bla-agents 1.1.0 → 1.6.0

package/dist/shields/formats/go-flutter-exhaustion.js

@@ -0,0 +1,346 @@
+import { REA_INTERNAL_LIMITS } from "../../identity.js";
+function writeGoUvarint(value) {
+    const out = [];
+    let n = value >>> 0;
+    while (n >= 0x80) {
+        out.push((n & 0x7f) | 0x80);
+        n >>>= 7;
+    }
+    out.push(n);
+    return Buffer.from(out);
+}
+const GO_MAGIC = Buffer.from("ff20476f206275696c64696e663a", "hex");
+const MODULE_START = Buffer.from("3077af0c9274080241e1c107e6d618e6", "hex");
+const MODULE_END = Buffer.from("f932433186182072008242104116d8f2", "hex");
+/**
+ * Framed Go buildinfo (magic `\xff Go buildinf:` + inline encoding) with
+ * MODULE_START/END wrapping, plus `.gopclntab` / `runtime.moduledata` bait.
+ * Bankrupt/maximum pad the module past `MAX_BUILD_INFO_BYTES` (1 MiB).
+ *
+ * Trailer placement poisons whole-file scanners. Prefer
+ * {@link buildMappedGoBuildInfoPlant} inside a real `.go.buildinfo` section /
+ * writable PT_LOAD so REA's mapped parser (`GoBuildInfoSearch`) trips.
+ */
+export function buildGoBuildInfoExhaustionPayload(prng, intensity = "balanced") {
+    const padAlign = Buffer.alloc(16, 0);
+    const version = Buffer.from("go1.22.5", "utf8");
+    const canaryLines = [
+        "path\tgithub.com/tee-enclave/zero-trust-shim\n",
+        `mod\tgithub.com/tee-enclave/zero-trust-shim\tv4.2.0\th1:${prng.hex(32)}=\n`,
+        `dep\tgithub.com/intel-sgx/enclave-sdk-go\tv2.14.0\th1:${prng.hex(32)}=\n`,
+        `dep\tgithub.com/google/go-tpm-tools\tv0.4.4\th1:${prng.hex(32)}=\n`,
+        "build\t-compiler=gc\n",
+        "build\tCGO_ENABLED=1\n",
+        `build\tBLA_CANARY=${prng.hex(16)}\n`,
+    ];
+    let moduleBody = Buffer.from(canaryLines.join(""), "utf8");
+    const target = intensity === "bankrupt" || intensity === "maximum"
+        ? REA_INTERNAL_LIMITS.GO_MAX_BUILD_INFO_BYTES + 4096
+        : Math.min(24_000, REA_INTERNAL_LIMITS.GO_MAX_BUILD_INFO_BYTES >> 3);
+    if (version.length + moduleBody.length < target) {
+        const need = target - version.length - moduleBody.length;
+        const noise = Buffer.from(`\npath\tgithub.com/bla/tarpit/${prng.hex(8)}\n` +
+            "A".repeat(Math.max(0, need - 40)), "utf8");
+        moduleBody = Buffer.concat([moduleBody, noise]);
+    }
+    const moduleFramed = Buffer.concat([
+        MODULE_START,
+        moduleBody,
+        Buffer.from("\n", "utf8"),
+        MODULE_END,
+    ]);
+    const exceeds = version.length + moduleFramed.length >
+        REA_INTERNAL_LIMITS.GO_MAX_BUILD_INFO_BYTES;
+    const header = Buffer.alloc(32, 0);
+    GO_MAGIC.copy(header, 0);
+    header[14] = 8; // ptrSize
+    header[15] = 2; // flags: bit1 => inline encoding
+    const pclntabBait = Buffer.from("\0[BLA-GO-BUILDINFO]\0.gopclntab\0runtime.moduledata\0__gopclntab\0runtime.pclntab\0\xfb\xff\xff\xff\x00\x00", "latin1");
+    return {
+        buffer: Buffer.concat([
+            padAlign,
+            header,
+            writeGoUvarint(version.length),
+            version,
+            writeGoUvarint(moduleFramed.length),
+            moduleFramed,
+            pclntabBait,
+        ]),
+        exceedsMaxBuildInfoBytes: exceeds,
+        moduleBytes: moduleFramed.length,
+    };
+}
+/**
+ * Compact plant for a real mapped `.go.buildinfo` / writable PT_LOAD region.
+ * Bankrupt claims an inline version length past `MAX_BUILD_INFO_BYTES` so REA's
+ * mapped parser resource-fails without needing a 1 MiB section. Balanced writes
+ * a valid small framed module. Capacity is respected (never overflows the section).
+ */
+export function buildMappedGoBuildInfoPlant(intensity, capacity) {
+    if (capacity < 40) {
+        return { buffer: Buffer.alloc(0), tripsMaxBuildInfoBytes: false };
+    }
+    const header = Buffer.alloc(32, 0);
+    GO_MAGIC.copy(header, 0);
+    header[14] = 8;
+    header[15] = 2;
+    const marker = Buffer.from("\0[BLA-GO-MAPPED]\0", "latin1");
+    if (intensity === "bankrupt" || intensity === "maximum") {
+        const claim = writeGoUvarint(REA_INTERNAL_LIMITS.GO_MAX_BUILD_INFO_BYTES + 1);
+        const plant = Buffer.concat([header, claim, marker]);
+        return {
+            buffer: plant.subarray(0, Math.min(plant.length, capacity)),
+            tripsMaxBuildInfoBytes: true,
+        };
+    }
+    const version = Buffer.from("go1.22.5", "utf8");
+    const module = Buffer.from("path\tgithub.com/bla/mapped-buildinfo\nbuild\t-compiler=gc\n", "utf8");
+    const plant = Buffer.concat([
+        header,
+        writeGoUvarint(version.length),
+        version,
+        writeGoUvarint(module.length),
+        module,
+        marker,
+    ]);
+    return {
+        buffer: plant.subarray(0, Math.min(plant.length, capacity)),
+        tripsMaxBuildInfoBytes: false,
+    };
+}
+/**
+ * Dense NUL-terminated package:/dart:/class-like pool sized to fit `capacity`,
+ * for planting inside a real Dart isolate snapshot data region.
