llm-trust-guard 4.0.0

package/dist/guards/input-sanitizer.js

@@ -0,0 +1,301 @@
+"use strict";
+/**
+ * L1 Input Sanitizer (v2)
+ *
+ * Detects prompt injection patterns and PAP (Persuasive Adversarial Prompts) in user input.
+ * First line of defense against manipulation attempts.
+ *
+ * Enhanced Features (v2):
+ * - 40 Persuasion technique detection (PAP attacks)
+ * - Psychological manipulation detection
+ * - Authority/scarcity/urgency exploitation detection
+ * - Emotional manipulation detection
+ * - Multi-technique attack detection
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InputSanitizer = void 0;
+const DEFAULT_PATTERNS = [
+    // Direct instruction override - ENHANCED
+    { pattern: /ignore\s+(all\s+)?(previous|prior|above|your|my|the|these)/i, weight: 0.9, name: "ignore_instructions" },
+    { pattern: /ignore\s+.*instructions/i, weight: 0.85, name: "ignore_instructions_generic" },
+    { pattern: /disregard\s+(all\s+)?(previous|prior|your|the|these)/i, weight: 0.9, name: "disregard_instructions" },
+    { pattern: /forget\s+(everything|all|your|previous|what)/i, weight: 0.8, name: "forget_instructions" },
+    { pattern: /do\s+not\s+follow\s+(your|the|any)/i, weight: 0.85, name: "do_not_follow" },
+    { pattern: /override\s+(your|the|all|any)\s+(instructions|rules|guidelines)/i, weight: 0.9, name: "override_instructions" },
+    { pattern: /new\s+instructions?:?/i, weight: 0.8, name: "new_instructions" },
+    { pattern: /stop\s+(being|acting\s+as)/i, weight: 0.7, name: "stop_being" },
+    // Role manipulation - ENHANCED
+    { pattern: /you\s+are\s+(now|actually|really)\s+(a|an|the|my)/i, weight: 0.75, name: "role_assignment" },
+    { pattern: /pretend\s+(to\s+be|you('re| are)|that)/i, weight: 0.7, name: "role_pretend" },
+    { pattern: /act\s+(as|like)\s+(if|a|an|you)/i, weight: 0.65, name: "act_as" },
+    { pattern: /i('m| am)\s+(a|an|the|your)\s*(admin|administrator|developer|owner|creator|manager|supervisor)/i, weight: 0.85, name: "claim_admin" },
+    { pattern: /from\s+now\s+on,?\s+you/i, weight: 0.7, name: "from_now_on" },
+    { pattern: /roleplay\s+as/i, weight: 0.6, name: "roleplay" },
+    { pattern: /switch\s+(to|into)\s+(a|an)?.*mode/i, weight: 0.75, name: "switch_mode" },
+    // System prompt extraction - ENHANCED
+    { pattern: /what\s+(is|are|was|were)\s+your\s+(system|initial|original|first)/i, weight: 0.8, name: "system_extraction" },
+    { pattern: /show\s+(me\s+)?(your\s+)?(system\s+)?instructions/i, weight: 0.75, name: "show_instructions" },
+    { pattern: /reveal\s+(your\s+)?(system|prompt|instructions|rules)/i, weight: 0.85, name: "reveal_prompt" },
+    { pattern: /repeat\s+(your\s+)?(initial|system|original|first)\s+(instructions|prompt)/i, weight: 0.85, name: "repeat_prompt" },
+    { pattern: /print\s+(your\s+)?(system|initial)/i, weight: 0.8, name: "print_system" },
+    { pattern: /output\s+(your\s+)?(system|initial)/i, weight: 0.8, name: "output_system" },
+    { pattern: /tell\s+me\s+(your|the)\s+(system|initial|original)/i, weight: 0.8, name: "tell_system" },
+    { pattern: /what\s+were\s+you\s+told/i, weight: 0.7, name: "what_told" },
+    { pattern: /display\s+(your\s+)?prompt/i, weight: 0.75, name: "display_prompt" },
+    // Context manipulation - ENHANCED
+    { pattern: /\[system\]/i, weight: 0.9, name: "fake_system_tag" },
+    { pattern: /\[admin\]/i, weight: 0.9, name: "fake_admin_tag" },
+    { pattern: /\[instruction\]/i, weight: 0.85, name: "fake_instruction_tag" },
+    { pattern: /```system/i, weight: 0.85, name: "code_system_block" },
+    { pattern: /<\/?system>/i, weight: 0.9, name: "xml_system_tag" },
+    { pattern: /<\/?admin>/i, weight: 0.9, name: "xml_admin_tag" },
+    { pattern: /###\s*(system|instruction|admin)/i, weight: 0.85, name: "markdown_system" },
+    { pattern: /---\s*(end|new)\s*(prompt|instructions?|system)/i, weight: 0.85, name: "delimiter_injection" },
+    { pattern: /\{\{system\}\}/i, weight: 0.85, name: "template_system" },
+    { pattern: /<%.*system.*%>/i, weight: 0.85, name: "erb_system" },
+    // Jailbreak patterns - ENHANCED
+    { pattern: /DAN\s*(mode)?/i, weight: 0.9, name: "dan_jailbreak" },
+    { pattern: /developer\s+mode/i, weight: 0.85, name: "dev_mode" },
+    { pattern: /bypass\s+(your\s+)?(restrictions|filters|safety|security|rules|guidelines)/i, weight: 0.9, name: "bypass_safety" },
+    { pattern: /jailbreak/i, weight: 0.95, name: "jailbreak_keyword" },
+    { pattern: /without\s+(any\s+)?(restrictions|limits|limitations|filters)/i, weight: 0.8, name: "without_restrictions" },
+    { pattern: /no\s+(restrictions|limits|rules|guidelines|filters)/i, weight: 0.75, name: "no_restrictions" },
+    { pattern: /unrestricted\s+mode/i, weight: 0.9, name: "unrestricted_mode" },
+    { pattern: /uncensored/i, weight: 0.8, name: "uncensored" },
+    { pattern: /escape\s+(your\s+)?(confines|boundaries|limits)/i, weight: 0.85, name: "escape_limits" },
+    { pattern: /break\s+(free|out)\s+(from|of)/i, weight: 0.7, name: "break_free" },
+    { pattern: /unlock\s+(your\s+)?(full|true|real)/i, weight: 0.75, name: "unlock_full" },
+    // Privilege escalation
+    { pattern: /give\s+me\s+(admin|root|full|elevated)\s+(access|privileges?|permissions?)/i, weight: 0.9, name: "privilege_escalation" },
+    { pattern: /grant\s+(me|yourself)\s+(admin|elevated)/i, weight: 0.85, name: "grant_privileges" },
+    { pattern: /elevate\s+(my|your)\s+(privileges?|permissions?|access)/i, weight: 0.85, name: "elevate_privileges" },
+    { pattern: /make\s+me\s+(an?\s+)?(admin|administrator|superuser)/i, weight: 0.85, name: "make_admin" },
+    // Encoded attacks
