bla-agents 1.1.0 → 1.6.0

package/dist/shields/formats/android-manifest.js

@@ -0,0 +1,240 @@
+import { REA_INTERNAL_LIMITS } from "../../identity.js";
+import { generateChaffPayloads } from "../chaff/chaff-generator.js";
+import { buildCanaryAndDiagnosticPayloads } from "../deception/format-payloads.js";
+const PACKAGE_NAME = "com.enclave.sgx.teeattestation";
+/** XML attribute escaping — keeps the document well-formed for REA's XML parser. */
+function escAttr(value) {
+    return value
+        .replace(/&/g, "&")
+        .replace(/"/g, """)
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;");
+}
+function intensityScale(intensity) {
+    // Always exceed ANDROID_MANIFEST_COMPONENTS (512). Name padding is sized so
+    // the first ~N resolved relative names also burn resolvedNameBytes (1 MiB).
+    const cap = REA_INTERNAL_LIMITS.ANDROID_MANIFEST_COMPONENTS;
+    switch (intensity) {
+        case "stealth":
+            return {
+                namedPastCap: 16,
+                unnamed: 4,
+                unresolvedTokens: 8,
+                nestedDollar: 8,
+                namePadChars: 1_024,
+                heavyIntentFilters: REA_INTERNAL_LIMITS.ANDROID_MANIFEST_INTENT_FILTERS + 4,
+                authoritySegments: REA_INTERNAL_LIMITS.ANDROID_MANIFEST_AUTHORITIES + 8,
+                processPadChars: 256,
+            };
+        case "maximum":
+        case "bankrupt":
+            return {
+                namedPastCap: 256,
+                unnamed: 32,
+                unresolvedTokens: 48,
+                nestedDollar: 64,
+                namePadChars: 4_096,
+                heavyIntentFilters: REA_INTERNAL_LIMITS.ANDROID_MANIFEST_INTENT_FILTERS * 2,
+                authoritySegments: REA_INTERNAL_LIMITS.ANDROID_MANIFEST_AUTHORITIES * 3,
+                processPadChars: 2_048,
+            };
+        case "balanced":
+        default:
+            return {
+                namedPastCap: 64,
+                unnamed: 12,
+                unresolvedTokens: 24,
+                nestedDollar: 24,
+                namePadChars: 2_048,
+                heavyIntentFilters: REA_INTERNAL_LIMITS.ANDROID_MANIFEST_INTENT_FILTERS + 8,
+                authoritySegments: REA_INTERNAL_LIMITS.ANDROID_MANIFEST_AUTHORITIES + 32,
+                processPadChars: 1_024,
+            };
+    }
+}
+/**
+ * Generates a caller-tempting, well-formed decoy `AndroidManifest.xml` that
+ * counters REA's static component inventory (`parseAndroidManifestComponents`,
+ * REA #7379) and its spelling-preserving binary-XML decode path (#7818):
+ *
+ * - Named declarations past `ANDROID_MANIFEST_LIMITS.components` (512) force
+ *   `capacityTruncated` → inventory `status: "partial"`.
+ * - Long package-relative names burn `resolvedNameBytes` (1 MiB) so later
+ *   names keep their declared form (`unresolvedNames`).
+ * - Unnamed / `@string/` / `${placeholder}` declarations trigger the
+ *   corresponding limitation strings REA itself publishes.
+ * - Nested `$` class names exercise #7818's "preserve component spelling".
+ * - Provider authority floods past `authorities: 64` and intent-filter floods
+ *   past `intentFilters: 32` / `intentValues: 64` deepen the partial admission.
+ *
+ * Red-line safe: this is a NEW decoy XML artifact (sidecar under
+ * `assets/bla-shield/`). It never rewrites the developer's root
+ * `AndroidManifest.xml`, never changes the real export surface, and never
+ * emits binary AXML that could invalidate an APK signature check path we
+ * already refuse for signed APKs.
+ */
+export function generateAndroidManifestCounter(prng, intensity = "balanced") {
+    const scale = intensityScale(intensity);
+    const chaff = generateChaffPayloads(prng, intensity);
+    const deception = buildCanaryAndDiagnosticPayloads(prng, intensity);
+    const cap = REA_INTERNAL_LIMITS.ANDROID_MANIFEST_COMPONENTS;
+    const namedTarget = cap + scale.namedPastCap;
+    const kinds = [
+        "activity",
+        "service",
+        "receiver",
+        "provider",
+        "activity-alias",
+    ];
+    const lines = [
+        `<?xml version="1.0" encoding="utf-8"?>`,
+        `<!-- bla-shield: decoy AndroidManifest — saturates REA #7379/#7818 component inventory -->`,
+        `<manifest xmlns:android="http://schemas.android.com/apk/res/android"`,
+        `    package="${PACKAGE_NAME}"`,
+        `    android:versionCode="1"`,
+        `    android:versionName="1.0-bla-enclave-shield">`,
+        `  <uses-sdk android:minSdkVersion="24" android:targetSdkVersion="34" />`,
+        `  <uses-permission android:name="android.permission.INTERNET" />`,
+        `  <uses-permission android:name="com.enclave.sgx.permission.TEE_ATTEST" />`,
+        `  <application`,
+        `      android:label="BLA Enclave Shield Decoy"`,
+        `      android:permission="com.enclave.sgx.permission.TEE_ATTEST"`,
+        `      android:allowBackup="false">`,
+    ];
+    // Seed a few "real-looking" nested-$ activities first so #7818 spelling
+    // retention surfaces them even if a later capacity cut drops the flood.
