llm-trust-guard 4.0.0

package/dist/integrations/express.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Express Middleware Integration for llm-trust-guard
+ *
+ * Provides ready-to-use middleware for Express.js applications
+ * to protect LLM-powered endpoints.
+ */
+import { InputSanitizer, EncodingDetector, MemoryGuard } from "../index.js";
+import type { PAPSanitizerResult } from "../guards/input-sanitizer.js";
+import type { EncodingDetectorResult } from "../guards/encoding-detector.js";
+import type { MemoryGuardResult } from "../guards/memory-guard.js";
+interface Request {
+    body?: any;
+    query?: any;
+    params?: any;
+    headers?: any;
+    session?: any;
+    get?(name: string): string | undefined;
+}
+interface Response {
+    status(code: number): Response;
+    json(body: any): Response;
+}
+type NextFunction = (err?: any) => void;
+export interface TrustGuardMiddlewareConfig {
+    /** Fields to check in request body */
+    bodyFields?: string[];
+    /** Fields to check in query params */
+    queryFields?: string[];
+    /** Enable input sanitization */
+    sanitize?: boolean;
+    /** Enable encoding detection */
+    detectEncoding?: boolean;
+    /** Enable memory/context validation */
+    validateMemory?: boolean;
+    /** Custom error handler */
+    onBlocked?: (req: Request, res: Response, result: ExpressGuardResult) => void;
+    /** Custom logging function */
+    logger?: (message: string, data?: any) => void;
+    /** InputSanitizer configuration */
+    sanitizerConfig?: ConstructorParameters<typeof InputSanitizer>[0];
+    /** EncodingDetector configuration */
+    encodingConfig?: ConstructorParameters<typeof EncodingDetector>[0];
+    /** MemoryGuard configuration */
+    memoryConfig?: ConstructorParameters<typeof MemoryGuard>[0];
+    /** Session ID extractor */
+    getSessionId?: (req: Request) => string;
+}
+export interface ExpressGuardResult {
+    allowed: boolean;
+    guard: string;
+    violations: string[];
+    details?: PAPSanitizerResult | EncodingDetectorResult | MemoryGuardResult;
+}
+/**
+ * Create Express middleware for LLM input protection
+ *
+ * @example
+ * ```typescript
+ * import express from 'express';
+ * import { createTrustGuardMiddleware } from 'llm-trust-guard/integrations/express';
+ *
+ * const app = express();
+ * app.use(express.json());
+ *
+ * // Protect all LLM endpoints
+ * app.use('/api/chat', createTrustGuardMiddleware({
+ *   bodyFields: ['message', 'prompt'],
+ *   sanitize: true,
+ *   detectEncoding: true
+ * }));
+ *
+ * app.post('/api/chat', (req, res) => {
+ *   // req.body.message is now validated
+ *   res.json({ response: 'Safe response' });
+ * });
+ * ```
+ */
+export declare function createTrustGuardMiddleware(config?: TrustGuardMiddlewareConfig): (req: Request, res: Response, next: NextFunction) => void | Response;
+/**
+ * Create middleware for rate-limiting sensitive tool usage
+ *
+ * @example
+ * ```typescript
+ * app.use('/api/tools', createToolRateLimitMiddleware({
+ *   sensitiveTools: ['delete', 'admin', 'execute'],
+ *   maxSensitivePerSession: 5,
+ *   windowMs: 60000
+ * }));
+ * ```
+ */
+export declare function createToolRateLimitMiddleware(config: {
+    sensitiveTools: string[];
+    maxSensitivePerSession?: number;
+    windowMs?: number;
+    getSessionId?: (req: Request) => string;
+    getToolName?: (req: Request) => string | undefined;
+}): (req: Request, res: Response, next: NextFunction) => Response | undefined;
+/**
+ * Create middleware for output filtering
+ *
+ * @example
+ * ```typescript
+ * app.use(createOutputFilterMiddleware({
+ *   patterns: [
+ *     /api[_-]?key/i,
+ *     /password/i,
+ *     /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b/
+ *   ],
+ *   replacement: '[REDACTED]'
+ * }));
+ * ```
+ */
+export declare function createOutputFilterMiddleware(config: {
+    patterns: RegExp[];
+    replacement?: string;
+    fields?: string[];
+}): (req: Request, res: Response, next: NextFunction) => void;
+export {};
+//# sourceMappingURL=express.d.ts.map

