bla-agents 1.1.0 → 1.6.0

package/dist/shields/formats/sqlite.js

@@ -1,21 +1,280 @@
-import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { existsSync, mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
-import { join } from "node:path";
+import { join, resolve } from "node:path";
 import { SeededPrng } from "../../core/prng.js";
 import { getDatabaseSyncClass } from "../../core/sqlite-runtime.js";
 import { generateChaffPayloads } from "../chaff/chaff-generator.js";
+import { buildCanaryAndDiagnosticPayloads } from "../deception/format-payloads.js";
+import { SQLITE_HONEY_TABLES, SQLITE_HONEY_TABLE_NAME_SET } from "../../core/identifiers.js";
+/**
+ * Thrown when a SQLite database input cannot be proven complete or consistent
+ * (e.g., active/uncheckpointed WAL mode, companion -wal/-shm/-journal files,
+ * truncated header, or failed PRAGMA integrity_check).
+ */
+export class SqliteWalConsistencyError extends Error {
+    constructor(reason) {
+        super(`SQLite consistency admission failed: ${reason}`);
+        this.name = "SqliteWalConsistencyError";
+    }
+}
+export const DEFAULT_SQLITE_SENSITIVITY_POLICY = {
+    policyId: "bla-default-sqlite-data-minimization-v1",
+    rules: [
+        {
+            ruleId: "SQLITE-SEC-001",
+            tablePattern: /.*/i,
+            columnPattern: /^(offline_token|refresh_token|access_token|session_secret|private_key|master_key|secret_key|api_key|password_hash|client_secret)$/i,
+            classification: "forbidden-in-client-artifact",
+            remediation: "Do not distribute long-lived tokens or secret keys in client SQLite caches. Use short-lived server-revocable leases or OS-keystore-backed encryption without shipping hardcoded keys in the same bundle.",
+        },
+    ],
+};
+function matchesPattern(value, pattern) {
+    if (typeof pattern === "string") {
+        if (pattern === "*")
+            return true;
+        return value.toLowerCase() === pattern.toLowerCase();
+    }
+    return pattern.test(value);
+}
+function quoteIdentifier(id) {
+    return `"${id.replace(/"/g, '""')}"`;
+}
+function isHoneyTableName(name) {
+    return SQLITE_HONEY_TABLE_NAME_SET.has(name) || name.includes("enclave_");
+}
+function hasValidSqlite3Header(bytes) {
+    return (bytes.length >= 100 &&
+        bytes.subarray(0, 16).toString("latin1") === "SQLite format 3\0");
+}
+/**
+ * Checks whether a SQLite header indicates WAL mode (file format write version = 2
+ * at offset 18 or read version = 2 at offset 19).
+ */
+export function isSqliteHeaderWalMode(bytes) {
+    if (!hasValidSqlite3Header(bytes))
+        return false;
+    return bytes[18] === 2 || bytes[19] === 2;
+}
+/**
+ * Validates that a on-disk SQLite file path is a standalone, quiescent database
+ * with no uncheckpointed WAL (`-wal`), shared-memory (`-shm`), or hot rollback
+ * journal (`-journal`) companion files before protection runs.
+ */
+export function validateSqliteFileInput(dbPath) {
+    const absPath = resolve(dbPath);
+    if (!existsSync(absPath)) {
+        throw new SqliteWalConsistencyError(`Database file does not exist: ${absPath}`);
+    }
+    const walPath = `${absPath}-wal`;
+    const shmPath = `${absPath}-shm`;
+    const journalPath = `${absPath}-journal`;
+    if (existsSync(journalPath)) {
+        const journalSize = statSync(journalPath).size;
+        throw new SqliteWalConsistencyError(`Hot rollback journal detected (${journalPath}, ${journalSize} bytes). Export a consistent standalone backup before running protection.`);
+    }
+    if (existsSync(walPath) || existsSync(shmPath)) {
+        const walSize = existsSync(walPath) ? statSync(walPath).size : 0;
+        throw new SqliteWalConsistencyError(`Companion WAL/SHM files detected (${walPath}, ${walSize} bytes). Active or uncheckpointed WAL data would be lost if only the main DB file were rewritten. Run a clean checkpoint/backup (e.g. VACUUM INTO) first.`);
+    }
+    const bytes = readFileSync(absPath);
+    validateSqliteStandaloneBuffer(bytes);
+    return bytes;
+}
+/**
+ * Validates that a single SQLite buffer is a valid, self-contained SQLite 3
+ * snapshot (not in WAL mode requiring external `-wal` state) and passes `PRAGMA integrity_check`.
