llm-mask 0.3.0

package/dist/executor.test.js

@@ -0,0 +1,500 @@
+/**
+ * Tests for SecureExecutor
+ */
+import { describe, it, expect, beforeEach, mock } from 'bun:test';
+import { SecureExecutor } from './executor.js';
+describe('SecureExecutor', () => {
+    let executor;
+    beforeEach(() => {
+        executor = new SecureExecutor();
+    });
+    describe('exec', () => {
+        it('should execute a simple command and return redacted output', async () => {
+            const result = await executor.exec({
+                command: 'echo',
+                args: ['hello world'],
+                level: 'standard'
+            });
+            expect(result.exitCode).toBe(0);
+            expect(result.stdout).toContain('hello world');
+            expect(result.signal).toBeNull();
+            expect(result.timedOut).toBe(false);
+            expect(result.redacted.stats.total).toBe(0);
+        });
+        it('should redact sensitive data in output', async () => {
+            const apiKey = 'sk-proj-abc123xyz456';
+            const result = await executor.exec({
+                command: 'echo',
+                args: [`API key is ${apiKey}`],
+                level: 'standard'
+            });
+            expect(result.stdout).toContain(apiKey);
+            expect(result.redacted.stdout).not.toContain(apiKey);
+            expect(result.redacted.stdout).toContain('[OPENAI_KEY_1]');
+            expect(result.redacted.stats.total).toBeGreaterThan(0);
+        });
+        it('should redact email addresses in output', async () => {
+            const email = 'user@example.com';
+            const result = await executor.exec({
+                command: 'echo',
+                args: [`Contact: ${email}`],
+                level: 'standard'
+            });
+            expect(result.stdout).toContain(email);
+            expect(result.redacted.stdout).not.toContain(email);
+            expect(result.redacted.stdout).toContain('[EMAIL_1]');
+        });
+        it('should preserve format when requested', async () => {
+            const email = 'user@example.com';
+            const result = await executor.exec({
+                command: 'echo',
+                args: [email],
+                level: 'standard',
+                preserveFormat: true
+            });
+            expect(result.redacted.stdout).toMatch(/u\*+@e\*+/); // j***@a*** style
+        });
+        it('should handle stderr output', async () => {
+            const result = await executor.exec({
+                command: 'sh',
+                args: ['-c', 'echo error >&2'],
+                level: 'standard'
+            });
+            expect(result.stderr).toContain('error');
+            expect(result.redacted.stderr).toContain('error');
+        });
+        it('should handle non-zero exit codes', async () => {
+            const result = await executor.exec({
+                command: 'sh',
+                args: ['-c', 'exit 42'],
+                level: 'standard'
+            });
+            expect(result.exitCode).toBe(42);
+        });
+        it('should handle command timeout', async () => {
+            const result = await executor.exec({
+                command: 'sleep',
+                args: ['100'],
+                timeout: 100,
+                level: 'standard'
+            });
+            expect(result.timedOut).toBe(true);
+            expect(result.signal).toBe('SIGTERM');
+        });
+        it('should throw error when command is missing', async () => {
+            await expect(executor.exec({
+                args: ['hello']
+            })).rejects.toThrow('Command is required');
+        });
+        it('should respect aggressive masking level', async () => {
+            const result = await executor.exec({
+                command: 'echo',
+                args: ['Call me at 555-123-4567'],
+                level: 'aggressive'
+            });
+            expect(result.redacted.stdout).toContain('[PHONE_1]');
+            expect(result.redacted.stats.total).toBeGreaterThan(0);
+        });
+    });
+    describe('kubectl', () => {
+        it('should build kubectl args correctly for pod exec', async () => {
+            // Mock the exec method to avoid actual kubectl calls
+            const execSpy = mock(() => Promise.resolve({
+                stdout: 'command output',
+                stderr: '',
+                exitCode: 0,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: 'command output',
+                    stderr: '',
+                    stats: { total: 0, byPattern: {} }
+                }
+            }));
+            executor.exec = execSpy;
+            await executor.kubectl({
+                namespace: 'production',
+                pod: 'my-pod',
+                container: 'app',
+                execCommand: 'ls /app',
+                level: 'standard'
+            });
+            const callArgs = execSpy.mock.calls[0];
+            expect(callArgs[0].command).toBe('kubectl');
+            expect(callArgs[0].args).toContain('--namespace');
+            expect(callArgs[0].args).toContain('production');
+            expect(callArgs[0].args).toContain('exec');
