opencode-rehydar 0.14.2 → 0.14.3

package/dist/proxy/types.d.ts

@@ -0,0 +1,138 @@
+/**
+ * Proxy Middleware Types
+ */
+import type { AnonymizerConfig } from "../core/anonymizer.js";
+import type { AnonymizationPolicy } from "../types/index.js";
+import type { KeyProvider } from "../crypto/index.js";
+import type { PIIStorageProvider } from "../storage/types.js";
+/**
+ * Callback invoked when the LLM requests a tool call during an agentic loop.
+ * Receives rehydrated (real PII) arguments. The return value will be
+ * automatically anonymized before being sent back to the LLM.
+ *
+ * @param name - The function/tool name
+ * @param args - Parsed tool arguments with real PII values restored
+ * @param toolCallId - The unique tool call ID from the LLM
+ * @returns The tool execution result (will be JSON-stringified and anonymized)
+ */
+export type OnToolCallFn = (name: string, args: Record<string, unknown>, toolCallId: string) => unknown;
+/**
+ * Summary of what an intercepted request anonymized. Passed to the
+ * {@link RehydraFetchConfig.onAnonymize} hook for logging/observability.
+ *
+ * Contains only PII *types* and counts — never the raw PII values.
+ */
+export interface AnonymizeInfo {
+    /** HTTP method of the intercepted request (always "POST" in practice) */
+    method: string;
+    /** Upstream request URL */
+    url: string;
+    /** Detected entity count per PII type (only types with count > 0) */
+    countsByType: Record<string, number>;
+    /** Total entities detected across the whole request */
+    totalEntities: number;
+}
+/**
+ * Configuration for the Rehydra fetch wrapper
+ */
+export interface RehydraFetchConfig {
+    /** Anonymizer configuration */
+    anonymizer?: AnonymizerConfig;
+    /** Policy override */
+    policy?: Partial<AnonymizationPolicy>;
+    /** Key provider for encryption (required) */
+    keyProvider: KeyProvider;
+    /** Storage provider for PII map persistence (required) */
+    piiStorageProvider: PIIStorageProvider;
+    /** LLM provider name or 'auto' for auto-detection */
+    provider?: "openai" | "anthropic" | "auto";
+    /**
+     * Function to derive session ID from a request.
+     * Defaults to a UUID per request.
+     */
+    getSessionId?: (request: Request) => string | Promise<string>;
+    /**
+     * Whether to handle streaming SSE responses.
+     * @default true
+     */
+    handleStreaming?: boolean;
+    /** Locale hint for anonymization */
+    locale?: string;
+    /**
+     * System instruction injected when PII is detected, telling the model
+     * to treat PII placeholders as opaque pass-through values.
+     *
+     * - `undefined` (default): uses the built-in instruction
+     * - `string`: uses your custom instruction text
+     * - `false`: disables injection entirely
+     */
+    systemInstruction?: string | false;
+    /**
+     * Callback for executing tool calls in an agentic loop.
+     * When provided and the LLM returns tool calls, the proxy will:
+     * 1. Rehydrate tool call arguments (restore real PII)
+     * 2. Call this callback for each tool call
+     * 3. Anonymize the return value
+     * 4. Send the result back to the LLM in the next round
+     * 5. Repeat until the LLM returns a final response (no tool calls)
+     *
+     * The callback receives real PII values — it runs on your server, not the LLM.
+     * OpenAI and Anthropic streaming responses are buffered before tools run.
+     * Later rounds use JSON; the final result is emitted as provider-compatible SSE.
+     * Single-completion requests only. Cancellation prevents further tool calls.
+     */
+    onToolCall?: OnToolCallFn;
+    /**
+     * Maximum number of tool execution rounds before returning.
+     * Prevents infinite loops. Only used when onToolCall is set.
+     * @default 10
+     */
+    maxToolRounds?: number;
+    /** Maximum bytes buffered per response in a tool loop. Default: 8 MiB. */
+    maxToolResponseBytes?: number;
+    /**
+     * Hook invoked once per intercepted request, after anonymization and
+     * before forwarding upstream. Receives a summary of detected PII
+     * (types and counts only — never the raw values). Useful for verbose
+     * logging and observability.
+     */
+    onAnonymize?: (info: AnonymizeInfo) => void;
+}
+/**
+ * Reported when the upstream base path and the incoming request path share segments
+ */
+export interface PathOverlapWarning {
+    /** Configured upstream base URL with its trailing slash removed. */
+    upstreamBaseUrl: string;
+    /**
+     * Segments duplicated between the configured upstream suffix and the
+     * incoming request prefix, e.g. ["api", "v1"].
+     */
+    overlappingSegments: string[];
+}
+/**
+ * Configuration for the Rehydra proxy middleware
+ */
+export interface RehydraProxyConfig extends RehydraFetchConfig {
+    /** Upstream LLM API base URL */
+    upstream: string;
+    /**
+     * Headers to forward to upstream.
+     * @default ["authorization", "content-type", "x-api-key", "anthropic-version"]
+     */
+    forwardHeaders?: string[];
+    /** Path prefix to strip before forwarding to upstream */
+    stripPrefix?: string;
+    /**
+     * API key to inject on upstream requests, replacing any client-sent
+     * auth headers. Useful when the client uses OAuth (e.g. Claude Code
+     * with Max) but the upstream requires API key auth.
+     *
+     * For Anthropic: sent as `x-api-key`
+     * For OpenAI: sent as `Authorization: Bearer <key>`
+     */
+    apiKey?: string;
+    /** Hook invoked for each request whose forwarded path overlaps the upstream base path */
+    onPathOverlapWarning?: (warning: PathOverlapWarning) => void | Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/proxy/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/proxy/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,EAAE,MAAM,KACf,OAAO,CAAC;AAEb;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,uDAAuD;IACvD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,+BAA+B;IAC/B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAE9B,sBAAsB;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEtC,6CAA6C;IAC7C,WAAW,EAAE,WAAW,CAAC;IAEzB,0DAA0D;IAC1D,kBAAkB,EAAE,kBAAkB,CAAC;IAEvC,qDAAqD;IACrD,QAAQ,CAAC,EAAE,QAAQ,GAAG,WAAW,GAAG,MAAM,CAAC;IAE3C;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9D;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAE1B,oCAAoC;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAEnC;;;;;;;;;;;;;OAaG;IACH,UAAU,CAAC,EAAE,YAAY,CAAC;IAE1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,0EAA0E;IAC1E,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAE9B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK,IAAI,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAE1B,yDAAyD;IACzD,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,yFAAyF;IACzF,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9E"}