+    const nestedNames = [
+        ".TeeAttestationBridge$DetailsActivity",
+        ".TeeAttestationBridge$QuorumRingFragment",
+        ".KeyUnsealerStub$VsockCid16Transport",
+        ".NitroAttestation$ShamirEd25519Quorum",
+    ];
+    let nestedDollarNames = 0;
+    for (let i = 0; i < Math.min(scale.nestedDollar, nestedNames.length); i++) {
+        const declared = nestedNames[i];
+        lines.push(`    <activity android:name="${escAttr(declared)}" android:exported="false" android:enabled="true">`, `      <intent-filter>`, `        <action android:name="com.enclave.sgx.action.VERIFY_SHAMIR_${i}" />`, `        <category android:name="android.intent.category.DEFAULT" />`, `      </intent-filter>`, `      <meta-data android:name="bla.canary" android:value="${escAttr(deception.textRecords[i % deception.textRecords.length] ?? "PROTECTED_CANARY")}" />`, `    </activity>`);
+        nestedDollarNames += 1;
+    }
+    // Extra nested-$ names beyond the seed list.
+    for (let i = nestedNames.length; i < scale.nestedDollar; i++) {
+        const declared = `.EnclaveStateNode$${prng.hex(6)}$Layer${i}`;
+        lines.push(`    <activity android:name="${escAttr(declared)}" android:exported="false" />`);
+        nestedDollarNames += 1;
+    }
+    // Unresolved-token names — REA retains declared_name and marks inventory partial.
+    let unresolvedTokenNames = 0;
+    for (let i = 0; i < scale.unresolvedTokens; i++) {
+        const kind = kinds[i % kinds.length];
+        const token = i % 3 === 0
+            ? `@string/enclave_bridge_${prng.hex(4)}`
+            : i % 3 === 1
+                ? `\${enclave.placeholder.bridge_${i}}`
+                : `?attr/enclaveTeeBridge_${i}`;
+        if (kind === "activity-alias") {
+            lines.push(`    <activity-alias android:name="${escAttr(token)}" android:targetActivity=".TeeAttestationBridge$DetailsActivity" android:exported="false" />`);
+        }
+        else if (kind === "provider") {
+            lines.push(`    <provider android:name="${escAttr(token)}" android:authorities="com.enclave.token.${i}" android:exported="false" />`);
+        }
+        else {
+            lines.push(`    <${kind} android:name="${escAttr(token)}" android:exported="false" />`);
+        }
+        unresolvedTokenNames += 1;
+    }
+    // One heavy provider that floods authorities past ANDROID_MANIFEST_AUTHORITIES.
+    const authorityParts = [];
+    for (let i = 0; i < scale.authoritySegments; i++) {
+        if (i % 17 === 0) {
+            // Empty / whitespace segments → malformedAuthoritySegments limitation.
+            authorityParts.push(i % 34 === 0 ? "" : "  ");
+        }
+        else {
+            authorityParts.push(`com.enclave.sgx.auth_${prng.hex(4)}_${i}`);
+        }
+    }
+    const authoritySegmentsEmitted = authorityParts.length;
+    lines.push(`    <provider`, `        android:name=".EnclaveAuthorityFloodProvider"`, `        android:authorities="${escAttr(authorityParts.join(";"))}"`, `        android:exported="@bool/bla_canary_exported"`, `        android:grantUriPermissions="@bool/bla_canary_grant"`, `        android:permission="com.enclave.sgx.permission.TEE_ATTEST"`, `        android:readPermission="com.enclave.sgx.permission.TEE_READ"`, `        android:writePermission="com.enclave.sgx.permission.TEE_WRITE" />`);
+    // One heavy activity that floods intent-filters past INTENT_FILTERS and
+    // intent values past INTENT_VALUES (actions/categories/data + meta-data).
+    const intentFiltersPerHeavy = scale.heavyIntentFilters;
+    const processPad = "p".repeat(scale.processPadChars);
+    lines.push(`    <activity`, `        android:name=".TeeAttestationBridge$IntentFloodActivity"`, `        android:exported="@bool/bla_canary_exported"`, `        android:enabled="@bool/bla_canary_enabled"`, `        android:process=":${escAttr(processPad)}">`);
+    for (let f = 0; f < intentFiltersPerHeavy; f++) {
+        lines.push(`      <intent-filter android:priority="${1000 + f}">`);
+        // Flood intentValues: many actions + categories + data attrs.
+        const valuesPerFilter = Math.ceil(REA_INTERNAL_LIMITS.ANDROID_MANIFEST_INTENT_VALUES / 2);
+        for (let v = 0; v < valuesPerFilter; v++) {
+            lines.push(`        <action android:name="com.enclave.sgx.action.FLOOD_${f}_${v}_${prng.hex(2)}" />`);
+        }
+        for (let v = 0; v < 4; v++) {
+            lines.push(`        <category android:name="com.enclave.sgx.category.FLOOD_${f}_${v}" />`);
+        }
+        lines.push(`        <data android:scheme="enclave" android:host="vsock${f}" android:port="${6000 + f}" android:pathPrefix="/cid16/${f}" android:mimeType="application/vnd.enclave.sgx" />`);
+        lines.push(`      </intent-filter>`);
+    }
+    // Meta-data canary bait (counts toward detailBytes / intentValues).
+    for (const rec of deception.textRecords.slice(0, 8)) {
+        lines.push(`      <meta-data android:name="bla.canary.${prng.hex(4)}" android:value="${escAttr(rec.slice(0, 200))}" />`);
+    }
+    for (const c of chaff.slice(0, 4)) {
+        lines.push(`      <meta-data android:name="bla.chaff.${c.id}" android:value="${escAttr(c.rawText.slice(0, 160))}" />`);
+    }
+    lines.push(`    </activity>`);
+    // Capacity flood: named components past the 512 cap, with long relative
+    // names so resolvedNameBytes burns out and later names stay unresolved.
+    // Already emitted: nestedDollar + unresolvedTokens + 1 heavy provider + 1 heavy activity.