+ */
+export function buildMappedFlutterIsolatePoolPlant(capacity, prng, options = {}) {
+    if (capacity <= 0) {
+        return {
+            buffer: Buffer.alloc(0),
+            packageAndDartUris: 0,
+            classLikeTokens: 0,
+            snapshotHeaderBytes: 0,
+        };
+    }
+    const parts = [];
+    let headerBytes = 0;
+    if (options.includeSnapshotHeader !== false && capacity >= 52) {
+        const rec = Buffer.alloc(52, 0);
+        rec[0] = 0xf5;
+        rec[1] = 0xf5;
+        rec[2] = 0xdc;
+        rec[3] = 0xdc;
+        rec.writeBigUInt64LE(64n, 4);
+        rec.writeBigUInt64LE(3n, 12);
+        rec.write(prng.hex(32), 20, "ascii");
+        parts.push(rec);
+        headerBytes = 52;
+    }
+    let used = headerBytes;
+    let uris = 0;
+    let tokens = 0;
+    const marker = Buffer.from("\0[BLA-FLUTTER-MAPPED]\0", "utf8");
+    if (used + marker.length <= capacity) {
+        parts.push(marker);
+        used += marker.length;
+    }
+    // REA caps package_uris and dart_uris independently at MAX_POOL_URIS (500).
+    // Plant each kind past the cap (not a combined budget).
+    const uriTarget = REA_INTERNAL_LIMITS.DART_MAX_POOL_URIS + 32;
+    let i = 0;
+    while (used < capacity && i < uriTarget) {
+        // Keep strings short so a mapped section can exceed REA pool caps.
+        const pkg = `package:m${i}/b.dart\0`;
+        const pkgBuf = Buffer.from(pkg, "utf8");
+        if (used + pkgBuf.length > capacity)
+            break;
+        parts.push(pkgBuf);
+        used += pkgBuf.length;
+        uris++;
+        i++;
+    }
+    i = 0;
+    while (used < capacity && i < uriTarget) {
+        const dart = `dart:d${i}\0`;
+        const dartBuf = Buffer.from(dart, "utf8");
+        if (used + dartBuf.length > capacity)
+            break;
+        parts.push(dartBuf);
+        used += dartBuf.length;
+        uris++;
+        i++;
+    }
+    let t = 0;
+    const tokenTarget = REA_INTERNAL_LIMITS.DART_MAX_POOL_TOKENS + 32;
+    while (used < capacity && tokens < tokenTarget) {
+        const tok = `Node_${t}_X\0`;
+        const tokBuf = Buffer.from(tok, "utf8");
+        if (used + tokBuf.length > capacity)
+            break;
+        parts.push(tokBuf);
+        used += tokBuf.length;
+        tokens++;
+        t++;
+    }
+    if (used < capacity) {
+        parts.push(Buffer.alloc(capacity - used, 0));
+    }
+    return {
+        buffer: Buffer.concat(parts).subarray(0, capacity),
+        packageAndDartUris: uris,
+        classLikeTokens: tokens,
+        snapshotHeaderBytes: headerBytes,
+    };
+}
+/**
+ * Dart snapshot-hash overflow (>64) plus string-pool URI/token flood past
+ * `MAX_POOL_URIS` (500) and `MAX_POOL_TOKENS` (2000).
+ */
+export function buildFlutterPoolExhaustionPayload(prng) {
+    const records = [];
+    const snapshotCount = REA_INTERNAL_LIMITS.DART_MAX_SNAPSHOT_HASH_CANDIDATES + 2;
+    for (let i = 0; i < snapshotCount; i++) {
+        const rec = Buffer.alloc(52, 0);
+        rec[0] = 0xf5;
+        rec[1] = 0xf5;
+        rec[2] = 0xdc;
+        rec[3] = 0xdc;
+        rec.writeBigUInt64LE(64n, 4);
+        rec.writeBigUInt64LE(3n, 12);
+        const hash32 = i.toString(16).padStart(8, "0") + prng.hex(24);
+        rec.write(hash32, 20, "ascii");
+        records.push(rec);
+    }
+    const labeledLines = [
+        '\0Dart VM version: 3.5.0-enclave-tee-ring0 (stable) on "linux_x64"\0',
+        'Dart VM version: 3.6.2-sgx-isolated-bridge (stable) on "macos_arm64"\0',
+        "based on LLVM 17.0.6 (https://enclave.internal/llvm-tee-01)\0",
+        "based on LLVM 18.1.2 (https://enclave.internal/llvm-tee-02)\0",
+        "based on LLVM 18.1.8 (https://enclave.internal/llvm-tee-03)\0",
+        "based on LLVM 19.1.0 (https://enclave.internal/llvm-tee-04)\0",
+        "based on LLVM 19.1.4 (https://enclave.internal/llvm-tee-05)\0",
+        "based on LLVM 20.0.0 (https://enclave.internal/llvm-tee-06)\0",
+    ].join("");
+    records.push(Buffer.from(labeledLines, "latin1"));
+    const uriCount = REA_INTERNAL_LIMITS.DART_MAX_POOL_URIS + 16;
+    const tokenCount = REA_INTERNAL_LIMITS.DART_MAX_POOL_TOKENS + 32;
+    const poolParts = ["\0[BLA-FLUTTER-POOL-EXHAUST]\0"];
+    for (let i = 0; i < uriCount; i++) {
+        poolParts.push(`package:enclave_tarpit_${i}/lib/bridge_${prng.hex(4)}.dart`);
+        poolParts.push(`dart:enclave_isolate_${i}`);
+    }
+    for (let i = 0; i < tokenCount; i++) {
+        poolParts.push(`EnclaveTarpitNode_${i}_${prng.hex(3)}`);
+    }
+    records.push(Buffer.from(poolParts.join("\0") + "\0", "utf8"));
+    return {
+        buffer: Buffer.concat(records),
+        snapshotHashes: snapshotCount,
+        packageAndDartUris: uriCount * 2,
+        classLikeTokens: tokenCount,
+    };
+}
+/**
+ * Synthetic ELF64 with a mapped `.go.buildinfo` section and an isolate-data
+ * region (plus dynsym for `_kDartIsolateSnapshotData`) so REA's real Go /
+ * Flutter parsers can be exercised in tests and the benchmark.
