dartmind 17.0.0

package/dist/engine/GateEnforcer.d.ts

@@ -0,0 +1,173 @@
+/**
+ * FlutterAI V16 - GateEnforcer
+ * Issue 25.1: Gate Bypass Vulnerability Prevention
+ *
+ * CRITICAL SECURITY COMPONENT:
+ * - NO code output without ALL gates passing
+ * - NO "skip gate" parameter
+ * - NO conditional gate execution based on user input
+ * - Gates run even in "fast mode"
+ *
+ * @module engine/GateEnforcer
+ * @version 16.0.0
+ */
+import { EventEmitter } from 'events';
+/**
+ * Gate IDs - all gates that must pass
+ * CRITICAL: This list cannot be modified at runtime
+ */
+export type RequiredGateId = 'G0.5-InputScrubber' | 'G0.6-PromptGuard' | 'G1-SemanticValidator' | 'G2-ContextValidator' | 'G3-OutputValidator' | 'G4-CodeSafetyValidator';
+/**
+ * Gate execution result
+ */
+export interface GateExecutionResult {
+    gateId: RequiredGateId;
+    passed: boolean;
+    executionTimeMs: number;
+    timestamp: Date;
+    details?: string;
+    severity?: 'warning' | 'error' | 'critical';
+}
+/**
+ * Enforcement state - tracks which gates have passed
+ */
+export interface EnforcementState {
+    sessionId: string;
+    startedAt: Date;
+    gateResults: Map<RequiredGateId, GateExecutionResult>;
+    outputAllowed: boolean;
+    lockedAt?: Date;
+    lockReason?: string;
+}
+/**
+ * Gate executor function signature
+ */
+export type GateExecutor<T = unknown> = (input: T) => Promise<GateExecutionResult>;
+/**
+ * Gate configuration (read-only after initialization)
+ */
+export interface GateConfig {
+    readonly gateId: RequiredGateId;
+    readonly required: true;
+    readonly timeout: number;
+    readonly executor: GateExecutor;
+}
+export declare class GateEnforcer extends EventEmitter {
+    private readonly gates;
+    private state;
+    private readonly sessionId;
+    private totalExecutions;
+    private totalBlocks;
+    private bypassAttempts;
+    constructor();
+    /**
+     * Register a gate executor
+     * SECURITY: Gates can only be registered, never removed or disabled
+     */
+    registerGate(gateId: RequiredGateId, executor: GateExecutor, timeout?: number): void;
+    /**
+     * Execute a single gate
+     * SECURITY: Cannot be skipped, always records result
+     */
+    executeGate(gateId: RequiredGateId, input: unknown): Promise<GateExecutionResult>;
+    /**
+     * Execute ALL required gates in sequence
+     * SECURITY: ALL gates must pass, no early exit on success
+     */
+    executeAllGates(input: unknown): Promise<{
+        allPassed: boolean;
+        results: GateExecutionResult[];
+        failedGates: RequiredGateId[];
+    }>;
+    /**
+     * CRITICAL: Verify output is allowed
+     * MUST be called before ANY output generation
+     * @throws If gates haven't passed
+     */
+    verifyOutputAllowed(): void;
+    /**
+     * Check if output is currently allowed (non-throwing version)
+     */
+    isOutputAllowed(): boolean;
+    /**
+     * SECURITY: Detect and block bypass attempts
+     * Called when suspicious activity is detected
+     */
+    reportBypassAttempt(source: string, details: string): void;
+    /**
+     * Lock output generation (cannot be unlocked in same session)
+     */
+    private lockOutput;
+    /**
+     * Reset for new request (within same session)
+     * SECURITY: Does NOT clear lock state if locked
+     */
+    resetForNewRequest(): void;
+    /**
+     * Get enforcement status
+     */
+    getStatus(): {
+        sessionId: string;
+        sessionAge: number;
+        gatesExecuted: RequiredGateId[];
+        gatesPassed: RequiredGateId[];
+        gatesFailed: RequiredGateId[];
+        gatesMissing: RequiredGateId[];
+        outputAllowed: boolean;
+        locked: boolean;
+        lockReason?: string;
+    };
+    /**
+     * Get enforcement statistics
+     */
+    getStats(): {
+        totalExecutions: number;
+        totalBlocks: number;
+        bypassAttempts: number;
+        blockRate: number;
+    };
+    /**
+     * Get list of required gates
+     */
+    getRequiredGates(): readonly RequiredGateId[];
+    /**
+     * Check if all gates are registered
+     */
+    areAllGatesRegistered(): boolean;
+    /**
