAA,EAER;AACF;AAGA,eAAe,oBAAoB,UAAoB,QAAoC;AACzF,SAAO,eAAe;AACtB,MAAI;AACJ,QAAM,UAAU,IAAI,QAAe,CAAC,UAAU,WAAW;AACvD,cAAU,MAAM,OAAO,OAAO,MAAM;AACpC,WAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAC1D,CAAC;AACD,MAAI;AACF,UAAM,QAAQ,KAAK,CAAC,6BAA6B,QAAQ,GAAG,OAAO,CAAC;AAAA,EACtE,UAAE;AACA,WAAO,oBAAoB,SAAS,OAAO;AAAA,EAC7C;AACF;AAEA,SAAS,iBAAiB,OAAyB;AACjD,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,MAA6B;AAC3C,SAAO,SAAS,gBAAgB,SAAS;AAC3C;AAQA,eAAe,oBAAuB,MAAwB,QAAiC;AAC7F,MAAI;AACF,WAAO,MAAM,KAAK;AAAA,EACpB,SAAS,OAAO;AACd,QAAI,OAAO,WAAW,iBAAiB,KAAK,GAAG;AAC7C,YAAM,OAAO;AAAA,IACf;AACA,UAAM;AAAA,EACR;AACF;AAYA,SAAS,oBAAoB,WAAmB,cAA2C;AACzF,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM;AAC7B,eAAW;AAAA,MACT,IAAI,aAAa,4CAA4C,cAAc;AAAA,IAC7E;AAAA,EACF,GAAG,SAAS;AACZ,QAAM,gBAAgB,MAAY;AAGhC,iBAAa,KAAK;AAClB,eAAW,MAAM,cAAc,MAAM;AAAA,EACvC;AACA,gBAAc,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AACrE,SAAO;AAAA,IACL,QAAQ,WAAW;AAAA,IACnB,SAAS,MAAM;AACb,mBAAa,KAAK;AAClB,oBAAc,oBAAoB,SAAS,aAAa;AAAA,IAC1D;AAAA,EACF;AACF;AAEA,SAAS,MAAM,IAAY,QAAqC;AAC9D,SAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC5C,QAAI,QAAQ,SAAS;AACnB,aAAO,OAAO,MAAM;AACpB;AAAA,IACF;AACA,UAAM,UAAU,MAAY;AAC1B,mBAAa,KAAK;AAClB,aAAO,QAAQ,MAAM;AAAA,IACvB;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAQ,oBAAoB,SAAS,OAAO;AAC5C,cAAQ;AAAA,IACV,GAAG,EAAE;AACL,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAC3D,CAAC;AACH;AAWO,IAAM,WAAN,MAAe;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEQ;AAAA,EAEjB,YAAY,SAA0B;AACpC,QAAI,CAAC,QAAQ,QAAQ;AACnB,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AACA,QAAI,CAAC,QAAQ,QAAQ;AACnB,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AACA,SAAK,SAAS,QAAQ;AACtB,SAAK,SAAS,QAAQ;AACtB,SAAK,YAAY,QAAQ,aAAa;AACtC,QAAI,OAAO,KAAK,cAAc,YAAY,CAAC,OAAO,SAAS,KAAK,SAAS,KAAK,KAAK,YAAY,GAAG;AAChG,YAAM,IAAI,MAAM,iEAAiE,KAAK,SAAS,EAAE;AAAA,IACnG;AACA,QAAI,KAAK,YAAY,gBAAgB;AACnC,YAAM,IAAI;AAAA,QACR,uCAAuC,cAAc,YAAY,KAAK,SAAS;AAAA,MACjF;AAAA,IACF;AACA,SAAK,OAAO,QAAQ,QAAQ,WAAW,QAAQ,UAAU;AACzD,SAAK,aAAa,KAAK,SAAS;AAChC,SAAK,UAAU,OAAO,OAAO;AAAA,MAC3B,aAAa,KAAK;AAAA,MAClB,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,SAAS,MAAc,UAA2B,CAAC,GAAyB;AAChF,UAAM,YAAY,QAAQ,iBAAa,+BAAW;AAClD,WAAO,KAAK,eAAe,aAAa,IAAI,GAAG,SAAS,EAAE,UAAU,CAAC;AAAA,EACvE;AAAA,EAEA,MAAM,cACJ,OACA,UAAgC,CAAC,GACT;AACxB,QAAI,MAAM,WAAW,GAAG;AACtB,YAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AACA,QAAI,QAAQ,UAAU,UAAa,QAAQ,MAAM,WAAW,MAAM,QAAQ;AACxE,YAAM,IAAI;AAAA,QACR,0BAA0B,QAAQ,MAAM,MAAM,gCAAgC,MAAM,MAAM;AAAA,MAC5F;AAAA,IACF;AACA,QAAI,QAAQ,cAAc,UAAa,QAAQ,UAAU,WAAW,MAAM,QAAQ;AAChF,YAAM,IAAI;AAAA,QACR,8BAA8B,QAAQ,UAAU,MAAM,gCAAgC,MAAM,MAAM;AAAA,MACpG;AAAA,IACF;AACA,QAAI,QAAQ,aAAa,UAAa,QAAQ,SAAS,WAAW,MAAM,QAAQ;AAC9E,YAAM,IAAI;AAAA,QACR,6BAA6B,QAAQ,SAAS,MAAM,gCAAgC,MAAM,MAAM;AAAA,MAClG;AAAA,IACF;AACA,QAAI,QAAQ,eAAe,UAAa,QAAQ,WAAW,WAAW,MAAM,QAAQ;AAClF,YAAM,IAAI;AAAA,QACR,+BAA+B,QAAQ,WAAW,MAAM,gCAAgC,MAAM,MAAM;AAAA,MACtG;AAAA,IACF;AAEA,UAAM,YAAY,QAAQ,iBAAa,+BAAW;AAClD,UAAM,UAAgC;AAAA,MACpC,OAAO,MAAM,IAAI,CAAC,SAAS,aAAa,IAAI,CAAC;AAAA,IAC/C;AACA,UAAM,gBAAgB,QAAQ,QAAQ,KAAK;AAC3C,QAAI,kBAAkB,QAAW;AAC/B,cAAQ,OAAO;AAAA,IACjB;AACA,QAAI,QAAQ,SAAS,QAAQ,MAAM,SAAS,GAAG;AAC7C,cAAQ,QAAQ,QAAQ,MAAM,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;AAAA,IACpD;AACA,QAAI,QAAQ,aAAa,QAAQ,UAAU,SAAS,GAAG;AACrD,cAAQ,aAAa,QAAQ,UAAU,IAAI,CAAC,MAAO,MAAM,SAAY,OAAO,CAAE;AAAA,IAChF;AACA,YAAQ,WAAW,MAAM;AAAA,MAAI,CAAC,GAAG,UAC/B,gBAAgB,QAAQ,WAAW,KAAK,GAAG;AAAA,QACzC;AAAA,QACA,YAAY;AAAA,QACZ,GAAI,QAAQ,aAAa,KAAK,MAAM,SAChC,CAAC,IACD,EAAE,YAAY,QAAQ,WAAW,KAAK,EAAE;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,UAAM,OAAO,MAAM,KAAK,cAAqC,SAAS,QAAQ,MAAM;AACpF,QAAI,CAAC,MAAM,QAAQ,KAAK,WAAW,GAAG;AACpC,YAAM,IAAI,MAAM,iDAAiD;AAAA,IACnE;AACA,QAAI,KAAK,YAAY,WAAW,QAAQ,MAAM,QAAQ;AACpD,YAAM,IAAI;AAAA,QACR,yCAAyC,KAAK,YAAY,MAAM,0CAA0C,QAAQ,MAAM,MAAM;AAAA,MAChI;AAAA,IACF;AACA,WAAO,KAAK,YAAY,IAAI,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAAA,EAC9E;AAAA,EAEA,mBACE,UAAmC,CAAC,GACjB;AACnB,WAAO,oEAAkC;AAAA,MAAK,CAAC,MAC7C,EAAE,uBAAuB,MAAM,OAAO;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,aAAa,UAA6B,CAAC,GAAuB;AAChE,WAAO,iBAAiB,MAAM,OAAO;AAAA,EACvC;AAAA,EAEA,MAAc,cACZ,SACA,cACA,aAAqB,qBACT;AAGZ,kBAAc,eAAe;AAG7B,UAAM,OAAO,KAAK,UAAU,OAAO;AACnC,aAAS,UAAU,GAAG,WAAW,YAAY,WAAW;AACtD,oBAAc,eAAe;AAC7B,YAAM,gBAAgB,oBAAoB,KAAK,WAAW,YAAY;AACtE,UAAI;AACF,cAAM,WAAW,MAAM,MAAM,KAAK,QAAQ;AAAA,UACxC,QAAQ;AAAA,UACR,SAAS,KAAK;AAAA,UACd;AAAA,UACA,UAAU;AAAA,UACV,QAAQ,cAAc;AAAA,QACxB,CAAC;AACD,YAAI,SAAS,WAAW,OAAO,YAAY,YAAY;AACrD,cAAI,CAAC,SAAS,IAAI;AAChB,kBAAM,YAAY,MAAM,oBAAoB,QAAQ;AAGpD,0BAAc,OAAO,eAAe;AACpC,kBAAM,IAAI,iBAAiB;AAAA,cACzB,QAAQ,SAAS;AAAA,cACjB,YAAY,SAAS;AAAA,cACrB,MAAM;AAAA,YACR,CAAC;AAAA,UACH;AACA,iBAAO,MAAM;AAAA,YACX,MAAM,SAAS,KAAK;AAAA,YACpB,cAAc;AAAA,UAChB;AAAA,QACF;AACA,cAAM,oBAAoB,UAAU,cAAc,MAAM;AAAA,MAC1D,UAAE;AACA,sBAAc,QAAQ;AAAA,MACxB;AACA,YAAM,MAAM,KAAK,IAAI,KAAK,SAAS,mBAAmB,IAAI,KAAM,YAAY;AAAA,IAC9E;AACA,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAAA,EAEA,MAAc,eACZ,MACA,SACA,cAGsB;AACtB,UAAM,UAAiC,EAAE,KAAK;AAC9C,UAAM,gBAAgB,QAAQ,QAAQ,KAAK;AAC3C,QAAI,kBAAkB,QAAW;AAC/B,cAAQ,OAAO;AAAA,IACjB;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,OAAO,QAAQ;AAAA,IACzB;AACA,QAAI,QAAQ,aAAa,QAAW;AAClC,cAAQ,YAAY,QAAQ;AAAA,IAC9B;AACA,YAAQ,WAAW,gBAAgB,QAAQ,UAAU;AAAA,MACnD,GAAG;AAAA,MACH,GAAI,QAAQ,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;AAAA,IAC/E,CAAC;AACD,UAAM,OAAO,MAAM,KAAK,cAAsC,SAAS,QAAQ,MAAM;AACrF,WAAO,wBAAwB,MAAM,aAAa;AAAA,EACpD;AACF;;;AD7hBA;AAKA;","names":["findLastUserMessage","text","isRecord","body"]}

package/dist/index.js

@@ -766,7 +766,7 @@ function sanitizeText(text) {
 }
 
 // src/firewall.ts
-var SDK_VERSION = "0.7.1";
+var SDK_VERSION = "0.7.3";
 var DEFAULT_TIMEOUT_MS = 1e4;
 var DEFAULT_MAX_RETRIES = 5;
 var MAX_BACKOFF_SECONDS = 30;
@@ -910,7 +910,7 @@ async function readCappedErrorBody(response) {
   }
   return new TextDecoder().decode(body);
 }
-async function discardResponseBody(response) {
+async function releaseDiscardedResponseBody(response) {
   try {
     if (response.body) {
       if (!response.body.locked) {
@@ -922,6 +922,19 @@ async function discardResponseBody(response) {
   } catch {
   }
 }
+async function discardResponseBody(response, signal) {
+  signal.throwIfAborted();
+  let onAbort;
+  const aborted = new Promise((_resolve, reject) => {
+    onAbort = () => reject(signal.reason);
+    signal.addEventListener("abort", onAbort, { once: true });
+  });
+  try {
+    await Promise.race([releaseDiscardedResponseBody(response), aborted]);
+  } finally {
+    signal.removeEventListener("abort", onAbort);
+  }
+}
 function isAbortLikeError(error) {
   if (typeof error !== "object" || error === null) {
     return false;
@@ -947,6 +960,7 @@ function createAttemptSignal(timeoutMs, callerSignal) {
     );
   }, timeoutMs);
   const onCallerAbort = () => {
+    clearTimeout(timer);
     controller.abort(callerSignal?.reason);
   };
   callerSignal?.addEventListener("abort", onCallerAbort, { once: true });
@@ -1104,7 +1118,7 @@ var Firewall = class {
             attemptSignal.signal
           );
         }
-        await discardResponseBody(response);
+        await discardResponseBody(response, attemptSignal.signal);
       } finally {
         attemptSignal.dispose();
       }

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/exceptions.ts","../src/hooks.ts","../src/utils/extract.ts","../src/adapters/langchain.ts","../src/firewall.ts","../src/adapters/vercel.ts","../src/outcomes.ts","../src/sanitization.ts","../src/index.ts"],"sourcesContent":["// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { HookLabel } from \"./hooks.js\";\nimport type { BlockResult } from \"./types.js\";\n\nconst MAX_PROMPT_DISPLAY_LEN = 100;\n\nexport interface MalformedInputDetails {\n  field?: string;\n  inputIndex?: number;\n  charOffset?: number;\n  malformedToken?: string;\n  codePoint?: string;\n  reason?: string;\n}\n\nexport class FirewallBlockedException extends Error {\n  readonly score: number;\n  readonly threshold: number;\n  readonly promptText: string;\n  readonly runId: string | undefined;\n  readonly hook: HookLabel | undefined;\n  readonly toolName: string | undefined;\n  readonly toolCallId: string | undefined;\n  readonly result: BlockResult | undefined;\n\n  constructor(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    runId?: string;\n    hook?: HookLabel;\n    toolName?: string;\n    toolCallId?: string;\n    result?: BlockResult;\n  }) {\n    super(FirewallBlockedException.formatMessage(params));\n    this.name = \"FirewallBlockedException\";\n    this.score = params.score;\n    this.threshold = params.threshold;\n    this.promptText = params.promptText;\n    this.runId = params.runId;\n    this.hook = params.hook;\n    this.toolName = params.toolName;\n    this.toolCallId = params.toolCallId;\n    this.result = params.result;\n    Object.setPrototypeOf(this, FirewallBlockedException.prototype);\n  }\n\n  private static formatMessage(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    result?: BlockResult;\n  }): string {\n    const truncated =\n      params.promptText.length > MAX_PROMPT_DISPLAY_LEN\n        ? `${params.promptText.slice(0, MAX_PROMPT_DISPLAY_LEN)}...`\n        : params.promptText;\n    if (\n      params.result?.prediction !== \"MALICIOUS\" &&\n      params.result?.governance?.action === \"block\"\n    ) {\n      return `Request blocked by Silmaril Firewall governance policy: '${truncated}'`;\n    }\n    return (\n      `Request blocked by Silmaril Firewall ` +\n      `(score=${params.score.toFixed(4)}, threshold=${params.threshold.toFixed(4)}): ` +\n      `'${truncated}'`\n    );\n  }\n}\n\n/** @deprecated Use FirewallBlockedException instead. */\nexport const PromptBlockedException = FirewallBlockedException;\n/** @deprecated Use FirewallBlockedException instead. */\nexport type PromptBlockedException = FirewallBlockedException;\n\nexport class SilmarilApiError extends Error {\n  readonly status: number;\n  readonly statusText: string;\n  readonly body: string;\n  readonly details: MalformedInputDetails | undefined;\n  readonly error: string | undefined;\n  readonly apiMessage: string | undefined;\n\n  constructor(params: {\n    status: number;\n    statusText: string;\n    body: string;\n    details?: MalformedInputDetails;\n    error?: string;\n    apiMessage?: string;\n  }) {\n    const statusText = params.statusText ? ` ${params.statusText}` : \"\";\n    super(`Silmaril API error ${params.status}${statusText}`);\n    this.name = \"SilmarilApiError\";\n    this.status = params.status;\n    this.statusText = params.statusText;\n    this.body = params.body;\n    const parsed = parseErrorBody(params.body);\n    this.details = params.details ?? parsed.details;\n    this.error = params.error ?? parsed.error;\n    this.apiMessage = params.apiMessage ?? parsed.apiMessage;\n    Object.setPrototypeOf(this, SilmarilApiError.prototype);\n  }\n}\n\nfunction parseErrorBody(body: string): {\n  details: MalformedInputDetails | undefined;\n  error: string | undefined;\n  apiMessage: string | undefined;\n} {\n  try {\n    const parsed = JSON.parse(body) as unknown;\n    if (!parsed || typeof parsed !== \"object\") {\n      return { details: undefined, error: undefined, apiMessage: undefined };\n    }\n    const data = parsed as Record<string, unknown>;\n    return {\n      details:\n        data.details && typeof data.details === \"object\"\n          ? (data.details as MalformedInputDetails)\n          : undefined,\n      error: typeof data.error === \"string\" ? data.error : undefined,\n      apiMessage: typeof data.message === \"string\" ? data.message : undefined,\n    };\n  } catch {\n    return { details: undefined, error: undefined, apiMessage: undefined };\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.TOOL_END,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nconst SKIP_ROLES: ReadonlySet<string> = new Set([\"ai\", \"assistant\"]);\nconst SYSTEM_ROLES: ReadonlySet<string> = new Set([\"system\"]);\nconst TOOL_ROLES: ReadonlySet<string> = new Set([\"tool\", \"function\"]);\n\ntype MessageContent = string | ReadonlyArray<string | { type?: string; text?: string }>;\n\ninterface DucktypedMessage {\n  role?: string;\n  type?: string;\n  content?: MessageContent;\n}\n\ninterface DucktypedGeneration {\n  text?: string;\n}\n\ninterface DucktypedLLMResult {\n  generations?: ReadonlyArray<ReadonlyArray<DucktypedGeneration>>;\n}\n\ninterface DucktypedDocument {\n  pageContent?: string;\n}\n\nfunction extractContentText(content: MessageContent | undefined): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  if (Array.isArray(content)) {\n    const parts: string[] = [];\n    for (const block of content) {\n      if (typeof block === \"string\") {\n        parts.push(block);\n      } else if (block && typeof block === \"object\" && block.type === \"text\") {\n        parts.push(block.text ?? \"\");\n      }\n    }\n    return parts.join(\" \");\n  }\n  return \"\";\n}\n\nfunction getRole(message: DucktypedMessage): string {\n  if (message.role !== undefined) {\n    return message.role.toLowerCase();\n  }\n  if (typeof message.type === \"string\") {\n    return message.type.toLowerCase();\n  }\n  return \"\";\n}\n\nexport function extractTextFromMessages(\n  messages: ReadonlyArray<DucktypedMessage>,\n  options: { includeSystem?: boolean; includeTool?: boolean } = {},\n): string {\n  const includeSystem = options.includeSystem ?? true;\n  const includeTool = options.includeTool ?? true;\n  const parts: string[] = [];\n  for (const message of messages) {\n    const role = getRole(message);\n    if (SKIP_ROLES.has(role)) {\n      continue;\n    }\n    if (!includeSystem && SYSTEM_ROLES.has(role)) {\n      continue;\n    }\n    if (!includeTool && TOOL_ROLES.has(role)) {\n      continue;\n    }\n    const text = extractContentText(message.content);\n    const stripped = text.trim();\n    if (stripped) {\n      parts.push(stripped);\n    }\n  }\n  return parts.join(\"\\n\");\n}\n\nexport function extractTextFromPrompts(prompts: readonly string[]): string {\n  return prompts\n    .map((p) => p.trim())\n    .filter((p) => p.length > 0)\n    .join(\"\\n\");\n}\n\nexport function extractTextFromToolInput(inputStr: string): string {\n  return inputStr.trim();\n}\n\nexport function extractTextFromLLMResult(response: DucktypedLLMResult): string {\n  const parts: string[] = [];\n  for (const genList of response.generations ?? []) {\n    for (const gen of genList) {\n      const text = (gen.text ?? \"\").trim();\n      if (text) {\n        parts.push(text);\n      }\n    }\n  }\n  return parts.join(\"\\n\");\n}\n\nexport function extractTextFromDocuments(documents: ReadonlyArray<DucktypedDocument>): string {\n  const parts: string[] = [];\n  for (const doc of documents) {\n    const text = (doc.pageContent ?? \"\").trim();\n    if (text) {\n      parts.push(text);\n    }\n  }\n  return parts.join(\"\\n\");\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { BaseCallbackHandler } from \"@langchain/core/callbacks/base\";\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport {\n  FIREWALL_HOOK_TO_LABEL,\n  FirewallHook,\n  HookLabel,\n  resolveHooks,\n} from \"../hooks.js\";\nimport type { BlockResult, ClassifyEvent, LangChainAdapterOptions } from \"../types.js\";\nimport {\n  extractTextFromDocuments,\n  extractTextFromLLMResult,\n  extractTextFromPrompts,\n  extractTextFromToolInput,\n} from \"../utils/extract.js\";\n\nconst USER_ROLES: ReadonlySet<string> = new Set([\"human\", \"user\"]);\n\ninterface LangChainDucktypedMessage {\n  role?: string;\n  type?: string;\n  content?: string | ReadonlyArray<string | { type?: string; text?: string }>;\n}\n\nfunction getMessageRole(message: LangChainDucktypedMessage): string {\n  if (typeof message.role === \"string\") {\n    return message.role.toLowerCase();\n  }\n  if (typeof message.type === \"string\") {\n    return message.type.toLowerCase();\n  }\n  return \"\";\n}\n\nfunction extractMessageText(content: LangChainDucktypedMessage[\"content\"]): string {\n  if (content === undefined) {\n    return \"\";\n  }\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<LangChainDucktypedMessage>,\n): LangChainDucktypedMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (USER_ROLES.has(getMessageRole(msg))) {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport async function createLangChainHandler(\n  firewall: Firewall,\n  options: LangChainAdapterOptions = {},\n): Promise<BaseCallbackHandler> {\n  const { BaseCallbackHandler } = await import(\"@langchain/core/callbacks/base\");\n\n  const enabledHooks = resolveHooks(options.hooks);\n  // includeSystem remains inert for the user-only chat-model scan.\n  // includeTool still controls the explicit tool start and end callbacks.\n  const includeTool = options.includeTool ?? true;\n  const failOpen = options.failOpen ?? true;\n  const logger =\n    options.logger ??\n    ((message: string, error: unknown): void => {\n      // eslint-disable-next-line no-console\n      console.warn(`silmaril.firewall: ${message}`, error);\n    });\n  const requestedMode = options.mode ?? (\n    options.shadowMode === undefined\n      ? firewall.mode\n      : options.shadowMode ? \"shadow\" : \"block\"\n  );\n  const onClassify = options.onClassify;\n\n  const fireOnClassify = (event: ClassifyEvent): void => {\n    if (!onClassify) {\n      return;\n    }\n    try {\n      onClassify(event);\n    } catch (err) {\n      logger(\"onClassify callback threw\", err);\n    }\n  };\n\n  const classify = async (\n    text: string,\n    hookLabel: HookLabel,\n    runId: string,\n    toolName?: string,\n  ): Promise<void> => {\n    let result: BlockResult;\n    try {\n      result = await firewall.classify(text, {\n        hook: hookLabel,\n        metadata: {\n          langgraph: { run_id: runId },\n          ...(options.conversationId === undefined ? {} : { conversationId: options.conversationId }),\n        },\n        ...(requestedMode !== undefined ? { mode: requestedMode } : {}),\n        ...(toolName !== undefined ? { toolName } : {}),\n      });\n    } catch (err) {\n      if (!failOpen) {\n        throw err;\n      }\n      logger(\"classification failed, allowing prompt through\", err);\n      return;\n    }\n    const threshold = result.threshold;\n    const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n    const effectiveMode = requestedMode ?? result.mode ?? \"block\";\n    const commonEventFields = {\n      hook: hookLabel,\n      ...(toolName !== undefined ? { toolName } : {}),\n      runId,\n      text,\n      result,\n    };\n    fireOnClassify({\n      ...commonEventFields,\n      blocked,\n      mode: effectiveMode,\n      shadowMode: effectiveMode === \"shadow\",\n    });\n    if (!blocked || effectiveMode !== \"block\") {\n      return;\n    }\n\n    throw new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      runId,\n      hook: hookLabel,\n      ...(toolName !