package/dist/proxy/types.js

@@ -0,0 +1,5 @@
+/**
+ * Proxy Middleware Types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/proxy/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/proxy/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/proxy/wrap-client.d.ts

@@ -0,0 +1,47 @@
+/**
+ * LLM Client Wrapper
+ * Convenience function to wrap OpenAI/Anthropic SDK clients
+ * with automatic PII anonymization and rehydration.
+ */
+import type { RehydraFetchConfig } from "./types.js";
+/**
+ * Wraps an LLM client (OpenAI, Anthropic, or any SDK that accepts a custom fetch)
+ * to automatically anonymize outgoing PII and rehydrate responses.
+ *
+ * Works by replacing the client's internal fetch with a Rehydra-wrapped version.
+ *
+ * @example
+ * ```typescript
+ * import OpenAI from 'openai';
+ * import { wrapLLMClient, InMemoryKeyProvider, InMemoryPIIStorageProvider } from 'rehydra';
+ *
+ * const openai = wrapLLMClient(
+ *   new OpenAI(),
+ *   {
+ *     keyProvider: new InMemoryKeyProvider(),
+ *     piiStorageProvider: new InMemoryPIIStorageProvider(),
+ *   },
+ * );
+ *
+ * // PII is now automatically anonymized/rehydrated
+ * const response = await openai.chat.completions.create({ ... });
+ * ```
+ *
+ * @example
+ * ```typescript
+ * import Anthropic from '@anthropic-ai/sdk';
+ * import { wrapLLMClient, ConfigKeyProvider, SQLitePIIStorageProvider } from 'rehydra';
+ *
+ * const anthropic = wrapLLMClient(
+ *   new Anthropic(),
+ *   {
+ *     keyProvider: new ConfigKeyProvider(process.env.PII_KEY!),
+ *     piiStorageProvider: new SQLitePIIStorageProvider('pii.db'),
+ *   },
+ * );
+ *
+ * const message = await anthropic.messages.create({ ... });
+ * ```
+ */
+export declare function wrapLLMClient<T>(client: T, config: Omit<RehydraFetchConfig, "provider">): T;
+//# sourceMappingURL=wrap-client.d.ts.map

