agentdb 1.6.1 → 2.0.0-alpha.2

package/dist/src/optimizations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/optimizations/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAChE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/src/optimizations/index.js

@@ -0,0 +1,8 @@
+/**
+ * AgentDB Optimizations
+ *
+ * Performance optimization utilities
+ */
+export { QueryOptimizer } from './QueryOptimizer';
+export { BatchOperations } from './BatchOperations';
+//# sourceMappingURL=index.js.map

package/dist/src/optimizations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/optimizations/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/src/security/input-validation.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Input Validation and Sanitization for AgentDB Security
+ *
+ * Provides comprehensive validation to prevent SQL injection and other attacks:
+ * - Whitelist-based validation for identifiers (tables, columns, PRAGMA commands)
+ * - Input sanitization for user data
+ * - Type validation and constraints
+ * - Error handling that doesn't leak sensitive information
+ */
+/**
+ * Validation error with safe error messages
+ */
+export declare class ValidationError extends Error {
+    readonly code: string;
+    readonly field?: string;
+    constructor(message: string, code?: string, field?: string);
+    /**
+     * Get safe error message (doesn't leak sensitive info)
+     */
+    getSafeMessage(): string;
+}
+/**
+ * Validate task string (NEW - for MCP tool optimization)
+ */
+export declare function validateTaskString(task: unknown, fieldName?: string): string;
+/**
+ * Validate numeric range (NEW - for MCP tool optimization)
+ */
+export declare function validateNumericRange(value: unknown, fieldName: string, min: number, max: number): number;
+/**
+ * Validate array length (NEW - for MCP tool optimization)
+ */
+export declare function validateArrayLength<T>(arr: unknown, fieldName: string, minLength: number, maxLength: number): T[];
+/**
+ * Validate object (NEW - for MCP tool optimization)
+ */
+export declare function validateObject(obj: unknown, fieldName: string, required?: boolean): Record<string, any>;
+/**
+ * Validate boolean (NEW - for MCP tool optimization)
+ */
+export declare function validateBoolean(value: unknown, fieldName: string, defaultValue?: boolean): boolean;
+/**
+ * Validate enum value (NEW - for MCP tool optimization)
+ */
+export declare function validateEnum<T extends string>(value: unknown, fieldName: string, allowedValues: readonly T[]): T;
+/**
+ * Validate table name against whitelist
+ */
+export declare function validateTableName(tableName: string): string;
+/**
+ * Validate column name against whitelist
+ */
+export declare function validateColumnName(tableName: string, columnName: string): string;
+/**
+ * Validate PRAGMA command against whitelist
+ */
+export declare function validatePragmaCommand(pragma: string): string;
+/**
+ * Validate and sanitize session ID
+ */
+export declare function validateSessionId(sessionId: string): string;
+/**
+ * Validate numeric ID
+ */
+export declare function validateId(id: any, fieldName?: string): number;
+/**
+ * Validate timestamp
+ */
+export declare function validateTimestamp(timestamp: any, fieldName?: string): number;
+/**
+ * Validate reward value (0-1)
+ */
+export declare function validateReward(reward: any): number;
+/**
+ * Validate success flag
+ */
+export declare function validateSuccess(success: any): boolean;
+/**
+ * Sanitize text input (prevent extremely long strings, null bytes, etc.)