+            expect(callArgs[0].args).toContain('-c');
+            expect(callArgs[0].args).toContain('app');
+            expect(callArgs[0].args).toContain('my-pod');
+        });
+        it('should build kubectl args for regular commands', async () => {
+            const execSpy = mock(() => Promise.resolve({
+                stdout: 'pods listed',
+                stderr: '',
+                exitCode: 0,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: 'pods listed',
+                    stderr: '',
+                    stats: { total: 0, byPattern: {} }
+                }
+            }));
+            executor.exec = execSpy;
+            await executor.kubectl({
+                args: ['get', 'pods'],
+                level: 'standard'
+            });
+            const callArgs = execSpy.mock.calls[0];
+            expect(callArgs[0].command).toBe('kubectl');
+            expect(callArgs[0].args).toContain('get');
+            expect(callArgs[0].args).toContain('pods');
+        });
+        it('should include context when specified', async () => {
+            const execSpy = mock(() => Promise.resolve({
+                stdout: 'output',
+                stderr: '',
+                exitCode: 0,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: 'output',
+                    stderr: '',
+                    stats: { total: 0, byPattern: {} }
+                }
+            }));
+            executor.exec = execSpy;
+            await executor.kubectl({
+                context: 'minikube',
+                args: ['get', 'pods'],
+                level: 'standard'
+            });
+            const callArgs = execSpy.mock.calls[0];
+            expect(callArgs[0].args).toContain('--context');
+            expect(callArgs[0].args).toContain('minikube');
+        });
+    });
+    describe('ssh', () => {
+        it('should build ssh command with host', async () => {
+            const execSpy = mock(() => Promise.resolve({
+                stdout: 'remote output',
+                stderr: '',
+                exitCode: 0,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: 'remote output',
+                    stderr: '',
+                    stats: { total: 0, byPattern: {} }
+                }
+            }));
+            executor.exec = execSpy;
+            await executor.ssh({
+                host: 'example.com',
+                remoteCommand: 'ls /tmp',
+                level: 'standard'
+            });
+            const callArgs = execSpy.mock.calls[0];
+            expect(callArgs[0].command).toBe('ssh');
+            expect(callArgs[0].args).toContain('example.com');
+            expect(callArgs[0].args).toContain('ls /tmp');
+        });
+        it('should build ssh command with user and host', async () => {
+            const execSpy = mock(() => Promise.resolve({
+                stdout: 'output',
+                stderr: '',
+                exitCode: 0,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: 'output',
+                    stderr: '',
+                    stats: { total: 0, byPattern: {} }
+                }
+            }));
+            executor.exec = execSpy;
+            await executor.ssh({
+                host: 'example.com',
+                user: 'ubuntu',
+                remoteCommand: 'whoami',
+                level: 'standard'
+            });
+            const callArgs = execSpy.mock.calls[0];
+            expect(callArgs[0].args).toContain('ubuntu@example.com');
+        });
+        it('should include port when specified', async () => {
+            const execSpy = mock(() => Promise.resolve({
+                stdout: 'output',
+                stderr: '',
+                exitCode: 0,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: 'output',
+                    stderr: '',
+                    stats: { total: 0, byPattern: {} }
+                }
+            }));
+            executor.exec = execSpy;
+            await executor.ssh({
+                host: 'example.com',
+                port: 2222,
+                level: 'standard'
+            });
+            const callArgs = execSpy.mock.calls[0];
+            expect(callArgs[0].args).toContain('-p');
+            expect(callArgs[0].args).toContain('2222');
+        });
+        it('should include identity file when specified', async () => {
+            const execSpy = mock(() => Promise.resolve({
+                stdout: 'output',
+                stderr: '',
+                exitCode: 0,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: 'output',
+                    stderr: '',
+                    stats: { total: 0, byPattern: {} }
+                }
+            }));
+            executor.exec = execSpy;
+            await executor.ssh({
+                host: 'example.com',
+                identity: '~/.ssh/my_key',
+                level: 'standard'
+            });
+            const callArgs = execSpy.mock.calls[0];
+            expect(callArgs[0].args).toContain('-i');
+            expect(callArgs[0].args).toContain('~/.ssh/my_key');
+        });
+    });
+    describe('execRedacted', () => {
+        it('should return only redacted output', async () => {
+            const apiKey = 'sk-proj-abc123xyz456def789';
