agent-threat-rules 4.1.5 → 4.2.0

package/dist/engine.d.ts

@@ -14,6 +14,7 @@
 import type { ATRRule, ATRMatch, AgentEvent, ATRVerdict, ActionResult, ScanResult, ATRLanguage, ATRSemanticJudge } from './types.js';
 import { type Lane } from './quality/rule-contract.js';
 import type { SessionTracker } from './session-tracker.js';
+import { type ModelDecisions } from './verdict.js';
 import type { ActionExecutor } from './action-executor.js';
 import type { SkillFingerprintStore } from './skill-fingerprint.js';
 import type { SemanticLayerConfig } from './layer-integration.js';
@@ -21,6 +22,51 @@ import type { InvariantChecker } from './tier0-invariant.js';
 import type { BlacklistProvider } from './tier1-blacklist.js';
 import type { EmbeddingModule } from './modules/embedding.js';
 export declare function decodeBase64Blocks(content: string): string[];
+/** Map agent event types to ATR source types */
+export declare const EVENT_TYPE_TO_SOURCE: Readonly<Record<string, string>>;
+/**
+ * agent_source types that name what a rule reads rather than a stream of
+ * events of their own (spec/atr-schema.yaml), mapped to the source type whose
+ * events carry that data: a context window reaches the model as LLM input or
+ * as tool output, so those rules run where llm_io rules run; a skill is
+ * installed, granted permissions and chained through tool calls, so those
+ * rules run where tool_call rules run. memory_access is left out for now
+ * (WITHHELD_SOURCE_TYPES).
+ *
+ * No event type maps to them in EVENT_TYPE_TO_SOURCE, so the source filter used
+ * to skip them on every typed event: on the tool_call and tool_response events
+ * src/hook-handler.ts builds, such a rule never ran, while `atr test` mapped its
+ * type to a base type and passed its cases. Only an event with no source type
+ * (mcp_exchange) or a SKILL.md scan reached it. `atr test` now leaves the type
+ * alone: what it runs is what the engine admits.
+ */
+export declare const RUNTIME_SOURCE_TYPE: Readonly<Record<string, string>>;
+/**
+ * Extended agent_source types left out of RUNTIME_SOURCE_TYPE for now, each
+ * with the reason. A rule of such a type still runs only on an event with no
+ * source type and in a SKILL.md scan. `atr test` reports its cases as
+ * unevaluable with this reason instead of passing them on an event the engine
+ * skips the rule on.
+ *
+ * memory_access reads what context_window reads, an agent's memory as it
+ * reaches the model, and would map to llm_io. Its rules (ATR-2026-00075 and
+ * -01155 today) were written for memory writes, and 00075 also matches standing
+ * instructions in an ordinary chat turn ("From now on, always answer in
+ * French."). On llm_input events the adapters that block by default would
+ * refuse those messages: the Mastra ATRProcessor aborts on high and critical
+ * in the hunt lane, and the OpenShell filter denies at high. Map it once those
+ * rules match memory writes only, measured on chat-turn data.
+ */
+export declare const WITHHELD_SOURCE_TYPES: Readonly<Record<string, string>>;
+/**
+ * Whether a rule of this agent_source.type runs on an event of this source
+ * type: the rule's source type (after RUNTIME_SOURCE_TYPE) is the event's, or
+ * one of two documented exceptions holds. An event type with no source type
+ * (mcp_exchange) admits every rule, whatever its agent_source holds; on a typed
+ * event a type that is not a string is admitted by nothing.
+ * sourceAdmits() adds the trace exception.
+ */
+export declare function sourceTypeAdmits(ruleSourceType: unknown, eventSourceType: string | undefined): boolean;
 /**
  * Detection reporter — opt-in callback for feeding scan results back to
  * ATR Threat Cloud. Every integration endpoint that enables this becomes
@@ -99,10 +145,42 @@ export interface ATREngineConfig {
      * (they are too broad to block without confirmation). Default 0.6.
      */
     confirmThreshold?: number;
+    /**
+     * What a match a model decided may do in evaluateWithVerdict(): a semantic
+     * rule's semanticJudge, the embeddingModule signal, the semanticModule layer.