== undefined ? { toolName } : {}),\n      result,\n    });\n  };\n\n  class SilmarilFirewallHandler extends BaseCallbackHandler {\n    override name = \"silmaril_firewall_handler\";\n    override raiseError = true;\n    override awaitHandlers = true;\n\n    override async handleChatModelStart(\n      _llm: unknown,\n      messages: unknown,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.CHAT_MODEL_START)) {\n        return;\n      }\n      const batches = messages as ReadonlyArray<ReadonlyArray<LangChainDucktypedMessage>>;\n      const flat: LangChainDucktypedMessage[] = [];\n      for (const batch of batches) {\n        for (const m of batch) {\n          flat.push(m);\n        }\n      }\n      const lastUser = findLastUserMessage(flat);\n      if (!lastUser) {\n        return;\n      }\n      const text = extractMessageText(lastUser.content).trim();\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.CHAT_MODEL_START], runId);\n    }\n\n    override async handleLLMStart(\n      _llm: unknown,\n      prompts: string[],\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.LLM_START)) {\n        return;\n      }\n      const text = extractTextFromPrompts(prompts);\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.LLM_START], runId);\n    }\n\n    override async handleToolStart(\n      tool: { name?: string } | undefined,\n      inputStr: string,\n      runId: string,\n    ): Promise<void> {\n      if (!includeTool || !enabledHooks.has(FirewallHook.TOOL_START)) {\n        return;\n      }\n      const text = extractTextFromToolInput(inputStr);\n      if (!text) {\n        return;\n      }\n      const toolName = tool?.name;\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.TOOL_START], runId, toolName);\n    }\n\n    override async handleRetrieverStart(\n      _retriever: unknown,\n      query: string,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.RETRIEVER_START)) {\n        return;\n      }\n      const text = query.trim();\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.RETRIEVER_START], runId);\n    }\n\n    override async handleLLMEnd(output: unknown, runId: string): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.LLM_END)) {\n        return;\n      }\n      const text = extractTextFromLLMResult(output as { generations?: ReadonlyArray<ReadonlyArray<{ text?: string }>> });\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.LLM_END], runId);\n    }\n\n    override async handleToolEnd(\n      output: unknown,\n      runId: string,\n      _parentRunId?: string,\n      _tags?: string[],\n      _kwargs?: { name?: string },\n    ): Promise<void> {\n      if (!includeTool || !enabledHooks.has(FirewallHook.TOOL_END)) {\n        return;\n      }\n      const text = String(output).trim();\n      if (!text) {\n        return;\n      }\n      const toolName = _kwargs?.name;\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.TOOL_END], runId, toolName);\n    }\n\n    override async handleRetrieverEnd(\n      documents: ReadonlyArray<{ pageContent?: string }>,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.RETRIEVER_END)) {\n        return;\n      }\n      const text = extractTextFromDocuments(documents);\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.RETRIEVER_END], runId);\n    }\n  }\n\n  return new SilmarilFirewallHandler();\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport { randomUUID } from \"node:crypto\";\n\nimport { createMiddleware, type FirewallMiddleware } from \"./adapters/vercel.js\";\nimport { SilmarilApiError } from \"./exceptions.js\";\nimport { normalizeHarmfulOutcomeMap, normalizePrimaryOutcome } from \"./outcomes.js\";\nimport { sanitizeText } from \"./sanitization.js\";\nimport type {\n  BlockResult,\n  ClassifyBatchOptions,\n  ClassifyOptions,\n  ClassificationMetadata,\n  FirewallOptions,\n  FirewallMode,\n  GovernanceContext,\n  GovernanceDecision,\n  LangChainAdapterOptions,\n  LangChainFirewallHandler,\n  MiddlewareOptions,\n  Prediction,\n} from \"./types.js\";\n\nexport const SDK_VERSION = \"0.7.1\";\nexport const DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_RETRIES = 5;\nconst MAX_BACKOFF_SECONDS = 30;\nconst MAX_ERROR_BODY_BYTES = 1 << 16;\n/**\n * Largest delay a timer can represent. Both `setTimeout` and the\n * `AbortSignal.timeout` this client used before silently collapse a larger\n * delay to 1 ms, which would turn a long timeout into an immediate abort.\n */\nconst MAX_TIMEOUT_MS = 2_147_483_647;\n\ninterface SingleClassifyPayload {\n  text: string;\n  mode?: FirewallMode;\n  hook?: string;\n  tool_name?: string;\n  metadata?: ClassificationMetadata;\n}\n\ninterface BatchClassifyPayload {\n  texts: readonly string[];\n  mode?: FirewallMode;\n  hooks?: readonly string[];\n  tool_names?: readonly (string | null)[];\n  metadata?: readonly (ClassificationMetadata | null)[];\n}\n\ninterface SingleClassifyResponse {\n  prediction: Prediction;\n  score: number;\n  threshold: number;\n  mode?: unknown;\n  primary_outcome?: unknown;\n  outcome_scores?: unknown;\n  detector_scores?: unknown;\n  detector_counts?: unknown;\n  governance?: unknown;\n}\n\ninterface BatchClassifyResponse {\n  predictions: readonly SingleClassifyResponse[];\n}\n\nfunction resolveMode(value: unknown, requestedMode?: FirewallMode): FirewallMode | undefined {\n  let responseMode: FirewallMode | undefined;\n  if (value === \"shadow\" || value === \"warn\" || value === \"block\") {\n    responseMode = value;\n  } else if (value !== undefined) {\n    throw new Error(\"Firewall: response mode must be shadow, warn, or block\");\n  }\n\n  // A supplied mode is the per-request override contract. Prefer it during\n  // rolling upgrades so a missing or stale response field cannot strengthen\n  // enforcement beyond what the caller requested.\n  return requestedMode ?? responseMode;\n}\n\nfunction legacyMode(shadowMode: boolean | undefined): FirewallMode | undefined {\n  return shadowMode === undefined ? undefined : shadowMode ? \"shadow\" : \"block\";\n}\n\nfunction blockResultFromResponse(\n  data: SingleClassifyResponse,\n  requestedMode?: FirewallMode,\n): BlockResult {\n  if (data.prediction !== \"BENIGN\" && data.prediction !== \"MALICIOUS\") {\n    throw new Error(\"Firewall: response prediction must be BENIGN or MALICIOUS\");\n  }\n  const result: {\n    prediction: Prediction;\n    score: number;\n    threshold: number;\n    mode?: FirewallMode;\n    primaryOutcome?: NonNullable<BlockResult[\"primaryOutcome\"]>;\n    outcomeScores?: NonNullable<BlockResult[\"outcomeScores\"]>;\n    detectorScores?: NonNullable<BlockResult[\"detectorScores\"]>;\n    detectorCounts?: NonNullable<BlockResult[\"detectorCounts\"]>;\n    governance?: GovernanceDecision;\n  } = {\n    prediction: data.prediction,\n    score: Number(data.score),\n    threshold: Number(data.threshold),\n  };\n  const mode = resolveMode(data.mode, requestedMode);\n  if (mode !== undefined) {\n    result.mode = mode;\n  }\n  if (data.primary_outcome !== undefined) {\n    result.primaryOutcome = normalizePrimaryOutcome(data.primary_outcome);\n  }\n  if (data.outcome_scores !== undefined) {\n    const outcomeScores = normalizeHarmfulOutcomeMap(data.outcome_scores, \"outcome_scores\");\n    if (outcomeScores !== undefined) {\n      result.outcomeScores = outcomeScores;\n    }\n  }\n  if (data.detector_scores !== undefined) {\n    const detectorScores = normalizeHarmfulOutcomeMap(data.detector_scores, \"detector_scores\");\n    if (detectorScores !== undefined) {\n      result.detectorScores = detectorScores;\n    }\n  }\n  if (data.detector_counts !== undefined) {\n    const detectorCounts = normalizeHarmfulOutcomeMap(data.detector_counts, \"detector_counts\");\n    if (detectorCounts !== undefined) {\n      result.detectorCounts = detectorCounts;\n    }\n  }\n  if (data.governance !== undefined) {\n    result.governance = governanceDecisionFromResponse(data.governance);\n  }\n  return Object.freeze(result);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction withSdkMetadata(\n  metadata: ClassificationMetadata | undefined,\n  info: {\n    requestId: string;\n    inputIndex?: number;\n    governance?: GovernanceContext;\n  },\n): ClassificationMetadata {\n  const payload: Record<string, unknown> = { ...(metadata ?? {}) };\n  const existing = payload.silmaril;\n  if (existing !== undefined && !isRecord(existing)) {\n    throw new Error(\"Firewall: metadata.silmaril must be an object when provided\");\n  }\n  payload.silmaril = {\n    ...(isRecord(existing) ? existing : {}),\n    sdk_language: \"typescript\",\n    sdk_version: SDK_VERSION,\n    request_id: info.requestId,\n    ...(info.inputIndex === undefined ? {} : { input_index: info.inputIndex }),\n    ...(info.governance === undefined\n      ? {}\n      : { governance: governanceContextToWire(info.governance) }),\n  };\n  return payload;\n}\n\nfunction governanceContextToWire(context: GovernanceContext): Record<string, unknown> {\n  return {\n    ...(context.agent === undefined ? {} : { agent: context.agent }),\n    ...(context.resource === undefined\n      ? {}\n      : {\n          resource: {\n            kind: context.resource.kind,\n            ...(context.resource.id === undefined ? {} : { id: context.resource.id }),\n            ...(context.resource.parentId === undefined\n              ? {}\n              : { parent_id: context.resource.parentId }),\n          },\n        }),\n  };\n}\n\nfunction governanceDecisionFromResponse(value: unknown): GovernanceDecision {\n  if (!isRecord(value)) {\n    throw new Error(\"Firewall: response governance must be an object\");\n  }\n  if (value.action !== \"allow\" && value.action !== \"block\") {\n    throw new Error(\"Firewall: response governance action must be allow or block\");\n  }\n  if (typeof value.policy_version !== \"string\" || value.policy_version.length === 0) {\n    throw new Error(\"Firewall: response governance policy_version must be a non-empty string\");\n  }\n  if (value.rule_id !== undefined && typeof value.rule_id !== \"string\") {\n    throw new Error(\"Firewall: response governance rule_id must be a string when provided\");\n  }\n  return Object.freeze({\n    action: value.action,\n    ...(value.rule_id === undefined ? {} : { ruleId: value.rule_id }),\n    policyVersion: value.policy_version,\n  });\n}\n\nasync function readCappedErrorBody(response: Response): Promise<string> {\n  if (!response.body) {\n    return response.text().then((body) => body.slice(0, MAX_ERROR_BODY_BYTES)).catch(() => \"\");\n  }\n\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let remaining = MAX_ERROR_BODY_BYTES;\n  try {\n    while (remaining > 0) {\n      const { done, value } = await reader.read();\n      if (done) {\n        break;\n      }\n      if (!value) {\n        continue;\n      }\n      const chunk = value.byteLength > remaining ? value.slice(0, remaining) : value;\n      chunks.push(chunk);\n      remaining -= chunk.byteLength;\n      if (chunk.byteLength < value.byteLength) {\n        break;\n      }\n    }\n  } catch {\n    return \"\";\n  } finally {\n    await reader.cancel().catch(() => undefined);\n  }\n\n  const total = chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0);\n  const body = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    body.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return new TextDecoder().decode(body);\n}\n\n/** Releases a response we will not read so a retry does not leak its socket. */\nasync function discardResponseBody(response: Response): Promise<void> {\n  try {\n    if (response.body) {\n      if (!response.body.locked) {\n        await response.body.cancel();\n      }\n      return;\n    }\n    await response.text();\n  } catch {\n    // The discarded body belongs to a response we already decided to retry.\n  }\n}\n\nfunction isAbortLikeError(error: unknown): boolean {\n  if (typeof error !== \"object\" || error === null) {\n    return false;\n  }\n  const name = (error as { name?: unknown }).name;\n  return name === \"AbortError\" || name === \"TimeoutError\";\n}\n\n/**\n * Reads a decoded body under an attempt signal. Native fetch can reject a body\n * read that the signal cancelled with a generic `AbortError`, which would drop\n * the caller's abort reason or the timeout reason. Only abort-caused failures\n * are rewritten; decode and transport errors are surfaced unchanged.\n */\nasync function readBodyUnderSignal<T>(read: () => Promise<T>, signal: AbortSignal): Promise<T> {\n  try {\n    return await read();\n  } catch (error) {\n    if (signal.aborted && isAbortLikeError(error)) {\n      throw signal.reason;\n    }\n    throw error;\n  }\n}\n\ninterface AttemptSignal {\n  readonly signal: AbortSignal;\n  dispose(): void;\n}\n\n/**\n * Combines the per-attempt timeout with an optional caller signal. The caller\n * signal is shared across sibling calls, so the listener and the timer are\n * released by `dispose()` once the attempt no longer needs them.\n */\nfunction createAttemptSignal(timeoutMs: number, callerSignal?: AbortSignal): AttemptSignal {\n  const controller = new AbortController();\n  const timer = setTimeout(() => {\n    controller.abort(\n      new DOMException(\"The operation was aborted due to timeout\", \"TimeoutError\"),\n    );\n  }, timeoutMs);\n  const onCallerAbort = (): void => {\n    controller.abort(callerSignal?.reason);\n  };\n  callerSignal?.addEventListener(\"abort\", onCallerAbort, { once: true });\n  return {\n    signal: controller.signal,\n    dispose: () => {\n      clearTimeout(timer);\n      callerSignal?.removeEventListener(\"abort\", onCallerAbort);\n    },\n  };\n}\n\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise<void>((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(signal.reason);\n      return;\n    }\n    const onAbort = (): void => {\n      clearTimeout(timer);\n      reject(signal?.reason);\n    };\n    const timer = setTimeout(() => {\n      signal?.removeEventListener(\"abort\", onAbort);\n      resolve();\n    }, ms);\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n  });\n}\n\n/**\n * Firewall client for the `/classify` API.\n *\n * Instance state is set once in the constructor and never mutated by a request,\n * so one client is safe to share across any number of concurrent `classify()`\n * and `classifyBatch()` promises within a single JavaScript runtime. Each\n * worker thread owns its own client: `Firewall` instances are not transferable\n * across `worker_threads` boundaries.\n */\nexport class Firewall {\n  readonly apiKey: string;\n  readonly apiUrl: string;\n  readonly timeoutMs: number;\n  readonly shadowMode: boolean;\n  readonly mode: FirewallMode | undefined;\n\n  private readonly headers: Readonly<Record<string, string>>;\n\n  constructor(options: FirewallOptions) {\n    if (!options.apiKey) {\n      throw new Error(\"Firewall: apiKey is required\");\n    }\n    if (!options.apiUrl) {\n      throw new Error(\"Firewall: apiUrl is required\");\n    }\n    this.apiKey = options.apiKey;\n    this.apiUrl = options.apiUrl;\n    this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n    if (typeof this.timeoutMs !== \"number\" || !Number.isFinite(this.timeoutMs) || this.timeoutMs < 0) {\n      throw new Error(`Firewall: timeoutMs must be a finite non-negative number, got ${this.timeoutMs}`);\n    }\n    if (this.timeoutMs > MAX_TIMEOUT_MS) {\n      throw new Error(\n        `Firewall: timeoutMs must be at most ${MAX_TIMEOUT_MS} ms, got ${this.timeoutMs}`,\n      );\n    }\n    this.mode = options.mode ?? legacyMode(options.shadowMode);\n    this.shadowMode = this.mode === \"shadow\";\n    this.headers = Object.freeze({\n      \"x-api-key\": this.apiKey,\n      \"content-type\": \"application/json\",\n    });\n  }\n\n  async classify(text: string, options: ClassifyOptions = {}): Promise<BlockResult> {\n    const requestId = options.requestId ?? randomUUID();\n    return this.classifySingle(sanitizeText(text), options, { requestId });\n  }\n\n  async classifyBatch(\n    texts: readonly string[],\n    options: ClassifyBatchOptions = {},\n  ): Promise<BlockResult[]> {\n    if (texts.length === 0) {\n      throw new Error(\"Firewall: texts must not be empty\");\n    }\n    if (options.hooks !== undefined && options.hooks.length !== texts.length) {\n      throw new Error(\n        `Firewall: hooks length ${options.hooks.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.toolNames !== undefined && options.toolNames.length !== texts.length) {\n      throw new Error(\n        `Firewall: toolNames length ${options.toolNames.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.metadata !== undefined && options.metadata.length !== texts.length) {\n      throw new Error(\n        `Firewall: metadata length ${options.metadata.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.governance !== undefined && options.governance.length !== texts.length) {\n      throw new Error(\n        `Firewall: governance length ${options.governance.length} does not match texts length ${texts.length}`,\n      );\n    }\n\n    const requestId = options.requestId ?? randomUUID();\n    const payload: BatchClassifyPayload = {\n      texts: texts.map((text) => sanitizeText(text)),\n    };\n    const requestedMode = options.mode ?? this.mode;\n    if (requestedMode !== undefined) {\n      payload.mode = requestedMode;\n    }\n    if (options.hooks && options.hooks.length > 0) {\n      payload.hooks = options.hooks.map((h) => String(h));\n    }\n    if (options.toolNames && options.toolNames.length > 0) {\n      payload.tool_names = options.toolNames.map((t) => (t === undefined ? null : t));\n    }\n    payload.metadata = texts.map((_, index) =>\n      withSdkMetadata(options.metadata?.[index], {\n        requestId,\n        inputIndex: index,\n        ...(options.governance?.[index] === undefined\n          ? {}\n          : { governance: options.governance[index] }),\n      }),\n    );\n    const data = await this.postWithRetry<BatchClassifyResponse>(payload, options.signal);\n    if (!Array.isArray(data.predictions)) {\n      throw new Error(\"Firewall: response predictions must be an array\");\n    }\n    if (data.predictions.length !== payload.texts.length) {\n      throw new Error(\n        `Firewall: response predictions length ${data.predictions.length} does not match submitted texts length ${payload.texts.length}`,\n      );\n    }\n    return data.predictions.map((p) => blockResultFromResponse(p, requestedMode));\n  }\n\n  asLangChainHandler<THandler = LangChainFirewallHandler>(\n    options: LangChainAdapterOptions = {},\n  ): Promise<THandler> {\n    return import(\"./adapters/langchain.js\").then((m) =>\n      m.createLangChainHandler(this, options) as Promise<THandler>,\n    );\n  }\n\n  asMiddleware(options: MiddlewareOptions = {}): FirewallMiddleware {\n    return createMiddleware(this, options);\n  }\n\n  private async postWithRetry<T>(\n    payload: SingleClassifyPayload | BatchClassifyPayload,\n    callerSignal?: AbortSignal,\n    maxRetries: number = DEFAULT_MAX_RETRIES,\n  ): Promise<T> {\n    // Cancellation outranks payload serialization, which can itself throw on\n    // cyclic metadata or a throwing `toJSON`.\n    callerSignal?.throwIfAborted();\n    // Serialize before the first attempt so retries resend the same logical\n    // event even if the caller mutates the objects it passed in.\n    const body = JSON.stringify(payload);\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      callerSignal?.throwIfAborted();\n      const attemptSignal = createAttemptSignal(this.timeoutMs, callerSignal);\n      try {\n        const response = await fetch(this.apiUrl, {\n          method: \"POST\",\n          headers: this.headers,\n          body,\n          redirect: \"error\",\n          signal: attemptSignal.signal,\n        });\n        if (response.status !== 429 || attempt === maxRetries) {\n          if (!response.ok) {\n            const errorBody = await readCappedErrorBody(response);\n            // The capped read swallows its own failures, so an abort during it\n            // would otherwise be reported as a plain API error.\n            attemptSignal.signal.throwIfAborted();\n            throw new SilmarilApiError({\n              status: response.status,\n              statusText: response.statusText,\n              body: errorBody,\n            });\n          }\n          return await readBodyUnderSignal<T>(\n            () => response.json() as Promise<T>,\n            attemptSignal.signal,\n          );\n        }\n        await discardResponseBody(response);\n      } finally {\n        attemptSignal.dispose();\n      }\n      await sleep(Math.min(2 ** attempt, MAX_BACKOFF_SECONDS) * 1000, callerSignal);\n    }\n    throw new Error(\"Firewall: exhausted retries (unreachable)\");\n  }\n\n  private async classifySingle(\n    text: string,\n    options: ClassifyOptions,\n    metadataInfo: {\n      requestId: string;\n    },\n  ): Promise<BlockResult> {\n    const payload: SingleClassifyPayload = { text };\n    const requestedMode = options.mode ?? this.mode;\n    if (requestedMode !== undefined) {\n      payload.mode = requestedMode;\n    }\n    if (options.hook !