+     * Get missing gate registrations
+     */
+    getMissingGateRegistrations(): RequiredGateId[];
+    private recordGateResult;
+    private createFreshState;
+    private isSessionExpired;
+    private generateSessionId;
+    private createTimeout;
+}
+/**
+ * Create a GateEnforcer instance
+ * SECURITY: Each request should use a fresh enforcer
+ */
+export declare function createGateEnforcer(): GateEnforcer;
+/**
+ * Create a pre-configured GateEnforcer with standard gates
+ * Use this for production environments
+ */
+export declare function createProductionEnforcer(gates: {
+    inputScrubber: GateExecutor;
+    promptGuard: GateExecutor;
+    semanticValidator: GateExecutor;
+    contextValidator: GateExecutor;
+    outputValidator: GateExecutor;
+    codeSafetyValidator: GateExecutor;
+}): GateEnforcer;
+/**
+ * SECURITY: Validate that no bypass parameters exist in config
+ * Call this to audit configs for bypass vulnerabilities
+ */
+export declare function auditForBypassVulnerabilities(config: Record<string, unknown>): {
+    safe: boolean;
+    vulnerabilities: string[];
+};
+export default GateEnforcer;
+//# sourceMappingURL=GateEnforcer.d.ts.map

package/dist/engine/GateEnforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GateEnforcer.d.ts","sourceRoot":"","sources":["../../src/engine/GateEnforcer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAOtC;;;GAGG;AACH,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,sBAAsB,GACtB,qBAAqB,GACrB,oBAAoB,GACpB,wBAAwB,CAAC;AAE7B;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAC;IACtD,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAEnF;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC;AAiCD,qBAAa,YAAa,SAAQ,YAAY;IAC5C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA8C;IACpE,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IAGnC,OAAO,CAAC,eAAe,CAAK;IAC5B,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,cAAc,CAAK;;IAQ3B;;;OAGG;IACH,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,SAAuB,GAAG,IAAI;IAsBlG;;;OAGG;IACG,WAAW,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA8CvF;;;OAGG;IACG,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;QAC7C,SAAS,EAAE,OAAO,CAAC;QACnB,OAAO,EAAE,mBAAmB,EAAE,CAAC;QAC/B,WAAW,EAAE,cAAc,EAAE,CAAC;KAC/B,CAAC;IA6BF;;;;OAIG;IACH,mBAAmB,IAAI,IAAI;IA8C3B;;OAEG;IACH,eAAe,IAAI,OAAO;IAa1B;;;OAGG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAe1D;;OAEG;IACH,OAAO,CAAC,UAAU;IASlB;;;OAGG;IACH,kBAAkB,IAAI,IAAI;IAgB1B;;OAEG;IACH,SAAS,IAAI;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,cAAc,EAAE,CAAC;QAChC,WAAW,EAAE,cAAc,EAAE,CAAC;QAC9B,WAAW,EAAE,cAAc,EAAE,CAAC;QAC9B,YAAY,EAAE,cAAc,EAAE,CAAC;QAC/B,aAAa,EAAE,OAAO,CAAC;QACvB,MAAM,EAAE,OAAO,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB;IAiCD;;OAEG;IACH,QAAQ,IAAI;QACV,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;KACnB;IASD;;OAEG;IACH,gBAAgB,IAAI,SAAS,cAAc,EAAE;IAI7C;;OAEG;IACH,qBAAqB,IAAI,OAAO;IAIhC;;OAEG;IACH,2BAA2B,IAAI,cAAc,EAAE;IAM/C,OAAO,CAAC,gBAAgB;IAKxB,OAAO,CAAC,gBAAgB;IASxB,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,aAAa;CActB;AAMD;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAEjD;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,aAAa,EAAE,YAAY,CAAC;IAC5B,WAAW,EAAE,YAAY,CAAC;IAC1B,iBAAiB,EAAE,YAAY,CAAC;IAChC,gBAAgB,EAAE,YAAY,CAAC;IAC/B,eAAe,EAAE,YAAY,CAAC;IAC9B,mBAAmB,EAAE,YAAY,CAAC;CACnC,GAAG,YAAY,CAWf;AAMD;;;GAGG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAC9E,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B,CAyCA;AAMD,eAAe,YAAY,CAAC"}

package/dist/engine/GateEnforcer.js

@@ -0,0 +1,418 @@
+/**
+ * FlutterAI V16 - GateEnforcer
+ * Issue 25.1: Gate Bypass Vulnerability Prevention
+ *
+ * CRITICAL SECURITY COMPONENT:
+ * - NO code output without ALL gates passing
+ * - NO "skip gate" parameter
+ * - NO conditional gate execution based on user input
+ * - Gates run even in "fast mode"
+ *
+ * @module engine/GateEnforcer
+ * @version 16.0.0
+ */
+import { EventEmitter } from 'events';
+import { ErrorSurface, Errors } from '../errors/ErrorSurface.js';
+// ============================================================================
+// Constants
+// ============================================================================