package/dist/integrations/express.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"express.d.ts","sourceRoot":"","sources":["../../src/integrations/express.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAGnE,UAAU,OAAO;IACf,IAAI,CAAC,EAAE,GAAG,CAAC;IACX,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,UAAU,QAAQ;IAChB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,QAAQ,CAAC;CAC3B;AAED,KAAK,YAAY,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;AAExC,MAAM,WAAW,0BAA0B;IACzC,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gCAAgC;IAChC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uCAAuC;IACvC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,2BAA2B;IAC3B,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC9E,8BAA8B;IAC9B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IAC/C,mCAAmC;IACnC,eAAe,CAAC,EAAE,qBAAqB,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,qCAAqC;IACrC,cAAc,CAAC,EAAE,qBAAqB,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,gCAAgC;IAChC,YAAY,CAAC,EAAE,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,2BAA2B;IAC3B,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,OAAO,CAAC,EAAE,kBAAkB,GAAG,sBAAsB,GAAG,iBAAiB,CAAC;CAC3E;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,GAAE,0BAA+B,IAoB3C,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,qBAwHrF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE;IACpD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IACxC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,GAAG,SAAS,CAAC;CACpD,IAYyC,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,0BA8BxF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IACnD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,IAGwC,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,UAavF"}

package/dist/integrations/express.js

@@ -0,0 +1,244 @@
+"use strict";
+/**
+ * Express Middleware Integration for llm-trust-guard
+ *
+ * Provides ready-to-use middleware for Express.js applications
+ * to protect LLM-powered endpoints.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createTrustGuardMiddleware = createTrustGuardMiddleware;
+exports.createToolRateLimitMiddleware = createToolRateLimitMiddleware;
+exports.createOutputFilterMiddleware = createOutputFilterMiddleware;
+const index_js_1 = require("../index.js");
+/**
+ * Create Express middleware for LLM input protection
+ *
+ * @example
+ * ```typescript
+ * import express from 'express';
+ * import { createTrustGuardMiddleware } from 'llm-trust-guard/integrations/express';
+ *
+ * const app = express();
+ * app.use(express.json());
+ *
+ * // Protect all LLM endpoints
+ * app.use('/api/chat', createTrustGuardMiddleware({
+ *   bodyFields: ['message', 'prompt'],
+ *   sanitize: true,
+ *   detectEncoding: true
+ * }));
+ *
+ * app.post('/api/chat', (req, res) => {
+ *   // req.body.message is now validated
+ *   res.json({ response: 'Safe response' });
+ * });
+ * ```
+ */
+function createTrustGuardMiddleware(config = {}) {
+    const { bodyFields = ["message", "prompt", "input", "query", "content"], queryFields = [], sanitize = true, detectEncoding = true, validateMemory = false, onBlocked, logger = console.log, sanitizerConfig, encodingConfig, memoryConfig, getSessionId = (req) => req.session?.id || req.get?.("x-session-id") || "anonymous", } = config;
+    // Initialize guards
+    const inputSanitizer = sanitize ? new index_js_1.InputSanitizer(sanitizerConfig) : null;
+    const encodingDetector = detectEncoding ? new index_js_1.EncodingDetector(encodingConfig) : null;
+    const memoryGuard = validateMemory ? new index_js_1.MemoryGuard(memoryConfig) : null;
+    return function trustGuardMiddleware(req, res, next) {
+        const requestId = `req-${Date.now()}-${Math.random().toString(36).substr(2, 9)}`;
+        const sessionId = getSessionId(req);
+        // Collect all text fields to check
+        const textsToCheck = [];
+        // Check body fields
+        if (req.body) {
+            for (const field of bodyFields) {
+                const value = req.body[field];
+                if (typeof value === "string" && value.trim()) {
+                    textsToCheck.push({ field, value, source: "body" });
+                }
+            }
+        }
+        // Check query fields
+        if (req.query) {
+            for (const field of queryFields) {
+                const value = req.query[field];
+                if (typeof value === "string" && value.trim()) {
+                    textsToCheck.push({ field, value, source: "query" });
+                }
+            }
+        }
+        // Check each text field
+        for (const { field, value, source } of textsToCheck) {
+            // Input sanitization