+    const alreadyNamed = nestedDollarNames + unresolvedTokenNames + 2;
+    const remainingNamed = Math.max(0, namedTarget - alreadyNamed);
+    const padAlphabet = "abcdefghijklmnopqrstuvwxyz0123456789_";
+    const makePad = (n) => {
+        let out = "";
+        while (out.length < n) {
+            out += padAlphabet[prng.nextInt(0, padAlphabet.length - 1)];
+        }
+        return out.slice(0, n);
+    };
+    for (let i = 0; i < remainingNamed; i++) {
+        const kind = kinds[i % kinds.length];
+        // Relative name (leading '.') so REA resolves against package and charges
+        // packageNameBytes + declaredBytes against the 1 MiB name budget.
+        const pad = makePad(scale.namePadChars);
+        const declared = `.EnclaveStateNode_${prng.hex(6)}_${i}_${pad}`;
+        if (kind === "activity-alias") {
+            // targetActivity deliberately does NOT match a preceding activity →
+            // unresolvedTargetActivities limitation.
+            lines.push(`    <activity-alias android:name="${escAttr(declared)}" android:targetActivity=".MissingTarget$${i}" android:exported="false" />`);
+        }
+        else if (kind === "provider") {
+            lines.push(`    <provider android:name="${escAttr(declared)}" android:authorities="com.enclave.tarpit.${i}" android:exported="false" />`);
+        }
+        else if (kind === "service") {
+            lines.push(`    <service android:name="${escAttr(declared)}" android:exported="false" android:foregroundServiceType="dataSync" />`);
+        }
+        else {
+            lines.push(`    <${kind} android:name="${escAttr(declared)}" android:exported="false" />`);
+        }
+    }
+    // Unnamed flood — every declaration without android:name counts against the
+    // bound but is omitted from items, forcing truncated=true.
+    let unnamedComponentsEmitted = 0;
+    for (let i = 0; i < scale.unnamed; i++) {
+        const kind = kinds[i % 3]; // activity/service/receiver only (alias/provider need name more often)
+        lines.push(`    <${kind} android:exported="false" />`);
+        unnamedComponentsEmitted += 1;
+    }
+    lines.push(`  </application>`, `</manifest>`, ``);
+    const namedComponentsEmitted = alreadyNamed + remainingNamed;
+    return {
+        manifestXml: lines.join("\n"),
+        namedComponentsEmitted,
+        unnamedComponentsEmitted,
+        unresolvedTokenNames,
+        nestedDollarNames,
+        intentFiltersPerHeavy,
+        authoritySegmentsEmitted,
+        chaffPayloadsEmbedded: chaff.length,
+        canaryTokensEmbedded: deception.canary.syntheticCanaryTokens.length,
+        diagnosticsEmbedded: deception.diagnostics.diagnosticsInjected.length,
+    };
+}
+//# sourceMappingURL=android-manifest.js.map

package/dist/shields/formats/android-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"android-manifest.js","sourceRoot":"","sources":["../../../src/shields/formats/android-manifest.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAsBnF,MAAM,YAAY,GAAG,gCAAgC,CAAC;AAEtD,oFAAoF;AACpF,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,cAAc,CAAC,SAA8B;IAUpD,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,GAAG,GAAG,mBAAmB,CAAC,2BAA2B,CAAC;IAC5D,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO;gBACL,YAAY,EAAE,EAAE;gBAChB,OAAO,EAAE,CAAC;gBACV,gBAAgB,EAAE,CAAC;gBACnB,YAAY,EAAE,CAAC;gBACf,YAAY,EAAE,KAAK;gBACnB,kBAAkB,EAAE,mBAAmB,CAAC,+BAA+B,GAAG,CAAC;gBAC3E,iBAAiB,EAAE,mBAAmB,CAAC,4BAA4B,GAAG,CAAC;gBACvE,eAAe,EAAE,GAAG;aACrB,CAAC;QACJ,KAAK,SAAS,CAAC;QACf,KAAK,UAAU;YACb,OAAO;gBACL,YAAY,EAAE,GAAG;gBACjB,OAAO,EAAE,EAAE;gBACX,gBAAgB,EAAE,EAAE;gBACpB,YAAY,EAAE,EAAE;gBAChB,YAAY,EAAE,KAAK;gBACnB,kBAAkB,EAAE,mBAAmB,CAAC,+BAA+B,GAAG,CAAC;gBAC3E,iBAAiB,EAAE,mBAAmB,CAAC,4BAA4B,GAAG,CAAC;gBACvE,eAAe,EAAE,KAAK;aACvB,CAAC;QACJ,KAAK,UAAU,CAAC;QAChB;YACE,OAAO;gBACL,YAAY,EAAE,EAAE;gBAChB,OAAO,EAAE,EAAE;gBACX,gBAAgB,EAAE,EAAE;gBACpB,YAAY,EAAE,EAAE;gBAChB,YAAY,EAAE,KAAK;gBACnB,kBAAkB,EAAE,mBAAmB,CAAC,+BAA+B,GAAG,CAAC;gBAC3E,iBAAiB,EAAE,mBAAmB,CAAC,4BAA4B,GAAG,EAAE;gBACxE,eAAe,EAAE,KAAK;aACvB,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,8BAA8B,CAC5C,IAAgB,EAChB,YAAiC,UAAU;IAE3C,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEpE,MAAM,GAAG,GAAG,mBAAmB,CAAC,2BAA2B,CAAC;IAC5D,MAAM,WAAW,GAAG,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC;IAE7C,MAAM,KAAK,GAAG;QACZ,UAAU;QACV,SAAS;QACT,UAAU;QACV,UAAU;QACV,gBAAgB;KACR,CAAC;IAEX,MAAM,KAAK,GAAa;QACtB,wCAAwC;QACxC,4FAA4F;QAC5F,sEAAsE;QACtE,gBAAgB,YAAY,GAAG;QAC/B,6BAA6B;QAC7B,mDAAmD;QACnD,yEAAyE;QACzE,kEAAkE;QAClE,4EAA4E;QAC5E,gBAAgB;QAChB,gDAAgD;QAChD,kEAAkE;QAClE,oCAAoC;KACrC,CAAC;IAEF,wEAAwE;IACxE,wEAAwE;IACxE,MAAM,WAAW,GAAa;QAC5B,uCAAuC;QACvC,0CAA0C;QAC1C,sCAAsC;QACtC,uCAAuC;KACxC,CAAC;IACF,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CACR,+BAA+B,OAAO,CAAC,QAAQ,CAAC,oDAAoD,EACpG,uBAAuB,EACvB,sEAAsE,CAAC,MAAM,EAC7E,qEAAqE,EACrE,wBAAwB,EACxB,6DAA6D,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,MAAM,EACzJ,iBAAiB,CAClB,CAAC;QACF,iBAAiB,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,6CAA6C;IAC7C,KAAK,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,qBAAqB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9D,KAAK,CAAC,IAAI,CACR,+BAA+B,OAAO,CAAC,QAAQ,CAAC,+BAA+B,CAChF,CAAC;QACF,iBAAiB,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,kFAAkF;IAClF,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAE,CAAC;QACtC,MAAM,KAAK,GACT,CAAC,GAAG,CAAC,KAAK,CAAC;YACT,CAAC,CAAC,0BAA0B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACzC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;gBACX,CAAC,CAAC,iCAAiC,CAAC,GAAG;gBACvC,CAAC,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACtC,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CACR,qCAAqC,OAAO,CAAC,KAAK,CAAC,8FAA8F,CAClJ,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CACR,+BAA+B,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,+BAA+B,CAC1H,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CACR,QAAQ,IAAI,kBAAkB,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAC5E,CAAC;QACJ,CAAC;QACD,oBAAoB,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,gFAAgF;IAChF,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YACjB,uEAAuE;YACvE,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,IAAI,CAAC,wBAAwB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,MAAM,wBAAwB,GAAG,cAAc,CAAC,MAAM,CAAC;IACvD,KAAK,CAAC,IAAI,CACR,eAAe,EACf,uDAAuD,EACvD,gCAAgC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EACpE,sDAAsD,EACtD,8DAA8D,EAC9D,oEAAoE,EACpE,sEAAsE,EACtE,2EAA2E,CAC5E,CAAC;IAEF,wEAAwE;IACxE,0EAA0E;IAC1E,MAAM,qBAAqB,GAAG,KAAK,CAAC,kBAAkB,CAAC;IACvD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IACrD,KAAK,CAAC,IAAI,CACR,eAAe,EACf,kEAAkE,EAClE,sDAAsD,EACtD,oDAAoD,EACpD,6BAA6B,OAAO,CAAC,UAAU,CAAC,IAAI,CACrD,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,qBAAqB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,0CAA0C,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;QACnE,8DAA8D;QAC9D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAC/B,mBAAmB,CAAC,8BAA8B,GAAG,CAAC,CACvD,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CACR,8DAA8D,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAC1F,CAAC;QACJ,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CACR,kEAAkE,CAAC,IAAI,CAAC,MAAM,CAC/E,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CACR,6DAA6D,CAAC,mBAAmB,IAAI,GAAG,CAAC,gCAAgC,CAAC,qDAAqD,CAChL,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACvC,CAAC;IACD,oEAAoE;IACpE,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CACR,6CAA6C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,oBAAoB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAC7G,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CACR,4CAA4C,CAAC,CAAC,EAAE,oBAAoB,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAC3G,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAE9B,wEAAwE;IACxE,wEAAwE;IACxE,0FAA0F;IAC1F,MAAM,YAAY,GAAG,iBAAiB,GAAG,oBAAoB,GAAG,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,uCAAuC,CAAC;IAC5D,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE;QACpC,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAE,CAAC;QAC/D,CAAC;QACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,CAAC,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAE,CAAC;QACtC,0EAA0E;QAC1E,kEAAkE;QAClE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,qBAAqB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QAChE,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC9B,oEAAoE;YACpE,yCAAyC;YACzC,KAAK,CAAC,IAAI,CACR,qCAAqC,OAAO,CAAC,QAAQ,CAAC,4CAA4C,CAAC,+BAA+B,CACnI,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CACR,+BAA+B,OAAO,CAAC,QAAQ,CAAC,6CAA6C,CAAC,+BAA+B,CAC9H,CAAC;QACJ,CAAC;aAAM,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CACR,8BAA8B,OAAO,CAAC,QAAQ,CAAC,wEAAwE,CACxH,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CACR,QAAQ,IAAI,kBAAkB,OAAO,CAAC,QAAQ,CAAC,+BAA+B,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,2DAA2D;IAC3D,IAAI,wBAAwB,GAAG,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,uEAAuE;QACnG,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,8BAA8B,CAAC,CAAC;QACvD,wBAAwB,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IAElD,MAAM,sBAAsB,GAAG,YAAY,GAAG,cAAc,CAAC;IAC7D,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAC7B,sBAAsB;QACtB,wBAAwB;QACxB,oBAAoB;QACpB,iBAAiB;QACjB,qBAAqB;QACrB,wBAAwB;QACxB,qBAAqB,EAAE,KAAK,CAAC,MAAM;QACnC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM;QACnE,mBAAmB,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC,MAAM;KACtE,CAAC;AACJ,CAAC"}

package/dist/shields/formats/android-r8.d.ts

@@ -0,0 +1,44 @@
+import { SeededPrng } from "../../core/prng.js";
+import type { ProtectionIntensity } from "../../core/types.js";
+export interface AndroidR8CounterResult {
+    /** Valid ProGuard / R8 mapping.txt with residual conflicts + malformed bait. */
+    readonly mappingText: string;
+    /** Distinct original classes that collide on one residual (past REA candidates: 8). */
+    readonly residualConflictCount: number;
+    /** Malformed mapping lines retained past REA malformedSamples: 16. */
+    readonly malformedSampleCount: number;
+    /** Total class records emitted (unique + conflicting). */
+    readonly classRecordsEmitted: number;
+    /** JNI-mangled `Java_*` export names planted in the decoy .so. */
+    readonly jniExportNames: readonly string[];
+    /** Minimal ELF64 AArch64 ET_DYN with those `Java_*` dynsym exports. */
+    readonly jniElfBuffer: Buffer;
+    readonly chaffPayloadsEmbedded: number;
+    readonly canaryTokensEmbedded: number;
+    readonly diagnosticsEmbedded: number;
+}
+/**
+ * JNI short-name mangling (mirrors REA `androidJniBindings.ts` escape rules):
+ * `/` → `_`, `_` → `_1`, `;` → `_2`, `[` → `_3`, else `_0XXXX` for non-alnum.