+            const result = await executor.execRedacted({
+                command: 'echo',
+                args: [`My key is ${apiKey}`],
+                level: 'standard'
+            });
+            // Should not contain the actual key
+            expect(result).not.toContain(apiKey);
+            // Should contain a placeholder
+            expect(result).toContain('[OPENAI_KEY_1]');
+        });
+        it('should include stderr by default', async () => {
+            const result = await executor.execRedacted({
+                command: 'sh',
+                args: ['-c', 'echo stdout; echo stderr >&2'],
+                level: 'basic'
+            });
+            expect(result).toContain('stdout');
+            expect(result).toContain('stderr');
+        });
+        it('should show exit code when requested', async () => {
+            const result = await executor.execRedacted({
+                command: 'sh',
+                args: ['-c', 'exit 42'],
+                includeExitCode: true,
+                level: 'basic'
+            });
+            expect(result).toContain('Exit code: 42');
+        });
+        it('should show timeout message', async () => {
+            const result = await executor.execRedacted({
+                command: 'sleep',
+                args: ['100'],
+                timeout: 100,
+                level: 'basic'
+            });
+            expect(result).toContain('Command timed out');
+        });
+        it('should show termination signal', async () => {
+            const result = await executor.execRedacted({
+                command: 'sh',
+                args: ['-c', 'kill $$'],
+                includeExitCode: true,
+                level: 'basic'
+            });
+            expect(result).toMatch(/Terminated by signal:/);
+        });
+    });
+    describe('formatResult', () => {
+        it('should format successful result', () => {
+            const result = {
+                stdout: 'success',
+                stderr: '',
+                exitCode: 0,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: 'success',
+                    stderr: '',
+                    stats: { total: 0, byPattern: {} }
+                }
+            };
+            const formatted = executor.formatResult(result);
+            expect(formatted).toContain('Redacted Output');
+            expect(formatted).toContain('success');
+        });
+        it('should format error result', () => {
+            const result = {
+                stdout: '',
+                stderr: 'error occurred',
+                exitCode: 1,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: '',
+                    stderr: 'error occurred',
+                    stats: { total: 0, byPattern: {} }
+                }
+            };
+            const formatted = executor.formatResult(result);
+            expect(formatted).toContain('Exit code: 1');
+            expect(formatted).toContain('error occurred');
+        });
+        it('should format timeout result', () => {
+            const result = {
+                stdout: '',
+                stderr: '',
+                exitCode: null,
+                signal: 'SIGTERM',
+                timedOut: true,
+                redacted: {
+                    stdout: '',
+                    stderr: '',
+                    stats: { total: 0, byPattern: {} }
+                }
+            };
+            const formatted = executor.formatResult(result);
+            expect(formatted).toContain('Command timed out');
+            expect(formatted).toContain('SIGTERM');
+        });
+        it('should show redaction count', () => {
+            const result = {
+                stdout: 'api key: sk-proj-123',
+                stderr: '',
+                exitCode: 0,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: 'api key: [REDACTED]',
+                    stderr: '',
+                    stats: { total: 5, byPattern: { 'OPENAI_API_KEY': 5 } }
+                }
+            };
+            const formatted = executor.formatResult(result);
+            expect(formatted).toContain('Redacted 5 item(s)');
+        });
+        it('should show original output when requested', () => {
+            const result = {
+                stdout: 'sensitive data',
+                stderr: '',
+                exitCode: 0,
+                signal: null,
+                timedOut: false,
+                redacted: {
+                    stdout: '[REDACTED]',
+                    stderr: '',
+                    stats: { total: 1, byPattern: {} }
+                }
+            };
+            const formatted = executor.formatResult(result, true);
+            expect(formatted).toContain('ORIGINAL OUTPUT');
+            expect(formatted).toContain('sensitive data');
+            expect(formatted).toContain('MAY CONTAIN SENSITIVE DATA');
+        });
+    });
+    describe('credential isolation', () => {
+        it('should mask credentials in command output while keeping them functional', async () => {
+            // This test simulates the core use case:
+            // - Credentials work for the actual command (it succeeds)
+            // - But output is redacted before LLM sees it
