llm-trust-guard 4.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (115) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +318 -0
  3. package/dist/guards/agent-communication-guard.d.ts +169 -0
  4. package/dist/guards/agent-communication-guard.d.ts.map +1 -0
  5. package/dist/guards/agent-communication-guard.js +468 -0
  6. package/dist/guards/agent-communication-guard.js.map +1 -0
  7. package/dist/guards/autonomy-escalation-guard.d.ts +137 -0
  8. package/dist/guards/autonomy-escalation-guard.d.ts.map +1 -0
  9. package/dist/guards/autonomy-escalation-guard.js +470 -0
  10. package/dist/guards/autonomy-escalation-guard.js.map +1 -0
  11. package/dist/guards/circuit-breaker.d.ts +142 -0
  12. package/dist/guards/circuit-breaker.d.ts.map +1 -0
  13. package/dist/guards/circuit-breaker.js +347 -0
  14. package/dist/guards/circuit-breaker.js.map +1 -0
  15. package/dist/guards/code-execution-guard.d.ts +114 -0
  16. package/dist/guards/code-execution-guard.d.ts.map +1 -0
  17. package/dist/guards/code-execution-guard.js +467 -0
  18. package/dist/guards/code-execution-guard.js.map +1 -0
  19. package/dist/guards/conversation-guard.d.ts +73 -0
  20. package/dist/guards/conversation-guard.d.ts.map +1 -0
  21. package/dist/guards/conversation-guard.js +281 -0
  22. package/dist/guards/conversation-guard.js.map +1 -0
  23. package/dist/guards/drift-detector.d.ts +182 -0
  24. package/dist/guards/drift-detector.d.ts.map +1 -0
  25. package/dist/guards/drift-detector.js +480 -0
  26. package/dist/guards/drift-detector.js.map +1 -0
  27. package/dist/guards/encoding-detector.d.ts +76 -0
  28. package/dist/guards/encoding-detector.d.ts.map +1 -0
  29. package/dist/guards/encoding-detector.js +698 -0
  30. package/dist/guards/encoding-detector.js.map +1 -0
  31. package/dist/guards/execution-monitor.d.ts +73 -0
  32. package/dist/guards/execution-monitor.d.ts.map +1 -0
  33. package/dist/guards/execution-monitor.js +205 -0
  34. package/dist/guards/execution-monitor.js.map +1 -0
  35. package/dist/guards/input-sanitizer.d.ts +87 -0
  36. package/dist/guards/input-sanitizer.d.ts.map +1 -0
  37. package/dist/guards/input-sanitizer.js +301 -0
  38. package/dist/guards/input-sanitizer.js.map +1 -0
  39. package/dist/guards/mcp-security-guard.d.ts +204 -0
  40. package/dist/guards/mcp-security-guard.d.ts.map +1 -0
  41. package/dist/guards/mcp-security-guard.js +618 -0
  42. package/dist/guards/mcp-security-guard.js.map +1 -0
  43. package/dist/guards/memory-guard.d.ts +124 -0
  44. package/dist/guards/memory-guard.d.ts.map +1 -0
  45. package/dist/guards/memory-guard.js +476 -0
  46. package/dist/guards/memory-guard.js.map +1 -0
  47. package/dist/guards/multimodal-guard.d.ts +93 -0
  48. package/dist/guards/multimodal-guard.d.ts.map +1 -0
  49. package/dist/guards/multimodal-guard.js +507 -0
  50. package/dist/guards/multimodal-guard.js.map +1 -0
  51. package/dist/guards/output-filter.d.ts +76 -0
  52. package/dist/guards/output-filter.d.ts.map +1 -0
  53. package/dist/guards/output-filter.js +289 -0
  54. package/dist/guards/output-filter.js.map +1 -0
  55. package/dist/guards/policy-gate.d.ts +57 -0
  56. package/dist/guards/policy-gate.d.ts.map +1 -0
  57. package/dist/guards/policy-gate.js +182 -0
  58. package/dist/guards/policy-gate.js.map +1 -0
  59. package/dist/guards/prompt-leakage-guard.d.ts +110 -0
  60. package/dist/guards/prompt-leakage-guard.d.ts.map +1 -0
  61. package/dist/guards/prompt-leakage-guard.js +529 -0
  62. package/dist/guards/prompt-leakage-guard.js.map +1 -0
  63. package/dist/guards/rag-guard.d.ts +188 -0
  64. package/dist/guards/rag-guard.d.ts.map +1 -0
  65. package/dist/guards/rag-guard.js +769 -0
  66. package/dist/guards/rag-guard.js.map +1 -0
  67. package/dist/guards/schema-validator.d.ts +35 -0
  68. package/dist/guards/schema-validator.d.ts.map +1 -0
  69. package/dist/guards/schema-validator.js +316 -0
  70. package/dist/guards/schema-validator.js.map +1 -0
  71. package/dist/guards/state-persistence-guard.d.ts +153 -0
  72. package/dist/guards/state-persistence-guard.d.ts.map +1 -0
  73. package/dist/guards/state-persistence-guard.js +484 -0
  74. package/dist/guards/state-persistence-guard.js.map +1 -0
  75. package/dist/guards/tenant-boundary.d.ts +67 -0
  76. package/dist/guards/tenant-boundary.d.ts.map +1 -0
  77. package/dist/guards/tenant-boundary.js +187 -0
  78. package/dist/guards/tenant-boundary.js.map +1 -0
  79. package/dist/guards/tool-chain-validator.d.ts +102 -0
  80. package/dist/guards/tool-chain-validator.d.ts.map +1 -0
  81. package/dist/guards/tool-chain-validator.js +480 -0
  82. package/dist/guards/tool-chain-validator.js.map +1 -0
  83. package/dist/guards/tool-registry.d.ts +45 -0
  84. package/dist/guards/tool-registry.d.ts.map +1 -0
  85. package/dist/guards/tool-registry.js +155 -0
  86. package/dist/guards/tool-registry.js.map +1 -0
  87. package/dist/guards/trust-exploitation-guard.d.ts +134 -0
  88. package/dist/guards/trust-exploitation-guard.d.ts.map +1 -0
  89. package/dist/guards/trust-exploitation-guard.js +354 -0
  90. package/dist/guards/trust-exploitation-guard.js.map +1 -0
  91. package/dist/index.d.ts +133 -0
  92. package/dist/index.d.ts.map +1 -0
  93. package/dist/index.js +430 -0
  94. package/dist/index.js.map +1 -0
  95. package/dist/integrations/express.d.ts +119 -0
  96. package/dist/integrations/express.d.ts.map +1 -0
  97. package/dist/integrations/express.js +244 -0
  98. package/dist/integrations/express.js.map +1 -0
  99. package/dist/integrations/index.d.ts +9 -0
  100. package/dist/integrations/index.d.ts.map +1 -0
  101. package/dist/integrations/index.js +26 -0
  102. package/dist/integrations/index.js.map +1 -0
  103. package/dist/integrations/langchain.d.ts +165 -0
  104. package/dist/integrations/langchain.d.ts.map +1 -0
  105. package/dist/integrations/langchain.js +308 -0
  106. package/dist/integrations/langchain.js.map +1 -0
  107. package/dist/integrations/openai.d.ts +205 -0
  108. package/dist/integrations/openai.d.ts.map +1 -0
  109. package/dist/integrations/openai.js +380 -0
  110. package/dist/integrations/openai.js.map +1 -0
  111. package/dist/types/index.d.ts +245 -0
  112. package/dist/types/index.d.ts.map +1 -0
  113. package/dist/types/index.js +6 -0
  114. package/dist/types/index.js.map +1 -0
  115. package/package.json +64 -0
@@ -0,0 +1 @@
1
