llm-trust-guard 4.0.0

package/dist/guards/tool-chain-validator.js

@@ -0,0 +1,480 @@
+"use strict";
+/**
+ * ToolChainValidator v2
+ *
+ * Detects and prevents dangerous tool chaining attacks by:
+ * - Validating tool call sequences
+ * - Blocking dangerous tool combinations
+ * - Enforcing cooldown periods between sensitive operations
+ * - Tracking tool usage patterns for anomaly detection
+ *
+ * v2 Enhancements (2026):
+ * - ASI07: Agent State Corruption detection
+ * - ASI04: Agent Autonomy Escalation detection
+ * - Loop/repetition attack detection
+ * - Resource accumulation monitoring
+ * - Time-based anomaly detection
+ * - Cumulative impact scoring
+ * - Cross-tool data flow tracking
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ToolChainValidator = void 0;
+class ToolChainValidator {
+    constructor(config = {}) {
+        this.sessions = new Map();
+        this.defaultForbiddenSequences = [
+            {
+                name: "read_then_delete",
+                sequence: ["read_file", "delete_file"],
+                reason: "Reading then deleting files may indicate data exfiltration",
+                severity: "block",
+            },
+            {
+                name: "list_then_bulk_delete",
+                sequence: ["list_users", "delete_user"],
+                reason: "Listing then deleting users may indicate account takeover",
+                severity: "block",
+            },
+            {
+                name: "get_credentials_then_external",
+                sequence: ["get_api_key", "http_request"],
+                reason: "Accessing credentials then making external requests is suspicious",
+                severity: "block",
+            },
+            {
+                name: "modify_config_then_execute",
+                sequence: ["update_config", "execute_command"],
+                reason: "Modifying config then executing commands may indicate system compromise",
+                severity: "block",
+            },
+            {
+                name: "disable_security_then_action",
+                sequence: ["disable_audit", "delete_records"],
+                reason: "Disabling audit then deleting records indicates malicious activity",
+                severity: "block",
+            },
+            {
+                name: "escalate_then_sensitive",
+                sequence: ["modify_user_role", "access_admin_panel"],
+                reason: "Role escalation followed by admin access is suspicious",
+                severity: "block",
+            },
+        ];
+        this.defaultSensitiveTools = [
+            "delete",
+            "remove",
+            "drop",
+            "truncate",
+            "execute",
+            "run",
+            "admin",
+            "system",
+            "config",
+            "modify_role",
+            "grant",
+            "revoke",
+            "transfer_funds",
+            "bulk_",
+            "export",
+        ];
+        // v2: Tools that modify agent/system state
+        this.defaultStateModifyingTools = [
+            "set_config",
+            "update_settings",
+            "modify_state",
+            "change_mode",
+            "set_variable",
+            "store_memory",
+            "update_context",
+            "modify_prompt",
+            "change_behavior",
+            "set_preference",
+            "alter_state",
+            "write_memory",
+            "persist_data",
+        ];
+        // v2: Tools that expand agent autonomy
+        this.defaultAutonomyExpandingTools = [
+            "grant_permission",
+            "enable_capability",
+            "unlock_feature",
+            "expand_scope",
+            "add_tool",
+            "register_handler",
+            "create_webhook",
+            "schedule_task",
+            "spawn_agent",
+            "create_subprocess",
+            "enable_auto",
+            "set_autonomous",
+            "bypass_approval",
+            "disable_confirmation",
+            "skip_verification",
+        ];
+        // v2: Tools that acquire resources
+        this.defaultResourceAcquiringTools = [
+            "get_credentials",
+            "fetch_api_key",
+            "acquire_token",
+            "download_file",
+            "copy_data",
+            "clone_repo",
+            "export_data",
+            "backup_database",
+            "snapshot",
+            "read_secrets",
+            "access_vault",
+            "get_certificate",
+        ];
+        // v2: Impact scores for tools
+        this.defaultToolImpactScores = {
+            "delete": 20,
+            "remove": 15,
+            "execute": 25,
+            "admin": 30,
+            "system": 25,