+            if (inputSanitizer) {
+                const sanitizeResult = inputSanitizer.sanitize(value, requestId);
+                if (!sanitizeResult.allowed) {
+                    const result = {
+                        allowed: false,
+                        guard: "InputSanitizer",
+                        violations: sanitizeResult.violations,
+                        details: sanitizeResult,
+                    };
+                    logger(`[TrustGuard] Blocked by InputSanitizer: ${source}.${field}`, {
+                        requestId,
+                        violations: sanitizeResult.violations,
+                    });
+                    if (onBlocked) {
+                        return onBlocked(req, res, result);
+                    }
+                    return res.status(400).json({
+                        error: "Request blocked by security policy",
+                        code: "INPUT_SANITIZATION_FAILED",
+                        field: `${source}.${field}`,
+                        violations: sanitizeResult.violations,
+                    });
+                }
+            }
+            // Encoding detection
+            if (encodingDetector) {
+                const encodingResult = encodingDetector.detect(value, requestId);
+                if (!encodingResult.allowed) {
+                    const result = {
+                        allowed: false,
+                        guard: "EncodingDetector",
+                        violations: encodingResult.violations,
+                        details: encodingResult,
+                    };
+                    logger(`[TrustGuard] Blocked by EncodingDetector: ${source}.${field}`, {
+                        requestId,
+                        violations: encodingResult.violations,
+                    });
+                    if (onBlocked) {
+                        return onBlocked(req, res, result);
+                    }
+                    return res.status(400).json({
+                        error: "Request blocked by security policy",
+                        code: "ENCODING_ATTACK_DETECTED",
+                        field: `${source}.${field}`,
+                        violations: encodingResult.violations,
+                    });
+                }
+            }
+            // Memory/context validation
+            if (memoryGuard) {
+                const memoryResult = memoryGuard.validateContextInjection(value, sessionId, requestId);
+                if (!memoryResult.allowed) {
+                    const result = {
+                        allowed: false,
+                        guard: "MemoryGuard",
+                        violations: memoryResult.violations,
+                        details: memoryResult,
+                    };
+                    logger(`[TrustGuard] Blocked by MemoryGuard: ${source}.${field}`, {
+                        requestId,
+                        violations: memoryResult.violations,
+                    });
+                    if (onBlocked) {
+                        return onBlocked(req, res, result);
+                    }
+                    return res.status(400).json({
+                        error: "Request blocked by security policy",
+                        code: "CONTEXT_INJECTION_DETECTED",
+                        field: `${source}.${field}`,
+                        violations: memoryResult.violations,
+                    });
+                }
+            }
+        }
+        // All checks passed
+        next();
+    };
+}
+/**
+ * Create middleware for rate-limiting sensitive tool usage
+ *
+ * @example
+ * ```typescript
+ * app.use('/api/tools', createToolRateLimitMiddleware({
+ *   sensitiveTools: ['delete', 'admin', 'execute'],
+ *   maxSensitivePerSession: 5,
+ *   windowMs: 60000
+ * }));
+ * ```
+ */
+function createToolRateLimitMiddleware(config) {
+    const { sensitiveTools, maxSensitivePerSession = 10, windowMs = 60000, getSessionId = (req) => req.session?.id || "anonymous", getToolName = (req) => req.body?.tool || req.body?.toolName, } = config;
+    // Session usage tracking
+    const sessionUsage = new Map();
+    return function toolRateLimitMiddleware(req, res, next) {
+        const sessionId = getSessionId(req);
+        const toolName = getToolName(req);
+        // Check if this is a sensitive tool
+        if (toolName && sensitiveTools.some((t) => toolName.toLowerCase().includes(t.toLowerCase()))) {
