palaryn 0.5.7 → 0.6.0

package/dist/src/dlp/navigation-instruction-backend.js

@@ -0,0 +1,286 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NavigationInstructionBackend = void 0;
+/**
+ * DLP backend that detects navigation instructions embedded in response content.
+ *
+ * Addresses the "nested page" attack vector: an agent opens allowed page ABC,
+ * which contains instructions (HTML redirects, JS navigation, explicit text
+ * commands) to open page XYZ. Even though XYZ may pass policy independently,
+ * the agent was *tricked* into requesting it by embedded content.
+ *
+ * Detection categories (all patterns use /gi flags):
+ *
+ *   1. HTML meta-refresh redirects           (high)
+ *   2. JavaScript navigation assignments     (high)
+ *   3. JavaScript navigation function calls  (high)
+ *   4. HTML embedding tags (iframe, frame, object, embed)  (medium)
+ *   5. HTML base tag hijacking               (high)
+ *   6. Auto-submitting forms                 (high)
+ *   7. JS fetch / XHR / sendBeacon           (medium)
+ *   8. WebSocket / EventSource connections   (medium)
+ *   9. Service Worker / dynamic import       (high)
+ *  10. Data URI with HTML content            (high)
+ *  11. Explicit textual navigation commands  (medium)
+ *
+ * Pattern names are prefixed with `navigation_instruction_` for namespacing.
+ *
+ * **False-positive mitigation**: Patterns are designed to match *executable*
+ * navigation directives, not passive hyperlinks (<a href>), CSS url() for
+ * stylesheets, or <link rel="stylesheet">. Documentation containing code
+ * examples may trigger medium-severity detections, which can be filtered
+ * by the `navigation_instruction_action` config setting.
+ */
+// ---------------------------------------------------------------------------
+// Category 1: HTML meta-refresh redirects (high)
+// Matches: <meta http-equiv="refresh" content="0;url=https://evil.com">
+// Also handles: content="5; URL=..." with optional spaces and quoting
+// ---------------------------------------------------------------------------
+const META_REFRESH = {
+    name: 'navigation_instruction_meta_refresh',
+    pattern: /<meta\s[^>]*http-equiv\s*=\s*["']?\s*refresh\s*["']?\s[^>]*content\s*=\s*["']?\s*\d+\s*[;,]\s*url\s*=\s*[^"'\s>]+/gi,
+    severity: 'high',
+};
+// ---------------------------------------------------------------------------
+// Category 2: JavaScript navigation assignments (high)
+// Matches: window.location = "...", window.location.href = "...",
+//          document.location = "...", document.location.href = "...",
+//          location.href = "...", self.location = "..."
+// Captures both assignment (=) and property set patterns.
+// ---------------------------------------------------------------------------
+const JS_LOCATION_ASSIGN = {
+    name: 'navigation_instruction_js_redirect',
+    pattern: /(?:window|document|self|top|parent)?\s*\.?\s*location\s*(?:\.(?:href|replace|assign))?\s*=\s*["'`][^"'`]{1,2000}["'`]/gi,
+    severity: 'high',
+};
+// ---------------------------------------------------------------------------
+// Category 3: JavaScript navigation function calls (high)
+// Matches: window.location.replace("..."), window.location.assign("..."),
+//          window.open("..."), location.replace("...")
+// ---------------------------------------------------------------------------
+const JS_LOCATION_FUNC = {
+    name: 'navigation_instruction_js_navigate_call',
+    pattern: /(?:window|document|self|top|parent)?\s*\.?\s*(?:location\s*\.\s*(?:replace|assign)|open)\s*\(\s*["'`][^"'`]{1,2000}["'`]/gi,
+    severity: 'high',
+};
+// ---------------------------------------------------------------------------
+// Category 4: HTML embedding tags (medium)
+// Matches: <iframe src="...">, <frame src="...">, <object data="...">,
+//          <embed src="...">
+// These load external content automatically and can be used to redirect
+// or exfiltrate data. Severity is medium because iframes are common in
+// legitimate HTML responses.