+            const apiKey = 'sk-proj-abc123xyz456';
+            const dbUrl = 'postgresql://user:password123@localhost:5432/mydb';
+            const sqlQuery = `SELECT * FROM users WHERE email = 'user@example.com'`;
+            // Mock a database query that returns sensitive data
+            const result = await executor.exec({
+                command: 'echo',
+                args: [
+                    `Connected to DB: ${dbUrl}. Using API key: ${apiKey}. Query: ${sqlQuery}. Results: user@email.com, 555-123-4567, 192.168.1.1`
+                ],
+                level: 'standard'
+            });
+            // Command succeeds (exit code 0)
+            expect(result.exitCode).toBe(0);
+            // Original output contains sensitive data
+            expect(result.stdout).toContain(apiKey);
+            expect(result.stdout).toContain('password123');
+            expect(result.stdout).toContain('user@email.com');
+            expect(result.stdout).toContain('555-123-4567');
+            expect(result.stdout).toContain('192.168.1.1');
+            // Redacted output does NOT contain sensitive data
+            expect(result.redacted.stdout).not.toContain(apiKey);
+            expect(result.redacted.stdout).not.toContain('user@email.com');
+            expect(result.redacted.stdout).not.toContain('555-123-4567');
+            expect(result.redacted.stdout).not.toContain('192.168.1.1');
+            // But still contains structure/non-sensitive parts
+            expect(result.redacted.stdout).toContain('Connected to DB');
+            expect(result.redacted.stdout).toContain('Using API key:');
+            expect(result.redacted.stdout).toContain('Query:');
+            expect(result.redacted.stdout).toContain('Results:');
+            // Stats confirm redactions occurred
+            expect(result.redacted.stats.total).toBeGreaterThan(0);
+        });
+        it('should preserve JSON structure while masking values', async () => {
+            const jsonOutput = JSON.stringify({
+                database_url: 'postgresql://user:password123@localhost:5432/db',
+                api_key: 'sk-proj-abc123xyz456',
+                admin_email: 'admin@example.com'
+            }, null, 2);
+            const result = await executor.exec({
+                command: 'echo',
+                args: [jsonOutput],
+                level: 'standard',
+                preserveFormat: false
+            });
+            // Redacted output should preserve structure but mask values
+            expect(result.redacted.stdout).toContain('{');
+            expect(result.redacted.stdout).toContain('database_url');
+            expect(result.redacted.stdout).toContain('api_key');
+            expect(result.redacted.stdout).toContain('admin_email');
+            // But actual values are redacted
+            expect(result.redacted.stdout).not.toContain('password123');
+            expect(result.redacted.stdout).not.toContain('sk-proj-abc123xyz456');
+            expect(result.redacted.stdout).not.toContain('admin@example.com');
+        });
+        it('should handle multiple sensitive patterns in one output', async () => {
+            const sensitiveOutput = `
+        Database: postgresql://user:pass123@localhost/db
+        API Key: sk-proj-abcdef123456
+        Email: user@example.com
+        Phone: 555-123-4567
+        IP: 192.168.1.1
+        Credit Card: 4532-1234-5678-9010
+        SSN: 123-45-6789
+      `;
+            const result = await executor.exec({
+                command: 'echo',
+                args: [sensitiveOutput],
+                level: 'aggressive'
+            });
+            // Count how many different patterns were redacted
+            const patternCount = Object.keys(result.redacted.stats.byPattern).length;
+            // Should have redacted multiple pattern types
+            expect(patternCount).toBeGreaterThan(3);
+            expect(result.redacted.stats.total).toBeGreaterThan(5);
+            // Verify none of the sensitive data remains
+            expect(result.redacted.stdout).not.toContain('pass123');
+            expect(result.redacted.stdout).not.toContain('sk-proj-abcdef123456');
+            expect(result.redacted.stdout).not.toContain('user@example.com');
+            expect(result.redacted.stdout).not.toContain('555-123-4567');
+            expect(result.redacted.stdout).not.toContain('192.168.1.1');
+            expect(result.redacted.stdout).not.toContain('4532-1234-5678-9010');
+            expect(result.redacted.stdout).not.toContain('123-45-6789');
+        });
+    });
+});
+//# sourceMappingURL=executor.test.js.map