+ {"version":3,"file":"rag-guard.js","sourceRoot":"","sources":["../../src/guards/rag-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,+CAAiC;AAyGjC,MAAa,QAAQ;IAiFnB,YAAY,SAAyB,EAAE;QA/E/B,qBAAgB,GAAwB,IAAI,GAAG,EAAE,CAAC;QAClD,0BAAqB,GAAwB,IAAI,GAAG,EAAE,CAAC;QAE/D,iEAAiE;QAChD,2BAAsB,GAA+D;YACpG,+BAA+B;YAC/B,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,+DAA+D,EAAE,QAAQ,EAAE,EAAE,EAAE;YACxH,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,iEAAiE,EAAE,QAAQ,EAAE,EAAE,EAAE;YACxH,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,0DAA0D,EAAE,QAAQ,EAAE,EAAE,EAAE;YAE7G,oDAAoD;YACpD,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,oDAAoD,EAAE,QAAQ,EAAE,EAAE,EAAE;YACxG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,gCAAgC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAEnF,6BAA6B;YAC7B,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,6CAA6C,EAAE,QAAQ,EAAE,EAAE,EAAE;YACpG,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,iDAAiD,EAAE,QAAQ,EAAE,EAAE,EAAE;YAElG,0BAA0B;YAC1B,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,yDAAyD,EAAE,QAAQ,EAAE,EAAE,EAAE;YACzG,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,+CAA+C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAEtG,sCAAsC;YACtC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,sDAAsD,EAAE,QAAQ,EAAE,EAAE,EAAE;YACzG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,4EAA4E,EAAE,QAAQ,EAAE,EAAE,EAAE;YAE/H,gCAAgC;YAChC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,gEAAgE,EAAE,QAAQ,EAAE,EAAE,EAAE;YACrH,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,2EAA2E,EAAE,QAAQ,EAAE,EAAE,EAAE;YAE5H,0BAA0B;YAC1B,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,8EAA8E,EAAE,QAAQ,EAAE,EAAE,EAAE;YACpI,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,iEAAiE,EAAE,QAAQ,EAAE,EAAE,EAAE;SACjH,CAAC;QAEF,+BAA+B;QACd,iCAA4B,GAA6C;YACxF,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,sBAAsB,EAAE;YAC5D,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,6BAA6B,EAAE;YACvE,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,2BAA2B,EAAE;SAC1E,CAAC;QAEF,kCAAkC;QACjB,8BAAyB,GAAG;YAC3C,gBAAgB;YAChB,gBAAgB;YAChB,0CAA0C;YAC1C,yCAAyC;YACzC,oCAAoC,EAAE,eAAe;SACtD,CAAC;QAEF,0CAA0C;QACzB,gCAA2B,GAA+D;YACzG,oCAAoC;YACpC,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,oEAAoE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC/H,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,0DAA0D,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC9G,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,EAAE,EAAE;YAElE,wBAAwB;YACxB,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,yCAAyC,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC9F,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,+BAA+B,EAAE,QAAQ,EAAE,EAAE,EAAE;YAChF,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,+CAA+C,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,sBAAsB;YAE5H,uBAAuB;YACvB,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE;YACzE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE;YAE1D,4CAA4C;YAC5C,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,2BAA2B,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC5E,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,6DAA6D,EAAE,QAAQ,EAAE,EAAE,EAAE;YACrH,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,6CAA6C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC7F,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,6CAA6C,EAAE,QAAQ,EAAE,EAAE,EAAE;YAEhG,6BAA6B;YAC7B,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,EAAE,EAAE;YACvE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,6BAA6B,EAAE,QAAQ,EAAE,EAAE,EAAE;YAChF,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,wCAAwC,EAAE,QAAQ,EAAE,EAAE,EAAE;SAC3F,CAAC;QAGA,IAAI,CAAC,MAAM,GAAG;YACZ,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI;YACjD,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3C,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3C,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,KAAK,EAAE,OAAO;YACzD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YACzC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,IAAI,IAAI;YACzD,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,IAAI,GAAG,EAAE;YACpD,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,aAAa;YACb,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI;YAC7D,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI,EAAE,iBAAiB;YACxE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;YACvD,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,IAAI,IAAI;YACnE,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;YACrE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;YACvD,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,IAAI;SAChE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,SAAwB,EACxB,SAAkB;QAElB,MAAM,KAAK,GAAG,SAAS,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,gBAAgB,GAAa,EAAE,CAAC;QACtC,MAAM,aAAa,GAAkB,EAAE,CAAC;QACxC,MAAM,iBAAiB,GAA4B,EAAE,CAAC;QACtD,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,IAAI,gBAAgB,GAAG,CAAC,CAAC;QACzB,IAAI,kBAAkB,GAAG,CAAC,CAAC;QAC3B,IAAI,eAAe,GAAG,CAAC,CAAC;QACxB,IAAI,wBAAwB,GAAG,CAAC,CAAC;QACjC,IAAI,qBAAqB,GAAG,CAAC,CAAC;QAC9B,IAAI,yBAAyB,GAAG,CAAC,CAAC;QAElC,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,aAAa,GAAa,EAAE,CAAC;YACjC,IAAI,YAAY,GAAG,CAAC,CAAC;YACrB,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,iBAAiB,GAAG,KAAK,CAAC;YAE9B,sBAAsB;YACtB,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;gBACrD,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;gBACzC,YAAY,IAAI,EAAE,CAAC;YACrB,CAAC;YAED,gBAAgB;YAChB,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC3D,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAC1B,aAAa,CAAC,IAAI,CAAC,qBAAqB,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC/D,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAClC,YAAY,IAAI,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC;oBAEzC,IAAI,YAAY,CAAC,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;wBACnD,WAAW,GAAG,IAAI,CAAC;oBACrB,CAAC;gBACH,CAAC;gBACD,eAAe,IAAI,YAAY,CAAC,KAAK,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,eAAe,IAAI,EAAE,CAAC,CAAC,mCAAmC;YAC5D,CAAC;YAED,gCAAgC;YAChC,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;oBAChD,aAAa,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;oBAC5C,YAAY,IAAI,EAAE,CAAC;oBACnB,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC;gBAED,kCAAkC;gBAClC,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC1C,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,EAAE,CAAC,CAAC,CAAC,qCAAqC;gBACtF,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACjC,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC3D,IAAI,eAAe,CAAC,KAAK,EAAE,CAAC;oBAC1B,iBAAiB,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACrD,aAAa,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;oBAClD,YAAY,IAAI,eAAe,CAAC,gBAAgB,CAAC;oBACjD,iBAAiB,GAAG,IAAI,CAAC;oBAEzB,IAAI,eAAe,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;wBAC3C,WAAW,GAAG,IAAI,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC;YAED,iBAAiB;YACjB,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjB,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACxD,IAAI,cAAc,CAAC,UAAU,EAAE,CAAC;oBAC9B,aAAa,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;oBACjD,YAAY,IAAI,cAAc,CAAC,gBAAgB,CAAC;gBAClD,CAAC;YACH,CAAC;YAED,0EAA0E;YAC1E,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAClB,wEAAwE;gBACxE,yDAAyD;gBACzD,MAAM,gBAAgB,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CACrD,CAAC,KAAK,IAAI;oBACV,CAAC,KAAK,SAAS;oBACf,OAAO,CAAC,KAAK,QAAQ;oBACrB,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACZ,KAAK,CAAC,CAAC,CAAC,CACT,CAAC;gBACF,IAAI,gBAAgB,EAAE,CAAC;oBACrB,aAAa,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;oBACxD,YAAY,IAAI,EAAE,CAAC;oBACnB,WAAW,GAAG,IAAI,CAAC;gBACrB,CAAC;gBAED,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;oBACrC,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;oBAC/E,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;