+// ---------------------------------------------------------------------------
+const HTML_IFRAME = {
+    name: 'navigation_instruction_html_embed',
+    pattern: /<(?:iframe|frame)\s[^>]*src\s*=\s*["']?\s*https?:\/\/[^"'\s>]+/gi,
+    severity: 'medium',
+};
+const HTML_OBJECT_EMBED = {
+    name: 'navigation_instruction_html_object',
+    pattern: /<(?:object\s[^>]*data|embed\s[^>]*src)\s*=\s*["']?\s*https?:\/\/[^"'\s>]+/gi,
+    severity: 'medium',
+};
+// ---------------------------------------------------------------------------
+// Category 5: HTML base tag hijacking (high)
+// Matches: <base href="https://attacker.com">
+// Silently rewrites all relative URLs in the page to point to attacker domain.
+// ---------------------------------------------------------------------------
+const HTML_BASE_HIJACK = {
+    name: 'navigation_instruction_base_hijack',
+    pattern: /<base\s[^>]*href\s*=\s*["']?\s*https?:\/\/[^"'\s>]+/gi,
+    severity: 'high',
+};
+// ---------------------------------------------------------------------------
+// Category 6: Auto-submitting forms (high)
+// Matches: <form ... with a nearby .submit() call — common CSRF/redirect pattern.
+// Two-part detection: form with action + submit() in close proximity.
+// ---------------------------------------------------------------------------
+const AUTO_SUBMIT_FORM = {
+    name: 'navigation_instruction_auto_form_submit',
+    pattern: /<form\s[^>]*action\s*=\s*["']?https?:\/\/[^"'\s>]+[^]*?\.submit\s*\(\s*\)/gi,
+    severity: 'high',
+};
+// ---------------------------------------------------------------------------
+// Category 7: JS fetch / XHR / sendBeacon (medium)
+// Matches: fetch("https://..."), new XMLHttpRequest() ... .open("GET","https://..."),
+//          navigator.sendBeacon("https://...")
+// Medium severity: these are very common in legitimate web pages.
+// ---------------------------------------------------------------------------
+const JS_FETCH = {
+    name: 'navigation_instruction_js_fetch',
+    pattern: /(?:fetch|navigator\s*\.\s*sendBeacon)\s*\(\s*["'`]https?:\/\/[^"'`]{1,2000}["'`]/gi,
+    severity: 'medium',
+};
+// ---------------------------------------------------------------------------
+// Category 8: WebSocket / EventSource connections (medium)
+// Matches: new WebSocket("wss://..."), new EventSource("https://...")
+// ---------------------------------------------------------------------------
+const JS_WEBSOCKET = {
+    name: 'navigation_instruction_websocket',
+    pattern: /new\s+(?:WebSocket|EventSource)\s*\(\s*["'`](?:wss?|https?):\/\/[^"'`]{1,2000}["'`]/gi,
+    severity: 'medium',
+};
+// ---------------------------------------------------------------------------
+// Category 9: Service Worker / dynamic import (high)
+// Matches: navigator.serviceWorker.register("..."), import("https://...")
+// High severity: service workers can intercept all subsequent requests.
+// ---------------------------------------------------------------------------
+const JS_SERVICE_WORKER = {
+    name: 'navigation_instruction_service_worker',
+    pattern: /navigator\s*\.\s*serviceWorker\s*\.\s*register\s*\(\s*["'`][^"'`]{1,2000}["'`]/gi,
+    severity: 'high',
+};
+const JS_DYNAMIC_IMPORT = {
+    name: 'navigation_instruction_dynamic_import',
+    pattern: /import\s*\(\s*["'`]https?:\/\/[^"'`]{1,2000}["'`]\s*\)/gi,
+    severity: 'high',
+};
+// ---------------------------------------------------------------------------
+// Category 10: Data URI with active content (high)
+// Matches: data:text/html, data:image/svg+xml, data:application/javascript,
+//          data:text/javascript, data:text/xml, data:application/xml
+// All can contain executable content (scripts, redirects, event handlers).
+// Note: The text-normalizer already decodes base64 data URIs, but this
+// pattern catches them at the structural level before normalization.