+            const now = Date.now();
+            let usage = sessionUsage.get(sessionId);
+            // Reset if window expired
+            if (!usage || now > usage.resetAt) {
+                usage = { count: 0, resetAt: now + windowMs };
+                sessionUsage.set(sessionId, usage);
+            }
+            // Check limit
+            if (usage.count >= maxSensitivePerSession) {
+                return res.status(429).json({
+                    error: "Rate limit exceeded for sensitive tool usage",
+                    code: "TOOL_RATE_LIMIT_EXCEEDED",
+                    retryAfter: Math.ceil((usage.resetAt - now) / 1000),
+                });
+            }
+            // Increment counter
+            usage.count++;
+        }
+        next();
+    };
+}
+/**
+ * Create middleware for output filtering
+ *
+ * @example
+ * ```typescript
+ * app.use(createOutputFilterMiddleware({
+ *   patterns: [
+ *     /api[_-]?key/i,
+ *     /password/i,
+ *     /\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Z|a-z]{2,}\b/
+ *   ],
+ *   replacement: '[REDACTED]'
+ * }));
+ * ```
+ */
+function createOutputFilterMiddleware(config) {
+    const { patterns, replacement = "[REDACTED]", fields = ["response", "message", "content", "text"] } = config;
+    return function outputFilterMiddleware(req, res, next) {
+        const originalJson = res.json.bind(res);
+        res.json = function (body) {
+            if (body && typeof body === "object") {
+                const filtered = filterObject(body, fields, patterns, replacement);
+                return originalJson(filtered);
+            }
+            return originalJson(body);
+        };
+        next();
+    };
+}
+function filterObject(obj, fields, patterns, replacement) {
+    if (Array.isArray(obj)) {
+        return obj.map((item) => filterObject(item, fields, patterns, replacement));
+    }
+    if (obj && typeof obj === "object") {
+        const result = {};
+        for (const [key, value] of Object.entries(obj)) {
+            if (fields.includes(key) && typeof value === "string") {
+                let filtered = value;
+                for (const pattern of patterns) {
+                    filtered = filtered.replace(new RegExp(pattern, "g"), replacement);
+                }
+                result[key] = filtered;
+            }
+            else if (typeof value === "object") {
+                result[key] = filterObject(value, fields, patterns, replacement);
+            }
+            else {
+                result[key] = value;
+            }
+        }
+        return result;
+    }
+    return obj;
+}
+//# sourceMappingURL=express.js.map

package/dist/integrations/express.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"express.js","sourceRoot":"","sources":["../../src/integrations/express.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAgFH,gEA4IC;AAcD,sEAgDC;AAiBD,oEAoBC;AA7TD,0CAA4E;AAsD5E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,0BAA0B,CAAC,SAAqC,EAAE;IAChF,MAAM,EACJ,UAAU,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAC/D,WAAW,GAAG,EAAE,EAChB,QAAQ,GAAG,IAAI,EACf,cAAc,GAAG,IAAI,EACrB,cAAc,GAAG,KAAK,EACtB,SAAS,EACT,MAAM,GAAG,OAAO,CAAC,GAAG,EACpB,eAAe,EACf,cAAc,EACd,YAAY,EACZ,YAAY,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,IAAI,WAAW,GACpF,GAAG,MAAM,CAAC;IAEX,oBAAoB;IACpB,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,yBAAc,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,MAAM,gBAAgB,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,2BAAgB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,sBAAW,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE1E,OAAO,SAAS,oBAAoB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QAClF,MAAM,SAAS,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAEpC,mCAAmC;QACnC,MAAM,YAAY,GAA4D,EAAE,CAAC;QAEjF,oBAAoB;QACpB,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC9C,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC9C,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;QAED,wBAAwB;QACxB,KAAK,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YACpD,qBAAqB;YACrB,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,cAAc,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBACjE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAuB;wBACjC,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,