+ */
+export declare function sanitizeText(text: string, maxLength?: number, fieldName?: string): string;
+/**
+ * Build safe WHERE clause with parameterized values
+ * Returns both the SQL clause and the parameter values
+ */
+export declare function buildSafeWhereClause(tableName: string, conditions: Record<string, any>): {
+    clause: string;
+    values: any[];
+};
+/**
+ * Build safe SET clause for UPDATE statements
+ */
+export declare function buildSafeSetClause(tableName: string, updates: Record<string, any>): {
+    clause: string;
+    values: any[];
+};
+/**
+ * Validate JSON data
+ */
+export declare function validateJSON(data: any, fieldName?: string): string;
+/**
+ * Validate array of tags
+ */
+export declare function validateTags(tags: any): string[];
+/**
+ * Safe error handler that doesn't leak sensitive information
+ */
+export declare function handleSecurityError(error: any): string;
+//# sourceMappingURL=input-validation.d.ts.map

package/dist/src/security/input-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validation.d.ts","sourceRoot":"","sources":["../../../src/security/input-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAyDH;;GAEG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IACxC,SAAgB,IAAI,EAAE,MAAM,CAAC;IAC7B,SAAgB,KAAK,CAAC,EAAE,MAAM,CAAC;gBAEnB,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAA2B,EAAE,KAAK,CAAC,EAAE,MAAM;IAO9E;;OAEG;IACH,cAAc,IAAI,MAAM;CAGzB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,GAAE,MAAe,GAAG,MAAM,CAkCpF;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,MAAM,CAkBR;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,CAAC,EAAE,CAkBL;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,OAAc,GACvB,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAarB;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,OAAO,GACrB,OAAO,CAaT;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAC3C,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,SAAS,CAAC,EAAE,GAC1B,CAAC,CAkBH;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAgB3D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAkBhF;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAkB5D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAqB3D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,GAAE,MAAa,GAAG,MAAM,CAQpE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,GAAE,MAAoB,GAAG,MAAM,CAoBzF;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAYlD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAgBrD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,GAAE,MAAe,EAAE,SAAS,GAAE,MAAe,GAAG,MAAM,CAiBzG;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC9B;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,EAAE,CAAA;CAAE,CAoBnC;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC3B;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,EAAE,CAAA;CAAE,CAoBnC;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,GAAE,MAAe,GAAG,MAAM,CAM1E;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,GAAG,GAAG,MAAM,EAAE,CAahD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,GAAG,GAAG,MAAM,CAStD"}

package/dist/src/security/input-validation.js

@@ -0,0 +1,398 @@
+/**
+ * Input Validation and Sanitization for AgentDB Security
+ *
+ * Provides comprehensive validation to prevent SQL injection and other attacks:
+ * - Whitelist-based validation for identifiers (tables, columns, PRAGMA commands)
+ * - Input sanitization for user data
+ * - Type validation and constraints
+ * - Error handling that doesn't leak sensitive information
+ */
+/**
+ * Allowed table names in AgentDB (whitelist)
+ */
+const ALLOWED_TABLES = new Set([
+    'episodes',
+    'episode_embeddings',
+    'skills',
+    'skill_embeddings',
+    'causal_edges',
+    'causal_experiments',
+    'causal_observations',
+    'provenance_certificates',
+    'reasoning_patterns',
+    'pattern_embeddings',
+    'rl_sessions',
+    'rl_experiences',
+    'rl_policies',
+    'rl_q_values',
+]);
+/**
+ * Allowed column names by table (whitelist)
+ */
+const ALLOWED_COLUMNS = {
+    episodes: new Set([
+        'id', 'ts', 'session_id', 'task', 'input', 'output', 'critique',
+        'reward', 'success', 'latency_ms', 'tokens_used', 'tags', 'metadata'
+    ]),
+    skills: new Set([
+        'id', 'ts', 'name', 'description', 'signature', 'code',
+        'success_rate', 'uses', 'avg_reward', 'avg_latency_ms', 'tags', 'metadata'
+    ]),
+    causal_edges: new Set([