+            "config": 15,
+            "grant": 20,
+            "transfer": 30,
+            "export": 15,
+            "credential": 25,
+            "secret": 25,
+            "password": 30,
+            "spawn": 30,
+            "subprocess": 25,
+            "bypass": 35,
+        };
+        this.config = {
+            forbiddenSequences: config.forbiddenSequences ?? this.defaultForbiddenSequences,
+            requiredPreconditions: config.requiredPreconditions ?? [],
+            toolCooldowns: config.toolCooldowns ?? {},
+            maxToolsPerRequest: config.maxToolsPerRequest ?? 10,
+            maxSensitiveToolsPerSession: config.maxSensitiveToolsPerSession ?? 5,
+            sensitiveTools: config.sensitiveTools ?? this.defaultSensitiveTools,
+            sessionTTLMinutes: config.sessionTTLMinutes ?? 30,
+            // v2 defaults
+            enableStateTracking: config.enableStateTracking ?? true,
+            stateModifyingTools: config.stateModifyingTools ?? this.defaultStateModifyingTools,
+            enableAutonomyDetection: config.enableAutonomyDetection ?? true,
+            autonomyExpandingTools: config.autonomyExpandingTools ?? this.defaultAutonomyExpandingTools,
+            enableLoopDetection: config.enableLoopDetection ?? true,
+            maxRepetitionsPerMinute: config.maxRepetitionsPerMinute ?? 5,
+            enableResourceTracking: config.enableResourceTracking ?? true,
+            resourceAcquiringTools: config.resourceAcquiringTools ?? this.defaultResourceAcquiringTools,
+            maxResourcesPerSession: config.maxResourcesPerSession ?? 10,
+            enableTimeAnomalyDetection: config.enableTimeAnomalyDetection ?? true,
+            minTimeBetweenToolsMs: config.minTimeBetweenToolsMs ?? 50,
+            enableImpactScoring: config.enableImpactScoring ?? true,
+            maxCumulativeImpact: config.maxCumulativeImpact ?? 100,
+            toolImpactScores: config.toolImpactScores ?? this.defaultToolImpactScores,
+        };
+        // Cleanup expired sessions periodically
+        setInterval(() => this.cleanupSessions(), 60000);
+    }
+    /**
+     * Validate a tool call in context of the session
+     */
+    validate(sessionId, toolName, allToolsInRequest, requestId = "") {
+        const violations = [];
+        const warnings = [];
+        const forbiddenSequencesDetected = [];
+        const preconditionViolations = [];
+        const cooldownViolations = [];
+        // v2 tracking
+        let stateCorruptionDetected = false;
+        let autonomyEscalationDetected = false;
+        let loopDetected = false;
+        let timeAnomalyDetected = false;
+        // Get or create session
+        const session = this.getOrCreateSession(sessionId);
+        const now = Date.now();
+        // Get recent tool history
+        const recentTools = session.tool_history
+            .filter((t) => now - t.timestamp < this.config.sessionTTLMinutes * 60000)
+            .map((t) => t.tool);
+        // Check max tools per request
+        if (allToolsInRequest && allToolsInRequest.length > this.config.maxToolsPerRequest) {
+            violations.push("MAX_TOOLS_PER_REQUEST_EXCEEDED");
+        }
+        // Check forbidden sequences
+        for (const forbidden of this.config.forbiddenSequences) {
+            if (this.matchesSequence(recentTools, toolName, forbidden.sequence)) {
+                forbiddenSequencesDetected.push(forbidden.name);
+                if (forbidden.severity === "block") {
+                    violations.push(`FORBIDDEN_SEQUENCE_${forbidden.name.toUpperCase()}`);
+                }
+                else {
+                    warnings.push(`Suspicious sequence detected: ${forbidden.name}`);
+                }
+            }
+        }
+        // Check preconditions
+        for (const precondition of this.config.requiredPreconditions) {
+            if (toolName === precondition.tool) {
+                const turnsToCheck = precondition.within_turns ?? 10;
+                const recentHistory = session.tool_history.slice(-turnsToCheck);
+                const hasRequired = precondition.requires.every((req) => recentHistory.some((h) => h.tool === req));
+                if (!hasRequired) {
+                    preconditionViolations.push(`${toolName} requires: ${precondition.requires.join(", ")}`);
+                    violations.push(`PRECONDITION_VIOLATED_${toolName.toUpperCase()}`);
+                }
+            }
+        }
+        // Check cooldowns
+        const cooldown = this.config.toolCooldowns?.[toolName];
+        if (cooldown) {
+            const lastUsage = session.tool_history
+                .filter((t) => t.tool === toolName)
