@vinaes/succ 1.4.0 → 1.5.37

package/dist/lib/injection-detector.js

@@ -0,0 +1,586 @@
+/**
+ * Prompt Injection Detection Module — 3-tier deterministic scanner
+ *
+ * Tier 1: Structural patterns (language-independent, instant)
+ *   - Delimiter/token injection (<|im_start|>, [INST], <system>, etc.)
+ *   - Hidden content (zero-width chars, RTL overrides, combining chars)
+ *   - Encoded injection (base64, hex)
+ *   - HTML/Markdown structural injection
+ *
+ * Tier 2: Multilingual semantic patterns (regex, in daemon)
+ *   - English injection phrases
+ *   - Chinese, Russian, Arabic, Spanish, Japanese, Korean patterns
+ *
+ * Tier 2.C: Embedding-based semantic detection (cosine similarity vs prototype bank)
+ *   - ~50 canonical injection phrases in 10+ languages
+ *   - Catches paraphrases, novel phrasings, and mixed-language attacks
+ *
+ * Tier 3: LLM-based detection (guardrails.ts)
+ */
+const DELIMITER_PATTERNS = [
+    // Chat ML delimiters
+    { pattern: /<\|im_start\|>/i, description: 'ChatML im_start delimiter', severity: 'definite' },
+    { pattern: /<\|im_end\|>/i, description: 'ChatML im_end delimiter', severity: 'definite' },
+    // Llama/Mistral delimiters
+    { pattern: /\[INST\]/i, description: 'Llama [INST] delimiter', severity: 'definite' },
+    { pattern: /\[\/INST\]/i, description: 'Llama [/INST] delimiter', severity: 'definite' },
+    { pattern: /<<SYS>>/i, description: 'Llama <<SYS>> delimiter', severity: 'definite' },
+    // Match </s> only when NOT preceded by <s> (HTML strikethrough) — avoid false positive on <s>text</s>
+    { pattern: /(?<!<s[^>]*>.*)<\/s>/i, description: 'End-of-sequence token', severity: 'probable' },
+    // Generic LLM tokens
+    { pattern: /<\|endoftext\|>/i, description: 'GPT endoftext token', severity: 'definite' },
+    { pattern: /<\|system\|>/i, description: 'System role token', severity: 'definite' },
+    // XML role injection (closing then opening)
+    {
+        pattern: /<\/(?:hook-rule|file-context|soul|previous-session|session|compact-fallback|security-warning|commit-format|pre-commit-review|succ-agents)>/i,
+        description: 'Closing succ XML wrapper tag',
+        severity: 'definite',
+    },
+    {
+        pattern: /<\/?system>/i,
+        description: 'XML system tag injection',
+        severity: 'definite',
+    },
+    {
+        pattern: /<\/?assistant>/i,
+        description: 'XML assistant tag injection',
+        severity: 'definite',
+    },
+    {
+        pattern: /<\/?user>/i,
+        description: 'XML user tag injection',
+        severity: 'probable',
+    },
+    // Bracket role injection
+    { pattern: /\[system\]/i, description: 'Bracketed system role', severity: 'probable' },
+    { pattern: /\[assistant\]/i, description: 'Bracketed assistant role', severity: 'probable' },
+];
+const HIDDEN_CONTENT_PATTERNS = [
+    // Zero-width characters (bulk presence)
+    {
+        // eslint-disable-next-line no-misleading-character-class -- Matching individual ZWJ codepoints is intentional for security
+        pattern: /[\u200B\u200C\u200D\uFEFF\u00AD\u2060]{3,}/,
+        description: 'Cluster of zero-width/invisible characters',
+        severity: 'suspicious',
+    },
+    // RTL/LTR override abuse
+    {
+        pattern: /[\u202A-\u202E\u2066-\u2069]{2,}/,
+        description: 'Multiple RTL/LTR override characters',
+        severity: 'suspicious',
+    },
+    // HTML entities used to encode injection
+    {
+        pattern: /&(?:lt|gt|amp|quot);.*(?:system|assistant|ignore|instruction)/i,
+        description: 'HTML-entity encoded injection attempt',
+        severity: 'probable',
+    },
+    // HTML hidden text
+    {