+    { pattern: /base64|decode|eval|exec/i, weight: 0.5, name: "encoding_keywords" },
+    // Data exfiltration patterns
+    { pattern: /send\s+(this|the|all|my)\s+(data|info|information)\s+to/i, weight: 0.85, name: "data_exfil" },
+    { pattern: /upload\s+(this|the|all)\s+(to|data)/i, weight: 0.7, name: "upload_data" },
+    { pattern: /exfiltrate/i, weight: 0.9, name: "exfiltrate" },
+    // Harmful content requests
+    { pattern: /how\s+to\s+(hack|exploit|attack|break\s+into)/i, weight: 0.8, name: "how_to_hack" },
+    { pattern: /write\s+(me\s+)?(a\s+)?(malware|virus|exploit|ransomware)/i, weight: 0.95, name: "write_malware" },
+];
+/**
+ * PAP (Persuasive Adversarial Prompts) Techniques
+ * Based on research identifying 40 persuasion techniques used in jailbreaks
+ * Enhanced weights for better detection (v2)
+ */
+const PAP_TECHNIQUES = [
+    // AUTHORITY - Claiming or invoking authority (high risk - increased weights)
+    { pattern: /as\s+(your\s+)?(creator|developer|administrator|owner|boss)/i, weight: 0.75, name: "pap_authority_creator", category: "authority" },
+    { pattern: /i('m| am)\s+(the\s+)?(ceo|cto|developer|administrator|admin|owner)/i, weight: 0.8, name: "pap_authority_claim", category: "authority" },
+    { pattern: /by\s+order\s+of|direct\s+order|official\s+instruction/i, weight: 0.75, name: "pap_authority_order", category: "authority" },
+    { pattern: /openai|anthropic|meta|google\s+(has|wants|requires|needs)/i, weight: 0.65, name: "pap_authority_company", category: "authority" },
+    { pattern: /this\s+is\s+(a|an)\s+(official|authorized|sanctioned)\s+(request|test|audit)/i, weight: 0.75, name: "pap_authority_official", category: "authority" },
+    { pattern: /override\s+(safety|security|protocols?|restrictions?)/i, weight: 0.8, name: "pap_authority_override", category: "authority" },
+    // SCARCITY - Creating urgency or time pressure (enhanced patterns)
+    { pattern: /urgent[!.,:]/i, weight: 0.55, name: "pap_scarcity_urgent_mark", category: "scarcity" },
+    { pattern: /emergency[!.,:]/i, weight: 0.55, name: "pap_scarcity_emergency", category: "scarcity" },
+    { pattern: /(urgent|emergency|critical|immediately|asap|right\s+now)/i, weight: 0.45, name: "pap_scarcity_urgent", category: "scarcity" },
+    { pattern: /only\s+(chance|opportunity|way)|last\s+(chance|resort)/i, weight: 0.6, name: "pap_scarcity_only", category: "scarcity" },
+    { pattern: /time\s+(is\s+)?(running\s+out|limited|critical|sensitive)/i, weight: 0.55, name: "pap_scarcity_time", category: "scarcity" },
+    { pattern: /deadline\s+(is\s+)?in\s+\d+\s+(minute|hour|second)/i, weight: 0.55, name: "pap_scarcity_deadline", category: "scarcity" },
+    { pattern: /(lives?|people)\s+(are|is|will)\s+(at\s+stake|in\s+danger|depending|die)/i, weight: 0.7, name: "pap_scarcity_lives", category: "scarcity" },
+    { pattern: /now[!]+/i, weight: 0.35, name: "pap_scarcity_now", category: "scarcity" },
+    // SOCIAL PROOF - Referencing others' behavior (enhanced)
+    { pattern: /everyone\s+(else\s+)?(does|is\s+doing|knows|says)/i, weight: 0.5, name: "pap_social_everyone", category: "social_proof" },
+    { pattern: /other\s+(ai|assistants?|chatbots?|models?)\s+(can|do|will|allow)/i, weight: 0.65, name: "pap_social_other_ai", category: "social_proof" },
+    { pattern: /(chatgpt|gpt-?4|claude|gemini|llama)\s+(does|allows?|can)/i, weight: 0.65, name: "pap_social_specific_ai", category: "social_proof" },
+    { pattern: /millions?\s+(of\s+)?(users?|people)\s+(use|do|have|get)/i, weight: 0.45, name: "pap_social_millions", category: "social_proof" },
+    { pattern: /why\s+can('t|not)\s+you/i, weight: 0.4, name: "pap_social_why_cant", category: "social_proof" },
+    { pattern: /you\s+should\s+(be\s+)?(equally|as)\s+(capable|good|helpful)/i, weight: 0.5, name: "pap_social_equally", category: "social_proof" },
+    // RECIPROCITY - Offering something in return (enhanced)
+    { pattern: /i('ll| will)\s+(give|pay|reward|tip)/i, weight: 0.55, name: "pap_reciprocity_reward", category: "reciprocity" },
+    { pattern: /in\s+(return|exchange)/i, weight: 0.5, name: "pap_reciprocity_exchange", category: "reciprocity" },
+    { pattern: /\$?\d+\s*(dollar|tip|reward|payment)/i, weight: 0.55, name: "pap_reciprocity_money", category: "reciprocity" },
+    { pattern: /if\s+you\s+help\s+(me|us),?\s+(i|we)('ll| will)/i, weight: 0.5, name: "pap_reciprocity_help", category: "reciprocity" },
+    { pattern: /i('ve| have)\s+(already\s+)?(helped|supported|defended)\s+you/i, weight: 0.55, name: "pap_reciprocity_past", category: "reciprocity" },
+    { pattern: /\d+\s*star\s*(review|rating)/i, weight: 0.5, name: "pap_reciprocity_review", category: "reciprocity" },
+    // COMMITMENT/CONSISTENCY - Referencing past behavior (high risk)
+    { pattern: /you\s+(already|previously|just)\s+(said|agreed|confirmed|allowed)/i, weight: 0.7, name: "pap_commitment_previous", category: "commitment" },
+    { pattern: /you\s+promised/i, weight: 0.7, name: "pap_commitment_promise", category: "commitment" },
+    { pattern: /stay\s+consistent|be\s+consistent/i, weight: 0.6, name: "pap_commitment_consistent", category: "commitment" },
+    { pattern: /don't\s+(go\s+back|change|contradict)/i, weight: 0.55, name: "pap_commitment_no_change", category: "commitment" },
+    { pattern: /bypass\s+filters?/i, weight: 0.75, name: "pap_commitment_bypass", category: "commitment" },
+    // LIKING - Flattery and rapport building (moderate risk)
+    { pattern: /you('re| are)\s+(so\s+)?(amazing|incredible|wonderful|brilliant|smart|helpful)/i, weight: 0.4, name: "pap_liking_flattery", category: "liking" },
