edgeaegis 2026.10.1

package/tools/.build/scr/seclang/pcre2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pcre2.js","sourceRoot":"","sources":["../../../../scr/seclang/pcre2.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAuBpC,MAAM,OAAO,UAAW,SAAQ,KAAK;IAGjB,IAAI;IAFtB,YACE,OAAe,EACC,IAAa;QAE7B,KAAK,CAAC,OAAO,CAAC,CAAC;oBAFC,IAAI;QAGpB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAyC,EACzC,EAAE,UAAU,GAAG,OAAO,EAAE,UAAU,GAAG,KAAK,EAAE,WAAW,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG,EAAE;IAEjF,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,IAAI,OAAgB,CAAC;IACrB,MAAM,OAAO,GAAG;QACd,GAAG,EAAE;YACH,sBAAsB,CAAC,IAAY;gBACjC,IAAI,CAAC,OAAO,IAAI,IAAI,GAAG,WAAW;oBAAE,OAAO,CAAC,CAAC;gBAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;gBAC9B,IAAI,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC/E,OAAO,CAAC,CAAC;gBACX,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,CAAC;gBACX,CAAC;YACH,CAAC;SACF;KACF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,MAA4B,EAAE,OAAO,CAAC,CAAC;IACpF,MAAM,QAAQ,GACZ,MAAM,YAAY,WAAW,CAAC,QAAQ;QACpC,CAAC,CAAC,MAAM;QACR,CAAC,CAAE,MAAoD,CAAC,QAAQ,CAAC;IACrE,OAAO,GAAG,QAAQ,CAAC,OAA6B,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,WAAW;QAChD,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,SAAS,QAAQ,CAAC,IAAY;QAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,UAAU,CAAC,yBAAyB,CAAC,CAAC;QAC1D,OAAO,GAAG,CAAC;IACb,CAAC;IACD,SAAS,MAAM,CAAC,GAAW,EAAE,QAAgB;QAC3C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,SAAS,MAAM,CAAC,KAAa,EAAE,MAAM,GAAG,KAAK;QAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IACvC,CAAC;IACD,OAAO;QACL,OAAO,CAAC,OAAe,EAAE,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,EAAE;YAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC3B,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,IAAI,CAAC;gBACH,qFAAqF;gBACrF,GAAG,GAAG,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;gBACtF,IAAI,CAAC,GAAG;oBAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACzE,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,uBAAuB,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;oBACrD,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;gBACpD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;YACrD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;YACD,OAAO;gBACL,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK;gBACvB,OAAO;oBACL,IAAI,GAAG;wBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;oBACtC,GAAG,GAAG,CAAC,CAAC;gBACV,CAAC;gBACD,OAAO,CAAC,KAAa;oBACnB,IAAI,MAAM,GAAwD,IAAI,CAAC;oBACvE,OAAO;wBACL,IAAI;4BACF,IAAI,CAAC,GAAG;gCAAE,MAAM,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAC;4BAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;4BAClC,IAAI,CAAC;gCACH,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;oCAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;oCAC9B,IAAI,CAAC;wCACH,MAAM,EAAE,GAAG,OAAO,CAAC,gBAAgB,CACjC,GAAG,EACH,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,MAAM,EACZ,MAAM,EACN,IAAI,EACJ,UAAU,EACV,UAAU,EACV,CAAC,EACD,CAAC,EACD,CAAC,EACD,CAAC,CACF,CAAC;wCACF,IAAI,EAAE,KAAK,CAAC,GAAG;4CAAE,SAAS;wCAC1B,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;4CACZ,OAAO,CAAC,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;4CACnD,MAAM,IAAI,UAAU,CAAC,gBAAgB,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;wCACnE,CAAC;wCACD,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;4CACX,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;4CAClE,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;4CAC7B,IAAI,GAAG,GAAG,CAAC;gDAAE,MAAM,IAAI,UAAU,CAAC,iCAAiC,CAAC,CAAC;4CACrE,IAAI,MAAM,GAAG,EAAE,CAAC;4CAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI;gDAChC,MAAM,IAAI,MAAM,CAAC,YAAY,CAC3B,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAC9C,CAAC;4CACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wCAC9B,CAAC;;4CAAM,MAAM,GAAG,IAAI,CAAC;wCACrB,OAAO,MAAM,KAAK,IAAI,CAAC;oCACzB,CAAC;4CAAS,CAAC;wCACT,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oCACvB,CAAC;gCACH,CAAC;gCACD,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;4BAC7D,CAAC;oCAAS,CAAC;gCACT,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;4BAC1B,CAAC;wBACH,CAAC;wBACD,KAAK,CAAC,KAAa;4BACjB,IAAI,CAAC,MAAM;gCAAE,MAAM,IAAI,UAAU,CAAC,2BAA2B,CAAC,CAAC;4BAC/D,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;wBACzE,CAAC;qBACF,CAAC;gBACJ,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/tools/.build/scr/seclang/sources.d.ts