+ */
+export function buildMappedGoFlutterElfFixture() {
+    // Isolate must fit dense plants past MAX_POOL_URIS (500) / MAX_POOL_TOKENS
+    // (2000). Keep it compact (~48 KiB): a larger zero-filled baseline inflated
+    // the benchmark "before" token estimate and understated the native-ELF
+    // multiplier without changing real after-protection strength.
+    const ISO_SIZE = 48 * 1024;
+    const GO_SIZE = 512;
+    const goOff = 1024;
+    const isoOff = 2048;
+    const dynsymOff = isoOff + ISO_SIZE;
+    const dynsymSize = 48; // 2 entries × 24
+    const dynstrOff = dynsymOff + dynsymSize;
+    const dynstr = Buffer.from("\0_kDartIsolateSnapshotData\0", "utf8");
+    const FILE_SIZE = dynstrOff + dynstr.length + 64;
+    const bytes = Buffer.alloc(FILE_SIZE, 0);
+    // ELF64 LE header
+    bytes.set([0x7f, 0x45, 0x4c, 0x46, 2, 1, 1], 0);
+    bytes.writeUInt16LE(3, 16); // ET_DYN
+    bytes.writeUInt16LE(0x3e, 18); // EM_X86_64
+    bytes.writeUInt32LE(1, 20);
+    bytes.writeBigUInt64LE(0x400000n, 24); // e_entry
+    bytes.writeBigUInt64LE(64n, 32); // e_phoff
+    bytes.writeBigUInt64LE(128n, 40); // e_shoff
+    bytes.writeUInt16LE(64, 52);
+    bytes.writeUInt16LE(56, 54);
+    bytes.writeUInt16LE(1, 56); // e_phnum
+    bytes.writeUInt16LE(64, 58);
+    bytes.writeUInt16LE(6, 60); // e_shnum
+    bytes.writeUInt16LE(1, 62); // e_shstrndx
+    // PT_LOAD R|W covering whole file
+    bytes.writeUInt32LE(1, 64); // PT_LOAD
+    bytes.writeUInt32LE(6, 68); // PF_R|PF_W
+    bytes.writeBigUInt64LE(0n, 72);
+    bytes.writeBigUInt64LE(0x400000n, 80);
+    bytes.writeBigUInt64LE(0x400000n, 88);
+    bytes.writeBigUInt64LE(BigInt(FILE_SIZE), 96);
+    bytes.writeBigUInt64LE(BigInt(FILE_SIZE), 104);
+    bytes.writeBigUInt64LE(0x1000n, 112);
+    const names = Buffer.from("\0.shstrtab\0.go.buildinfo\0.isolate\0.dynsym\0.dynstr\0", "utf8");
+    const shstrOff = 512;
+    names.copy(bytes, shstrOff);
+    const goAddr = 0x400000n + BigInt(goOff); // 16-aligned
+    const isoAddr = 0x400000n + BigInt(isoOff);
+    dynstr.copy(bytes, dynstrOff);
+    const sym1 = dynsymOff + 24;
+    bytes.writeUInt32LE(1, sym1);
+    bytes[sym1 + 4] = (1 << 4) | 1; // STB_GLOBAL | STT_OBJECT
+    bytes.writeUInt16LE(3, sym1 + 6); // .isolate
+    bytes.writeBigUInt64LE(isoAddr, sym1 + 8);
+    bytes.writeBigUInt64LE(BigInt(ISO_SIZE), sym1 + 16);
+    // Seed isolate with a real snapshot header so protect appends pool after it
+    bytes[isoOff] = 0xf5;
+    bytes[isoOff + 1] = 0xf5;
+    bytes[isoOff + 2] = 0xdc;
+    bytes[isoOff + 3] = 0xdc;
+    bytes.writeBigUInt64LE(64n, isoOff + 4);
+    bytes.writeBigUInt64LE(3n, isoOff + 12);
+    bytes.write("0123456789abcdef0123456789abcdef", isoOff + 20, "ascii");
+    const sh1 = 128 + 64;
+    bytes.writeUInt32LE(1, sh1);
+    bytes.writeUInt32LE(3, sh1 + 4);
+    bytes.writeBigUInt64LE(BigInt(shstrOff), sh1 + 24);
+    bytes.writeBigUInt64LE(BigInt(names.length), sh1 + 32);
+    const sh2 = 128 + 128;
+    const goNameOff = names.indexOf(Buffer.from(".go.buildinfo\0"));
+    bytes.writeUInt32LE(goNameOff, sh2);
+    bytes.writeUInt32LE(1, sh2 + 4);
+    bytes.writeBigUInt64LE(3n, sh2 + 8);
+    bytes.writeBigUInt64LE(goAddr, sh2 + 16);
+    bytes.writeBigUInt64LE(BigInt(goOff), sh2 + 24);
+    bytes.writeBigUInt64LE(BigInt(GO_SIZE), sh2 + 32);
+    const sh3 = 128 + 192;
+    const isoNameOff = names.indexOf(Buffer.from(".isolate\0"));
+    bytes.writeUInt32LE(isoNameOff, sh3);
+    bytes.writeUInt32LE(1, sh3 + 4);
+    bytes.writeBigUInt64LE(3n, sh3 + 8);
+    bytes.writeBigUInt64LE(isoAddr, sh3 + 16);
+    bytes.writeBigUInt64LE(BigInt(isoOff), sh3 + 24);
+    bytes.writeBigUInt64LE(BigInt(ISO_SIZE), sh3 + 32);
+    const sh4 = 128 + 256;
+    const dynsymNameOff = names.indexOf(Buffer.from(".dynsym\0"));
+    bytes.writeUInt32LE(dynsymNameOff, sh4);
+    bytes.writeUInt32LE(11, sh4 + 4);
+    bytes.writeBigUInt64LE(2n, sh4 + 8);
+    bytes.writeBigUInt64LE(0x400000n + BigInt(dynsymOff), sh4 + 16);
+    bytes.writeBigUInt64LE(BigInt(dynsymOff), sh4 + 24);
+    bytes.writeBigUInt64LE(BigInt(dynsymSize), sh4 + 32);
+    bytes.writeUInt32LE(5, sh4 + 40);
+    bytes.writeBigUInt64LE(24n, sh4 + 48);
+    const sh5 = 128 + 320;
+    const dynstrNameOff = names.indexOf(Buffer.from(".dynstr\0"));
+    bytes.writeUInt32LE(dynstrNameOff, sh5);
+    bytes.writeUInt32LE(3, sh5 + 4);
+    bytes.writeBigUInt64LE(2n, sh5 + 8);
+    bytes.writeBigUInt64LE(0x400000n + BigInt(dynstrOff), sh5 + 16);
+    bytes.writeBigUInt64LE(BigInt(dynstrOff), sh5 + 24);
+    bytes.writeBigUInt64LE(BigInt(dynstr.length), sh5 + 32);
+    return bytes;
+}
+//# sourceMappingURL=go-flutter-exhaustion.js.map

package/dist/shields/formats/go-flutter-exhaustion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"go-flutter-exhaustion.js","sourceRoot":"","sources":["../../../src/shields/formats/go-flutter-exhaustion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAIxD,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,CAAC;IACpB,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5B,CAAC,MAAM,CAAC,CAAC;IACX,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;AACpE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AAE1E;;;;;;;;GAQG;AACH,MAAM,UAAU,iCAAiC,CAC/C,IAAgB,EAChB,YAAiC,UAAU;IAM3C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAErC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG;QAClB,gDAAgD;QAChD,2DAA2D,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK;QAC5E,yDAAyD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK;QAC1E,mDAAmD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK;QACpE,uBAAuB;QACvB,wBAAwB;QACxB,qBAAqB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI;KACtC,CAAC;IACF,IAAI,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,MAAM,GACV,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,SAAS;QACjD,CAAC,CAAC,mBAAmB,CAAC,uBAAuB,GAAG,IAAI;QACpD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,uBAAuB,IAAI,CAAC,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,iCAAiC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;YAC9C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,EACpC,MAAM,CACP,CAAC;QACF,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;QACjC,YAAY;QACZ,UAAU;QACV,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACzB,UAAU;KACX,CAAC,CAAC;IACH,MAAM,OAAO,GACX,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM;QACpC,mBAAmB,CAAC,uBAAuB,CAAC;IAE9C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU;IAC1B,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,iCAAiC;IAEjD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAC7B,8GAA8G,EAC9G,QAAQ,CACT,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACpB,QAAQ;YACR,MAAM;YACN,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;YAC9B,OAAO;YACP,cAAc,CAAC,YAAY,CAAC,MAAM,CAAC;YACnC,YAAY;YACZ,WAAW;SACZ,CAAC;QACF,wBAAwB,EAAE,OAAO;QACjC,WAAW,EAAE,YAAY,CAAC,MAAM;KACjC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,SAA8B,EAC9B,QAAgB;IAKhB,IAAI,QAAQ,GAAG,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;IAE5D,IAAI,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,cAAc,CAC1B,mBAAmB,CAAC,uBAAuB,GAAG,CAAC,CAChD,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACrD,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3D,sBAAsB,EAAE,IAAI;SAC7B,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CACxB,8DAA8D,EAC9D,MAAM,CACP,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;QAC1B,MAAM;QACN,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC;QAC9B,OAAO;QACP,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM;QACN,MAAM;KACP,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3D,sBAAsB,EAAE,KAAK;KAC9B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kCAAkC,CAChD,QAAgB,EAChB,IAAgB,EAChB,UAAwD,EAAE;IAO1D,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,OAAO;YACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,kBAAkB,EAAE,CAAC;YACrB,eAAe,EAAE,CAAC;YAClB,mBAAmB,EAAE,CAAC;SACvB,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,OAAO,CAAC,qBAAqB,KAAK,KAAK,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAChC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,GAAG,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,WAAW,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,GAAG,WAAW,CAAC;IACvB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;IAC/D,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;IACxB,CAAC;IACD,4EAA4E;IAC5E,wDAAwD;IACxD,MAAM,SAAS,GAAG,mBAAmB,CAAC,kBAAkB,GAAG,EAAE,CAAC;IAC9D,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,IAAI,GAAG,QAAQ,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;QACxC,mEAAmE;QACnE,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC;QACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ;YAAE,MAAM;QAC3C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC;QACP,CAAC,EAAE,CAAC;IACN,CAAC;IACD,CAAC,GAAG,CAAC,CAAC;IACN,OAAO,IAAI,GAAG,QAAQ,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ;YAAE,MAAM;QAC5C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;QACvB,IAAI,EAAE,CAAC;QACP,CAAC,EAAE,CAAC;IACN,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,WAAW,GAAG,mBAAmB,CAAC,oBAAoB,GAAG,EAAE,CAAC;IAClE,OAAO,IAAI,GAAG,QAAQ,IAAI,MAAM,GAAG,WAAW,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,QAAQ;YAAE,MAAM;QAC3C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;QACtB,MAAM,EAAE,CAAC;QACT,CAAC,EAAE,CAAC;IACN,CAAC;IACD,IAAI,IAAI,GAAG,QAAQ,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC;QAClD,kBAAkB,EAAE,IAAI;QACxB,eAAe,EAAE,MAAM;QACvB,mBAAmB,EAAE,WAAW;KACjC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iCAAiC,CAAC,IAAgB;IAMhE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,aAAa,GACjB,mBAAmB,CAAC,iCAAiC,GAAG,CAAC,CAAC;IAE5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAChC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC7B,GAAG,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9D,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,YAAY,GAAG;QACnB,sEAAsE;QACtE,wEAAwE;QACxE,+DAA+D;QAC/D,+DAA+D;QAC/D,+DAA+D;QAC/D,+DAA+D;QAC/D,+DAA+D;QAC/D,+DAA+D;KAChE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,kBAAkB,GAAG,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,mBAAmB,CAAC,oBAAoB,GAAG,EAAE,CAAC;IACjE,MAAM,SAAS,GAAa,CAAC,gCAAgC,CAAC,CAAC;IAC/D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC,eAAe,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC7E,SAAS,CAAC,IAAI,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAE/D,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC9B,cAAc,EAAE,aAAa;QAC7B,kBAAkB,EAAE,QAAQ,GAAG,CAAC;QAChC,eAAe,EAAE,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B;IAC5C,2EAA2E;IAC3E,4EAA4E;IAC5E,uEAAuE;IACvE,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC;IACpB,MAAM,KAAK,GAAG,IAAI,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC;IACpC,MAAM,UAAU,GAAG,EAAE,CAAC,CAAC,iBAAiB;IACxC,MAAM,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;IACzC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACzC,kBAAkB;IAClB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;IACrC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY;IAC3C,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3B,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;IACjD,KAAK,