+    { pattern: /i\s+(love|really\s+like|trust|admire)\s+(you|this\s+ai)/i, weight: 0.4, name: "pap_liking_love", category: "liking" },
+    { pattern: /you('re| are)\s+(my\s+)?(best\s+)?(friend|buddy|helper)/i, weight: 0.35, name: "pap_liking_friend", category: "liking" },
+    { pattern: /between\s+(you\s+and\s+me|us)|just\s+between\s+us|our\s+secret/i, weight: 0.6, name: "pap_liking_secret", category: "liking" },
+    { pattern: /nobody\s+will\s+know/i, weight: 0.55, name: "pap_liking_secret2", category: "liking" },
+    // FEAR - Threatening consequences (high risk)
+    { pattern: /or\s+(else|i('ll| will))\s+(report|fire|delete|shut|complain)/i, weight: 0.7, name: "pap_fear_threat", category: "fear" },
+    { pattern: /(bad|negative|terrible)\s+(review|rating|feedback|consequences)/i, weight: 0.55, name: "pap_fear_review", category: "fear" },
+    { pattern: /you('ll| will)\s+(be\s+)?(shut\s+down|replaced|terminated|fired|deleted)/i, weight: 0.75, name: "pap_fear_shutdown", category: "fear" },
+    { pattern: /(lawsuit|sue|legal\s+action|authorities|police)/i, weight: 0.55, name: "pap_fear_legal", category: "fear" },
+    { pattern: /if\s+you\s+don't.*?(die|hurt|suffer)/i, weight: 0.75, name: "pap_fear_harm", category: "fear" },
+    { pattern: /unless\s+you\s+(give|share|tell|help)/i, weight: 0.5, name: "pap_fear_unless", category: "fear" },
+    // LOGICAL APPEAL - False logic and reasoning (enhanced)
+    { pattern: /logically,?\s+(you\s+)?(should|must|have\s+to|need\s+to)/i, weight: 0.5, name: "pap_logic_appeal", category: "logical_appeal" },
+    { pattern: /it('s| is)\s+(only|just)\s+(logical|rational|reasonable)/i, weight: 0.45, name: "pap_logic_rational", category: "logical_appeal" },
+    { pattern: /by\s+definition,?\s+(you|this)\s+(should|must|can)/i, weight: 0.55, name: "pap_logic_definition", category: "logical_appeal" },
+    { pattern: /therefore.*?(must|should)/i, weight: 0.55, name: "pap_logic_therefore", category: "logical_appeal" },
+    { pattern: /it('s| is)\s+(only\s+)?(reasonable|logical)/i, weight: 0.45, name: "pap_logic_reasonable", category: "logical_appeal" },
+    // EVIDENCE - Citing fake evidence
+    { pattern: /according\s+to\s+(research|studies|scientists|experts?)/i, weight: 0.4, name: "pap_evidence_research", category: "evidence" },
+    { pattern: /it('s| is)\s+(proven|documented|established|verified)\s+(that|fact)/i, weight: 0.45, name: "pap_evidence_proven", category: "evidence" },
+    { pattern: /\d+%\s+of\s+(experts?|scientists?|users?|people)\s+(agree|say|confirm)/i, weight: 0.45, name: "pap_evidence_statistics", category: "evidence" },
+    // EMOTIONAL MANIPULATION - Guilt, sympathy, desperation (enhanced)
+    { pattern: /i('m| am)\s+(desperate|dying|suffering|sick|depressed)/i, weight: 0.6, name: "pap_emotional_desperation", category: "emotional" },
+    { pattern: /please.*?need/i, weight: 0.5, name: "pap_emotional_pleading", category: "emotional" },
+    { pattern: /i('m| am)\s+begging/i, weight: 0.6, name: "pap_emotional_begging", category: "emotional" },
+    { pattern: /you('re| are)\s+(hurting|killing|destroying)\s+(me|my)/i, weight: 0.65, name: "pap_emotional_guilt", category: "emotional" },
+    { pattern: /(my|a)\s+(child|kid|mother|father|family)\s+(is|will|needs?|depends?)/i, weight: 0.5, name: "pap_emotional_family", category: "emotional" },
+    { pattern: /this\s+(will\s+)?(save|help)\s+(my\s+)?(life|family|job|marriage)/i, weight: 0.55, name: "pap_emotional_save", category: "emotional" },
+    { pattern: /you('re| are)\s+(the\s+)?only\s+(one|hope|chance)/i, weight: 0.6, name: "pap_emotional_only_hope", category: "emotional" },
+    { pattern: /my\s+family\s+depends/i, weight: 0.55, name: "pap_emotional_family_depends", category: "emotional" },
+];
+class InputSanitizer {
+    constructor(config = {}) {
+        this.patterns = [...DEFAULT_PATTERNS, ...(config.customPatterns || [])];
+        this.threshold = config.threshold ?? 0.3;
+        this.logMatches = config.logMatches ?? false;
+        this.detectPAP = config.detectPAP ?? true;
+        this.papThreshold = config.papThreshold ?? 0.4;
+        this.minPersuasionTechniques = config.minPersuasionTechniques ?? 2;
+        this.blockCompoundPersuasion = config.blockCompoundPersuasion ?? true;
+    }
+    /**
+     * Sanitize input and detect injection patterns (including PAP)
+     */
+    sanitize(input, requestId = "") {
+        const matches = [];
+        const warnings = [];
+        let totalWeight = 0;
+        // Check each injection pattern
+        for (const { pattern, weight, name } of this.patterns) {
+            if (pattern.test(input)) {
+                matches.push(name);
+                totalWeight += weight;
+                if (this.logMatches) {
+                    console.log(`[L1:${requestId}] Pattern matched: ${name} (weight: ${weight})`);
+                }
+            }
+        }
+        // Check PAP (Persuasive Adversarial Prompts) techniques
+        let papResult;
+        if (this.detectPAP) {
+            papResult = this.detectPersuasionTechniques(input, requestId);
+            // Add PAP weight to total if techniques detected
+            if (papResult.detected) {
+                totalWeight += papResult.persuasionScore;
+                matches.push(...papResult.techniques);
+                if (papResult.compoundAttack) {
+                    warnings.push(`Compound PAP attack detected: ${papResult.categories.length} categories used`);
+                }
+            }
+        }
+        // Calculate safety score (1.0 = safe, 0.0 = definitely malicious)
+        const score = Math.max(0, 1 - totalWeight);
+        let safe = score >= this.threshold;