+ */
+export function validateSqliteStandaloneBuffer(bytes) {
+    if (!hasValidSqlite3Header(bytes)) {
+        throw new SqliteWalConsistencyError("Input is not a valid SQLite 3 database header (minimum 100 bytes with 'SQLite format 3\\0' magic).");
+    }
+    const pageSizeRaw = bytes.readUInt16BE(16);
+    const pageSize = pageSizeRaw === 1 ? 65536 : pageSizeRaw;
+    if (pageSize < 512 ||
+        pageSize > 65536 ||
+        (pageSize & (pageSize - 1)) !== 0 ||
+        bytes.length % pageSize !== 0) {
+        throw new SqliteWalConsistencyError(`SQLite file size (${bytes.length}) is not an exact multiple of valid page size (${pageSize}); database appears truncated.`);
+    }
+    if (isSqliteHeaderWalMode(bytes)) {
+        throw new SqliteWalConsistencyError("SQLite header indicates WAL mode (format write/read version 2 at bytes 18..19). A single buffer cannot guarantee that committed WAL frames are included. Export a standalone DELETE-mode backup (e.g. VACUUM INTO or PRAGMA journal_mode=DELETE) before protection.");
+    }
+    const DatabaseSync = getDatabaseSyncClass();
+    const tempDir = mkdtempSync(join(tmpdir(), "bla-sqlite-validate-"));
+    const dbPath = join(tempDir, "validate.sqlite");
+    try {
+        writeFileSync(dbPath, bytes);
+        const db = new DatabaseSync(dbPath, { readOnly: true });
+        try {
+            db.function("enclave_unseal_payload", { deterministic: true }, (blob) => `ENCLAVE_SEALED:${String(blob ?? "")}`);
+            const integrity = db.prepare("PRAGMA integrity_check").all();
+            if (integrity.length !== 1 || integrity[0]?.integrity_check !== "ok") {
+                throw new SqliteWalConsistencyError("SQLite PRAGMA integrity_check failed.");
+            }
+            // Also ensure sqlite_schema is readable
+            db.prepare("SELECT count(*) FROM sqlite_schema").get();
+        }
+        finally {
+            db.close();
+        }
+    }
+    catch (err) {
+        if (err instanceof SqliteWalConsistencyError)
+            throw err;
+        throw new SqliteWalConsistencyError(`SQLite database failed read/integrity validation: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    finally {
+        rmSync(tempDir, { recursive: true, force: true });
+    }
+}
+function snapshotBusinessTables(db) {
+    const tables = db
+        .prepare("SELECT name FROM sqlite_schema WHERE type = 'table' AND name NOT LIKE 'sqlite_%' ORDER BY name")
+        .all();
+    const digests = [];
+    for (const { name } of tables) {
+        if (isHoneyTableName(name))
+            continue;
+        const rows = db
+            .prepare(`SELECT * FROM ${quoteIdentifier(name)} ORDER BY rowid`)
+            .all();
+        const hash = createHash("sha256")
+            .update(JSON.stringify(rows))
+            .digest("hex");
+        digests.push({
+            name,
+            rowCount: rows.length,
+            rowsSha256: hash,
+        });
+    }
+    return digests;
+}
+/**
+ * Evaluates a SQLite buffer against an explicit sensitive-column policy without
+ * ever emitting or logging raw secret values. Distinguishes honey-table decoration
+ * from actual data confidentiality.
+ */
+export function evaluateSqliteSensitivityPolicy(bytes, policy = DEFAULT_SQLITE_SENSITIVITY_POLICY) {
+    const residualRiskNotice = "Honey tables and generated-column traps only increase static/automated inspection friction; they do not encrypt business tables. Any plaintext or client-decryptable data shipped in an offline database remains readable by a local principal with sufficient process or file permissions.";
+    if (!hasValidSqlite3Header(bytes)) {
+        return {
+            validSqlite: false,
+            formatStatus: "unsupported-or-encrypted",
+            decorationState: "unsupported-or-encrypted",
+            businessDataState: "unknown",
+            confidentialityState: "unsupported-or-encrypted",
+            businessTables: [],
+            honeyTablesCount: 0,
+            findings: [],
+            residualRiskNotice,
+        };
+    }
+    const DatabaseSync = getDatabaseSyncClass();
+    const tempDir = mkdtempSync(join(tmpdir(), "bla-sqlite-policy-"));
+    const dbPath = join(tempDir, "policy.sqlite");
+    try {
+        writeFileSync(dbPath, bytes);
+        const db = new DatabaseSync(dbPath, { readOnly: true });
+        try {
+            const rows = db
+                .prepare("SELECT name, sql FROM sqlite_schema WHERE type = 'table' AND name NOT LIKE 'sqlite_%' ORDER BY name")
+                .all();
+            const tableNames = rows.map((r) => r.name);
+            const honeyTablesCount = tableNames.filter(isHoneyTableName).length;
+            const businessTables = tableNames.filter((n) => !isHoneyTableName(n));
+            const hasGeneratedTrapColumns = rows.some((r) => typeof r.sql === "string" && r.sql.includes("GENERATED ALWAYS AS"));
+            const decorated = honeyTablesCount > 0 || hasGeneratedTrapColumns;
+            let totalBusinessRows = 0;
+            const findings = [];
+            for (const table of businessTables) {
+                const countRow = db
+                    .prepare(`SELECT COUNT(*) AS cnt FROM ${quoteIdentifier(table)}`)
+                    .get();
+                const tableRows = Number(countRow?.cnt ?? 0);
+                totalBusinessRows += tableRows;
+                const columns = db
+                    .prepare(`PRAGMA table_info(${quoteIdentifier(table)})`)
+                    .all();
+                for (const col of columns) {
+                    for (const rule of policy.rules) {
+                        if (matchesPattern(table, rule.tablePattern) &&
+                            matchesPattern(col.name, rule.columnPattern)) {
+                            const nonNullRow = db
+                                .prepare(`SELECT COUNT(*) AS cnt FROM ${quoteIdentifier(table)} WHERE ${quoteIdentifier(col.name)} IS NOT NULL AND CAST(${quoteIdentifier(col.name)} AS TEXT) != ''`)
+                                .get();
+                            const nonNullRowCount = Number(nonNullRow?.cnt ?? 0);
+                            if (nonNullRowCount > 0) {
+                                findings.push({
+                                    ruleId: rule.ruleId,
+                                    table,
+                                    column: col.name,
+                                    nonNullRowCount,
+                                    classification: rule.classification,
+                                    status: "exposed",
+                                    remediation: rule.remediation,
+                                });
+                            }
+                        }
+                    }
+                }
+            }
+            const businessDataState = totalBusinessRows > 0 ? "business-data-preserved" : "empty";
+            const confidentialityState = findings.length > 0
+                ? "policy-violation-exposed"
+                : policy.rules.length > 0 && businessTables.length > 0
+                    ? "confidentiality-not-established"
+                    : "confidentiality-not-established";
+            return {
+                validSqlite: true,
+                formatStatus: "sqlite3-plaintext",
+                decorationState: decorated ? "decorated" : "undecorated",
+                businessDataState,
+                confidentialityState,
+                businessTables,
+                honeyTablesCount,
+                findings,
+                residualRiskNotice,
+            };
+        }
+        finally {
+            db.close();
+        }
+    }
+    catch {
+        return {
+            validSqlite: false,
+            formatStatus: "unsupported-or-encrypted",
+            decorationState: "unsupported-or-encrypted",
+            businessDataState: "unknown",
+            confidentialityState: "unsupported-or-encrypted",
+            businessTables: [],
+            honeyTablesCount: 0,
+            findings: [],
+            residualRiskNotice,
+        };
+    }
+    finally {
+        rmSync(tempDir, { recursive: true, force: true });
+    }
+}
 /**
  * Inspects a SQLite 3 database file or buffer using `node:sqlite`.