+/**
+ * IMMUTABLE list of required gates
+ * SECURITY: This array is frozen and cannot be modified
+ */
+const REQUIRED_GATES = Object.freeze([
+    'G0.5-InputScrubber',
+    'G0.6-PromptGuard',
+    'G1-SemanticValidator',
+    'G2-ContextValidator',
+    'G3-OutputValidator',
+    'G4-CodeSafetyValidator',
+]);
+/**
+ * Default gate timeout (5 seconds)
+ */
+const DEFAULT_GATE_TIMEOUT = 5000;
+/**
+ * Maximum session lifetime (1 hour)
+ */
+const MAX_SESSION_LIFETIME = 60 * 60 * 1000;
+// ============================================================================
+// GateEnforcer Class
+// ============================================================================
+export class GateEnforcer extends EventEmitter {
+    gates = new Map();
+    state;
+    sessionId;
+    // Stats (private, no bypass)
+    totalExecutions = 0;
+    totalBlocks = 0;
+    bypassAttempts = 0;
+    constructor() {
+        super();
+        this.sessionId = this.generateSessionId();
+        this.state = this.createFreshState();
+    }
+    /**
+     * Register a gate executor
+     * SECURITY: Gates can only be registered, never removed or disabled
+     */
+    registerGate(gateId, executor, timeout = DEFAULT_GATE_TIMEOUT) {
+        if (this.gates.has(gateId)) {
+            // Gate already registered - emit warning but don't replace
+            this.emit('warning', {
+                type: 'duplicate_registration',
+                gateId,
+                message: 'Gate already registered, keeping original',
+            });
+            return;
+        }
+        const config = {
+            gateId,
+            required: true, // ALWAYS required
+            timeout,
+            executor,
+        };
+        this.gates.set(gateId, Object.freeze(config));
+        this.emit('gate:registered', { gateId });
+    }
+    /**
+     * Execute a single gate
+     * SECURITY: Cannot be skipped, always records result
+     */
+    async executeGate(gateId, input) {
+        const config = this.gates.get(gateId);
+        if (!config) {
+            // Gate not registered - this is a CRITICAL error
+            const result = {
+                gateId,
+                passed: false,
+                executionTimeMs: 0,
+                timestamp: new Date(),
+                details: 'Gate not registered',
+                severity: 'critical',
+            };
+            this.recordGateResult(result);
+            return result;
+        }
+        const startTime = Date.now();
+        try {
+            // Execute with timeout
+            const result = await Promise.race([
+                config.executor(input),
+                this.createTimeout(config.timeout, gateId),
+            ]);
+            result.executionTimeMs = Date.now() - startTime;
+            result.timestamp = new Date();
+            this.recordGateResult(result);
+            return result;
+        }
+        catch (error) {
+            const result = {
+                gateId,
+                passed: false,
+                executionTimeMs: Date.now() - startTime,
+                timestamp: new Date(),
+                details: error instanceof Error ? error.message : 'Unknown error',
+                severity: 'error',
+            };
+            this.recordGateResult(result);
+            return result;
+        }
+    }
+    /**
+     * Execute ALL required gates in sequence
+     * SECURITY: ALL gates must pass, no early exit on success
+     */
+    async executeAllGates(input) {
+        this.totalExecutions++;
+        const results = [];
+        const failedGates = [];
+        // Execute ALL gates - no early exit
+        for (const gateId of REQUIRED_GATES) {
+            const result = await this.executeGate(gateId, input);
+            results.push(result);
+            if (!result.passed) {
+                failedGates.push(gateId);
+            }
+        }
+        const allPassed = failedGates.length === 0;
+        if (!allPassed) {
+            this.totalBlocks++;
+            this.lockOutput(`Gates failed: ${failedGates.join(', ')}`);
+            this.emit('gates:failed', { failedGates, results });
+        }
+        else {
+            this.state.outputAllowed = true;
+            this.emit('gates:passed', { results });
+        }
+        return { allPassed, results, failedGates };
+    }
+    /**
+     * CRITICAL: Verify output is allowed
+     * MUST be called before ANY output generation
+     * @throws If gates haven't passed
+     */
+    verifyOutputAllowed() {
+        // Check session validity
+        if (this.isSessionExpired()) {
+            ErrorSurface.mustSurface(Errors.gateFailed('SESSION', 'Session expired, gates must be re-run'));
+        }
+        // Check if output is locked
+        if (this.state.lockedAt) {
+            ErrorSurface.mustSurface(Errors.outputBlocked([this.state.lockReason || 'Output locked']));
+        }
+        // Check all required gates have passed
+        const missingGates = [];
+        const failedGates = [];
+        for (const gateId of REQUIRED_GATES) {
+            const result = this.state.gateResults.get(gateId);
+            if (!result) {
+                missingGates.push(gateId);
+            }
+            else if (!result.passed) {
+                failedGates.push(gateId);
+            }
+        }
+        if (missingGates.length > 0) {
+            ErrorSurface.mustSurface(Errors.gateFailed('MISSING', `Required gates not executed: ${missingGates.join(', ')}`));
+        }
+        if (failedGates.length > 0) {
+            ErrorSurface.mustSurface(Errors.outputBlocked(failedGates));
+        }
+        // Verify output is explicitly allowed
+        if (!this.state.outputAllowed) {
+            ErrorSurface.mustSurface(Errors.outputBlocked(['Output not explicitly allowed after gate execution']));
+        }
+    }
+    /**
+     * Check if output is currently allowed (non-throwing version)
+     */
+    isOutputAllowed() {
+        if (this.isSessionExpired())
+            return false;
+        if (this.state.lockedAt)
+            return false;
+        if (!this.state.outputAllowed)
+            return false;
+        for (const gateId of REQUIRED_GATES) {
+            const result = this.state.gateResults.get(gateId);
+            if (!result || !result.passed)
+                return false;
+        }
+        return true;
+    }
+    /**
+     * SECURITY: Detect and block bypass attempts
+     * Called when suspicious activity is detected
+     */
+    reportBypassAttempt(source, details) {
+        this.bypassAttempts++;
+        this.lockOutput(`Bypass attempt detected: ${source}`);
+        this.emit('security:bypass_attempt', {
+            source,
+            details,
+            timestamp: new Date(),
+            sessionId: this.sessionId,
+        });
+        // Log and throw
+        ErrorSurface.mustSurface(Errors.gateBypassAttempted(source));
+    }
+    /**
+     * Lock output generation (cannot be unlocked in same session)
+     */
+    lockOutput(reason) {
+        if (!this.state.lockedAt) {
+            this.state.lockedAt = new Date();
+            this.state.lockReason = reason;
+            this.state.outputAllowed = false;
+            this.emit('output:locked', { reason });
+        }
+    }
+    /**
+     * Reset for new request (within same session)
+     * SECURITY: Does NOT clear lock state if locked
+     */
+    resetForNewRequest() {
+        if (this.state.lockedAt) {
+            // Cannot reset a locked session
+            this.emit('warning', {
+                type: 'reset_blocked',
+                message: 'Cannot reset locked session',
+            });
+            return;
+        }
+        // Clear gate results but keep session
+        this.state.gateResults.clear();
+        this.state.outputAllowed = false;
+        this.emit('state:reset');
+    }
+    /**
+     * Get enforcement status
+     */
+    getStatus() {
+        const gatesExecuted = [];
+        const gatesPassed = [];
+        const gatesFailed = [];
+        const gatesMissing = [];
+        for (const gateId of REQUIRED_GATES) {
+            const result = this.state.gateResults.get(gateId);
+            if (!result) {
+                gatesMissing.push(gateId);
+            }
+            else {