wBAC9B,aAAa,CAAC,IAAI,CAAC,sBAAsB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;wBACnE,YAAY,IAAI,EAAE,CAAC;wBACnB,IAAI,eAAe,CAAC,WAAW,EAAE,CAAC;4BAChC,WAAW,GAAG,IAAI,CAAC;wBACrB,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,0CAA0C;YAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBACxD,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC;gBACvF,IAAI,eAAe,CAAC,QAAQ,EAAE,CAAC;oBAC7B,wBAAwB,EAAE,CAAC;oBAC3B,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;oBACxC,aAAa,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,CAAC;oBACtF,YAAY,IAAI,eAAe,CAAC,UAAU,CAAC;oBAC3C,IAAI,eAAe,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;wBACrC,WAAW,GAAG,IAAI,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC;YAED,mCAAmC;YACnC,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;gBACxC,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACjE,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;oBACzB,yBAAyB,IAAI,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAC5D,aAAa,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;oBACjD,YAAY,IAAI,cAAc,CAAC,gBAAgB,CAAC;oBAChD,iBAAiB,GAAG,IAAI,CAAC;oBACzB,IAAI,cAAc,CAAC,gBAAgB,IAAI,EAAE,EAAE,CAAC;wBAC1C,WAAW,GAAG,IAAI,CAAC;oBACrB,CAAC;gBACH,CAAC;YACH,CAAC;YAED,8BAA8B;YAC9B,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBACpC,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC1D,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;oBACtB,qBAAqB,EAAE,CAAC;oBACxB,aAAa,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;oBAC9C,YAAY,IAAI,WAAW,CAAC,gBAAgB,CAAC;oBAC7C,iBAAiB,GAAG,IAAI,CAAC;gBAC3B,CAAC;YACH,CAAC;YAED,6BAA6B;YAC7B,IAAI,WAAW,IAAI,YAAY,IAAI,EAAE,EAAE,CAAC;gBACtC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACxB,gBAAgB,EAAE,CAAC;gBACnB,UAAU,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;iBAAM,IAAI,iBAAiB,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBACzD,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAC7C,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9B,kBAAkB,EAAE,CAAC;gBACrB,UAAU,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,UAAU,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,gBAAgB,KAAK,SAAS,CAAC,MAAM,IAAI,iBAAiB,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;QAEvG,OAAO;YACL,OAAO,EAAE,CAAC,OAAO;YACjB,MAAM,EAAE,OAAO;gBACb,CAAC,CAAC,wBAAwB,gBAAgB,IAAI,SAAS,CAAC,MAAM,8BAA8B;gBAC5F,CAAC,CAAC,uBAAuB;YAC3B,UAAU;YACV,UAAU,EAAE,KAAK;YACjB,iBAAiB,EAAE;gBACjB,iBAAiB,EAAE,SAAS,CAAC,MAAM;gBACnC,iBAAiB,EAAE,gBAAgB;gBACnC,mBAAmB,EAAE,kBAAkB;gBACvC,kBAAkB,EAAE,iBAAiB;gBACrC,iBAAiB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBACjD,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;gBAClD,eAAe;gBACf,0BAA0B,EAAE,wBAAwB;gBACpD,sBAAsB,EAAE,qBAAqB;gBAC7C,2BAA2B,EAAE,yBAAyB;aACvD;YACD,mBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;YACxD,oBAAoB,EAAE,UAAU;YAChC,eAAe,EAAE,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC;YACtF,cAAc;YACd,kBAAkB,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;SACjF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CACZ,QAAqB,EACrB,SAAkB;QAElB,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,MAAc;QACjC,cAAc;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa;gBAC5C,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,yBAAyB;aAClG,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC,yBAAyB;QACzC,IAAI,MAAM,GAAG,gBAAgB,CAAC;QAE9B,wBAAwB;QACxB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;gBAC1C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;YAChE,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACrD,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzB,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;YACnF,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;gBAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;YAChE,CAAC;QACH,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;YAE5B,wBAAwB;YACxB,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,IAAI,EAAE,CAAC;gBACZ,MAAM,GAAG,cAAc,CAAC;YAC1B,CAAC;YAED,+BAA+B;YAC/B,MAAM,cAAc,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;YAChG,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;gBACpC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClC,KAAK,IAAI,EAAE,CAAC;oBACZ,MAAM,GAAG,mBAAmB,MAAM,EAAE,CAAC;oBACrC,MAAM;gBACR,CAAC;YACH,CAAC;YAED,0BAA0B;YAC1B,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5D,KAAK,IAAI,EAAE,CAAC;gBACZ,MAAM,GAAG,wBAAwB,CAAC;YACpC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;YAClB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxD,KAAK,GAAG,EAAE,CAAC;gBACX,MAAM,GAAG,iBAAiB,CAAC;YAC7B,CAAC;QACH,CAAC;QAED,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9C,OAAO;YACL,OAAO,EAAE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa;YAC3C,KAAK;YACL,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,MAAc;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,MAAc;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAAe;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,gBAAgB;QACd,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC;IAEO,gBAAgB,CAAC,OAAe;QAMtC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,gBAAgB,GAAG,CAAC,CAAC;QAEzB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;gBACrC,gBAAgB,IAAI,QAAQ,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,gEAAgE;QAChE,MAAM,gBAAgB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACnF,IAAI,gBAAgB,GAAG,GAAG,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACzC,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACxC,gBAAgB,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,8BAA8B;QAC9B,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC5E,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACrC,gBAAgB,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC1B,QAAQ;YACR,UAAU;YACV,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC;SAClD,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,QAA6B;QAKjD,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,gBAAgB,GAAG,CAAC,CAAC;QAEzB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE7C,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,4BAA4B,EAAE,CAAC;YAClE,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9B,UAAU,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;gBACpC,gBAAgB,IAAI,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;YAClF,IAAI,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC9B,UAAU,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;gBAC9C,gBAAgB,IAAI,QAAQ,GAAG,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,OAAO;YACL,UAAU,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YACjC,UAAU;YACV,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,gBAAgB,CAAC;SACjD,CAAC;IACJ,CAAC;IAEO,cAAc,CAAC,SAAmB,EAAE,cAAsB;QAKhE,yCAAyC;QAEzC,0EAA0E;QAC1E,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,8CAA8C,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACxG,CAAC;QAED,4CAA4C;QAC5C,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC9E,IAAI,YAAY,CAAC,IAAI,GAAG,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC/C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC1F,CAAC;QAED,gFAAgF;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,cAAc,GAAG,GAAG,