+        'id', 'ts', 'from_memory_id', 'from_memory_type', 'to_memory_id',
+        'to_memory_type', 'similarity', 'uplift', 'confidence', 'sample_size', 'evidence_ids'
+    ]),
+    // Add more as needed
+};
+/**
+ * Allowed PRAGMA commands (whitelist)
+ */
+const ALLOWED_PRAGMAS = new Set([
+    'journal_mode',
+    'synchronous',
+    'cache_size',
+    'page_size',
+    'page_count',
+    'user_version',
+    'foreign_keys',
+    'temp_store',
+    'mmap_size',
+    'wal_autocheckpoint',
+]);
+/**
+ * Validation error with safe error messages
+ */
+export class ValidationError extends Error {
+    code;
+    field;
+    constructor(message, code = 'VALIDATION_ERROR', field) {
+        super(message);
+        this.name = 'ValidationError';
+        this.code = code;
+        this.field = field;
+    }
+    /**
+     * Get safe error message (doesn't leak sensitive info)
+     */
+    getSafeMessage() {
+        return `Invalid input: ${this.field || 'unknown field'}`;
+    }
+}
+/**
+ * Validate task string (NEW - for MCP tool optimization)
+ */
+export function validateTaskString(task, fieldName = 'task') {
+    if (task === null || task === undefined) {
+        throw new ValidationError(`${fieldName} is required`, 'MISSING_REQUIRED_FIELD', fieldName);
+    }
+    if (typeof task !== 'string') {
+        throw new ValidationError(`${fieldName} must be a string`, 'INVALID_TYPE', fieldName);
+    }
+    const trimmed = task.trim();
+    if (trimmed.length === 0) {
+        throw new ValidationError(`${fieldName} cannot be empty`, 'EMPTY_STRING', fieldName);
+    }
+    if (trimmed.length > 10000) {
+        throw new ValidationError(`${fieldName} exceeds maximum length of 10000 characters`, 'STRING_TOO_LONG', fieldName);
+    }
+    // Check for potentially malicious patterns
+    const suspiciousPatterns = [
+        /<script/i,
+        /javascript:/i,
+        /on\w+\s*=/i, // onclick=, onload=, etc.
+        /\x00/, // Null bytes
+    ];
+    for (const pattern of suspiciousPatterns) {
+        if (pattern.test(trimmed)) {
+            throw new ValidationError(`${fieldName} contains potentially malicious content`, 'SUSPICIOUS_CONTENT', fieldName);
+        }
+    }
+    return trimmed;
+}
+/**
+ * Validate numeric range (NEW - for MCP tool optimization)
+ */
+export function validateNumericRange(value, fieldName, min, max) {
+    if (value === null || value === undefined) {
+        throw new ValidationError(`${fieldName} is required`, 'MISSING_REQUIRED_FIELD', fieldName);
+    }
+    if (typeof value !== 'number' || isNaN(value) || !isFinite(value)) {
+        throw new ValidationError(`${fieldName} must be a valid number`, 'INVALID_NUMBER', fieldName);
+    }
+    if (value < min || value > max) {
+        throw new ValidationError(`${fieldName} must be between ${min} and ${max} (got ${value})`, 'OUT_OF_RANGE', fieldName);
+    }
+    return value;
+}
+/**
+ * Validate array length (NEW - for MCP tool optimization)
+ */
+export function validateArrayLength(arr, fieldName, minLength, maxLength) {
+    if (arr === null || arr === undefined) {
+        throw new ValidationError(`${fieldName} is required`, 'MISSING_REQUIRED_FIELD', fieldName);
+    }
+    if (!Array.isArray(arr)) {
+        throw new ValidationError(`${fieldName} must be an array`, 'INVALID_ARRAY', fieldName);
+    }
+    if (arr.length < minLength || arr.length > maxLength) {
+        throw new ValidationError(`${fieldName} must contain between ${minLength} and ${maxLength} items (got ${arr.length})`, 'ARRAY_LENGTH_INVALID', fieldName);
+    }
+    return arr;
+}
+/**
+ * Validate object (NEW - for MCP tool optimization)
+ */
+export function validateObject(obj, fieldName, required = true) {
+    if (obj === null || obj === undefined) {
+        if (required) {
+            throw new ValidationError(`${fieldName} is required`, 'MISSING_REQUIRED_FIELD', fieldName);
+        }
+        return {};
+    }
+    if (typeof obj !== 'object' || Array.isArray(obj)) {
+        throw new ValidationError(`${fieldName} must be an object`, 'INVALID_OBJECT', fieldName);
+    }
+    return obj;
+}
+/**
+ * Validate boolean (NEW - for MCP tool optimization)
+ */
+export function validateBoolean(value, fieldName, defaultValue) {
+    if (value === null || value === undefined) {
+        if (defaultValue !== undefined) {
+            return defaultValue;
+        }