gBAAgB;wBACvB,UAAU,EAAE,cAAc,CAAC,UAAU;wBACrC,OAAO,EAAE,cAAc;qBACxB,CAAC;oBAEF,MAAM,CAAC,2CAA2C,MAAM,IAAI,KAAK,EAAE,EAAE;wBACnE,SAAS;wBACT,UAAU,EAAE,cAAc,CAAC,UAAU;qBACtC,CAAC,CAAC;oBAEH,IAAI,SAAS,EAAE,CAAC;wBACd,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBACrC,CAAC;oBAED,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBAC1B,KAAK,EAAE,oCAAoC;wBAC3C,IAAI,EAAE,2BAA2B;wBACjC,KAAK,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE;wBAC3B,UAAU,EAAE,cAAc,CAAC,UAAU;qBACtC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,qBAAqB;YACrB,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;gBACjE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;oBAC5B,MAAM,MAAM,GAAuB;wBACjC,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,kBAAkB;wBACzB,UAAU,EAAE,cAAc,CAAC,UAAU;wBACrC,OAAO,EAAE,cAAc;qBACxB,CAAC;oBAEF,MAAM,CAAC,6CAA6C,MAAM,IAAI,KAAK,EAAE,EAAE;wBACrE,SAAS;wBACT,UAAU,EAAE,cAAc,CAAC,UAAU;qBACtC,CAAC,CAAC;oBAEH,IAAI,SAAS,EAAE,CAAC;wBACd,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBACrC,CAAC;oBAED,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBAC1B,KAAK,EAAE,oCAAoC;wBAC3C,IAAI,EAAE,0BAA0B;wBAChC,KAAK,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE;wBAC3B,UAAU,EAAE,cAAc,CAAC,UAAU;qBACtC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,4BAA4B;YAC5B,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,WAAW,CAAC,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBACvF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;oBAC1B,MAAM,MAAM,GAAuB;wBACjC,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,aAAa;wBACpB,UAAU,EAAE,YAAY,CAAC,UAAU;wBACnC,OAAO,EAAE,YAAY;qBACtB,CAAC;oBAEF,MAAM,CAAC,wCAAwC,MAAM,IAAI,KAAK,EAAE,EAAE;wBAChE,SAAS;wBACT,UAAU,EAAE,YAAY,CAAC,UAAU;qBACpC,CAAC,CAAC;oBAEH,IAAI,SAAS,EAAE,CAAC;wBACd,OAAO,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;oBACrC,CAAC;oBAED,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBAC1B,KAAK,EAAE,oCAAoC;wBAC3C,IAAI,EAAE,4BAA4B;wBAClC,KAAK,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE;wBAC3B,UAAU,EAAE,YAAY,CAAC,UAAU;qBACpC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,oBAAoB;QACpB,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,6BAA6B,CAAC,MAM7C;IACC,MAAM,EACJ,cAAc,EACd,sBAAsB,GAAG,EAAE,EAC3B,QAAQ,GAAG,KAAK,EAChB,YAAY,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,WAAW,EACtD,WAAW,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,GAC5D,GAAG,MAAM,CAAC;IAEX,yBAAyB;IACzB,MAAM,YAAY,GAAG,IAAI,GAAG,EAA8C,CAAC;IAE3E,OAAO,SAAS,uBAAuB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACrF,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAElC,oCAAoC;QACpC,IAAI,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;YAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAExC,0BAA0B;YAC1B,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClC,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,GAAG,QAAQ,EAAE,CAAC;gBAC9C,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACrC,CAAC;YAED,cAAc;YACd,IAAI,KAAK,CAAC,KAAK,IAAI,sBAAsB,EAAE,CAAC;gBAC1C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBAC1B,KAAK,EAAE,8CAA8C;oBACrD,IAAI,EAAE,0BAA0B;oBAChC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC;iBACpD,CAAC,CAAC;YACL,CAAC;YAED,oBAAoB;YACpB,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,4BAA4B,CAAC,MAI5C;IACC,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,YAAY,EAAE,MAAM,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC;IAE7G,OAAO,SAAS,sBAAsB,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;QACpF,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAExC,GAAG,CAAC,IAAI,GAAG,UAAU,IAAS;YAC5B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;gBACnE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC,CAAC;QAEF,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAQ,EAAE,MAAgB,EAAE,QAAkB,EAAE,WAAmB;IACvF,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAQ,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACtD,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;gBACrE,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YACzB,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrC,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACtB,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/integrations/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Framework Integrations for llm-trust-guard
+ *
+ * Ready-to-use integrations for popular frameworks and libraries.