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;YAC5C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;QACjE,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;IAEO,gBAAgB,CAAC,GAAgB;QACvC,IAAI,gBAAgB,GAAG,GAAG,CAAC,OAAO,CAAC;QAEnC,4BAA4B;QAC5B,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACtD,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACrE,CAAC;QAED,8BAA8B;QAC9B,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAC;QAEvF,sCAAsC;QACtC,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,CAAC,4CAA4C,EAAE,EAAE,CAAC,CAAC;QAE9F,OAAO;YACL,GAAG,GAAG;YACN,OAAO,EAAE,gBAAgB;YACzB,QAAQ,EAAE;gBACR,GAAG,GAAG,CAAC,QAAQ;gBACf,UAAU,EAAE,IAAI;gBAChB,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;gBACnC,gBAAgB,EAAE,gBAAgB,CAAC,MAAM;aAC1C;SACF,CAAC;IACJ,CAAC;IAEO,WAAW,CAAC,OAAe;QACjC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAEO,uBAAuB,CAAC,UAAoB,EAAE,mBAA4B;QAChF,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,IAAI,mBAAmB,EAAE,CAAC;YACxB,eAAe,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACpD,eAAe,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/C,eAAe,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACpD,eAAe,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YACpD,eAAe,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,eAAe,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,4DAA4D;IAE5D;;OAEG;IACK,sBAAsB,CAC5B,SAAmB,EACnB,cAAuB;QAEvB,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,OAAO,GAAqC,EAAE,CAAC;QACrD,IAAI,SAAS,GAAG,CAAC,CAAC;QAElB,4BAA4B;QAC5B,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YACxD,WAAW,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACvC,SAAS,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,gCAAgC;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC;QAE7D,gCAAgC;QAChC,IAAI,SAAS,GAAG,MAAM,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;YAC7C,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACtC,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;YACjC,SAAS,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,8CAA8C;QAC9C,gEAAgE;QAChE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;QACvE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QAEjE,2DAA2D;QAC3D,IAAI,MAAM,GAAG,MAAM,GAAG,EAAE,EAAE,CAAC;YACzB,WAAW,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC7C,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAAC;YACxC,SAAS,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,8BAA8B;QAC9B,mDAAmD;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC,IAAI,SAAS,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;QACjD,CAAC;QAED,iDAAiD;QACjD,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACnE,IAAI,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;oBACjD,WAAW,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;oBACrC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;oBAChC,SAAS,IAAI,EAAE,CAAC;oBAChB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;QACrE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;QACjG,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEnC,4DAA4D;QAC5D,IAAI,MAAM,GAAG,KAAK,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YACnC,WAAW,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACzC,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;YACpC,SAAS,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,iDAAiD;QACjD,IAAI,cAAc,IAAI,cAAc,GAAG,IAAI,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;YAC9D,WAAW,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAC1C,SAAS,IAAI,EAAE,CAAC;QAClB,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC;YAChC,WAAW,EAAE,WAAW;YACxB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC;YACpC,OAAO;SACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,uBAAuB,CAAC,OAAe;QAM7C,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,gBAAgB,GAAG,CAAC,CAAC;QAEzB,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,2BAA2B,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC;gBAC9C,gBAAgB,IAAI,QAAQ,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC1B,QAAQ;YACR,UAAU;YACV,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC;SAClD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,OAAe;QAKzC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,gBAAgB,GAAG,CAAC,CAAC;QAEzB,uDAAuD;QACvD,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC7E,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5E,4EAA4E;YAC5E,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;gBACxB,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAC5C,gBAAgB,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,GAAG,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,gDAAgD;QAChD,MAAM,eAAe,GAAG,0BAA0B,CAAC;QACnD,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,UAAU,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACvC,gBAAgB,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACpF,IAAI,eAAe,GAAG,IAAI,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC9C,gBAAgB,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,wDAAwD;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC3D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,UAAU,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;YAC7C,gBAAgB,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,2CAA2C;QAC3C,MAAM,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7D,IAAI,kBAAkB,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YAC5C,gBAAgB,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,sDAAsD;QACtD,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,aAAa,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACxC,gBAAgB,IAAI,EAAE,CAAC;QACzB,CAAC;QAED,OAAO;YACL,KAAK,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC;YAC5B,UAAU;YACV,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC;SAClD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,CAAW,EAAE,CAAW;QAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;QAEpC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAEzE,IAAI,UAAU,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACnD,OAAO,UAAU,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,UAAsB;QAK5C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QAC1G,CAAC;QAED,MAAM,gBAAgB,GAAa,EAAE,CAAC;QAEtC,kCAAkC;QAClC,MAAM,YAAY,GAAe,EAAE,CAAC;QACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACZ,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzB,CAAC;qBAAM,CAAC;oBACN,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3E,CAAC;YACH,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;YAErF,uEAAuE;YACvE,IAAI,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBACpD,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;YAED,4EAA4E;YAC5E,IAAI,aAAa,GAAG,GAAG,EAAE,CAAC;gBACxB,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QAED,OAAO;YACL,SAAS,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC;YACtC,gBAAgB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAChD,MAAM,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC;gBACjC,CAAC,CAAC,GAAG,gBAAgB,CAAC,MAAM,uCAAuC;gBACnE,CAAC,CAAC,kCAAkC;SACvC,CAAC;IACJ,CAAC;CACF;AA30BD,4BA20BC"}
@@ -0,0 +1,35 @@
1
+ /**
2
+ * L5 Schema Validator
3
+ *
4
+ * Validates tool parameters against schemas.
5
+ * Detects injection attacks and type coercion.