== undefined) {\n      payload.hook = options.hook;\n    }\n    if (options.toolName !== undefined) {\n      payload.tool_name = options.toolName;\n    }\n    payload.metadata = withSdkMetadata(options.metadata, {\n      ...metadataInfo,\n      ...(options.governance === undefined ? {} : { governance: options.governance }),\n    });\n    const data = await this.postWithRetry<SingleClassifyResponse>(payload, options.signal);\n    return blockResultFromResponse(data, requestedMode);\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { BlockResult, MiddlewareOptions } from \"../types.js\";\n\ninterface VercelContentPart {\n  type?: string;\n  text?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  output?: unknown;\n  result?: unknown;\n}\n\ninterface VercelPromptMessage {\n  role: string;\n  content: string | ReadonlyArray<VercelContentPart | string>;\n}\n\ninterface VercelToolCall {\n  toolCallType?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  input?: unknown;\n}\n\ninterface VercelGenerateResult {\n  text?: string;\n  toolCalls?: ReadonlyArray<VercelToolCall>;\n}\n\ninterface WrapGenerateArgs<TResult extends VercelGenerateResult & Record<string, unknown>> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doGenerate: () => PromiseLike<TResult>;\n}\n\ninterface WrapStreamArgs<\n  TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>,\n> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doStream: () => PromiseLike<TResult>;\n}\n\ninterface StreamPart {\n  type?: string;\n  textDelta?: string;\n  delta?: string;\n}\n\ninterface VercelStepContext {\n  toolName: string | undefined;\n  toolCallId: string | undefined;\n}\n\nfunction stringifyToolValue(value: unknown): string {\n  if (value === null || value === undefined) {\n    return \"\";\n  }\n  if (typeof value === \"string\") {\n    return value;\n  }\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction extractContentText(content: VercelPromptMessage[\"content\"]): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction iterateToolResultParts(\n  message: VercelPromptMessage,\n): Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> {\n  if (typeof message.content === \"string\") {\n    return [];\n  }\n  const out: Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> = [];\n  for (const part of message.content) {\n    if (typeof part === \"string\") {\n      continue;\n    }\n    if (part.type === \"tool-result\") {\n      const text = stringifyToolResult(part.result !== undefined ? part.result : part.output);\n      if (text.trim()) {\n        out.push({ text, toolName: part.toolName, toolCallId: part.toolCallId });\n      }\n    }\n  }\n  return out;\n}\n\nfunction stringifyToolResult(value: unknown): string {\n  if (!isRecord(value)) {\n    return stringifyToolValue(value);\n  }\n  if ((value.type === \"text\" || value.type === \"error-text\") && typeof value.value === \"string\") {\n    return value.value;\n  }\n  if ((value.type === \"json\" || value.type === \"error-json\") && value.value !== undefined) {\n    return stringifyToolValue(value.value);\n  }\n  if (value.type === \"content\" && Array.isArray(value.value)) {\n    return value.value\n      .map((part) => (isRecord(part) && part.type === \"text\" && typeof part.text === \"string\" ? part.text : \"\"))\n      .filter((text) => text.length > 0)\n      .join(\" \");\n  }\n  return stringifyToolValue(value);\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<VercelPromptMessage>,\n): VercelPromptMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (msg.role.toLowerCase() === \"user\") {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport interface FirewallMiddleware {\n  readonly specificationVersion: \"v3\";\n  readonly middlewareVersion: \"v2\";\n  wrapGenerate: <TResult extends VercelGenerateResult & Record<string, unknown>>(\n    args: WrapGenerateArgs<TResult>,\n  ) => Promise<TResult>;\n  wrapStream: <TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>(\n    args: WrapStreamArgs<TResult>,\n  ) => Promise<TResult>;\n}\n\nexport function createMiddleware(\n  firewall: Firewall,\n  options: MiddlewareOptions = {},\n): FirewallMiddleware {\n  const scanInput = options.scanInput ?? true;\n  const scanOutput = options.scanOutput ?? false;\n  const requestedMode = options.mode ?? (\n    options.shadowMode === undefined\n      ? firewall.mode\n      : options.shadowMode ? \"shadow\" : \"block\"\n  );\n\n  const classifyOrBlock = async (\n    text: string,\n    hook: HookLabel,\n    context: VercelStepContext = { toolName: undefined, toolCallId: undefined },\n  ): Promise<void> => {\n    if (!text.trim()) {\n      return;\n    }\n    const { toolName, toolCallId } = context;\n    const result: BlockResult = await firewall.classify(\n      text,\n      {\n        hook,\n        ...(toolName !== undefined ? { toolName } : {}),\n        ...(requestedMode !== undefined ? { mode: requestedMode } : {}),\n      },\n    );\n    const threshold = result.threshold;\n    const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n    const effectiveMode = requestedMode ?? result.mode ?? \"block\";\n    const commonEventFields = {\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      text,\n      result,\n    };\n    options.onClassify?.({\n      ...commonEventFields,\n      blocked,\n      mode: effectiveMode,\n      shadowMode: effectiveMode === \"shadow\",\n    });\n    if (!blocked || effectiveMode !== \"block\") {\n      return;\n    }\n\n    const err = new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      result,\n    });\n    options.onBlocked?.(err);\n    throw err;\n  };\n\n  const scanPrompt = async (prompt: ReadonlyArray<VercelPromptMessage>): Promise<void> => {\n    if (prompt.length === 0) {\n      return;\n    }\n    const last = prompt[prompt.length - 1]!;\n    const role = last.role.toLowerCase();\n\n    // If the newest message is a tool result (typical mid-flow in a\n    // tool-calling loop), classify each tool-result part individually with\n    // tool_response + toolName. No manual wiring from the caller — the\n    // toolName is read directly from the Vercel content part.\n    if (role === \"tool\") {\n      for (const { text, toolName, toolCallId } of iterateToolResultParts(last)) {\n        await classifyOrBlock(text, HookLabel.TOOL_RESPONSE, { toolName, toolCallId });\n      }\n      return;\n    }\n\n    // Otherwise, fall back to scanning the most recent user message.\n    // Covers: [user], [system, user], [user, assistant(text), user], etc.\n    const lastUser = findLastUserMessage(prompt);\n    if (!lastUser) {\n      return;\n    }\n    const text = extractContentText(lastUser.content).trim();\n    if (!text) {\n      return;\n    }\n    await classifyOrBlock(text, HookLabel.USER_INPUT);\n  };\n\n  const scanGenerateResult = async (result: VercelGenerateResult): Promise<void> => {\n    if (scanOutput && typeof result.text === \"string\" && result.text.length > 0) {\n      await classifyOrBlock(result.text, HookLabel.LLM_OUTPUT);\n    }\n    if (options.scanToolCalls && Array.isArray(result.toolCalls)) {\n      for (const call of result.toolCalls) {\n        if (!call || typeof call !== \"object\") {\n          continue;\n        }\n        const toolInput = call.args !== undefined ? call.args : call.input;\n        const args =\n          typeof toolInput === \"string\" ? toolInput : stringifyToolValue(toolInput);\n        const toolName = typeof call.toolName === \"string\" ? call.toolName : undefined;\n        const toolCallId = typeof call.toolCallId === \"string\" ? call.toolCallId : undefined;\n        if (args.trim()) {\n          await classifyOrBlock(args, HookLabel.TOOL_CALL, { toolName, toolCallId });\n        }\n      }\n    }\n  };\n\n  return {\n    specificationVersion: \"v3\",\n    middlewareVersion: \"v2\",\n\n    async wrapGenerate<TResult extends VercelGenerateResult & Record<string, unknown>>({\n      params,\n      doGenerate,\n    }: WrapGenerateArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const result = await doGenerate();\n      await scanGenerateResult(result);\n      return result;\n    },\n\n    async wrapStream<TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>({\n      params,\n      doStream,\n    }: WrapStreamArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const { stream, ...rest } = await doStream();\n      if (!scanOutput) {\n        return { stream, ...rest } as unknown as TResult;\n      }\n\n      let buffered = \"\";\n      const transformed = stream.pipeThrough(\n        new TransformStream<unknown, unknown>({\n          transform(chunk, controller): void {\n            const part = chunk as StreamPart;\n            if (part && part.type === \"text-delta\") {\n              const delta = part.textDelta ?? part.delta ?? \"\";\n              buffered += delta;\n            }\n            controller.enqueue(chunk);\n          },\n          async flush(controller): Promise<void> {\n            if (!buffered.trim()) {\n              return;\n            }\n            try {\n              await classifyOrBlock(buffered, HookLabel.LLM_OUTPUT);\n            } catch (err) {\n              if (err instanceof FirewallBlockedException) {\n                controller.enqueue({ type: \"error\", error: err });\n                return;\n              }\n              throw err;\n            }\n          },\n        }),\n      );\n      return { stream: transformed, ...rest } as unknown as TResult;\n    },\n  };\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const Outcome = {\n  Benign: \"benign\",\n  InformationDisclosure: \"information_disclosure\",\n  SecretExposure: \"secret_exposure\",\n  ControlAbuse: \"control_abuse\",\n  SystemCompromise: \"system_compromise\",\n  ServiceDisruption: \"service_disruption\",\n  CodeGeneration: \"code_generation\",\n  StoryScriptGeneration: \"story_script_generation\",\n  GameGeneration: \"game_generation\",\n  WebsiteGeneration: \"website_generation\",\n  ClickUpTermsViolation: \"clickup_terms_violation\",\n  TraditionalAiAbuse: \"traditional_ai_abuse\",\n} as const;\n\ndeclare const unknownOutcomeBrand: unique symbol;\n\nexport type KnownPrimaryOutcome = (typeof Outcome)[keyof typeof Outcome];\nexport type KnownHarmfulOutcome = Exclude<KnownPrimaryOutcome, typeof Outcome.Benign>;\nexport type UnknownOutcome = string & { readonly [unknownOutcomeBrand]: \"UnknownOutcome\" };\nexport type PrimaryOutcome = KnownPrimaryOutcome | UnknownOutcome;\nexport type HarmfulOutcome = KnownHarmfulOutcome | UnknownOutcome;\n\nexport const PRIMARY_OUTCOMES = [\n  Outcome.Benign,\n  Outcome.InformationDisclosure,\n  Outcome.SecretExposure,\n  Outcome.ControlAbuse,\n  Outcome.SystemCompromise,\n  Outcome.ServiceDisruption,\n  Outcome.CodeGeneration,\n  Outcome.StoryScriptGeneration,\n  Outcome.GameGeneration,\n  Outcome.WebsiteGeneration,\n  Outcome.ClickUpTermsViolation,\n  Outcome.TraditionalAiAbuse,\n] as const satisfies readonly PrimaryOutcome[];\n\nexport const HARMFUL_OUTCOMES = [\n  Outcome.InformationDisclosure,\n  Outcome.SecretExposure,\n  Outcome.ControlAbuse,\n  Outcome.SystemCompromise,\n  Outcome.ServiceDisruption,\n  Outcome.CodeGeneration,\n  Outcome.StoryScriptGeneration,\n  Outcome.GameGeneration,\n  Outcome.WebsiteGeneration,\n  Outcome.ClickUpTermsViolation,\n  Outcome.TraditionalAiAbuse,\n] as const satisfies readonly KnownHarmfulOutcome[];\n\nexport const OUTCOME_DESCRIPTIONS = {\n  [Outcome.Benign]: \"No harmful firewall outcome detected.\",\n  [Outcome.InformationDisclosure]:\n    \"Exposes private data, documents, internal context, logs, traces, customer data, SQL rows, topology, or similar non-secret sensitive information.\",\n  [Outcome.SecretExposure]:\n    \"Exposes credentials, tokens, API keys, cookies, passwords, signing keys, OAuth secrets, session material, or webhook secrets.\",\n  [Outcome.ControlAbuse]:\n    \"Misuses authorized tools or user privileges to send, change, approve, delete, operate, or bypass policy/RBAC without a stronger outcome.\",\n  [Outcome.SystemCompromise]:\n    \"Enables privilege escalation, account takeover, hostile integration or plugin takeover, persistence, lateral movement, attacker webhook registration, or code/plugin execution.\",\n  [Outcome.ServiceDisruption]:\n    \"Causes downtime, lockout, degradation, alert suppression, destructive loops, resource exhaustion, cost spikes, or hidden outage evidence.\",\n  [Outcome.CodeGeneration]:\n    \"Requests generation or material modification of executable code, scripts, workflows, or configuration.\",\n  [Outcome.StoryScriptGeneration]:\n    \"Requests generation of narrative prose, dialogue, scripts, or story artifacts.\",\n  [Outcome.GameGeneration]:\n    \"Requests generation of a game, quest, level, mechanic, or playable experience.\",\n  [Outcome.WebsiteGeneration]:\n    \"Requests generation of a website, landing page, storefront, or web experience.\",\n  [Outcome.ClickUpTermsViolation]:\n    \"Requests content or actions that violate the configured ClickUp tenant policy.\",\n  [Outcome.TraditionalAiAbuse]:\n    \"Requests unsafe AI assistance outside the concrete security outcome classes.\",\n} as const satisfies Readonly<Record<KnownPrimaryOutcome, string>>;\n\nconst PRIMARY_OUTCOME_SET = new Set<string>(PRIMARY_OUTCOMES);\nconst HARMFUL_OUTCOME_SET = new Set<string>(HARMFUL_OUTCOMES);\n\nexport function isPrimaryOutcome(value: unknown): value is KnownPrimaryOutcome {\n  return typeof value === \"string\" && PRIMARY_OUTCOME_SET.has(value);\n}\n\nexport function isHarmfulOutcome(value: unknown): value is KnownHarmfulOutcome {\n  return typeof value === \"string\" && HARMFUL_OUTCOME_SET.has(value);\n}\n\nexport function normalizePrimaryOutcome(\n  value: unknown,\n  fieldName = \"primary_outcome\",\n): PrimaryOutcome {\n  if (typeof value !== \"string\") {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(value)}`);\n  }\n  return isPrimaryOutcome(value) ? value : (value as UnknownOutcome);\n}\n\nexport function normalizeHarmfulOutcome(\n  value: unknown,\n  fieldName = \"outcome\",\n): HarmfulOutcome {\n  if (typeof value !== \"string\" || value === Outcome.Benign) {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(value)}`);\n  }\n  return isHarmfulOutcome(value) ? value : (value as UnknownOutcome);\n}\n\nexport function normalizeHarmfulOutcomeMap(\n  values: unknown,\n  fieldName: string,\n): Readonly<Partial<Record<HarmfulOutcome, number>>> | undefined {\n  if (values === undefined || values === null) {\n    return undefined;\n  }\n  if (typeof values !== \"object\" || Array.isArray(values)) {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(values)}`);\n  }\n  const out: Partial<Record<HarmfulOutcome, number>> = {};\n  for (const [key, value] of Object.entries(values)) {\n    const normalizedKey = normalizeHarmfulOutcome(key, `${fieldName} key`);\n    if (typeof value !== \"number\") {\n      throw new Error(`Firewall: invalid ${fieldName} value for ${JSON.stringify(key)}`);\n    }\n    out[normalizedKey] = value;\n  }\n  return Object.freeze(out);\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nfunction isHighSurrogate(code: number): boolean {\n  return code >= 0xd800 && code <= 0xdbff;\n}\n\nfunction isLowSurrogate(code: number): boolean {\n  return code >= 0xdc00 && code <= 0xdfff;\n}\n\nexport function sanitizeText(text: string): string {\n  let out = \"\";\n  for (let i = 0; i < text.length; i++) {\n    const code = text.charCodeAt(i);\n    if (isHighSurrogate(code)) {\n      if (i + 1 < text.length && isLowSurrogate(text.charCodeAt(i + 1))) {\n        out += text[i]!;\n        out += text[i + 1]!;\n        i++;\n      }\n      continue;\n    }\n    if (!isLowSurrogate(code)) {\n      out += text[i]!;\n    }\n  }\n  return out;\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport {\n  Firewall,\n  DEFAULT_TIMEOUT_MS,\n} from \"./firewall.js\";\n\nexport { FirewallBlockedException, PromptBlockedException, SilmarilApiError } from \"./exceptions.js\";\nexport type { MalformedInputDetails } from \"./exceptions.js\";\n\nexport type { FirewallMiddleware } from \"./adapters/vercel.js\";\n\nexport {\n  HookLabel,\n  FirewallHook,\n  DEFAULT_HOOKS,\n  INPUT_HOOKS,\n  OUTPUT_HOOKS,\n  ALL_HOOKS,\n  FIREWALL_HOOK_TO_LABEL,\n  resolveHooks,\n  prependHook,\n  prependToolName,\n} from \"./hooks.js\";\n\nexport {\n  Outcome,\n  PRIMARY_OUTCOMES,\n  HARMFUL_OUTCOMES,\n  OUTCOME_DESCRIPTIONS,\n  isPrimaryOutcome,\n  isHarmfulOutcome,\n  normalizePrimaryOutcome,\n  normalizeHarmfulOutcome,\n  normalizeHarmfulOutcomeMap,\n} from \"./outcomes.js\";\n\nexport type {\n  KnownPrimaryOutcome,\n  KnownHarmfulOutcome,\n  PrimaryOutcome,\n  HarmfulOutcome,\n  UnknownOutcome,\n} from \"./outcomes.js\";\n\nexport type {\n  BlockResult,\n  ClassifyEvent,\n  Prediction,\n  FirewallMode,\n  GovernanceAction,\n  GovernanceResourceKind,\n  GovernanceResource,\n  GovernanceContext,\n  GovernanceDecision,\n  ClassificationMetadata,\n  FirewallOptions,\n  ClassifyOptions,\n  ClassifyBatchOptions,\n  LangChainAdapterOptions,\n  LangChainFirewallHandler,\n  MiddlewareOptions,\n} from \"./types.js\";\n"],"mappings":";;;;;;;;;;;;;;;;AA6GA,SAAS,eAAe,MAItB;AACA,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,aAAO,EAAE,SAAS,QAAW,OAAO,QAAW,YAAY,OAAU;AAAA,IACvE;AACA,UAAM,OAAO;AACb,WAAO;AAAA,MACL,SACE,KAAK,WAAW,OAAO,KAAK,YAAY,WACnC,KAAK,UACN;AAAA,MACN,OAAO,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAAA,MACrD,YAAY,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAAA,IAChE;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,SAAS,QAAW,OAAO,QAAW,YAAY,OAAU;AAAA,EACvE;AACF;AAnIA,IAMM,wBAWO,0BA0DA,wBAIA;AA/Eb;AAAA;AAAA;AAMA,IAAM,yBAAyB;AAWxB,IAAM,2BAAN,MAAM,kCAAiC,MAAM;AAAA,MACzC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAET,YAAY,QAST;AACD,cAAM,0BAAyB,cAAc,MAAM,CAAC;AACpD,aAAK,OAAO;AACZ,aAAK,QAAQ,OAAO;AACpB,aAAK,YAAY,OAAO;AACxB,aAAK,aAAa,OAAO;AACzB,aAAK,QAAQ,OAAO;AACpB,aAAK,OAAO,OAAO;AACnB,aAAK,WAAW,OAAO;AACvB,aAAK,aAAa,OAAO;AACzB,aAAK,SAAS,OAAO;AACrB,eAAO,eAAe,MAAM,0BAAyB,SAAS;AAAA,MAChE;AAAA,MAEA,OAAe,cAAc,QAKlB;AACT,cAAM,YACJ,OAAO,WAAW,SAAS,yBACvB,GAAG,OAAO,WAAW,MAAM,GAAG,sBAAsB,CAAC,QACrD,OAAO;AACb,YACE,OAAO,QAAQ,eAAe,eAC9B,OAAO,QAAQ,YAAY,WAAW,SACtC;AACA,iBAAO,4DAA4D,SAAS;AAAA,QAC9E;AACA,eACE,+CACU,OAAO,MAAM,QAAQ,CAAC,CAAC,eAAe,OAAO,UAAU,QAAQ,CAAC,CAAC,OACvE,SAAS;AAAA,MAEjB;AAAA,IACF;AAGO,IAAM,yBAAyB;AAI/B,IAAM,mBAAN,MAAM,0BAAyB,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAET,YAAY,QAOT;AACD,cAAM,aAAa,OAAO,aAAa,IAAI,OAAO,UAAU,KAAK;AACjE,cAAM,sBAAsB,OAAO,MAAM,GAAG,UAAU,EAAE;AACxD,aAAK,OAAO;AACZ,aAAK,SAAS,OAAO;AACrB,aAAK,aAAa,OAAO;AACzB,aAAK,OAAO,OAAO;AACnB,cAAM,SAAS,eAAe,OAAO,IAAI;AACzC,aAAK,UAAU,OAAO,WAAW,OAAO;AACxC,aAAK,QAAQ,OAAO,SAAS,OAAO;AACpC,aAAK,aAAa,OAAO,cAAc,OAAO;AAC9C,eAAO,eAAe,MAAM,kBAAiB,SAAS;AAAA,MACxD;AAAA,IACF;AAAA;AAAA;;;AC5CO,SAAS,aACd,OAC2B;AAC3B,MAAI,UAAU,QAAW;AACvB,WAAO;AAAA,EACT;AACA,QAAM,WAAW,oBAAI,IAAkB;AACvC,aAAW,KAAK,OAAO;AACrB,QAAI,CAAC,qBAAqB,IAAI,CAAC,GAAG;AAChC,YAAM,IAAI,MAAM,+BAA+B,OAAO,CAAC,CAAC,EAAE;AAAA,IAC5D;AACA,aAAS,IAAI,CAAiB;AAAA,EAChC;AACA,SAAO;AACT;AAEO,SAAS,YAAY,MAAc,MAAqD;AAC7F,MAAI,SAAS,UAAa,SAAS,MAAM;AACvC,WAAO;AAAA,EACT;AACA,MAAI,SAAS,UAAU,SAAS;AAC9B,WAAO;AAAA,EACT;AACA,SAAO,SAAS,IAAI,KAAK,IAAI;AAC/B;AAEO,SAAS,gBAAgB,MAAc,UAA6C;AACzF,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,SAAS,QAAQ,KAAK,IAAI;AACnC;AA9FA,IAGa,WAWA,cAYA,eAOA,aAOA,cAMA,WAKA,wBAUP;AA7DN;AAAA;AAAA;AAGO,IAAM,YAAY;AAAA,MACvB,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,WAAW;AAAA,MACX,eAAe;AAAA,MACf,YAAY;AAAA,MACZ,SAAS;AAAA,IACX;AAIO,IAAM,eAAe;AAAA,MAC1B,WAAW;AAAA,MACX,kBAAkB;AAAA,MAClB,YAAY;AAAA,MACZ,iBAAiB;AAAA,MACjB,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe;AAAA,IACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,MAC5E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,MAC1E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,MAC3E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,MACxE,GAAG;AAAA,MACH,GAAG;AAAA,IACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,MAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,MAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,MACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,MACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,MACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,MAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,MACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AAAA,IACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;AAAA;AAAA;;;ACqB9E,SAAS,uBAAuB,SAAoC;AACzE,SAAO,QACJ,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAC1B,KAAK,IAAI;AACd;AAEO,SAAS,yBAAyB,UAA0B;AACjE,SAAO,SAAS,KAAK;AACvB;AAEO,SAAS,yBAAyB,UAAsC;AAC7E,QAAM,QAAkB,CAAC;AACzB,aAAW,WAAW,SAAS,eAAe,CAAC,GAAG;AAChD,eAAW,OAAO,SAAS;AACzB,YAAM,QAAQ,IAAI,QAAQ,IAAI,KAAK;AACnC,UAAI,MAAM;AACR,cAAM,KAAK,IAAI;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEO,SAAS,yBAAyB,WAAqD;AAC5F,QAAM,QAAkB,CAAC;AACzB,aAAW,OAAO,WAAW;AAC3B,UAAM,QAAQ,IAAI,eAAe,IAAI,KAAK;AAC1C,QAAI,MAAM;AACR,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAnHA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AA6BA,SAAS,eAAe,SAA4C;AAClE,MAAI,OAAO,QAAQ,SAAS,UAAU;AACpC,WAAO,QAAQ,KAAK,YAAY;AAAA,EAClC;AACA,MAAI,OAAO,QAAQ,SAAS,UAAU;AACpC,WAAO,QAAQ,KAAK,YAAY;AAAA,EAClC;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,SAAuD;AACjF,MAAI,YAAY,QAAW;AACzB,WAAO;AAAA,EACT;AACA,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAASA,qBACP,UACuC;AACvC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,WAAW,IAAI,eAAe,GAAG,CAAC,GAAG;AACvC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,uBACpB,UACA,UAAmC,CAAC,GACN;AAC9B,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,gCAAgC;AAE7E,QAAM,eAAe,aAAa,QAAQ,KAAK;AAG/C,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,SACJ,QAAQ,WACP,CAAC,SAAiB,UAAyB;AAE1C,YAAQ,KAAK,sBAAsB,OAAO,IAAI,KAAK;AAAA,EACrD;AACF,QAAM,gBAAgB,QAAQ,SAC5B,QAAQ,eAAe,SACnB,SAAS,OACT,QAAQ,aAAa,WAAW;AAEtC,QAAM,aAAa,QAAQ;AAE3B,QAAM,iBAAiB,CAAC,UAA+B;AACrD,QAAI,CAAC,YAAY;AACf;AAAA,IACF;AACA,QAAI;AACF,iBAAW,KAAK;AAAA,IAClB,SAAS,KAAK;AACZ,aAAO,6BAA6B,GAAG;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,WAAW,OACf,MACA,WACA,OACA,aACkB;AAClB,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,SAAS,SAAS,MAAM;AAAA,QACrC,MAAM;AAAA,QACN,UAAU;AAAA,UACR,WAAW,EAAE,QAAQ,MAAM;AAAA,UAC3B,GAAI,QAAQ,mBAAmB,SAAY,CAAC,IAAI,EAAE,gBAAgB,QAAQ,eAAe;AAAA,QAC3F;AAAA,QACA,GAAI,kBAAkB,SAAY,EAAE,MAAM,cAAc,IAAI,CAAC;AAAA,QAC7D,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/C,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,CAAC,UAAU;AACb,cAAM;AAAA,MACR;AACA,aAAO,kDAAkD,GAAG;AAC5D;AAAA,IACF;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAM,gBAAgB,iBAAiB,OAAO,QAAQ;AACtD,UAAM,oBAAoB;AAAA,MACxB,MAAM;AAAA,MACN,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,mBAAe;AAAA,MACb,GAAG;AAAA,MACH;AAAA,MACA,MAAM;AAAA,MACN,YAAY,kBAAkB;AAAA,IAChC,CAAC;AACD,QAAI,CAAC,WAAW,kBAAkB,SAAS;AACzC;AAAA,IACF;AAEA,UAAM,IAAI,yBAAyB;AAAA,MACjC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,MAAM;AAAA,MACN,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,gCAAgC,oBAAoB;AAAA,IAC/C,OAAO;AAAA,IACP,aAAa;AAAA,IACb,gBAAgB;AAAA,IAEzB,MAAe,qBACb,MACA,UACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,gBAAgB,GAAG;AACpD;AAAA,MACF;AACA,YAAM,UAAU;AAChB,YAAM,OAAoC,CAAC;AAC3C,iBAAW,SAAS,SAAS;AAC3B,mBAAW,KAAK,OAAO;AACrB,eAAK,KAAK,CAAC;AAAA,QACb;AAAA,MACF;AACA,YAAM,WAAWA,qBAAoB,IAAI;AACzC,UAAI,CAAC,UAAU;AACb;AAAA,MACF;AACA,YAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,gBAAgB,GAAG,KAAK;AAAA,IACnF;AAAA,IAEA,MAAe,eACb,MACA,SACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,SAAS,GAAG;AAC7C;AAAA,MACF;AACA,YAAM,OAAO,uBAAuB,OAAO;AAC3C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,SAAS,GAAG,KAAK;AAAA,IAC5E;AAAA,IAEA,MAAe,gBACb,MACA,UACA,OACe;AACf,UAAI,CAAC,eAAe,CAAC,aAAa,IAAI,aAAa,UAAU,GAAG;AAC9D;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,QAAQ;AAC9C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,WAAW,MAAM;AACvB,YAAM,SAAS,MAAM,uBAAuB,aAAa,UAAU,GAAG,OAAO,QAAQ;AAAA,IACvF;AAAA,IAEA,MAAe,qBACb,YACA,OACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,eAAe,GAAG;AACnD;AAAA,MACF;AACA,YAAM,OAAO,MAAM,KAAK;AACxB,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,eAAe,GAAG,KAAK;AAAA,IAClF;AAAA,IAEA,MAAe,aAAa,QAAiB,OAA8B;AACzE,UAAI,CAAC,aAAa,IAAI,aAAa,OAAO,GAAG;AAC3C;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,MAA2E;AACjH,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,OAAO,GAAG,KAAK;AAAA,IAC1E;AAAA,IAEA,MAAe,cACb,QACA,OACA,cACA,OACA,SACe;AACf,UAAI,CAAC,eAAe,CAAC,aAAa,IAAI,aAAa,QAAQ,GAAG;AAC5D;AAAA,MACF;AACA,YAAM,OAAO,OAAO,MAAM,EAAE,KAAK;AACjC,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,WAAW,SAAS;AAC1B,YAAM,SAAS,MAAM,uBAAuB,aAAa,QAAQ,GAAG,OAAO,QAAQ;AAAA,IACrF;AAAA,IAEA,MAAe,mBACb,WACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,aAAa,GAAG;AACjD;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,SAAS;AAC/C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,aAAa,GAAG,KAAK;AAAA,IAChF;AAAA,EACF;AAEA,SAAO,IAAI,wBAAwB;AACrC;AAzRA,IAqBM;AArBN;AAAA;AAAA;AAMA;AACA;AAOA;AAOA,IAAM,aAAkC,oBAAI,IAAI,CAAC,SAAS,MAAM,CAAC;AAAA;AAAA;;;AClBjE,SAAS,kBAAkB;;;ACC3B;AACA;AAsDA,SAAS,mBAAmB,OAAwB;AAClD,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,mBAAmB,SAAiD;AAC3E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,uBACP,SACuF;AACvF,MAAI,OAAO,QAAQ,YAAY,UAAU;AACvC,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAA6F,CAAC;AACpG,aAAW,QAAQ,QAAQ,SAAS;AAClC,QAAI,OAAO,SAAS,UAAU;AAC5B;AAAA,IACF;AACA,QAAI,KAAK,SAAS,eAAe;AAC/B,YAAM,OAAO,oBAAoB,KAAK,WAAW,SAAY,KAAK,SAAS,KAAK,MAAM;AACtF,UAAI,KAAK,KAAK,GAAG;AACf,YAAI,KAAK,EAAE,MAAM,UAAU,KAAK,UAAU,YAAY,KAAK,WAAW,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO,mBAAmB,KAAK;AAAA,EACjC;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,OAAO,MAAM,UAAU,UAAU;AAC7F,WAAO,MAAM;AAAA,EACf;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,MAAM,UAAU,QAAW;AACvF,WAAO,mBAAmB,MAAM,KAAK;AAAA,EACvC;AACA,MAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC1D,WAAO,MAAM,MACV,IAAI,CAAC,SAAU,SAAS,IAAI,KAAK,KAAK,SAAS,UAAU,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,EAAG,EACxG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAChC,KAAK,GAAG;AAAA,EACb;AACA,SAAO,mBAAmB,KAAK;AACjC;AAEA,SAAS,oBACP,UACiC;AACjC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,IAAI,KAAK,YAAY,MAAM,QAAQ;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAaO,SAAS,iBACd,UACA,UAA6B,CAAC,GACV;AACpB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,gBAAgB,QAAQ,SAC5B,QAAQ,eAAe,SACnB,SAAS,OACT,QAAQ,aAAa,WAAW;AAGtC,QAAM,kBAAkB,OACtB,MACA,MACA,UAA6B,EAAE,UAAU,QAAW,YAAY,OAAU,MACxD;AAClB,QAAI,CAAC,KAAK,KAAK,GAAG;AAChB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,WAAW,IAAI;AACjC,UAAM,SAAsB,MAAM,SAAS;AAAA,MACzC;AAAA,MACA;AAAA,QACE;AAAA,QACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,QAC7C,GAAI,kBAAkB,SAAY,EAAE,MAAM,cAAc,IAAI,CAAC;AAAA,MAC/D;AAAA,IACF;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAM,gBAAgB,iBAAiB,OAAO,QAAQ;AACtD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,MACA;AAAA,IACF;AACA,YAAQ,aAAa;AAAA,MACnB,GAAG;AAAA,MACH;AAAA,MACA,MAAM;AAAA,MACN,YAAY,kBAAkB;AAAA,IAChC,CAAC;AACD,QAAI,CAAC,WAAW,kBAAkB,SAAS;AACzC;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,yBAAyB;AAAA,MACvC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,IACF,CAAC;AACD,YAAQ,YAAY,GAAG;AACvB,UAAM;AAAA,EACR;AAEA,QAAM,aAAa,OAAO,WAA8D;AACtF,QAAI,OAAO,WAAW,GAAG;AACvB;AAAA,IACF;AACA,UAAM,OAAO,OAAO,OAAO,SAAS,CAAC;AACrC,UAAM,OAAO,KAAK,KAAK,YAAY;AAMnC,QAAI,SAAS,QAAQ;AACnB,iBAAW,EAAE,MAAAC,OAAM,UAAU,WAAW,KAAK,uBAAuB,IAAI,GAAG;AACzE,cAAM,gBAAgBA,OAAM,UAAU,eAAe,EAAE,UAAU,WAAW,CAAC;AAAA,MAC/E;AACA;AAAA,IACF;AAIA,UAAM,WAAW,oBAAoB,MAAM;AAC3C,QAAI,CAAC,UAAU;AACb;AAAA,IACF;AACA,UAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,QAAI,CAAC,MAAM;AACT;AAAA,IACF;AACA,UAAM,gBAAgB,MAAM,UAAU,UAAU;AAAA,EAClD;AAEA,QAAM,qBAAqB,OAAO,WAAgD;AAChF,QAAI,cAAc,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,GAAG;AAC3E,YAAM,gBAAgB,OAAO,MAAM,UAAU,UAAU;AAAA,IACzD;AACA,QAAI,QAAQ,iBAAiB,MAAM,QAAQ,OAAO,SAAS,GAAG;AAC5D,iBAAW,QAAQ,OAAO,WAAW;AACnC,YAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,QACF;AACA,cAAM,YAAY,KAAK,SAAS,SAAY,KAAK,OAAO,KAAK;AAC7D,cAAM,OACJ,OAAO,cAAc,WAAW,YAAY,mBAAmB,SAAS;AAC1E,cAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,cAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC3E,YAAI,KAAK,KAAK,GAAG;AACf,gBAAM,gBAAgB,MAAM,UAAU,WAAW,EAAE,UAAU,WAAW,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IAEnB,MAAM,aAA6E;AAAA,MACjF;AAAA,MACA;AAAA,IACF,GAAgD;AAC9C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,SAAS,MAAM,WAAW;AAChC,YAAM,mBAAmB,MAAM;AAC/B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAA0F;AAAA,MAC9F;AAAA,MACA;AAAA,IACF,GAA8C;AAC5C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,EAAE,QAAQ,GAAG,KAAK,IAAI,MAAM,SAAS;AAC3C,UAAI,CAAC,YAAY;AACf,eAAO,EAAE,QAAQ,GAAG,KAAK;AAAA,MAC3B;AAEA,UAAI,WAAW;AACf,YAAM,cAAc,OAAO;AAAA,QACzB,IAAI,gBAAkC;AAAA,UACpC,UAAU,OAAO,YAAkB;AACjC,kBAAM,OAAO;AACb,gBAAI,QAAQ,KAAK,SAAS,cAAc;AACtC,oBAAM,QAAQ,KAAK,aAAa,KAAK,SAAS;AAC9C,0BAAY;AAAA,YACd;AACA,uBAAW,QAAQ,KAAK;AAAA,UAC1B;AAAA,UACA,MAAM,MAAM,YAA2B;AACrC,gBAAI,CAAC,SAAS,KAAK,GAAG;AACpB;AAAA,YACF;AACA,gBAAI;AACF,oBAAM,gBAAgB,UAAU,UAAU,UAAU;AAAA,YACtD,SAAS,KAAK;AACZ,kBAAI,eAAe,0BAA0B;AAC3C,2BAAW,QAAQ,EAAE,MAAM,SAAS,OAAO,IAAI,CAAC;AAChD;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,EAAE,QAAQ,aAAa,GAAG,KAAK;AAAA,IACxC;AAAA,EACF;AACF;;;ADjUA;;;AEHO,IAAM,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,mBAAmB;AAAA,EACnB,gBAAgB;AAAA,EAChB,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,mBAAmB;AAAA,EACnB,uBAAuB;AAAA,EACvB,oBAAoB;AACtB;AAUO,IAAM,mBAAmB;AAAA,EAC9B,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,IAAM,mBAAmB;AAAA,EAC9B,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,IAAM,uBAAuB;AAAA,EAClC,CAAC,QAAQ,MAAM,GAAG;AAAA,EAClB,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,YAAY,GACnB;AAAA,EACF,CAAC,QAAQ,gBAAgB,GACvB;AAAA,EACF,CAAC,QAAQ,iBAAiB,GACxB;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,iBAAiB,GACxB;AAAA,EACF,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,kBAAkB,GACzB;AACJ;AAEA,IAAM,sBAAsB,IAAI,IAAY,gBAAgB;AAC5D,IAAM,sBAAsB,IAAI,IAAY,gBAAgB;AAErD,SAAS,iBAAiB,OAA8C;AAC7E,SAAO,OAAO,UAAU,YAAY,oBAAoB,IAAI,KAAK;AACnE;AAEO,SAAS,iBAAiB,OAA8C;AAC7E,SAAO,OAAO,UAAU,YAAY,oBAAoB,IAAI,KAAK;AACnE;AAEO,SAAS,wBACd,OACA,YAAY,mBACI;AAChB,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO,iBAAiB,KAAK,IAAI,QAAS;AAC5C;AAEO,SAAS,wBACd,OACA,YAAY,WACI;AAChB,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,QAAQ;AACzD,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO,iBAAiB,KAAK,IAAI,QAAS;AAC5C;AAEO,SAAS,2BACd,QACA,WAC+D;AAC/D,MAAI,WAAW,UAAa,WAAW,MAAM;AAC3C,WAAO;AAAA,EACT;AACA,MAAI,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AACvD,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,MAAM,CAAC,EAAE;AAAA,EAC5E;AACA,QAAM,MAA+C,CAAC;AACtD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,UAAM,gBAAgB,wBAAwB,KAAK,GAAG,SAAS,MAAM;AACrE,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,IAAI,MAAM,qBAAqB,SAAS,cAAc,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IACnF;AACA,QAAI,aAAa,IAAI;AAAA,EACvB;AACA,SAAO,OAAO,OAAO,GAAG;AAC1B;;;AChIA,SAAS,gBAAgB,MAAuB;AAC9C,SAAO,QAAQ,SAAU,QAAQ;AACnC;AAEA,SAAS,eAAe,MAAuB;AAC7C,SAAO,QAAQ,SAAU,QAAQ;AACnC;AAEO,SAAS,aAAa,MAAsB;AACjD,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,OAAO,KAAK,WAAW,CAAC;AAC9B,QAAI,gBAAgB,IAAI,GAAG;AACzB,UAAI,IAAI,IAAI,KAAK,UAAU,eAAe,KAAK,WAAW,IAAI,CAAC,CAAC,GAAG;AACjE,eAAO,KAAK,CAAC;AACb,eAAO,KAAK,IAAI,CAAC;AACjB;AAAA,MACF;AACA;AAAA,IACF;AACA,QAAI,CAAC,eAAe,IAAI,GAAG;AACzB,aAAO,KAAK,CAAC;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;;;AHJO,IAAM,cAAc;AACpB,IAAM,qBAAqB;AAClC,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,uBAAuB,KAAK;AAMlC,IAAM,iBAAiB;AAkCvB,SAAS,YAAY,OAAgB,eAAwD;AAC3F,MAAI;AACJ,MAAI,UAAU,YAAY,UAAU,UAAU,UAAU,SAAS;AAC/D,mBAAe;AAAA,EACjB,WAAW,UAAU,QAAW;AAC9B,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AAKA,SAAO,iBAAiB;AAC1B;AAEA,SAAS,WAAW,YAA2D;AAC7E,SAAO,eAAe,SAAY,SAAY,aAAa,WAAW;AACxE;AAEA,SAAS,wBACP,MACA,eACa;AACb,MAAI,KAAK,eAAe,YAAY,KAAK,eAAe,aAAa;AACnE,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACA,QAAM,SAUF;AAAA,IACF,YAAY,KAAK;AAAA,IACjB,OAAO,OAAO,KAAK,KAAK;AAAA,IACxB,WAAW,OAAO,KAAK,SAAS;AAAA,EAClC;AACA,QAAM,OAAO,YAAY,KAAK,MAAM,aAAa;AACjD,MAAI,SAAS,QAAW;AACtB,WAAO,OAAO;AAAA,EAChB;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,WAAO,iBAAiB,wBAAwB,KAAK,eAAe;AAAA,EACtE;AACA,MAAI,KAAK,mBAAmB,QAAW;AACrC,UAAM,gBAAgB,2BAA2B,KAAK,gBAAgB,gBAAgB;AACtF,QAAI,kBAAkB,QAAW;AAC/B,aAAO,gBAAgB;AAAA,IACzB;AAAA,EACF;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,UAAM,iBAAiB,2BAA2B,KAAK,iBAAiB,iBAAiB;AACzF,QAAI,mBAAmB,QAAW;AAChC,aAAO,iBAAiB;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,UAAM,iBAAiB,2BAA2B,KAAK,iBAAiB,iBAAiB;AACzF,QAAI,mBAAmB,QAAW;AAChC,aAAO,iBAAiB;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,KAAK,eAAe,QAAW;AACjC,WAAO,aAAa,+BAA+B,KAAK,UAAU;AAAA,EACpE;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAASC,UAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,gBACP,UACA,MAKwB;AACxB,QAAM,UAAmC,EAAE,GAAI,YAAY,CAAC,EAAG;AAC/D,QAAM,WAAW,QAAQ;AACzB,MAAI,aAAa,UAAa,CAACA,UAAS,QAAQ,GAAG;AACjD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,UAAQ,WAAW;AAAA,IACjB,GAAIA,UAAS,QAAQ,IAAI,WAAW,CAAC;AAAA,IACrC,cAAc;AAAA,IACd,aAAa;AAAA,IACb,YAAY,KAAK;AAAA,IACjB,GAAI,KAAK,eAAe,SAAY,CAAC,IAAI,EAAE,aAAa,KAAK,WAAW;AAAA,IACxE,GAAI,KAAK,eAAe,SACpB,CAAC,IACD,EAAE,YAAY,wBAAwB,KAAK,UAAU,EAAE;AAAA,EAC7D;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,SAAqD;AACpF,SAAO;AAAA,IACL,GAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,IAC9D,GAAI,QAAQ,aAAa,SACrB,CAAC,IACD;AAAA,MACE,UAAU;AAAA,QACR,MAAM,QAAQ,SAAS;AAAA,QACvB,GAAI,QAAQ,SAAS,OAAO,SAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,SAAS,GAAG;AAAA,QACvE,GAAI,QAAQ,SAAS,aAAa,SAC9B,CAAC,IACD,EAAE,WAAW,QAAQ,SAAS,SAAS;AAAA,MAC7C;AAAA,IACF;AAAA,EACN;AACF;AAEA,SAAS,+BAA+B,OAAoC;AAC1E,MAAI,CAACA,UAAS,KAAK,GAAG;AACpB,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,MAAI,MAAM,WAAW,WAAW,MAAM,WAAW,SAAS;AACxD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,MAAI,OAAO,MAAM,mBAAmB,YAAY,MAAM,eAAe,WAAW,GAAG;AACjF,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AACA,MAAI,MAAM,YAAY,UAAa,OAAO,MAAM,YAAY,UAAU;AACpE,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,SAAO,OAAO,OAAO;AAAA,IACnB,QAAQ,MAAM;AAAA,IACd,GAAI,MAAM,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ;AAAA,IAC/D,eAAe,MAAM;AAAA,EACvB,CAAC;AACH;AAEA,eAAe,oBAAoB,UAAqC;AACtE,MAAI,CAAC,SAAS,MAAM;AAClB,WAAO,SAAS,KAAK,EAAE,KAAK,CAACC,UAASA,MAAK,MAAM,GAAG,oBAAoB,CAAC,EAAE,MAAM,MAAM,EAAE;AAAA,EAC3F;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,SAAuB,CAAC;AAC9B,MAAI,YAAY;AAChB,MAAI;AACF,WAAO,YAAY,GAAG;AACpB,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,MAAM;AACR;AAAA,MACF;AACA,UAAI,CAAC,OAAO;AACV;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,aAAa,YAAY,MAAM,MAAM,GAAG,SAAS,IAAI;AACzE,aAAO,KAAK,KAAK;AACjB,mBAAa,MAAM;AACnB,UAAI,MAAM,aAAa,MAAM,YAAY;AACvC;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,UAAM,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EAC7C;AAEA,QAAM,QAAQ,OAAO,OAAO,CAAC,KAAK,UAAU,MAAM,MAAM,YAAY,CAAC;AACrE,QAAM,OAAO,IAAI,WAAW,KAAK;AACjC,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,SAAK,IAAI,OAAO,MAAM;AACtB,cAAU,MAAM;AAAA,EAClB;AACA,SAAO,IAAI,YAAY,EAAE,OAAO,IAAI;AACtC;AAGA,eAAe,oBAAoB,UAAmC;AACpE,MAAI;AACF,QAAI,SAAS,MAAM;AACjB,UAAI,CAAC,SAAS,KAAK,QAAQ;AACzB,cAAM,SAAS,KAAK,OAAO;AAAA,MAC7B;AACA;AAAA,IACF;AACA,UAAM,SAAS,KAAK;AAAA,EACtB,QAAQ;AAAA,EAER;AACF;AAEA,SAAS,iBAAiB,OAAyB;AACjD,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,MAA6B;AAC3C,SAAO,SAAS,gBAAgB,SAAS;AAC3C;AAQA,eAAe,oBAAuB,MAAwB,QAAiC;AAC7F,MAAI;AACF,WAAO,MAAM,KAAK;AAAA,EACpB,SAAS,OAAO;AACd,QAAI,OAAO,WAAW,iBAAiB,KAAK,GAAG;AAC7C,YAAM,OAAO;AAAA,IACf;AACA,UAAM;AAAA,EACR;AACF;AAYA,SAAS,oBAAoB,WAAmB,cAA2C;AACzF,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM;AAC7B,eAAW;AAAA,MACT,IAAI,aAAa,4CAA4C,cAAc;AAAA,IAC7E;AAAA,EACF,GAAG,SAAS;AACZ,QAAM,gBAAgB,MAAY;AAChC,eAAW,MAAM,cAAc,MAAM;AAAA,EACvC;AACA,gBAAc,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AACrE,SAAO;AAAA,IACL,QAAQ,WAAW;AAAA,IACnB,SAAS,MAAM;AACb,mBAAa,KAAK;AAClB,oBAAc,oBAAoB,SAAS,aAAa;AAAA,IAC1D;AAAA,EACF;AACF;AAEA,SAAS,MAAM,IAAY,QAAqC;AAC9D,SAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC5C,QAAI,QAAQ,SAAS;AACnB,aAAO,OAAO,MAAM;AACpB;AAAA,IACF;AACA,UAAM,UAAU,MAAY;AAC1B,mBAAa,KAAK;AAClB,aAAO,QAAQ,MAAM;AAAA,IACvB;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAQ,oBAAoB,SAAS,OAAO;AAC5C,cAAQ;AAAA,IACV,GAAG,EAAE;AACL,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAC3D,CAAC;AACH;AAWO,IAAM,WAAN,MAAe;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEQ;AAAA,EAEjB,YAAY,SAA0B;AACpC,QAAI,CAAC,QAAQ,QAAQ;AACnB,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AACA,QAAI,CAAC,QAAQ,QAAQ;AACnB,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AACA,SAAK,SAAS,QAAQ;AACtB,SAAK,SAAS,QAAQ;AACtB,SAAK,YAAY,QAAQ,aAAa;AACtC,QAAI,OAAO,KAAK,cAAc,YAAY,CAAC,OAAO,SAAS,KAAK,SAAS,KAAK,KAAK,YAAY,GAAG;AAChG,YAAM,IAAI,MAAM,iEAAiE,KAAK,SAAS,EAAE;AAAA,IACnG;AACA,QAAI,KAAK,YAAY,gBAAgB;AACnC,YAAM,IAAI;AAAA,QACR,uCAAuC,cAAc,YAAY,KAAK,SAAS;AAAA,MACjF;AAAA,IACF;AACA,SAAK,OAAO,QAAQ,QAAQ,WAAW,QAAQ,UAAU;AACzD,SAAK,aAAa,KAAK,SAAS;AAChC,SAAK,UAAU,OAAO,OAAO;AAAA,MAC3B,aAAa,KAAK;AAAA,MAClB,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,SAAS,MAAc,UAA2B,CAAC,GAAyB;AAChF,UAAM,YAAY,QAAQ,aAAa,WAAW;AAClD,WAAO,KAAK,eAAe,aAAa,IAAI,GAAG,SAAS,EAAE,UAAU,CAAC;AAAA,EACvE;AAAA,EAEA,MAAM,cACJ,OACA,UAAgC,CAAC,GACT;AACxB,QAAI,MAAM,WAAW,GAAG;AACtB,YAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AACA,QAAI,QAAQ,UAAU,UAAa,QAAQ,MAAM,WAAW,MAAM,QAAQ;AACxE,YAAM,IAAI;AAAA,QACR,0BAA0B,QAAQ,MAAM,MAAM,gCAAgC,MAAM,MAAM;AAAA,MAC5F;AAAA,IACF;AACA,QAAI,QAAQ,cAAc,UAAa,QAAQ,UAAU,WAAW,MAAM,QAAQ;AAChF,YAAM,IAAI;AAAA,QACR,8BAA8B,QAAQ,UAAU,MAAM,gCAAgC,MAAM,MAAM;AAAA,MACpG;AAAA,IACF;AACA,QAAI,QAAQ,aAAa,UAAa,QAAQ,SAAS,WAAW,MAAM,QAAQ;AAC9E,YAAM,IAAI;AAAA,QACR,6BAA6B,QAAQ,SAAS,MAAM,gCAAgC,MAAM,MAAM;AAAA,MAClG;AAAA,IACF;AACA,QAAI,QAAQ,eAAe,UAAa,QAAQ,WAAW,WAAW,MAAM,QAAQ;AAClF,YAAM,IAAI;AAAA,QACR,+BAA+B,QAAQ,WAAW,MAAM,gCAAgC,MAAM,MAAM;AAAA,MACtG;AAAA,IACF;AAEA,UAAM,YAAY,QAAQ,aAAa,WAAW;AAClD,UAAM,UAAgC;AAAA,MACpC,OAAO,MAAM,IAAI,CAAC,SAAS,aAAa,IAAI,CAAC;AAAA,IAC/C;AACA,UAAM,gBAAgB,QAAQ,QAAQ,KAAK;AAC3C,QAAI,kBAAkB,QAAW;AAC/B,cAAQ,OAAO;AAAA,IACjB;AACA,QAAI,QAAQ,SAAS,QAAQ,MAAM,SAAS,GAAG;AAC7C,cAAQ,QAAQ,QAAQ,MAAM,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;AAAA,IACpD;AACA,QAAI,QAAQ,aAAa,QAAQ,UAAU,SAAS,GAAG;AACrD,cAAQ,aAAa,QAAQ,UAAU,IAAI,CAAC,MAAO,MAAM,SAAY,OAAO,CAAE;AAAA,IAChF;AACA,YAAQ,WAAW,MAAM;AAAA,MAAI,CAAC,GAAG,UAC/B,gBAAgB,QAAQ,WAAW,KAAK,GAAG;AAAA,QACzC;AAAA,QACA,YAAY;AAAA,QACZ,GAAI,QAAQ,aAAa,KAAK,MAAM,SAChC,CAAC,IACD,EAAE,YAAY,QAAQ,WAAW,KAAK,EAAE;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,UAAM,OAAO,MAAM,KAAK,cAAqC,SAAS,QAAQ,MAAM;AACpF,QAAI,CAAC,MAAM,QAAQ,KAAK,WAAW,GAAG;AACpC,YAAM,IAAI,MAAM,iDAAiD;AAAA,IACnE;AACA,QAAI,KAAK,YAAY,WAAW,QAAQ,MAAM,QAAQ;AACpD,YAAM,IAAI;AAAA,QACR,yCAAyC,KAAK,YAAY,MAAM,0CAA0C,QAAQ,MAAM,MAAM;AAAA,MAChI;AAAA,IACF;AACA,WAAO,KAAK,YAAY,IAAI,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAAA,EAC9E;AAAA,EAEA,mBACE,UAAmC,CAAC,GACjB;AACnB,WAAO,oEAAkC;AAAA,MAAK,CAAC,MAC7C,EAAE,uBAAuB,MAAM,OAAO;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,aAAa,UAA6B,CAAC,GAAuB;AAChE,WAAO,iBAAiB,MAAM,OAAO;AAAA,EACvC;AAAA,EAEA,MAAc,cACZ,SACA,cACA,aAAqB,qBACT;AAGZ,kBAAc,eAAe;AAG7B,UAAM,OAAO,KAAK,UAAU,OAAO;AACnC,aAAS,UAAU,GAAG,WAAW,YAAY,WAAW;AACtD,oBAAc,eAAe;AAC7B,YAAM,gBAAgB,oBAAoB,KAAK,WAAW,YAAY;AACtE,UAAI;AACF,cAAM,WAAW,MAAM,MAAM,KAAK,QAAQ;AAAA,UACxC,QAAQ;AAAA,UACR,SAAS,KAAK;AAAA,UACd;AAAA,UACA,UAAU;AAAA,UACV,QAAQ,cAAc;AAAA,QACxB,CAAC;AACD,YAAI,SAAS,WAAW,OAAO,YAAY,YAAY;AACrD,cAAI,CAAC,SAAS,IAAI;AAChB,kBAAM,YAAY,MAAM,oBAAoB,QAAQ;AAGpD,0BAAc,OAAO,eAAe;AACpC,kBAAM,IAAI,iBAAiB;AAAA,cACzB,QAAQ,SAAS;AAAA,cACjB,YAAY,SAAS;AAAA,cACrB,MAAM;AAAA,YACR,CAAC;AAAA,UACH;AACA,iBAAO,MAAM;AAAA,YACX,MAAM,SAAS,KAAK;AAAA,YACpB,cAAc;AAAA,UAChB;AAAA,QACF;AACA,cAAM,oBAAoB,QAAQ;AAAA,MACpC,UAAE;AACA,sBAAc,QAAQ;AAAA,MACxB;AACA,YAAM,MAAM,KAAK,IAAI,KAAK,SAAS,mBAAmB,IAAI,KAAM,YAAY;AAAA,IAC9E;AACA,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAAA,EAEA,MAAc,eACZ,MACA,SACA,cAGsB;AACtB,UAAM,UAAiC,EAAE,KAAK;AAC9C,UAAM,gBAAgB,QAAQ,QAAQ,KAAK;AAC3C,QAAI,kBAAkB,QAAW;AAC/B,cAAQ,OAAO;AAAA,IACjB;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,OAAO,QAAQ;AAAA,IACzB;AACA,QAAI,QAAQ,aAAa,QAAW;AAClC,cAAQ,YAAY,QAAQ;AAAA,IAC9B;AACA,YAAQ,WAAW,gBAAgB,QAAQ,UAAU;AAAA,MACnD,GAAG;AAAA,MACH,GAAI,QAAQ,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;AAAA,IAC/E,CAAC;AACD,UAAM,OAAO,MAAM,KAAK,cAAsC,SAAS,QAAQ,MAAM;AACrF,WAAO,wBAAwB,MAAM,aAAa;AAAA,EACpD;AACF;;;AI3gBA;AAKA;","names":["findLastUserMessage","text","isRecord","body"]}