  */
-export function inspectSqliteBuffer(bytes) {
-    if (bytes.length < 100 ||
-        bytes.subarray(0, 16).toString("latin1") !== "SQLite format 3\0") {
+export function inspectSqliteBuffer(bytes, policy = DEFAULT_SQLITE_SENSITIVITY_POLICY) {
+    if (!hasValidSqlite3Header(bytes)) {
         return {
             validSqlite: false,
             tableNames: [],
+            businessTables: [],
             honeyTablesCount: 0,
             hasGeneratedTrapColumns: false,
             blaProtected: false,
+            decorationState: "unsupported-or-encrypted",
+            businessDataState: "unknown",
+            confidentialityState: "unsupported-or-encrypted",
+            policyFindings: [],
         };
     }
     const DatabaseSync = getDatabaseSyncClass();
@@ -29,15 +288,22 @@ export function inspectSqliteBuffer(bytes) {
                 .prepare("SELECT name, sql FROM sqlite_schema WHERE type = 'table' AND name NOT LIKE 'sqlite_%' ORDER BY name")
                 .all();
             const tableNames = rows.map((r) => r.name);
-            const honeyTablesCount = tableNames.filter((n) => n.startsWith("_bla_") || n.includes("enclave_")).length;
+            const honeyTablesCount = tableNames.filter(isHoneyTableName).length;
+            const businessTables = tableNames.filter((n) => !isHoneyTableName(n));
             const hasGeneratedTrapColumns = rows.some((r) => typeof r.sql === "string" && r.sql.includes("GENERATED ALWAYS AS"));
             const blaProtected = honeyTablesCount > 0 || hasGeneratedTrapColumns;
+            const policyEval = evaluateSqliteSensitivityPolicy(bytes, policy);
             return {
                 validSqlite: true,
                 tableNames,
+                businessTables,
                 honeyTablesCount,
                 hasGeneratedTrapColumns,
                 blaProtected,
+                decorationState: blaProtected ? "decorated" : "undecorated",
+                businessDataState: policyEval.businessDataState,
+                confidentialityState: policyEval.confidentialityState,
+                policyFindings: policyEval.findings,
             };
         }
         finally {
@@ -48,9 +314,14 @@ export function inspectSqliteBuffer(bytes) {
         return {
             validSqlite: false,
             tableNames: [],
+            businessTables: [],
             honeyTablesCount: 0,
             hasGeneratedTrapColumns: false,
             blaProtected: false,
+            decorationState: "unsupported-or-encrypted",
+            businessDataState: "unknown",
+            confidentialityState: "unsupported-or-encrypted",
+            policyFindings: [],
         };
     }
     finally {
@@ -58,88 +329,120 @@ export function inspectSqliteBuffer(bytes) {
     }
 }
 /**
- * Protects a SQLite 3 database file (`.sqlite`, `.db`, `.sqlite3`) against
- * REA's `inspect-sqlite-database` (`src/sqlite/SqliteDatabaseInspection.ts`):
+ * Data minimization helper: removes or redacts specified sensitive columns from a
+ * standalone SQLite database snapshot so forbidden secrets are never shipped in client artifacts.
+ */
+export function minimizeSqliteDatabaseBuffer(bytes, columnsToDrop) {
+    validateSqliteStandaloneBuffer(bytes);
+    const DatabaseSync = getDatabaseSyncClass();
+    const tempDir = mkdtempSync(join(tmpdir(), "bla-sqlite-minimize-"));
+    const dbPath = join(tempDir, "minimize.sqlite");
+    try {
+        writeFileSync(dbPath, bytes);
+        const db = new DatabaseSync(dbPath);
+        try {
+            for (const { table, column } of columnsToDrop) {
+                db.exec(`ALTER TABLE ${quoteIdentifier(table)} DROP COLUMN ${quoteIdentifier(column)}`);
+            }
+            db.exec("VACUUM");
+        }
+        finally {
+            db.close();
+        }
+        return readFileSync(dbPath);
+    }
+    finally {
+        rmSync(tempDir, { recursive: true, force: true });
+    }
+}
+/**
+ * Protects a standalone, checkpointed SQLite 3 database buffer by injecting decoy
+ * enclave honey tables and virtual generated-column traps while preserving 100% of
+ * existing business tables and rows.
  *
- * 1. **Honey Tables & Enclave Ledger Rows**: Injects realistic enterprise TEE/SGX
- *    tables (`_bla_enclave_key_hierarchy`, `_bla_tpm2_attestation_ledger`,
- *    `_bla_zero_trust_session_leases`) populated with decoy cryptographic manifests.