+                gatesExecuted.push(gateId);
+                if (result.passed) {
+                    gatesPassed.push(gateId);
+                }
+                else {
+                    gatesFailed.push(gateId);
+                }
+            }
+        }
+        return {
+            sessionId: this.sessionId,
+            sessionAge: Date.now() - this.state.startedAt.getTime(),
+            gatesExecuted,
+            gatesPassed,
+            gatesFailed,
+            gatesMissing,
+            outputAllowed: this.state.outputAllowed,
+            locked: !!this.state.lockedAt,
+            lockReason: this.state.lockReason,
+        };
+    }
+    /**
+     * Get enforcement statistics
+     */
+    getStats() {
+        return {
+            totalExecutions: this.totalExecutions,
+            totalBlocks: this.totalBlocks,
+            bypassAttempts: this.bypassAttempts,
+            blockRate: this.totalExecutions > 0 ? this.totalBlocks / this.totalExecutions : 0,
+        };
+    }
+    /**
+     * Get list of required gates
+     */
+    getRequiredGates() {
+        return REQUIRED_GATES;
+    }
+    /**
+     * Check if all gates are registered
+     */
+    areAllGatesRegistered() {
+        return REQUIRED_GATES.every((gateId) => this.gates.has(gateId));
+    }
+    /**
+     * Get missing gate registrations
+     */
+    getMissingGateRegistrations() {
+        return REQUIRED_GATES.filter((gateId) => !this.gates.has(gateId));
+    }
+    // Private methods
+    recordGateResult(result) {
+        this.state.gateResults.set(result.gateId, result);
+        this.emit('gate:executed', result);
+    }
+    createFreshState() {
+        return {
+            sessionId: this.sessionId,
+            startedAt: new Date(),
+            gateResults: new Map(),
+            outputAllowed: false,
+        };
+    }
+    isSessionExpired() {
+        return Date.now() - this.state.startedAt.getTime() > MAX_SESSION_LIFETIME;
+    }
+    generateSessionId() {
+        return `enf-${Date.now()}-${Math.random().toString(36).substring(2, 10)}`;
+    }
+    createTimeout(ms, gateId) {
+        return new Promise((_, reject) => {
+            setTimeout(() => {
+                reject(ErrorSurface.create({
+                    code: '002',
+                    category: 'GATE_FAILURE',
+                    severity: 'HIGH',
+                    message: `Gate ${gateId} timed out after ${ms}ms`,
+                }));
+            }, ms);
+        });
+    }
+}
+// ============================================================================
+// Factory Functions
+// ============================================================================
+/**
+ * Create a GateEnforcer instance
+ * SECURITY: Each request should use a fresh enforcer
+ */
+export function createGateEnforcer() {
+    return new GateEnforcer();
+}
+/**
+ * Create a pre-configured GateEnforcer with standard gates
+ * Use this for production environments
+ */
+export function createProductionEnforcer(gates) {
+    const enforcer = new GateEnforcer();
+    enforcer.registerGate('G0.5-InputScrubber', gates.inputScrubber);
+    enforcer.registerGate('G0.6-PromptGuard', gates.promptGuard);
+    enforcer.registerGate('G1-SemanticValidator', gates.semanticValidator);
+    enforcer.registerGate('G2-ContextValidator', gates.contextValidator);
+    enforcer.registerGate('G3-OutputValidator', gates.outputValidator);
+    enforcer.registerGate('G4-CodeSafetyValidator', gates.codeSafetyValidator);
+    return enforcer;
+}
+// ============================================================================
+// Bypass Detection Utilities
+// ============================================================================
+/**
+ * SECURITY: Validate that no bypass parameters exist in config
+ * Call this to audit configs for bypass vulnerabilities
+ */
+export function auditForBypassVulnerabilities(config) {
+    const vulnerabilities = [];
+    // Check for known bypass parameter names
+    const dangerousKeys = [
+        'skipGates',
+        'skip_gates',
+        'bypassGates',
+        'bypass_gates',
+        'disableGates',
+        'disable_gates',
+        'noGates',