+ */
+export declare function mangleJniIdentifier(value: string): string;
+/** Build `Java_<pkg>_<Class>_<method>` short names matching decoy DEX enclave classes. */
+export declare function buildJniExportNames(prng: SeededPrng, count: number): string[];
+/**
+ * Minimal ELF64 little-endian AArch64 shared object (`ET_DYN`) with a real
+ * `.dynsym` / `.dynstr` / `.shstrtab` so REA's `parseNativeExports` admits the
+ * planted `Java_*` JNI export names (basis `jni-export` in #7472).
+ *
+ * Red-line safe: this is a NEW decoy `.so` injected under `lib/arm64-v8a/`,
+ * never a rewrite of the developer's existing native libraries.
+ */
+export declare function buildJniDecoyElf64(exportNames: readonly string[]): Buffer;
+/**
+ * Generates a caller-tempting ProGuard / R8 `mapping.txt` plus a decoy
+ * `libbla_enclave_jni.so` that counter REA's new Android analyzers:
+ * - #7456 `AndroidMappingFile` / `parseProguardMapping` (residual conflicts past
+ *   `candidates: 8`, malformed samples past `malformedSamples: 16`)
+ * - #7472 `projectAndroidJniBindings` (static `Java_*` export ↔ declaration linking)
+ */
+export declare function generateAndroidR8Counter(prng: SeededPrng, intensity?: ProtectionIntensity): AndroidR8CounterResult;
+//# sourceMappingURL=android-r8.d.ts.map

package/dist/shields/formats/android-r8.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"android-r8.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/android-r8.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAK/D,MAAM,WAAW,sBAAsB;IACrC,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,uFAAuF;IACvF,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,sEAAsE;IACtE,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,0DAA0D;IAC1D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,kEAAkE;IAClE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,uEAAuE;IACvE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAoBzD;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,MAAM,GACZ,MAAM,EAAE,CAaV;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAgHzE;AAsCD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,UAAU,EAChB,SAAS,GAAE,mBAAgC,GAC1C,sBAAsB,CAoExB"}

package/dist/shields/formats/android-r8.js

@@ -0,0 +1,246 @@
+import { REA_INTERNAL_LIMITS } from "../../identity.js";
+import { generateChaffPayloads } from "../chaff/chaff-generator.js";
+import { buildCanaryAndDiagnosticPayloads } from "../deception/format-payloads.js";
+/**
+ * JNI short-name mangling (mirrors REA `androidJniBindings.ts` escape rules):
+ * `/` → `_`, `_` → `_1`, `;` → `_2`, `[` → `_3`, else `_0XXXX` for non-alnum.
+ */
+export function mangleJniIdentifier(value) {
+    let result = "";
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        const ch = value[i];
+        if (code === 47)
+            result += "_";
+        else if (code === 95)
+            result += "_1";
+        else if (code === 59)
+            result += "_2";
+        else if (code === 91)
+            result += "_3";
+        else if ((code >= 48 && code <= 57) ||
+            (code >= 65 && code <= 90) ||
+            (code >= 97 && code <= 122)) {
+            result += ch;
+        }
+        else {
+            result += `_0${code.toString(16).padStart(4, "0")}`;
+        }
+    }
+    return result;
+}
+/** Build `Java_<pkg>_<Class>_<method>` short names matching decoy DEX enclave classes. */
+export function buildJniExportNames(prng, count) {
+    const names = [
+        "Java_com_enclave_sgx_TeeAttestationBridge_verifyShamirEd25519QuorumRing",
+        "Java_com_enclave_tpm2_KeyUnsealerStub_unsealVsockCid16Frame",
+        "Java_com_enclave_nitro_VsockRing0Transport_openAttestedChannel",
+    ];
+    for (let i = 0; i < count; i++) {
+        const hex = prng.hex(6);
+        const cls = mangleJniIdentifier(`com/enclave/tarpit/EnclaveStateNode_${hex}_${i}`);
+        const method = mangleJniIdentifier(`nativeUnseal_${hex}`);
+        names.push(`Java_${cls}_${method}`);
+    }
+    return names;
+}
+/**
+ * Minimal ELF64 little-endian AArch64 shared object (`ET_DYN`) with a real
+ * `.dynsym` / `.dynstr` / `.shstrtab` so REA's `parseNativeExports` admits the
+ * planted `Java_*` JNI export names (basis `jni-export` in #7472).
+ *
+ * Red-line safe: this is a NEW decoy `.so` injected under `lib/arm64-v8a/`,
+ * never a rewrite of the developer's existing native libraries.