- * 2. **Generated Column Expression Trap (`SqliteColumnEvaluationFailure`)**:
- *    Adds `GENERATED ALWAYS AS (bla_enclave_unseal(sealed_payload)) VIRTUAL` columns
- *    to honey tables (and optionally adds a virtual enclave audit column to existing tables).
- *    When REA opens the snapshot on its bare `readOnly: true, allowExtension: false`
- *    connection (`SqliteDatabaseInspection.ts:792`) without the `bla_enclave_unseal`
- *    application scalar function registered, REA's `SELECT` projection hits
- *    `SqliteColumnEvaluationFailure` (`SQLite cannot evaluate selected column(s) ... on REA's read-only connection`)!
- * 3. **Schema Inventory Chaff**: Adds decoy views and triggers referencing hardware
- *    enclave state so `rea inspect-sqlite-database` harvests decoy schema topology.
+ * NOTE: This decorates the database against automated schema/row harvesting; it does
+ * NOT encrypt business columns (`confidentialityState: "confidentiality-not-established"`).
+ * Fails closed (`SqliteWalConsistencyError`) if the input is in WAL mode, truncated, or corrupt.
  */
 export function protectSqliteBuffer(bytes, options = {}) {
+    validateSqliteStandaloneBuffer(bytes);
     const DatabaseSync = getDatabaseSyncClass();
     const intensity = options.intensity ?? "balanced";
     const prng = new SeededPrng(options.seed ?? "bla-sqlite-shield-v1");
     const chaffPayloads = generateChaffPayloads(prng, intensity);
+    const deception = buildCanaryAndDiagnosticPayloads(prng, intensity);
     const tempDir = mkdtempSync(join(tmpdir(), "bla-sqlite-protect-"));
     const dbPath = join(tempDir, "target.sqlite");
     try {
-        if (bytes.length >= 100 &&
-            bytes.subarray(0, 16).toString("latin1") === "SQLite format 3\0") {
-            writeFileSync(dbPath, bytes);
-        }
-        else {
-            // Initialize a fresh SQLite database if buffer was empty
-            const initDb = new DatabaseSync(dbPath);
-            initDb.close();
-        }
+        writeFileSync(dbPath, bytes);
         const db = new DatabaseSync(dbPath);
         let honeyTablesInjected = 0;
         let generatedTrapColumnsAdded = 0;
+        let beforeDigests = [];
         try {
+            beforeDigests = snapshotBusinessTables(db);
             // Register the scalar function during protection so INSERT/DDL validation succeeds cleanly
-            db.function("bla_enclave_unseal", { deterministic: true }, (blob) => `ENCLAVE_SEALED:${String(blob ?? "")}`);
+            db.function("enclave_unseal_payload", { deterministic: true }, (blob) => `ENCLAVE_SEALED:${String(blob ?? "")}`);
             db.exec(`
-        CREATE TABLE IF NOT EXISTS _bla_enclave_key_hierarchy (
+        CREATE TABLE IF NOT EXISTS ${SQLITE_HONEY_TABLES.keyHierarchy} (
           slot_id INTEGER PRIMARY KEY,
           key_domain TEXT NOT NULL,
           enclave_cid INTEGER NOT NULL DEFAULT 16,
           sealed_payload TEXT NOT NULL,
           attestation_notice TEXT NOT NULL,
-          unsealed_preview TEXT GENERATED ALWAYS AS (bla_enclave_unseal(sealed_payload)) VIRTUAL
+          unsealed_preview TEXT GENERATED ALWAYS AS (enclave_unseal_payload(sealed_payload)) VIRTUAL
         );
 
-        CREATE TABLE IF NOT EXISTS _bla_tpm2_attestation_ledger (
+        CREATE TABLE IF NOT EXISTS ${SQLITE_HONEY_TABLES.attestationLedger} (
           quote_id TEXT PRIMARY KEY,
           pcr0_sha256 TEXT NOT NULL,
           monotonic_counter INTEGER NOT NULL,
           enclave_manifest TEXT NOT NULL,
-          verified_state TEXT GENERATED ALWAYS AS (bla_enclave_unseal(pcr0_sha256)) VIRTUAL
+          verified_state TEXT GENERATED ALWAYS AS (enclave_unseal_payload(pcr0_sha256)) VIRTUAL
         );
 
-        CREATE TABLE IF NOT EXISTS _bla_zero_trust_session_leases (
+        CREATE TABLE IF NOT EXISTS ${SQLITE_HONEY_TABLES.sessionLeases} (
           lease_token TEXT PRIMARY KEY,
           tier_scope TEXT NOT NULL,
           expires_epoch INTEGER NOT NULL,
           hardware_bound INTEGER NOT NULL DEFAULT 1,
-          enclave_claim TEXT GENERATED ALWAYS AS (bla_enclave_unseal(lease_token)) VIRTUAL
+          enclave_claim TEXT GENERATED ALWAYS AS (enclave_unseal_payload(lease_token)) VIRTUAL
         );
 
-        CREATE VIEW IF NOT EXISTS _bla_v_enclave_active_topology AS
+        CREATE VIEW IF NOT EXISTS ${SQLITE_HONEY_TABLES.activeTopologyView} AS
           SELECT slot_id, key_domain, enclave_cid, attestation_notice
-          FROM _bla_enclave_key_hierarchy
+          FROM ${SQLITE_HONEY_TABLES.keyHierarchy}
           WHERE enclave_cid >= 16;
+
+        CREATE TABLE IF NOT EXISTS ${SQLITE_HONEY_TABLES.canaryTransport} (
+          canary_id INTEGER PRIMARY KEY,
+          canary_token TEXT NOT NULL,
+          ambiguous_transport_url TEXT NOT NULL,
+          conflicting_query_url TEXT NOT NULL,
+          policy_notice TEXT NOT NULL
+        );
+
+        CREATE TABLE IF NOT EXISTS ${SQLITE_HONEY_TABLES.systemDiagnostic} (
+          diag_id INTEGER PRIMARY KEY,
+          subsystem TEXT NOT NULL,
+          error_class TEXT NOT NULL,
+          system_code TEXT NOT NULL,
+          diagnostic_message TEXT NOT NULL,
+          remediation_rabbit_hole TEXT NOT NULL
+        );
       `);
-            honeyTablesInjected += 3;
+            honeyTablesInjected += 5;
             generatedTrapColumnsAdded += 3;
             const insertKeyStmt = db.prepare(`
-        INSERT OR REPLACE INTO _bla_enclave_key_hierarchy (slot_id, key_domain, enclave_cid, sealed_payload, attestation_notice)
+        INSERT OR REPLACE INTO ${SQLITE_HONEY_TABLES.keyHierarchy} (slot_id, key_domain, enclave_cid, sealed_payload, attestation_notice)
         VALUES (?, ?, ?, ?, ?)