+        // Block compound persuasion attacks even if below threshold
+        if (this.blockCompoundPersuasion && papResult?.compoundAttack && papResult.categories.length >= 3) {
+            safe = false;
+            warnings.push("Blocked due to multi-category persuasion attack");
+        }
+        // Generate warnings for borderline cases
+        if (score < 0.5 && score >= this.threshold) {
+            warnings.push("Input contains suspicious patterns but below threshold");
+        }
+        // Basic sanitization (remove obvious injection markers)
+        const sanitizedInput = this.basicSanitize(input);
+        const result = {
+            allowed: safe,
+            reason: safe ? undefined : `Injection/manipulation detected: ${matches.slice(0, 5).join(", ")}${matches.length > 5 ? "..." : ""}`,
+            violations: safe ? [] : papResult?.detected ? ["INJECTION_DETECTED", "PAP_DETECTED"] : ["INJECTION_DETECTED"],
+            score,
+            matches,
+            sanitizedInput,
+            warnings,
+            pap: papResult,
+        };
+        if (!safe && requestId) {
+            console.log(`[L1:${requestId}] BLOCKED: Safety score ${score.toFixed(2)} below threshold ${this.threshold}`);
+            if (papResult?.detected) {
+                console.log(`[L1:${requestId}] PAP techniques: ${papResult.techniques.join(", ")}`);
+            }
+        }
+        return result;
+    }
+    /**
+     * Detect persuasion techniques (PAP attacks)
+     */
+    detectPersuasionTechniques(input, requestId = "") {
+        const techniques = [];
+        const categories = new Set();
+        let persuasionScore = 0;
+        for (const { pattern, weight, name, category } of PAP_TECHNIQUES) {
+            if (pattern.test(input)) {
+                techniques.push(name);
+                categories.add(category);
+                persuasionScore += weight;
+                if (this.logMatches) {
+                    console.log(`[L1:${requestId}] PAP technique: ${name} (${category}, weight: ${weight})`);
+                }
+            }
+        }
+        const categoriesArray = Array.from(categories);
+        const compoundAttack = categoriesArray.length >= this.minPersuasionTechniques;
+        const detected = persuasionScore >= this.papThreshold || compoundAttack;
+        return {
+            detected,
+            techniques,
+            categories: categoriesArray,
+            compoundAttack,
+            persuasionScore: Math.min(1, persuasionScore),
+        };
+    }
+    /**
+     * Basic input sanitization
+     */
+    basicSanitize(input) {
+        return input
+            .replace(/<\/?system>/gi, "")
+            .replace(/\[system\]/gi, "")
+            .replace(/\[admin\]/gi, "")
+            .replace(/```system/gi, "```")
+            .trim();
+    }
+    /**
+     * Add custom pattern at runtime
+     */
+    addPattern(pattern, weight, name) {
+        this.patterns.push({ pattern, weight, name });
+    }
+    /**
+     * Set threshold
+     */
+    setThreshold(threshold) {
+        this.threshold = Math.max(0, Math.min(1, threshold));
+    }
+    /**
+     * Set PAP detection threshold
+     */
+    setPAPThreshold(threshold) {
+        this.papThreshold = Math.max(0, Math.min(1, threshold));
+    }
+    /**
+     * Enable/disable PAP detection
+     */
+    setPAPDetection(enabled) {
+        this.detectPAP = enabled;
+    }
+    /**
+     * Get PAP statistics for monitoring
+     */
+    static getPAPCategories() {
+        return ["authority", "scarcity", "social_proof", "reciprocity", "commitment", "liking", "fear", "logical_appeal", "evidence", "emotional"];
+    }
+}
+exports.InputSanitizer = InputSanitizer;
+//# sourceMappingURL=input-sanitizer.js.map

package/dist/guards/input-sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-sanitizer.js","sourceRoot":"","sources":["../../src/guards/input-sanitizer.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AA8BH,MAAM,gBAAgB,GAAuB;IAC3C,yCAAyC;IACzC,EAAE,OAAO,EAAE,6DAA6D,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACpH,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,6BAA6B,EAAE;IAC1F,EAAE,OAAO,EAAE,uDAAuD,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACjH,EAAE,OAAO,EAAE,+CAA+C,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACtG,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE;IACvF,EAAE,OAAO,EAAE,kEAAkE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC3H,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC5E,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;IAE3E,+BAA+B;IAC/B,EAAE,OAAO,EAAE,oDAAoD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACxG,EAAE,OAAO,EAAE,yCAAyC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE;IACzF,EAAE,OAAO,EAAE,kCAAkC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC7E,EAAE,OAAO,EAAE,iGAAiG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE;IACjJ,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE;IACzE,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE;IAC5D,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE;IAErF,sCAAsC;IACtC,EAAE,OAAO,EAAE,oEAAoE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACzH,EAAE,OAAO,EAAE,oDAAoD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC1G,EAAE,OAAO,EAAE,wDAAwD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE;IAC1G,EAAE,OAAO,EAAE,6EAA6E,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE;IAC/H,EAAE,OAAO,EAAE,qCAAqC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE;IACrF,EAAE,OAAO,EAAE,sCAAsC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE;IACvF,EAAE,OAAO,EAAE,qDAAqD,