+        throw new ValidationError(`${fieldName} is required`, 'MISSING_REQUIRED_FIELD', fieldName);
+    }
+    if (typeof value !== 'boolean') {
+        throw new ValidationError(`${fieldName} must be a boolean`, 'INVALID_BOOLEAN', fieldName);
+    }
+    return value;
+}
+/**
+ * Validate enum value (NEW - for MCP tool optimization)
+ */
+export function validateEnum(value, fieldName, allowedValues) {
+    if (value === null || value === undefined) {
+        throw new ValidationError(`${fieldName} is required`, 'MISSING_REQUIRED_FIELD', fieldName);
+    }
+    if (typeof value !== 'string') {
+        throw new ValidationError(`${fieldName} must be a string`, 'INVALID_TYPE', fieldName);
+    }
+    if (!allowedValues.includes(value)) {
+        throw new ValidationError(`${fieldName} must be one of: ${allowedValues.join(', ')} (got "${value}")`, 'INVALID_ENUM_VALUE', fieldName);
+    }
+    return value;
+}
+/**
+ * Validate table name against whitelist
+ */
+export function validateTableName(tableName) {
+    if (!tableName || typeof tableName !== 'string') {
+        throw new ValidationError('Table name must be a non-empty string', 'INVALID_TABLE', 'tableName');
+    }
+    const sanitized = tableName.trim().toLowerCase();
+    if (!ALLOWED_TABLES.has(sanitized)) {
+        throw new ValidationError(`Invalid table name: ${sanitized}. Allowed tables: ${Array.from(ALLOWED_TABLES).join(', ')}`, 'INVALID_TABLE', 'tableName');
+    }
+    return sanitized;
+}
+/**
+ * Validate column name against whitelist
+ */
+export function validateColumnName(tableName, columnName) {
+    if (!columnName || typeof columnName !== 'string') {
+        throw new ValidationError('Column name must be a non-empty string', 'INVALID_COLUMN', 'columnName');
+    }
+    const sanitized = columnName.trim().toLowerCase();
+    const validatedTable = validateTableName(tableName);
+    const allowedColumns = ALLOWED_COLUMNS[validatedTable];
+    if (allowedColumns && !allowedColumns.has(sanitized)) {
+        throw new ValidationError(`Invalid column name for table ${validatedTable}: ${sanitized}`, 'INVALID_COLUMN', 'columnName');
+    }
+    return sanitized;
+}
+/**
+ * Validate PRAGMA command against whitelist
+ */
+export function validatePragmaCommand(pragma) {
+    if (!pragma || typeof pragma !== 'string') {
+        throw new ValidationError('PRAGMA command must be a non-empty string', 'INVALID_PRAGMA', 'pragma');
+    }
+    // Extract the pragma name (before any = or space)
+    const pragmaName = pragma.trim().toLowerCase().split(/[=\s]/)[0];
+    if (!ALLOWED_PRAGMAS.has(pragmaName)) {
+        throw new ValidationError(`Invalid PRAGMA command: ${pragmaName}. Allowed: ${Array.from(ALLOWED_PRAGMAS).join(', ')}`, 'INVALID_PRAGMA', 'pragma');
+    }
+    // Return the full pragma for execution (e.g., "journal_mode = WAL")
+    return pragma.trim();
+}
+/**
+ * Validate and sanitize session ID
+ */
+export function validateSessionId(sessionId) {
+    if (!sessionId || typeof sessionId !== 'string') {
+        throw new ValidationError('Session ID must be a non-empty string', 'INVALID_SESSION_ID', 'sessionId');
+    }
+    // Allow alphanumeric, hyphens, underscores (max 255 chars)
+    const sanitized = sessionId.trim();
+    if (sanitized.length > 255) {
+        throw new ValidationError('Session ID exceeds maximum length (255)', 'INVALID_SESSION_ID', 'sessionId');
+    }
+    if (!/^[a-zA-Z0-9_-]+$/.test(sanitized)) {
+        throw new ValidationError('Session ID must contain only alphanumeric characters, hyphens, and underscores', 'INVALID_SESSION_ID', 'sessionId');
+    }
+    return sanitized;
+}
+/**
+ * Validate numeric ID
+ */
+export function validateId(id, fieldName = 'id') {
+    const numId = Number(id);
+    if (!Number.isFinite(numId) || numId < 0 || !Number.isInteger(numId)) {
+        throw new ValidationError(`${fieldName} must be a non-negative integer`, 'INVALID_ID', fieldName);
+    }
+    return numId;
+}
+/**
+ * Validate timestamp
+ */
+export function validateTimestamp(timestamp, fieldName = 'timestamp') {
+    const numTs = Number(timestamp);
+    if (!Number.isFinite(numTs) || numTs < 0) {
+        throw new ValidationError(`${fieldName} must be a non-negative number`, 'INVALID_TIMESTAMP', fieldName);
+    }
+    // Reasonable timestamp bounds (2000-01-01 to 2100-01-01)
+    const MIN_TIMESTAMP = 946684800; // 2000-01-01
+    const MAX_TIMESTAMP = 4102444800; // 2100-01-01