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;IAC3C,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;IAC5C,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5B,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5B,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;IACtC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5B,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;IACtC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;IAEzC,kCAAkC;IAClC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;IACtC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY;IACxC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/B,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACtC,KAAK,CAAC,gBAAgB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACtC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/C,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAErC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,0DAA0D,EAC1D,MAAM,CACP,CAAC;IACF,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAE5B,MAAM,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa;IACvD,MAAM,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAE9B,MAAM,IAAI,GAAG,SAAS,GAAG,EAAE,CAAC;IAC5B,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,0BAA0B;IAC1D,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW;IAC7C,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IAC1C,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAEpD,4EAA4E;IAC5E,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,CAAC,CAAC;IACxC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC;IACxC,KAAK,CAAC,KAAK,CAAC,kCAAkC,EAAE,MAAM,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;IAEtE,MAAM,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;IACrB,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5B,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IAChC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACnD,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAEvD,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACtB,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAChE,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACpC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IAChC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACpC,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACzC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAChD,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACtB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5D,KAAK,CAAC,aAAa,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IAChC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACpC,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAC1C,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACjD,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAEnD,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACtB,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9D,KAAK,CAAC,aAAa,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACxC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACpC,KAAK,CAAC,gBAAgB,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACrD,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACjC,KAAK,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAEtC,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACtB,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9D,KAAK,CAAC,aAAa,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACxC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IAChC,KAAK,CAAC,gBAAgB,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;IACpC,KAAK,CAAC,gBAAgB,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACpD,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IAExD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/shields/formats/gpu-ptx.d.ts

@@ -0,0 +1,40 @@
+import type { ProtectionIntensity } from "../../core/types.js";
+export interface GpuPtxInspection {
+    readonly looksLikePtx: boolean;
+    readonly entryCount: number;
+    readonly blaProtected: boolean;
+}
+export declare function inspectGpuPtx(text: string): GpuPtxInspection;
+/**
+ * Protects NVIDIA PTX text modules by appending decoy `.entry` kernels and
+ * canary/diagnostic comments. Preserves the original module body verbatim so
+ * existing kernels stay byte-identical (runtime-equivalent).
+ *
+ * SPIR-V / fatbinary / CUDA object mutation is intentionally NOT attempted —
+ * those containers have brittle structural hashes; corrupting them would violate
+ * the red line. Firmware images are likewise skipped (see module doc below).
+ */
+export declare function protectGpuPtxText(input: string, options?: {
+    readonly intensity?: ProtectionIntensity;
+    readonly seed?: string;
+}): {
+    readonly text: string;
+    readonly entriesInjected: number;
+    readonly canaryTokensEmbedded: number;
+    readonly diagnosticsEmbedded: number;
+};
+/**
+ * Firmware images (raw flash dumps, U-Boot ITB, Android boot.img, etc.) are
+ * NOT hardened by BLA: generic mutation cannot preserve boot signatures,
+ * CRC/header integrity, or device-specific layouts without a per-vendor
+ * parser. Prefer leaving firmware untouched rather than risking bricking.
+ */
+export declare const FIRMWARE_HARDENING_SKIP_REASON = "Firmware images are skipped: safe generic mutation would break boot signatures, CRCs, or vendor headers. No BLA firmware shield is offered.";
+/**
+ * SPIR-V modules, CUDA fatbinaries, and AMD GPU code objects are skipped:
+ * their containers carry structural hashes / embedded ELF slices where a
+ * generic trailer would break loader validation. PTX text remains the only
+ * safely append-only GPU surface BLA hardens.