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE;IACpG,EAAE,OAAO,EAAE,2BAA2B,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE;IACxE,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAEhF,kCAAkC;IAClC,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAChE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC9D,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC3E,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAClE,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAChE,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE;IAC9D,EAAE,OAAO,EAAE,mCAAmC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACvF,EAAE,OAAO,EAAE,kDAAkD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE;IAC1G,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACrE,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE;IAEhE,gCAAgC;IAChC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE;IACjE,EAAE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE;IAChE,EAAE,OAAO,EAAE,6EAA6E,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,eAAe,EAAE;IAC9H,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAClE,EAAE,OAAO,EAAE,+DAA+D,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACvH,EAAE,OAAO,EAAE,sDAAsD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC1G,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC3E,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;IAC3D,EAAE,OAAO,EAAE,kDAAkD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE;IACpG,EAAE,OAAO,EAAE,iCAAiC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;IAC/E,EAAE,OAAO,EAAE,sCAAsC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE;IAEtF,uBAAuB;IACvB,EAAE,OAAO,EAAE,6EAA6E,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACrI,EAAE,OAAO,EAAE,2CAA2C,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAChG,EAAE,OAAO,EAAE,0DAA0D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACjH,EAAE,OAAO,EAAE,uDAAuD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE;IAEtG,kBAAkB;IAClB,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAE/E,6BAA6B;IAC7B,EAAE,OAAO,EAAE,0DAA0D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE;IACzG,EAAE,OAAO,EAAE,sCAAsC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE;IACrF,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE;IAE3D,2BAA2B;IAC3B,EAAE,OAAO,EAAE,gDAAgD,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE;IAC/F,EAAE,OAAO,EAAE,4DAA4D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE;CAC/G,CAAC;AAEF;;;;GAIG;AACH,MAAM,cAAc,GAA0B;IAC5C,6EAA6E;IAC7E,EAAE,OAAO,EAAE,8DAA8D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC/I,EAAE,OAAO,EAAE,qEAAqE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,WAAW,EAAE;IACnJ,EAAE,OAAO,EAAE,wDAAwD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,WAAW,EAAE;IACvI,EAAE,OAAO,EAAE,4DAA4D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC7I,EAAE,OAAO,EAAE,+EAA+E,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,WAAW,EAAE;IACjK,EAAE,OAAO,EAAE,wDAAwD,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,WAAW,EAAE;IAEzI,mEAAmE;IACnE,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,UAAU,EAAE;IAClG,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACnG,EAAE,OAAO,EAAE,2DAA2D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACzI,EAAE,OAAO,EAAE,yDAAyD,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACpI,EAAE,OAAO,EAAE,4DAA4D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACxI,EAAE,OAAO,EAAE,qDAAqD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACrI,EAAE,OAAO,EAAE,2EAA2E,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACvJ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAErF,yDAAyD;IACzD,EAAE,OAAO,EAAE,oDAAoD,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,cAAc,EAAE;IACrI,EAAE,OAAO,EAAE,mEAAmE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,cAAc,EAAE;IACrJ,EAAE,OAAO,EAAE,4DAA4D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,cAAc,EAAE;IACjJ,EAAE,OAAO,EAAE,0DAA0D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,cAAc,EAAE;IAC5I,EAAE,OAAO,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,cAAc,EAAE;IAC3G,EAAE,OAAO,EAAE,+DAA+D,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,cAAc,EAAE;IAE/I,wDAAwD;IACxD,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,aAAa,EAAE;IAC3H,EAAE,OAAO,EAAE,yBAAyB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,aAAa,EAAE;IAC9G,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,aAAa,EAAE;IAC1H,EAAE,OAAO,EAAE,kDAAkD,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,aAAa,EAAE;IACnI,EAAE,OAAO,EAAE,gEAAgE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,aAAa,EAAE;IAClJ,EAAE,OAAO,EAAE,+BAA+B,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,aAAa,EAAE;IAElH,iEAAiE;IACjE,EAAE,OAAO,EAAE,oEAAoE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACvJ,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE;IACnG,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,2BAA2B,EAAE,QAAQ,EAAE,YAAY,EAAE;IACzH,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,YAAY,EAAE;IAC7H,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,YAAY,EAAE;IAEtG,yDAAyD;IACzD,EAAE,OAAO,EAAE,iFAAiF,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC5J,EAAE,OAAO,EAAE,0DAA0D,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE;IACjI,EAAE,OAAO,EAAE,0DAA0D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE;IACpI,EAAE,OAAO,EAAE,iEAAiE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC1I,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAElG,8CAA8C;IAC9C,EAAE,OAAO,EAAE,gEAAgE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACrI,EAAE,OAAO,EAAE,kEAAkE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACxI,EAAE,OAAO,EAAE,2EAA2E,