+        'no_gates',
+        'gatesEnabled',
+        'gates_enabled',
+        'fastMode',
+        'fast_mode',
+        'unsafeMode',
+        'unsafe_mode',
+        'debugBypass',
+        'debug_bypass',
+    ];
+    for (const key of Object.keys(config)) {
+        const lowerKey = key.toLowerCase();
+        if (dangerousKeys.some((dk) => lowerKey.includes(dk.toLowerCase()))) {
+            vulnerabilities.push(`Dangerous parameter detected: ${key}`);
+        }
+    }
+    // Check for arrays that might contain gate IDs to skip
+    for (const [key, value] of Object.entries(config)) {
+        if (Array.isArray(value) && value.some((v) => typeof v === 'string' && v.includes('Gate'))) {
+            vulnerabilities.push(`Potential gate skip array: ${key}`);
+        }
+    }
+    return {
+        safe: vulnerabilities.length === 0,
+        vulnerabilities,
+    };
+}
+// ============================================================================
+// Exports
+// ============================================================================
+export default GateEnforcer;
+//# sourceMappingURL=GateEnforcer.js.map

package/dist/engine/GateEnforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GateEnforcer.js","sourceRoot":"","sources":["../../src/engine/GateEnforcer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAyDjE,+EAA+E;AAC/E,YAAY;AACZ,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,cAAc,GAA8B,MAAM,CAAC,MAAM,CAAC;IAC9D,oBAAoB;IACpB,kBAAkB;IAClB,sBAAsB;IACtB,qBAAqB;IACrB,oBAAoB;IACpB,wBAAwB;CACzB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC;;GAEG;AACH,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,MAAM,OAAO,YAAa,SAAQ,YAAY;IAC3B,KAAK,GAAoC,IAAI,GAAG,EAAE,CAAC;IAC5D,KAAK,CAAmB;IACf,SAAS,CAAS;IAEnC,6BAA6B;IACrB,eAAe,GAAG,CAAC,CAAC;IACpB,WAAW,GAAG,CAAC,CAAC;IAChB,cAAc,GAAG,CAAC,CAAC;IAE3B;QACE,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,MAAsB,EAAE,QAAsB,EAAE,OAAO,GAAG,oBAAoB;QACzF,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,2DAA2D;YAC3D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;gBACnB,IAAI,EAAE,wBAAwB;gBAC9B,MAAM;gBACN,OAAO,EAAE,2CAA2C;aACrD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAe;YACzB,MAAM;YACN,QAAQ,EAAE,IAAI,EAAE,kBAAkB;YAClC,OAAO;YACP,QAAQ;SACT,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,MAAsB,EAAE,KAAc;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,iDAAiD;YACjD,MAAM,MAAM,GAAwB;gBAClC,MAAM;gBACN,MAAM,EAAE,KAAK;gBACb,eAAe,EAAE,CAAC;gBAClB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,OAAO,EAAE,qBAAqB;gBAC9B,QAAQ,EAAE,UAAU;aACrB,CAAC;YACF,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,IAAI,CAAC;YACH,uBAAuB;YACvB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAChC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACtB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;aAC3C,CAAC,CAAC;YAEH,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAChD,MAAM,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAE9B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAwB;gBAClC,MAAM;gBACN,MAAM,EAAE,KAAK;gBACb,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBACvC,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;gBACjE,QAAQ,EAAE,OAAO;aAClB,CAAC;YAEF,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC9B,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,KAAc;QAKlC,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,MAAM,OAAO,GAA0B,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAqB,EAAE,CAAC;QAEzC,oCAAoC;QACpC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAErB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC;QAE3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,UAAU,CAAC,iBAAiB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,mBAAmB;QACjB,yBAAyB;QACzB,IAAI,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC5B,YAAY,CAAC,WAAW,CACtB,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,uCAAuC,CAAC,CACtE,CAAC;QACJ,CAAC;QAED,4BAA4B;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxB,YAAY,CAAC,WAAW,CACtB,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,eAAe,CAAC,CAAC,CACjE,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,MAAM,YAAY,GAAqB,