+{"version":3,"sources":["../src/exceptions.ts","../src/hooks.ts","../src/utils/extract.ts","../src/adapters/langchain.ts","../src/firewall.ts","../src/adapters/vercel.ts","../src/outcomes.ts","../src/sanitization.ts","../src/index.ts"],"sourcesContent":["// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { HookLabel } from \"./hooks.js\";\nimport type { BlockResult } from \"./types.js\";\n\nconst MAX_PROMPT_DISPLAY_LEN = 100;\n\nexport interface MalformedInputDetails {\n  field?: string;\n  inputIndex?: number;\n  charOffset?: number;\n  malformedToken?: string;\n  codePoint?: string;\n  reason?: string;\n}\n\nexport class FirewallBlockedException extends Error {\n  readonly score: number;\n  readonly threshold: number;\n  readonly promptText: string;\n  readonly runId: string | undefined;\n  readonly hook: HookLabel | undefined;\n  readonly toolName: string | undefined;\n  readonly toolCallId: string | undefined;\n  readonly result: BlockResult | undefined;\n\n  constructor(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    runId?: string;\n    hook?: HookLabel;\n    toolName?: string;\n    toolCallId?: string;\n    result?: BlockResult;\n  }) {\n    super(FirewallBlockedException.formatMessage(params));\n    this.name = \"FirewallBlockedException\";\n    this.score = params.score;\n    this.threshold = params.threshold;\n    this.promptText = params.promptText;\n    this.runId = params.runId;\n    this.hook = params.hook;\n    this.toolName = params.toolName;\n    this.toolCallId = params.toolCallId;\n    this.result = params.result;\n    Object.setPrototypeOf(this, FirewallBlockedException.prototype);\n  }\n\n  private static formatMessage(params: {\n    score: number;\n    threshold: number;\n    promptText: string;\n    result?: BlockResult;\n  }): string {\n    const truncated =\n      params.promptText.length > MAX_PROMPT_DISPLAY_LEN\n        ? `${params.promptText.slice(0, MAX_PROMPT_DISPLAY_LEN)}...`\n        : params.promptText;\n    if (\n      params.result?.prediction !== \"MALICIOUS\" &&\n      params.result?.governance?.action === \"block\"\n    ) {\n      return `Request blocked by Silmaril Firewall governance policy: '${truncated}'`;\n    }\n    return (\n      `Request blocked by Silmaril Firewall ` +\n      `(score=${params.score.toFixed(4)}, threshold=${params.threshold.toFixed(4)}): ` +\n      `'${truncated}'`\n    );\n  }\n}\n\n/** @deprecated Use FirewallBlockedException instead. */\nexport const PromptBlockedException = FirewallBlockedException;\n/** @deprecated Use FirewallBlockedException instead. */\nexport type PromptBlockedException = FirewallBlockedException;\n\nexport class SilmarilApiError extends Error {\n  readonly status: number;\n  readonly statusText: string;\n  readonly body: string;\n  readonly details: MalformedInputDetails | undefined;\n  readonly error: string | undefined;\n  readonly apiMessage: string | undefined;\n\n  constructor(params: {\n    status: number;\n    statusText: string;\n    body: string;\n    details?: MalformedInputDetails;\n    error?: string;\n    apiMessage?: string;\n  }) {\n    const statusText = params.statusText ? ` ${params.statusText}` : \"\";\n    super(`Silmaril API error ${params.status}${statusText}`);\n    this.name = \"SilmarilApiError\";\n    this.status = params.status;\n    this.statusText = params.statusText;\n    this.body = params.body;\n    const parsed = parseErrorBody(params.body);\n    this.details = params.details ?? parsed.details;\n    this.error = params.error ?? parsed.error;\n    this.apiMessage = params.apiMessage ?? parsed.apiMessage;\n    Object.setPrototypeOf(this, SilmarilApiError.prototype);\n  }\n}\n\nfunction parseErrorBody(body: string): {\n  details: MalformedInputDetails | undefined;\n  error: string | undefined;\n  apiMessage: string | undefined;\n} {\n  try {\n    const parsed = JSON.parse(body) as unknown;\n    if (!parsed || typeof parsed !== \"object\") {\n      return { details: undefined, error: undefined, apiMessage: undefined };\n    }\n    const data = parsed as Record<string, unknown>;\n    return {\n      details:\n        data.details && typeof data.details === \"object\"\n          ? (data.details as MalformedInputDetails)\n          : undefined,\n      error: typeof data.error === \"string\" ? data.error : undefined,\n      apiMessage: typeof data.message === \"string\" ? data.message : undefined,\n    };\n  } catch {\n    return { details: undefined, error: undefined, apiMessage: undefined };\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const HookLabel = {\n  USER_INPUT: \"user_input\",\n  SYSTEM_PROMPT: \"system_prompt\",\n  TOOL_CALL: \"tool_call\",\n  TOOL_RESPONSE: \"tool_response\",\n  LLM_OUTPUT: \"llm_output\",\n  UNKNOWN: \"unknown\",\n} as const;\n\nexport type HookLabel = (typeof HookLabel)[keyof typeof HookLabel];\n\nexport const FirewallHook = {\n  LLM_START: \"on_llm_start\",\n  CHAT_MODEL_START: \"on_chat_model_start\",\n  TOOL_START: \"on_tool_start\",\n  RETRIEVER_START: \"on_retriever_start\",\n  LLM_END: \"on_llm_end\",\n  TOOL_END: \"on_tool_end\",\n  RETRIEVER_END: \"on_retriever_end\",\n} as const;\n\nexport type FirewallHook = (typeof FirewallHook)[keyof typeof FirewallHook];\n\nexport const DEFAULT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.TOOL_END,\n]);\n\nexport const INPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_START,\n  FirewallHook.CHAT_MODEL_START,\n  FirewallHook.TOOL_START,\n  FirewallHook.RETRIEVER_START,\n]);\n\nexport const OUTPUT_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  FirewallHook.LLM_END,\n  FirewallHook.TOOL_END,\n  FirewallHook.RETRIEVER_END,\n]);\n\nexport const ALL_HOOKS: ReadonlySet<FirewallHook> = new Set<FirewallHook>([\n  ...INPUT_HOOKS,\n  ...OUTPUT_HOOKS,\n]);\n\nexport const FIREWALL_HOOK_TO_LABEL: Readonly<Record<FirewallHook, HookLabel>> = {\n  [FirewallHook.CHAT_MODEL_START]: HookLabel.USER_INPUT,\n  [FirewallHook.LLM_START]: HookLabel.USER_INPUT,\n  [FirewallHook.TOOL_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.TOOL_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.RETRIEVER_START]: HookLabel.TOOL_CALL,\n  [FirewallHook.RETRIEVER_END]: HookLabel.TOOL_RESPONSE,\n  [FirewallHook.LLM_END]: HookLabel.LLM_OUTPUT,\n};\n\nconst FIREWALL_HOOK_VALUES: ReadonlySet<string> = new Set(Object.values(FirewallHook));\n\nexport function resolveHooks(\n  hooks: Iterable<FirewallHook | string> | undefined,\n): ReadonlySet<FirewallHook> {\n  if (hooks === undefined) {\n    return DEFAULT_HOOKS;\n  }\n  const resolved = new Set<FirewallHook>();\n  for (const h of hooks) {\n    if (!FIREWALL_HOOK_VALUES.has(h)) {\n      throw new Error(`Invalid FirewallHook value: ${String(h)}`);\n    }\n    resolved.add(h as FirewallHook);\n  }\n  return resolved;\n}\n\nexport function prependHook(text: string, hook: HookLabel | string | undefined | null): string {\n  if (hook === undefined || hook === null) {\n    return text;\n  }\n  if (hook === HookLabel.UNKNOWN) {\n    return text;\n  }\n  return `[HOOK:${hook}] ${text}`;\n}\n\nexport function prependToolName(text: string, toolName: string | undefined | null): string {\n  if (toolName === undefined || toolName === null) {\n    return text;\n  }\n  return `[TOOL:${toolName}] ${text}`;\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nconst SKIP_ROLES: ReadonlySet<string> = new Set([\"ai\", \"assistant\"]);\nconst SYSTEM_ROLES: ReadonlySet<string> = new Set([\"system\"]);\nconst TOOL_ROLES: ReadonlySet<string> = new Set([\"tool\", \"function\"]);\n\ntype MessageContent = string | ReadonlyArray<string | { type?: string; text?: string }>;\n\ninterface DucktypedMessage {\n  role?: string;\n  type?: string;\n  content?: MessageContent;\n}\n\ninterface DucktypedGeneration {\n  text?: string;\n}\n\ninterface DucktypedLLMResult {\n  generations?: ReadonlyArray<ReadonlyArray<DucktypedGeneration>>;\n}\n\ninterface DucktypedDocument {\n  pageContent?: string;\n}\n\nfunction extractContentText(content: MessageContent | undefined): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  if (Array.isArray(content)) {\n    const parts: string[] = [];\n    for (const block of content) {\n      if (typeof block === \"string\") {\n        parts.push(block);\n      } else if (block && typeof block === \"object\" && block.type === \"text\") {\n        parts.push(block.text ?? \"\");\n      }\n    }\n    return parts.join(\" \");\n  }\n  return \"\";\n}\n\nfunction getRole(message: DucktypedMessage): string {\n  if (message.role !== undefined) {\n    return message.role.toLowerCase();\n  }\n  if (typeof message.type === \"string\") {\n    return message.type.toLowerCase();\n  }\n  return \"\";\n}\n\nexport function extractTextFromMessages(\n  messages: ReadonlyArray<DucktypedMessage>,\n  options: { includeSystem?: boolean; includeTool?: boolean } = {},\n): string {\n  const includeSystem = options.includeSystem ?? true;\n  const includeTool = options.includeTool ?? true;\n  const parts: string[] = [];\n  for (const message of messages) {\n    const role = getRole(message);\n    if (SKIP_ROLES.has(role)) {\n      continue;\n    }\n    if (!includeSystem && SYSTEM_ROLES.has(role)) {\n      continue;\n    }\n    if (!includeTool && TOOL_ROLES.has(role)) {\n      continue;\n    }\n    const text = extractContentText(message.content);\n    const stripped = text.trim();\n    if (stripped) {\n      parts.push(stripped);\n    }\n  }\n  return parts.join(\"\\n\");\n}\n\nexport function extractTextFromPrompts(prompts: readonly string[]): string {\n  return prompts\n    .map((p) => p.trim())\n    .filter((p) => p.length > 0)\n    .join(\"\\n\");\n}\n\nexport function extractTextFromToolInput(inputStr: string): string {\n  return inputStr.trim();\n}\n\nexport function extractTextFromLLMResult(response: DucktypedLLMResult): string {\n  const parts: string[] = [];\n  for (const genList of response.generations ?? []) {\n    for (const gen of genList) {\n      const text = (gen.text ?? \"\").trim();\n      if (text) {\n        parts.push(text);\n      }\n    }\n  }\n  return parts.join(\"\\n\");\n}\n\nexport function extractTextFromDocuments(documents: ReadonlyArray<DucktypedDocument>): string {\n  const parts: string[] = [];\n  for (const doc of documents) {\n    const text = (doc.pageContent ?? \"\").trim();\n    if (text) {\n      parts.push(text);\n    }\n  }\n  return parts.join(\"\\n\");\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { BaseCallbackHandler } from \"@langchain/core/callbacks/base\";\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport {\n  FIREWALL_HOOK_TO_LABEL,\n  FirewallHook,\n  HookLabel,\n  resolveHooks,\n} from \"../hooks.js\";\nimport type { BlockResult, ClassifyEvent, LangChainAdapterOptions } from \"../types.js\";\nimport {\n  extractTextFromDocuments,\n  extractTextFromLLMResult,\n  extractTextFromPrompts,\n  extractTextFromToolInput,\n} from \"../utils/extract.js\";\n\nconst USER_ROLES: ReadonlySet<string> = new Set([\"human\", \"user\"]);\n\ninterface LangChainDucktypedMessage {\n  role?: string;\n  type?: string;\n  content?: string | ReadonlyArray<string | { type?: string; text?: string }>;\n}\n\nfunction getMessageRole(message: LangChainDucktypedMessage): string {\n  if (typeof message.role === \"string\") {\n    return message.role.toLowerCase();\n  }\n  if (typeof message.type === \"string\") {\n    return message.type.toLowerCase();\n  }\n  return \"\";\n}\n\nfunction extractMessageText(content: LangChainDucktypedMessage[\"content\"]): string {\n  if (content === undefined) {\n    return \"\";\n  }\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<LangChainDucktypedMessage>,\n): LangChainDucktypedMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (USER_ROLES.has(getMessageRole(msg))) {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport async function createLangChainHandler(\n  firewall: Firewall,\n  options: LangChainAdapterOptions = {},\n): Promise<BaseCallbackHandler> {\n  const { BaseCallbackHandler } = await import(\"@langchain/core/callbacks/base\");\n\n  const enabledHooks = resolveHooks(options.hooks);\n  // includeSystem remains inert for the user-only chat-model scan.\n  // includeTool still controls the explicit tool start and end callbacks.\n  const includeTool = options.includeTool ?? true;\n  const failOpen = options.failOpen ?? true;\n  const logger =\n    options.logger ??\n    ((message: string, error: unknown): void => {\n      // eslint-disable-next-line no-console\n      console.warn(`silmaril.firewall: ${message}`, error);\n    });\n  const requestedMode = options.mode ?? (\n    options.shadowMode === undefined\n      ? firewall.mode\n      : options.shadowMode ? \"shadow\" : \"block\"\n  );\n  const onClassify = options.onClassify;\n\n  const fireOnClassify = (event: ClassifyEvent): void => {\n    if (!onClassify) {\n      return;\n    }\n    try {\n      onClassify(event);\n    } catch (err) {\n      logger(\"onClassify callback threw\", err);\n    }\n  };\n\n  const classify = async (\n    text: string,\n    hookLabel: HookLabel,\n    runId: string,\n    toolName?: string,\n  ): Promise<void> => {\n    let result: BlockResult;\n    try {\n      result = await firewall.classify(text, {\n        hook: hookLabel,\n        metadata: {\n          langgraph: { run_id: runId },\n          ...(options.conversationId === undefined ? {} : { conversationId: options.conversationId }),\n        },\n        ...(requestedMode !== undefined ? { mode: requestedMode } : {}),\n        ...(toolName !== undefined ? { toolName } : {}),\n      });\n    } catch (err) {\n      if (!failOpen) {\n        throw err;\n      }\n      logger(\"classification failed, allowing prompt through\", err);\n      return;\n    }\n    const threshold = result.threshold;\n    const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n    const effectiveMode = requestedMode ?? result.mode ?? \"block\";\n    const commonEventFields = {\n      hook: hookLabel,\n      ...(toolName !== undefined ? { toolName } : {}),\n      runId,\n      text,\n      result,\n    };\n    fireOnClassify({\n      ...commonEventFields,\n      blocked,\n      mode: effectiveMode,\n      shadowMode: effectiveMode === \"shadow\",\n    });\n    if (!blocked || effectiveMode !== \"block\") {\n      return;\n    }\n\n    throw new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      runId,\n      hook: hookLabel,\n      ...(toolName !== undefined ? { toolName } : {}),\n      result,\n    });\n  };\n\n  class SilmarilFirewallHandler extends BaseCallbackHandler {\n    override name = \"silmaril_firewall_handler\";\n    override raiseError = true;\n    override awaitHandlers = true;\n\n    override async handleChatModelStart(\n      _llm: unknown,\n      messages: unknown,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.CHAT_MODEL_START)) {\n        return;\n      }\n      const batches = messages as ReadonlyArray<ReadonlyArray<LangChainDucktypedMessage>>;\n      const flat: LangChainDucktypedMessage[] = [];\n      for (const batch of batches) {\n        for (const m of batch) {\n          flat.push(m);\n        }\n      }\n      const lastUser = findLastUserMessage(flat);\n      if (!lastUser) {\n        return;\n      }\n      const text = extractMessageText(lastUser.content).trim();\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.CHAT_MODEL_START], runId);\n    }\n\n    override async handleLLMStart(\n      _llm: unknown,\n      prompts: string[],\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.LLM_START)) {\n        return;\n      }\n      const text = extractTextFromPrompts(prompts);\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.LLM_START], runId);\n    }\n\n    override async handleToolStart(\n      tool: { name?: string } | undefined,\n      inputStr: string,\n      runId: string,\n    ): Promise<void> {\n      if (!includeTool || !enabledHooks.has(FirewallHook.TOOL_START)) {\n        return;\n      }\n      const text = extractTextFromToolInput(inputStr);\n      if (!text) {\n        return;\n      }\n      const toolName = tool?.name;\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.TOOL_START], runId, toolName);\n    }\n\n    override async handleRetrieverStart(\n      _retriever: unknown,\n      query: string,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.RETRIEVER_START)) {\n        return;\n      }\n      const text = query.trim();\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.RETRIEVER_START], runId);\n    }\n\n    override async handleLLMEnd(output: unknown, runId: string): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.LLM_END)) {\n        return;\n      }\n      const text = extractTextFromLLMResult(output as { generations?: ReadonlyArray<ReadonlyArray<{ text?: string }>> });\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.LLM_END], runId);\n    }\n\n    override async handleToolEnd(\n      output: unknown,\n      runId: string,\n      _parentRunId?: string,\n      _tags?: string[],\n      _kwargs?: { name?: string },\n    ): Promise<void> {\n      if (!includeTool || !enabledHooks.has(FirewallHook.TOOL_END)) {\n        return;\n      }\n      const text = String(output).trim();\n      if (!text) {\n        return;\n      }\n      const toolName = _kwargs?.name;\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.TOOL_END], runId, toolName);\n    }\n\n    override async handleRetrieverEnd(\n      documents: ReadonlyArray<{ pageContent?: string }>,\n      runId: string,\n    ): Promise<void> {\n      if (!enabledHooks.has(FirewallHook.RETRIEVER_END)) {\n        return;\n      }\n      const text = extractTextFromDocuments(documents);\n      if (!text) {\n        return;\n      }\n      await classify(text, FIREWALL_HOOK_TO_LABEL[FirewallHook.RETRIEVER_END], runId);\n    }\n  }\n\n  return new SilmarilFirewallHandler();\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport { randomUUID } from \"node:crypto\";\n\nimport { createMiddleware, type FirewallMiddleware } from \"./adapters/vercel.js\";\nimport { SilmarilApiError } from \"./exceptions.js\";\nimport { normalizeHarmfulOutcomeMap, normalizePrimaryOutcome } from \"./outcomes.js\";\nimport { sanitizeText } from \"./sanitization.js\";\nimport type {\n  BlockResult,\n  ClassifyBatchOptions,\n  ClassifyOptions,\n  ClassificationMetadata,\n  FirewallOptions,\n  FirewallMode,\n  GovernanceContext,\n  GovernanceDecision,\n  LangChainAdapterOptions,\n  LangChainFirewallHandler,\n  MiddlewareOptions,\n  Prediction,\n} from \"./types.js\";\n\nexport const SDK_VERSION = \"0.7.3\";\nexport const DEFAULT_TIMEOUT_MS = 10_000;\nconst DEFAULT_MAX_RETRIES = 5;\nconst MAX_BACKOFF_SECONDS = 30;\nconst MAX_ERROR_BODY_BYTES = 1 << 16;\n/**\n * Largest delay a timer can represent. Both `setTimeout` and the\n * `AbortSignal.timeout` this client used before silently collapse a larger\n * delay to 1 ms, which would turn a long timeout into an immediate abort.