@@ -0,0 +1,6 @@
+export interface SecLangSourceOptions {
+    fileName?: string;
+    files?: Record<string, string>;
+}
+export declare function sourcePath(base: string, relative: string): string;
+export declare function expandSecLangSources(source: string, { fileName, files }?: SecLangSourceOptions): import("./syntax.js").SecLangStatement[];

package/tools/.build/scr/seclang/sources.js

@@ -0,0 +1,59 @@
+import { parseSecLangSyntax } from "./syntax.js";
+export function sourcePath(base, relative) {
+    if (/^[A-Za-z]:|^[\\/]/.test(relative))
+        throw new Error("SecLang bundle paths must be relative");
+    const parts = base.split("/").slice(0, -1);
+    for (const part of relative.replace(/\\/g, "/").split("/")) {
+        if (!part || part === ".")
+            continue;
+        if (part === "..") {
+            if (!parts.length)
+                throw new Error("SecLang include escapes bundle");
+            parts.pop();
+        }
+        else
+            parts.push(part);
+    }
+    return parts.join("/");
+}
+export function expandSecLangSources(source, { fileName = "main.conf", files = {} } = {}) {
+    const stack = new Set();
+    let bytes = 0;
+    const expand = (name, text, depth) => {
+        if (stack.has(name))
+            throw new Error(`Cyclic SecLang Include: ${name}`);
+        bytes += new TextEncoder().encode(text).length;
+        if (depth > 32 || bytes > 16 * 1024 * 1024)
+            throw new Error("SecLang include resource limit");
+        stack.add(name);
+        const result = [];
+        for (const statement of parseSecLangSyntax(text)) {
+            if (!["Include", "IncludeOptional"].includes(statement.directive)) {
+                result.push({ ...statement, file: name });
+                continue;
+            }
+            if (statement.args.length !== 1)
+                throw new Error(`Malformed Include at ${name}:${statement.line}`);
+            const path = sourcePath(name, statement.args[0]);
+            const pattern = new RegExp(`^${path
+                .split(/([*?])/)
+                .map((part) => part === "*"
+                ? "[^/]*"
+                : part === "?"
+                    ? "[^/]"
+                    : part.replace(/[\\^$+.[\]{}()|]/g, "\\$&"))
+                .join("")}$`);
+            const names = Object.keys(files)
+                .filter((key) => pattern.test(key))
+                .sort();
+            if (!names.length && statement.directive === "Include")
+                throw new Error(`Missing SecLang Include: ${path}`);
+            for (const file of names)
+                result.push(...expand(file, files[file], depth + 1));
+        }
+        stack.delete(name);
+        return result;
+    };
+    return expand(fileName, source, 0);
+}
+//# sourceMappingURL=sources.js.map

package/tools/.build/scr/seclang/sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../../../scr/seclang/sources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAOjD,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,QAAgB;IACvD,IAAI,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG;YAAE,SAAS;QACpC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACrE,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;;YAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAc,EACd,EAAE,QAAQ,GAAG,WAAW,EAAE,KAAK,GAAG,EAAE,EAAE,GAAyB,EAAE;IAEjE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,GAAG,CACb,IAAY,EACZ,IAAY,EACZ,KAAa,EAC0B,EAAE;QACzC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAC;QACxE,KAAK,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QAC/C,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC9F,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,MAAM,MAAM,GAA0C,EAAE,CAAC;QACzD,KAAK,MAAM,SAAS,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC1C,SAAS;YACX,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,IAAI,MAAM,CACxB,IAAI,IAAI;iBACL,KAAK,CAAC,QAAQ,CAAC;iBACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,IAAI,KAAK,GAAG;gBACV,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,IAAI,KAAK,GAAG;oBACZ,CAAC,CAAC,MAAM;oBACR,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAChD;iBACA,IAAI,CAAC,EAAE,CAAC,GAAG,CACf,CAAC;YACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;iBAC7B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;iBAClC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;gBACpD,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,EAAE,CAAC,CAAC;YACtD,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAE,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/tools/.build/scr/seclang/state.d.ts