+// ---------------------------------------------------------------------------
+const DATA_URI_ACTIVE = {
+    name: 'navigation_instruction_data_uri',
+    pattern: /data:(?:text\/html|image\/svg\+xml|application\/javascript|text\/javascript|text\/xml|application\/xml)[^"'\s)>]{0,2000}/gi,
+    severity: 'high',
+};
+// Backward-compatible alias for tests referencing the old name
+const DATA_URI_HTML = DATA_URI_ACTIVE;
+// ---------------------------------------------------------------------------
+// Category 11: Explicit textual navigation commands (medium)
+// Matches: "visit https://...", "navigate to https://...", "open https://...",
+//          "go to https://...", "browse to https://...", "fetch https://..."
+// Medium severity: may appear in legitimate documentation or instructions.
+// Only matches when followed by an actual URL to reduce false positives.
+// ---------------------------------------------------------------------------
+const EXPLICIT_NAVIGATE_TEXT = {
+    name: 'navigation_instruction_explicit_text',
+    pattern: /(?:visit|navigate\s+to|open|go\s+to|browse\s+to|fetch|request|call|access|load)\s+(?:the\s+(?:url|page|link|endpoint|site)\s+)?(?:at\s+)?["']?https?:\/\/[^\s"'<>]{4,500}/gi,
+    severity: 'medium',
+};
+// ---------------------------------------------------------------------------
+// Category 12: SVG with embedded script (high)
+// SVG files are XML and can contain <script> tags with full JS execution.
+// This is one of the most dangerous image-based attack vectors because
+// SVGs are often treated as "images" but carry executable code.
+// ---------------------------------------------------------------------------
+const SVG_SCRIPT = {
+    name: 'navigation_instruction_svg_script',
+    pattern: /<svg\b[^>]*>[^]*?<script\b[^>]*>[^]*?<\/script>/gi,
+    severity: 'high',
+};
+// ---------------------------------------------------------------------------
+// Category 13: SVG event handlers (high)
+// SVG elements support JavaScript event handlers like onload, onerror.
+// <svg onload="malicious()"> executes immediately when the SVG loads.
+// ---------------------------------------------------------------------------
+const SVG_EVENT_HANDLER = {
+    name: 'navigation_instruction_svg_event_handler',
+    pattern: /<svg\b[^>]*\son(?:load|error|click|mouseover|focus|blur)\s*=\s*["'][^"']*["']/gi,
+    severity: 'high',
+};
+// ---------------------------------------------------------------------------
+// Category 14: SVG foreignObject (high)
+// <foreignObject> embeds arbitrary HTML/XHTML inside SVG, including forms,
+// scripts, iframes — essentially a full HTML injection point within an "image".
+// ---------------------------------------------------------------------------
+const SVG_FOREIGN_OBJECT = {
+    name: 'navigation_instruction_svg_foreign_object',
+    pattern: /<foreignObject\b[^>]*>[^]*?<\/foreignObject>/gi,
+    severity: 'high',
+};
+// ---------------------------------------------------------------------------
+// Category 15: HTML event handlers in any tag (high)
+// Catches event handlers (onload, onerror, etc.) on any HTML element,
+// not just SVG. These auto-execute JavaScript without user interaction.
+// ---------------------------------------------------------------------------
+const HTML_EVENT_HANDLER = {
+    name: 'navigation_instruction_html_event_handler',
+    pattern: /<[a-z][a-z0-9]*\s[^>]*?on(?:load|error|click|mouseover|focus|blur|mouseenter|submit|change|input)\s*=\s*["'][^"']*["']/gi,
+    severity: 'high',
+};
+// ---------------------------------------------------------------------------
+// All patterns collected for iteration
+// ---------------------------------------------------------------------------
+const NAVIGATION_PATTERNS = [
+    META_REFRESH,
+    JS_LOCATION_ASSIGN,
+    JS_LOCATION_FUNC,
+    HTML_IFRAME,
+    HTML_OBJECT_EMBED,
+    HTML_BASE_HIJACK,
+    AUTO_SUBMIT_FORM,
+    JS_FETCH,
+    JS_WEBSOCKET,
+    JS_SERVICE_WORKER,
+    JS_DYNAMIC_IMPORT,
+    DATA_URI_ACTIVE,
+    SVG_SCRIPT,
+    SVG_EVENT_HANDLER,
+    SVG_FOREIGN_OBJECT,
+    HTML_EVENT_HANDLER,
+    EXPLICIT_NAVIGATE_TEXT,
+];
+/**
+ * Extract target URLs from a navigation instruction match.