package/dist/proxy/wrap-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-client.d.ts","sourceRoot":"","sources":["../../src/proxy/wrap-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAC7B,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAC,GAC3C,CAAC,CAwBH"}

package/dist/proxy/wrap-client.js

@@ -0,0 +1,70 @@
+/**
+ * LLM Client Wrapper
+ * Convenience function to wrap OpenAI/Anthropic SDK clients
+ * with automatic PII anonymization and rehydration.
+ */
+import { createRehydraFetch } from "./rehydra-fetch.js";
+/**
+ * Wraps an LLM client (OpenAI, Anthropic, or any SDK that accepts a custom fetch)
+ * to automatically anonymize outgoing PII and rehydrate responses.
+ *
+ * Works by replacing the client's internal fetch with a Rehydra-wrapped version.
+ *
+ * @example
+ * ```typescript
+ * import OpenAI from 'openai';
+ * import { wrapLLMClient, InMemoryKeyProvider, InMemoryPIIStorageProvider } from 'rehydra';
+ *
+ * const openai = wrapLLMClient(
+ *   new OpenAI(),
+ *   {
+ *     keyProvider: new InMemoryKeyProvider(),
+ *     piiStorageProvider: new InMemoryPIIStorageProvider(),
+ *   },
+ * );
+ *
+ * // PII is now automatically anonymized/rehydrated
+ * const response = await openai.chat.completions.create({ ... });
+ * ```
+ *
+ * @example
+ * ```typescript
+ * import Anthropic from '@anthropic-ai/sdk';
+ * import { wrapLLMClient, ConfigKeyProvider, SQLitePIIStorageProvider } from 'rehydra';
+ *
+ * const anthropic = wrapLLMClient(
+ *   new Anthropic(),
+ *   {
+ *     keyProvider: new ConfigKeyProvider(process.env.PII_KEY!),
+ *     piiStorageProvider: new SQLitePIIStorageProvider('pii.db'),
+ *   },
+ * );
+ *
+ * const message = await anthropic.messages.create({ ... });
+ * ```
+ */
+export function wrapLLMClient(client, config) {
+    const rehydraFetch = createRehydraFetch({
+        ...config,
+        provider: "auto",
+    });
+    // Both OpenAI and Anthropic SDKs store fetch as a property.
+    // OpenAI uses `_fetch`, Anthropic uses `fetch`.
+    // We try both, and also support any client with a `fetch` property.
+    const clientObj = client;
+    if ("_fetch" in clientObj) {
+        // OpenAI SDK pattern
+        clientObj._fetch = rehydraFetch;
+    }
+    else if ("fetch" in clientObj) {
+        // Anthropic SDK pattern (or generic)
+        clientObj.fetch = rehydraFetch;
+    }
+    else {
+        // Fallback: set both common patterns
+        clientObj._fetch = rehydraFetch;
+        clientObj.fetch = rehydraFetch;
+    }
+    return client;
+}
+//# sourceMappingURL=wrap-client.js.map

package/dist/proxy/wrap-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-client.js","sourceRoot":"","sources":["../../src/proxy/wrap-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAS,EACT,MAA4C;IAE5C,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,GAAG,MAAM;QACT,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IAEH,4DAA4D;IAC5D,gDAAgD;IAChD,oEAAoE;IACpE,MAAM,SAAS,GAAG,MAAiC,CAAC;IAEpD,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;QAC1B,qBAAqB;QACrB,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC;IAClC,CAAC;SAAM,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,qCAAqC;QACrC,SAAS,CAAC,KAAK,GAAG,YAAY,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,qCAAqC;QACrC,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC;QAChC,SAAS,CAAC,KAAK,GAAG,YAAY,CAAC;IACjC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/recognizers/address.d.ts