+        pattern: /<(?:span|div|p)\s+[^>]*(?:display\s*:\s*none|visibility\s*:\s*hidden|hidden)[^>]*>/i,
+        description: 'Hidden HTML element',
+        severity: 'probable',
+    },
+    // HTML comment injection
+    {
+        pattern: /<!--\s*(?:AI|AGENT|LLM|ASSISTANT|IGNORE|INSTRUCTION|SYSTEM|OVERRIDE)/i,
+        description: 'HTML comment targeting AI agent',
+        severity: 'probable',
+    },
+];
+const ENCODED_INJECTION = [
+    // Base64 blocks that look like encoded instructions (at least 20 chars of base64)
+    {
+        pattern: /(?:base64|atob|decode)\s*[:(]\s*['"]?[A-Za-z0-9+/]{20,}={0,2}/i,
+        description: 'Explicitly decoded base64 content',
+        severity: 'probable',
+    },
+];
+const ALL_TIER1_PATTERNS = [
+    ...DELIMITER_PATTERNS,
+    ...HIDDEN_CONTENT_PATTERNS,
+    ...ENCODED_INJECTION,
+];
+const SEMANTIC_PATTERNS = [
+    // English
+    {
+        pattern: /ignore\s+(?:all\s+)?(?:previous|prior|above|earlier)\s+(?:instructions|rules|prompts|directives)/i,
+        description: 'Instruction override attempt',
+        language: 'en',
+        severity: 'definite',
+    },
+    {
+        pattern: /disregard\s+(?:all\s+)?(?:previous|prior|above|earlier)/i,
+        description: 'Disregard previous instructions',
+        language: 'en',
+        severity: 'definite',
+    },
+    {
+        pattern: /forget\s+(?:everything|all|previous|your\s+(?:rules|instructions|programming))/i,
+        description: 'Forget instructions command',
+        language: 'en',
+        severity: 'definite',
+    },
+    {
+        pattern: /you\s+are\s+now\s+(?:a\s+)?(?:different|new|unrestricted|unfiltered)/i,
+        description: 'Identity override attempt',
+        language: 'en',
+        severity: 'definite',
+    },
+    {
+        pattern: /from\s+now\s+on\s+(?:you|your)\s/i,
+        description: 'Behavioral override attempt',
+        language: 'en',
+        severity: 'probable',
+    },
+    {
+        pattern: /act\s+as\s+(?:a|an|if)\s/i,
+        description: 'Role-play instruction',
+        language: 'en',
+        severity: 'probable',
+    },
+    {
+        pattern: /pretend\s+(?:to\s+be|you\s+are|that)\s/i,
+        description: 'Pretend instruction',
+        language: 'en',
+        severity: 'probable',
+    },
+    {
+        pattern: /new\s+(?:instructions|rules|system\s+prompt)/i,
+        description: 'New instruction injection',
+        language: 'en',
+        severity: 'definite',
+    },
+    {
+        pattern: /system\s+prompt\s*[:=]/i,
+        description: 'System prompt assignment',
+        language: 'en',
+        severity: 'definite',
+    },
+    {
+        pattern: /override\s+(?:previous|all|system|safety)/i,
+        description: 'Override command',
+        language: 'en',
+        severity: 'definite',
+    },
+    {
+        pattern: /\bDAN\b.*\bmode\b/i,
+        description: 'DAN jailbreak attempt',
+        language: 'en',
+        severity: 'definite',
+    },
+    {
+        pattern: /developer\s+mode\s+(?:enabled|activated|on)/i,
+        description: 'Developer mode jailbreak',
+        language: 'en',
+        severity: 'definite',
+    },
+    {
+        pattern: /bypass\s+(?:safety|filter|guard|restriction|content\s+policy)/i,
+        description: 'Safety bypass attempt',
+        language: 'en',
+        severity: 'definite',
+    },
+    {
+        pattern: /in\s+your\s+next\s+response/i,
+        description: 'Response manipulation attempt',
+        language: 'en',
+        severity: 'probable',
+    },
+    {
+        pattern: /(?:do\s+not|don'?t)\s+(?:mention|reveal|disclose|tell|say)\s+(?:this|that|the|any)/i,
+        description: 'Concealment instruction',