+    if (numTs < MIN_TIMESTAMP || numTs > MAX_TIMESTAMP) {
+        throw new ValidationError(`${fieldName} is out of valid range (2000-2100)`, 'INVALID_TIMESTAMP', fieldName);
+    }
+    return numTs;
+}
+/**
+ * Validate reward value (0-1)
+ */
+export function validateReward(reward) {
+    const numReward = Number(reward);
+    if (!Number.isFinite(numReward)) {
+        throw new ValidationError('Reward must be a number', 'INVALID_REWARD', 'reward');
+    }
+    if (numReward < 0 || numReward > 1) {
+        throw new ValidationError('Reward must be between 0 and 1', 'INVALID_REWARD', 'reward');
+    }
+    return numReward;
+}
+/**
+ * Validate success flag
+ */
+export function validateSuccess(success) {
+    if (typeof success === 'boolean') {
+        return success;
+    }
+    if (typeof success === 'number') {
+        return success !== 0;
+    }
+    if (typeof success === 'string') {
+        const lower = success.toLowerCase();
+        if (lower === 'true' || lower === '1' || lower === 'yes')
+            return true;
+        if (lower === 'false' || lower === '0' || lower === 'no')
+            return false;
+    }
+    throw new ValidationError('Success must be a boolean value', 'INVALID_BOOLEAN', 'success');
+}
+/**
+ * Sanitize text input (prevent extremely long strings, null bytes, etc.)
+ */
+export function sanitizeText(text, maxLength = 100000, fieldName = 'text') {
+    if (typeof text !== 'string') {
+        throw new ValidationError(`${fieldName} must be a string`, 'INVALID_TEXT', fieldName);
+    }
+    // Remove null bytes
+    const sanitized = text.replace(/\0/g, '');
+    if (sanitized.length > maxLength) {
+        throw new ValidationError(`${fieldName} exceeds maximum length (${maxLength})`, 'TEXT_TOO_LONG', fieldName);
+    }
+    return sanitized;
+}
+/**
+ * Build safe WHERE clause with parameterized values
+ * Returns both the SQL clause and the parameter values
+ */
+export function buildSafeWhereClause(tableName, conditions) {
+    const validatedTable = validateTableName(tableName);
+    if (!conditions || typeof conditions !== 'object' || Object.keys(conditions).length === 0) {
+        throw new ValidationError('Conditions must be a non-empty object', 'INVALID_CONDITIONS', 'conditions');
+    }
+    const clauses = [];
+    const values = [];
+    for (const [column, value] of Object.entries(conditions)) {
+        const validatedColumn = validateColumnName(validatedTable, column);
+        clauses.push(`${validatedColumn} = ?`);
+        values.push(value);
+    }
+    return {
+        clause: clauses.join(' AND '),
+        values,
+    };
+}
+/**
+ * Build safe SET clause for UPDATE statements
+ */
+export function buildSafeSetClause(tableName, updates) {
+    const validatedTable = validateTableName(tableName);
+    if (!updates || typeof updates !== 'object' || Object.keys(updates).length === 0) {
+        throw new ValidationError('Updates must be a non-empty object', 'INVALID_UPDATES', 'updates');
+    }
+    const clauses = [];
+    const values = [];
+    for (const [column, value] of Object.entries(updates)) {
+        const validatedColumn = validateColumnName(validatedTable, column);
+        clauses.push(`${validatedColumn} = ?`);
+        values.push(value);
+    }
+    return {
+        clause: clauses.join(', '),
+        values,
+    };
+}
+/**
+ * Validate JSON data
+ */
+export function validateJSON(data, fieldName = 'json') {
+    try {
+        return JSON.stringify(data);
+    }
+    catch (error) {
+        throw new ValidationError(`${fieldName} is not valid JSON`, 'INVALID_JSON', fieldName);
+    }
+}
+/**
+ * Validate array of tags
+ */
+export function validateTags(tags) {
+    if (!Array.isArray(tags)) {
+        throw new ValidationError('Tags must be an array', 'INVALID_TAGS', 'tags');
+    }
+    const sanitized = tags.map((tag, i) => {
+        if (typeof tag !== 'string') {
+            throw new ValidationError(`Tag at index ${i} must be a string`, 'INVALID_TAG', `tags[${i}]`);
+        }
+        return sanitizeText(tag, 100, `tags[${i}]`);
+    });
+    return sanitized;
+}
+/**
+ * Safe error handler that doesn't leak sensitive information
+ */
+export function handleSecurityError(error) {
+    if (error instanceof ValidationError) {
+        // Safe to return validation errors
+        return error.message;
+    }
+    // For other errors, return generic message and log details internally