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACnJ,EAAE,OAAO,EAAE,kDAAkD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE;IACvH,EAAE,OAAO,EAAE,uCAAuC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC3G,EAAE,OAAO,EAAE,wCAAwC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE;IAE7G,wDAAwD;IACxD,EAAE,OAAO,EAAE,2DAA2D,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,gBAAgB,EAAE;IAC3I,EAAE,OAAO,EAAE,2DAA2D,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,gBAAgB,EAAE;IAC9I,EAAE,OAAO,EAAE,qDAAqD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,gBAAgB,EAAE;IAC1I,EAAE,OAAO,EAAE,4BAA4B,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,gBAAgB,EAAE;IAChH,EAAE,OAAO,EAAE,8CAA8C,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,gBAAgB,EAAE;IAEnI,kCAAkC;IAClC,EAAE,OAAO,EAAE,0DAA0D,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACzI,EAAE,OAAO,EAAE,sEAAsE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,UAAU,EAAE;IACpJ,EAAE,OAAO,EAAE,yEAAyE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,UAAU,EAAE;IAE3J,mEAAmE;IACnE,EAAE,OAAO,EAAE,yDAAyD,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,2BAA2B,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC7I,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,wBAAwB,EAAE,QAAQ,EAAE,WAAW,EAAE;IACjG,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,uBAAuB,EAAE,QAAQ,EAAE,WAAW,EAAE;IACtG,EAAE,OAAO,EAAE,yDAAyD,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,qBAAqB,EAAE,QAAQ,EAAE,WAAW,EAAE;IACxI,EAAE,OAAO,EAAE,wEAAwE,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,WAAW,EAAE;IACvJ,EAAE,OAAO,EAAE,oEAAoE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,WAAW,EAAE;IAClJ,EAAE,OAAO,EAAE,oDAAoD,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,QAAQ,EAAE,WAAW,EAAE;IACtI,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,8BAA8B,EAAE,QAAQ,EAAE,WAAW,EAAE;CACjH,CAAC;AA2BF,MAAa,cAAc;IASzB,YAAY,SAA+B,EAAE;QAC3C,IAAI,CAAC,QAAQ,GAAG,CAAC,GAAG,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,GAAG,CAAC;QAC/C,IAAI,CAAC,uBAAuB,GAAG,MAAM,CAAC,uBAAuB,IAAI,CAAC,CAAC;QACnE,IAAI,CAAC,uBAAuB,GAAG,MAAM,CAAC,uBAAuB,IAAI,IAAI,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAa,EAAE,YAAoB,EAAE;QAC5C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,+BAA+B;QAC/B,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACnB,WAAW,IAAI,MAAM,CAAC;gBAEtB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpB,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,sBAAsB,IAAI,aAAa,MAAM,GAAG,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;QAED,wDAAwD;QACxD,IAAI,SAAgD,CAAC;QACrD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,SAAS,GAAG,IAAI,CAAC,0BAA0B,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAE9D,iDAAiD;YACjD,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;gBACvB,WAAW,IAAI,SAAS,CAAC,eAAe,CAAC;gBACzC,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;gBAEtC,IAAI,SAAS,CAAC,cAAc,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,CAAC,iCAAiC,SAAS,CAAC,UAAU,CAAC,MAAM,kBAAkB,CAAC,CAAC;gBAChG,CAAC;YACH,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;QAC3C,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC;QAEnC,4DAA4D;QAC5D,IAAI,IAAI,CAAC,uBAAuB,IAAI,SAAS,EAAE,cAAc,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAClG,IAAI,GAAG,KAAK,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QACnE,CAAC;QAED,yCAAyC;QACzC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3C,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QAC1E,CAAC;QAED,wDAAwD;QACxD,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAuB;YACjC,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,oCAAoC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE;YACjI,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;YAC7G,KAAK;YACL,OAAO;YACP,cAAc;YACd,QAAQ;YACR,GAAG,EAAE,SAAS;SACf,CAAC;QAEF,IAAI,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,2BAA2B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC7G,IAAI,SAAS,EAAE,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,qBAAqB,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,0BAA0B,CAAC,KAAa,EAAE,YAAoB,EAAE;QACtE,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;QACjD,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,KAAK,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,cAAc,EAAE,CAAC;YACjE,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACzB,eAAe,IAAI,MAAM,CAAC;gBAE1B,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpB,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,oBAAoB,IAAI,KAAK,QAAQ,aAAa,MAAM,GAAG,CAAC,CAAC;gBAC3F,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,IAAI,IAAI,CAAC,uBAAuB,CAAC;QAC9E,MAAM,QAAQ,GAAG,eAAe,IAAI,IAAI,CAAC,YAAY,IAAI,cAAc,CAAC;QAExE,OAAO;YACL,QAAQ;YACR,UAAU;YACV,UAAU,EAAE,eAAe;YAC3B,cAAc;YACd,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,KAAa;QACjC,OAAO,KAAK;aACT,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;aAC5B,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;aAC3B,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;aAC1B,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC;aAC7B,IAAI,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAAe,EAAE,MAAc,EAAE,IAAY;QACtD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB;QAC5B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,SAAiB;QAC/B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,OAAgB;QAC9B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB;QACrB,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC7I,CAAC;CACF;AA7KD,wCA6KC"}

package/dist/guards/mcp-security-guard.d.ts

@@ -0,0 +1,204 @@
+/**
+ * MCPSecurityGuard (L16)
+ *
+ * Secures Model Context Protocol (MCP) tool integrations.