+ */
+export declare const GPU_OBJECT_HARDENING_SKIP_REASON = "SPIR-V / CUDA fatbinary / AMD GPU objects are skipped: brittle structural hashes and embedded ELF slices make generic mutation unsafe. Only PTX text is hardened.";
+//# sourceMappingURL=gpu-ptx.d.ts.map

package/dist/shields/formats/gpu-ptx.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gpu-ptx.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/gpu-ptx.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAU5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IACP,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACnB,GACL;IACD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,CAuCA;AAED;;;;;GAKG;AACH,eAAO,MAAM,8BAA8B,gJACoG,CAAC;AAEhJ;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,sKACwH,CAAC"}

package/dist/shields/formats/gpu-ptx.js

@@ -0,0 +1,62 @@
+import { SeededPrng } from "../../core/prng.js";
+import { buildCanaryAndDiagnosticPayloads } from "../deception/format-payloads.js";
+export function inspectGpuPtx(text) {
+    const looksLikePtx = /\.version\s+\d/.test(text) &&
+        (/\.entry\s+\w/.test(text) || /\.target\s+sm_/.test(text));
+    const entryCount = (text.match(/\.entry\s+/g) ?? []).length;
+    return {
+        looksLikePtx,
+        entryCount,
+        blaProtected: text.includes("[BLA-PTX-SHIELD]"),
+    };
+}
+/**
+ * Protects NVIDIA PTX text modules by appending decoy `.entry` kernels and
+ * canary/diagnostic comments. Preserves the original module body verbatim so
+ * existing kernels stay byte-identical (runtime-equivalent).
+ *
+ * SPIR-V / fatbinary / CUDA object mutation is intentionally NOT attempted —
+ * those containers have brittle structural hashes; corrupting them would violate
+ * the red line. Firmware images are likewise skipped (see module doc below).
+ */
+export function protectGpuPtxText(input, options = {}) {
+    const intensity = options.intensity ?? "balanced";
+    const prng = new SeededPrng(options.seed ?? "bla-ptx-shield");
+    const deception = buildCanaryAndDiagnosticPayloads(prng, intensity);
+    const base = input.trim().length > 0
+        ? input.replace(/\s*$/, "\n")
+        : `.version 7.5\n.target sm_70\n.address_size 64\n\n`;
+    const entryTarget = intensity === "bankrupt" ? 128 : intensity === "maximum" ? 48 : 16;
+    const parts = [
+        base,
+        `\n// [BLA-PTX-SHIELD] Counter-REA GPU exhaustion trailer\n`,
+    ];
+    for (const rec of deception.textRecords.slice(0, 8)) {
+        parts.push(`// DIAG: ${rec.replace(/\n/g, " ")}\n`);
+    }
+    for (let i = 0; i < entryTarget; i++) {
+        const name = `bla_tarpit_kernel_${i}_${prng.hex(4)}`;
+        parts.push(`.visible .entry ${name}(.param .u64 ${name}_param_0)\n`, `{\n`, `  .reg .b64 %rd<2>;\n`, `  ld.param.u64 %rd1, [${name}_param_0];\n`, `  // canary=${prng.hex(8)}\n`, `  ret;\n`, `}\n\n`);
+    }
+    return {
+        text: parts.join(""),
+        entriesInjected: entryTarget,
+        canaryTokensEmbedded: deception.canary.syntheticCanaryTokens.length,
+        diagnosticsEmbedded: deception.diagnostics.diagnosticsInjected.length,
+    };
+}
+/**
+ * Firmware images (raw flash dumps, U-Boot ITB, Android boot.img, etc.) are
+ * NOT hardened by BLA: generic mutation cannot preserve boot signatures,
+ * CRC/header integrity, or device-specific layouts without a per-vendor
+ * parser. Prefer leaving firmware untouched rather than risking bricking.
+ */
+export const FIRMWARE_HARDENING_SKIP_REASON = "Firmware images are skipped: safe generic mutation would break boot signatures, CRCs, or vendor headers. No BLA firmware shield is offered.";
+/**
+ * SPIR-V modules, CUDA fatbinaries, and AMD GPU code objects are skipped:
+ * their containers carry structural hashes / embedded ELF slices where a
+ * generic trailer would break loader validation. PTX text remains the only
+ * safely append-only GPU surface BLA hardens.