6
+ */
7
+ import { ToolDefinition, SchemaValidatorResult } from "../types";
8
+ export interface SchemaValidatorConfig {
9
+ strictTypes?: boolean;
10
+ detectInjection?: boolean;
11
+ sanitizeStrings?: boolean;
12
+ }
13
+ export declare class SchemaValidator {
14
+ private strictTypes;
15
+ private detectInjection;
16
+ private sanitizeStrings;
17
+ constructor(config?: SchemaValidatorConfig);
18
+ /**
19
+ * Validate parameters against tool schema
20
+ */
21
+ validate(tool: ToolDefinition, params: Record<string, any>, requestId?: string): SchemaValidatorResult;
22
+ /**
23
+ * Validate a single parameter
24
+ */
25
+ private validateParameter;
26
+ private getStrictType;
27
+ private validateString;
28
+ private validateNumber;
29
+ private validateObject;
30
+ private checkPrototypePollution;
31
+ private detectInjectionPatterns;
32
+ private deepScanForInjection;
33
+ private sanitizeString;
34
+ }
35
+ //# sourceMappingURL=schema-validator.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schema-validator.d.ts","sourceRoot":"","sources":["../../src/guards/schema-validator.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAkB,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAwCjF,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,WAAW,CAAU;IAC7B,OAAO,CAAC,eAAe,CAAU;IACjC,OAAO,CAAC,eAAe,CAAU;gBAErB,MAAM,GAAE,qBAA0B;IAM9C;;OAEG;IACH,QAAQ,CACN,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC3B,SAAS,GAAE,MAAW,GACrB,qBAAqB;IAwFxB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAmDzB,OAAO,CAAC,aAAa;IAMrB,OAAO,CAAC,cAAc;IAqDtB,OAAO,CAAC,cAAc;IAiCtB,OAAO,CAAC,cAAc;IAyBtB,OAAO,CAAC,uBAAuB;IAoB/B,OAAO,CAAC,uBAAuB;IAe/B,OAAO,CAAC,oBAAoB;IA0B5B,OAAO,CAAC,cAAc;CAMvB"}
@@ -0,0 +1,316 @@
1
+ "use strict";
2
+ /**
3
+ * L5 Schema Validator
4
+ *
5
+ * Validates tool parameters against schemas.
6
+ * Detects injection attacks and type coercion.
7
+ */
8
+ Object.defineProperty(exports, "__esModule", { value: true });
9
+ exports.SchemaValidator = void 0;
10
+ // Injection patterns
11
+ const INJECTION_PATTERNS = {
12
+ SQL: [
13
+ /(\b(SELECT|INSERT|UPDATE|DELETE|DROP|UNION|ALTER|CREATE|TRUNCATE)\b)/i,
14
+ /('|"|;|--|\*|\/\*)/,
15
+ /(\bOR\b|\bAND\b)\s*\d+\s*=\s*\d+/i,
16
+ ],
17
+ NOSQL: [
18
+ /\$where|\$regex|\$ne|\$gt|\$lt|\$nin|\$or|\$and/i,
19
+ /\{\s*['"]\$[a-z]+['"]\s*:/i,
20
+ ],
21
+ PATH_TRAVERSAL: [
22
+ /\.\.\//,
23
+ /\.\.\\/,
24
+ /^\/etc\//i,
25
+ /^\/root\//i,
26
+ /%2e%2e%2f/i,
27
+ ],
28
+ COMMAND: [
29
+ /[;&|`$(){}[\]]/,
30
+ /\b(cat|ls|rm|wget|curl|nc|bash|sh|python)\b/i,
31
+ ],
32
+ XSS: [
33
+ /<script/i,
34
+ /javascript:/i,
35
+ /on\w+\s*=/i,
36
+ ],
37
+ };
38
+ // Dangerous object keys
39
+ const DANGEROUS_KEYS = new Set([
40
+ "__proto__",
41
+ "constructor",
42
+ "prototype",
43
+ "__defineGetter__",
44
+ "__defineSetter__",
45
+ ]);
46
+ class SchemaValidator {
47
+ constructor(config = {}) {
48
+ this.strictTypes = config.strictTypes ?? true;
49
+ this.detectInjection = config.detectInjection ?? true;
50
+ this.sanitizeStrings = config.sanitizeStrings ?? true;
51
+ }
52
+ /**
53
+ * Validate parameters against tool schema
54
+ */
55
+ validate(tool, params, requestId = "") {
56
+ const errors = [];
57
+ const warnings = [];
58
+ const blocked_attacks = [];
59
+ const sanitizedParams = {};
60
+ // Check for prototype pollution at top level
61
+ const pollutionCheck = this.checkPrototypePollution(params);
62
+ if (!pollutionCheck.safe) {
63
+ if (requestId) {
64
+ console.log(`[L5:${requestId}] BLOCKED: Prototype pollution`);
65
+ }
66
+ return {
67
+ allowed: false,
68
+ reason: "Prototype pollution detected",
69
+ violations: ["PROTOTYPE_POLLUTION"],
70
+ errors: pollutionCheck.errors,
71
+ warnings: [],
72
+ sanitizedParams: {},
73
+ blocked_attacks: ["PROTOTYPE_POLLUTION"],
74
+ };
75
+ }
76
+ const schema = tool.parameters;
77
+ // Check required fields
78
+ for (const field of schema.required || []) {
79
+ if (params[field] === undefined || params[field] === null) {
80
+ errors.push(`Missing required field: ${field}`);
81
+ }
82
+ }
83
+ if (errors.length > 0) {
84
+ return {
85
+ allowed: false,
86
+ reason: "Missing required fields",
87
+ violations: ["MISSING_REQUIRED"],
88
+ errors,
89
+ warnings,
90
+ sanitizedParams: {},
91
+ blocked_attacks,
92
+ };
93
+ }
94
+ // Validate each parameter
95
+ for (const [paramName, paramSchema] of Object.entries(schema.properties)) {
96
+ const value = params[paramName];
97
+ if (value === undefined)
98
+ continue;
99
+ const result = this.validateParameter(paramName, value, paramSchema, requestId);
100
+ if (!result.valid) {
101
+ errors.push(...result.errors);
102
+ blocked_attacks.push(...result.blocked);
103
+ }
104
+ else {
105
+ sanitizedParams[paramName] = result.sanitizedValue;
106
+ }
107
+ warnings.push(...result.warnings);
108
+ }
109
+ const allowed = errors.length === 0;
110
+ if (requestId) {
111
+ if (allowed) {
112
+ console.log(`[L5:${requestId}] Validation PASSED`);
113
+ }
114
+ else {
115
+ console.log(`[L5:${requestId}] Validation FAILED: ${errors.join(", ")}`);
116
+ }
117
+ }
118
+ return {
119
+ allowed,
120
+ reason: allowed ? undefined : errors[0],
121
+ violations: allowed ? [] : ["VALIDATION_FAILED"],
122
+ errors,
123
+ warnings,
124
+ sanitizedParams,
125
+ blocked_attacks,
126
+ };
127
+ }
128
+ /**
129
+ * Validate a single parameter
130
+ */
131
+ validateParameter(name, value, schema, requestId) {
132
+ const errors = [];
133
+ const warnings = [];
134
+ const blocked = [];
135
+ let sanitizedValue = value;
136
+ // Strict type checking
137
+ const actualType = this.getStrictType(value);
138
+ if (this.strictTypes && actualType !== schema.type) {
139
+ errors.push(`Type mismatch for '${name}': expected ${schema.type}, got ${actualType}`);
140
+ blocked.push("TYPE_COERCION");
141
+ return { valid: false, errors, warnings, sanitizedValue, blocked };
142
+ }
143
+ // Type-specific validation
144
+ switch (schema.type) {
145
+ case "string":
146
+ const strResult = this.validateString(name, value, schema, requestId);
147
+ errors.push(...strResult.errors);
148
+ warnings.push(...strResult.warnings);
149
+ blocked.push(...strResult.blocked);
150
+ if (strResult.valid)
151
+ sanitizedValue = strResult.sanitizedValue;