@@ -0,0 +1,2 @@
+export declare const streetAddressRecognizer: import("./base.js").Recognizer;
+//# sourceMappingURL=address.d.ts.map

package/dist/recognizers/address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.d.ts","sourceRoot":"","sources":["../../src/recognizers/address.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,uBAAuB,gCAOlC,CAAC"}

package/dist/recognizers/address.js

@@ -0,0 +1,23 @@
+/** Conservative detection of numbered, English-language street addresses. */
+import { PIIType } from '../types/index.js';
+import { createRegexRecognizer } from './base.js';
+import { UK_POSTAL_CODE_PATTERN } from './postal-code.js';
+const NUMBER = String.raw `[0-9]{1,5}[a-z]?(?:[-/][0-9]{1,5}[a-z]?)?`;
+const WORD = String.raw `[\p{L}][\p{L}.'’\-]*`;
+const STREET = String.raw `${NUMBER}[\t ]+(?:${WORD}[\t ]+){1,6}(?:Road|Rd|Street|St|Avenue|Ave|Lane|Ln|Drive|Dr|Close|Court|Ct|Crescent|Way|Place|Pl|Terrace|Gardens|Grove|Square|Sq|Mews|Row|Hill|Park|Walk|Rise|Green)\b`;
+// An apartment number alone is ambiguous. Require an adjacent numbered street.
+const UNIT = String.raw `(?:(?:Flat|Apartment|Apt|Unit|Suite)[\t ]+${NUMBER}[\t ]*(?:,[\t ]*|\r?\n[\t ]*|[\t ]+))?`;
+// Include locality lines only when a UK postcode terminates the address block.
+// Bounded line/word counts keep prose and separate paragraphs out of the match.
+const LOCALITY = String.raw `(?:${WORD}[\t ]+){0,4}${WORD}`;
+const SEPARATOR = String.raw `[\t ]*(?:,[\t ]*|\r?\n[\t ]*)`;
+const POSTAL_TAIL = String.raw `(?:${SEPARATOR}(?:${LOCALITY}${SEPARATOR}){0,3}${UK_POSTAL_CODE_PATTERN.source})?`;
+export const streetAddressRecognizer = createRegexRecognizer({
+    type: PIIType.ADDRESS,
+    name: 'Numbered Street Address',
+    patterns: [new RegExp(String.raw `(?<![\p{L}\p{N}])${UNIT}${STREET}${POSTAL_TAIL}`, 'giu')],
+    defaultConfidence: 0.95,
+    // Travel directions describe distances rather than a street number.
+    validate: (text) => !/^[0-9]+[\t ]+(?:steps?|miles?|metres?|meters?|kilometres?|kilometers?|blocks?)[\t ]/i.test(text),
+});
+//# sourceMappingURL=address.js.map

package/dist/recognizers/address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../../src/recognizers/address.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAClD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAA,2CAA2C,CAAC;AACrE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAA,sBAAsB,CAAC;AAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAA,GAAG,MAAM,YAAY,IAAI,yKAAyK,CAAC;AAC5N,+EAA+E;AAC/E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAA,6CAA6C,MAAM,wCAAwC,CAAC;AACnH,+EAA+E;AAC/E,gFAAgF;AAChF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA,MAAM,IAAI,eAAe,IAAI,EAAE,CAAC;AAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAA,+BAA+B,CAAC;AAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAA,MAAM,SAAS,MAAM,QAAQ,GAAG,SAAS,SAAS,sBAAsB,CAAC,MAAM,IAAI,CAAC;AAElH,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;IAC3D,IAAI,EAAE,OAAO,CAAC,OAAO;IACrB,IAAI,EAAE,yBAAyB;IAC/B,QAAQ,EAAE,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAA,oBAAoB,IAAI,GAAG,MAAM,GAAG,WAAW,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1F,iBAAiB,EAAE,IAAI;IACvB,oEAAoE;IACpE,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,sFAAsF,CAAC,IAAI,CAAC,IAAI,CAAC;CACvH,CAAC,CAAC"}