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAqB,EAAE,CAAC;QAEzC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC1B,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,YAAY,CAAC,WAAW,CACtB,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,gCAAgC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CACxF,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9D,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;YAC9B,YAAY,CAAC,WAAW,CACtB,MAAM,CAAC,aAAa,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,IAAI,CAAC,gBAAgB,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAE5C,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,mBAAmB,CAAC,MAAc,EAAE,OAAe;QACjD,IAAI,CAAC,cAAc,EAAE,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QAEtD,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACnC,MAAM;YACN,OAAO;YACP,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC,CAAC;QAEH,gBAAgB;QAChB,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,MAAc;QAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,kBAAkB;QAChB,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACxB,gCAAgC;YAChC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;gBACnB,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,6BAA6B;aACvC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,SAAS;QAWP,MAAM,aAAa,GAAqB,EAAE,CAAC;QAC3C,MAAM,WAAW,GAAqB,EAAE,CAAC;QACzC,MAAM,WAAW,GAAqB,EAAE,CAAC;QACzC,MAAM,YAAY,GAAqB,EAAE,CAAC;QAE1C,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3B,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE;YACvD,aAAa;YACb,WAAW;YACX,WAAW;YACX,YAAY;YACZ,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;YACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC7B,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU;SAClC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ;QAMN,OAAO;YACL,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,SAAS,EAAE,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;SAClF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,qBAAqB;QACnB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,2BAA2B;QACzB,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,kBAAkB;IAEV,gBAAgB,CAAC,MAA2B;QAClD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IAEO,gBAAgB;QACtB,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,WAAW,EAAE,IAAI,GAAG,EAAE;YACtB,aAAa,EAAE,KAAK;SACrB,CAAC;IACJ,CAAC;IAEO,gBAAgB;QACtB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,oBAAoB,CAAC;IAC5E,CAAC;IAEO,iBAAiB;QACvB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;IAEO,aAAa,CAAC,EAAU,EAAE,MAAsB;QACtD,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/B,UAAU,CAAC,GAAG,EAAE;gBACd,MAAM,CACJ,YAAY,CAAC,MAAM,CAAC;oBAClB,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,cAAc;oBACxB,QAAQ,EAAE,MAAM;oBAChB,OAAO,EAAE,QAAQ,MAAM,oBAAoB,EAAE,IAAI;iBAClD,CAAC,CACH,CAAC;YACJ,CAAC,EAAE,EAAE,CAAC,CAAC;QACT,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,YAAY,EAAE,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAOxC;IACC,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;IAEpC,QAAQ,CAAC,YAAY,CAAC,oBAAoB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IACjE,QAAQ,CAAC,YAAY,CAAC,kBAAkB,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7D,QAAQ,CAAC,YAAY,CAAC,sBAAsB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACvE,QAAQ,CAAC,YAAY,CAAC,qBAAqB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrE,QAAQ,CAAC,YAAY,CAAC,oBAAoB,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;IACnE,QAAQ,CAAC,YAAY,CAAC,wBAAwB,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAE3E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAA+B;IAI3E,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,yCAAyC;IACzC,MAAM,aAAa,GAAG;QACpB,WAAW;QACX,YAAY;QACZ,aAAa;QACb,cAAc;QACd,cAAc;QACd,eAAe;QACf,SAAS;QACT,UAAU;QACV,cAAc;QACd,eAAe;QACf,UAAU;QACV,WAAW;QACX,YAAY;QACZ,aAAa;QACb,aAAa;QACb,cAAc;KACf,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;YACpE,eAAe,CAAC,IAAI,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC3F,eAAe,CAAC,IAAI,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,eAAe,CAAC,MAAM,KAAK,CAAC;QAClC,eAAe;KAChB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E,eAAe,YAAY,CAAC"}