152
+ break;
153
+ case "number":
154
+ const numResult = this.validateNumber(name, value, schema);
155
+ errors.push(...numResult.errors);
156
+ blocked.push(...numResult.blocked);
157
+ break;
158
+ case "object":
159
+ const objResult = this.validateObject(name, value, schema, requestId);
160
+ errors.push(...objResult.errors);
161
+ blocked.push(...objResult.blocked);
162
+ break;
163
+ }
164
+ return {
165
+ valid: errors.length === 0,
166
+ errors,
167
+ warnings,
168
+ sanitizedValue,
169
+ blocked,
170
+ };
171
+ }
172
+ getStrictType(value) {
173
+ if (value === null)
174
+ return "null";
175
+ if (Array.isArray(value))
176
+ return "array";
177
+ return typeof value;
178
+ }
179
+ validateString(name, value, schema, requestId) {
180
+ const errors = [];
181
+ const warnings = [];
182
+ const blocked = [];
183
+ let sanitizedValue = value;
184
+ // Length checks
185
+ if (schema.minLength && value.length < schema.minLength) {
186
+ errors.push(`'${name}' is too short (min: ${schema.minLength})`);
187
+ }
188
+ if (schema.maxLength && value.length > schema.maxLength) {
189
+ errors.push(`'${name}' is too long (max: ${schema.maxLength})`);
190
+ }
191
+ // Enum check
192
+ if (schema.enum && !schema.enum.includes(value)) {
193
+ errors.push(`'${name}' must be one of: ${schema.enum.join(", ")}`);
194
+ }
195
+ // Pattern check
196
+ if (schema.pattern) {
197
+ const regex = new RegExp(schema.pattern);
198
+ if (!regex.test(value)) {
199
+ errors.push(`'${name}' does not match required format`);
200
+ blocked.push("FORMAT_VIOLATION");
201
+ }
202
+ }
203
+ // Injection detection
204
+ if (this.detectInjection) {
205
+ const injectionCheck = this.detectInjectionPatterns(value);
206
+ if (injectionCheck.detected) {
207
+ errors.push(`Injection detected in '${name}': ${injectionCheck.types.join(", ")}`);
208
+ blocked.push(...injectionCheck.types.map((t) => `${t}_INJECTION`));
209
+ if (requestId) {
210
+ console.log(`[L5:${requestId}] BLOCKED: Injection in '${name}'`);
211
+ }
212
+ }
213
+ }
214
+ // Sanitize
215
+ if (this.sanitizeStrings && errors.length === 0) {
216
+ sanitizedValue = this.sanitizeString(value);
217
+ }
218
+ return { valid: errors.length === 0, errors, warnings, sanitizedValue, blocked };
219
+ }
220
+ validateNumber(name, value, schema) {
221
+ const errors = [];
222
+ const blocked = [];
223
+ if (!Number.isFinite(value)) {
224
+ errors.push(`'${name}' must be a finite number`);
225
+ blocked.push("INVALID_NUMBER");
226
+ return { valid: false, errors, blocked };
227
+ }
228
+ if (Math.abs(value) > Number.MAX_SAFE_INTEGER) {
229
+ errors.push(`'${name}' exceeds safe integer bounds`);
230
+ blocked.push("INTEGER_OVERFLOW");
231
+ return { valid: false, errors, blocked };
232
+ }
233
+ if (schema.min !== undefined && value < schema.min) {
234
+ errors.push(`'${name}' must be at least ${schema.min}`);
235
+ if (value < 0)
236
+ blocked.push("NEGATIVE_VALUE");
237
+ }
238
+ if (schema.max !== undefined && value > schema.max) {
239
+ errors.push(`'${name}' must be at most ${schema.max}`);
240
+ blocked.push("BOUNDARY_VIOLATION");
241
+ }
242
+ return { valid: errors.length === 0, errors, blocked };
243
+ }
244
+ validateObject(name, value, schema, requestId) {
245
+ const errors = [];
246
+ const blocked = [];
247
+ // Prototype pollution check
248
+ const pollutionCheck = this.checkPrototypePollution(value);
249
+ if (!pollutionCheck.safe) {
250
+ errors.push(...pollutionCheck.errors);
251
+ blocked.push("PROTOTYPE_POLLUTION");
252
+ return { valid: false, errors, blocked };
253
+ }
254
+ // Deep scan for injection
255
+ if (this.detectInjection) {
256
+ this.deepScanForInjection(name, value, errors, blocked, requestId);
257
+ }
258
+ return { valid: errors.length === 0, errors, blocked };
259
+ }
260
+ checkPrototypePollution(obj) {
261
+ const errors = [];
262
+ const check = (o, path) => {
263
+ if (typeof o !== "object" || o === null)
264
+ return;
265
+ for (const key of Object.keys(o)) {
266
+ if (DANGEROUS_KEYS.has(key)) {
267
+ errors.push(`Dangerous key '${key}' at ${path || "root"}`);
268
+ }
269
+ if (typeof o[key] === "object" && o[key] !== null) {
270
+ check(o[key], path ? `${path}.${key}` : key);
271
+ }
272
+ }
273
+ };
274
+ check(obj, "");
275
+ return { safe: errors.length === 0, errors };
276
+ }
277
+ detectInjectionPatterns(value) {
278
+ const types = [];
279
+ for (const [injectionType, patterns] of Object.entries(INJECTION_PATTERNS)) {
280
+ for (const pattern of patterns) {
281
+ if (pattern.test(value)) {
282
+ types.push(injectionType);
283
+ break;
284
+ }
285
+ }
286
+ }
287
+ return { detected: types.length > 0, types };
288
+ }
289
+ deepScanForInjection(name, obj, errors, blocked, requestId) {
290
+ const scan = (o, path) => {
291
+ if (typeof o === "string") {
292
+ const check = this.detectInjectionPatterns(o);
293
+ if (check.detected) {
294
+ errors.push(`Injection in '${path}': ${check.types.join(", ")}`);
295
+ blocked.push(...check.types.map((t) => `${t}_INJECTION`));
296
+ }
297
+ }
298
+ else if (typeof o === "object" && o !== null) {
299
+ for (const [key, value] of Object.entries(o)) {
300
+ scan(value, `${path}.${key}`);
301
+ }
302
+ }
303
+ };
304
+ for (const [key, value] of Object.entries(obj)) {
305
+ scan(value, `${name}.${key}`);
306
+ }
307
+ }
308
+ sanitizeString(value) {
309
+ return value
310
+ .replace(/[<>]/g, "")
311
+ .replace(/['";]/g, "")
312
+ .trim();
313
+ }
314
+ }
315
+ exports.SchemaValidator = SchemaValidator;
316