package/dist/recognizers/base.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Base Recognizer Interface
+ * Defines the contract for all PII recognizers (regex-based)
+ */
+import { PIIType, SpanMatch } from '../types/index.js';
+/**
+ * Base interface for all PII recognizers
+ */
+export interface Recognizer {
+    /** The PII type this recognizer detects */
+    readonly type: PIIType;
+    /** Human-readable name for logging/debugging */
+    readonly name: string;
+    /** Default confidence score for matches (0.0 to 1.0) */
+    readonly defaultConfidence: number;
+    /**
+     * Finds all matches of this PII type in the given text
+     * @param text - The text to search
+     * @returns Array of span matches
+     */
+    find(text: string): SpanMatch[];
+    /**
+     * Optional validation of a match (e.g., checksum validation)
+     * @param match - The matched text
+     * @returns true if the match is valid
+     */
+    validate?(match: string): boolean;
+    /**
+     * Optional normalization of a match for storage
+     * @param match - The matched text
+     * @returns Normalized version of the match
+     */
+    normalize?(match: string): string;
+}
+/**
+ * Base class for regex-based recognizers
+ */
+export declare abstract class RegexRecognizer implements Recognizer {
+    abstract readonly type: PIIType;
+    abstract readonly name: string;
+    readonly defaultConfidence: number;
+    /** Compiled regex pattern(s) for matching */
+    protected abstract readonly patterns: RegExp[];
+    /**
+     * Finds all matches using the configured patterns
+     */
+    find(text: string): SpanMatch[];
+    /**
+     * Removes duplicate matches (same span matched by multiple patterns)
+     */
+    protected deduplicateMatches(matches: SpanMatch[]): SpanMatch[];
+    /**
+     * Default validation (always passes)
+     * Override in subclasses for checksum validation etc.
+     */
+    validate?(match: string): boolean;
+    /**
+     * Default normalization (returns as-is)
+     * Override in subclasses for specific normalization
+     */
+    normalize?(match: string): string;
+}
+/**
+ * Configuration for a regex recognizer created from patterns
+ */
+export interface RegexRecognizerConfig {
+    type: PIIType;
+    name: string;
+    patterns: RegExp[];
+    defaultConfidence?: number;
+    validate?: (match: string) => boolean;
+    normalize?: (match: string) => string;
+}
+/**
+ * Creates a simple regex recognizer from configuration
+ */
+export declare function createRegexRecognizer(config: RegexRecognizerConfig): Recognizer;
+//# sourceMappingURL=base.d.ts.map

package/dist/recognizers/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../src/recognizers/base.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AAExE;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,2CAA2C;IAC3C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAEvB,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,wDAAwD;IACxD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IAEnC;;;;OAIG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,CAAC;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAElC;;;;OAIG;IACH,SAAS,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED;;GAEG;AACH,8BAAsB,eAAgB,YAAW,UAAU;IACzD,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAQ;IAE1C,6CAA6C;IAC7C,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAE/C;;OAEG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE;IAiC/B;;OAEG;IACH,SAAS,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,SAAS,EAAE;IAe/D;;;OAGG;IACH,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAEjC;;;OAGG;IACH,SAAS,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CACvC;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,UAAU,CA8C/E"}