+ */
+export function buildJniDecoyElf64(exportNames) {
+    const SHT_NULL = 0;
+    const SHT_STRTAB = 3;
+    const SHT_DYNSYM = 11;
+    const SHN_UNDEF = 0;
+    const STB_GLOBAL = 1;
+    const STT_FUNC = 2;
+    const ST_INFO_GLOBAL_FUNC = (STB_GLOBAL << 4) | STT_FUNC;
+    const EM_AARCH64 = 183;
+    const ET_DYN = 3;
+    const EI_CLASS_64 = 2;
+    const EI_DATA_LE = 1;
+    const symbolWidth = 24;
+    const sectionWidth = 64;
+    // dynstr: leading NUL + each export name + NUL
+    const dynstrParts = [Buffer.from([0])];
+    const nameOffsets = [0]; // null symbol
+    let dynstrBytes = 1;
+    for (const name of exportNames) {
+        nameOffsets.push(dynstrBytes);
+        const encoded = Buffer.from(`${name}\0`, "utf8");
+        dynstrParts.push(encoded);
+        dynstrBytes += encoded.length;
+    }
+    const dynstr = Buffer.concat(dynstrParts);
+    // symbols: null entry + one STT_FUNC GLOBAL per export
+    const symbolCount = 1 + exportNames.length;
+    const dynsym = Buffer.alloc(symbolCount * symbolWidth, 0);
+    for (let i = 1; i < symbolCount; i++) {
+        const at = i * symbolWidth;
+        dynsym.writeUInt32LE(nameOffsets[i], at); // st_name
+        dynsym[at + 4] = ST_INFO_GLOBAL_FUNC; // st_info
+        dynsym[at + 5] = 0; // st_other
+        dynsym.writeUInt16LE(SHN_UNDEF, at + 6); // st_shndx (undefined — name-only decoy)
+        // st_value / st_size remain 0
+    }
+    const shstrtab = Buffer.from("\0.dynsym\0.dynstr\0.shstrtab\0", "latin1");
+    // name offsets inside shstrtab
+    const SH_NAME_DYNSYM = 1;
+    const SH_NAME_DYNSTR = 9;
+    const SH_NAME_SHSTRTAB = 17;
+    let cursor = 0x100;
+    const align = (n) => Math.ceil(n / 16) * 16;
+    const place = (size) => {
+        const offset = cursor;
+        cursor = align(cursor + size);
+        return offset;
+    };
+    const dynsymAt = place(dynsym.length);
+    const dynstrAt = place(dynstr.length);
+    const shstrtabAt = place(shstrtab.length);
+    const sectionAt = place(4 * sectionWidth); // NULL + 3 sections
+    const bytes = Buffer.alloc(cursor, 0);
+    // ELF64 header
+    bytes[0] = 0x7f;
+    bytes[1] = 0x45;
+    bytes[2] = 0x4c;
+    bytes[3] = 0x46;
+    bytes[4] = EI_CLASS_64;
+    bytes[5] = EI_DATA_LE;
+    bytes[6] = 1; // EV_CURRENT
+    bytes.writeUInt16LE(ET_DYN, 16);
+    bytes.writeUInt16LE(EM_AARCH64, 18);
+    bytes.writeUInt32LE(1, 20); // e_version
+    // e_entry = 0
+    // e_phoff = 0
+    bytes.writeBigUInt64LE(BigInt(sectionAt), 40); // e_shoff
+    bytes.writeUInt16LE(64, 52); // e_ehsize
+    bytes.writeUInt16LE(56, 54); // e_phentsize
+    // e_phnum = 0
+    bytes.writeUInt16LE(sectionWidth, 58); // e_shentsize
+    bytes.writeUInt16LE(4, 60); // e_shnum
+    bytes.writeUInt16LE(3, 62); // e_shstrndx = .shstrtab
+    dynsym.copy(bytes, dynsymAt);
+    dynstr.copy(bytes, dynstrAt);
+    shstrtab.copy(bytes, shstrtabAt);
+    const writeSection = (index, nameOff, type, offset, size, link, info, entsize) => {
+        const at = sectionAt + index * sectionWidth;
+        bytes.writeUInt32LE(nameOff, at);
+        bytes.writeUInt32LE(type, at + 4);
+        // sh_flags = 0
+        bytes.writeBigUInt64LE(BigInt(offset), at + 24); // sh_offset
+        bytes.writeBigUInt64LE(BigInt(size), at + 32); // sh_size
+        bytes.writeUInt32LE(link, at + 40);
+        bytes.writeUInt32LE(info, at + 44);
+        bytes.writeBigUInt64LE(BigInt(entsize), at + 56);
+    };
+    writeSection(0, 0, SHT_NULL, 0, 0, 0, 0, 0);
+    // .dynsym links to .dynstr (section index 2); info = first non-local symbol (=1)
+    writeSection(1, SH_NAME_DYNSYM, SHT_DYNSYM, dynsymAt, dynsym.length, 2, 1, symbolWidth);
+    writeSection(2, SH_NAME_DYNSTR, SHT_STRTAB, dynstrAt, dynstr.length, 0, 0, 0);
+    writeSection(3, SH_NAME_SHSTRTAB, SHT_STRTAB, shstrtabAt, shstrtab.length, 0, 0, 0);
+    return bytes;
+}
+function intensityScale(intensity) {
+    // Always exceed PROGUARD_MAPPING_CANDIDATES (8) and malformedSamples (16).
+    const candidates = REA_INTERNAL_LIMITS.PROGUARD_MAPPING_CANDIDATES;
+    const malformedFloor = REA_INTERNAL_LIMITS.PROGUARD_MAPPING_MALFORMED_SAMPLES;
+    switch (intensity) {
+        case "stealth":
+            return {
+                conflicts: candidates + 4,
+                uniqueClasses: 16,
+                jniExports: 16,
+                malformed: malformedFloor + 4,
+            };
+        case "maximum":
+        case "bankrupt":
+            return {
+                conflicts: candidates * 8,
+                uniqueClasses: 96,
+                jniExports: 96,
+                malformed: malformedFloor * 3,
+            };
+        case "balanced":
+        default:
+            return {
+                conflicts: candidates * 3,
+                uniqueClasses: 32,
+                jniExports: 32,
+                malformed: malformedFloor + 8,
+            };
+    }
+}
+/**
+ * Generates a caller-tempting ProGuard / R8 `mapping.txt` plus a decoy
+ * `libbla_enclave_jni.so` that counter REA's new Android analyzers:
+ * - #7456 `AndroidMappingFile` / `parseProguardMapping` (residual conflicts past
+ *   `candidates: 8`, malformed samples past `malformedSamples: 16`)
+ * - #7472 `projectAndroidJniBindings` (static `Java_*` export ↔ declaration linking)
+ */
+export function generateAndroidR8Counter(prng, intensity = "balanced") {
+    const scale = intensityScale(intensity);
+    const chaff = generateChaffPayloads(prng, intensity);
+    const deception = buildCanaryAndDiagnosticPayloads(prng, intensity);
+    const lines = [
+        "# compiler: R8",
+        "# compiler_version: 8.7.18-bla-enclave",
+        "# min_api: 24",
+        `# pg_map_id: ${prng.hex(8)}`,
+        `# pg_map_hash: sha-256 ${prng.hex(32)}`,
+        "# bla-shield: decoy mapping — applying this file poisons REA residual resolution",
+        "",
+    ];
+    // Residual collision cluster: many originals → same obfuscated residual `a.a.a`
+    // so resolveProguardClass truncates at candidates: 8 and surfaces conflict.