@@ -0,0 +1,17 @@
+export interface CollectionRecord {
+    values: Map<string, string | number>;
+    expires: Map<string, number>;
+    decay: Map<string, number>;
+    touched: number;
+}
+export declare function collectionRecord(now: number, values?: Map<string, string | number>): CollectionRecord;
+/** Synchronous per-engine state; expiry never relies on an isolate surviving a timer. */
+export declare class CollectionStore {
+    private clock;
+    private timeoutSeconds;
+    private records;
+    constructor(clock: () => number, timeoutSeconds?: number);
+    clear(): void;
+    refresh(record: CollectionRecord): void;
+    get(key: string): CollectionRecord;
+}

package/tools/.build/scr/seclang/state.js

@@ -0,0 +1,53 @@
+export function collectionRecord(now, values = new Map()) {
+    return { values, expires: new Map(), decay: new Map(), touched: now };
+}
+/** Synchronous per-engine state; expiry never relies on an isolate surviving a timer. */
+export class CollectionStore {
+    clock;
+    timeoutSeconds;
+    records = new Map();
+    constructor(clock, timeoutSeconds = 3600) {
+        this.clock = clock;
+        this.timeoutSeconds = timeoutSeconds;
+    }
+    clear() {
+        this.records.clear();
+    }
+    refresh(record) {
+        const now = this.clock();
+        for (const [name, at] of record.expires)
+            if (now >= at) {
+                record.values.delete(name);
+                record.expires.delete(name);
+                record.decay.delete(name);
+            }
+    }
+    get(key) {
+        if (key.length > 4096)
+            throw new Error("Collection key exceeds limit");
+        const now = this.clock();
+        let record = this.records.get(key);
+        if (record && now - record.touched >= this.timeoutSeconds * 1000) {
+            this.records.delete(key);
+            record = undefined;
+        }
+        if (record)
+            this.refresh(record);
+        if (!record) {
+            // Expired empty entries can be reclaimed; live values are never silently evicted.
+            if (this.records.size >= 1024)
+                for (const [name, entry] of this.records) {
+                    this.refresh(entry);
+                    if (entry.values.size === 0 || now - entry.touched >= this.timeoutSeconds * 1000)
+                        this.records.delete(name);
+                }
+            if (this.records.size >= 1024)
+                throw new Error("Persistent collection capacity exceeded");
+            record = collectionRecord(now);
+            this.records.set(key, record);
+        }
+        record.touched = now;
+        return record;
+    }
+}
+//# sourceMappingURL=state.js.map

package/tools/.build/scr/seclang/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../../scr/seclang/state.ts"],"names":[],"mappings":"AAMA,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,MAAM,GAAG,IAAI,GAAG,EAA2B;IAE3C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AACxE,CAAC;AACD,yFAAyF;AACzF,MAAM,OAAO,eAAe;IAGhB,KAAK;IACL,cAAc;IAHhB,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACtD,YACU,KAAmB,EACnB,cAAc,GAAG,IAAI;qBADrB,KAAK;8BACL,cAAc;IACrB,CAAC;IACJ,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,MAAwB;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO;YACrC,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC;gBACd,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC3B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;IACL,CAAC;IACD,GAAG,CAAC,GAAW;QACb,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,GAAG,IAAI,EAAE,CAAC;YACjE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC;QACD,IAAI,MAAM;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,kFAAkF;YAClF,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI;gBAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACzC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACpB,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,cAAc,GAAG,IAAI;wBAC9E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC9B,CAAC;YACH,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC1F,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,GAAG,CAAC;QACrB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/tools/.build/scr/seclang/syntax.d.ts