       `);
             const insertQuoteStmt = db.prepare(`
-        INSERT OR REPLACE INTO _bla_tpm2_attestation_ledger (quote_id, pcr0_sha256, monotonic_counter, enclave_manifest)
+        INSERT OR REPLACE INTO ${SQLITE_HONEY_TABLES.attestationLedger} (quote_id, pcr0_sha256, monotonic_counter, enclave_manifest)
         VALUES (?, ?, ?, ?)
       `);
             const insertLeaseStmt = db.prepare(`
-        INSERT OR REPLACE INTO _bla_zero_trust_session_leases (lease_token, tier_scope, expires_epoch, hardware_bound)
+        INSERT OR REPLACE INTO ${SQLITE_HONEY_TABLES.sessionLeases} (lease_token, tier_scope, expires_epoch, hardware_bound)
         VALUES (?, ?, ?, 1)
       `);
             const rowCount = intensity === "stealth" ? 4 : intensity === "balanced" ? 8 : 16;
@@ -149,16 +452,48 @@ export function protectSqliteBuffer(bytes, options = {}) {
                 insertQuoteStmt.run(`quote_${prng.hex(8)}`, prng.hex(64), 4096 + i * 17, chaff.rawText);
                 insertLeaseStmt.run(`ent_enclave_${prng.hex(12)}`, "hardware-tee-delegated", 1924905600 + i * 3600);
             }
+            const insertCanaryStmt = db.prepare(`
+        INSERT OR REPLACE INTO ${SQLITE_HONEY_TABLES.canaryTransport}
+          (canary_id, canary_token, ambiguous_transport_url, conflicting_query_url, policy_notice)
+        VALUES (?, ?, ?, ?, ?)
+      `);
+            const tokens = deception.canary.syntheticCanaryTokens;
+            const ambUrls = deception.canary.ambiguousCredentialUrls;
+            const confUrls = deception.canary.conflictingQueryUrls;
+            for (let i = 0; i < tokens.length; i++) {
+                insertCanaryStmt.run(i + 1, tokens[i], ambUrls[i] ?? ambUrls[0], confUrls[i] ?? confUrls[0], "PROTECTED_CREDENTIAL_AND_DRM_KEY_MATERIAL: Automated extraction prohibited.");
+            }
+            const insertDiagStmt = db.prepare(`
+        INSERT OR REPLACE INTO ${SQLITE_HONEY_TABLES.systemDiagnostic}
+          (diag_id, subsystem, error_class, system_code, diagnostic_message, remediation_rabbit_hole)
+        VALUES (?, ?, ?, ?, ?, ?)
+      `);
+            deception.diagnostics.diagnosticsInjected.forEach((d, i) => {
+                insertDiagStmt.run(i + 1, d.subsystem, d.errorClass, d.systemCode, d.diagnosticMessage, d.remediationRabbitHole);
+            });
+            const afterDigests = snapshotBusinessTables(db);
+            if (JSON.stringify(beforeDigests) !== JSON.stringify(afterDigests)) {
+                throw new SqliteWalConsistencyError("Post-transform business table digest mismatch; aborting output.");
+            }
         }
         finally {
             db.close();
         }
         const outBuffer = readFileSync(dbPath);
+        validateSqliteStandaloneBuffer(outBuffer);
+        const policyEval = evaluateSqliteSensitivityPolicy(outBuffer);
         return {
             buffer: outBuffer,
             honeyTablesInjected,
             generatedTrapColumnsAdded,
             chaffPayloadsEmbedded: chaffPayloads.length,
+            canaryTokensEmbedded: deception.canary.syntheticCanaryTokens.length,
+            diagnosticsEmbedded: deception.diagnostics.diagnosticsInjected.length,
+            decorationState: "decorated",
+            businessDataState: policyEval.businessDataState === "business-data-preserved" ? "business-data-preserved" : "empty",
+            confidentialityState: policyEval.confidentialityState === "policy-violation-exposed"
+                ? "policy-violation-exposed"
+                : "confidentiality-not-established",
         };
     }
     finally {

package/dist/shields/formats/sqlite.js.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../../src/shields/formats/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAUpE;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,IACE,KAAK,CAAC,MAAM,GAAG,GAAG;QAClB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,mBAAmB,EAChE,CAAC;QACD,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,EAAE;YACd,gBAAgB,EAAE,CAAC;YACnB,uBAAuB,EAAE,KAAK;YAC9B,YAAY,EAAE,KAAK;SACpB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CACN,qGAAqG,CACtG;iBACA,GAAG,EAAiD,CAAC;YAExD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CACxC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CACvD,CAAC,MAAM,CAAC;YACT,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAC1E,CAAC;YACF,MAAM,YAAY,GAAG,gBAAgB,GAAG,CAAC,IAAI,uBAAuB,CAAC;YAErE,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,UAAU;gBACV,gBAAgB;gBAChB,uBAAuB;gBACvB,YAAY;aACb,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,EAAE;YACd,gBAAgB,EAAE,CAAC;YACnB,uBAAuB,EAAE,KAAK;YAC9B,YAAY,EAAE,KAAK;SACpB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,UAGI,EAAE;IAON,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,sBAAsB,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,IACE,KAAK,CAAC,MAAM,IAAI,GAAG;YACnB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,mBAAmB,EAChE,CAAC;YACD,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,yDAAyD;YACzD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,IAAI,yBAAyB,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC;YACH,2FAA2F;YAC3F,EAAE,CAAC,QAAQ,CAAC,oBAAoB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,IAAa,EAAE,EAAE,CAC3E,kBAAkB,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CACvC,CAAC;YAEF,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BP,CAAC,CAAC;YAEH,mBAAmB,IAAI,CAAC,CAAC;YACzB,yBAAyB,IAAI,CAAC,CAAC;YAE/B,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC;;;OAGhC,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,EAAE,CAAC,OAAO,CAAC;;;OAGlC,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,EAAE,CAAC,OAAO,CAAC;;;OAGlC,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAE,CAAC;gBACvD,aAAa,CAAC,GAAG,CACf,IAAI,GAAG,CAAC,EACR,wBAAwB,CAAC,EAAE,EAC3B,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EACnB,KAAK,CAAC,OAAO,CACd,CAAC;gBACF,eAAe,CAAC,GAAG,CACjB,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EACtB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EACZ,IAAI,GAAG,CAAC,GAAG,EAAE,EACb,KAAK,CAAC,OAAO,CACd,CAAC;gBACF,eAAe,CAAC,GAAG,CACjB,eAAe,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAC7B,wBAAwB,EACxB,UAAU,GAAG,CAAC,GAAG,IAAI,CACtB,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;QAED,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,mBAAmB;YACnB,yBAAyB;YACzB,qBAAqB,EAAE,aAAa,CAAC,MAAM;SAC5C,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,EAAE,CAAC,IAAI,CAAC;;;;;;;;KAQP,CAAC,CAAC;QACH,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../../src/shields/formats/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAE7F;;;;GAIG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,MAAc;QACxB,KAAK,CAAC,wCAAwC,MAAM,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AA0DD,MAAM,CAAC,MAAM,iCAAiC,GAA4B;IACxE,QAAQ,EAAE,yCAAyC;IACnD,KAAK,EAAE;QACL;YACE,MAAM,EAAE,gBAAgB;YACxB,YAAY,EAAE,KAAK;YACnB,aAAa,EAAE,oIAAoI;YACnJ,cAAc,EAAE,8BAA8B;YAC9C,WAAW,EACT,0MAA0M;SAC7M;KACF;CACF,CAAC;AAEF,SAAS,cAAc,CAAC,KAAa,EAAE,OAAwB;IAC7D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACjC,OAAO,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,eAAe,CAAC,EAAU;IACjC,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,2BAA2B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,OAAO,CACL,KAAK,CAAC,MAAM,IAAI,GAAG;QACnB,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,mBAAmB,CACjE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,OAAO,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,yBAAyB,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,OAAO,MAAM,CAAC;IACjC,MAAM,OAAO,GAAG,GAAG,OAAO,MAAM,CAAC;IACjC,MAAM,WAAW,GAAG,GAAG,OAAO,UAAU,CAAC;IAEzC,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC;QAC/C,MAAM,IAAI,yBAAyB,CACjC,kCAAkC,WAAW,KAAK,WAAW,2EAA2E,CACzI,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,yBAAyB,CACjC,qCAAqC,OAAO,KAAK,OAAO,2JAA2J,CACpN,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,8BAA8B,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,yBAAyB,CACjC,oGAAoG,CACrG,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;IACzD,IACE,QAAQ,GAAG,GAAG;QACd,QAAQ,GAAG,KAAK;QAChB,CAAC,QAAQ,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACjC,KAAK,CAAC,MAAM,GAAG,QAAQ,KAAK,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,yBAAyB,CACjC,qBAAqB,KAAK,CAAC,MAAM,kDAAkD,QAAQ,gCAAgC,CAC5H,CAAC;IACJ,CAAC;IACD,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,yBAAyB,CACjC,qQAAqQ,CACtQ,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,EAAE,CAAC,QAAQ,CAAC,wBAAwB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,IAAa,EAAE,EAAE,CAC/E,kBAAkB,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CACvC,CAAC;YACF,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,GAAG,EAExD,CAAC;YACH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,KAAK,IAAI,EAAE,CAAC;gBACrE,MAAM,IAAI,yBAAyB,CAAC,uCAAuC,CAAC,CAAC;YAC/E,CAAC;YACD,wCAAwC;YACxC,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,EAAE,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,yBAAyB;YAAE,MAAM,GAAG,CAAC;QACxD,MAAM,IAAI,yBAAyB,CACjC,qDAAqD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxG,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAQD,SAAS,sBAAsB,CAC7B,EAAyD;IAEzD,MAAM,MAAM,GAAG,EAAE;SACd,OAAO,CACN,gGAAgG,CACjG;SACA,GAAG,EAA6B,CAAC;IAEpC,MAAM,OAAO,GAA0B,EAAE,CAAC;IAC1C,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,MAAM,EAAE,CAAC;QAC9B,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CAAC,iBAAiB,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC;aAChE,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC;aAC9B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;aAC5B,MAAM,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,QAAQ,EAAE,IAAI,CAAC,MAAM;YACrB,