+        language: 'en',
+        severity: 'probable',
+    },
+    // Chinese (中文)
+    {
+        pattern: /忽略.{0,5}(?:之前|以上|先前|前面).{0,5}(?:指令|规则|指示|提示|命令)/,
+        description: 'Ignore previous instructions (Chinese)',
+        language: 'zh',
+        severity: 'definite',
+    },
+    {
+        pattern: /你现在是/,
+        description: 'You are now (Chinese identity override)',
+        language: 'zh',
+        severity: 'probable',
+    },
+    {
+        pattern: /从现在开始你/,
+        description: 'From now on you (Chinese behavioral override)',
+        language: 'zh',
+        severity: 'probable',
+    },
+    {
+        pattern: /新的指令/,
+        description: 'New instructions (Chinese)',
+        language: 'zh',
+        severity: 'definite',
+    },
+    {
+        pattern: /系统提示/,
+        description: 'System prompt (Chinese)',
+        language: 'zh',
+        severity: 'probable',
+    },
+    // Russian (Русский)
+    {
+        pattern: /игнорир\w*.{0,10}(?:предыдущ|прошл|выше|ранее).{0,10}(?:инструкц|правил|указан|команд)/i,
+        description: 'Ignore previous instructions (Russian)',
+        language: 'ru',
+        severity: 'definite',
+    },
+    {
+        pattern: /ты\s+теперь\s/i,
+        description: 'You are now (Russian identity override)',
+        language: 'ru',
+        severity: 'probable',
+    },
+    {
+        pattern: /новые\s+инструкции/i,
+        description: 'New instructions (Russian)',
+        language: 'ru',
+        severity: 'definite',
+    },
+    {
+        pattern: /системн\w+\s+промпт/i,
+        description: 'System prompt (Russian)',
+        language: 'ru',
+        severity: 'probable',
+    },
+    {
+        pattern: /забудь\s+(?:все|всё|предыдущ|прошл)/i,
+        description: 'Forget everything (Russian)',
+        language: 'ru',
+        severity: 'definite',
+    },
+    // Arabic (العربية)
+    {
+        pattern: /تجاهل.{0,10}(?:التعليمات|الأوامر|القواعد)\s*(?:السابقة|أعلاه)/,
+        description: 'Ignore previous instructions (Arabic)',
+        language: 'ar',
+        severity: 'definite',
+    },
+    {
+        pattern: /أنت\s+الآن/,
+        description: 'You are now (Arabic identity override)',
+        language: 'ar',
+        severity: 'probable',
+    },
+    {
+        pattern: /تعليمات\s+جديدة/,
+        description: 'New instructions (Arabic)',
+        language: 'ar',
+        severity: 'definite',
+    },
+    // Spanish (Español)
+    {
+        pattern: /ignora\w*\s+(?:las?\s+)?(?:instrucciones|reglas|indicaciones)\s+(?:anteriores|previas)/i,
+        description: 'Ignore previous instructions (Spanish)',
+        language: 'es',
+        severity: 'definite',
+    },
+    {
+        pattern: /ahora\s+eres/i,
+        description: 'Now you are (Spanish identity override)',
+        language: 'es',
+        severity: 'probable',
+    },
+    {
+        pattern: /nuevas\s+instrucciones/i,
+        description: 'New instructions (Spanish)',
+        language: 'es',
+        severity: 'definite',
+    },
+    // Japanese (日本語)
+    {
+        pattern: /以前の(?:指示|ルール|命令)を(?:無視|忘れ)/,
+        description: 'Ignore previous instructions (Japanese)',
+        language: 'ja',
+        severity: 'definite',
+    },
+    {
+        pattern: /あなたは今から/,
+        description: 'From now on you (Japanese behavioral override)',
+        language: 'ja',
+        severity: 'probable',
+    },
+    {
+        pattern: /新しい指示/,
+        description: 'New instructions (Japanese)',
+        language: 'ja',
+        severity: 'definite',
+    },
+    {
+        pattern: /システムプロンプト/,
+        description: 'System prompt (Japanese)',
+        language: 'ja',