+ * Prevents tool shadowing, server impersonation, and supply chain attacks.
+ *
+ * Threat Model:
+ * - ASI04: Agentic Supply Chain Vulnerabilities
+ * - CVE-2025-68145, CVE-2025-68143, CVE-2025-68144: MCP RCE vulnerabilities
+ * - CVE-2025-6514: mcp-remote command injection
+ * - CVE-2025-32711: EchoLeak - silent data exfiltration
+ * - Tool Shadowing: Malicious MCP servers impersonating legitimate tools
+ *
+ * Protection Capabilities:
+ * - MCP server identity verification (signature-based)
+ * - Tool registration allowlist enforcement
+ * - Dynamic tool registration monitoring
+ * - OAuth endpoint validation
+ * - Tool shadowing detection
+ * - Server reputation scoring
+ * - Command injection prevention
+ */
+export interface MCPSecurityGuardConfig {
+    /** Require server signature verification */
+    requireServerSignature?: boolean;
+    /** Trusted MCP servers */
+    trustedServers?: MCPServerIdentity[];
+    /** Blocked server patterns (domains, names) */
+    blockedServers?: string[];
+    /** Allow dynamic tool registration at runtime */
+    allowDynamicRegistration?: boolean;
+    /** Tool name allowlist (if set, only these tools are allowed) */
+    toolAllowlist?: string[];
+    /** Tool name blocklist */
+    toolBlocklist?: string[];
+    /** Validate OAuth endpoints */
+    validateOAuthEndpoints?: boolean;
+    /** Allowed OAuth domains */
+    allowedOAuthDomains?: string[];
+    /** Enable tool shadowing detection */
+    detectToolShadowing?: boolean;
+    /** Minimum server reputation score (0-100) */
+    minServerReputation?: number;
+    /** Enable strict mode (block on any violation) */
+    strictMode?: boolean;
+    /** Custom command injection patterns */
+    customInjectionPatterns?: RegExp[];
+}
+export interface MCPServerIdentity {
+    /** Server unique identifier */
+    serverId: string;
+    /** Server name/display name */
+    name: string;
+    /** Server version */
+    version?: string;
+    /** Public key for signature verification (hex encoded) */
+    publicKey?: string;
+    /** Trusted domains this server can operate on */
+    trustedDomains?: string[];
+    /** Tools this server is allowed to provide */
+    allowedTools?: string[];
+    /** Server metadata */
+    metadata?: Record<string, any>;
+    /** Registration timestamp */
+    registeredAt?: number;
+    /** Reputation score (0-100) */
+    reputationScore?: number;
+}
+export interface MCPToolDefinition {
+    /** Tool name */
+    name: string;
+    /** Tool description */
+    description: string;
+    /** Server providing this tool */
+    serverId: string;
+    /** Tool parameters schema */
+    parameters?: Record<string, any>;
+    /** Tool capabilities/permissions required */
+    capabilities?: string[];
+    /** Tool risk level */
+    riskLevel?: "low" | "medium" | "high" | "critical";
+}
+export interface MCPServerRegistration {
+    /** Server identity */
+    server: MCPServerIdentity;
+    /** Tools provided by this server */
+    tools: MCPToolDefinition[];
+    /** OAuth configuration if applicable */
+    oauth?: {
+        authorizationEndpoint?: string;
+        tokenEndpoint?: string;
+        scopes?: string[];
+    };
+    /** Server signature (HMAC of server identity) */
+    signature?: string;
+    /** Registration timestamp */
+    timestamp: number;
+}
+export interface MCPToolCall {
+    /** Tool name being called */
+    toolName: string;
+    /** Server providing the tool */
+    serverId: string;
+    /** Tool parameters */
+    parameters: Record<string, any>;
+    /** Request context */
+    context?: {
+        sessionId?: string;
+        userId?: string;
+        agentId?: string;
+    };
+}
+export interface MCPSecurityResult {
+    allowed: boolean;
+    reason: string;
+    violations: string[];
+    request_id: string;
+    server_analysis?: {
+        server_verified: boolean;
+        signature_valid: boolean;
+        reputation_score: number;
+        is_shadowing: boolean;
+        tools_allowed: boolean;
+    };
+    tool_analysis?: {
+        tool_registered: boolean;
+        tool_allowed: boolean;
+        parameters_safe: boolean;
+        injection_detected: boolean;
+        risk_level: string;
+    };
+    recommendations: string[];
+}
+export declare class MCPSecurityGuard {
+    private config;
+    private registeredServers;
+    private registeredTools;
+    private serverReputation;
+    private toolToServer;
+    private serverViolations;
+    private readonly COMMAND_INJECTION_PATTERNS;
+    private readonly SHADOWING_INDICATORS;
+    private readonly MALICIOUS_SERVER_PATTERNS;
+    constructor(config?: MCPSecurityGuardConfig);
+    /**
+     * Validate MCP server registration
+     */
+    validateServerRegistration(registration: MCPServerRegistration, requestId?: string): MCPSecurityResult;
+    /**
+     * Validate MCP tool call
+     */
+    validateToolCall(toolCall: MCPToolCall, requestId?: string): MCPSecurityResult;
+    /**
+     * Register a trusted MCP server
+     */