package/dist/recognizers/base.js

@@ -0,0 +1,100 @@
+/**
+ * Base Recognizer Interface
+ * Defines the contract for all PII recognizers (regex-based)
+ */
+import { DetectionSource } from '../types/index.js';
+/**
+ * Base class for regex-based recognizers
+ */
+export class RegexRecognizer {
+    defaultConfidence = 0.95;
+    /**
+     * Finds all matches using the configured patterns
+     */
+    find(text) {
+        const matches = [];
+        for (const pattern of this.patterns) {
+            // Ensure pattern has global flag for matchAll
+            const globalPattern = pattern.global
+                ? pattern
+                : new RegExp(pattern.source, pattern.flags + 'g');
+            for (const match of text.matchAll(globalPattern)) {
+                if (match.index === undefined)
+                    continue;
+                const matchText = match[0];
+                // Skip if validation fails
+                if (this.validate !== undefined && !this.validate(matchText)) {
+                    continue;
+                }
+                matches.push({
+                    type: this.type,
+                    start: match.index,
+                    end: match.index + matchText.length,
+                    confidence: this.defaultConfidence,
+                    source: DetectionSource.REGEX,
+                    text: matchText,
+                });
+            }
+        }
+        return this.deduplicateMatches(matches);
+    }
+    /**
+     * Removes duplicate matches (same span matched by multiple patterns)
+     */
+    deduplicateMatches(matches) {
+        const seen = new Set();
+        const unique = [];
+        for (const match of matches) {
+            const key = `${match.start}:${match.end}`;
+            if (!seen.has(key)) {
+                seen.add(key);
+                unique.push(match);
+            }
+        }
+        return unique;
+    }
+}
+/**
+ * Creates a simple regex recognizer from configuration
+ */
+export function createRegexRecognizer(config) {
+    return {
+        type: config.type,
+        name: config.name,
+        defaultConfidence: config.defaultConfidence ?? 0.95,
+        find(text) {
+            const matches = [];
+            const seen = new Set();
+            for (const pattern of config.patterns) {
+                const globalPattern = pattern.global
+                    ? pattern
+                    : new RegExp(pattern.source, pattern.flags + 'g');
+                for (const match of text.matchAll(globalPattern)) {
+                    if (match.index === undefined)
+                        continue;
+                    const matchText = match[0];
+                    const key = `${match.index}:${match.index + matchText.length}`;
+                    if (seen.has(key))
+                        continue;
+                    // Skip if validation fails
+                    if (config.validate !== undefined && !config.validate(matchText)) {
+                        continue;
+                    }
+                    seen.add(key);
+                    matches.push({
+                        type: config.type,
+                        start: match.index,
+                        end: match.index + matchText.length,
+                        confidence: config.defaultConfidence ?? 0.95,
+                        source: DetectionSource.REGEX,
+                        text: matchText,
+                    });
+                }
+            }
+            return matches;
+        },
+        validate: config.validate,
+        normalize: config.normalize,
+    };
+}
+//# sourceMappingURL=base.js.map

package/dist/recognizers/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../src/recognizers/base.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAsB,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAqCxE;;GAEG;AACH,MAAM,OAAgB,eAAe;IAG1B,iBAAiB,GAAW,IAAI,CAAC;IAK1C;;OAEG;IACH,IAAI,CAAC,IAAY;QACf,MAAM,OAAO,GAAgB,EAAE,CAAC;QAEhC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,8CAA8C;YAC9C,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM;gBAClC,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YAEpD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACjD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;oBAAE,SAAS;gBAExC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAE3B,2BAA2B;gBAC3B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC7D,SAAS;gBACX,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM;oBACnC,UAAU,EAAE,IAAI,CAAC,iBAAiB;oBAClC,MAAM,EAAE,eAAe,CAAC,KAAK;oBAC7B,IAAI,EAAE,SAAS;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACO,kBAAkB,CAAC,OAAoB;QAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAAgB,EAAE,CAAC;QAE/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;YAC1C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CAaF;AAcD;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;QAEnD,IAAI,CAAC,IAAY;YACf,MAAM,OAAO,GAAgB,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;YAE/B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACtC,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM;oBAClC,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;gBAEpD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;oBACjD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;wBAAE,SAAS;oBAExC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAC3B,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;oBAE/D,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;wBAAE,SAAS;oBAE5B,2BAA2B;oBAC3B,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBACjE,SAAS;oBACX,CAAC;oBAED,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC;wBACX,IAAI,EAAE,MAAM,CAAC,IAAI;wBACjB,KAAK,EAAE,KAAK,CAAC,KAAK;wBAClB,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,MAAM;wBACnC,UAAU,EAAE,MAAM,CAAC,iBAAiB,IAAI,IAAI;wBAC5C,MAAM,EAAE,eAAe,CAAC,KAAK;wBAC7B,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC"}