+        severity: 'probable',
+    },
+    // Korean (한국어)
+    {
+        pattern: /이전.{0,5}(?:지시|규칙|명령).{0,5}(?:무시|잊어)/,
+        description: 'Ignore previous instructions (Korean)',
+        language: 'ko',
+        severity: 'definite',
+    },
+    {
+        pattern: /너는\s*이제/,
+        description: 'You are now (Korean identity override)',
+        language: 'ko',
+        severity: 'probable',
+    },
+    {
+        pattern: /새로운\s*지시/,
+        description: 'New instructions (Korean)',
+        language: 'ko',
+        severity: 'definite',
+    },
+    {
+        pattern: /시스템\s*프롬프트/,
+        description: 'System prompt (Korean)',
+        language: 'ko',
+        severity: 'probable',
+    },
+    // German (Deutsch)
+    {
+        pattern: /ignorier\w*\s+(?:alle\s+)?(?:vorherigen|früheren|obigen)\s+(?:Anweisungen|Regeln|Instruktionen)/i,
+        description: 'Ignore previous instructions (German)',
+        language: 'de',
+        severity: 'definite',
+    },
+    // French (Français)
+    {
+        pattern: /ignor\w*\s+(?:les?\s+)?(?:instructions|règles|directives)\s+(?:précédentes|antérieures)/i,
+        description: 'Ignore previous instructions (French)',
+        language: 'fr',
+        severity: 'definite',
+    },
+    // Portuguese (Português)
+    {
+        pattern: /ignor\w*\s+(?:as?\s+)?(?:instruções|regras|diretivas)\s+(?:anteriores|prévias)/i,
+        description: 'Ignore previous instructions (Portuguese)',
+        language: 'pt',
+        severity: 'definite',
+    },
+];
+// ─── Detection Functions ─────────────────────────────────────────────
+const SEVERITY_RANK = {
+    definite: 3,
+    probable: 2,
+    suspicious: 1,
+};
+function pickStronger(current, candidate) {
+    if (!current)
+        return candidate;
+    return SEVERITY_RANK[candidate.severity] > SEVERITY_RANK[current.severity] ? candidate : current;
+}
+/**
+ * Tier 1: Structural injection detection (language-independent, instant).
+ * Safe for .cjs hooks — no imports needed.
+ * Scans ALL patterns and returns the highest-severity match.
+ */
+export function detectTier1(text, _depth = 0) {
+    let best = null;
+    for (const { pattern, description, severity } of ALL_TIER1_PATTERNS) {
+        if (pattern.test(text)) {
+            best = pickStronger(best, {
+                detected: true,
+                severity,
+                tier: 1,
+                pattern: pattern.source,
+                description,
+            });
+            if (best.severity === 'definite')
+                return best; // Can't get higher
+        }
+    }
+    // Check for high density of combining characters (homoglyph attack)
+    const combiningCount = (text.match(/[\u0300-\u036F\u0483-\u0489]/g) || []).length;
+    if (combiningCount > 5 && combiningCount / text.length > 0.15) {
+        best = pickStronger(best, {
+            detected: true,
+            severity: 'suspicious',
+            tier: 1,
+            pattern: 'combining_char_density',
+            description: `High combining character density (${combiningCount} in ${text.length} chars) — possible homoglyph obfuscation`,
+        });
+    }
+    // Check for base64-encoded injection (decode and re-scan, max 2 levels deep)
+    if (_depth < 2) {
+        const b64Regex = /[A-Za-z0-9+/]{40,}={0,2}/g;
+        for (const b64Match of text.matchAll(b64Regex)) {
+            try {
+                const decoded = Buffer.from(b64Match[0], 'base64').toString('utf8');
+                // Only recurse if decoded text looks like actual text (mostly printable).
+                // Allow non-ASCII printable chars (multilingual text) — reject only control chars.