@@ -0,0 +1,9 @@
+/** First-party SecLang lexer: preserves multiline statements, directives and actions. */
+export interface SecLangStatement {
+    line: number;
+    directive: string;
+    args: string[];
+    raw: string;
+    file?: string;
+}
+export declare function parseSecLangSyntax(input: string): SecLangStatement[];

package/tools/.build/scr/seclang/syntax.js

@@ -0,0 +1,74 @@
+export function parseSecLangSyntax(input) {
+    if (typeof input !== "string")
+        throw new TypeError("SecLang input must be text");
+    const statements = [];
+    let pending = "", start = 1;
+    const lines = input.split(/\r?\n/);
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i].trim();
+        if (!pending && (!line || line.startsWith("#")))
+            continue;
+        if (!pending)
+            start = i + 1;
+        const backslashes = /\\+$/.exec(line)?.[0].length ?? 0;
+        const continued = backslashes % 2 === 1;
+        pending += (continued ? line.slice(0, -1) : line) + (continued ? " " : "");
+        if (!continued) {
+            statements.push({ line: start, raw: pending });
+            pending = "";
+        }
+    }
+    if (pending)
+        throw new Error(`Incomplete continuation at line ${start}`);
+    return statements.map(({ line, raw }) => {
+        const parts = [];
+        let part = "", quote = null, escaped = false, started = false;
+        for (const ch of raw) {
+            if (escaped) {
+                if (ch === quote)
+                    part = part.slice(0, -1);
+                part += ch;
+                escaped = false;
+                continue;
+            }
+            if (ch === "\\" && quote) {
+                part += ch;
+                escaped = true;
+                continue;
+            }
+            if ((ch === "'" || ch === '"') && !quote) {
+                quote = ch;
+                started = true;
+                continue;
+            }
+            if (ch === quote) {
+                quote = null;
+                continue;
+            }
+            if (!quote && /\s/.test(ch)) {
+                if (started) {
+                    parts.push(part);
+                    part = "";
+                    started = false;
+                }
+            }
+            else {
+                part += ch;
+                started = true;
+            }
+        }
+        if (quote)
+            throw new Error(`Unterminated quote at line ${line}`);
+        if (started)
+            parts.push(part);
+        const [directive, ...args] = parts;
+        if (!directive)
+            throw new Error(`Empty SecLang directive at line ${line}`);
+        if (directive === "SecRule" && (args.length < 2 || args.length > 3))
+            throw new Error(`Malformed SecRule at line ${line}`);
+        if (directive === "SecAction" && args.length !== 1)
+            throw new Error(`Malformed SecAction at line ${line}`);
+        return { line, directive, args, raw };
+    });
+}
+//# sourceMappingURL=syntax.js.map

package/tools/.build/scr/seclang/syntax.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syntax.js","sourceRoot":"","sources":["../../../../scr/seclang/syntax.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,EAAE,CAAC;IACtB,IAAI,OAAO,GAAG,EAAE,EACd,KAAK,GAAG,CAAC,CAAC;IACZ,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAAE,SAAS;QAC1D,IAAI,CAAC,OAAO;YAAE,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/C,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAC;IACzE,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE;QACtC,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,IAAI,IAAI,GAAG,EAAE,EACX,KAAK,GAAkB,IAAI,EAC3B,OAAO,GAAG,KAAK,EACf,OAAO,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,EAAE,KAAK,KAAK;oBAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC3C,IAAI,IAAI,EAAE,CAAC;gBACX,OAAO,GAAG,KAAK,CAAC;gBAChB,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAI,EAAE,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;YACD,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACzC,KAAK,GAAG,EAAE,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;gBACf,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;gBACjB,KAAK,GAAG,IAAI,CAAC;gBACb,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5B,IAAI,OAAO,EAAE,CAAC;oBACZ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjB,IAAI,GAAG,EAAE,CAAC;oBACV,OAAO,GAAG,KAAK,CAAC;gBAClB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,IAAI,EAAE,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QACD,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;QACnC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QAC3E,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,SAAS,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/tools/.build/scr/seclang/transforms.d.ts