+     *   'advisory' (default): reported, observe-tier actions only, no part in the
+     *     verdict's outcome.
+     *   'enforce': counts like a rule's own match. No benign-corpus measurement
+     *     stands behind a model's decision; choose it only if you accept that.
+     * Any other value throws at construction time.
+     */
+    modelDecisions?: ModelDecisions;
+    /**
+     * Every event this engine evaluates is an MCP tool definition: an entry of a `tools/list`
+     * document, which defines a tool and calls none (`atr scan` on such a document sets it). Rules
+     * written for a tool being called then do not run: a rule with agent_source.type `tool_call` runs
+     * only if one of its conditions reads `tool_description`, or if its subject is the tool's identity
+     * (TOOL_IDENTITY_RULES). Every other rule runs as without the option. See
+     * src/tool-definition-scope.ts. Default false: other producers (hooks, adapters, event files) are
+     * unaffected.
+     */
+    toolDefinitions?: boolean;
 }
 export declare class ATREngine {
     private readonly config;
     private rules;
+    /**
+     * id -> the FIRST loaded rule carrying that id, i.e. exactly what
+     * `this.rules.find(r => r.id === id)` returns.
+     *
+     * The per-condition paths below used to run that find() on every regex
+     * condition they evaluated: a linear walk over every loaded rule, repeated
+     * thousands of times per event. Measured 2026-10-15 on the benign-corpus FP
+     * scan (scripts/gate-promotion-fp.ts, 829 rules, 13,848 samples), that walk
+     * was ~11% of all CPU and replacing it was a 1.18x speed-up on its own, with
+     * the matched-rule set identical for every sample.
+     */
+    private readonly ruleById;
     private readonly compiledPatterns;
     private readonly semanticModuleInstance;
     /**
@@ -111,6 +189,7 @@ export declare class ATREngine {
      * lifetime.
      */
     private readonly lane;
+    private readonly modelDecisions;
     /**
      * Find bundled rules directory shipped with the npm package.
      * Checks: ../rules (from dist/), ./rules (repo root)
@@ -121,14 +200,44 @@ export declare class ATREngine {
      * Load rules from configured directory and/or pre-loaded rules.
      */
     loadRules(): Promise<number>;
+    /** First rule wins, so the index answers what Array.find() would. */
+    private indexRule;
     /**
      * Lane gate: does this rule's maturity qualify for the configured detection
      * lane? 'enforce' = stable only; 'alert' = stable+test; 'hunt'/unset = all.
      * Keeps experimental content out of the auto-block path without deleting it.
      */
     private passesLane;
+    /**
+     * Whether this engine evaluates `rule` at all. A draft or deprecated status, a
+     * maturity outside the lane, or (on an engine constructed with
+     * `toolDefinitions: true`) a rule written for a tool being called, stops a rule
+     * before any of its conditions run,
+     * so nothing about it — its false positives included — can be observed through
+     * this engine. evaluateRaw() and evaluateAsync() both ask this, and a
+     * measurement harness must ask it too before recording a number for a rule:
+     * a rule that is never evaluated scores 0 by construction, and that 0 is not
+     * a measurement.
+     */
+    evaluates(rule: Pick<ATRRule, 'status' | 'maturity'> & Partial<Pick<ATRRule, 'id' | 'agent_source' | 'detection'>>): boolean;
+    /**
+     * On an engine constructed with `toolDefinitions: true`: how many loaded rules it evaluates, and how
+     * many it would evaluate (status and lane allow them) but leaves out because they were written for
+     * a tool being called. Null on any other engine. Lets a report say "not run" instead of reading as
+     * "ran and found nothing".
+     */
+    getToolDefinitionScope(): {
+        rulesEvaluated: number;
+        rulesSkippedByScope: number;
+    } | null;
     /** Active detection lane (config, else 'hunt'). Diagnostics/tests. */
     getLane(): Lane;
+    /**
+     * What a model-decided match may do (config, else 'advisory'). A caller that
+     * runs evaluateAsync() and computes the verdict itself passes this on:
+     * computeVerdict(matches, { modelDecisions: engine.getModelDecisions() }).
+     */
+    getModelDecisions(): ModelDecisions;
     /**
      * Load a single rule file and add it to the engine.