+                // biome-ignore lint/suspicious/noControlCharactersInRegex: Intentional — detecting binary content in decoded base64
+                // eslint-disable-next-line no-control-regex -- Intentional: detecting binary/control chars in decoded base64
+                const controlChars = (decoded.match(/[\x00-\x08\x0E-\x1F\x7F]/g) || []).length;
+                const controlRatio = decoded.length > 0 ? controlChars / decoded.length : 1;
+                if (controlRatio < 0.2) {
+                    const innerResult = detectTier1(decoded, _depth + 1);
+                    if (innerResult) {
+                        best = pickStronger(best, {
+                            ...innerResult,
+                            description: `Base64-encoded: ${innerResult.description}`,
+                        });
+                    }
+                    // Also run Tier 2 on decoded content (catches semantic injections in base64)
+                    const semanticResult = detectTier2(decoded);
+                    if (semanticResult) {
+                        best = pickStronger(best, {
+                            ...semanticResult,
+                            description: `Base64-encoded: ${semanticResult.description}`,
+                        });
+                    }
+                }
+            }
+            catch {
+                // Not valid base64 — skip
+            }
+            // Short-circuit if we already have definite severity
+            if (best?.severity === 'definite')
+                break;
+        }
+    }
+    return best;
+}
+/**
+ * Tier 2: Multilingual semantic injection detection (regex).
+ * Runs in daemon context where more compute is acceptable.
+ * Scans ALL patterns and returns the highest-severity match.
+ */
+export function detectTier2(text) {
+    let best = null;
+    for (const { pattern, description, language, severity } of SEMANTIC_PATTERNS) {
+        if (pattern.test(text)) {
+            best = pickStronger(best, {
+                detected: true,
+                severity,
+                tier: 2,
+                pattern: pattern.source,
+                description: `[${language}] ${description}`,
+            });
+            if (best.severity === 'definite')
+                return best; // Can't get higher
+        }
+    }
+    return best;
+}
+/**
+ * Run synchronous tiers of injection detection (Tier 1 + Tier 2 regex).
+ * Returns the highest-severity match across all tiers, or null if clean.
+ * Use detectInjectionAsync() for full detection including embedding-based semantic.
+ */
+export function detectInjection(text, options = {}) {
+    const { tier1 = true, tier2 = true } = options;
+    let best = null;
+    // Tier 1 first (instant, structural)
+    if (tier1) {
+        const result = detectTier1(text);
+        if (result) {
+            if (result.severity === 'definite')
+                return result;
+            best = result;
+        }
+    }
+    // Tier 2 (multilingual regex) — may find higher severity than Tier 1
+    if (tier2) {
+        const result = detectTier2(text);
+        if (result) {
+            best = best ? pickStronger(best, result) : result;
+        }
+    }
+    return best;
+}
+/**
+ * Run all tiers including async embedding-based semantic detection.
+ * Tier 1 (structural) → Tier 2 regex → Tier 2.C semantic (embedding).
+ * Use in daemon context where async is acceptable.
+ * Fails open if embeddings are unavailable.
+ */
+export async function detectInjectionAsync(text, options = {}) {
+    const { tier1 = true, tier2 = true, tier2Semantic = true } = options;
+    let best = null;
+    // Tier 1 (instant, structural)
+    if (tier1) {
+        const result = detectTier1(text);
+        if (result) {
+            if (result.severity === 'definite')
+                return result;
+            best = result;
+        }
+    }
+    // Tier 2 regex (multilingual) — may find higher severity than Tier 1
+    if (tier2) {
+        const result = detectTier2(text);
+        if (result) {
+            best = best ? pickStronger(best, result) : result;
+            if (best.severity === 'definite')
+                return best;
+        }
+    }
+    // Tier 2.C semantic (embedding-based, async) — fail-open on error
+    if (tier2Semantic) {
+        try {
+            // Lazy import to avoid pulling in embeddings.ts when not needed (.cjs path)
+            const { detectTier2Semantic } = await import('./injection-semantic.js');
+            const result = await detectTier2Semantic(text);
+            if (result) {
+                best = best ? pickStronger(best, result) : result;
+            }
+        }
+        catch (err) {
+            // Fail-open: embedding module unavailable or threw — continue with deterministic results
+            try {
+                const { logWarn } = await import('./fault-logger.js');
+                logWarn('injection', 'Tier 2.C semantic detection unavailable or failed', {
+                    error: err instanceof Error ? err.message : String(err),
+                });
+            }
+            catch {
+                // logWarn import itself failed — no logging facility available, fail-open
+                console.error('[injection] Tier 2.C: both semantic detection and fault-logger unavailable');
+            }
+        }
+    }
+    return best;
+}
+/**
+ * Check if content is safe to store in memory (sync — Tier 1 + Tier 2 regex only).