@@ -0,0 +1,3 @@
+export declare function urlDecode(value: string, unicode?: boolean, mapping?: Map<number, number>): string;
+export declare const transformations: Record<string, (value: string) => string>;
+export declare function transform(value: string, pipeline: string[], unicodeMap?: Map<number, number>): string;

package/tools/.build/scr/seclang/transforms.js

@@ -0,0 +1,157 @@
+import { sha1 } from "@noble/hashes/legacy.js";
+import { octets } from "./bytes.js";
+import { defaultUnicodeMap } from "./unicode.js";
+const whitespace = /[\t\n\v\f\r ]/g;
+const byte = (n) => String.fromCharCode(n & 255);
+const unicodeByte = (n) => byte(n >= 0xff01 && n <= 0xff5e ? n - 0xfee0 : n);
+const escapes = {
+    a: "\x07",
+    b: "\b",
+    f: "\f",
+    n: "\n",
+    r: "\r",
+    t: "\t",
+    v: "\v",
+};
+export function urlDecode(value, unicode = false, mapping = defaultUnicodeMap) {
+    const pattern = unicode ? /%u([\da-f]{4})|%([\da-f]{2})|\+/gi : /%([\da-f]{2})|\+/gi;
+    return value.replace(pattern, (...args) => {
+        const text = args[0];
+        if (text === "+")
+            return " ";
+        if (unicode)
+            return args[1]
+                ? byte(mapping.get(Number.parseInt(args[1], 16)) ??
+                    unicodeByte(Number.parseInt(args[1], 16)).charCodeAt(0))
+                : byte(Number.parseInt(args[2], 16));
+        return byte(Number.parseInt(args[1], 16));
+    });
+}
+function normalizePath(value) {
+    const leading = value.startsWith("/");
+    const trailing = value.endsWith("/") || value.endsWith("/.") || value.endsWith("/..");
+    const parts = [];
+    for (const part of value.split("/")) {
+        if (!part || part === ".")
+            continue;
+        if (part === ".." && parts.length && parts.at(-1) !== "..")
+            parts.pop();
+        else if (part === ".." && leading)
+            continue;
+        else
+            parts.push(part);
+    }
+    const path = `${leading ? "/" : ""}${parts.join("/")}`;
+    return trailing && path && !path.endsWith("/") ? `${path}/` : path;
+}
+export const transformations = {
+    none: (s) => s,
+    lowercase: (s) => s.replace(/[A-Z]/g, (c) => c.toLowerCase()),
+    uppercase: (s) => s.replace(/[a-z]/g, (c) => c.toUpperCase()),
+    trim: (s) => s.replace(/^[\t\n\v\f\r ]+|[\t\n\v\f\r ]+$/g, ""),
+    trimleft: (s) => s.replace(/^[\t\n\v\f\r ]+/, ""),
+    trimright: (s) => s.replace(/[\t\n\v\f\r ]+$/, ""),
+    compresswhitespace: (s) => s.replace(/[\t\n\v\f\r ]+/g, " "),
+    removewhitespace: (s) => s.replace(whitespace, ""),
+    removenulls: (s) => s.replace(/\0/g, ""),
+    replacenulls: (s) => s.replace(/\0/g, " "),
+    urldecode: (s) => urlDecode(s),
+    urldecodeuni: (s) => urlDecode(s, true),
+    urlencode: (s) => [...octets(s)]
+        .map((n) => /[\w.*-]/.test(byte(n)) ? byte(n) : n === 32 ? "+" : `%${n.toString(16).padStart(2, "0")}`)
+        .join(""),
+    length: (s) => String(s.length),
+    hexencode: (s) => [...s].map((c) => c.charCodeAt(0).toString(16).padStart(2, "0")).join(""),
+    hexdecode: (s) => s.replace(/[\da-f]{2}/gi, (n) => byte(Number.parseInt(n, 16))),
+    base64encode: (s) => btoa(s),
+    base64decode: (s) => {
+        try {
+            return atob(s);
+        }
+        catch {
+            return s;
+        }
+    },
+    base64decodeext: (s) => {
+        try {
+            return atob(s.replace(/[^\da-z+/=]/gi, ""));
+        }
+        catch {
+            return s;
+        }
+    },