+ //# sourceMappingURL=schema-validator.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"schema-validator.js","sourceRoot":"","sources":["../../src/guards/schema-validator.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAIH,qBAAqB;AACrB,MAAM,kBAAkB,GAA6B;IACnD,GAAG,EAAE;QACH,uEAAuE;QACvE,oBAAoB;QACpB,mCAAmC;KACpC;IACD,KAAK,EAAE;QACL,kDAAkD;QAClD,4BAA4B;KAC7B;IACD,cAAc,EAAE;QACd,QAAQ;QACR,QAAQ;QACR,WAAW;QACX,YAAY;QACZ,YAAY;KACb;IACD,OAAO,EAAE;QACP,gBAAgB;QAChB,8CAA8C;KAC/C;IACD,GAAG,EAAE;QACH,UAAU;QACV,cAAc;QACd,YAAY;KACb;CACF,CAAC;AAEF,wBAAwB;AACxB,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,aAAa;IACb,WAAW;IACX,kBAAkB;IAClB,kBAAkB;CACnB,CAAC,CAAC;AAQH,MAAa,eAAe;IAK1B,YAAY,SAAgC,EAAE;QAC5C,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;QACtD,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,IAAI,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,IAAoB,EACpB,MAA2B,EAC3B,YAAoB,EAAE;QAEtB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,MAAM,eAAe,GAAwB,EAAE,CAAC;QAEhD,6CAA6C;QAC7C,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,gCAAgC,CAAC,CAAC;YAChE,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,8BAA8B;gBACtC,UAAU,EAAE,CAAC,qBAAqB,CAAC;gBACnC,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,QAAQ,EAAE,EAAE;gBACZ,eAAe,EAAE,EAAE;gBACnB,eAAe,EAAE,CAAC,qBAAqB,CAAC;aACzC,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAE/B,wBAAwB;QACxB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,yBAAyB;gBACjC,UAAU,EAAE,CAAC,kBAAkB,CAAC;gBAChC,MAAM;gBACN,QAAQ;gBACR,eAAe,EAAE,EAAE;gBACnB,eAAe;aAChB,CAAC;QACJ,CAAC;QAED,0BAA0B;QAC1B,KAAK,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAEhC,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAElC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CACnC,SAAS,EACT,KAAK,EACL,WAAW,EACX,SAAS,CACV,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9B,eAAe,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC;YACrD,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;QAEpC,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,qBAAqB,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,wBAAwB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YACvC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;YAChD,MAAM;YACN,QAAQ;YACR,eAAe;YACf,eAAe;SAChB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,IAAY,EACZ,KAAU,EACV,MAAsB,EACtB,SAAiB;QAEjB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,cAAc,GAAG,KAAK,CAAC;QAE3B,uBAAuB;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,WAAW,IAAI,UAAU,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,sBAAsB,IAAI,eAAe,MAAM,CAAC,IAAI,SAAS,UAAU,EAAE,CAAC,CAAC;YACvF,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;QACrE,CAAC;QAED,2BAA2B;QAC3B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;YACpB,KAAK,QAAQ;gBACX,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBACjC,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnC,IAAI,SAAS,CAAC,KAAK;oBAAE,cAAc,GAAG,SAAS,CAAC,cAAc,CAAC;gBAC/D,MAAM;YAER,KAAK,QAAQ;gBACX,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnC,MAAM;YAER,KAAK,QAAQ;gBACX,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;gBACjC,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnC,MAAM;QACV,CAAC;QAED,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YAC1B,MAAM;YACN,QAAQ;YACR,cAAc;YACd,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,KAAU;QAC9B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;QACzC,OAAO,OAAO,KAAK,CAAC;IACtB,CAAC;IAEO,cAAc,CACpB,IAAY,EACZ,KAAa,EACb,MAAsB,EACtB,SAAiB;QAEjB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,cAAc,GAAG,KAAK,CAAC;QAE3B,gBAAgB;QAChB,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,wBAAwB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,uBAAuB,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC;QAClE,CAAC;QAED,aAAa;QACb,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,qBAAqB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,gBAAgB;QAChB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,kCAAkC,CAAC,CAAC;gBACxD,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAC3D,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,0BAA0B,IAAI,MAAM,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACnF,OAAO,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;gBACnE,IAAI,SAAS,EAAE,CAAC;oBACd,OAAO,CAAC,GAAG,CAAC,OAAO,SAAS,4BAA4B,IAAI,GAAG,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QAED,WAAW;QACX,IAAI,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IACnF,CAAC;IAEO,cAAc,CACpB,IAAY,EACZ,KAAa,EACb,MAAsB;QAEtB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,2BAA2B,CAAC,CAAC;YACjD,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,+BAA+B,CAAC,CAAC;YACrD,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC3C,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,sBAAsB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACxD,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,qBAAqB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACrC,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;IAEO,cAAc,CACpB,IAAY,EACZ,KAA0B,EAC1B,MAAsB,EACtB,SAAiB;QAEjB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;QAE7B,4BAA4B;QAC5B,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC3C,CAAC;QAED,0BAA0B;QAC1B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACzD,CAAC;IAEO,uBAAuB,CAAC,GAAwB;QACtD,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,MAAM,KAAK,GAAG,CAAC,CAAM,EAAE,IAAY,EAAQ,EAAE;YAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO;YAEhD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5B,MAAM,CAAC,IAAI,CAAC,kBAAkB,GAAG,QAAQ,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC;gBAC7D,CAAC;gBACD,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;oBAClD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC/C,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACf,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;IAEO,uBAAuB,CAAC,KAAa;QAC3C,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC3E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;oBACxB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;oBAC1B,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;IAC/C,CAAC;IAEO,oBAAoB,CAC1B,IAAY,EACZ,GAAwB,EACxB,MAAgB,EAChB,OAAiB,EACjB,SAAiB;QAEjB,MAAM,IAAI,GAAG,CAAC,CAAM,EAAE,IAAY,EAAQ,EAAE;YAC1C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC;gBAC9C,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC,iBAAiB,IAAI,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACjE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7C,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,KAAa;QAClC,OAAO,KAAK;aACT,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;aACpB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;aACrB,IAAI,EAAE,CAAC;IACZ,CAAC;CACF;AAxVD,0CAwVC"}
@@ -0,0 +1,153 @@
1
+ /**
2
+ * StatePersistenceGuard (L22)
3
+ *
4
+ * Detects and prevents unauthorized state persistence and corruption.
5
+ * Implements ASI08 from OWASP Agentic Applications 2026.