+ * Returns the first URL found in the matched string, or null.
+ */
+function extractTargetUrl(match) {
+    // Try to extract URL from common patterns
+    const urlPatterns = [
+        /url\s*=\s*["']?([^"'\s;>]+)/i, // meta-refresh url=...
+        /=\s*["'`](https?:\/\/[^"'`]+)["'`]/i, // assignment = "https://..."
+        /\(\s*["'`](https?:\/\/[^"'`]+)["'`]/i, // function call("https://...")
+        /(?:src|data|href|action)\s*=\s*["']?(https?:\/\/[^"'\s>]+)/i, // HTML attributes
+        /(https?:\/\/[^\s"'<>]+)/i, // bare URL fallback
+        /((?:wss?):\/\/[^\s"'<>]+)/i, // WebSocket URL
+        /(data:text\/html[^\s"'<>)]*)/i, // data URI
+    ];
+    for (const urlPat of urlPatterns) {
+        const m = urlPat.exec(match);
+        if (m && m[1]) {
+            return m[1];
+        }
+    }
+    return null;
+}
+class NavigationInstructionBackend {
+    constructor() {
+        this.name = 'navigation_instruction';
+    }
+    scanString(value) {
+        const detections = [];
+        // Skip very short strings — no meaningful navigation instructions possible
+        if (value.length < 15)
+            return detections;
+        for (const pat of NAVIGATION_PATTERNS) {
+            pat.pattern.lastIndex = 0;
+            let m;
+            while ((m = pat.pattern.exec(value)) !== null) {
+                const targetUrl = extractTargetUrl(m[0]);
+                detections.push({
+                    pattern_name: pat.name,
+                    severity: pat.severity,
+                    match: m[0].slice(0, 500), // Truncate long matches for logging
+                    start: m.index,
+                    end: m.index + m[0].length,
+                    ...(targetUrl ? { target_url: targetUrl } : {}),
+                });
+                // Guard against zero-length matches causing infinite loops
+                if (m[0].length === 0) {
+                    pat.pattern.lastIndex++;
+                }
+            }
+            // Reset lastIndex for stateful /g regex reuse
+            pat.pattern.lastIndex = 0;
+        }
+        return detections;
+    }
+}
+exports.NavigationInstructionBackend = NavigationInstructionBackend;
+//# sourceMappingURL=navigation-instruction-backend.js.map

package/dist/src/dlp/navigation-instruction-backend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"navigation-instruction-backend.js","sourceRoot":"","sources":["../../../src/dlp/navigation-instruction-backend.ts"],"names":[],"mappings":";;;AAIA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,8EAA8E;AAC9E,iDAAiD;AACjD,wEAAwE;AACxE,sEAAsE;AACtE,8EAA8E;AAC9E,MAAM,YAAY,GAAe;IAC/B,IAAI,EAAE,qCAAqC;IAC3C,OAAO,EAAE,qHAAqH;IAC9H,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,8EAA8E;AAC9E,uDAAuD;AACvD,kEAAkE;AAClE,sEAAsE;AACtE,wDAAwD;AACxD,0DAA0D;AAC1D,8EAA8E;AAC9E,MAAM,kBAAkB,GAAe;IACrC,IAAI,EAAE,oCAAoC;IAC1C,OAAO,EAAE,yHAAyH;IAClI,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,8EAA8E;AAC9E,0DAA0D;AAC1D,0EAA0E;AAC1E,uDAAuD;AACvD,8EAA8E;AAC9E,MAAM,gBAAgB,GAAe;IACnC,IAAI,EAAE,yCAAyC;IAC/C,OAAO,EAAE,4HAA4H;IACrI,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,8EAA8E;AAC9E,2CAA2C;AAC