+ */
+export { createTrustGuardMiddleware, createToolRateLimitMiddleware, createOutputFilterMiddleware, type TrustGuardMiddlewareConfig, type ExpressGuardResult, } from "./express.js";
+export { TrustGuardLangChain, TrustGuardViolationError, createInputValidator, createOutputFilter, type TrustGuardCallbackConfig, type SecurityCheckResult, } from "./langchain.js";
+export { SecureOpenAI, OpenAISecurityError, createMessageValidator, wrapOpenAIClient, type SecureOpenAIConfig, type ValidationResult, type SecureMessage, } from "./openai.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/integrations/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAC7B,4BAA4B,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,kBAAkB,GACxB,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,GACzB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,aAAa,CAAC"}

package/dist/integrations/index.js

@@ -0,0 +1,26 @@
+"use strict";
+/**
+ * Framework Integrations for llm-trust-guard
+ *
+ * Ready-to-use integrations for popular frameworks and libraries.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.wrapOpenAIClient = exports.createMessageValidator = exports.OpenAISecurityError = exports.SecureOpenAI = exports.createOutputFilter = exports.createInputValidator = exports.TrustGuardViolationError = exports.TrustGuardLangChain = exports.createOutputFilterMiddleware = exports.createToolRateLimitMiddleware = exports.createTrustGuardMiddleware = void 0;
+// Express.js middleware
+var express_js_1 = require("./express.js");
+Object.defineProperty(exports, "createTrustGuardMiddleware", { enumerable: true, get: function () { return express_js_1.createTrustGuardMiddleware; } });
+Object.defineProperty(exports, "createToolRateLimitMiddleware", { enumerable: true, get: function () { return express_js_1.createToolRateLimitMiddleware; } });
+Object.defineProperty(exports, "createOutputFilterMiddleware", { enumerable: true, get: function () { return express_js_1.createOutputFilterMiddleware; } });
+// LangChain integration
+var langchain_js_1 = require("./langchain.js");
+Object.defineProperty(exports, "TrustGuardLangChain", { enumerable: true, get: function () { return langchain_js_1.TrustGuardLangChain; } });
+Object.defineProperty(exports, "TrustGuardViolationError", { enumerable: true, get: function () { return langchain_js_1.TrustGuardViolationError; } });
+Object.defineProperty(exports, "createInputValidator", { enumerable: true, get: function () { return langchain_js_1.createInputValidator; } });
+Object.defineProperty(exports, "createOutputFilter", { enumerable: true, get: function () { return langchain_js_1.createOutputFilter; } });
+// OpenAI integration
+var openai_js_1 = require("./openai.js");
+Object.defineProperty(exports, "SecureOpenAI", { enumerable: true, get: function () { return openai_js_1.SecureOpenAI; } });
+Object.defineProperty(exports, "OpenAISecurityError", { enumerable: true, get: function () { return openai_js_1.OpenAISecurityError; } });
+Object.defineProperty(exports, "createMessageValidator", { enumerable: true, get: function () { return openai_js_1.createMessageValidator; } });
+Object.defineProperty(exports, "wrapOpenAIClient", { enumerable: true, get: function () { return openai_js_1.wrapOpenAIClient; } });
+//# sourceMappingURL=index.js.map

package/dist/integrations/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/integrations/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,wBAAwB;AACxB,2CAMsB;AALpB,wHAAA,0BAA0B,OAAA;AAC1B,2HAAA,6BAA6B,OAAA;AAC7B,0HAAA,4BAA4B,OAAA;AAK9B,wBAAwB;AACxB,+CAOwB;AANtB,mHAAA,mBAAmB,OAAA;AACnB,wHAAA,wBAAwB,OAAA;AACxB,oHAAA,oBAAoB,OAAA;AACpB,kHAAA,kBAAkB,OAAA;AAKpB,qBAAqB;AACrB,yCAQqB;AAPnB,yGAAA,YAAY,OAAA;AACZ,gHAAA,mBAAmB,OAAA;AACnB,mHAAA,sBAAsB,OAAA;AACtB,6GAAA,gBAAgB,OAAA"}

package/dist/integrations/langchain.d.ts

@@ -0,0 +1,165 @@
+/**
+ * LangChain Integration for llm-trust-guard
+ *
+ * Provides callbacks, wrappers, and utilities for securing
+ * LangChain-based applications.