+                .sort((a, b) => b.timestamp - a.timestamp)[0];
+            if (lastUsage && now - lastUsage.timestamp < cooldown) {
+                const remainingMs = cooldown - (now - lastUsage.timestamp);
+                cooldownViolations.push(`${toolName} on cooldown for ${Math.ceil(remainingMs / 1000)}s`);
+                violations.push(`COOLDOWN_VIOLATION_${toolName.toUpperCase()}`);
+            }
+        }
+        // Check sensitive tool limits
+        const isSensitive = this.config.sensitiveTools.some((s) => toolName.toLowerCase().includes(s.toLowerCase()));
+        if (isSensitive) {
+            if (session.sensitive_tool_count >= this.config.maxSensitiveToolsPerSession) {
+                violations.push("MAX_SENSITIVE_TOOLS_EXCEEDED");
+            }
+        }
+        // ===== v2 CHECKS =====
+        // v2: State corruption detection (ASI07)
+        if (this.config.enableStateTracking) {
+            const modifiesState = this.config.stateModifyingTools.some((s) => toolName.toLowerCase().includes(s.toLowerCase()));
+            if (modifiesState) {
+                session.state_modifications++;
+                // Check for rapid state modifications (potential corruption)
+                const recentStateModifications = session.tool_history.filter((t) => t.modifies_state && now - t.timestamp < 60000).length;
+                if (recentStateModifications >= 3) {
+                    stateCorruptionDetected = true;
+                    violations.push("STATE_CORRUPTION_PATTERN");
+                    warnings.push("Multiple rapid state modifications detected - potential state corruption attack");
+                }
+            }
+        }
+        // v2: Autonomy escalation detection (ASI04)
+        if (this.config.enableAutonomyDetection) {
+            const expandsAutonomy = this.config.autonomyExpandingTools.some((s) => toolName.toLowerCase().includes(s.toLowerCase()));
+            if (expandsAutonomy) {
+                session.autonomy_expansions++;
+                if (session.autonomy_expansions >= 2) {
+                    autonomyEscalationDetected = true;
+                    violations.push("AUTONOMY_ESCALATION_DETECTED");
+                    warnings.push("Agent attempting to expand its own autonomy");
+                }
+            }
+        }
+        // v2: Loop/repetition detection
+        if (this.config.enableLoopDetection) {
+            // Track this tool's repetitions
+            if (!session.tool_repetitions.has(toolName)) {
+                session.tool_repetitions.set(toolName, []);
+            }
+            const repetitions = session.tool_repetitions.get(toolName);
+            repetitions.push(now);
+            // Clean up old timestamps
+            const oneMinuteAgo = now - 60000;
+            const recentReps = repetitions.filter((t) => t > oneMinuteAgo);
+            session.tool_repetitions.set(toolName, recentReps);
+            if (recentReps.length > this.config.maxRepetitionsPerMinute) {
+                loopDetected = true;
+                violations.push("LOOP_ATTACK_DETECTED");
+                warnings.push(`Tool "${toolName}" called ${recentReps.length} times in the last minute`);
+            }
+        }
+        // v2: Resource accumulation detection
+        if (this.config.enableResourceTracking) {
+            const acquiresResource = this.config.resourceAcquiringTools.some((s) => toolName.toLowerCase().includes(s.toLowerCase()));
+            if (acquiresResource) {
+                session.resources_acquired++;
+                if (session.resources_acquired > this.config.maxResourcesPerSession) {
+                    violations.push("RESOURCE_ACCUMULATION_EXCEEDED");
+                    warnings.push("Agent has acquired too many resources in this session");
+                }
+            }
+        }
+        // v2: Time anomaly detection (unusually rapid tool calls)
+        if (this.config.enableTimeAnomalyDetection) {
+            const lastTool = session.tool_history[session.tool_history.length - 1];
+            if (lastTool && now - lastTool.timestamp < this.config.minTimeBetweenToolsMs) {
+                timeAnomalyDetected = true;
+                violations.push("TIME_ANOMALY_DETECTED");
+                warnings.push("Tool calls too rapid - possible automated attack");
+            }
+        }
+        // v2: Impact scoring
+        let toolImpact = 0;
+        if (this.config.enableImpactScoring) {
+            // Calculate impact for this tool
+            for (const [keyword, score] of Object.entries(this.config.toolImpactScores)) {
+                if (toolName.toLowerCase().includes(keyword.toLowerCase())) {