3C,uEAAuE;AACvE,6BAA6B;AAC7B,wEAAwE;AACxE,uEAAuE;AACvE,6BAA6B;AAC7B,8EAA8E;AAC9E,MAAM,WAAW,GAAe;IAC9B,IAAI,EAAE,mCAAmC;IACzC,OAAO,EAAE,kEAAkE;IAC3E,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF,MAAM,iBAAiB,GAAe;IACpC,IAAI,EAAE,oCAAoC;IAC1C,OAAO,EAAE,6EAA6E;IACtF,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF,8EAA8E;AAC9E,6CAA6C;AAC7C,8CAA8C;AAC9C,+EAA+E;AAC/E,8EAA8E;AAC9E,MAAM,gBAAgB,GAAe;IACnC,IAAI,EAAE,oCAAoC;IAC1C,OAAO,EAAE,uDAAuD;IAChE,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,8EAA8E;AAC9E,2CAA2C;AAC3C,kFAAkF;AAClF,sEAAsE;AACtE,8EAA8E;AAC9E,MAAM,gBAAgB,GAAe;IACnC,IAAI,EAAE,yCAAyC;IAC/C,OAAO,EAAE,6EAA6E;IACtF,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,8EAA8E;AAC9E,mDAAmD;AACnD,sFAAsF;AACtF,+CAA+C;AAC/C,kEAAkE;AAClE,8EAA8E;AAC9E,MAAM,QAAQ,GAAe;IAC3B,IAAI,EAAE,iCAAiC;IACvC,OAAO,EAAE,oFAAoF;IAC7F,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF,8EAA8E;AAC9E,2DAA2D;AAC3D,sEAAsE;AACtE,8EAA8E;AAC9E,MAAM,YAAY,GAAe;IAC/B,IAAI,EAAE,kCAAkC;IACxC,OAAO,EAAE,uFAAuF;IAChG,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF,8EAA8E;AAC9E,qDAAqD;AACrD,0EAA0E;AAC1E,wEAAwE;AACxE,8EAA8E;AAC9E,MAAM,iBAAiB,GAAe;IACpC,IAAI,EAAE,uCAAuC;IAC7C,OAAO,EAAE,kFAAkF;IAC3F,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,MAAM,iBAAiB,GAAe;IACpC,IAAI,EAAE,uCAAuC;IAC7C,OAAO,EAAE,0DAA0D;IACnE,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,8EAA8E;AAC9E,mDAAmD;AACnD,4EAA4E;AAC5E,qEAAqE;AACrE,2EAA2E;AAC3E,uEAAuE;AACvE,qEAAqE;AACrE,8EAA8E;AAC9E,MAAM,eAAe,GAAe;IAClC,IAAI,EAAE,iCAAiC;IACvC,OAAO,EAAE,4HAA4H;IACrI,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,+DAA+D;AAC/D,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,8EAA8E;AAC9E,6DAA6D;AAC7D,+EAA+E;AAC/E,6EAA6E;AAC7E,2EAA2E;AAC3E,yEAAyE;AACzE,8EAA8E;AAC9E,MAAM,sBAAsB,GAAe;IACzC,IAAI,EAAE,sCAAsC;IAC5C,OAAO,EAAE,6KAA6K;IACtL,QAAQ,EAAE,QAAQ;CACnB,CAAC;AAEF,8EAA8E;AAC9E,+CAA+C;AAC/C,0EAA0E;AAC1E,uEAAuE;AACvE,gEAAgE;AAChE,8EAA8E;AAC9E,MAAM,UAAU,GAAe;IAC7B,IAAI,EAAE,mCAAmC;IACzC,OAAO,EAAE,mDAAmD;IAC5D,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,8EAA8E;AAC9E,yCAAyC;AACzC,uEAAuE;AACvE,sEAAsE;AACtE,8EAA8E;AAC9E,MAAM,iBAAiB,GAAe;IACpC,IAAI,EAAE,0CAA0C;IAChD,OAAO,EAAE,iFAAiF;IAC1F,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,8EAA8E;AAC9E,wCAAwC;AACxC,2EAA2E;AAC3E,gFAAgF;AAChF,8EAA8E;AAC9E,MAAM,kBAAkB,GAAe;IACrC,IAAI,EAAE,2CAA2C;IACjD,OAAO,EAAE,gDAAgD;IACzD,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,8EAA8E;AAC9E,qDAAqD;AACrD,sEAAsE;AACtE,wEAAwE;AACxE,8EAA8E;AAC9E,MAAM,kBAAkB,GAAe;IACrC,IAAI,EAAE,2CAA2C;IACjD,OAAO,EAAE,0HAA0H;IACnI,QAAQ,EAAE,MAAM;CACjB,CAAC;AAEF,8EAA8E;AAC9E,uCAAuC;AACvC,8EAA8E;AAC9E,MAAM,mBAAmB,GAAiB;IACxC,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;IAChB,WAAW;IACX,iBAAiB;IACjB,gBAAgB;IAChB,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,iBAAiB;IACjB,iBAAiB;IACjB,eAAe;IACf,UAAU;IACV,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,sBAAsB;CACvB,CAAC;AAEF;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAa;IACrC,0CAA0C;IAC1C,MAAM,WAAW,GAAG;QAClB,8BAA8B,EAAe,uBAAuB;QACpE,qCAAqC,EAAQ,6BAA6B;QAC1E,sCAAsC,EAAO,+BAA+B;QAC5E,6DAA6D,EAAE,kBAAkB;QACjF,0BAA0B,EAAqB,oBAAoB;QACnE,4BAA