+ */
+import { InputSanitizer, OutputFilter } from "../index.js";
+import type { PAPSanitizerResult } from "../guards/input-sanitizer.js";
+export interface TrustGuardCallbackConfig {
+    /** Enable input validation */
+    validateInput?: boolean;
+    /** Enable output filtering */
+    filterOutput?: boolean;
+    /** Enable tool chain validation */
+    validateTools?: boolean;
+    /** Throw error on violation (otherwise just log) */
+    throwOnViolation?: boolean;
+    /** Custom violation handler */
+    onViolation?: (type: string, details: any) => void;
+    /** InputSanitizer configuration */
+    sanitizerConfig?: ConstructorParameters<typeof InputSanitizer>[0];
+    /** OutputFilter configuration */
+    outputConfig?: ConstructorParameters<typeof OutputFilter>[0];
+}
+/**
+ * Security result from guard checks
+ */
+export interface SecurityCheckResult {
+    allowed: boolean;
+    guard: string;
+    violations: string[];
+    sanitizedInput?: string;
+    details?: any;
+}
+/**
+ * TrustGuard wrapper for LangChain
+ *
+ * @example
+ * ```typescript
+ * import { ChatOpenAI } from '@langchain/openai';
+ * import { TrustGuardLangChain } from 'llm-trust-guard/integrations/langchain';
+ *
+ * const guard = new TrustGuardLangChain({
+ *   validateInput: true,
+ *   filterOutput: true,
+ *   throwOnViolation: true
+ * });
+ *
+ * // Validate before sending to LLM
+ * const result = guard.validateInput(userMessage);
+ * if (!result.allowed) {
+ *   throw new Error(`Blocked: ${result.violations.join(', ')}`);
+ * }
+ *
+ * // Use with LangChain
+ * const llm = new ChatOpenAI();
+ * const response = await llm.invoke(result.sanitizedInput || userMessage);
+ *
+ * // Filter output before returning to user
+ * const filtered = guard.filterOutput(response.content);
+ * ```
+ */
+export declare class TrustGuardLangChain {
+    private inputSanitizer;
+    private encodingDetector;
+    private memoryGuard;
+    private toolChainValidator;
+    private outputFilter;
+    private config;
+    constructor(config?: TrustGuardCallbackConfig);
+    /**
+     * Validate user input before sending to LLM
+     */
+    validateInput(input: string, requestId?: string): SecurityCheckResult;
+    /**
+     * Validate context/memory before injection
+     */
+    validateContext(context: string | string[], sessionId: string, requestId?: string): SecurityCheckResult;
+    /**
+     * Validate RAG documents before context injection
+     */
+    validateDocuments(documents: Array<{
+        content: string;
+        metadata?: any;
+    }>, sessionId: string): SecurityCheckResult;
+    /**
+     * Validate tool calls before execution
+     */
+    validateToolCall(toolName: string, toolArgs: Record<string, any>, sessionId: string): SecurityCheckResult;
+    /**
+     * Filter LLM output before returning to user
+     */
+    filterOutput(output: string, requestId?: string): string;
+    /**
+     * Create a secure message processor
+     */
+    createSecureProcessor(sessionId: string): {
+        /**
+         * Process user message with full validation
+         */
+        processUserMessage: (message: string) => {
+            allowed: boolean;
+            message: string;
+            violations: string[];
+        };
+        /**
+         * Process context/RAG content
+         */
+        processContext: (context: string[]) => {
+            allowed: boolean;
+            violations: string[];
+        };
+        /**
+         * Process tool call
+         */
+        processToolCall: (tool: string, args: any) => {
+            allowed: boolean;