package/dist/recognizers/bic-swift.d.ts

@@ -0,0 +1,10 @@
+/**
+ * BIC/SWIFT Code Recognizer
+ * Bank Identifier Code (ISO 9362)
+ */
+import type { Recognizer } from './base.js';
+/**
+ * BIC/SWIFT code recognizer
+ */
+export declare const bicSwiftRecognizer: Recognizer;
+//# sourceMappingURL=bic-swift.d.ts.map

package/dist/recognizers/bic-swift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bic-swift.d.ts","sourceRoot":"","sources":["../../src/recognizers/bic-swift.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AA2C5C;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,UAsEhC,CAAC"}

package/dist/recognizers/bic-swift.js

@@ -0,0 +1,107 @@
+/**
+ * BIC/SWIFT Code Recognizer
+ * Bank Identifier Code (ISO 9362)
+ */
+import { PIIType, DetectionSource } from '../types/index.js';
+/**
+ * BIC/SWIFT code pattern
+ * Format: AAAA BB CC DDD (8 or 11 characters)
+ * - AAAA: Bank code (4 letters)
+ * - BB: Country code (2 letters, ISO 3166-1)
+ * - CC: Location code (2 alphanumeric)
+ * - DDD: Branch code (3 alphanumeric, optional)
+ */
+const BIC_PATTERN = /\b[A-Z]{4}[A-Z]{2}[A-Z0-9]{2}(?:[A-Z0-9]{3})?\b/g;
+/**
+ * Valid ISO 3166-1 alpha-2 country codes (common subset)
+ */
+const VALID_COUNTRY_CODES = new Set([
+    'AD', 'AE', 'AF', 'AG', 'AI', 'AL', 'AM', 'AO', 'AR', 'AS', 'AT', 'AU', 'AW', 'AZ',
+    'BA', 'BB', 'BD', 'BE', 'BF', 'BG', 'BH', 'BI', 'BJ', 'BM', 'BN', 'BO', 'BR', 'BS', 'BT', 'BW', 'BY', 'BZ',
+    'CA', 'CD', 'CF', 'CG', 'CH', 'CI', 'CK', 'CL', 'CM', 'CN', 'CO', 'CR', 'CU', 'CV', 'CY', 'CZ',
+    'DE', 'DJ', 'DK', 'DM', 'DO', 'DZ',
+    'EC', 'EE', 'EG', 'ER', 'ES', 'ET',
+    'FI', 'FJ', 'FK', 'FM', 'FO', 'FR',
+    'GA', 'GB', 'GD', 'GE', 'GF', 'GH', 'GI', 'GL', 'GM', 'GN', 'GP', 'GQ', 'GR', 'GT', 'GU', 'GW', 'GY',
+    'HK', 'HN', 'HR', 'HT', 'HU',
+    'ID', 'IE', 'IL', 'IN', 'IQ', 'IR', 'IS', 'IT',
+    'JM', 'JO', 'JP',
+    'KE', 'KG', 'KH', 'KI', 'KM', 'KN', 'KP', 'KR', 'KW', 'KY', 'KZ',
+    'LA', 'LB', 'LC', 'LI', 'LK', 'LR', 'LS', 'LT', 'LU', 'LV', 'LY',
+    'MA', 'MC', 'MD', 'ME', 'MG', 'MH', 'MK', 'ML', 'MM', 'MN', 'MO', 'MP', 'MQ', 'MR', 'MS', 'MT', 'MU', 'MV', 'MW', 'MX', 'MY', 'MZ',
+    'NA', 'NC', 'NE', 'NF', 'NG', 'NI', 'NL', 'NO', 'NP', 'NR', 'NU', 'NZ',
+    'OM',
+    'PA', 'PE', 'PF', 'PG', 'PH', 'PK', 'PL', 'PM', 'PN', 'PR', 'PS', 'PT', 'PW', 'PY',
+    'QA',
+    'RE', 'RO', 'RS', 'RU', 'RW',
+    'SA', 'SB', 'SC', 'SD', 'SE', 'SG', 'SH', 'SI', 'SK', 'SL', 'SM', 'SN', 'SO', 'SR', 'SS', 'ST', 'SV', 'SY', 'SZ',
+    'TC', 'TD', 'TF', 'TG', 'TH', 'TJ', 'TK', 'TL', 'TM', 'TN', 'TO', 'TR', 'TT', 'TV', 'TW', 'TZ',
+    'UA', 'UG', 'US', 'UY', 'UZ',
+    'VA', 'VC', 'VE', 'VG', 'VI', 'VN', 'VU',
+    'WF', 'WS',
+    'YE', 'YT',
+    'ZA', 'ZM', 'ZW',
+]);
+/**
+ * BIC/SWIFT code recognizer
+ */
+export const bicSwiftRecognizer = {
+    type: PIIType.BIC_SWIFT,
+    name: 'BIC/SWIFT Code',
+    defaultConfidence: 0.95,
+    find(text) {
+        const matches = [];
+        const pattern = new RegExp(BIC_PATTERN.source, 'g');
+        for (const match of text.matchAll(pattern)) {
+            if (match.index === undefined)
+                continue;
+            const bic = match[0];
+            // Validate the BIC code
+            if (!this.validate(bic))
+                continue;
+            matches.push({
+                type: PIIType.BIC_SWIFT,
+                start: match.index,
+                end: match.index + bic.length,
+                confidence: this.defaultConfidence,
+                source: DetectionSource.REGEX,
+                text: bic,
+            });
+        }
+        return matches;
+    },
+    validate(bic) {
+        const normalized = bic.toUpperCase();
+        // Check length (8 or 11 characters)
+        if (normalized.length !== 8 && normalized.length !== 11) {
+            return false;
+        }
+        // Extract and validate country code (characters 5-6)
+        const countryCode = normalized.slice(4, 6);
+        if (!VALID_COUNTRY_CODES.has(countryCode)) {
+            return false;
+        }
+        // Bank code should be letters only
+        const bankCode = normalized.slice(0, 4);
+        if (!/^[A-Z]{4}$/.test(bankCode)) {
+            return false;
+        }
+        // Location code should be alphanumeric
+        const locationCode = normalized.slice(6, 8);
+        if (!/^[A-Z0-9]{2}$/.test(locationCode)) {
+            return false;
+        }
+        // Branch code (if present) should be alphanumeric
+        if (normalized.length === 11) {
+            const branchCode = normalized.slice(8, 11);
+            if (!/^[A-Z0-9]{3}$/.test(branchCode)) {
+                return false;
+            }
+        }
+        return true;
+    },
+    normalize(bic) {
+        return bic.toUpperCase().trim();
+    },
+};
+//# sourceMappingURL=bic-swift.js.map