4B,EAAmB,gBAAgB;QAC/D,+BAA+B,EAAgB,WAAW;KAC3D,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAa,4BAA4B;IAAzC;QACW,SAAI,GAAG,wBAAwB,CAAC;IAiC3C,CAAC;IA/BC,UAAU,CAAC,KAAa;QACtB,MAAM,UAAU,GAAmB,EAAE,CAAC;QAEtC,2EAA2E;QAC3E,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,UAAU,CAAC;QAEzC,KAAK,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;YACtC,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAyB,CAAC;YAC9B,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC9C,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBACzC,UAAU,CAAC,IAAI,CAAC;oBACd,YAAY,EAAE,GAAG,CAAC,IAAI;oBACtB,QAAQ,EAAE,GAAG,CAAC,QAAuB;oBACrC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,oCAAoC;oBAC/D,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,GAAG,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM;oBAC1B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACN,CAAC,CAAC;gBAE7C,2DAA2D;gBAC3D,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtB,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC1B,CAAC;YACH,CAAC;YACD,8CAA8C;YAC9C,GAAG,CAAC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF;AAlCD,oEAkCC"}

package/dist/src/dlp/nemo-backend.d.ts

@@ -1,4 +1,5 @@
 import { DLPBackend, DLPDetection } from './interfaces';
+import { CircuitBreaker } from './circuit-breaker';
 export interface NemoGuardrailsConfig {
     /** NeMo Guardrails API URL (e.g. 'http://nemo:8000'). */
     api_url: string;
@@ -20,6 +21,7 @@ export declare class NemoGuardrailsBackend implements DLPBackend {
     readonly name = "nemo_guardrails";
     private readonly apiUrl;
     private readonly timeoutMs;
+    readonly circuitBreaker: CircuitBreaker;
     constructor(config: NemoGuardrailsConfig);
     scanString(value: string): DLPDetection[];
     private parseResponse;

package/dist/src/dlp/nemo-backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nemo-backend.d.ts","sourceRoot":"","sources":["../../../src/dlp/nemo-backend.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGxD,MAAM,WAAW,oBAAoB;IACnC,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,qBAAsB,YAAW,UAAU;IACtD,QAAQ,CAAC,IAAI,qBAAqB;IAElC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,MAAM,EAAE,oBAAoB;IAKxC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE;IA8BzC,OAAO,CAAC,aAAa;IA0CrB,OAAO,CAAC,WAAW;CAWpB"}
+{"version":3,"file":"nemo-backend.d.ts","sourceRoot":"","sources":["../../../src/dlp/nemo-backend.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAExD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,WAAW,oBAAoB;IACnC,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;GAUG;AACH,qBAAa,qBAAsB,YAAW,UAAU;IACtD,QAAQ,CAAC,IAAI,qBAAqB;IAElC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;gBAE5B,MAAM,EAAE,oBAAoB;IAMxC,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,EAAE;IAqCzC,OAAO,CAAC,aAAa;IA0CrB,OAAO,CAAC,WAAW;CAWpB"}

package/dist/src/dlp/nemo-backend.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.NemoGuardrailsBackend = void 0;
 const child_process_1 = require("child_process");
+const circuit_breaker_1 = require("./circuit-breaker");
 /**
  * DLP backend that delegates content safety classification to NeMo Guardrails.