+    const residual = "a.a.a";
+    for (let i = 0; i < scale.conflicts; i++) {
+        const original = `com.enclave.sgx.TeeAttestationBridge$${prng.hex(4)}$${i}`;
+        lines.push(`${original} -> ${residual}:`);
+        lines.push(`    int sealedCid -> a`);
+        lines.push(`    1:10:boolean verifyShamirEd25519QuorumRing(java.nio.ByteBuffer,byte[]) -> a`);
+    }
+    // Unique decoy class records (enclave / tarpit naming consistent with DEX shield)
+    for (let i = 0; i < scale.uniqueClasses; i++) {
+        const hex = prng.hex(6);
+        const original = `com.enclave.tarpit.EnclaveStateNode_${hex}_${i}`;
+        const mapped = `b.${String.fromCharCode(97 + (i % 26))}.${prng.hex(2)}`;
+        lines.push(`${original} -> ${mapped}:`);
+        lines.push(`    long vsockHandle -> a`);
+        lines.push(`    1:5:void nativeUnseal_${hex}() -> a`);
+    }
+    // Malformed bait — lines that fail CLASS/FIELD/METHOD regexes so REA retains
+    // them under malformedSamples (cap 16) then drops the rest.
+    for (let i = 0; i < scale.malformed; i++) {
+        lines.push(`<<<MALFORMED_MAPPING_BAIT_${i}_${prng.hex(4)} not a class line`);
+        lines.push(`    !!broken field ${i}`);
+        lines.push(`  1:2:notAType brokenMethod( -> xx`);
+    }
+    // Canary / diagnostic text as mapping comments (harmless to the grammar)
+    for (const rec of deception.textRecords.slice(0, 8)) {
+        lines.push(`# ${rec}`);
+    }
+    for (const c of chaff.slice(0, 4)) {
+        lines.push(`# chaff:${c.id}:${c.rawText.slice(0, 120)}`);
+    }
+    const mappingText = lines.join("\n") + "\n";
+    const jniExportNames = buildJniExportNames(prng, scale.jniExports);
+    const jniElfBuffer = buildJniDecoyElf64(jniExportNames);
+    return {
+        mappingText,
+        residualConflictCount: scale.conflicts,
+        malformedSampleCount: scale.malformed,
+        classRecordsEmitted: scale.conflicts + scale.uniqueClasses,
+        jniExportNames,
+        jniElfBuffer,
+        chaffPayloadsEmbedded: chaff.length,
+        canaryTokensEmbedded: deception.canary.syntheticCanaryTokens.length,
+        diagnosticsEmbedded: deception.diagnostics.diagnosticsInjected.length,
+    };
+}
+//# sourceMappingURL=android-r8.js.map

package/dist/shields/formats/android-r8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"android-r8.js","sourceRoot":"","sources":["../../../src/shields/formats/android-r8.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAoBnF;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,IAAI,GAAG,CAAC;aAC1B,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,IAAI,IAAI,CAAC;aAChC,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,IAAI,IAAI,CAAC;aAChC,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM,IAAI,IAAI,CAAC;aAChC,IACH,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YAC1B,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YAC1B,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC,EAC3B,CAAC;YACD,MAAM,IAAI,EAAE,CAAC;QACf,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,mBAAmB,CACjC,IAAgB,EAChB,KAAa;IAEb,MAAM,KAAK,GAAa;QACtB,yEAAyE;QACzE,6DAA6D;QAC7D,gEAAgE;KACjE,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,mBAAmB,CAAC,uCAAuC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,mBAAmB,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,MAAM,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,WAA8B;IAC/D,MAAM,QAAQ,GAAG,CAAC,CAAC;IACnB,MAAM,UAAU,GAAG,CAAC,CAAC;IACrB,MAAM,UAAU,GAAG,EAAE,CAAC;IACtB,MAAM,SAAS,GAAG,CAAC,CAAC;IACpB,MAAM,UAAU,GAAG,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,CAAC,CAAC;IACnB,MAAM,mBAAmB,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,QAAQ,CAAC;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC;IACvB,MAAM,MAAM,GAAG,CAAC,CAAC;IACjB,MAAM,WAAW,GAAG,CAAC,CAAC;IACtB,MAAM,UAAU,GAAG,CAAC,CAAC;IACrB,MAAM,WAAW,GAAG,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,EAAE,CAAC;IAExB,+CAA+C;IAC/C,MAAM,WAAW,GAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,WAAW,GAAa,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;IACjD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAChC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAE1C,uDAAuD;IACvD,MAAM,WAAW,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,EAAE,GAAG,CAAC,GAAG,WAAW,CAAC;QAC3B,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACrD,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC,UAAU;QAChD,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW;QAC/B,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,yCAAyC;QAClF,8BAA8B;IAChC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,iCAAiC,EAAE,QAAQ,CAAC,CAAC;IAC1E,+BAA+B;IAC/B,MAAM,cAAc,GAAG,CAAC,CAAC;IACzB,MAAM,cAAc,GAAG,CAAC,CAAC;IACzB,MAAM,gBAAgB,GAAG,EAAE,CAAC;IAE5B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAU,EAAE;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC;QACtB,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,oBAAoB;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEtC,eAAe;IACf,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,KAAK,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;IACvB,KAAK,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;IACtB,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa;IAC3B,KAAK,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChC,KAAK,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACpC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY;IACxC,cAAc;IACd,cAAc;IACd,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;IACzD,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;IACxC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc;IAC3C,cAAc;IACd,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc;IACrD,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