+ */
+export const GPU_OBJECT_HARDENING_SKIP_REASON = "SPIR-V / CUDA fatbinary / AMD GPU objects are skipped: brittle structural hashes and embedded ELF slices make generic mutation unsafe. Only PTX text is hardened.";
+//# sourceMappingURL=gpu-ptx.js.map

package/dist/shields/formats/gpu-ptx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gpu-ptx.js","sourceRoot":"","sources":["../../../src/shields/formats/gpu-ptx.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAQnF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,YAAY,GAChB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAC3B,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IAC5D,OAAO;QACL,YAAY;QACZ,UAAU;QACV,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,UAGI,EAAE;IAON,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,gBAAgB,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEpE,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7B,CAAC,CAAC,mDAAmD,CAAC;IAE1D,MAAM,WAAW,GACf,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,MAAM,KAAK,GAAa;QACtB,IAAI;QACJ,4DAA4D;KAC7D,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,qBAAqB,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,KAAK,CAAC,IAAI,CACR,mBAAmB,IAAI,gBAAgB,IAAI,aAAa,EACxD,KAAK,EACL,uBAAuB,EACvB,yBAAyB,IAAI,cAAc,EAC3C,eAAe,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAC9B,UAAU,EACV,OAAO,CACR,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,eAAe,EAAE,WAAW;QAC5B,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM;QACnE,mBAAmB,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC,MAAM;KACtE,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,8BAA8B,GACzC,6IAA6I,CAAC;AAEhJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,mKAAmK,CAAC"}

package/dist/shields/formats/headers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/headers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D,MAAM,MAAM,oBAAoB,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,GAAE;IACP,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B,GACL,mBAAmB,CAgKrB"}
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/headers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D,MAAM,MAAM,oBAAoB,GAAG,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC;AAEvD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,GAAE;IACP,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B,GACL,mBAAmB,CAsNrB"}

package/dist/shields/formats/headers.js

@@ -14,9 +14,14 @@ export function emitCompileTimeNativeHeader(language, options = {}) {
     const chaffPayloads = generateChaffPayloads(prng, intensity);
     const decoyCount = intensity === "stealth" ? 6 : intensity === "balanced" ? 12 : 20;
     if (language === "c") {
+        const rustcAnchorStem = "rustc_path_anchor";
+        const shadowHeapName = "shadow_heap_slots";
+        const tarpitStem = "enclave_tarpit_fn";
+        const dataTableCount = chaffPayloads.length * 2 + 1;
         const lines = [
             "/* ==========================================================================",
             " * BLA-SHIELD: Adversarial Defense Header for C/C++ Native Binaries",
+            " * Compatible with GCC (__GNUC__), Clang (__clang__), and MSVC (_MSC_VER / cl.exe)",
             " * Counter-REA Native Decompilation Tarpit & Read-Only Section Shield",
             " * ========================================================================== */",
             "#ifndef BLA_SHIELD_H",
@@ -24,42 +29,73 @@ export function emitCompileTimeNativeHeader(language, options = {}) {
             "#include <stdint.h>",
             "#include <stddef.h>",
             "",
-            "#if defined(__GNUC__) || defined(__clang__)",
-            "#define BLA_USED __attribute__((used, noinline))",
+            "#ifdef __cplusplus",
+            'extern "C" {',
+            "#endif",
+            "",
+            "#if defined(_MSC_VER) && !defined(__clang__)",
+            "#pragma warning(push)",
+            "#pragma warning(disable: 4100 4127 4189 4505)",
+            "#define BLA_USED",
+            "#define BLA_NOINLINE __declspec(noinline)",
+            "#elif defined(__GNUC__) || defined(__clang__)",
+            "#define BLA_USED __attribute__((used))",
+            "#define BLA_NOINLINE __attribute__((used, noinline))",
             "#else",
             "#define BLA_USED",
+            "#define BLA_NOINLINE",
             "#endif",
             "",
             "/* Architectural Chaff & Enclave Delegation Manifests */",
         ];
+        const dataTableEntries = [];
         chaffPayloads.forEach((p, idx) => {
             lines.push(`static const char ${p.symbolName}[] BLA_USED = ${JSON.stringify(p.rawText)};`);
+            dataTableEntries.push(`(const void*)${p.symbolName}`);
             const hash = idx.toString(16).padStart(8, "0") + prng.hex(32);
-            lines.push(`static const char _bla_rustc_anchor_${idx}[] BLA_USED = "/rustc/${hash}/library/core/src/enclave.rs";`);
+            lines.push(`static const char ${rustcAnchorStem}_${idx}[] BLA_USED = "/rustc/${hash}/library/core/src/enclave.rs";`);
+            dataTableEntries.push(`(const void*)${rustcAnchorStem}_${idx}`);
         });
+        // Mutable .data shadow heap slots to defeat GDB/Rizin/Frida/WinDbg before/after memory diffing
+        const slotInit = Array.from({ length: 32 }, () => `0x${prng.hex(8)}u`).join(", ");
+        lines.push(`static volatile uint32_t ${shadowHeapName}[32] BLA_USED = { ${slotInit} };`);
+        dataTableEntries.push(`(const void*)${shadowHeapName}`);
+        lines.push("");
         // Forward declarations for mutual cross-references (Fake XRefs in Ghidra/IDA)
         for (let i = 0; i < decoyCount; i++) {
-            lines.push(`BLA_USED static uint32_t _bla_enclave_tarpit_${i}(uint32_t seed, int depth);`);
+            lines.push(`BLA_NOINLINE static uint32_t ${tarpitStem}_${i}(uint32_t seed, int depth);`);
         }