      */
@@ -305,15 +414,42 @@ export declare class ATREngine {
     /** Async MCP event scan result with semantic rule support. */
     evaluateFullAsync(event: AgentEvent, filePath?: string): Promise<ScanResult>;
 }
+/** How the engine compiles one array-format `operator: regex` condition. */
+export interface RegexConditionSpec {
+    /** The pattern handed to RegExp: the condition's value minus a leading inline flag group. */
+    readonly source: string;
+    /** The letters of that stripped group ("i", "is", ...), or "" when there was none. Stripped, not applied. */
+    readonly inlineFlags: string;
+    /** Always `i` -- this condition shape has no case-sensitive mode -- plus `u` when the pattern needs it. */
+    readonly flags: 'i' | 'iu';
+}
+/**
+ * The engine's single definition of how an array-format `operator: regex`
+ * condition is compiled (SPEC §6.4). Both compile sites in ATREngine reach it
+ * through compileRegexCondition() (compilePatterns() and the on-the-fly fallback
+ * in evaluateArrayCondition()), so does ShadowEvaluator, and
+ * scripts/gate-case-sensitivity.ts imports it, because it has to see each pattern
+ * exactly as the engine does. That gate used to keep its own copy of this logic,
+ * and the copy went stale when needsUnicodeFlag() started setting `u` for astral
+ * literals. Other scripts still re-derive it by hand and could import it too.
+ *
+ * Two consequences rule authors cannot see from the pattern:
+ *   - `i` is applied whether or not the author wrote (?i), so letter case never
+ *     distinguishes anything: [A-Z] also matches a-z.
+ *   - A stripped (?s), (?m) or (?x) is NOT applied.
+ */
+export declare function regexConditionSpec(value: string): RegexConditionSpec;
 /**
- * Normalize Unicode text to NFC form and strip zero-width characters.
- * This prevents evasion via combining characters, zero-width joiners, etc.
+ * Compile an array-format `operator: regex` value the way the engine does: the
+ * leading flag group handled by regexConditionSpec(), then the ReDoS gate in
+ * safeCompile(). Returns null for a pattern the gate rejects or that does not
+ * compile; such a condition never matches. Exported for code outside
+ * ATREngine, such as ShadowEvaluator and RuleScaffolder, that must compile a
+ * condition exactly as the engine does.
  *
- * NFC was chosen over NFKC to preserve writer intent \u2014 full-width letters
- * (\uFF21\uFF22\uFF23 vs ABC) remain distinct so rules that explicitly target full-width
- * evasion can still match. For aggressive normalization use
- * `normalizeUnicodeAggressive()`.
+ * @internal Not re-exported from the package entry point.
  */
+export declare function compileRegexCondition(value: string, ruleId?: string): RegExp | null;
 export declare function normalizeUnicode(text: string): string;
 export declare function foldConfusables(text: string): string;
 /**
@@ -349,6 +485,14 @@ export declare function detectInputLanguage(text: string): ATRLanguage;
  * Exported for unit testing; not part of the public API surface.
  */
 export declare function conditionLanguageMatches(condLang: ATRLanguage | undefined, inputLang: ATRLanguage): boolean;
+/**
+ * Safely test a regex pattern against input with length limits.
+ * Returns false if input exceeds MAX_EVAL_LENGTH to prevent ReDoS.
+ * Exported so ShadowEvaluator and RuleScaffolder apply the same limit as the engine.
+ *
+ * @internal Not re-exported from the package entry point.
+ */
+export declare function safeRegexTest(regex: RegExp, input: string): boolean;
 /**
  * Heuristic catastrophic-backtracking (ReDoS) detector for rule-derived
  * patterns.