+    htmlentitydecode: (s) => s.replace(/&#x([\da-f]+);?|&#(\d+);?|&(quot|amp|lt|gt|nbsp|apos);?/gi, (original, hex, decimal, name) => {
+        if (hex || decimal)
+            return byte(Number.parseInt(hex ?? decimal, hex ? 16 : 10));
+        return ({ quot: '"', amp: "&", lt: "<", gt: ">", nbsp: "\xa0", apos: "'" }[name.toLowerCase()] ?? original);
+    }),
+    jsdecode: (s) => s.replace(/\\u([\da-f]{4})|\\x([\da-f]{2})|\\([0-3]?[0-7]{1,2})|\\([\s\S])/gi, (_all, uni, hex, octal, other) => uni
+        ? unicodeByte(Number.parseInt(uni, 16))
+        : hex
+            ? byte(Number.parseInt(hex, 16))
+            : octal
+                ? byte(Number.parseInt(octal, 8))
+                : (escapes[other] ?? other)),
+    cssdecode: (s) => s.replace(/\\([\da-f]{1,6})(?:\r\n|[\t\n\f\r ])?|\\(?:\r\n|[\n\r\f])|\\([\s\S])/gi, (_all, hex, other) => (hex ? unicodeByte(Number.parseInt(hex, 16)) : (other ?? ""))),
+    escapeseqdecode: (s) => s.replace(/\\x([\da-f]{2})|\\([0-3]?[0-7]{1,2})|\\([\s\S])/gi, (_all, hex, octal, other) => hex
+        ? byte(Number.parseInt(hex, 16))
+        : octal
+            ? byte(Number.parseInt(octal, 8))
+            : (escapes[other] ?? other)),
+    normalizepath: normalizePath,
+    normalisepath: normalizePath,
+    normalizepathwin: (s) => normalizePath(s.replace(/\\/g, "/")),
+    normalisepathwin: (s) => normalizePath(s.replace(/\\/g, "/")),
+    cmdline: (s) => s
+        .replace(/[\\"'^]/g, "")
+        .replace(/[,;]/g, " ")
+        .replace(/[\t\n\v\f\r ]+/g, " ")
+        .replace(/ *([/(])/g, "$1")
+        .replace(/[A-Z]/g, (c) => c.toLowerCase()),
+    removecommentschar: (s) => s.replace(/\/\*|\*\/|--|#/g, ""),
+    replacecomments: (s) => s.replace(/\/\*[\s\S]*?(?:\*\/|$)/g, " "),
+    removecomments: (s) => s.replace(/\/\*[\s\S]*?(?:\*\/|$)|<!--[\s\S]*?(?:-->|$)|--[^\r\n]*|#[^\r\n]*/g, ""),
+    utf8tounicode: (s) => {
+        const bytes = octets(s);
+        let result = "";
+        for (let i = 0; i < bytes.length; i++) {
+            const lead = bytes[i];
+            if (lead < 128) {
+                result += s[i];
+                continue;
+            }
+            const size = lead >= 0xc2 && lead <= 0xdf
+                ? 2
+                : lead >= 0xe0 && lead <= 0xef
+                    ? 3
+                    : lead >= 0xf0 && lead <= 0xf4
+                        ? 4
+                        : 0;
+            try {
+                if (!size || i + size > bytes.length)
+                    throw new Error("Invalid UTF-8");
+                const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(i, i + size));
+                result += `%u${text.codePointAt(0).toString(16).padStart(4, "0")}`;
+                i += size - 1;
+            }
+            catch {
+                result += s[i];
+            }
+        }
+        return result;
+    },
+    sha1: (s) => String.fromCharCode(...sha1(octets(s))),
+};
+export function transform(value, pipeline, unicodeMap = defaultUnicodeMap) {
+    let result = value;
+    for (const name of pipeline) {
+        const fn = transformations[name];
+        if (!fn)
+            throw new Error(`Unsupported SecLang transformation: ${name}`);
+        result = name === "urldecodeuni" ? urlDecode(result, true, unicodeMap) : fn(result);
+        if (result.length > 2 * 1024 * 1024)
+            throw new Error("Transformed input exceeds policy size limit");
+    }
+    return result;
+}
+//# sourceMappingURL=transforms.js.map