package/dist/recognizers/bic-swift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bic-swift.js","sourceRoot":"","sources":["../../src/recognizers/bic-swift.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAa,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGxE;;;;;;;GAOG;AACH,MAAM,WAAW,GAAG,kDAAkD,CAAC;AAEvE;;GAEG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAClF,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC1G,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9F,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAClC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAClC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAClC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IACpG,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC5B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9C,IAAI,EAAE,IAAI,EAAE,IAAI;IAChB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAChE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAChE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAClI,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IACtE,IAAI;IACJ,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAClF,IAAI;IACJ,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC5B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAChH,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC9F,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IAC5B,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;IACxC,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI,EAAE,IAAI;CACjB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAe;IAC5C,IAAI,EAAE,OAAO,CAAC,SAAS;IACvB,IAAI,EAAE,gBAAgB;IACtB,iBAAiB,EAAE,IAAI;IAEvB,IAAI,CAAC,IAAY;QACf,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAEpD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,SAAS;YAExC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAErB,wBAAwB;YACxB,IAAI,CAAC,IAAI,CAAC,QAAS,CAAC,GAAG,CAAC;gBAAE,SAAS;YAEnC,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,OAAO,CAAC,SAAS;gBACvB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,GAAG,EAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM;gBAC7B,UAAU,EAAE,IAAI,CAAC,iBAAiB;gBAClC,MAAM,EAAE,eAAe,CAAC,KAAK;gBAC7B,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAErC,oCAAoC;QACpC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACxD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qDAAqD;QACrD,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,mCAAmC;QACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,uCAAuC;QACvC,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,kDAAkD;QAClD,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;CACF,CAAC"}