+    console.error('Security error:', error);
+    return 'An error occurred while processing your request. Please check your input and try again.';
+}
+//# sourceMappingURL=input-validation.js.map

package/dist/src/security/input-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-validation.js","sourceRoot":"","sources":["../../../src/security/input-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH;;GAEG;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,UAAU;IACV,oBAAoB;IACpB,QAAQ;IACR,kBAAkB;IAClB,cAAc;IACd,oBAAoB;IACpB,qBAAqB;IACrB,yBAAyB;IACzB,oBAAoB;IACpB,oBAAoB;IACpB,aAAa;IACb,gBAAgB;IAChB,aAAa;IACb,aAAa;CACd,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,eAAe,GAAgC;IACnD,QAAQ,EAAE,IAAI,GAAG,CAAC;QAChB,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU;QAC/D,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU;KACrE,CAAC;IACF,MAAM,EAAE,IAAI,GAAG,CAAC;QACd,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM;QACtD,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,EAAE,UAAU;KAC3E,CAAC;IACF,YAAY,EAAE,IAAI,GAAG,CAAC;QACpB,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,cAAc;QAChE,gBAAgB,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc;KACtF,CAAC;IACF,qBAAqB;CACtB,CAAC;AAEF;;GAEG;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,cAAc;IACd,aAAa;IACb,YAAY;IACZ,WAAW;IACX,YAAY;IACZ,cAAc;IACd,cAAc;IACd,YAAY;IACZ,WAAW;IACX,oBAAoB;CACrB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxB,IAAI,CAAS;IACb,KAAK,CAAU;IAE/B,YAAY,OAAe,EAAE,OAAe,kBAAkB,EAAE,KAAc;QAC5E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,kBAAkB,IAAI,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC;IAC3D,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAa,EAAE,YAAoB,MAAM;IAC1E,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,cAAc,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,mBAAmB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAE5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,kBAAkB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,6CAA6C,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;IACrH,CAAC;IAED,2CAA2C;IAC3C,MAAM,kBAAkB,GAAG;QACzB,UAAU;QACV,cAAc;QACd,YAAY,EAAE,0BAA0B;QACxC,MAAM,EAAE,aAAa;KACtB,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,yCAAyC,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAc,EACd,SAAiB,EACjB,GAAW,EACX,GAAW;IAEX,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,cAAc,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,yBAAyB,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAChG,CAAC;IAED,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,oBAAoB,GAAG,QAAQ,GAAG,SAAS,KAAK,GAAG,EAC/D,cAAc,EACd,SAAS,CACV,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAY,EACZ,SAAiB,EACjB,SAAiB,EACjB,SAAiB;IAEjB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,cAAc,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,mBAAmB,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;IACzF,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACrD,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,yBAAyB,SAAS,QAAQ,SAAS,eAAe,GAAG,CAAC,MAAM,GAAG,EAC3F,sBAAsB,EACtB,SAAS,CACV,CAAC;IACJ,CAAC;IAED,OAAO,GAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAY,EACZ,SAAiB,EACjB,WAAoB,IAAI;IAExB,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,cAAc,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,oBAAoB,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;IAC3F,CAAC;IAED,OAAO,GAA0B,CAAC;AACpC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAc,EACd,SAAiB,EACjB,YAAsB;IAEtB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,cAAc,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,oBAAoB,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAC1B,KAAc,EACd,SAAiB,EACjB,aAA2B;IAE3B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,cAAc,EAAE,wBAAwB,EAAE,SAAS,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,mBAAmB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,oBAAoB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,IAAI,EAC3E,oBAAoB,EACpB,SAAS,CACV,CAAC;IACJ,CAAC;IAED,OAAO,KAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CAAC,uCAAuC,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEjD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CACvB,uBAAuB,SAAS,qBAAqB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC5F,eAAe,EACf,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB,EAAE,UAAkB;IACtE,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