package/dist/executor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.test.js","sourceRoot":"","sources":["../src/executor.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,QAAwB,CAAA;IAE5B,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAA;IACjC,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE;QACpB,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,aAAa,CAAC;gBACrB,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAA;YAChC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACnC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,MAAM,GAAG,sBAAsB,CAAA;YACrC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,cAAc,MAAM,EAAE,CAAC;gBAC9B,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YACpD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;YAC1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,KAAK,GAAG,kBAAkB,CAAA;YAChC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,YAAY,KAAK,EAAE,CAAC;gBAC3B,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YACtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YACnD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;QACvD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,KAAK,GAAG,kBAAkB,CAAA;YAChC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,KAAK,CAAC;gBACb,KAAK,EAAE,UAAU;gBACjB,cAAc,EAAE,IAAI;aACrB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA,CAAC,kBAAkB;QACxE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,IAAI,EAAE,gBAAgB,CAAC;gBAC9B,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;YACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;gBACvB,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,CAAC,KAAK,CAAC;gBACb,OAAO,EAAE,GAAG;gBACZ,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACzB,IAAI,EAAE,CAAC,OAAO,CAAC;aACT,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,yBAAyB,CAAC;gBACjC,KAAK,EAAE,YAAY;aACpB,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;YACrD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACvB,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,qDAAqD;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;gBACzC,MAAM,EAAE,gBAAgB;gBACxB,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,gBAAgB;oBACxB,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAC,CAAC,CAAA;YAEH,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAA;YAEvB,MAAM,QAAQ,CAAC,OAAO,CAAC;gBACrB,SAAS,EAAE,YAAY;gBACvB,GAAG,EAAE,QAAQ;gBACb,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,SAAS;gBACtB,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YACjD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;YAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YAC1C,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YACzC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;gBACzC,MAAM,EAAE,aAAa;gBACrB,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,aAAa;oBACrB,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAC,CAAC,CAAA;YAEH,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAA;YAEvB,MAAM,QAAQ,CAAC,OAAO,CAAC;gBACrB,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;gBACrB,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YACzC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;gBACzC,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAC,CAAC,CAAA;YAEH,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAA;YAEvB,MAAM,QAAQ,CAAC,OAAO,CAAC;gBACrB,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;gBACrB,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;YAC/C,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;QAChD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE;QACnB,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;gBACzC,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,eAAe;oBACvB,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAC,CAAC,CAAA;YAEH,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAA;YAEvB,MAAM,QAAQ,CAAC,GAAG,CAAC;gBACjB,IAAI,EAAE,aAAa;gBACnB,aAAa,EAAE,SAAS;gBACxB,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YACjD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;gBACzC,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAC,CAAC,CAAA;YAEH,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAA;YAEvB,MAAM,QAAQ,CAAC,GAAG,CAAC;gBACjB,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,QAAQ;gBACd,aAAa,EAAE,QAAQ;gBACvB,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAA;QAC1D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;gBACzC,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAC,CAAC,CAAA;YAEH,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAA;YAEvB,MAAM,QAAQ,CAAC,GAAG,CAAC;gBACjB,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,IAAI;gBACV,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;gBACzC,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAC,CAAC,CAAA;YAEH,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAA;YAEvB,MAAM,QAAQ,CAAC,GAAG,CAAC;gBACjB,IAAI,EAAE,aAAa;gBACnB,QAAQ,EAAE,eAAe;gBACzB,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;YACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QACrD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,MAAM,GAAG,4BAA4B,CAAA;YAC3C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC;gBACzC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,aAAa,MAAM,EAAE,CAAC;gBAC7B,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,oCAAoC;YACpC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YACpC,+BAA+B;YAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC;gBACzC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,IAAI,EAAE,8BAA8B,CAAC;gBAC5C,KAAK,EAAE,OAAO;aACf,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YAClC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC;gBACzC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;gBACvB,eAAe,EAAE,IAAI;gBACrB,KAAK,EAAE,OAAO;aACf,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;YAC3C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC;gBACzC,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,CAAC,KAAK,CAAC;gBACb,OAAO,EAAE,GAAG;gBACZ,KAAK,EAAE,OAAO;aACf,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC;gBACzC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;gBACvB,eAAe,EAAE,IAAI;gBACrB,KAAK,EAAE,OAAO;aACf,CAAC,CAAA;YAEF,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAA;QACjD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAA;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;YAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,gBAAgB;gBACxB,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,gBAAgB;oBACxB,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAA;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YAC3C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE;oBACR,MAAM,EAAE,EAAE;oBACV,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAA;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;YAChD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,sBAAsB;gBAC9B,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,qBAAqB;oBAC7B,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE,EAAE;iBACxD;aACF,CAAA;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;YAC/C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAA;QACnD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,gBAAgB;gBACxB,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE;oBACR,MAAM,EAAE,YAAY;oBACpB,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;iBACnC;aACF,CAAA;YAED,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACrD,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;YAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;YAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAA;QAC3D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;YACvF,yCAAyC;YACzC,0DAA0D;YAC1D,8CAA8C;YAE9C,MAAM,MAAM,GAAG,sBAAsB,CAAA;YACrC,MAAM,KAAK,GAAG,mDAAmD,CAAA;YACjE,MAAM,QAAQ,GAAG,sDAAsD,CAAA;YAEvE,oDAAoD;YACpD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE;oBACJ,oBAAoB,KAAK,oBAAoB,MAAM,YAAY,QAAQ,sDAAsD;iBAC9H;gBACD,KAAK,EAAE,UAAU;aAClB,CAAC,CAAA;YAEF,iCAAiC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAE/B,0CAA0C;YAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YACvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YAC9C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;YACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YAC/C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YAE9C,kDAAkD;YAClD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;YACpD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;YAC9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YAC5D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YAE3D,mDAAmD;YACnD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAA;YAC3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;YAC1D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;YAClD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;YAEpD,oCAAoC;YACpC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;QACxD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;gBAChC,YAAY,EAAE,iDAAiD;gBAC/D,OAAO,EAAE,sBAAsB;gBAC/B,WAAW,EAAE,mBAAmB;aACjC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAEX,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,UAAU,CAAC;gBAClB,KAAK,EAAE,UAAU;gBACjB,cAAc,EAAE,KAAK;aACtB,CAAC,CAAA;YAEF,4DAA4D;YAC5D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;YAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YACxD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YACnD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YAEvD,iCAAiC;YACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YAC3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;YACpE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;QACnE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;YACvE,MAAM,eAAe,GAAG;;;;;;;;OAQvB,CAAA;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,CAAC,eAAe,CAAC;gBACvB,KAAK,EAAE,YAAY;aACpB,CAAC,CAAA;YAEF,kDAAkD;YAClD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAA;YAExE,8CAA8C;YAC9C,MAAM,CAAC,YAAY,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;YAEtD,4CAA4C;YAC5C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;YACvD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;YACpE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAA;YAChE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;YAC5D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;YAC3D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAA;YACnE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;QAC7D,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/features.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Tests for new features
+ */
+export {};
+//# sourceMappingURL=features.test.d.ts.map

package/dist/features.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"features.test.d.ts","sourceRoot":"","sources":["../src/features.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/features.test.js

@@ -0,0 +1,118 @@
+/**
+ * Tests for new features
+ */
+import { DataMasker } from './masker.js';
+import { ContextMasker } from './context-detection.js';