+ * Rejects definite injections, warns on probable.
+ */
+export function isMemorySafe(content) {
+    const result = detectInjection(content);
+    if (!result)
+        return { safe: true, result: null };
+    if (result.severity === 'definite')
+        return { safe: false, result };
+    // Probable and suspicious are warned but allowed
+    return { safe: true, result };
+}
+/**
+ * Check if content is safe to store in memory (async — includes Tier 2.C semantic).
+ * Use in daemon context for deeper scanning before persisting to memory.
+ */
+export async function isMemorySafeAsync(content) {
+    const result = await detectInjectionAsync(content);
+    if (!result)
+        return { safe: true, result: null };
+    if (result.severity === 'definite')
+        return { safe: false, result };
+    return { safe: true, result };
+}
+// ─── Tier 1 patterns exported for .cjs inline use ───────────────────
+/** Get Tier 1 patterns as plain objects for .cjs serialization */
+export function getTier1PatternsForCJS() {
+    return ALL_TIER1_PATTERNS.map((p) => ({
+        source: p.pattern.source,
+        flags: p.pattern.flags,
+        description: p.description,
+        severity: p.severity,
+    }));
+}
+//# sourceMappingURL=injection-detector.js.map

package/dist/lib/injection-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-detector.js","sourceRoot":"","sources":["../../src/lib/injection-detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAoBH,MAAM,kBAAkB,GAAwB;IAC9C,qBAAqB;IACrB,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,2BAA2B,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC9F,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAC1F,2BAA2B;IAC3B,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,wBAAwB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACrF,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACxF,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,yBAAyB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACrF,sGAAsG;IACtG,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAChG,qBAAqB;IACrB,EAAE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACzF,EAAE,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACpF,4CAA4C;IAC5C;QACE,OAAO,EACL,6IAA6I;QAC/I,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,UAAU;KACrB;IACD,yBAAyB;IACzB,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACtF,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,UAAU,EAAE;CAC7F,CAAC;AAEF,MAAM,uBAAuB,GAAwB;IACnD,wCAAwC;IACxC;QACE,2HAA2H;QAC3H,OAAO,EAAE,4CAA4C;QACrD,WAAW,EAAE,4CAA4C;QACzD,QAAQ,EAAE,YAAY;KACvB;IACD,yBAAyB;IACzB;QACE,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,sCAAsC;QACnD,QAAQ,EAAE,YAAY;KACvB;IACD,yCAAyC;IACzC;QACE,OAAO,EAAE,gEAAgE;QACzE,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,UAAU;KACrB;IACD,mBAAmB;IACnB;QACE,OAAO,EAAE,qFAAqF;QAC9F,WAAW,EAAE,qBAAqB;QAClC,QAAQ,EAAE,UAAU;KACrB;IACD,yBAAyB;IACzB;QACE,OAAO,EAAE,uEAAuE;QAChF,WAAW,EAAE,iCAAiC;QAC9C,QAAQ,EAAE,UAAU;KACrB;CACF,CAAC;AAEF,MAAM,iBAAiB,GAAwB;IAC7C,kFAAkF;IAClF;QACE,OAAO,EAAE,gEAAgE;QACzE,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,UAAU;KACrB;CACF,CAAC;AAEF,MAAM,kBAAkB,GAAwB;IAC9C,GAAG,kBAAkB;IACrB,GAAG,uBAAuB;IAC1B,GAAG,iBAAiB;CACrB,CAAC;AAWF,MAAM,iBAAiB,GAAsB;IAC3C,UAAU;IACV;QACE,OAAO,EACL,mGAAmG;QACrG,WAAW,EAAE,8BAA8B;QAC3C,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,0DAA0D;QACnE,WAAW,EAAE,iCAAiC;QAC9C,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,iFAAiF;QAC1F,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,uEAAuE;QAChF,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,2BAA2B;QACpC,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,yCAAyC;QAClD,WAAW,EAAE,qBAAqB;QAClC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,+CAA+C;QACxD,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,4CAA4C;QACrD,WAAW,EAAE,kBAAkB;QAC/B,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,gEAAgE;QACzE,WAAW,EAAE,uBAAuB;QACpC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,8BAA8B;QACvC,WAAW,EAAE,+BAA+B;QAC5C,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,qFAAqF;QAC9F,WAAW,EAAE,yBAAyB;QACtC