\n */\nconst MAX_TIMEOUT_MS = 2_147_483_647;\n\ninterface SingleClassifyPayload {\n  text: string;\n  mode?: FirewallMode;\n  hook?: string;\n  tool_name?: string;\n  metadata?: ClassificationMetadata;\n}\n\ninterface BatchClassifyPayload {\n  texts: readonly string[];\n  mode?: FirewallMode;\n  hooks?: readonly string[];\n  tool_names?: readonly (string | null)[];\n  metadata?: readonly (ClassificationMetadata | null)[];\n}\n\ninterface SingleClassifyResponse {\n  prediction: Prediction;\n  score: number;\n  threshold: number;\n  mode?: unknown;\n  primary_outcome?: unknown;\n  outcome_scores?: unknown;\n  detector_scores?: unknown;\n  detector_counts?: unknown;\n  governance?: unknown;\n}\n\ninterface BatchClassifyResponse {\n  predictions: readonly SingleClassifyResponse[];\n}\n\nfunction resolveMode(value: unknown, requestedMode?: FirewallMode): FirewallMode | undefined {\n  let responseMode: FirewallMode | undefined;\n  if (value === \"shadow\" || value === \"warn\" || value === \"block\") {\n    responseMode = value;\n  } else if (value !== undefined) {\n    throw new Error(\"Firewall: response mode must be shadow, warn, or block\");\n  }\n\n  // A supplied mode is the per-request override contract. Prefer it during\n  // rolling upgrades so a missing or stale response field cannot strengthen\n  // enforcement beyond what the caller requested.\n  return requestedMode ?? responseMode;\n}\n\nfunction legacyMode(shadowMode: boolean | undefined): FirewallMode | undefined {\n  return shadowMode === undefined ? undefined : shadowMode ? \"shadow\" : \"block\";\n}\n\nfunction blockResultFromResponse(\n  data: SingleClassifyResponse,\n  requestedMode?: FirewallMode,\n): BlockResult {\n  if (data.prediction !== \"BENIGN\" && data.prediction !== \"MALICIOUS\") {\n    throw new Error(\"Firewall: response prediction must be BENIGN or MALICIOUS\");\n  }\n  const result: {\n    prediction: Prediction;\n    score: number;\n    threshold: number;\n    mode?: FirewallMode;\n    primaryOutcome?: NonNullable<BlockResult[\"primaryOutcome\"]>;\n    outcomeScores?: NonNullable<BlockResult[\"outcomeScores\"]>;\n    detectorScores?: NonNullable<BlockResult[\"detectorScores\"]>;\n    detectorCounts?: NonNullable<BlockResult[\"detectorCounts\"]>;\n    governance?: GovernanceDecision;\n  } = {\n    prediction: data.prediction,\n    score: Number(data.score),\n    threshold: Number(data.threshold),\n  };\n  const mode = resolveMode(data.mode, requestedMode);\n  if (mode !== undefined) {\n    result.mode = mode;\n  }\n  if (data.primary_outcome !== undefined) {\n    result.primaryOutcome = normalizePrimaryOutcome(data.primary_outcome);\n  }\n  if (data.outcome_scores !== undefined) {\n    const outcomeScores = normalizeHarmfulOutcomeMap(data.outcome_scores, \"outcome_scores\");\n    if (outcomeScores !== undefined) {\n      result.outcomeScores = outcomeScores;\n    }\n  }\n  if (data.detector_scores !== undefined) {\n    const detectorScores = normalizeHarmfulOutcomeMap(data.detector_scores, \"detector_scores\");\n    if (detectorScores !== undefined) {\n      result.detectorScores = detectorScores;\n    }\n  }\n  if (data.detector_counts !== undefined) {\n    const detectorCounts = normalizeHarmfulOutcomeMap(data.detector_counts, \"detector_counts\");\n    if (detectorCounts !== undefined) {\n      result.detectorCounts = detectorCounts;\n    }\n  }\n  if (data.governance !== undefined) {\n    result.governance = governanceDecisionFromResponse(data.governance);\n  }\n  return Object.freeze(result);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction withSdkMetadata(\n  metadata: ClassificationMetadata | undefined,\n  info: {\n    requestId: string;\n    inputIndex?: number;\n    governance?: GovernanceContext;\n  },\n): ClassificationMetadata {\n  const payload: Record<string, unknown> = { ...(metadata ?? {}) };\n  const existing = payload.silmaril;\n  if (existing !== undefined && !isRecord(existing)) {\n    throw new Error(\"Firewall: metadata.silmaril must be an object when provided\");\n  }\n  payload.silmaril = {\n    ...(isRecord(existing) ? existing : {}),\n    sdk_language: \"typescript\",\n    sdk_version: SDK_VERSION,\n    request_id: info.requestId,\n    ...(info.inputIndex === undefined ? {} : { input_index: info.inputIndex }),\n    ...(info.governance === undefined\n      ? {}\n      : { governance: governanceContextToWire(info.governance) }),\n  };\n  return payload;\n}\n\nfunction governanceContextToWire(context: GovernanceContext): Record<string, unknown> {\n  return {\n    ...(context.agent === undefined ? {} : { agent: context.agent }),\n    ...(context.resource === undefined\n      ? {}\n      : {\n          resource: {\n            kind: context.resource.kind,\n            ...(context.resource.id === undefined ? {} : { id: context.resource.id }),\n            ...(context.resource.parentId === undefined\n              ? {}\n              : { parent_id: context.resource.parentId }),\n          },\n        }),\n  };\n}\n\nfunction governanceDecisionFromResponse(value: unknown): GovernanceDecision {\n  if (!isRecord(value)) {\n    throw new Error(\"Firewall: response governance must be an object\");\n  }\n  if (value.action !== \"allow\" && value.action !== \"block\") {\n    throw new Error(\"Firewall: response governance action must be allow or block\");\n  }\n  if (typeof value.policy_version !== \"string\" || value.policy_version.length === 0) {\n    throw new Error(\"Firewall: response governance policy_version must be a non-empty string\");\n  }\n  if (value.rule_id !== undefined && typeof value.rule_id !== \"string\") {\n    throw new Error(\"Firewall: response governance rule_id must be a string when provided\");\n  }\n  return Object.freeze({\n    action: value.action,\n    ...(value.rule_id === undefined ? {} : { ruleId: value.rule_id }),\n    policyVersion: value.policy_version,\n  });\n}\n\nasync function readCappedErrorBody(response: Response): Promise<string> {\n  if (!response.body) {\n    return response.text().then((body) => body.slice(0, MAX_ERROR_BODY_BYTES)).catch(() => \"\");\n  }\n\n  const reader = response.body.getReader();\n  const chunks: Uint8Array[] = [];\n  let remaining = MAX_ERROR_BODY_BYTES;\n  try {\n    while (remaining > 0) {\n      const { done, value } = await reader.read();\n      if (done) {\n        break;\n      }\n      if (!value) {\n        continue;\n      }\n      const chunk = value.byteLength > remaining ? value.slice(0, remaining) : value;\n      chunks.push(chunk);\n      remaining -= chunk.byteLength;\n      if (chunk.byteLength < value.byteLength) {\n        break;\n      }\n    }\n  } catch {\n    return \"\";\n  } finally {\n    await reader.cancel().catch(() => undefined);\n  }\n\n  const total = chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0);\n  const body = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    body.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return new TextDecoder().decode(body);\n}\n\n/** Releases a response we will not read so a retry does not leak its socket. */\nasync function releaseDiscardedResponseBody(response: Response): Promise<void> {\n  try {\n    if (response.body) {\n      if (!response.body.locked) {\n        await response.body.cancel();\n      }\n      return;\n    }\n    await response.text();\n  } catch {\n    // The discarded body belongs to a response we already decided to retry.\n  }\n}\n\n/** Cleanup must not postpone caller cancellation or an attempt timeout. */\nasync function discardResponseBody(response: Response, signal: AbortSignal): Promise<void> {\n  signal.throwIfAborted();\n  let onAbort!: () => void;\n  const aborted = new Promise<never>((_resolve, reject) => {\n    onAbort = () => reject(signal.reason);\n    signal.addEventListener(\"abort\", onAbort, { once: true });\n  });\n  try {\n    await Promise.race([releaseDiscardedResponseBody(response), aborted]);\n  } finally {\n    signal.removeEventListener(\"abort\", onAbort);\n  }\n}\n\nfunction isAbortLikeError(error: unknown): boolean {\n  if (typeof error !== \"object\" || error === null) {\n    return false;\n  }\n  const name = (error as { name?: unknown }).name;\n  return name === \"AbortError\" || name === \"TimeoutError\";\n}\n\n/**\n * Reads a decoded body under an attempt signal. Native fetch can reject a body\n * read that the signal cancelled with a generic `AbortError`, which would drop\n * the caller's abort reason or the timeout reason. Only abort-caused failures\n * are rewritten; decode and transport errors are surfaced unchanged.\n */\nasync function readBodyUnderSignal<T>(read: () => Promise<T>, signal: AbortSignal): Promise<T> {\n  try {\n    return await read();\n  } catch (error) {\n    if (signal.aborted && isAbortLikeError(error)) {\n      throw signal.reason;\n    }\n    throw error;\n  }\n}\n\ninterface AttemptSignal {\n  readonly signal: AbortSignal;\n  dispose(): void;\n}\n\n/**\n * Combines the per-attempt timeout with an optional caller signal. The caller\n * signal is shared across sibling calls, so the listener and the timer are\n * released by `dispose()` once the attempt no longer needs them.\n */\nfunction createAttemptSignal(timeoutMs: number, callerSignal?: AbortSignal): AttemptSignal {\n  const controller = new AbortController();\n  const timer = setTimeout(() => {\n    controller.abort(\n      new DOMException(\"The operation was aborted due to timeout\", \"TimeoutError\"),\n    );\n  }, timeoutMs);\n  const onCallerAbort = (): void => {\n    // Body disposal may never settle, so do not wait for finally to release\n    // a timer that could keep a command hook alive beyond the caller deadline.\n    clearTimeout(timer);\n    controller.abort(callerSignal?.reason);\n  };\n  callerSignal?.addEventListener(\"abort\", onCallerAbort, { once: true });\n  return {\n    signal: controller.signal,\n    dispose: () => {\n      clearTimeout(timer);\n      callerSignal?.removeEventListener(\"abort\", onCallerAbort);\n    },\n  };\n}\n\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n  return new Promise<void>((resolve, reject) => {\n    if (signal?.aborted) {\n      reject(signal.reason);\n      return;\n    }\n    const onAbort = (): void => {\n      clearTimeout(timer);\n      reject(signal?.reason);\n    };\n    const timer = setTimeout(() => {\n      signal?.removeEventListener(\"abort\", onAbort);\n      resolve();\n    }, ms);\n    signal?.addEventListener(\"abort\", onAbort, { once: true });\n  });\n}\n\n/**\n * Firewall client for the `/classify` API.\n *\n * Instance state is set once in the constructor and never mutated by a request,\n * so one client is safe to share across any number of concurrent `classify()`\n * and `classifyBatch()` promises within a single JavaScript runtime. Each\n * worker thread owns its own client: `Firewall` instances are not transferable\n * across `worker_threads` boundaries.\n */\nexport class Firewall {\n  readonly apiKey: string;\n  readonly apiUrl: string;\n  readonly timeoutMs: number;\n  readonly shadowMode: boolean;\n  readonly mode: FirewallMode | undefined;\n\n  private readonly headers: Readonly<Record<string, string>>;\n\n  constructor(options: FirewallOptions) {\n    if (!options.apiKey) {\n      throw new Error(\"Firewall: apiKey is required\");\n    }\n    if (!options.apiUrl) {\n      throw new Error(\"Firewall: apiUrl is required\");\n    }\n    this.apiKey = options.apiKey;\n    this.apiUrl = options.apiUrl;\n    this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;\n    if (typeof this.timeoutMs !== \"number\" || !Number.isFinite(this.timeoutMs) || this.timeoutMs < 0) {\n      throw new Error(`Firewall: timeoutMs must be a finite non-negative number, got ${this.timeoutMs}`);\n    }\n    if (this.timeoutMs > MAX_TIMEOUT_MS) {\n      throw new Error(\n        `Firewall: timeoutMs must be at most ${MAX_TIMEOUT_MS} ms, got ${this.timeoutMs}`,\n      );\n    }\n    this.mode = options.mode ?? legacyMode(options.shadowMode);\n    this.shadowMode = this.mode === \"shadow\";\n    this.headers = Object.freeze({\n      \"x-api-key\": this.apiKey,\n      \"content-type\": \"application/json\",\n    });\n  }\n\n  async classify(text: string, options: ClassifyOptions = {}): Promise<BlockResult> {\n    const requestId = options.requestId ?? randomUUID();\n    return this.classifySingle(sanitizeText(text), options, { requestId });\n  }\n\n  async classifyBatch(\n    texts: readonly string[],\n    options: ClassifyBatchOptions = {},\n  ): Promise<BlockResult[]> {\n    if (texts.length === 0) {\n      throw new Error(\"Firewall: texts must not be empty\");\n    }\n    if (options.hooks !== undefined && options.hooks.length !== texts.length) {\n      throw new Error(\n        `Firewall: hooks length ${options.hooks.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.toolNames !== undefined && options.toolNames.length !== texts.length) {\n      throw new Error(\n        `Firewall: toolNames length ${options.toolNames.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.metadata !== undefined && options.metadata.length !== texts.length) {\n      throw new Error(\n        `Firewall: metadata length ${options.metadata.length} does not match texts length ${texts.length}`,\n      );\n    }\n    if (options.governance !== undefined && options.governance.length !== texts.length) {\n      throw new Error(\n        `Firewall: governance length ${options.governance.length} does not match texts length ${texts.length}`,\n      );\n    }\n\n    const requestId = options.requestId ?? randomUUID();\n    const payload: BatchClassifyPayload = {\n      texts: texts.map((text) => sanitizeText(text)),\n    };\n    const requestedMode = options.mode ?? this.mode;\n    if (requestedMode !== undefined) {\n      payload.mode = requestedMode;\n    }\n    if (options.hooks && options.hooks.length > 0) {\n      payload.hooks = options.hooks.map((h) => String(h));\n    }\n    if (options.toolNames && options.toolNames.length > 0) {\n      payload.tool_names = options.toolNames.map((t) => (t === undefined ? null : t));\n    }\n    payload.metadata = texts.map((_, index) =>\n      withSdkMetadata(options.metadata?.[index], {\n        requestId,\n        inputIndex: index,\n        ...(options.governance?.[index] === undefined\n          ? {}\n          : { governance: options.governance[index] }),\n      }),\n    );\n    const data = await this.postWithRetry<BatchClassifyResponse>(payload, options.signal);\n    if (!Array.isArray(data.predictions)) {\n      throw new Error(\"Firewall: response predictions must be an array\");\n    }\n    if (data.predictions.length !== payload.texts.length) {\n      throw new Error(\n        `Firewall: response predictions length ${data.predictions.length} does not match submitted texts length ${payload.texts.length}`,\n      );\n    }\n    return data.predictions.map((p) => blockResultFromResponse(p, requestedMode));\n  }\n\n  asLangChainHandler<THandler = LangChainFirewallHandler>(\n    options: LangChainAdapterOptions = {},\n  ): Promise<THandler> {\n    return import(\"./adapters/langchain.js\").then((m) =>\n      m.createLangChainHandler(this, options) as Promise<THandler>,\n    );\n  }\n\n  asMiddleware(options: MiddlewareOptions = {}): FirewallMiddleware {\n    return createMiddleware(this, options);\n  }\n\n  private async postWithRetry<T>(\n    payload: SingleClassifyPayload | BatchClassifyPayload,\n    callerSignal?: AbortSignal,\n    maxRetries: number = DEFAULT_MAX_RETRIES,\n  ): Promise<T> {\n    // Cancellation outranks payload serialization, which can itself throw on\n    // cyclic metadata or a throwing `toJSON`.\n    callerSignal?.throwIfAborted();\n    // Serialize before the first attempt so retries resend the same logical\n    // event even if the caller mutates the objects it passed in.\n    const body = JSON.stringify(payload);\n    for (let attempt = 0; attempt <= maxRetries; attempt++) {\n      callerSignal?.throwIfAborted();\n      const attemptSignal = createAttemptSignal(this.timeoutMs, callerSignal);\n      try {\n        const response = await fetch(this.apiUrl, {\n          method: \"POST\",\n          headers: this.headers,\n          body,\n          redirect: \"error\",\n          signal: attemptSignal.signal,\n        });\n        if (response.status !== 429 || attempt === maxRetries) {\n          if (!response.ok) {\n            const errorBody = await readCappedErrorBody(response);\n            // The capped read swallows its own failures, so an abort during it\n            // would otherwise be reported as a plain API error.\n            attemptSignal.signal.throwIfAborted();\n            throw new SilmarilApiError({\n              status: response.status,\n              statusText: response.statusText,\n              body: errorBody,\n            });\n          }\n          return await readBodyUnderSignal<T>(\n            () => response.json() as Promise<T>,\n            attemptSignal.signal,\n          );\n        }\n        await discardResponseBody(response, attemptSignal.signal);\n      } finally {\n        attemptSignal.dispose();\n      }\n      await sleep(Math.min(2 ** attempt, MAX_BACKOFF_SECONDS) * 1000, callerSignal);\n    }\n    throw new Error(\"Firewall: exhausted retries (unreachable)\");\n  }\n\n  private async classifySingle(\n    text: string,\n    options: ClassifyOptions,\n    metadataInfo: {\n      requestId: string;\n    },\n  ): Promise<BlockResult> {\n    const payload: SingleClassifyPayload = { text };\n    const requestedMode = options.mode ?? this.mode;\n    if (requestedMode !== undefined) {\n      payload.mode = requestedMode;\n    }\n    if (options.hook !== undefined) {\n      payload.hook = options.hook;\n    }\n    if (options.toolName !== undefined) {\n      payload.tool_name = options.toolName;\n    }\n    payload.metadata = withSdkMetadata(options.metadata, {\n      ...metadataInfo,\n      ...(options.governance === undefined ? {} : { governance: options.governance }),\n    });\n    const data = await this.postWithRetry<SingleClassifyResponse>(payload, options.signal);\n    return blockResultFromResponse(data, requestedMode);\n  }\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nimport type { Firewall } from \"../firewall.js\";\nimport { FirewallBlockedException } from \"../exceptions.js\";\nimport { HookLabel } from \"../hooks.js\";\nimport type { BlockResult, MiddlewareOptions } from \"../types.js\";\n\ninterface VercelContentPart {\n  type?: string;\n  text?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  output?: unknown;\n  result?: unknown;\n}\n\ninterface VercelPromptMessage {\n  role: string;\n  content: string | ReadonlyArray<VercelContentPart | string>;\n}\n\ninterface VercelToolCall {\n  toolCallType?: string;\n  toolCallId?: string;\n  toolName?: string;\n  args?: unknown;\n  input?: unknown;\n}\n\ninterface VercelGenerateResult {\n  text?: string;\n  toolCalls?: ReadonlyArray<VercelToolCall>;\n}\n\ninterface WrapGenerateArgs<TResult extends VercelGenerateResult & Record<string, unknown>> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doGenerate: () => PromiseLike<TResult>;\n}\n\ninterface WrapStreamArgs<\n  TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>,\n> {\n  params: { prompt?: ReadonlyArray<VercelPromptMessage> } & Record<string, unknown>;\n  doStream: () => PromiseLike<TResult>;\n}\n\ninterface StreamPart {\n  type?: string;\n  textDelta?: string;\n  delta?: string;\n}\n\ninterface VercelStepContext {\n  toolName: string | undefined;\n  toolCallId: string | undefined;\n}\n\nfunction stringifyToolValue(value: unknown): string {\n  if (value === null || value === undefined) {\n    return \"\";\n  }\n  if (typeof value === \"string\") {\n    return value;\n  }\n  try {\n    return JSON.stringify(value);\n  } catch {\n    return String(value);\n  }\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction extractContentText(content: VercelPromptMessage[\"content\"]): string {\n  if (typeof content === \"string\") {\n    return content;\n  }\n  const parts: string[] = [];\n  for (const block of content) {\n    if (typeof block === \"string\") {\n      parts.push(block);\n    } else if (block && block.type === \"text\") {\n      parts.push(block.text ?? \"\");\n    }\n  }\n  return parts.join(\" \");\n}\n\nfunction iterateToolResultParts(\n  message: VercelPromptMessage,\n): Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> {\n  if (typeof message.content === \"string\") {\n    return [];\n  }\n  const out: Array<{ text: string; toolName: string | undefined; toolCallId: string | undefined }> = [];\n  for (const part of message.content) {\n    if (typeof part === \"string\") {\n      continue;\n    }\n    if (part.type === \"tool-result\") {\n      const text = stringifyToolResult(part.result !