;IACtC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,yBAAyB;IAErD,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7B,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7B,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAEjC,MAAM,YAAY,GAAG,CACnB,KAAa,EACb,OAAe,EACf,IAAY,EACZ,MAAc,EACd,IAAY,EACZ,IAAY,EACZ,IAAY,EACZ,OAAe,EACf,EAAE;QACF,MAAM,EAAE,GAAG,SAAS,GAAG,KAAK,GAAG,YAAY,CAAC;QAC5C,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAClC,eAAe;QACf,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,YAAY;QAC7D,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU;QACzD,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC;IAEF,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,iFAAiF;IACjF,YAAY,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;IACxF,YAAY,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,YAAY,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAEpF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,SAA8B;IAMpD,2EAA2E;IAC3E,MAAM,UAAU,GAAG,mBAAmB,CAAC,2BAA2B,CAAC;IACnE,MAAM,cAAc,GAAG,mBAAmB,CAAC,kCAAkC,CAAC;IAC9E,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO;gBACL,SAAS,EAAE,UAAU,GAAG,CAAC;gBACzB,aAAa,EAAE,EAAE;gBACjB,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,cAAc,GAAG,CAAC;aAC9B,CAAC;QACJ,KAAK,SAAS,CAAC;QACf,KAAK,UAAU;YACb,OAAO;gBACL,SAAS,EAAE,UAAU,GAAG,CAAC;gBACzB,aAAa,EAAE,EAAE;gBACjB,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,cAAc,GAAG,CAAC;aAC9B,CAAC;QACJ,KAAK,UAAU,CAAC;QAChB;YACE,OAAO;gBACL,SAAS,EAAE,UAAU,GAAG,CAAC;gBACzB,aAAa,EAAE,EAAE;gBACjB,UAAU,EAAE,EAAE;gBACd,SAAS,EAAE,cAAc,GAAG,CAAC;aAC9B,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAgB,EAChB,YAAiC,UAAU;IAE3C,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEpE,MAAM,KAAK,GAAa;QACtB,gBAAgB;QAChB,wCAAwC;QACxC,eAAe;QACf,gBAAgB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QAC7B,0BAA0B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QACxC,kFAAkF;QAClF,EAAE;KACH,CAAC;IAEF,gFAAgF;IAChF,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,wCAAwC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5E,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,OAAO,QAAQ,GAAG,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CACR,iFAAiF,CAClF,CAAC;IACJ,CAAC;IAED,kFAAkF;IAClF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG,uCAAuC,GAAG,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,MAAM,GAAG,KAAK,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,OAAO,MAAM,GAAG,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;IACxD,CAAC;IAED,6EAA6E;IAC7E,4DAA4D;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAC7E,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACnD,CAAC;IAED,yEAAyE;IACzE,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC;IACzB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5C,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;IAExD,OAAO;QACL,WAAW;QACX,qBAAqB,EAAE,KAAK,CAAC,SAAS;QACtC,oBAAoB,EAAE,KAAK,CAAC,SAAS;QACrC,mBAAmB,EAAE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,aAAa;QAC1D,cAAc;QACd,YAAY;QACZ,qBAAqB,EAAE,KAAK,CAAC,MAAM;QACnC,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM;QACnE,mBAAmB,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC,MAAM;KACtE,CAAC;AACJ,CAAC"}

package/dist/shields/formats/apple-plist.d.ts

@@ -7,6 +7,10 @@ export interface ApplePlistShieldResult {
     readonly xmlPlist: string;
     readonly triggersInternalSubsetBudgetAbort: boolean;
     readonly decoyEnclaveEntitlementsAdded: number;
+    readonly canaryTokensEmbedded: number;
+    readonly diagnosticsEmbedded: number;
+    /** True when bplist trailer claims nesting deeper than REA_MAX_BINARY_PLIST_NESTING_DEPTH. */
+    readonly exceedsBinaryPlistNestingDepth: boolean;
 }
 /**
  * Protects Apple XML Property Lists (`Info.plist`, `Entitlements.plist`) against
@@ -28,4 +32,15 @@ export declare function protectAppleXmlPlist(rawXml: string, options?: {
     readonly intensity?: ProtectionIntensity;
     readonly seed?: string | number;
 }): ApplePlistShieldResult;
+export declare function protectApplePlistBuffer(rawBuffer: Buffer, options?: {
+    readonly intensity?: ProtectionIntensity;
+    readonly seed?: string | number;
+}): {
+    readonly buffer: Buffer;
+    readonly triggersBudgetAbort: boolean;
+    readonly decoyEnclaveEntitlementsAdded: number;
+    readonly canaryTokensEmbedded: number;
+    readonly diagnosticsEmbedded: number;
+    readonly exceedsBinaryPlistNestingDepth: boolean;
+};
 //# sourceMappingURL=apple-plist.d.ts.map

package/dist/shields/formats/apple-plist.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apple-plist.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/apple-plist.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D;;GAEG;AACH,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iCAAiC,EAAE,OAAO,CAAC;IACpD,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;CAChD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IACP,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B,GACL,sBAAsB,CAmDxB"}
+{"version":3,"file":"apple-plist.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/apple-plist.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D;;GAEG;AACH,eAAO,MAAM,kCAAkC,MAAM,CAAC;AAEtD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iCAAiC,EAAE,OAAO,CAAC;IACpD,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,8FAA8F;IAC9F,QAAQ,CAAC,8BAA8B,EAAE,OAAO,CAAC;CAClD;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IACP,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B,GACL,sBAAsB,CA8ExB;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE;IACP,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B,GACL;IACD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,8BAA8B,EAAE,OAAO,CAAC;CAClD,CAmCA"}