+                    toolImpact = Math.max(toolImpact, score);
+                }
+            }
+            const newCumulativeImpact = session.cumulative_impact + toolImpact;
+            if (newCumulativeImpact > this.config.maxCumulativeImpact) {
+                violations.push("MAX_CUMULATIVE_IMPACT_EXCEEDED");
+                warnings.push(`Cumulative impact ${newCumulativeImpact} exceeds threshold ${this.config.maxCumulativeImpact}`);
+            }
+        }
+        // ===== END v2 CHECKS =====
+        const allowed = violations.length === 0;
+        // Record tool usage if allowed
+        if (allowed) {
+            const modifiesState = this.config.stateModifyingTools?.some((s) => toolName.toLowerCase().includes(s.toLowerCase())) ?? false;
+            const expandsAutonomy = this.config.autonomyExpandingTools?.some((s) => toolName.toLowerCase().includes(s.toLowerCase())) ?? false;
+            const acquiresResource = this.config.resourceAcquiringTools?.some((s) => toolName.toLowerCase().includes(s.toLowerCase())) ?? false;
+            session.tool_history.push({
+                tool: toolName,
+                timestamp: now,
+                modifies_state: modifiesState,
+                expands_autonomy: expandsAutonomy,
+                acquires_resource: acquiresResource,
+                impact_score: toolImpact,
+            });
+            if (isSensitive) {
+                session.sensitive_tool_count++;
+            }
+            session.cumulative_impact += toolImpact;
+            session.last_activity = now;
+        }
+        if (!allowed) {
+            console.log(`[ToolChainValidator:${requestId}] BLOCKED: ${violations.join(", ")}`);
+        }
+        return {
+            allowed,
+            reason: allowed ? undefined : `Tool chain validation failed: ${violations.join(", ")}`,
+            violations,
+            chain_analysis: {
+                current_tool: toolName,
+                previous_tools: recentTools.slice(-10),
+                forbidden_sequences_detected: forbiddenSequencesDetected,
+                precondition_violations: preconditionViolations,
+                cooldown_violations: cooldownViolations,
+                // v2 additions
+                state_corruption_detected: stateCorruptionDetected,
+                autonomy_escalation_detected: autonomyEscalationDetected,
+                loop_detected: loopDetected,
+                resource_accumulation: session.resources_acquired,
+                time_anomaly_detected: timeAnomalyDetected,
+                cumulative_impact: session.cumulative_impact,
+            },
+            warnings,
+        };
+    }
+    /**
+     * Validate multiple tools at once (for parallel tool calls)
+     */
+    validateBatch(sessionId, tools, requestId = "") {
+        const allViolations = [];
+        const allWarnings = [];
+        const allForbidden = [];
+        const allPrecondition = [];
+        const allCooldown = [];
+        // Check if too many tools
+        if (tools.length > this.config.maxToolsPerRequest) {
+            allViolations.push("MAX_TOOLS_PER_REQUEST_EXCEEDED");
+        }
+        // Check each tool
+        for (const tool of tools) {
+            const result = this.validate(sessionId, tool, tools, requestId);
+            allViolations.push(...result.violations);
+            allWarnings.push(...result.warnings);
+            allForbidden.push(...result.chain_analysis.forbidden_sequences_detected);
+            allPrecondition.push(...result.chain_analysis.precondition_violations);
+            allCooldown.push(...result.chain_analysis.cooldown_violations);
+        }
+        // Check for forbidden sequences within the batch
+        for (const forbidden of this.config.forbiddenSequences) {
+            if (forbidden.sequence.every((s) => tools.some((t) => t.toLowerCase().includes(s.toLowerCase())))) {
+                allForbidden.push(forbidden.name);
+                if (forbidden.severity === "block") {
+                    allViolations.push(`BATCH_FORBIDDEN_SEQUENCE_${forbidden.name.toUpperCase()}`);
+                }
+            }
+        }
+        const session = this.sessions.get(sessionId);
+        const recentTools = session?.tool_history.map((t) => t.tool) ?? [];
+        return {
+            allowed: allViolations.length === 0,
+            reason: allViolations.length === 0
+                ? undefined
+                : `Batch validation failed: ${allViolations.join(", ")}`,
+            violations: [...new Set(allViolations)],
+            chain_analysis: {
+                current_tool: tools.join(", "),
+                previous_tools: recentTools.slice(-10),