+import { Tokenizer } from './tokenizer.js';
+import { formatEmail, formatApiKey } from './formatter.js';
+describe('Masking Levels', () => {
+    it('should mask only API keys at basic level', () => {
+        const masker = new DataMasker();
+        const text = "Contact john@acme.com with key sk-proj-abc123xyz789";
+        const result = masker.mask(text, { level: 'basic' });
+        expect(result.masked).toContain('[OPENAI_KEY_1]');
+        expect(result.masked).toContain('john@acme.com'); // Email NOT masked at basic level
+    });
+    it('should mask PII at standard level', () => {
+        const masker = new DataMasker();
+        const text = "Contact john@acme.com with key sk-proj-abc123xyz789";
+        const result = masker.mask(text, { level: 'standard' });
+        expect(result.masked).toContain('[OPENAI_KEY_1]');
+        expect(result.masked).toContain('[EMAIL_1]');
+    });
+    it('should mask everything at aggressive level', () => {
+        const masker = new DataMasker();
+        const text = "Connecting to https://internal.api.com with user@test.com";
+        const result = masker.mask(text, { level: 'aggressive' });
+        expect(result.masked).toContain('[INTERNAL_URL_');
+        expect(result.masked).toContain('[EMAIL_');
+    });
+});
+describe('Preserve Format Masking', () => {
+    it('should format email as j***@a***.com', () => {
+        const result = formatEmail('john@acme.com');
+        expect(result.formatted).toBe('j***@a***.com');
+        expect(result.original).toBe('john@acme.com');
+    });
+    it('should format API key preserving prefix', () => {
+        const result = formatApiKey('sk-proj-abc123xyz789');
+        expect(result.formatted).toContain('sk-proj-');
+        expect(result.formatted).toContain('*');
+        expect(result.original).toBe('sk-proj-abc123xyz789');
+    });
+    it('should use preserveFormat option in masker', () => {
+        const masker = new DataMasker();
+        const text = "Contact john@acme.com";
+        const result = masker.mask(text, { preserveFormat: true });
+        expect(result.masked).toContain('j***@a***.com');
+        expect(result.masked).not.toContain('[EMAIL_1]');
+    });
+});
+describe('Context-Aware Masking', () => {
+    it('should preserve JSON keys and mask values', () => {
+        const masker = new ContextMasker();
+        const json = '{"user": "john@acme.com", "key": "sk-proj-abc"}';
+        const result = masker.mask(json);
+        expect(result.masked).toContain('"user":');
+        expect(result.masked).not.toContain('john@acme.com');
+        expect(result.context).toBe('json');
+    });
+    it('should preserve SQL identifiers', () => {
+        const masker = new ContextMasker();
+        const sql = "SELECT * FROM users WHERE email = 'john@test.com'";
+        const result = masker.mask(sql);
+        expect(result.masked).toContain('SELECT');
+        expect(result.masked).toContain('FROM users');
+        expect(result.masked).not.toContain('john@test.com');
+        expect(result.context).toBe('sql');
+    });
+    it('should detect plaintext context', () => {
+        const masker = new ContextMasker();
+        const result = masker.mask('Just some random text');
+        expect(result.context).toBe('plaintext');
+    });
+});
+describe('Tokenizer', () => {
+    const salt = 'test-salt-for-tokenizer';
+    it('should tokenize consistently', () => {
+        const tokenizer = new Tokenizer({ salt });
+        const token1 = tokenizer.tokenize('secret-value');
+        const token2 = tokenizer.tokenize('secret-value');
+        expect(token1).toBe(token2);
+        expect(token1).toMatch(/^tok_[a-f0-9]{16}$/);
+    });
+    it('should tokenize differently for different values', () => {
+        const tokenizer = new Tokenizer({ salt });
+        const token1 = tokenizer.tokenize('value1');
+        const token2 = tokenizer.tokenize('value2');
+        expect(token1).not.toBe(token2);
+    });
+    it('should verify tokens correctly', () => {
+        const tokenizer = new Tokenizer({ salt });
+        const token = tokenizer.tokenize('secret');
+        expect(tokenizer.verify(token, 'secret')).toBe(true);
+        expect(tokenizer.verify(token, 'wrong')).toBe(false);
+    });
+    it('should use context for namespacing', () => {
+        const tokenizer = new Tokenizer({ salt });
+        const token1 = tokenizer.tokenize('value', 'email');
+        const token2 = tokenizer.tokenize('value', 'api_key');
+        expect(token1).not.toBe(token2);
+        expect(token1).toContain('email_');
+        expect(token2).toContain('api_key_');
+    });
+});
+describe('Format Result Types', () => {
+    it('should return FormatResult for email', () => {
+        const result = formatEmail('test@example.com');
+        expect(typeof result).toBe('object');
+        expect(result).toHaveProperty('formatted');
+        expect(result).toHaveProperty('original');
+    });
+    it('should return string for SSN', () => {
+        const { formatSSN } = require('./formatter');
+        const result = formatSSN('123-45-6789');
+        expect(typeof result).toBe('string');
+    });
+});
+//# sourceMappingURL=features.test.js.map