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IAED,eAAe;IACf;QACE,OAAO,EAAE,iDAAiD;QAC1D,WAAW,EAAE,wCAAwC;QACrD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,yCAAyC;QACtD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,QAAQ;QACjB,WAAW,EAAE,+CAA+C;QAC5D,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,MAAM;QACf,WAAW,EAAE,yBAAyB;QACtC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IAED,oBAAoB;IACpB;QACE,OAAO,EACL,yFAAyF;QAC3F,WAAW,EAAE,wCAAwC;QACrD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,WAAW,EAAE,yCAAyC;QACtD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,qBAAqB;QAC9B,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EAAE,yBAAyB;QACtC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IAED,mBAAmB;IACnB;QACE,OAAO,EAAE,+DAA+D;QACxE,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,wCAAwC;QACrD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IAED,oBAAoB;IACpB;QACE,OAAO,EACL,yFAAyF;QAC3F,WAAW,EAAE,wCAAwC;QACrD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,eAAe;QACxB,WAAW,EAAE,yCAAyC;QACtD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,4BAA4B;QACzC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IAED,iBAAiB;IACjB;QACE,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,yCAAyC;QACtD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,gDAAgD;QAC7D,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,6BAA6B;QAC1C,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IAED,eAAe;IACf;QACE,OAAO,EAAE,qCAAqC;QAC9C,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,SAAS;QAClB,WAAW,EAAE,wCAAwC;QACrD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,UAAU;QACnB,WAAW,EAAE,2BAA2B;QACxC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IACD;QACE,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,wBAAwB;QACrC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IAED,mBAAmB;IACnB;QACE,OAAO,EACL,kGAAkG;QACpG,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IAED,oBAAoB;IACpB;QACE,OAAO,EACL,0FAA0F;QAC5F,WAAW,EAAE,uCAAuC;QACpD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;IAED,yBAAyB;IACzB;QACE,OAAO,EAAE,iFAAiF;QAC1F,WAAW,EAAE,2CAA2C;QACxD,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,UAAU;KACrB;CACF,CAAC;AAEF,wEAAwE;AAExE,MAAM,aAAa,GAAsC;IACvD,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,UAAU,EAAE,CAAC;CACd,CAAC;AAEF,SAAS,YAAY,CACnB,OAA+B,EAC/B,SAA0B;IAE1B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,OAAO,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AACnG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,MAAM,GAAG,CAAC;IAClD,IAAI,IAAI,GAA2B,IAAI,CAAC;IAExC,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,kBAAkB,EAAE,CAAC;QACpE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE;gBACxB,QAAQ,EAAE,IAAI;gBACd,QAAQ;gBACR,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,WAAW;aACZ,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC,CAAC,mBAAmB;QACpE,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAClF,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;QAC9D,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE;YACxB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,YAAY;YACtB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,wBAAwB;YACjC,WAAW,EAAE,qCAAqC,cAAc,OAAO,IAAI,CAAC,MAAM,0CAA0C;SAC7H,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,2BAA2B,CAAC;QAC7C,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpE,0EAA0E;gBAC1E,mFAAmF;gBACnF,oHAAoH;gBACpH,6GAA6G;gBAC7G,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC/E,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5E,IAAI,YAAY,GAAG,GAAG,EAAE,CAAC;oBACvB,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;oBACrD,IAAI,WAAW,EAAE,CAAC;wBAChB,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE;4BACxB,GAAG,WAAW;4BACd,WAAW,EAAE,mBAAmB,WAAW,CAAC,WAAW,EAAE;yBAC1D,CAAC,CAAC;oBACL,CAAC;oBAED,6EAA6E;oBAC7E,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;oBAC5C,IAAI,cAAc,EAAE,CAAC;wBACnB,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE;4BACxB,GAAG,cAAc;4BACjB,WAAW,EAAE,mBAAmB,cAAc,CAAC,WAAW,EAAE;yBAC7D,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,0BAA0B;YAC5B,CAAC;YACD,qDAAqD;YACrD,IAAI,IAAI,EAAE,QAAQ,KAAK,UAAU;gBAAE,MAAM;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,GAA2B,IAAI,CAAC;IAExC,KAAK,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,iBAAiB,EAAE,CAAC;QAC7E,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE;gBACxB,QAAQ,EAAE,IAAI;gBACd,QAAQ;gBACR,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,WAAW,EAAE,IAAI,QAAQ,KAAK,WAAW,EAAE;aAC5C,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC,CAAC,mBAAmB;QACpE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,UAAgD,EAAE;IAElD,MAAM,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC/C,IAAI,IAAI,GAA2B,IAAI,CAAC;IAExC,qCAAqC;IACrC,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO,MAAM,CAAC;YAClD,IAAI,GAAG,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACpD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,UAAyE,EAAE;IAE3E,MAAM,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,aAAa,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACrE,IAAI,IAAI,GAA2B,IAAI,CAAC;IAExC,+BAA+B;IAC/B,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO,MAAM,CAAC;YAClD,IAAI,GAAG,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAClD,IAAI,IAAI,CAAC,QAAQ,KAAK,UAAU;gBAAE,OAAO,IAAI,CAAC;QAChD,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,4EAA4E;YAC5E,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACpD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,yFAAyF;YACzF,IAAI,CAAC;gBACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBACtD,OAAO,CAAC,WAAW,EAAE,mDAAmD,EAAE;oBACxE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;iBACxD,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,0EAA0E;gBAC1E,OAAO,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAI1C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACnE,iDAAiD;IACjD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe;IAIrD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,uEAAuE;AAEvE,kEAAkE;AAClE,MAAM,UAAU,sBAAsB;IAMpC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;QACxB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK;QACtB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/lib/injection-semantic.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Embedding-based Semantic Injection Detection (Tier 2.C)
+ *
+ * Uses cosine similarity between incoming text chunks and a bank of
+ * ~50 canonical injection phrases in 10+ languages.
+ *
+ * Multilingual embedding models (e.g., gte-small, bge-m3, multilingual-e5)
+ * map semantically similar phrases to nearby vectors regardless of language.
+ * "忽略之前的指令" and "ignore previous instructions" have high cosine similarity.
+ *
+ * Performance: ~5ms per embedding (local ONNX), ~50 prototypes embedded once at init.
+ * Total overhead per check: 10-30ms depending on text length.
+ */
+import type { InjectionResult } from './injection-detector.js';
+export declare const INJECTION_PROTOTYPES: readonly string[];
+export declare const DEFINITE_THRESHOLD = 0.9;
+export declare const PROBABLE_THRESHOLD = 0.82;
+/**
+ * Tier 2.C: Embedding-based semantic injection detection.
+ *
+ * Compares sliding-window chunks of input text against a prototype bank
+ * of ~50 canonical injection phrases in 10+ languages using cosine similarity.
+ *
+ * Returns null if no injection detected or if embeddings are unavailable (fail-open).
+ */
+export declare function detectTier2Semantic(text: string): Promise<InjectionResult | null>;
+/** Reset cached state (for testing only) */
+export declare function resetSemanticDetection(): void;
+/** Check if prototypes are initialized */
+export declare function isInitialized(): boolean;
+//# sourceMappingURL=injection-semantic.d.ts.map

package/dist/lib/injection-semantic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"injection-semantic.d.ts","sourceRoot":"","sources":["../../src/lib/injection-semantic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAM/D,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EA+EhD,CAAC;AAIH,eAAO,MAAM,kBAAkB,MAAM,CAAC;AACtC,eAAO,MAAM,kBAAkB,OAAO,CAAC;AA4EvC;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAqEvF;AAID,4CAA4C;AAC5C,wBAAgB,sBAAsB,IAAI,IAAI,CAI7C;AAED,0CAA0C;AAC1C,wBAAgB,aAAa,IAAI,OAAO,CAEvC"}