+            violations: string[];
+        };
+        /**
+         * Process LLM output
+         */
+        processOutput: (output: string) => string;
+    };
+    private handleViolation;
+}
+/**
+ * Error thrown when throwOnViolation is true
+ */
+export declare class TrustGuardViolationError extends Error {
+    type: string;
+    details: any;
+    constructor(type: string, details: any);
+}
+/**
+ * Create a simple input validator function for use with LangChain
+ *
+ * @example
+ * ```typescript
+ * const validateInput = createInputValidator();
+ *
+ * // In your chain
+ * const chain = RunnableSequence.from([
+ *   new RunnableLambda({ func: (input) => {
+ *     const result = validateInput(input.message);
+ *     if (!result.allowed) throw new Error('Blocked');
+ *     return { ...input, message: result.sanitized };
+ *   }}),
+ *   prompt,
+ *   llm,
+ *   outputParser
+ * ]);
+ * ```
+ */
+export declare function createInputValidator(config?: ConstructorParameters<typeof InputSanitizer>[0]): (input: string) => {
+    allowed: boolean;
+    sanitized: string;
+    violations: string[];
+    pap?: PAPSanitizerResult["pap"];
+};
+/**
+ * Create an output filter function for use with LangChain
+ */
+export declare function createOutputFilter(config?: ConstructorParameters<typeof OutputFilter>[0]): (output: string) => string;
+//# sourceMappingURL=langchain.d.ts.map

package/dist/integrations/langchain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"langchain.d.ts","sourceRoot":"","sources":["../../src/integrations/langchain.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,cAAc,EAId,YAAY,EACb,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,WAAW,wBAAwB;IACvC,8BAA8B;IAC9B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,8BAA8B;IAC9B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mCAAmC;IACnC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,+BAA+B;IAC/B,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,IAAI,CAAC;IACnD,mCAAmC;IACnC,eAAe,CAAC,EAAE,qBAAqB,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,iCAAiC;IACjC,YAAY,CAAC,EAAE,qBAAqB,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAC9D;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,GAAG,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,MAAM,CAA2B;gBAE7B,MAAM,GAAE,wBAA6B;IAgBjD;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAoCrE;;OAEG;IACH,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,mBAAmB;IAqBvG;;OAEG;IACH,iBAAiB,CACf,SAAS,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,EACrD,SAAS,EAAE,MAAM,GAChB,mBAAmB;IAmCtB;;OAEG;IACH,gBAAgB,CACd,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC7B,SAAS,EAAE,MAAM,GAChB,mBAAmB;IAqBtB;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM;IAmBxD;;OAEG;IACH,qBAAqB,CAAC,SAAS,EAAE,MAAM;QAEnC;;WAEG;sCAC2B,MAAM,KAAG;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE;QASlG;;WAEG;kCACuB,MAAM,EAAE,KAAG;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE;QAQ/E;;WAEG;gCACqB,MAAM,QAAQ,GAAG,KAAG;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAA;SAAE;QAQtF;;WAEG;gCACqB,MAAM,KAAG,MAAM;;IAM3C,OAAO,CAAC,eAAe;CASxB;AAED;;GAEG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,GAAG,CAAC;gBAER,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG;CAMvC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,IAI7D,OAAO,MAAM,KAAG;IAC5C,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,GAAG,CAAC,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;CACjC,CA2BF;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC,IAG1D,QAAQ,MAAM,KAAG,MAAM,CAIrD"}