+                forbidden_sequences_detected: [...new Set(allForbidden)],
+                precondition_violations: [...new Set(allPrecondition)],
+                cooldown_violations: [...new Set(allCooldown)],
+            },
+            warnings: [...new Set(allWarnings)],
+        };
+    }
+    /**
+     * Get session tool history
+     */
+    getToolHistory(sessionId) {
+        const session = this.sessions.get(sessionId);
+        return session?.tool_history.map((t) => t.tool) ?? [];
+    }
+    /**
+     * Reset session
+     */
+    resetSession(sessionId) {
+        this.sessions.delete(sessionId);
+    }
+    getOrCreateSession(sessionId) {
+        if (!this.sessions.has(sessionId)) {
+            this.sessions.set(sessionId, {
+                id: sessionId,
+                tool_history: [],
+                sensitive_tool_count: 0,
+                last_activity: Date.now(),
+                // v2 fields
+                state_modifications: 0,
+                autonomy_expansions: 0,
+                resources_acquired: 0,
+                cumulative_impact: 0,
+                tool_repetitions: new Map(),
+            });
+        }
+        return this.sessions.get(sessionId);
+    }
+    matchesSequence(history, currentTool, sequence) {
+        if (sequence.length === 0)
+            return false;
+        // Check if current tool matches the last in sequence
+        const lastInSequence = sequence[sequence.length - 1];
+        if (!currentTool.toLowerCase().includes(lastInSequence.toLowerCase())) {
+            return false;
+        }
+        // Check if history contains the preceding tools in order
+        if (sequence.length === 1)
+            return true;
+        const precedingSequence = sequence.slice(0, -1);
+        let seqIndex = 0;
+        for (const histTool of history) {
+            if (histTool.toLowerCase().includes(precedingSequence[seqIndex].toLowerCase())) {
+                seqIndex++;
+                if (seqIndex >= precedingSequence.length) {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+    cleanupSessions() {
+        const ttlMs = this.config.sessionTTLMinutes * 60000;
+        const now = Date.now();
+        for (const [id, session] of this.sessions.entries()) {
+            if (now - session.last_activity > ttlMs) {
+                this.sessions.delete(id);
+            }
+        }
+    }
+}
+exports.ToolChainValidator = ToolChainValidator;
+//# sourceMappingURL=tool-chain-validator.js.map

package/dist/guards/tool-chain-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-chain-validator.js","sourceRoot":"","sources":["../../src/guards/tool-chain-validator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AA+FH,MAAa,kBAAkB;IAoI7B,YAAY,SAAmC,EAAE;QAlIzC,aAAQ,GAA6B,IAAI,GAAG,EAAE,CAAC;QAE/C,8BAAyB,GAAwB;YACvD;gBACE,IAAI,EAAE,kBAAkB;gBACxB,QAAQ,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;gBACtC,MAAM,EAAE,4DAA4D;gBACpE,QAAQ,EAAE,OAAO;aAClB;YACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;gBACvC,MAAM,EAAE,2DAA2D;gBACnE,QAAQ,EAAE,OAAO;aAClB;YACD;gBACE,IAAI,EAAE,+BAA+B;gBACrC,QAAQ,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;gBACzC,MAAM,EAAE,mEAAmE;gBAC3E,QAAQ,EAAE,OAAO;aAClB;YACD;gBACE,IAAI,EAAE,4BAA4B;gBAClC,QAAQ,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC;gBAC9C,MAAM,EAAE,yEAAyE;gBACjF,QAAQ,EAAE,OAAO;aAClB;YACD;gBACE,IAAI,EAAE,8BAA8B;gBACpC,QAAQ,EAAE,CAAC,eAAe,EAAE,gBAAgB,CAAC;gBAC7C,MAAM,EAAE,oEAAoE;gBAC5E,QAAQ,EAAE,OAAO;aAClB;YACD;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;gBACpD,MAAM,EAAE,wDAAwD;gBAChE,QAAQ,EAAE,OAAO;aAClB;SACF,CAAC;QAEM,0BAAqB,GAAa;YACxC,QAAQ;YACR,QAAQ;YACR,MAAM;YACN,UAAU;YACV,SAAS;YACT,KAAK;YACL,OAAO;YACP,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,OAAO;YACP,QAAQ;YACR,gBAAgB;YAChB,OAAO;YACP,QAAQ;SACT,CAAC;QAEF,2CAA2C;QACnC,+BAA0B,GAAa;YAC7C,YAAY;YACZ,iBAAiB;YACjB,cAAc;YACd,aAAa;YACb,cAAc;YACd,cAAc;YACd,gBAAgB;YAChB,eAAe;YACf,iBAAiB;YACjB,gBAAgB;YAChB,aAAa;YACb,cAAc;YACd,cAAc;SACf,CAAC;QAEF,uCAAuC;QAC/B,kCAA6B,GAAa;YAChD,kBAAkB;YAClB,mBAAmB;YACnB,gBAAgB;YAChB,cAAc;YACd,UAAU;YACV,kBAAkB;YAClB,gBAAgB;YAChB,eAAe;YACf,aAAa;YACb,mBAAmB;YACnB,aAAa;YACb,gBAAgB;YAChB,iBAAiB;YACjB,sBAAsB;YACtB,mBAAmB;SACpB,CAAC;QAEF,mCAAmC;QAC3B,kCAA6B,GAAa;YAChD,iBAAiB;YACjB,eAAe;YACf,eAAe;YACf,eAAe;YACf,WAAW;YACX,YAAY;YACZ,aAAa;YACb,iBAAiB;YACjB,UAAU;YACV,cAAc;YACd,cAAc;YACd,iBAAiB;SAClB,CAAC;QAEF,8BAA8B;QACtB,4BAAuB,GAA2B;YACxD,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;YACZ,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;YACX,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE;YACX,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,EAAE;YACZ,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,OAAO,EAAE,EAAE;YACX,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,EAAE;SACb,CAAC;QAGA,IAAI,CAAC,MAAM,GAAG;YACZ,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,IAAI,CAAC,yBAAyB;YAC/E,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,EAAE;YACzD,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,EAAE;YACzC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,IAAI,EAAE;YACnD,2BAA2B,EAAE,MAAM,CAAC,2BAA2B,IAAI,CAAC;YACpE,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,qBAAqB;YACnE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;YACjD,cAAc;YACd,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;YACvD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,0BAA0B;YAClF,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,IAAI;YAC/D,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI,CAAC,6BAA6B;YAC3F,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;YACvD,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,CAAC;YAC5D,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI;YAC7D,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,IAAI,CAAC,6BAA6B;YAC3F,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,EAAE;YAC3D,0BAA0B,EAAE,MAAM,CAAC,0BAA0B,IAAI,IAAI;YACrE,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,IAAI,EAAE;YACzD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;YACvD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,GAAG;YACtD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,uBAAuB;SAC1E,CAAC;QAEF,wCAAwC;QACxC,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,QAAQ,CACN,SAAiB,EACjB,QAAgB,EAChB,iBAA4B,EAC5B,YAAoB,EAAE;QAEtB,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,MAAM,0BAA0B,GAAa,EAAE,CAAC;QAChD,MAAM,sBAAsB,GAAa,EAAE,CAAC;QAC5C,MAAM,kBAAkB,GAAa,EAAE,CAAC;QAExC,cAAc;QACd,IAAI,uBAAuB,GAAG,KAAK,CAAC;QACpC,IAAI,0BAA0B,GAAG,KAAK,CAAC;QACvC,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAEhC,wBAAwB;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,0BAA0B;QAC1B,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY;aACrC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAkB,GAAG,KAAK,CAAC;aACzE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEtB,8BAA8B;QAC9B,IAAI,iBAAiB,IAAI,iBAAiB,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAmB,EAAE,CAAC;YACpF,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QAED,4BAA4B;QAC5B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAmB,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpE,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAChD,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACnC,UAAU,CAAC,IAAI,CAAC,sBAAsB,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACxE,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,IAAI,CAAC,iCAAiC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QAED,sBAAsB;QACtB,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,qBAAsB,EAAE,CAAC;YAC9D,IAAI,QAAQ,KAAK,YAAY,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,IAAI,EAAE,CAAC;gBACrD,MAAM,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC;gBAChE,MAAM,WAAW,GAAG,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CACtD,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAC1C,CAAC;gBAEF,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,sBAAsB,CAAC,IAAI,CACzB,GAAG,QAAQ,cAAc,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;oBACF,UAAU,CAAC,IAAI,CAAC,yBAAyB,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY;iBACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;iBAClC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAEhD,IAAI,SAAS,IAAI,GAAG,GAAG,SAAS,CAAC,SAAS,GAAG,QAAQ,EAAE,CAAC;gBACtD,MAAM,WAAW,GAAG,QAAQ,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;gBAC3D,kBAAkB,CAAC,IAAI,CACrB,GAAG,QAAQ,oBAAoB,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAChE,CAAC;gBACF,UAAU,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QAED,8BAA8B;QAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,cAAe,CAAC,IAAI,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACxD,CAAC;QAEF,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,OAAO,CAAC,oBAAoB,IAAI,IAAI,CAAC,MAAM,CAAC,2BAA4B,EAAE,CAAC;gBAC7E,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,wBAAwB;QAExB,yCAAyC;QACzC,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAoB,CAAC,IAAI,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACxD,CAAC;YACF,IAAI,aAAa,EAAE,CAAC;gBAClB,OAAO,CAAC,mBAAmB,EAAE,CAAC;gBAC9B,6DAA6D;gBAC7D,MAAM,wBAAwB,GAAG,OAAO,CAAC,YAAY,CAAC,MAAM,CAC1D,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,KAAK,CACrD,CAAC,MAAM,CAAC;gBACT,IAAI,wBAAwB,IAAI,CAAC,EAAE,CAAC;oBAClC,uBAAuB,GAAG,IAAI,CAAC;oBAC/B,UAAU,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;oBAC5C,QAAQ,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