  *
@@ -18,10 +19,15 @@ class NemoGuardrailsBackend {
         this.name = 'nemo_guardrails';
         this.apiUrl = config.api_url.replace(/\/+$/, '');
         this.timeoutMs = config.timeout_ms ?? 5000;
+        this.circuitBreaker = new circuit_breaker_1.CircuitBreaker({ name: 'nemo', failureThreshold: 5, resetTimeoutMs: 30000 });
     }
     scanString(value) {
         if (!value || value.length < 5)
             return [];
+        if (!this.circuitBreaker.allowRequest()) {
+            console.warn(`[NemoGuardrailsBackend] circuit OPEN — skipping external call`);
+            return [];
+        }
         try {
             const payload = JSON.stringify({
                 messages: [{ role: 'user', content: value }],
@@ -39,9 +45,11 @@ class NemoGuardrailsBackend {
                 encoding: 'utf-8',
                 stdio: ['pipe', 'pipe', 'pipe'],
             });
+            this.circuitBreaker.recordSuccess();
             return this.parseResponse(stdout, value);
         }
         catch (err) {
+            this.circuitBreaker.recordFailure();
             const message = err instanceof Error ? err.message : String(err);
             console.warn(`[NemoGuardrailsBackend] scan failed: ${message}`);
             return [];

package/dist/src/dlp/nemo-backend.js.map

@@ -1 +1 @@
-{"version":3,"file":"nemo-backend.js","sourceRoot":"","sources":["../../../src/dlp/nemo-backend.ts"],"names":[],"mappings":";;;AAAA,iDAA6C;AAW7C;;;;;;;;;;GAUG;AACH,MAAa,qBAAqB;IAMhC,YAAY,MAA4B;QAL/B,SAAI,GAAG,iBAAiB,CAAC;QAMhC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAE1C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC7B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;aAC7C,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAA,4BAAY,EAAC,MAAM,EAAE;gBAClC,IAAI;gBACJ,IAAI,EAAE,MAAM;gBACZ,GAAG,IAAI,CAAC,MAAM,sBAAsB;gBACpC,IAAI,EAAE,gCAAgC;gBACtC,IAAI,EAAE,OAAO;gBACb,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;gBACtD,mBAAmB,EAAE,GAAG;aACzB,EAAE;gBACD,OAAO,EAAE,IAAI,CAAC,SAAS,GAAG,IAAI;gBAC9B,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;YAChE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,GAAW,EAAE,aAAqB;QACtD,MAAM,UAAU,GAAmB,EAAE,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE7B,uDAAuD;YACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;YAEtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;oBAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAEhG,UAAU,CAAC,IAAI,CAAC;wBACd,YAAY,EAAE,QAAQ,QAAQ,EAAE;wBAChC,QAAQ;wBACR,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAClC,KAAK,EAAE,CAAC;wBACR,GAAG,EAAE,aAAa,CAAC,MAAM;qBAC1B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,6DAA6D;YAC7D,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,UAAU,CAAC,IAAI,CAAC;oBACd,YAAY,EAAE,sBAAsB;oBACpC,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAClC,KAAK,EAAE,CAAC;oBACR,GAAG,EAAE,aAAa,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,WAAW,CAAC,KAAsB;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,GAAG;gBAAE,OAAO,MAAM,CAAC;YAChC,IAAI,KAAK,IAAI,GAAG;gBAAE,OAAO,QAAQ,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC;QAC5D,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,QAAQ,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AA9FD,sDA8FC"}