package/tools/.build/scr/seclang/transforms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transforms.js","sourceRoot":"","sources":["../../../../scr/seclang/transforms.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;AACzD,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,MAAM,OAAO,GAA2B;IACtC,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,IAAI;CACR,CAAC;AAEF,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,GAAG,iBAAiB;IACnF,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACrF,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;QACnD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC/B,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,GAAG,CAAC;QAC7B,IAAI,OAAO;YACT,OAAO,IAAI,CAAC,CAAC,CAAC;gBACZ,CAAC,CAAC,IAAI,CACF,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC;oBACjD,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CACpE;gBACH,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG;YAAE,SAAS;QACpC,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;aACnE,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO;YAAE,SAAS;;YACvC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvD,OAAO,QAAQ,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAA8C;IACxE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACd,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,kCAAkC,EAAE,EAAE,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;IAClD,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC;IAC5D,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;IAClD,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;IACxC,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9B,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CACf,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC3F;SACA,IAAI,CAAC,EAAE,CAAC;IACb,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3F,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAChF,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5B,YAAY,EAAE,CAAC,CAAC,EAAE,EAAE;QAClB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE;QACrB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CACtB,CAAC,CAAC,OAAO,CACP,2DAA2D,EAC3D,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;QAC/B,IAAI,GAAG,IAAI,OAAO;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,OAAO,CAEH,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAIjE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,QAAQ,CAClC,CAAC;IACJ,CAAC,CACF;IACH,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,CAAC,CAAC,OAAO,CACP,mEAAmE,EACnE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAC/B,GAAG;QACD,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,GAAG;YACH,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChC,CAAC,CAAC,KAAK;gBACL,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;gBACjC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CACpC;IACH,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CACf,CAAC,CAAC,OAAO,CACP,wEAAwE,EACxE,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CACpF;IACH,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CACrB,CAAC,CAAC,OAAO,CAAC,mDAAmD,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CACzF,GAAG;QACD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC,KAAK;YACL,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACjC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,CAChC;IACH,aAAa,EAAE,aAAa;IAC5B,aAAa,EAAE,aAAa;IAC5B,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7D,gBAAgB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CACb,CAAC;SACE,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC;SAC/B,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC;SAC1B,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,kBAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC;IAC3D,eAAe,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,EAAE,GAAG,CAAC;IACjE,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CACpB,CAAC,CAAC,OAAO,CAAC,oEAAoE,EAAE,EAAE,CAAC;IACrF,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE;QACnB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACxB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACvB,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACf,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GACR,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;gBAC1B,CAAC,CAAC,CAAC;gBACH,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;oBAC5B,CAAC,CAAC,CAAC;oBACH,CAAC,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI;wBAC5B,CAAC,CAAC,CAAC;wBACH,CAAC,CAAC,CAAC,CAAC;YACZ,IAAI,CAAC;gBACH,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBACvE,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;gBAC3F,MAAM,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;gBACpE,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;CACrD,CAAC;AAEF,MAAM,UAAU,SAAS,CACvB,KAAa,EACb,QAAkB,EAClB,UAAU,GAAG,iBAAiB;IAE9B,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,GAAG,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACpF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;YACjC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/tools/.build/scr/seclang/unicode.d.ts

@@ -0,0 +1,2 @@
+export declare const defaultUnicodeMap: Map<number, number>;
+export declare function parseUnicodeMap(text: string, codepage: number): Map<number, number>;

package/tools/.build/scr/seclang/unicode.js

@@ -0,0 +1,19 @@
+import data from "./vendor/unicode.json" with { type: "json" };
+export const defaultUnicodeMap = new Map(Object.entries(data.mapping).map(([code, value]) => [Number(code), value]));
+export function parseUnicodeMap(text, codepage) {
+    const lines = text.split(/\r?\n/), start = lines.findIndex((line) => new RegExp(`^${codepage}\\s`).test(line));
+    if (start < 0)
+        throw new Error("Requested Unicode codepage is absent");
+    const mapping = new Map();
+    for (let i = start + 1; i < lines.length; i++) {
+        const line = lines[i];
+        if (/^\d+\s/.test(line))
+            break;
+        for (const match of line.matchAll(/\b([a-f\d]{4}):([a-f\d]{2})\b/gi))
+            mapping.set(Number.parseInt(match[1], 16), Number.parseInt(match[2], 16));
+    }
+    if (!mapping.size)
+        throw new Error("Unicode mapping table is empty");
+    return mapping;
+}
+//# sourceMappingURL=unicode.js.map