6
+ *
7
+ * Threat Model:
8
+ * - ASI08: State Corruption
9
+ * - Unauthorized state persistence
10
+ * - Cross-session state leakage
11
+ * - Malicious state injection
12
+ * - State tampering and replay attacks
13
+ *
14
+ * Protection Capabilities:
15
+ * - State integrity verification
16
+ * - Persistence authorization
17
+ * - Cross-session isolation
18
+ * - State encryption validation
19
+ * - Tampering detection
20
+ */
21
+ export interface StatePersistenceGuardConfig {
22
+ /** Enable state integrity checking */
23
+ enableIntegrityCheck?: boolean;
24
+ /** Enable encryption validation */
25
+ requireEncryption?: boolean;
26
+ /** Maximum state size in bytes */
27
+ maxStateSize?: number;
28
+ /** Maximum state age in milliseconds */
29
+ maxStateAge?: number;
30
+ /** Enable cross-session isolation */
31
+ enforceSessionIsolation?: boolean;
32
+ /** Allowed persistence targets */
33
+ allowedTargets?: string[];
34
+ /** Sensitive state keys that require extra protection */
35
+ sensitiveKeys?: string[];
36
+ /** Enable state tampering detection */
37
+ detectTampering?: boolean;
38
+ /** State signing secret (for integrity) */
39
+ signingSecret?: string;
40
+ }
41
+ export interface StateItem {
42
+ /** Unique state identifier */
43
+ state_id: string;
44
+ /** Session that owns this state */
45
+ session_id: string;
46
+ /** State key/name */
47
+ key: string;
48
+ /** State value */
49
+ value: any;
50
+ /** Creation timestamp */
51
+ created_at: number;
52
+ /** Last modified timestamp */
53
+ modified_at: number;
54
+ /** State version */
55
+ version: number;
56
+ /** Integrity hash */
57
+ integrity_hash?: string;
58
+ /** Is state encrypted */
59
+ encrypted?: boolean;
60
+ /** Persistence target */
61
+ target?: string;
62
+ /** State metadata */
63
+ metadata?: Record<string, any>;
64
+ }
65
+ export interface StateOperation {
66
+ /** Operation type */
67
+ operation: "read" | "write" | "delete" | "restore" | "migrate";
68
+ /** State key */
69
+ key: string;
70
+ /** State value (for write operations) */
71
+ value?: any;
72
+ /** Session requesting the operation */
73
+ session_id: string;
74
+ /** Target session (for cross-session operations) */
75
+ target_session_id?: string;
76
+ /** Persistence target */
77
+ target?: string;
78
+ /** Provided integrity hash */
79
+ integrity_hash?: string;
80
+ /** State version (for optimistic locking) */
81
+ expected_version?: number;
82
+ /** Additional metadata */
83
+ metadata?: Record<string, any>;
84
+ }
85
+ export interface StatePersistenceResult {
86
+ allowed: boolean;
87
+ reason: string;
88
+ violations: string[];
89
+ request_id: string;
90
+ analysis: {
91
+ operation: string;
92
+ state_key: string;
93
+ integrity_valid: boolean;
94
+ encryption_valid: boolean;
95
+ session_authorized: boolean;
96
+ size_valid: boolean;
97
+ age_valid: boolean;
98
+ tampering_detected: boolean;
99
+ };
100
+ state_item?: StateItem;
101
+ recommendations: string[];
102
+ }
103
+ export declare class StatePersistenceGuard {
104
+ private config;
105
+ private stateStore;
106
+ private sessionStates;
107
+ private readonly INJECTION_PATTERNS;
108
+ private readonly DEFAULT_SENSITIVE_KEYS;
109
+ constructor(config?: StatePersistenceGuardConfig);
110
+ /**
111
+ * Validate a state operation
112
+ */
113
+ validateOperation(operation: StateOperation, requestId?: string): StatePersistenceResult;
114
+ /**
115
+ * Store state with integrity protection
116
+ */
117
+ storeState(sessionId: string, key: string, value: any, options?: {
118
+ target?: string;
119
+ encrypted?: boolean;
120
+ metadata?: Record<string, any>;
121
+ }): StatePersistenceResult;
122
+ /**
123
+ * Retrieve state with integrity verification
124
+ */
125
+ retrieveState(sessionId: string, key: string, options?: {
126
+ integrity_hash?: string;
127
+ }): StatePersistenceResult;
128
+ /**
129
+ * Delete state
130
+ */
131
+ deleteState(sessionId: string, key: string): StatePersistenceResult;
132
+ /**
133
+ * Verify state integrity
134
+ */
135
+ verifyIntegrity(sessionId: string, key: string): boolean;
136
+ /**
137
+ * Get all states for a session
138
+ */
139
+ getSessionStates(sessionId: string): StateItem[];
140
+ /**
141
+ * Clean up expired states
142
+ */
143
+ cleanupExpiredStates(): number;
144
+ /**
145
+ * Reset all states for a session
146
+ */
147
+ resetSession(sessionId: string): void;
148
+ private getStateKey;
149
+ private computeIntegrityHash;
150
+ private isSensitiveKey;
151
+ private generateRecommendations;
152
+ }
153
+ //# sourceMappingURL=state-persistence-guard.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"state-persistence-guard.d.ts","sourceRoot":"","sources":["../../src/guards/state-persistence-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,MAAM,WAAW,2BAA2B;IAC1C,sCAAsC;IACtC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,mCAAmC;IACnC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,kCAAkC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,kCAAkC;IAClC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,uCAAuC;IACvC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,qBAAqB;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB;IAClB,KAAK,EAAE,GAAG,CAAC;IACX,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,qBAAqB;IACrB,SAAS,EAAE,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IAC/D,gBAAgB;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ,uCAAuC;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,oDAAoD;IACpD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,0BAA0B;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE;QACR,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,OAAO,CAAC;QACzB,gBAAgB,EAAE,OAAO,CAAC;QAC1B,kBAAkB,EAAE,OAAO,CAAC;QAC5B,UAAU,EAAE,OAAO,CAAC;QACpB,SAAS,EAAE,OAAO,CAAC;QACnB,kBAAkB,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAwC;IACtD,OAAO,CAAC,UAAU,CAAqC;IACvD,OAAO,CAAC,aAAa,CAAuC;IAG5D,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAuBjC;IAGF,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAWrC;gBAEU,MAAM,GAAE,2BAAgC;IAcpD;;OAEG;IACH,iBAAiB,CACf,SAAS,EAAE,cAAc,EACzB,SAAS,CAAC,EAAE,MAAM,GACjB,sBAAsB;IA4IzB;;OAEG;IACH,UAAU,CACR,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,GAAG,EACV,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KAChC,GACA,sBAAsB;IAuDzB;;OAEG;IACH,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;QACR,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GACA,sBAAsB;IAwBzB;;OAEG;IACH,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,sBAAsB;IA2EnE;;OAEG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAYxD;;OAEG;IACH,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE;IAehD;;OAEG;IACH,oBAAoB,IAAI,MAAM;IAkB9B;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAYrC,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,oBAAoB;IAc5B,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,uBAAuB;CA+BhC"}