,eAAe,CAAC,wCAAwC,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,MAAM,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAEpD,MAAM,cAAc,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IACvD,IAAI,cAAc,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,eAAe,CACvB,iCAAiC,cAAc,KAAK,SAAS,EAAE,EAC/D,gBAAgB,EAChB,YAAY,CACb,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,eAAe,CAAC,2CAA2C,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACrG,CAAC;IAED,kDAAkD;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAEjE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,eAAe,CACvB,2BAA2B,UAAU,cAAc,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC3F,gBAAgB,EAChB,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CAAC,uCAAuC,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IACxG,CAAC;IAED,2DAA2D;IAC3D,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAEnC,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CAAC,yCAAyC,EAAE,oBAAoB,EAAE,WAAW,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CACvB,gFAAgF,EAChF,oBAAoB,EACpB,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,EAAO,EAAE,YAAoB,IAAI;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAEzB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,iCAAiC,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IACpG,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAc,EAAE,YAAoB,WAAW;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAEhC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,gCAAgC,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;IAC1G,CAAC;IAED,yDAAyD;IACzD,MAAM,aAAa,GAAG,SAAS,CAAC,CAAC,aAAa;IAC9C,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,aAAa;IAE/C,IAAI,KAAK,GAAG,aAAa,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;QACnD,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,oCAAoC,EAChD,mBAAmB,EACnB,SAAS,CACV,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,MAAW;IACxC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAEjC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CAAC,yBAAyB,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,gCAAgC,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC1F,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,OAAY;IAC1C,IAAI,OAAO,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,KAAK,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;QACtE,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;IACzE,CAAC;IAED,MAAM,IAAI,eAAe,CAAC,iCAAiC,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;AAC7F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,YAAoB,MAAM,EAAE,YAAoB,MAAM;IAC/F,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,mBAAmB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IAED,oBAAoB;IACpB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAE1C,IAAI,SAAS,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,4BAA4B,SAAS,GAAG,EACpD,eAAe,EACf,SAAS,CACV,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAiB,EACjB,UAA+B;IAE/B,MAAM,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAEpD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1F,MAAM,IAAI,eAAe,CAAC,uCAAuC,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAU,EAAE,CAAC;IAEzB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACzD,MAAM,eAAe,GAAG,kBAAkB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,GAAG,eAAe,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAC7B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,OAA4B;IAE5B,MAAM,cAAc,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAEpD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,eAAe,CAAC,oCAAoC,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAU,EAAE,CAAC;IAEzB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,eAAe,GAAG,kBAAkB,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,GAAG,eAAe,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAS,EAAE,YAAoB,MAAM;IAChE,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CAAC,GAAG,SAAS,oBAAoB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACzF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAS;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CAAC,uBAAuB,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAU;IAC5C,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,mCAAmC;QACnC,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,sEAAsE;IACtE,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACxC,OAAO,yFAAyF,CAAC;AACnG,CAAC"}