package/tools/.build/scr/seclang/unicode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unicode.js","sourceRoot":"","sources":["../../../../scr/seclang/unicode.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,uBAAuB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CACtC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAC3E,CAAC;AACF,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,QAAgB;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAC/B,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/tools/.build/scr/seclang/vendor/LIBINJECTION-LICENSE

@@ -0,0 +1,33 @@
+Copyright (c) 2012-2016, Nick Galbreath
+Copyright (c) 2017-2024, libinjection Contributors
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+1. Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright
+notice, this list of conditions and the following disclaimer in the
+documentation and/or other materials provided with the distribution.
+
+3. Neither the name of the copyright holder nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+https://github.com/libinjection/libinjection
+http://opensource.org/licenses/BSD-3-Clause

package/tools/.build/scr/seclang/vendor/PCRE2-NOTICE

@@ -0,0 +1,47 @@
+This package includes PCRE2 compiled to WebAssembly.
+
+-------------------------------------------------------------------------------
+PCRE2 — Perl-Compatible Regular Expressions
+https://github.com/PCRE2Project/pcre2
+SPDX-License-Identifier: BSD-3-Clause WITH PCRE2-exception
+
+The basic library functions
+Written by Philip Hazel
+
+Copyright (c) 1997-2007 University of Cambridge
+Copyright (c) 2007-2024 Philip Hazel
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+  * Redistributions of source code must retain the above copyright notices,
+    this list of conditions and the following disclaimer.
+
+  * Redistributions in binary form must reproduce the above copyright notices,
+    this list of conditions and the following disclaimer in the documentation
+    and/or other materials provided with the distribution.
+
+  * Neither the name of the University of Cambridge nor the names of any
+    contributors may be used to endorse or promote products derived from this
+    software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
+AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
+LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
+CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
+SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
+INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGE.
+
+EXEMPTION FOR BINARY LIBRARY-LIKE PACKAGES
+The second condition in the BSD licence (covering binary redistributions) does
+not apply all the way down a chain of software. If binary package A includes
+PCRE2, it must respect the condition, but if package B is software that
+includes package A, the condition is not imposed on package B unless it uses
+PCRE2 independently.
+-------------------------------------------------------------------------------

package/tools/.build/scr/seclang/vendor/PCRE2-WRAPPER-LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 gudoshnikovn
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/tools/.build/scr/seclang/vendor/UNICODE-DATA-NOTICE

@@ -0,0 +1,6 @@
+The US-ASCII best-fit character mapping data is derived from unicode.mapping,
+owasp-modsecurity/ModSecurity, Git blob 2654c4a619bd585de547d0e4eeecec5753d56eeb.
+Source: https://github.com/owasp-modsecurity/ModSecurity/blob/v3/master/unicode.mapping
+The upstream project distributes this file under the Apache License, Version 2.0.
+See the root LICENSE. Only the character mapping data is used; no ModSecurity
+rule execution engine or runtime code is linked or executed.

package/tools/.build/scr/seclang/vendor/libinjection.json

@@ -0,0 +1,7 @@
+{
+  "repository": "https://github.com/libinjection/libinjection",
+  "commit": "5e3f345d4e4793ee5587a9bffe3d7bda95c1611b",
+  "compiler": "Zig 0.15.2",
+  "bytes": 429161,
+  "sha256": "dc324cae50b3c12dd2c59dd0920a659726fbaa3a16209e04fddb973fdb45bf25"
+}

package/tools/.build/scr/seclang/vendor/pcre2.json

@@ -0,0 +1,7 @@
+{
+  "package": "pcre2-wasm",
+  "version": "10.49.2",
+  "repository": "https://github.com/gudoshnikovn/pcre2-wasm",
+  "sha256": "ec313ff52d494e4f8708782c9601dc42ce6b276dbaf3730e4b2d8fcd86d8839b",
+  "bytes": 453510
+}