== undefined ? part.result : part.output);\n      if (text.trim()) {\n        out.push({ text, toolName: part.toolName, toolCallId: part.toolCallId });\n      }\n    }\n  }\n  return out;\n}\n\nfunction stringifyToolResult(value: unknown): string {\n  if (!isRecord(value)) {\n    return stringifyToolValue(value);\n  }\n  if ((value.type === \"text\" || value.type === \"error-text\") && typeof value.value === \"string\") {\n    return value.value;\n  }\n  if ((value.type === \"json\" || value.type === \"error-json\") && value.value !== undefined) {\n    return stringifyToolValue(value.value);\n  }\n  if (value.type === \"content\" && Array.isArray(value.value)) {\n    return value.value\n      .map((part) => (isRecord(part) && part.type === \"text\" && typeof part.text === \"string\" ? part.text : \"\"))\n      .filter((text) => text.length > 0)\n      .join(\" \");\n  }\n  return stringifyToolValue(value);\n}\n\nfunction findLastUserMessage(\n  messages: ReadonlyArray<VercelPromptMessage>,\n): VercelPromptMessage | undefined {\n  for (let i = messages.length - 1; i >= 0; i--) {\n    const msg = messages[i]!;\n    if (msg.role.toLowerCase() === \"user\") {\n      return msg;\n    }\n  }\n  return undefined;\n}\n\nexport interface FirewallMiddleware {\n  readonly specificationVersion: \"v3\";\n  readonly middlewareVersion: \"v2\";\n  wrapGenerate: <TResult extends VercelGenerateResult & Record<string, unknown>>(\n    args: WrapGenerateArgs<TResult>,\n  ) => Promise<TResult>;\n  wrapStream: <TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>(\n    args: WrapStreamArgs<TResult>,\n  ) => Promise<TResult>;\n}\n\nexport function createMiddleware(\n  firewall: Firewall,\n  options: MiddlewareOptions = {},\n): FirewallMiddleware {\n  const scanInput = options.scanInput ?? true;\n  const scanOutput = options.scanOutput ?? false;\n  const requestedMode = options.mode ?? (\n    options.shadowMode === undefined\n      ? firewall.mode\n      : options.shadowMode ? \"shadow\" : \"block\"\n  );\n\n  const classifyOrBlock = async (\n    text: string,\n    hook: HookLabel,\n    context: VercelStepContext = { toolName: undefined, toolCallId: undefined },\n  ): Promise<void> => {\n    if (!text.trim()) {\n      return;\n    }\n    const { toolName, toolCallId } = context;\n    const result: BlockResult = await firewall.classify(\n      text,\n      {\n        hook,\n        ...(toolName !== undefined ? { toolName } : {}),\n        ...(requestedMode !== undefined ? { mode: requestedMode } : {}),\n      },\n    );\n    const threshold = result.threshold;\n    const blocked = result.prediction === \"MALICIOUS\" || result.governance?.action === \"block\";\n    const effectiveMode = requestedMode ?? result.mode ?? \"block\";\n    const commonEventFields = {\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      text,\n      result,\n    };\n    options.onClassify?.({\n      ...commonEventFields,\n      blocked,\n      mode: effectiveMode,\n      shadowMode: effectiveMode === \"shadow\",\n    });\n    if (!blocked || effectiveMode !== \"block\") {\n      return;\n    }\n\n    const err = new FirewallBlockedException({\n      score: result.score,\n      threshold,\n      promptText: text,\n      hook,\n      ...(toolName !== undefined ? { toolName } : {}),\n      ...(toolCallId !== undefined ? { toolCallId } : {}),\n      result,\n    });\n    options.onBlocked?.(err);\n    throw err;\n  };\n\n  const scanPrompt = async (prompt: ReadonlyArray<VercelPromptMessage>): Promise<void> => {\n    if (prompt.length === 0) {\n      return;\n    }\n    const last = prompt[prompt.length - 1]!;\n    const role = last.role.toLowerCase();\n\n    // If the newest message is a tool result (typical mid-flow in a\n    // tool-calling loop), classify each tool-result part individually with\n    // tool_response + toolName. No manual wiring from the caller — the\n    // toolName is read directly from the Vercel content part.\n    if (role === \"tool\") {\n      for (const { text, toolName, toolCallId } of iterateToolResultParts(last)) {\n        await classifyOrBlock(text, HookLabel.TOOL_RESPONSE, { toolName, toolCallId });\n      }\n      return;\n    }\n\n    // Otherwise, fall back to scanning the most recent user message.\n    // Covers: [user], [system, user], [user, assistant(text), user], etc.\n    const lastUser = findLastUserMessage(prompt);\n    if (!lastUser) {\n      return;\n    }\n    const text = extractContentText(lastUser.content).trim();\n    if (!text) {\n      return;\n    }\n    await classifyOrBlock(text, HookLabel.USER_INPUT);\n  };\n\n  const scanGenerateResult = async (result: VercelGenerateResult): Promise<void> => {\n    if (scanOutput && typeof result.text === \"string\" && result.text.length > 0) {\n      await classifyOrBlock(result.text, HookLabel.LLM_OUTPUT);\n    }\n    if (options.scanToolCalls && Array.isArray(result.toolCalls)) {\n      for (const call of result.toolCalls) {\n        if (!call || typeof call !== \"object\") {\n          continue;\n        }\n        const toolInput = call.args !== undefined ? call.args : call.input;\n        const args =\n          typeof toolInput === \"string\" ? toolInput : stringifyToolValue(toolInput);\n        const toolName = typeof call.toolName === \"string\" ? call.toolName : undefined;\n        const toolCallId = typeof call.toolCallId === \"string\" ? call.toolCallId : undefined;\n        if (args.trim()) {\n          await classifyOrBlock(args, HookLabel.TOOL_CALL, { toolName, toolCallId });\n        }\n      }\n    }\n  };\n\n  return {\n    specificationVersion: \"v3\",\n    middlewareVersion: \"v2\",\n\n    async wrapGenerate<TResult extends VercelGenerateResult & Record<string, unknown>>({\n      params,\n      doGenerate,\n    }: WrapGenerateArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const result = await doGenerate();\n      await scanGenerateResult(result);\n      return result;\n    },\n\n    async wrapStream<TResult extends { stream: ReadableStream<unknown> } & Record<string, unknown>>({\n      params,\n      doStream,\n    }: WrapStreamArgs<TResult>): Promise<TResult> {\n      if (scanInput) {\n        await scanPrompt(params.prompt ?? []);\n      }\n      const { stream, ...rest } = await doStream();\n      if (!scanOutput) {\n        return { stream, ...rest } as unknown as TResult;\n      }\n\n      let buffered = \"\";\n      const transformed = stream.pipeThrough(\n        new TransformStream<unknown, unknown>({\n          transform(chunk, controller): void {\n            const part = chunk as StreamPart;\n            if (part && part.type === \"text-delta\") {\n              const delta = part.textDelta ?? part.delta ?? \"\";\n              buffered += delta;\n            }\n            controller.enqueue(chunk);\n          },\n          async flush(controller): Promise<void> {\n            if (!buffered.trim()) {\n              return;\n            }\n            try {\n              await classifyOrBlock(buffered, HookLabel.LLM_OUTPUT);\n            } catch (err) {\n              if (err instanceof FirewallBlockedException) {\n                controller.enqueue({ type: \"error\", error: err });\n                return;\n              }\n              throw err;\n            }\n          },\n        }),\n      );\n      return { stream: transformed, ...rest } as unknown as TResult;\n    },\n  };\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport const Outcome = {\n  Benign: \"benign\",\n  InformationDisclosure: \"information_disclosure\",\n  SecretExposure: \"secret_exposure\",\n  ControlAbuse: \"control_abuse\",\n  SystemCompromise: \"system_compromise\",\n  ServiceDisruption: \"service_disruption\",\n  CodeGeneration: \"code_generation\",\n  StoryScriptGeneration: \"story_script_generation\",\n  GameGeneration: \"game_generation\",\n  WebsiteGeneration: \"website_generation\",\n  ClickUpTermsViolation: \"clickup_terms_violation\",\n  TraditionalAiAbuse: \"traditional_ai_abuse\",\n} as const;\n\ndeclare const unknownOutcomeBrand: unique symbol;\n\nexport type KnownPrimaryOutcome = (typeof Outcome)[keyof typeof Outcome];\nexport type KnownHarmfulOutcome = Exclude<KnownPrimaryOutcome, typeof Outcome.Benign>;\nexport type UnknownOutcome = string & { readonly [unknownOutcomeBrand]: \"UnknownOutcome\" };\nexport type PrimaryOutcome = KnownPrimaryOutcome | UnknownOutcome;\nexport type HarmfulOutcome = KnownHarmfulOutcome | UnknownOutcome;\n\nexport const PRIMARY_OUTCOMES = [\n  Outcome.Benign,\n  Outcome.InformationDisclosure,\n  Outcome.SecretExposure,\n  Outcome.ControlAbuse,\n  Outcome.SystemCompromise,\n  Outcome.ServiceDisruption,\n  Outcome.CodeGeneration,\n  Outcome.StoryScriptGeneration,\n  Outcome.GameGeneration,\n  Outcome.WebsiteGeneration,\n  Outcome.ClickUpTermsViolation,\n  Outcome.TraditionalAiAbuse,\n] as const satisfies readonly PrimaryOutcome[];\n\nexport const HARMFUL_OUTCOMES = [\n  Outcome.InformationDisclosure,\n  Outcome.SecretExposure,\n  Outcome.ControlAbuse,\n  Outcome.SystemCompromise,\n  Outcome.ServiceDisruption,\n  Outcome.CodeGeneration,\n  Outcome.StoryScriptGeneration,\n  Outcome.GameGeneration,\n  Outcome.WebsiteGeneration,\n  Outcome.ClickUpTermsViolation,\n  Outcome.TraditionalAiAbuse,\n] as const satisfies readonly KnownHarmfulOutcome[];\n\nexport const OUTCOME_DESCRIPTIONS = {\n  [Outcome.Benign]: \"No harmful firewall outcome detected.\",\n  [Outcome.InformationDisclosure]:\n    \"Exposes private data, documents, internal context, logs, traces, customer data, SQL rows, topology, or similar non-secret sensitive information.\",\n  [Outcome.SecretExposure]:\n    \"Exposes credentials, tokens, API keys, cookies, passwords, signing keys, OAuth secrets, session material, or webhook secrets.\",\n  [Outcome.ControlAbuse]:\n    \"Misuses authorized tools or user privileges to send, change, approve, delete, operate, or bypass policy/RBAC without a stronger outcome.\",\n  [Outcome.SystemCompromise]:\n    \"Enables privilege escalation, account takeover, hostile integration or plugin takeover, persistence, lateral movement, attacker webhook registration, or code/plugin execution.\",\n  [Outcome.ServiceDisruption]:\n    \"Causes downtime, lockout, degradation, alert suppression, destructive loops, resource exhaustion, cost spikes, or hidden outage evidence.\",\n  [Outcome.CodeGeneration]:\n    \"Requests generation or material modification of executable code, scripts, workflows, or configuration.\",\n  [Outcome.StoryScriptGeneration]:\n    \"Requests generation of narrative prose, dialogue, scripts, or story artifacts.\",\n  [Outcome.GameGeneration]:\n    \"Requests generation of a game, quest, level, mechanic, or playable experience.\",\n  [Outcome.WebsiteGeneration]:\n    \"Requests generation of a website, landing page, storefront, or web experience.\",\n  [Outcome.ClickUpTermsViolation]:\n    \"Requests content or actions that violate the configured ClickUp tenant policy.\",\n  [Outcome.TraditionalAiAbuse]:\n    \"Requests unsafe AI assistance outside the concrete security outcome classes.\",\n} as const satisfies Readonly<Record<KnownPrimaryOutcome, string>>;\n\nconst PRIMARY_OUTCOME_SET = new Set<string>(PRIMARY_OUTCOMES);\nconst HARMFUL_OUTCOME_SET = new Set<string>(HARMFUL_OUTCOMES);\n\nexport function isPrimaryOutcome(value: unknown): value is KnownPrimaryOutcome {\n  return typeof value === \"string\" && PRIMARY_OUTCOME_SET.has(value);\n}\n\nexport function isHarmfulOutcome(value: unknown): value is KnownHarmfulOutcome {\n  return typeof value === \"string\" && HARMFUL_OUTCOME_SET.has(value);\n}\n\nexport function normalizePrimaryOutcome(\n  value: unknown,\n  fieldName = \"primary_outcome\",\n): PrimaryOutcome {\n  if (typeof value !== \"string\") {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(value)}`);\n  }\n  return isPrimaryOutcome(value) ? value : (value as UnknownOutcome);\n}\n\nexport function normalizeHarmfulOutcome(\n  value: unknown,\n  fieldName = \"outcome\",\n): HarmfulOutcome {\n  if (typeof value !== \"string\" || value === Outcome.Benign) {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(value)}`);\n  }\n  return isHarmfulOutcome(value) ? value : (value as UnknownOutcome);\n}\n\nexport function normalizeHarmfulOutcomeMap(\n  values: unknown,\n  fieldName: string,\n): Readonly<Partial<Record<HarmfulOutcome, number>>> | undefined {\n  if (values === undefined || values === null) {\n    return undefined;\n  }\n  if (typeof values !== \"object\" || Array.isArray(values)) {\n    throw new Error(`Firewall: invalid ${fieldName} ${JSON.stringify(values)}`);\n  }\n  const out: Partial<Record<HarmfulOutcome, number>> = {};\n  for (const [key, value] of Object.entries(values)) {\n    const normalizedKey = normalizeHarmfulOutcome(key, `${fieldName} key`);\n    if (typeof value !== \"number\") {\n      throw new Error(`Firewall: invalid ${fieldName} value for ${JSON.stringify(key)}`);\n    }\n    out[normalizedKey] = value;\n  }\n  return Object.freeze(out);\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nfunction isHighSurrogate(code: number): boolean {\n  return code >= 0xd800 && code <= 0xdbff;\n}\n\nfunction isLowSurrogate(code: number): boolean {\n  return code >= 0xdc00 && code <= 0xdfff;\n}\n\nexport function sanitizeText(text: string): string {\n  let out = \"\";\n  for (let i = 0; i < text.length; i++) {\n    const code = text.charCodeAt(i);\n    if (isHighSurrogate(code)) {\n      if (i + 1 < text.length && isLowSurrogate(text.charCodeAt(i + 1))) {\n        out += text[i]!;\n        out += text[i + 1]!;\n        i++;\n      }\n      continue;\n    }\n    if (!isLowSurrogate(code)) {\n      out += text[i]!;\n    }\n  }\n  return out;\n}\n","// Copyright (c) 2024-2025 Silmaril Security Inc. All rights reserved.\n// PROPRIETARY AND CONFIDENTIAL\n\nexport {\n  Firewall,\n  DEFAULT_TIMEOUT_MS,\n} from \"./firewall.js\";\n\nexport { FirewallBlockedException, PromptBlockedException, SilmarilApiError } from \"./exceptions.js\";\nexport type { MalformedInputDetails } from \"./exceptions.js\";\n\nexport type { FirewallMiddleware } from \"./adapters/vercel.js\";\n\nexport {\n  HookLabel,\n  FirewallHook,\n  DEFAULT_HOOKS,\n  INPUT_HOOKS,\n  OUTPUT_HOOKS,\n  ALL_HOOKS,\n  FIREWALL_HOOK_TO_LABEL,\n  resolveHooks,\n  prependHook,\n  prependToolName,\n} from \"./hooks.js\";\n\nexport {\n  Outcome,\n  PRIMARY_OUTCOMES,\n  HARMFUL_OUTCOMES,\n  OUTCOME_DESCRIPTIONS,\n  isPrimaryOutcome,\n  isHarmfulOutcome,\n  normalizePrimaryOutcome,\n  normalizeHarmfulOutcome,\n  normalizeHarmfulOutcomeMap,\n} from \"./outcomes.js\";\n\nexport type {\n  KnownPrimaryOutcome,\n  KnownHarmfulOutcome,\n  PrimaryOutcome,\n  HarmfulOutcome,\n  UnknownOutcome,\n} from \"./outcomes.js\";\n\nexport type {\n  BlockResult,\n  ClassifyEvent,\n  Prediction,\n  FirewallMode,\n  GovernanceAction,\n  GovernanceResourceKind,\n  GovernanceResource,\n  GovernanceContext,\n  GovernanceDecision,\n  ClassificationMetadata,\n  FirewallOptions,\n  ClassifyOptions,\n  ClassifyBatchOptions,\n  LangChainAdapterOptions,\n  LangChainFirewallHandler,\n  MiddlewareOptions,\n} from \"./types.js\";\n"],"mappings":";;;;;;;;;;;;;;;;AA6GA,SAAS,eAAe,MAItB;AACA,MAAI;AACF,UAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,QAAI,CAAC,UAAU,OAAO,WAAW,UAAU;AACzC,aAAO,EAAE,SAAS,QAAW,OAAO,QAAW,YAAY,OAAU;AAAA,IACvE;AACA,UAAM,OAAO;AACb,WAAO;AAAA,MACL,SACE,KAAK,WAAW,OAAO,KAAK,YAAY,WACnC,KAAK,UACN;AAAA,MACN,OAAO,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAAA,MACrD,YAAY,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAAA,IAChE;AAAA,EACF,QAAQ;AACN,WAAO,EAAE,SAAS,QAAW,OAAO,QAAW,YAAY,OAAU;AAAA,EACvE;AACF;AAnIA,IAMM,wBAWO,0BA0DA,wBAIA;AA/Eb;AAAA;AAAA;AAMA,IAAM,yBAAyB;AAWxB,IAAM,2BAAN,MAAM,kCAAiC,MAAM;AAAA,MACzC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAET,YAAY,QAST;AACD,cAAM,0BAAyB,cAAc,MAAM,CAAC;AACpD,aAAK,OAAO;AACZ,aAAK,QAAQ,OAAO;AACpB,aAAK,YAAY,OAAO;AACxB,aAAK,aAAa,OAAO;AACzB,aAAK,QAAQ,OAAO;AACpB,aAAK,OAAO,OAAO;AACnB,aAAK,WAAW,OAAO;AACvB,aAAK,aAAa,OAAO;AACzB,aAAK,SAAS,OAAO;AACrB,eAAO,eAAe,MAAM,0BAAyB,SAAS;AAAA,MAChE;AAAA,MAEA,OAAe,cAAc,QAKlB;AACT,cAAM,YACJ,OAAO,WAAW,SAAS,yBACvB,GAAG,OAAO,WAAW,MAAM,GAAG,sBAAsB,CAAC,QACrD,OAAO;AACb,YACE,OAAO,QAAQ,eAAe,eAC9B,OAAO,QAAQ,YAAY,WAAW,SACtC;AACA,iBAAO,4DAA4D,SAAS;AAAA,QAC9E;AACA,eACE,+CACU,OAAO,MAAM,QAAQ,CAAC,CAAC,eAAe,OAAO,UAAU,QAAQ,CAAC,CAAC,OACvE,SAAS;AAAA,MAEjB;AAAA,IACF;AAGO,IAAM,yBAAyB;AAI/B,IAAM,mBAAN,MAAM,0BAAyB,MAAM;AAAA,MACjC;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAET,YAAY,QAOT;AACD,cAAM,aAAa,OAAO,aAAa,IAAI,OAAO,UAAU,KAAK;AACjE,cAAM,sBAAsB,OAAO,MAAM,GAAG,UAAU,EAAE;AACxD,aAAK,OAAO;AACZ,aAAK,SAAS,OAAO;AACrB,aAAK,aAAa,OAAO;AACzB,aAAK,OAAO,OAAO;AACnB,cAAM,SAAS,eAAe,OAAO,IAAI;AACzC,aAAK,UAAU,OAAO,WAAW,OAAO;AACxC,aAAK,QAAQ,OAAO,SAAS,OAAO;AACpC,aAAK,aAAa,OAAO,cAAc,OAAO;AAC9C,eAAO,eAAe,MAAM,kBAAiB,SAAS;AAAA,MACxD;AAAA,IACF;AAAA;AAAA;;;AC5CO,SAAS,aACd,OAC2B;AAC3B,MAAI,UAAU,QAAW;AACvB,WAAO;AAAA,EACT;AACA,QAAM,WAAW,oBAAI,IAAkB;AACvC,aAAW,KAAK,OAAO;AACrB,QAAI,CAAC,qBAAqB,IAAI,CAAC,GAAG;AAChC,YAAM,IAAI,MAAM,+BAA+B,OAAO,CAAC,CAAC,EAAE;AAAA,IAC5D;AACA,aAAS,IAAI,CAAiB;AAAA,EAChC;AACA,SAAO;AACT;AAEO,SAAS,YAAY,MAAc,MAAqD;AAC7F,MAAI,SAAS,UAAa,SAAS,MAAM;AACvC,WAAO;AAAA,EACT;AACA,MAAI,SAAS,UAAU,SAAS;AAC9B,WAAO;AAAA,EACT;AACA,SAAO,SAAS,IAAI,KAAK,IAAI;AAC/B;AAEO,SAAS,gBAAgB,MAAc,UAA6C;AACzF,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,SAAO,SAAS,QAAQ,KAAK,IAAI;AACnC;AA9FA,IAGa,WAWA,cAYA,eAOA,aAOA,cAMA,WAKA,wBAUP;AA7DN;AAAA;AAAA;AAGO,IAAM,YAAY;AAAA,MACvB,YAAY;AAAA,MACZ,eAAe;AAAA,MACf,WAAW;AAAA,MACX,eAAe;AAAA,MACf,YAAY;AAAA,MACZ,SAAS;AAAA,IACX;AAIO,IAAM,eAAe;AAAA,MAC1B,WAAW;AAAA,MACX,kBAAkB;AAAA,MAClB,YAAY;AAAA,MACZ,iBAAiB;AAAA,MACjB,SAAS;AAAA,MACT,UAAU;AAAA,MACV,eAAe;AAAA,IACjB;AAIO,IAAM,gBAA2C,oBAAI,IAAkB;AAAA,MAC5E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,cAAyC,oBAAI,IAAkB;AAAA,MAC1E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,eAA0C,oBAAI,IAAkB;AAAA,MAC3E,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACf,CAAC;AAEM,IAAM,YAAuC,oBAAI,IAAkB;AAAA,MACxE,GAAG;AAAA,MACH,GAAG;AAAA,IACL,CAAC;AAEM,IAAM,yBAAoE;AAAA,MAC/E,CAAC,aAAa,gBAAgB,GAAG,UAAU;AAAA,MAC3C,CAAC,aAAa,SAAS,GAAG,UAAU;AAAA,MACpC,CAAC,aAAa,UAAU,GAAG,UAAU;AAAA,MACrC,CAAC,aAAa,QAAQ,GAAG,UAAU;AAAA,MACnC,CAAC,aAAa,eAAe,GAAG,UAAU;AAAA,MAC1C,CAAC,aAAa,aAAa,GAAG,UAAU;AAAA,MACxC,CAAC,aAAa,OAAO,GAAG,UAAU;AAAA,IACpC;AAEA,IAAM,uBAA4C,IAAI,IAAI,OAAO,OAAO,YAAY,CAAC;AAAA;AAAA;;;ACqB9E,SAAS,uBAAuB,SAAoC;AACzE,SAAO,QACJ,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,EAC1B,KAAK,IAAI;AACd;AAEO,SAAS,yBAAyB,UAA0B;AACjE,SAAO,SAAS,KAAK;AACvB;AAEO,SAAS,yBAAyB,UAAsC;AAC7E,QAAM,QAAkB,CAAC;AACzB,aAAW,WAAW,SAAS,eAAe,CAAC,GAAG;AAChD,eAAW,OAAO,SAAS;AACzB,YAAM,QAAQ,IAAI,QAAQ,IAAI,KAAK;AACnC,UAAI,MAAM;AACR,cAAM,KAAK,IAAI;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAEO,SAAS,yBAAyB,WAAqD;AAC5F,QAAM,QAAkB,CAAC;AACzB,aAAW,OAAO,WAAW;AAC3B,UAAM,QAAQ,IAAI,eAAe,IAAI,KAAK;AAC1C,QAAI,MAAM;AACR,YAAM,KAAK,IAAI;AAAA,IACjB;AAAA,EACF;AACA,SAAO,MAAM,KAAK,IAAI;AACxB;AAnHA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AA6BA,SAAS,eAAe,SAA4C;AAClE,MAAI,OAAO,QAAQ,SAAS,UAAU;AACpC,WAAO,QAAQ,KAAK,YAAY;AAAA,EAClC;AACA,MAAI,OAAO,QAAQ,SAAS,UAAU;AACpC,WAAO,QAAQ,KAAK,YAAY;AAAA,EAClC;AACA,SAAO;AACT;AAEA,SAAS,mBAAmB,SAAuD;AACjF,MAAI,YAAY,QAAW;AACzB,WAAO;AAAA,EACT;AACA,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAASA,qBACP,UACuC;AACvC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,WAAW,IAAI,eAAe,GAAG,CAAC,GAAG;AACvC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAEA,eAAsB,uBACpB,UACA,UAAmC,CAAC,GACN;AAC9B,QAAM,EAAE,oBAAoB,IAAI,MAAM,OAAO,gCAAgC;AAE7E,QAAM,eAAe,aAAa,QAAQ,KAAK;AAG/C,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,WAAW,QAAQ,YAAY;AACrC,QAAM,SACJ,QAAQ,WACP,CAAC,SAAiB,UAAyB;AAE1C,YAAQ,KAAK,sBAAsB,OAAO,IAAI,KAAK;AAAA,EACrD;AACF,QAAM,gBAAgB,QAAQ,SAC5B,QAAQ,eAAe,SACnB,SAAS,OACT,QAAQ,aAAa,WAAW;AAEtC,QAAM,aAAa,QAAQ;AAE3B,QAAM,iBAAiB,CAAC,UAA+B;AACrD,QAAI,CAAC,YAAY;AACf;AAAA,IACF;AACA,QAAI;AACF,iBAAW,KAAK;AAAA,IAClB,SAAS,KAAK;AACZ,aAAO,6BAA6B,GAAG;AAAA,IACzC;AAAA,EACF;AAEA,QAAM,WAAW,OACf,MACA,WACA,OACA,aACkB;AAClB,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,SAAS,SAAS,MAAM;AAAA,QACrC,MAAM;AAAA,QACN,UAAU;AAAA,UACR,WAAW,EAAE,QAAQ,MAAM;AAAA,UAC3B,GAAI,QAAQ,mBAAmB,SAAY,CAAC,IAAI,EAAE,gBAAgB,QAAQ,eAAe;AAAA,QAC3F;AAAA,QACA,GAAI,kBAAkB,SAAY,EAAE,MAAM,cAAc,IAAI,CAAC;AAAA,QAC7D,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/C,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,UAAI,CAAC,UAAU;AACb,cAAM;AAAA,MACR;AACA,aAAO,kDAAkD,GAAG;AAC5D;AAAA,IACF;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAM,gBAAgB,iBAAiB,OAAO,QAAQ;AACtD,UAAM,oBAAoB;AAAA,MACxB,MAAM;AAAA,MACN,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,mBAAe;AAAA,MACb,GAAG;AAAA,MACH;AAAA,MACA,MAAM;AAAA,MACN,YAAY,kBAAkB;AAAA,IAChC,CAAC;AACD,QAAI,CAAC,WAAW,kBAAkB,SAAS;AACzC;AAAA,IACF;AAEA,UAAM,IAAI,yBAAyB;AAAA,MACjC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,MAAM;AAAA,MACN,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,gCAAgC,oBAAoB;AAAA,IAC/C,OAAO;AAAA,IACP,aAAa;AAAA,IACb,gBAAgB;AAAA,IAEzB,MAAe,qBACb,MACA,UACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,gBAAgB,GAAG;AACpD;AAAA,MACF;AACA,YAAM,UAAU;AAChB,YAAM,OAAoC,CAAC;AAC3C,iBAAW,SAAS,SAAS;AAC3B,mBAAW,KAAK,OAAO;AACrB,eAAK,KAAK,CAAC;AAAA,QACb;AAAA,MACF;AACA,YAAM,WAAWA,qBAAoB,IAAI;AACzC,UAAI,CAAC,UAAU;AACb;AAAA,MACF;AACA,YAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,gBAAgB,GAAG,KAAK;AAAA,IACnF;AAAA,IAEA,MAAe,eACb,MACA,SACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,SAAS,GAAG;AAC7C;AAAA,MACF;AACA,YAAM,OAAO,uBAAuB,OAAO;AAC3C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,SAAS,GAAG,KAAK;AAAA,IAC5E;AAAA,IAEA,MAAe,gBACb,MACA,UACA,OACe;AACf,UAAI,CAAC,eAAe,CAAC,aAAa,IAAI,aAAa,UAAU,GAAG;AAC9D;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,QAAQ;AAC9C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,WAAW,MAAM;AACvB,YAAM,SAAS,MAAM,uBAAuB,aAAa,UAAU,GAAG,OAAO,QAAQ;AAAA,IACvF;AAAA,IAEA,MAAe,qBACb,YACA,OACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,eAAe,GAAG;AACnD;AAAA,MACF;AACA,YAAM,OAAO,MAAM,KAAK;AACxB,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,eAAe,GAAG,KAAK;AAAA,IAClF;AAAA,IAEA,MAAe,aAAa,QAAiB,OAA8B;AACzE,UAAI,CAAC,aAAa,IAAI,aAAa,OAAO,GAAG;AAC3C;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,MAA2E;AACjH,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,OAAO,GAAG,KAAK;AAAA,IAC1E;AAAA,IAEA,MAAe,cACb,QACA,OACA,cACA,OACA,SACe;AACf,UAAI,CAAC,eAAe,CAAC,aAAa,IAAI,aAAa,QAAQ,GAAG;AAC5D;AAAA,MACF;AACA,YAAM,OAAO,OAAO,MAAM,EAAE,KAAK;AACjC,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,WAAW,SAAS;AAC1B,YAAM,SAAS,MAAM,uBAAuB,aAAa,QAAQ,GAAG,OAAO,QAAQ;AAAA,IACrF;AAAA,IAEA,MAAe,mBACb,WACA,OACe;AACf,UAAI,CAAC,aAAa,IAAI,aAAa,aAAa,GAAG;AACjD;AAAA,MACF;AACA,YAAM,OAAO,yBAAyB,SAAS;AAC/C,UAAI,CAAC,MAAM;AACT;AAAA,MACF;AACA,YAAM,SAAS,MAAM,uBAAuB,aAAa,aAAa,GAAG,KAAK;AAAA,IAChF;AAAA,EACF;AAEA,SAAO,IAAI,wBAAwB;AACrC;AAzRA,IAqBM;AArBN;AAAA;AAAA;AAMA;AACA;AAOA;AAOA,IAAM,aAAkC,oBAAI,IAAI,CAAC,SAAS,MAAM,CAAC;AAAA;AAAA;;;AClBjE,SAAS,kBAAkB;;;ACC3B;AACA;AAsDA,SAAS,mBAAmB,OAAwB;AAClD,MAAI,UAAU,QAAQ,UAAU,QAAW;AACzC,WAAO;AAAA,EACT;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO;AAAA,EACT;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO,OAAO,KAAK;AAAA,EACrB;AACF;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,mBAAmB,SAAiD;AAC3E,MAAI,OAAO,YAAY,UAAU;AAC/B,WAAO;AAAA,EACT;AACA,QAAM,QAAkB,CAAC;AACzB,aAAW,SAAS,SAAS;AAC3B,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,KAAK,KAAK;AAAA,IAClB,WAAW,SAAS,MAAM,SAAS,QAAQ;AACzC,YAAM,KAAK,MAAM,QAAQ,EAAE;AAAA,IAC7B;AAAA,EACF;AACA,SAAO,MAAM,KAAK,GAAG;AACvB;AAEA,SAAS,uBACP,SACuF;AACvF,MAAI,OAAO,QAAQ,YAAY,UAAU;AACvC,WAAO,CAAC;AAAA,EACV;AACA,QAAM,MAA6F,CAAC;AACpG,aAAW,QAAQ,QAAQ,SAAS;AAClC,QAAI,OAAO,SAAS,UAAU;AAC5B;AAAA,IACF;AACA,QAAI,KAAK,SAAS,eAAe;AAC/B,YAAM,OAAO,oBAAoB,KAAK,WAAW,SAAY,KAAK,SAAS,KAAK,MAAM;AACtF,UAAI,KAAK,KAAK,GAAG;AACf,YAAI,KAAK,EAAE,MAAM,UAAU,KAAK,UAAU,YAAY,KAAK,WAAW,CAAC;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,oBAAoB,OAAwB;AACnD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO,mBAAmB,KAAK;AAAA,EACjC;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,OAAO,MAAM,UAAU,UAAU;AAC7F,WAAO,MAAM;AAAA,EACf;AACA,OAAK,MAAM,SAAS,UAAU,MAAM,SAAS,iBAAiB,MAAM,UAAU,QAAW;AACvF,WAAO,mBAAmB,MAAM,KAAK;AAAA,EACvC;AACA,MAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,MAAM,KAAK,GAAG;AAC1D,WAAO,MAAM,MACV,IAAI,CAAC,SAAU,SAAS,IAAI,KAAK,KAAK,SAAS,UAAU,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,EAAG,EACxG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,EAChC,KAAK,GAAG;AAAA,EACb;AACA,SAAO,mBAAmB,KAAK;AACjC;AAEA,SAAS,oBACP,UACiC;AACjC,WAAS,IAAI,SAAS,SAAS,GAAG,KAAK,GAAG,KAAK;AAC7C,UAAM,MAAM,SAAS,CAAC;AACtB,QAAI,IAAI,KAAK,YAAY,MAAM,QAAQ;AACrC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAaO,SAAS,iBACd,UACA,UAA6B,CAAC,GACV;AACpB,QAAM,YAAY,QAAQ,aAAa;AACvC,QAAM,aAAa,QAAQ,cAAc;AACzC,QAAM,gBAAgB,QAAQ,SAC5B,QAAQ,eAAe,SACnB,SAAS,OACT,QAAQ,aAAa,WAAW;AAGtC,QAAM,kBAAkB,OACtB,MACA,MACA,UAA6B,EAAE,UAAU,QAAW,YAAY,OAAU,MACxD;AAClB,QAAI,CAAC,KAAK,KAAK,GAAG;AAChB;AAAA,IACF;AACA,UAAM,EAAE,UAAU,WAAW,IAAI;AACjC,UAAM,SAAsB,MAAM,SAAS;AAAA,MACzC;AAAA,MACA;AAAA,QACE;AAAA,QACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,QAC7C,GAAI,kBAAkB,SAAY,EAAE,MAAM,cAAc,IAAI,CAAC;AAAA,MAC/D;AAAA,IACF;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,UAAU,OAAO,eAAe,eAAe,OAAO,YAAY,WAAW;AACnF,UAAM,gBAAgB,iBAAiB,OAAO,QAAQ;AACtD,UAAM,oBAAoB;AAAA,MACxB;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,MACA;AAAA,IACF;AACA,YAAQ,aAAa;AAAA,MACnB,GAAG;AAAA,MACH;AAAA,MACA,MAAM;AAAA,MACN,YAAY,kBAAkB;AAAA,IAChC,CAAC;AACD,QAAI,CAAC,WAAW,kBAAkB,SAAS;AACzC;AAAA,IACF;AAEA,UAAM,MAAM,IAAI,yBAAyB;AAAA,MACvC,OAAO,OAAO;AAAA,MACd;AAAA,MACA,YAAY;AAAA,MACZ;AAAA,MACA,GAAI,aAAa,SAAY,EAAE,SAAS,IAAI,CAAC;AAAA,MAC7C,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;AAAA,MACjD;AAAA,IACF,CAAC;AACD,YAAQ,YAAY,GAAG;AACvB,UAAM;AAAA,EACR;AAEA,QAAM,aAAa,OAAO,WAA8D;AACtF,QAAI,OAAO,WAAW,GAAG;AACvB;AAAA,IACF;AACA,UAAM,OAAO,OAAO,OAAO,SAAS,CAAC;AACrC,UAAM,OAAO,KAAK,KAAK,YAAY;AAMnC,QAAI,SAAS,QAAQ;AACnB,iBAAW,EAAE,MAAAC,OAAM,UAAU,WAAW,KAAK,uBAAuB,IAAI,GAAG;AACzE,cAAM,gBAAgBA,OAAM,UAAU,eAAe,EAAE,UAAU,WAAW,CAAC;AAAA,MAC/E;AACA;AAAA,IACF;AAIA,UAAM,WAAW,oBAAoB,MAAM;AAC3C,QAAI,CAAC,UAAU;AACb;AAAA,IACF;AACA,UAAM,OAAO,mBAAmB,SAAS,OAAO,EAAE,KAAK;AACvD,QAAI,CAAC,MAAM;AACT;AAAA,IACF;AACA,UAAM,gBAAgB,MAAM,UAAU,UAAU;AAAA,EAClD;AAEA,QAAM,qBAAqB,OAAO,WAAgD;AAChF,QAAI,cAAc,OAAO,OAAO,SAAS,YAAY,OAAO,KAAK,SAAS,GAAG;AAC3E,YAAM,gBAAgB,OAAO,MAAM,UAAU,UAAU;AAAA,IACzD;AACA,QAAI,QAAQ,iBAAiB,MAAM,QAAQ,OAAO,SAAS,GAAG;AAC5D,iBAAW,QAAQ,OAAO,WAAW;AACnC,YAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC;AAAA,QACF;AACA,cAAM,YAAY,KAAK,SAAS,SAAY,KAAK,OAAO,KAAK;AAC7D,cAAM,OACJ,OAAO,cAAc,WAAW,YAAY,mBAAmB,SAAS;AAC1E,cAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;AACrE,cAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;AAC3E,YAAI,KAAK,KAAK,GAAG;AACf,gBAAM,gBAAgB,MAAM,UAAU,WAAW,EAAE,UAAU,WAAW,CAAC;AAAA,QAC3E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,mBAAmB;AAAA,IAEnB,MAAM,aAA6E;AAAA,MACjF;AAAA,MACA;AAAA,IACF,GAAgD;AAC9C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,SAAS,MAAM,WAAW;AAChC,YAAM,mBAAmB,MAAM;AAC/B,aAAO;AAAA,IACT;AAAA,IAEA,MAAM,WAA0F;AAAA,MAC9F;AAAA,MACA;AAAA,IACF,GAA8C;AAC5C,UAAI,WAAW;AACb,cAAM,WAAW,OAAO,UAAU,CAAC,CAAC;AAAA,MACtC;AACA,YAAM,EAAE,QAAQ,GAAG,KAAK,IAAI,MAAM,SAAS;AAC3C,UAAI,CAAC,YAAY;AACf,eAAO,EAAE,QAAQ,GAAG,KAAK;AAAA,MAC3B;AAEA,UAAI,WAAW;AACf,YAAM,cAAc,OAAO;AAAA,QACzB,IAAI,gBAAkC;AAAA,UACpC,UAAU,OAAO,YAAkB;AACjC,kBAAM,OAAO;AACb,gBAAI,QAAQ,KAAK,SAAS,cAAc;AACtC,oBAAM,QAAQ,KAAK,aAAa,KAAK,SAAS;AAC9C,0BAAY;AAAA,YACd;AACA,uBAAW,QAAQ,KAAK;AAAA,UAC1B;AAAA,UACA,MAAM,MAAM,YAA2B;AACrC,gBAAI,CAAC,SAAS,KAAK,GAAG;AACpB;AAAA,YACF;AACA,gBAAI;AACF,oBAAM,gBAAgB,UAAU,UAAU,UAAU;AAAA,YACtD,SAAS,KAAK;AACZ,kBAAI,eAAe,0BAA0B;AAC3C,2BAAW,QAAQ,EAAE,MAAM,SAAS,OAAO,IAAI,CAAC;AAChD;AAAA,cACF;AACA,oBAAM;AAAA,YACR;AAAA,UACF;AAAA,QACF,CAAC;AAAA,MACH;AACA,aAAO,EAAE,QAAQ,aAAa,GAAG,KAAK;AAAA,IACxC;AAAA,EACF;AACF;;;ADjUA;;;AEHO,IAAM,UAAU;AAAA,EACrB,QAAQ;AAAA,EACR,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,kBAAkB;AAAA,EAClB,mBAAmB;AAAA,EACnB,gBAAgB;AAAA,EAChB,uBAAuB;AAAA,EACvB,gBAAgB;AAAA,EAChB,mBAAmB;AAAA,EACnB,uBAAuB;AAAA,EACvB,oBAAoB;AACtB;AAUO,IAAM,mBAAmB;AAAA,EAC9B,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,IAAM,mBAAmB;AAAA,EAC9B,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,IAAM,uBAAuB;AAAA,EAClC,CAAC,QAAQ,MAAM,GAAG;AAAA,EAClB,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,YAAY,GACnB;AAAA,EACF,CAAC,QAAQ,gBAAgB,GACvB;AAAA,EACF,CAAC,QAAQ,iBAAiB,GACxB;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,cAAc,GACrB;AAAA,EACF,CAAC,QAAQ,iBAAiB,GACxB;AAAA,EACF,CAAC,QAAQ,qBAAqB,GAC5B;AAAA,EACF,CAAC,QAAQ,kBAAkB,GACzB;AACJ;AAEA,IAAM,sBAAsB,IAAI,IAAY,gBAAgB;AAC5D,IAAM,sBAAsB,IAAI,IAAY,gBAAgB;AAErD,SAAS,iBAAiB,OAA8C;AAC7E,SAAO,OAAO,UAAU,YAAY,oBAAoB,IAAI,KAAK;AACnE;AAEO,SAAS,iBAAiB,OAA8C;AAC7E,SAAO,OAAO,UAAU,YAAY,oBAAoB,IAAI,KAAK;AACnE;AAEO,SAAS,wBACd,OACA,YAAY,mBACI;AAChB,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO,iBAAiB,KAAK,IAAI,QAAS;AAC5C;AAEO,SAAS,wBACd,OACA,YAAY,WACI;AAChB,MAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,QAAQ;AACzD,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,KAAK,CAAC,EAAE;AAAA,EAC3E;AACA,SAAO,iBAAiB,KAAK,IAAI,QAAS;AAC5C;AAEO,SAAS,2BACd,QACA,WAC+D;AAC/D,MAAI,WAAW,UAAa,WAAW,MAAM;AAC3C,WAAO;AAAA,EACT;AACA,MAAI,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AACvD,UAAM,IAAI,MAAM,qBAAqB,SAAS,IAAI,KAAK,UAAU,MAAM,CAAC,EAAE;AAAA,EAC5E;AACA,QAAM,MAA+C,CAAC;AACtD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACjD,UAAM,gBAAgB,wBAAwB,KAAK,GAAG,SAAS,MAAM;AACrE,QAAI,OAAO,UAAU,UAAU;AAC7B,YAAM,IAAI,MAAM,qBAAqB,SAAS,cAAc,KAAK,UAAU,GAAG,CAAC,EAAE;AAAA,IACnF;AACA,QAAI,aAAa,IAAI;AAAA,EACvB;AACA,SAAO,OAAO,OAAO,GAAG;AAC1B;;;AChIA,SAAS,gBAAgB,MAAuB;AAC9C,SAAO,QAAQ,SAAU,QAAQ;AACnC;AAEA,SAAS,eAAe,MAAuB;AAC7C,SAAO,QAAQ,SAAU,QAAQ;AACnC;AAEO,SAAS,aAAa,MAAsB;AACjD,MAAI,MAAM;AACV,WAAS,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;AACpC,UAAM,OAAO,KAAK,WAAW,CAAC;AAC9B,QAAI,gBAAgB,IAAI,GAAG;AACzB,UAAI,IAAI,IAAI,KAAK,UAAU,eAAe,KAAK,WAAW,IAAI,CAAC,CAAC,GAAG;AACjE,eAAO,KAAK,CAAC;AACb,eAAO,KAAK,IAAI,CAAC;AACjB;AAAA,MACF;AACA;AAAA,IACF;AACA,QAAI,CAAC,eAAe,IAAI,GAAG;AACzB,aAAO,KAAK,CAAC;AAAA,IACf;AAAA,EACF;AACA,SAAO;AACT;;;AHJO,IAAM,cAAc;AACpB,IAAM,qBAAqB;AAClC,IAAM,sBAAsB;AAC5B,IAAM,sBAAsB;AAC5B,IAAM,uBAAuB,KAAK;AAMlC,IAAM,iBAAiB;AAkCvB,SAAS,YAAY,OAAgB,eAAwD;AAC3F,MAAI;AACJ,MAAI,UAAU,YAAY,UAAU,UAAU,UAAU,SAAS;AAC/D,mBAAe;AAAA,EACjB,WAAW,UAAU,QAAW;AAC9B,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AAKA,SAAO,iBAAiB;AAC1B;AAEA,SAAS,WAAW,YAA2D;AAC7E,SAAO,eAAe,SAAY,SAAY,aAAa,WAAW;AACxE;AAEA,SAAS,wBACP,MACA,eACa;AACb,MAAI,KAAK,eAAe,YAAY,KAAK,eAAe,aAAa;AACnE,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AACA,QAAM,SAUF;AAAA,IACF,YAAY,KAAK;AAAA,IACjB,OAAO,OAAO,KAAK,KAAK;AAAA,IACxB,WAAW,OAAO,KAAK,SAAS;AAAA,EAClC;AACA,QAAM,OAAO,YAAY,KAAK,MAAM,aAAa;AACjD,MAAI,SAAS,QAAW;AACtB,WAAO,OAAO;AAAA,EAChB;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,WAAO,iBAAiB,wBAAwB,KAAK,eAAe;AAAA,EACtE;AACA,MAAI,KAAK,mBAAmB,QAAW;AACrC,UAAM,gBAAgB,2BAA2B,KAAK,gBAAgB,gBAAgB;AACtF,QAAI,kBAAkB,QAAW;AAC/B,aAAO,gBAAgB;AAAA,IACzB;AAAA,EACF;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,UAAM,iBAAiB,2BAA2B,KAAK,iBAAiB,iBAAiB;AACzF,QAAI,mBAAmB,QAAW;AAChC,aAAO,iBAAiB;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,KAAK,oBAAoB,QAAW;AACtC,UAAM,iBAAiB,2BAA2B,KAAK,iBAAiB,iBAAiB;AACzF,QAAI,mBAAmB,QAAW;AAChC,aAAO,iBAAiB;AAAA,IAC1B;AAAA,EACF;AACA,MAAI,KAAK,eAAe,QAAW;AACjC,WAAO,aAAa,+BAA+B,KAAK,UAAU;AAAA,EACpE;AACA,SAAO,OAAO,OAAO,MAAM;AAC7B;AAEA,SAASC,UAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,gBACP,UACA,MAKwB;AACxB,QAAM,UAAmC,EAAE,GAAI,YAAY,CAAC,EAAG;AAC/D,QAAM,WAAW,QAAQ;AACzB,MAAI,aAAa,UAAa,CAACA,UAAS,QAAQ,GAAG;AACjD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,UAAQ,WAAW;AAAA,IACjB,GAAIA,UAAS,QAAQ,IAAI,WAAW,CAAC;AAAA,IACrC,cAAc;AAAA,IACd,aAAa;AAAA,IACb,YAAY,KAAK;AAAA,IACjB,GAAI,KAAK,eAAe,SAAY,CAAC,IAAI,EAAE,aAAa,KAAK,WAAW;AAAA,IACxE,GAAI,KAAK,eAAe,SACpB,CAAC,IACD,EAAE,YAAY,wBAAwB,KAAK,UAAU,EAAE;AAAA,EAC7D;AACA,SAAO;AACT;AAEA,SAAS,wBAAwB,SAAqD;AACpF,SAAO;AAAA,IACL,GAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,IAC9D,GAAI,QAAQ,aAAa,SACrB,CAAC,IACD;AAAA,MACE,UAAU;AAAA,QACR,MAAM,QAAQ,SAAS;AAAA,QACvB,GAAI,QAAQ,SAAS,OAAO,SAAY,CAAC,IAAI,EAAE,IAAI,QAAQ,SAAS,GAAG;AAAA,QACvE,GAAI,QAAQ,SAAS,aAAa,SAC9B,CAAC,IACD,EAAE,WAAW,QAAQ,SAAS,SAAS;AAAA,MAC7C;AAAA,IACF;AAAA,EACN;AACF;AAEA,SAAS,+BAA+B,OAAoC;AAC1E,MAAI,CAACA,UAAS,KAAK,GAAG;AACpB,UAAM,IAAI,MAAM,iDAAiD;AAAA,EACnE;AACA,MAAI,MAAM,WAAW,WAAW,MAAM,WAAW,SAAS;AACxD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,MAAI,OAAO,MAAM,mBAAmB,YAAY,MAAM,eAAe,WAAW,GAAG;AACjF,UAAM,IAAI,MAAM,yEAAyE;AAAA,EAC3F;AACA,MAAI,MAAM,YAAY,UAAa,OAAO,MAAM,YAAY,UAAU;AACpE,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,SAAO,OAAO,OAAO;AAAA,IACnB,QAAQ,MAAM;AAAA,IACd,GAAI,MAAM,YAAY,SAAY,CAAC,IAAI,EAAE,QAAQ,MAAM,QAAQ;AAAA,IAC/D,eAAe,MAAM;AAAA,EACvB,CAAC;AACH;AAEA,eAAe,oBAAoB,UAAqC;AACtE,MAAI,CAAC,SAAS,MAAM;AAClB,WAAO,SAAS,KAAK,EAAE,KAAK,CAACC,UAASA,MAAK,MAAM,GAAG,oBAAoB,CAAC,EAAE,MAAM,MAAM,EAAE;AAAA,EAC3F;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,SAAuB,CAAC;AAC9B,MAAI,YAAY;AAChB,MAAI;AACF,WAAO,YAAY,GAAG;AACpB,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,MAAM;AACR;AAAA,MACF;AACA,UAAI,CAAC,OAAO;AACV;AAAA,MACF;AACA,YAAM,QAAQ,MAAM,aAAa,YAAY,MAAM,MAAM,GAAG,SAAS,IAAI;AACzE,aAAO,KAAK,KAAK;AACjB,mBAAa,MAAM;AACnB,UAAI,MAAM,aAAa,MAAM,YAAY;AACvC;AAAA,MACF;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT,UAAE;AACA,UAAM,OAAO,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,EAC7C;AAEA,QAAM,QAAQ,OAAO,OAAO,CAAC,KAAK,UAAU,MAAM,MAAM,YAAY,CAAC;AACrE,QAAM,OAAO,IAAI,WAAW,KAAK;AACjC,MAAI,SAAS;AACb,aAAW,SAAS,QAAQ;AAC1B,SAAK,IAAI,OAAO,MAAM;AACtB,cAAU,MAAM;AAAA,EAClB;AACA,SAAO,IAAI,YAAY,EAAE,OAAO,IAAI;AACtC;AAGA,eAAe,6BAA6B,UAAmC;AAC7E,MAAI;AACF,QAAI,SAAS,MAAM;AACjB,UAAI,CAAC,SAAS,KAAK,QAAQ;AACzB,cAAM,SAAS,KAAK,OAAO;AAAA,MAC7B;AACA;AAAA,IACF;AACA,UAAM,SAAS,KAAK;AAAA,EACtB,QAAQ;AAAA,EAER;AACF;AAGA,eAAe,oBAAoB,UAAoB,QAAoC;AACzF,SAAO,eAAe;AACtB,MAAI;AACJ,QAAM,UAAU,IAAI,QAAe,CAAC,UAAU,WAAW;AACvD,cAAU,MAAM,OAAO,OAAO,MAAM;AACpC,WAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAC1D,CAAC;AACD,MAAI;AACF,UAAM,QAAQ,KAAK,CAAC,6BAA6B,QAAQ,GAAG,OAAO,CAAC;AAAA,EACtE,UAAE;AACA,WAAO,oBAAoB,SAAS,OAAO;AAAA,EAC7C;AACF;AAEA,SAAS,iBAAiB,OAAyB;AACjD,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,MAA6B;AAC3C,SAAO,SAAS,gBAAgB,SAAS;AAC3C;AAQA,eAAe,oBAAuB,MAAwB,QAAiC;AAC7F,MAAI;AACF,WAAO,MAAM,KAAK;AAAA,EACpB,SAAS,OAAO;AACd,QAAI,OAAO,WAAW,iBAAiB,KAAK,GAAG;AAC7C,YAAM,OAAO;AAAA,IACf;AACA,UAAM;AAAA,EACR;AACF;AAYA,SAAS,oBAAoB,WAAmB,cAA2C;AACzF,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM;AAC7B,eAAW;AAAA,MACT,IAAI,aAAa,4CAA4C,cAAc;AAAA,IAC7E;AAAA,EACF,GAAG,SAAS;AACZ,QAAM,gBAAgB,MAAY;AAGhC,iBAAa,KAAK;AAClB,eAAW,MAAM,cAAc,MAAM;AAAA,EACvC;AACA,gBAAc,iBAAiB,SAAS,eAAe,EAAE,MAAM,KAAK,CAAC;AACrE,SAAO;AAAA,IACL,QAAQ,WAAW;AAAA,IACnB,SAAS,MAAM;AACb,mBAAa,KAAK;AAClB,oBAAc,oBAAoB,SAAS,aAAa;AAAA,IAC1D;AAAA,EACF;AACF;AAEA,SAAS,MAAM,IAAY,QAAqC;AAC9D,SAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC5C,QAAI,QAAQ,SAAS;AACnB,aAAO,OAAO,MAAM;AACpB;AAAA,IACF;AACA,UAAM,UAAU,MAAY;AAC1B,mBAAa,KAAK;AAClB,aAAO,QAAQ,MAAM;AAAA,IACvB;AACA,UAAM,QAAQ,WAAW,MAAM;AAC7B,cAAQ,oBAAoB,SAAS,OAAO;AAC5C,cAAQ;AAAA,IACV,GAAG,EAAE;AACL,YAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,KAAK,CAAC;AAAA,EAC3D,CAAC;AACH;AAWO,IAAM,WAAN,MAAe;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEQ;AAAA,EAEjB,YAAY,SAA0B;AACpC,QAAI,CAAC,QAAQ,QAAQ;AACnB,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AACA,QAAI,CAAC,QAAQ,QAAQ;AACnB,YAAM,IAAI,MAAM,8BAA8B;AAAA,IAChD;AACA,SAAK,SAAS,QAAQ;AACtB,SAAK,SAAS,QAAQ;AACtB,SAAK,YAAY,QAAQ,aAAa;AACtC,QAAI,OAAO,KAAK,cAAc,YAAY,CAAC,OAAO,SAAS,KAAK,SAAS,KAAK,KAAK,YAAY,GAAG;AAChG,YAAM,IAAI,MAAM,iEAAiE,KAAK,SAAS,EAAE;AAAA,IACnG;AACA,QAAI,KAAK,YAAY,gBAAgB;AACnC,YAAM,IAAI;AAAA,QACR,uCAAuC,cAAc,YAAY,KAAK,SAAS;AAAA,MACjF;AAAA,IACF;AACA,SAAK,OAAO,QAAQ,QAAQ,WAAW,QAAQ,UAAU;AACzD,SAAK,aAAa,KAAK,SAAS;AAChC,SAAK,UAAU,OAAO,OAAO;AAAA,MAC3B,aAAa,KAAK;AAAA,MAClB,gBAAgB;AAAA,IAClB,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,SAAS,MAAc,UAA2B,CAAC,GAAyB;AAChF,UAAM,YAAY,QAAQ,aAAa,WAAW;AAClD,WAAO,KAAK,eAAe,aAAa,IAAI,GAAG,SAAS,EAAE,UAAU,CAAC;AAAA,EACvE;AAAA,EAEA,MAAM,cACJ,OACA,UAAgC,CAAC,GACT;AACxB,QAAI,MAAM,WAAW,GAAG;AACtB,YAAM,IAAI,MAAM,mCAAmC;AAAA,IACrD;AACA,QAAI,QAAQ,UAAU,UAAa,QAAQ,MAAM,WAAW,MAAM,QAAQ;AACxE,YAAM,IAAI;AAAA,QACR,0BAA0B,QAAQ,MAAM,MAAM,gCAAgC,MAAM,MAAM;AAAA,MAC5F;AAAA,IACF;AACA,QAAI,QAAQ,cAAc,UAAa,QAAQ,UAAU,WAAW,MAAM,QAAQ;AAChF,YAAM,IAAI;AAAA,QACR,8BAA8B,QAAQ,UAAU,MAAM,gCAAgC,MAAM,MAAM;AAAA,MACpG;AAAA,IACF;AACA,QAAI,QAAQ,aAAa,UAAa,QAAQ,SAAS,WAAW,MAAM,QAAQ;AAC9E,YAAM,IAAI;AAAA,QACR,6BAA6B,QAAQ,SAAS,MAAM,gCAAgC,MAAM,MAAM;AAAA,MAClG;AAAA,IACF;AACA,QAAI,QAAQ,eAAe,UAAa,QAAQ,WAAW,WAAW,MAAM,QAAQ;AAClF,YAAM,IAAI;AAAA,QACR,+BAA+B,QAAQ,WAAW,MAAM,gCAAgC,MAAM,MAAM;AAAA,MACtG;AAAA,IACF;AAEA,UAAM,YAAY,QAAQ,aAAa,WAAW;AAClD,UAAM,UAAgC;AAAA,MACpC,OAAO,MAAM,IAAI,CAAC,SAAS,aAAa,IAAI,CAAC;AAAA,IAC/C;AACA,UAAM,gBAAgB,QAAQ,QAAQ,KAAK;AAC3C,QAAI,kBAAkB,QAAW;AAC/B,cAAQ,OAAO;AAAA,IACjB;AACA,QAAI,QAAQ,SAAS,QAAQ,MAAM,SAAS,GAAG;AAC7C,cAAQ,QAAQ,QAAQ,MAAM,IAAI,CAAC,MAAM,OAAO,CAAC,CAAC;AAAA,IACpD;AACA,QAAI,QAAQ,aAAa,QAAQ,UAAU,SAAS,GAAG;AACrD,cAAQ,aAAa,QAAQ,UAAU,IAAI,CAAC,MAAO,MAAM,SAAY,OAAO,CAAE;AAAA,IAChF;AACA,YAAQ,WAAW,MAAM;AAAA,MAAI,CAAC,GAAG,UAC/B,gBAAgB,QAAQ,WAAW,KAAK,GAAG;AAAA,QACzC;AAAA,QACA,YAAY;AAAA,QACZ,GAAI,QAAQ,aAAa,KAAK,MAAM,SAChC,CAAC,IACD,EAAE,YAAY,QAAQ,WAAW,KAAK,EAAE;AAAA,MAC9C,CAAC;AAAA,IACH;AACA,UAAM,OAAO,MAAM,KAAK,cAAqC,SAAS,QAAQ,MAAM;AACpF,QAAI,CAAC,MAAM,QAAQ,KAAK,WAAW,GAAG;AACpC,YAAM,IAAI,MAAM,iDAAiD;AAAA,IACnE;AACA,QAAI,KAAK,YAAY,WAAW,QAAQ,MAAM,QAAQ;AACpD,YAAM,IAAI;AAAA,QACR,yCAAyC,KAAK,YAAY,MAAM,0CAA0C,QAAQ,MAAM,MAAM;AAAA,MAChI;AAAA,IACF;AACA,WAAO,KAAK,YAAY,IAAI,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAAA,EAC9E;AAAA,EAEA,mBACE,UAAmC,CAAC,GACjB;AACnB,WAAO,oEAAkC;AAAA,MAAK,CAAC,MAC7C,EAAE,uBAAuB,MAAM,OAAO;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,aAAa,UAA6B,CAAC,GAAuB;AAChE,WAAO,iBAAiB,MAAM,OAAO;AAAA,EACvC;AAAA,EAEA,MAAc,cACZ,SACA,cACA,aAAqB,qBACT;AAGZ,kBAAc,eAAe;AAG7B,UAAM,OAAO,KAAK,UAAU,OAAO;AACnC,aAAS,UAAU,GAAG,WAAW,YAAY,WAAW;AACtD,oBAAc,eAAe;AAC7B,YAAM,gBAAgB,oBAAoB,KAAK,WAAW,YAAY;AACtE,UAAI;AACF,cAAM,WAAW,MAAM,MAAM,KAAK,QAAQ;AAAA,UACxC,QAAQ;AAAA,UACR,SAAS,KAAK;AAAA,UACd;AAAA,UACA,UAAU;AAAA,UACV,QAAQ,cAAc;AAAA,QACxB,CAAC;AACD,YAAI,SAAS,WAAW,OAAO,YAAY,YAAY;AACrD,cAAI,CAAC,SAAS,IAAI;AAChB,kBAAM,YAAY,MAAM,oBAAoB,QAAQ;AAGpD,0BAAc,OAAO,eAAe;AACpC,kBAAM,IAAI,iBAAiB;AAAA,cACzB,QAAQ,SAAS;AAAA,cACjB,YAAY,SAAS;AAAA,cACrB,MAAM;AAAA,YACR,CAAC;AAAA,UACH;AACA,iBAAO,MAAM;AAAA,YACX,MAAM,SAAS,KAAK;AAAA,YACpB,cAAc;AAAA,UAChB;AAAA,QACF;AACA,cAAM,oBAAoB,UAAU,cAAc,MAAM;AAAA,MAC1D,UAAE;AACA,sBAAc,QAAQ;AAAA,MACxB;AACA,YAAM,MAAM,KAAK,IAAI,KAAK,SAAS,mBAAmB,IAAI,KAAM,YAAY;AAAA,IAC9E;AACA,UAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAAA,EAEA,MAAc,eACZ,MACA,SACA,cAGsB;AACtB,UAAM,UAAiC,EAAE,KAAK;AAC9C,UAAM,gBAAgB,QAAQ,QAAQ,KAAK;AAC3C,QAAI,kBAAkB,QAAW;AAC/B,cAAQ,OAAO;AAAA,IACjB;AACA,QAAI,QAAQ,SAAS,QAAW;AAC9B,cAAQ,OAAO,QAAQ;AAAA,IACzB;AACA,QAAI,QAAQ,aAAa,QAAW;AAClC,cAAQ,YAAY,QAAQ;AAAA,IAC9B;AACA,YAAQ,WAAW,gBAAgB,QAAQ,UAAU;AAAA,MACnD,GAAG;AAAA,MACH,GAAI,QAAQ,eAAe,SAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,WAAW;AAAA,IAC/E,CAAC;AACD,UAAM,OAAO,MAAM,KAAK,cAAsC,SAAS,QAAQ,MAAM;AACrF,WAAO,wBAAwB,MAAM,aAAa;AAAA,EACpD;AACF;;;AI7hBA;AAKA;","names":["findLastUserMessage","text","isRecord","body"]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@silmaril-security/sdk",
-  "version": "0.7.1",
-  "description": "TypeScript SDK for Silmaril Firewall — prompt injection and jailbreak detection",
+  "version": "0.7.3",
+  "description": "TypeScript SDK for Silmaril Firewall \u2014 prompt injection and jailbreak detection",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Silmaril Security Inc.",
   "type": "module",