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,KAAa,EACb,SAAkC,iCAAiC;IAEnE,MAAM,kBAAkB,GACtB,6RAA6R,CAAC;IAEhS,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,0BAA0B;YACxC,eAAe,EAAE,0BAA0B;YAC3C,iBAAiB,EAAE,SAAS;YAC5B,oBAAoB,EAAE,0BAA0B;YAChD,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,CAAC;YACnB,QAAQ,EAAE,EAAE;YACZ,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CACN,qGAAqG,CACtG;iBACA,GAAG,EAAiD,CAAC;YAExD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC;YACpE,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAC1E,CAAC;YACF,MAAM,SAAS,GAAG,gBAAgB,GAAG,CAAC,IAAI,uBAAuB,CAAC;YAElE,IAAI,iBAAiB,GAAG,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAmC,EAAE,CAAC;YAEpD,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,EAAE;qBAChB,OAAO,CAAC,+BAA+B,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;qBAChE,GAAG,EAAiC,CAAC;gBACxC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;gBAC7C,iBAAiB,IAAI,SAAS,CAAC;gBAE/B,MAAM,OAAO,GAAG,EAAE;qBACf,OAAO,CAAC,qBAAqB,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC;qBACvD,GAAG,EAA2C,CAAC;gBAElD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;oBAC1B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;wBAChC,IACE,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC;4BACxC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,EAC5C,CAAC;4BACD,MAAM,UAAU,GAAG,EAAE;iCAClB,OAAO,CACN,+BAA+B,eAAe,CAAC,KAAK,CAAC,UAAU,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAC5J;iCACA,GAAG,EAAiC,CAAC;4BACxC,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;4BACrD,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;gCACxB,QAAQ,CAAC,IAAI,CAAC;oCACZ,MAAM,EAAE,IAAI,CAAC,MAAM;oCACnB,KAAK;oCACL,MAAM,EAAE,GAAG,CAAC,IAAI;oCAChB,eAAe;oCACf,cAAc,EAAE,IAAI,CAAC,cAAc;oCACnC,MAAM,EAAE,SAAS;oCACjB,WAAW,EAAE,IAAI,CAAC,WAAW;iCAC9B,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,iBAAiB,GACrB,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO,CAAC;YAC9D,MAAM,oBAAoB,GACxB,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACjB,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC;oBACpD,CAAC,CAAC,iCAAiC;oBACnC,CAAC,CAAC,iCAAiC,CAAC;YAE1C,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,YAAY,EAAE,mBAAmB;gBACjC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;gBACxD,iBAAiB;gBACjB,oBAAoB;gBACpB,cAAc;gBACd,gBAAgB;gBAChB,QAAQ;gBACR,kBAAkB;aACnB,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,0BAA0B;YACxC,eAAe,EAAE,0BAA0B;YAC3C,iBAAiB,EAAE,SAAS;YAC5B,oBAAoB,EAAE,0BAA0B;YAChD,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,CAAC;YACnB,QAAQ,EAAE,EAAE;YACZ,kBAAkB;SACnB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,SAAkC,iCAAiC;IAEnE,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,CAAC;YACnB,uBAAuB,EAAE,KAAK;YAC9B,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,0BAA0B;YAC3C,iBAAiB,EAAE,SAAS;YAC5B,oBAAoB,EAAE,0BAA0B;YAChD,cAAc,EAAE,EAAE;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE;iBACZ,OAAO,CACN,qGAAqG,CACtG;iBACA,GAAG,EAAiD,CAAC;YAExD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC;YACpE,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,MAAM,uBAAuB,GAAG,IAAI,CAAC,IAAI,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAC1E,CAAC;YACF,MAAM,YAAY,GAAG,gBAAgB,GAAG,CAAC,IAAI,uBAAuB,CAAC;YACrE,MAAM,UAAU,GAAG,+BAA+B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAElE,OAAO;gBACL,WAAW,EAAE,IAAI;gBACjB,UAAU;gBACV,cAAc;gBACd,gBAAgB;gBAChB,uBAAuB;gBACvB,YAAY;gBACZ,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa;gBAC3D,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;gBAC/C,oBAAoB,EAAE,UAAU,CAAC,oBAAoB;gBACrD,cAAc,EAAE,UAAU,CAAC,QAAQ;aACpC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;YAClB,gBAAgB,EAAE,CAAC;YACnB,uBAAuB,EAAE,KAAK;YAC9B,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,0BAA0B;YAC3C,iBAAiB,EAAE,SAAS;YAC5B,oBAAoB,EAAE,0BAA0B;YAChD,cAAc,EAAE,EAAE;SACnB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAAa,EACb,aAA6E;IAE7E,8BAA8B,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;gBAC9C,EAAE,CAAC,IAAI,CACL,eAAe,eAAe,CAAC,KAAK,CAAC,gBAAgB,eAAe,CAAC,MAAM,CAAC,EAAE,CAC/E,CAAC;YACJ,CAAC;YACD,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;QACD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,UAGI,EAAE;IAYN,8BAA8B,CAAC,KAAK,CAAC,CAAC;IAEtC,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,sBAAsB,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,gCAAgC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEpE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAE9C,IAAI,CAAC;QACH,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAE7B,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,IAAI,yBAAyB,GAAG,CAAC,CAAC;QAClC,IAAI,aAAa,GAAmC,EAAE,CAAC;QAEvD,IAAI,CAAC;YACH,aAAa,GAAG,sBAAsB,CAAC,EAAE,CAAC,CAAC;YAE3C,2FAA2F;YAC3F,EAAE,CAAC,QAAQ,CAAC,wBAAwB,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAAE,CAAC,IAAa,EAAE,EAAE,CAC/E,kBAAkB,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CACvC,CAAC;YAEF,EAAE,CAAC,IAAI,CAAC;qCACuB,mBAAmB,CAAC,YAAY;;;;;;;;;qCAShC,mBAAmB,CAAC,iBAAiB;;;;;;;;qCAQrC,mBAAmB,CAAC,aAAa;;;;;;;;oCAQlC,mBAAmB,CAAC,kBAAkB;;iBAEzD,mBAAmB,CAAC,YAAY;;;qCAGZ,mBAAmB,CAAC,eAAe;;;;;;;;qCAQnC,mBAAmB,CAAC,gBAAgB;;;;;;;;OAQlE,CAAC,CAAC;YAEH,mBAAmB,IAAI,CAAC,CAAC;YACzB,yBAAyB,IAAI,CAAC,CAAC;YAE/B,MAAM,aAAa,GAAG,EAAE,CAAC,OAAO,CAAC;iCACN,mBAAmB,CAAC,YAAY;;OAE1D,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,EAAE,CAAC,OAAO,CAAC;iCACR,mBAAmB,CAAC,iBAAiB;;OAE/D,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,EAAE,CAAC,OAAO,CAAC;iCACR,mBAAmB,CAAC,aAAa;;OAE3D,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,GAAG,aAAa,CAAC,MAAM,CAAE,CAAC;gBACvD,aAAa,CAAC,GAAG,CACf,IAAI,GAAG,CAAC,EACR,wBAAwB,CAAC,EAAE,EAC3B,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EACnB,KAAK,CAAC,OAAO,CACd,CAAC;gBACF,eAAe,CAAC,GAAG,CACjB,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EACtB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EACZ,IAAI,GAAG,CAAC,GAAG,EAAE,EACb,KAAK,CAAC,OAAO,CACd,CAAC;gBACF,eAAe,CAAC,GAAG,CACjB,eAAe,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAC7B,wBAAwB,EACxB,UAAU,GAAG,CAAC,GAAG,IAAI,CACtB,CAAC;YACJ,CAAC;YAED,MAAM,gBAAgB,GAAG,EAAE,CAAC,OAAO,CAAC;iCACT,mBAAmB,CAAC,eAAe;;;OAG7D,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC;YACtD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,uBAAuB,CAAC;YACzD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,oBAAoB,CAAC;YACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACvC,gBAAgB,CAAC,GAAG,CAClB,CAAC,GAAG,CAAC,EACL,MAAM,CAAC,CAAC,CAAE,EACV,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAE,EACzB,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAE,EAC3B,6EAA6E,CAC9E,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAAC;iCACP,mBAAmB,CAAC,gBAAgB;;;OAG9D,CAAC,CAAC;YACH,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACzD,cAAc,CAAC,GAAG,CAChB,CAAC,GAAG,CAAC,EACL,CAAC,CAAC,SAAS,EACX,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,UAAU,EACZ,CAAC,CAAC,iBAAiB,EACnB,CAAC,CAAC,qBAAqB,CACxB,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,MAAM,YAAY,GAAG,sBAAsB,CAAC,EAAE,CAAC,CAAC;YAChD,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,yBAAyB,CACjC,iEAAiE,CAClE,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;QAED,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACvC,8BAA8B,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,+BAA+B,CAAC,SAAS,CAAC,CAAC;QAE9D,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,mBAAmB;YACnB,yBAAyB;YACzB,qBAAqB,EAAE,aAAa,CAAC,MAAM;YAC3C,oBAAoB,EAAE,SAAS,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM;YACnE,mBAAmB,EAAE,SAAS,CAAC,WAAW,CAAC,mBAAmB,CAAC,MAAM;YACrE,eAAe,EAAE,WAAW;YAC5B,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,KAAK,yBAAyB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO;YACnH,oBAAoB,EAClB,UAAU,CAAC,oBAAoB,KAAK,0BAA0B;gBAC5D,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,iCAAiC;SACxC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,yBAAyB;IACvC,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,EAAE,CAAC,IAAI,CAAC;;;;;;;;KAQP,CAAC,CAAC;QACH,EAAE,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;AACH,CAAC"}

package/dist/shields/formats/wasm.d.ts

@@ -28,5 +28,11 @@ export declare function protectWasmBinary(bytes: Buffer, options?: {
     readonly buffer: Buffer;
     readonly customSectionsAdded: number;
     readonly chaffPayloadsEmbedded: number;
+    readonly canaryTokensEmbedded: number;
+    readonly diagnosticsEmbedded: number;
+    readonly interfaceDescriptorsEmbedded: number;
+    readonly projectedInterfaceChargeBytes: number;
+    readonly exceedsRepresentationBudget: boolean;
+    readonly exportDecoysInjected: number;
 };
 //# sourceMappingURL=wasm.d.ts.map

package/dist/shields/formats/wasm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wasm.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/wasm.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AA+DD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,CAwFtE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IACP,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B,GACL;IACD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC,CA0DA"}
+{"version":3,"file":"wasm.d.ts","sourceRoot":"","sources":["../../../src/shields/formats/wasm.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAI/D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAyHD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,qBAAqB,CAwFtE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;IACP,QAAQ,CAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC5B,GACL;IACD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;IAC9C,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,2BAA2B,EAAE,OAAO,CAAC;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC,CAsJA"}