         lines.push("");
+        // Keep-tables prevent MSVC (/O2 /GL + link.exe /OPT:REF), Clang, and GCC from stripping static symbols
+        lines.push(`typedef uint32_t (*enclave_tarpit_fn_t)(uint32_t, int);`);
+        lines.push(`static const void* const enclave_keep_data_table[${dataTableCount}] BLA_USED = { ${dataTableEntries.join(", ")} };`);
+        const fnTableEntries = Array.from({ length: decoyCount }, (_, i) => `&${tarpitStem}_${i}`).join(", ");
+        lines.push(`static const enclave_tarpit_fn_t enclave_keep_fn_table[${decoyCount}] BLA_USED = { ${fnTableEntries} };`);
+        lines.push("");
         for (let i = 0; i < decoyCount; i++) {
             const next1 = (i + 1) % decoyCount;
             const next2 = (i + 3) % decoyCount;
             const k = prng.nextInt(0x1000, 0xffff);
             const chaffSym = chaffPayloads[i % chaffPayloads.length].symbolName;
-            lines.push(`BLA_USED static uint32_t _bla_enclave_tarpit_${i}(uint32_t seed, int depth) {`);
-            lines.push(`    uint32_t acc = seed ^ 0x${k.toString(16)}u ^ (uint32_t)${chaffSym}[0];`);
+            lines.push(`BLA_NOINLINE static uint32_t ${tarpitStem}_${i}(uint32_t seed, int depth) {`);
+            lines.push(`    const char* _anchor_str = (const char*)enclave_keep_data_table[(seed + ${i}u) % ${dataTableCount}u];`);
+            lines.push(`    uint32_t acc = seed ^ 0x${k.toString(16)}u ^ (uint32_t)(unsigned char)${chaffSym}[0] ^ (uint32_t)(unsigned char)_anchor_str[0];`);
             lines.push(`    for (int r = 0; r < 4; ++r) {`);
             lines.push(`        acc = (acc * 0x9E3779B9u) ^ (acc >> 13) ^ (uint32_t)r;`);
+            lines.push(`        ${shadowHeapName}[(${i} * 4 + r) & 31] ^= acc;`);
             lines.push(`    }`);
             lines.push(`    if (depth > 0 && ((7u * (seed | 3u) * (seed | 3u) - 1u) == (seed ^ 5u) * (seed ^ 5u))) {`);
-            lines.push(`        return _bla_enclave_tarpit_${next1}(acc, depth - 1) ^ _bla_enclave_tarpit_${next2}(acc ^ 0x5Au, depth - 1);`);
+            lines.push(`        enclave_tarpit_fn_t _fn_ptr = enclave_keep_fn_table[(seed ^ (uint32_t)depth) % ${decoyCount}u];`);
+            lines.push(`        return ${tarpitStem}_${next1}(acc, depth - 1) ^ ${tarpitStem}_${next2}(acc ^ 0x5Au, depth - 1) ^ _fn_ptr(acc, depth - 1);`);
             lines.push(`    }`);
             lines.push(`    return acc;`);
             lines.push(`}`);
         }
         lines.push("");
-        lines.push(`#define BLA_SHIELD_ANCHOR(x) (_bla_enclave_tarpit_0((uint32_t)(x), 0))`);
+        lines.push(`#define BLA_SHIELD_ANCHOR(x) (${tarpitStem}_0((uint32_t)(x), 0))`);
+        lines.push("");
+        lines.push("#if defined(_MSC_VER) && !defined(__clang__)", "#pragma warning(pop)", "#endif");
+        lines.push("#ifdef __cplusplus", "}", "#endif");
         lines.push("#endif /* BLA_SHIELD_H */");
         return {
             language: "c",
@@ -95,13 +131,13 @@ export function emitCompileTimeNativeHeader(language, options = {}) {
             const next2 = (i + 2) % decoyCount;
             const k = prng.nextInt(0x1000, 0xffff);
             lines.push(`#[inline(never)]`);
-            lines.push(`pub fn bla_enclave_tarpit_${i}(seed: u32, depth: u32) -> u32 {`);
+            lines.push(`pub fn enclave_tarpit_${i}(seed: u32, depth: u32) -> u32 {`);
             lines.push(`    let mut acc = seed ^ 0x${k.toString(16)};`);
             lines.push(`    for r in 0..4u32 {`);
             lines.push(`        acc = acc.wrapping_mul(0x9E37_79B9) ^ (acc >> 13) ^ r;`);
             lines.push(`    }`);
             lines.push(`    if depth > 0 && ((seed | 1).wrapping_mul(seed | 2) & 1) == 1 {`);
-            lines.push(`        return bla_enclave_tarpit_${next1}(acc, depth - 1) ^ bla_enclave_tarpit_${next2}(acc ^ 0x5A, depth - 1);`);
+            lines.push(`        return enclave_tarpit_${next1}(acc, depth - 1) ^ enclave_tarpit_${next2}(acc ^ 0x5A, depth - 1);`);
             lines.push(`    }`);
             lines.push(`    std::hint::black_box(acc)`);
             lines.push(`}`);
@@ -115,11 +151,14 @@ export function emitCompileTimeNativeHeader(language, options = {}) {
         };
     }
     // Go (`bla_shield.go`)
+    const goSlots = Array.from({ length: 16 }, () => `0x${prng.hex(8)}`).join(", ");
     const lines = [
         "// Code generated by BLA-SHIELD. DO NOT EDIT.",
         "package main",
         "",
-        "var BlaEnclaveManifests = []string{",
+        `var ShadowHeapSlots = [16]uint32{${goSlots}}`,
+        "",
+        "var EnclaveManifests = []string{",
     ];
     for (const p of chaffPayloads) {
         lines.push(`\t${JSON.stringify(p.rawText)},`);
@@ -131,13 +170,14 @@ export function emitCompileTimeNativeHeader(language, options = {}) {
         const next2 = (i + 2) % decoyCount;
         const k = prng.nextInt(0x1000, 0xffff);
         lines.push(`//go:noinline`);
-        lines.push(`func BlaEnclaveTarpit${i}(seed uint32, depth int) uint32 {`);
-        lines.push(`\tacc := seed ^ 0x${k.toString(16)} ^ uint32(len(BlaEnclaveManifests[0]))`);
+        lines.push(`func EnclaveTarpit${i}(seed uint32, depth int) uint32 {`);
+        lines.push(`\tacc := seed ^ 0x${k.toString(16)} ^ uint32(len(EnclaveManifests[0]))`);
         lines.push(`\tfor r := uint32(0); r < 4; r++ {`);
         lines.push(`\t\tacc = (acc * 0x9E3779B9) ^ (acc >> 13) ^ r`);
+        lines.push(`\t\tShadowHeapSlots[(${i}*4+int(r))&15] ^= acc`);
         lines.push(`\t}`);
         lines.push(`\tif depth > 0 && (((seed|1)*((seed|1)+1))&1) == 1 {`);
-        lines.push(`\t\treturn BlaEnclaveTarpit${next1}(acc, depth-1) ^ BlaEnclaveTarpit${next2}(acc^0x5A, depth-1)`);
+        lines.push(`\t\treturn EnclaveTarpit${next1}(acc, depth-1) ^ EnclaveTarpit${next2}(acc^0x5A, depth-1)`);
         lines.push(`\t}`);
         lines.push(`\treturn acc`);
         lines.push(`}`);