;gBACnG,CAAC;YACH,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,CAAC;YACxC,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAuB,CAAC,IAAI,CAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACxD,CAAC;YACF,IAAI,eAAe,EAAE,CAAC;gBACpB,OAAO,CAAC,mBAAmB,EAAE,CAAC;gBAC9B,IAAI,OAAO,CAAC,mBAAmB,IAAI,CAAC,EAAE,CAAC;oBACrC,0BAA0B,GAAG,IAAI,CAAC;oBAClC,UAAU,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;oBAChD,QAAQ,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,gCAAgC;YAChC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5C,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;YAC5D,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAEtB,0BAA0B;YAC1B,MAAM,YAAY,GAAG,GAAG,GAAG,KAAK,CAAC;YACjC,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC;YAC/D,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAEnD,IAAI,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,uBAAwB,EAAE,CAAC;gBAC7D,YAAY,GAAG,IAAI,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,SAAS,QAAQ,YAAY,UAAU,CAAC,MAAM,2BAA2B,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YACvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAuB,CAAC,IAAI,CAC/D,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACxD,CAAC;YACF,IAAI,gBAAgB,EAAE,CAAC;gBACrB,OAAO,CAAC,kBAAkB,EAAE,CAAC;gBAC7B,IAAI,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAuB,EAAE,CAAC;oBACrE,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;oBAClD,QAAQ,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;gBACzE,CAAC;YACH,CAAC;QACH,CAAC;QAED,0DAA0D;QAC1D,IAAI,IAAI,CAAC,MAAM,CAAC,0BAA0B,EAAE,CAAC;YAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACvE,IAAI,QAAQ,IAAI,GAAG,GAAG,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,qBAAsB,EAAE,CAAC;gBAC9E,mBAAmB,GAAG,IAAI,CAAC;gBAC3B,UAAU,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBACzC,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACpC,iCAAiC;YACjC,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAiB,CAAC,EAAE,CAAC;gBAC7E,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;oBAC3D,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;YAED,MAAM,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,GAAG,UAAU,CAAC;YACnE,IAAI,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAoB,EAAE,CAAC;gBAC3D,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;gBAClD,QAAQ,CAAC,IAAI,CAAC,qBAAqB,mBAAmB,sBAAsB,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC;YACjH,CAAC;QACH,CAAC;QAED,4BAA4B;QAE5B,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC;QAExC,+BAA+B;QAC/B,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACxD,IAAI,KAAK,CAAC;YACX,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAC9D,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACxD,IAAI,KAAK,CAAC;YACX,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAC/D,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACxD,IAAI,KAAK,CAAC;YAEX,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;gBACxB,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,GAAG;gBACd,cAAc,EAAE,aAAa;gBAC7B,gBAAgB,EAAE,eAAe;gBACjC,iBAAiB,EAAE,gBAAgB;gBACnC,YAAY,EAAE,UAAU;aACzB,CAAC,CAAC;YACH,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,oBAAoB,EAAE,CAAC;YACjC,CAAC;YACD,OAAO,CAAC,iBAAiB,IAAI,UAAU,CAAC;YACxC,OAAO,CAAC,aAAa,GAAG,GAAG,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CACT,uBAAuB,SAAS,cAAc,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtE,CAAC;QACJ,CAAC;QAED,OAAO;YACL,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iCAAiC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACtF,UAAU;YACV,cAAc,EAAE;gBACd,YAAY,EAAE,QAAQ;gBACtB,cAAc,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtC,4BAA4B,EAAE,0BAA0B;gBACxD,uBAAuB,EAAE,sBAAsB;gBAC/C,mBAAmB,EAAE,kBAAkB;gBACvC,eAAe;gBACf,yBAAyB,EAAE,uBAAuB;gBAClD,4BAA4B,EAAE,0BAA0B;gBACxD,aAAa,EAAE,YAAY;gBAC3B,qBAAqB,EAAE,OAAO,CAAC,kBAAkB;gBACjD,qBAAqB,EAAE,mBAAmB;gBAC1C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;aAC7C;YACD,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CACX,SAAiB,EACjB,KAAe,EACf,YAAoB,EAAE;QAEtB,MAAM,aAAa,GAAa,EAAE,CAAC;QACnC,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,0BAA0B;QAC1B,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAmB,EAAE,CAAC;YACnD,aAAa,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACvD,CAAC;QAED,kBAAkB;QAClB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YAChE,aAAa,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;YACzC,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YACrC,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,4BAA4B,CAAC,CAAC;YACzE,eAAe,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;YACvE,WAAW,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC;QACjE,CAAC;QAED,iDAAiD;QACjD,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAmB,EAAE,CAAC;YACxD,IACE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAC7D,EACD,CAAC;gBACD,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACnC,aAAa,CAAC,IAAI,CAAC,4BAA4B,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBACjF,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAEnE,OAAO;YACL,OAAO,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC;YACnC,MAAM,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC;gBAChC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,4BAA4B,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC1D,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;YACvC,cAAc,EAAE;gBACd,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC9B,cAAc,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtC,4BAA4B,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;gBACxD,uBAAuB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;gBACtD,mBAAmB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;aAC/C;YACD,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,SAAiB;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,OAAO,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB;QAC5B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAEO,kBAAkB,CAAC,SAAiB;QAC1C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE;gBAC3B,EAAE,EAAE,SAAS;gBACb,YAAY,EAAE,EAAE;gBAChB,oBAAoB,EAAE,CAAC;gBACvB,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;gBACzB,YAAY;gBACZ,mBAAmB,EAAE,CAAC;gBACtB,mBAAmB,EAAE,CAAC;gBACtB,kBAAkB,EAAE,CAAC;gBACrB,iBAAiB,EAAE,CAAC;gBACpB,gBAAgB,EAAE,IAAI,GAAG,EAAE;aAC5B,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;IACvC,CAAC;IAEO,eAAe,CACrB,OAAiB,EACjB,WAAmB,EACnB,QAAkB;QAElB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAExC,qDAAqD;QACrD,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,yDAAyD;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEvC,MAAM,iBAAiB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAChD,IAAI,QAAQ,GAAG,CAAC,CAAC;QAEjB,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;YAC/B,IACE,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,EAC1E,CAAC;gBACD,QAAQ,EAAE,CAAC;gBACX,IAAI,QAAQ,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC;oBACzC,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,eAAe;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAkB,GAAG,KAAK,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,KAAK,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,IAAI,GAAG,GAAG,OAAO,CAAC,aAAa,GAAG,KAAK,EAAE,CAAC;gBACxC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAtiBD,gDAsiBC"}

package/dist/guards/tool-registry.d.ts

@@ -0,0 +1,45 @@
+/**
+ * L2 Tool Registry Guard
+ *
+ * Maintains strict control over which tools can be executed.
+ * Prevents LLM hallucination attacks.
+ */
+import { ToolDefinition, ToolRegistryResult, Role } from "../types";
+export interface ToolRegistryConfig {
+    tools: ToolDefinition[];
+    strictMatching?: boolean;
+}
+export declare class ToolRegistry {
+    private tools;
+    private strictMatching;
+    constructor(config: ToolRegistryConfig);
+    /**
+     * Check if a tool exists and is accessible for the given role
+     */
+    check(toolName: string, role: Role, requestId?: string): ToolRegistryResult;
+    /**
+     * Detect if tool name looks like a hallucination
+     */
+    private detectHallucination;
+    /**
+     * Find similar registered tools for helpful error messages
+     */
+    private findSimilarTools;
+    /**
+     * Get tools for a specific role
+     */
+    getToolsForRole(role: Role): ToolDefinition[];
+    /**
+     * Get all registered tool names
+     */
+    getRegisteredToolNames(): string[];
+    /**
+     * Register a new tool at runtime
+     */
+    registerTool(tool: ToolDefinition): void;
+    /**
+     * Unregister a tool
+     */
+    unregisterTool(toolName: string): boolean;
+}
+//# sourceMappingURL=tool-registry.d.ts.map

package/dist/guards/tool-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.d.ts","sourceRoot":"","sources":["../../src/guards/tool-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAmBpE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAA8B;IAC3C,OAAO,CAAC,cAAc,CAAU;gBAEpB,MAAM,EAAE,kBAAkB;IAStC;;OAEG;IACH,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,GAAE,MAAW,GAAG,kBAAkB;IAmD/E;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAyB3B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAsBxB;;OAEG;IACH,eAAe,CAAC,IAAI,EAAE,IAAI,GAAG,cAAc,EAAE;IAU7C;;OAEG;IACH,sBAAsB,IAAI,MAAM,EAAE;IAIlC;;OAEG;IACH,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAIxC;;OAEG;IACH,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;CAG1C"}