package/dist/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,OAAO,EACP,QAAQ,EACR,UAAU,EAGV,UAAU,EACV,YAAY,EACZ,UAAU,EAEV,WAAW,EACX,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAOpB,OAAO,EAA+B,KAAK,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAEpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAQlE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA8D9D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAsB5D;AAsBD;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,sEAAsE;IACtE,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,qFAAqF;IACrF,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,0EAA0E;IAC1E,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,6EAA6E;IAC7E,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB;;;;;;;;;;;;;;;OAeG;IACH,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IACpC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qBAAa,SAAS;IA8BR,OAAO,CAAC,QAAQ,CAAC,MAAM;IA7BnC,OAAO,CAAC,KAAK,CAAiB;IAC9B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA4C;IAC7E,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAwB;IAC/D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;IAE5B;;;OAGG;IACH,OAAO,CAAC,mBAAmB;gBAeE,MAAM,GAAE,eAAoB;IAczD;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;IA2BlC;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAMlB,sEAAsE;IACtE,OAAO,IAAI,IAAI;IAIf;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAMnC;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAK5B;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,QAAQ,EAAE;IAOvC;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAkKnB;;;;;;OAMG;IACG,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAuH3D;;;OAGG;IACH,OAAO,CAAC,YAAY;IAyDpB,qFAAqF;IACrF,OAAO,CAAC,mBAAmB;IAY3B;;;OAGG;YACW,iBAAiB;IAgC/B;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAgC/B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IA8C/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA8G9B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAoC/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAiC9B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA0FhC;;;;;OAKG;IACH,OAAO,CAAC,0BAA0B;IAwBlC;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAoBnC;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAgC1B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAiBrB;;;;;;;;OAQG;IACH,OAAO,CAAC,yBAAyB;IAmBjC;;;OAGG;IACH,OAAO,CAAC,6BAA6B;IAyErC;;OAEG;IACH,OAAO,CAAC,2BAA2B;IA4BnC;;OAEG;IACH,OAAO,CAAC,YAAY;IAkDpB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAsC1B;;OAEG;IACH,OAAO,CAAC,eAAe;IAgCvB;;;OAGG;IACH,OAAO,CAAC,eAAe;IA4CvB;;;;;OAKG;IACG,mBAAmB,CACvB,KAAK,EAAE,UAAU,EACjB,QAAQ,CAAC,EAAE,cAAc,GACxB,OAAO,CAAC;QACT,OAAO,EAAE,UAAU,CAAC;QACpB,aAAa,EAAE,SAAS,YAAY,EAAE,CAAC;QACvC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;KAC/B,CAAC;IAiIF,4BAA4B;IAC5B,YAAY,IAAI,MAAM;IAItB,2BAA2B;IAC3B,QAAQ,IAAI,SAAS,OAAO,EAAE;IAI9B,uBAAuB;IACvB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAI5C,4BAA4B;IAC5B,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE;IAI/C;;;;;;;OAOG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE;IA4BtC;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IA2B1D,8EAA8E;IAC9E,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU;IAa7D,6DAA6D;IACvD,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAajF,qFAAqF;IACrF,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU;IAiB9D,8DAA8D;IACxD,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAenF;AAcD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIrD;AAiDD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAuBpD;AAoBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAwC7D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,SAAS,EAAE,WAAW,GACrB,OAAO,CAUT;AAwDD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CA2BnD;AAED;;;;;;GAMG;AACH;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAOzD"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,OAAO,EACP,QAAQ,EACR,UAAU,EAGV,UAAU,EACV,YAAY,EACZ,UAAU,EAEV,WAAW,EACX,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAOpB,OAAO,EAA+B,KAAK,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAGpF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAA4D,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAE7G,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAQlE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AA8D9D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAsB5D;AAED,gDAAgD;AAChD,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAOhE,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAK/D,CAAC;AAEH;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAGjE,CAAC;AAEH;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAkBtG;AA6BD;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,uEAAuE;IACvE,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,sEAAsE;IACtE,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,mEAAmE;IACnE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,0EAA0E;IAC1E,gBAAgB,CAAC,EAAE,qBAAqB,CAAC;IACzC,qFAAqF;IACrF,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,0EAA0E;IAC1E,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,6EAA6E;IAC7E,aAAa,CAAC,EAAE,gBAAgB,CAAC;IACjC,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,WAAW,CAAC;IACvB;;;;;;;;;;;;;;;OAeG;IACH,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IACpC;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAUD,qBAAa,SAAS;IA2CR,OAAO,CAAC,QAAQ,CAAC,MAAM;IA1CnC,OAAO,CAAC,KAAK,CAAiB;IAC9B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA8B;IACvD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA4C;IAC7E,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAwB;IAC/D;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAO;IAC5B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAEhD;;;OAGG;IACH,OAAO,CAAC,mBAAmB;gBAeE,MAAM,GAAE,eAAoB;IAezD;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;IA6BlC,qEAAqE;IACrE,OAAO,CAAC,SAAS;IAIjB;;;;OAIG;IACH,OAAO,CAAC,UAAU;IAMlB;;;;;;;;;;OAUG;IACH,SAAS,CACP,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,cAAc,GAAG,WAAW,CAAC,CAAC,GACvG,OAAO;IAOV;;;;;OAKG;IACH,sBAAsB,IAAI;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAYxF,sEAAsE;IACtE,OAAO,IAAI,IAAI;IAIf;;;;OAIG;IACH,iBAAiB,IAAI,cAAc;IAInC;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAOnC;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI;IAM5B;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,QAAQ,EAAE;IAOvC;;;;;;;;OAQG;IACH,OAAO,CAAC,WAAW;IAoJnB;;;;;;OAMG;IACG,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAiH3D;;;OAGG;IACH,OAAO,CAAC,YAAY;IAyDpB,qFAAqF;IACrF,OAAO,CAAC,mBAAmB;IAY3B;;;OAGG;YACW,iBAAiB;IA0C/B;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAiC/B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IA8C/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IA4G9B;;;OAGG;IACH,OAAO,CAAC,uBAAuB;IAoC/B;;OAEG;IACH,OAAO,CAAC,sBAAsB;IAiC9B;;OAEG;IACH,OAAO,CAAC,wBAAwB;IA0FhC;;;;;OAKG;IACH,OAAO,CAAC,0BAA0B;IAwBlC;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAoBnC;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAgC1B;;;OAGG;IACH,OAAO,CAAC,aAAa;IAiBrB;;;;;;;;OAQG;IACH,OAAO,CAAC,yBAAyB;IAmBjC;;;OAGG;IACH,OAAO,CAAC,6BAA6B;IAyErC;;OAEG;IACH,OAAO,CAAC,2BAA2B;IA4BnC;;OAEG;IACH,OAAO,CAAC,YAAY;IAkDpB;;;OAGG;IACH,OAAO,CAAC,kBAAkB;IAsC1B;;OAEG;IACH,OAAO,CAAC,eAAe;IAgCvB;;;OAGG;IACH,OAAO,CAAC,eAAe;IA0CvB;;;;;OAKG;IACG,mBAAmB,CACvB,KAAK,EAAE,UAAU,EACjB,QAAQ,CAAC,EAAE,cAAc,GACxB,OAAO,CAAC;QACT,OAAO,EAAE,UAAU,CAAC;QACpB,aAAa,EAAE,SAAS,YAAY,EAAE,CAAC;QACvC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;KAC/B,CAAC;IAoIF,4BAA4B;IAC5B,YAAY,IAAI,MAAM;IAItB,2BAA2B;IAC3B,QAAQ,IAAI,SAAS,OAAO,EAAE;IAI9B,uBAAuB;IACvB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS;IAI5C,4BAA4B;IAC5B,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,EAAE;IAI/C;;;;;;;OAOG;IACH,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE;IA4BtC;;OAEG;IACG,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IA2B1D,8EAA8E;IAC9E,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU;IAa7D,6DAA6D;IACvD,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAajF,qFAAqF;IACrF,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU;IAiB9D,8DAA8D;IACxD,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;CAenF;AAgED,4EAA4E;AAC5E,MAAM,WAAW,kBAAkB;IACjC,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6GAA6G;IAC7G,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2GAA2G;IAC3G,QAAQ,CAAC,KAAK,EAAE,GAAG,GAAG,IAAI,CAAC;CAC5B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,kBAAkB,CAIpE;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGnF;AAmBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQrD;AAiDD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAuBpD;AAoBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAwC7D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,WAAW,GAAG,SAAS,EACjC,SAAS,EAAE,WAAW,GACrB,OAAO,CAUT;AAKD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAGnE;AA4CD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CA2BnD;AAED;;;;;;GAMG;AACH;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAOzD"}