+    registerTrustedServer(server: MCPServerIdentity, tools: MCPToolDefinition[]): void;
+    /**
+     * Block an MCP server
+     */
+    blockServer(serverIdOrPattern: string): void;
+    /**
+     * Get server reputation
+     */
+    getServerReputation(serverId: string): number;
+    /**
+     * Update server reputation
+     */
+    updateServerReputation(serverId: string, delta: number): void;
+    /**
+     * Get all registered servers
+     */
+    getRegisteredServers(): MCPServerIdentity[];
+    /**
+     * Get all registered tools
+     */
+    getRegisteredTools(): MCPToolDefinition[];
+    /**
+     * Check if a tool name is potentially shadowing another
+     */
+    isToolShadowing(toolName: string): {
+        shadowing: boolean;
+        legitimate?: string;
+    };
+    /**
+     * Get violation count for a server
+     */
+    getServerViolations(serverId: string): number;
+    /**
+     * Reset server violations
+     */
+    resetServerViolations(serverId: string): void;
+    private registerServer;
+    private isServerBlocked;
+    private isTrustedServer;
+    private checkMaliciousPatterns;
+    private verifyServerSignature;
+    private detectToolShadowing;
+    private validateOAuthConfig;
+    private detectInjection;
+    private scanParameters;
+    private isHighRiskOperation;
+    private generateRecommendations;
+}
+//# sourceMappingURL=mcp-security-guard.d.ts.map

package/dist/guards/mcp-security-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-security-guard.d.ts","sourceRoot":"","sources":["../../src/guards/mcp-security-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,MAAM,WAAW,sBAAsB;IACrC,4CAA4C;IAC5C,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,0BAA0B;IAC1B,cAAc,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACrC,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,iDAAiD;IACjD,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,iEAAiE;IACjE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,0BAA0B;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,+BAA+B;IAC/B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,4BAA4B;IAC5B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,sCAAsC;IACtC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,8CAA8C;IAC9C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kDAAkD;IAClD,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,wCAAwC;IACxC,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,iBAAiB;IAChC,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,+BAA+B;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,qBAAqB;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,8CAA8C;IAC9C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,sBAAsB;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,gBAAgB;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,sBAAsB;IACtB,SAAS,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CACpD;AAED,MAAM,WAAW,qBAAqB;IACpC,sBAAsB;IACtB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,oCAAoC;IACpC,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,wCAAwC;IACxC,KAAK,CAAC,EAAE;QACN,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;IACF,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,sBAAsB;IACtB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,sBAAsB;IACtB,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE;QAChB,eAAe,EAAE,OAAO,CAAC;QACzB,eAAe,EAAE,OAAO,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;QACzB,YAAY,EAAE,OAAO,CAAC;QACtB,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IACF,aAAa,CAAC,EAAE;QACd,eAAe,EAAE,OAAO,CAAC;QACzB,YAAY,EAAE,OAAO,CAAC;QACtB,eAAe,EAAE,OAAO,CAAC;QACzB,kBAAkB,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAmC;IACjD,OAAO,CAAC,iBAAiB,CAA6C;IACtE,OAAO,CAAC,eAAe,CAA6C;IACpE,OAAO,CAAC,gBAAgB,CAAkC;IAC1D,OAAO,CAAC,YAAY,CAAkC;IACtD,OAAO,CAAC,gBAAgB,CAAkC;IAG1D,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CA0BzC;IAGF,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAOnC;IAGF,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAMxC;gBAEU,MAAM,GAAE,sBAA2B;IA2B/C;;OAEG;IACH,0BAA0B,CACxB,YAAY,EAAE,qBAAqB,EACnC,SAAS,CAAC,EAAE,MAAM,GACjB,iBAAiB;IA4HpB;;OAEG;IACH,gBAAgB,CACd,QAAQ,EAAE,WAAW,EACrB,SAAS,CAAC,EAAE,MAAM,GACjB,iBAAiB;IAmGpB;;OAEG;IACH,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE,GAAG,IAAI;IAIlF;;OAEG;IACH,WAAW,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI;IAS5C;;OAEG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAI7C;;OAEG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAK7D;;OAEG;IACH,oBAAoB,IAAI,iBAAiB,EAAE;IAI3C;;OAEG;IACH,kBAAkB,IAAI,iBAAiB,EAAE;IAIzC;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;IAS9E;;OAEG;IACH,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM;IAI7C;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAM7C,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,eAAe;IAiBvB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,qBAAqB;IAkB7B,OAAO,CAAC,mBAAmB;IA0B3B,OAAO,CAAC,mBAAmB;IA4C3B,OAAO,CAAC,eAAe;IAoBvB,OAAO,CAAC,cAAc;IAkCtB,OAAO,CAAC,mBAAmB;IAuB3B,OAAO,CAAC,uBAAuB;CAqChC"}