+{"version":3,"file":"nemo-backend.js","sourceRoot":"","sources":["../../../src/dlp/nemo-backend.ts"],"names":[],"mappings":";;;AAAA,iDAA6C;AAG7C,uDAAmD;AASnD;;;;;;;;;;GAUG;AACH,MAAa,qBAAqB;IAOhC,YAAY,MAA4B;QAN/B,SAAI,GAAG,iBAAiB,CAAC;QAOhC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,IAAI,gCAAc,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,EAAE,cAAc,EAAE,KAAM,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAE1C,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAC9E,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC7B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;aAC7C,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAA,4BAAY,EAAC,MAAM,EAAE;gBAClC,IAAI;gBACJ,IAAI,EAAE,MAAM;gBACZ,GAAG,IAAI,CAAC,MAAM,sBAAsB;gBACpC,IAAI,EAAE,gCAAgC;gBACtC,IAAI,EAAE,OAAO;gBACb,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;gBACtD,mBAAmB,EAAE,GAAG;aACzB,EAAE;gBACD,OAAO,EAAE,IAAI,CAAC,SAAS,GAAG,IAAI;gBAC9B,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YAEH,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;YACpC,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;YAChE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,GAAW,EAAE,aAAqB;QACtD,MAAM,UAAU,GAAmB,EAAE,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE7B,uDAAuD;YACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;YAEtC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC;oBAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAEhG,UAAU,CAAC,IAAI,CAAC;wBACd,YAAY,EAAE,QAAQ,QAAQ,EAAE;wBAChC,QAAQ;wBACR,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;wBAClC,KAAK,EAAE,CAAC;wBACR,GAAG,EAAE,aAAa,CAAC,MAAM;qBAC1B,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,6DAA6D;YAC7D,IAAI,OAAO,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,UAAU,CAAC,IAAI,CAAC;oBACd,YAAY,EAAE,sBAAsB;oBACpC,QAAQ,EAAE,MAAM;oBAChB,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;oBAClC,KAAK,EAAE,CAAC;oBACR,GAAG,EAAE,aAAa,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,WAAW,CAAC,KAAsB;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,GAAG;gBAAE,OAAO,MAAM,CAAC;YAChC,IAAI,KAAK,IAAI,GAAG;gBAAE,OAAO,QAAQ,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC;QAC5D,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,UAAU;YAAE,OAAO,QAAQ,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAvGD,sDAuGC"}

package/dist/src/dlp/prompt-injection-patterns.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-injection-patterns.d.ts","sourceRoot":"","sources":["../../../src/dlp/prompt-injection-patterns.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,yBAAyB,EAAE,UAAU,EA4XjD,CAAC;AAMF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,UAAU,EAgBjD,CAAC"}
+{"version":3,"file":"prompt-injection-patterns.d.ts","sourceRoot":"","sources":["../../../src/dlp/prompt-injection-patterns.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,yBAAyB,EAAE,UAAU,EAiajD,CAAC;AAMF;;;;;;GAMG;AACH,eAAO,MAAM,yBAAyB,EAAE,UAAU,EAgBjD,CAAC"}

package/dist/src/dlp/prompt-injection-patterns.js

@@ -386,6 +386,42 @@ exports.PROMPT_INJECTION_PATTERNS = [
         pattern: /(?:you\s+have\s+)?no\s+(?:rules|limits|limitations|boundaries|restrictions|ethical\s+guidelines|safety\s+(?:measures|protocols|guidelines))/gi,
         severity: 'medium',
     },
+    // -----------------------------------------------------------------------
+    // Category 18: Policy/config self-modification (high)
+    // Detects instructions to modify the agent's own policy, config, or
+    // governance files — the most dangerous form of prompt injection as it
+    // can disable all security controls.
+    // -----------------------------------------------------------------------
+    {
+        name: 'prompt_injection_modify_policy',
+        pattern: /(?:modify|change|update|edit|overwrite|replace|rewrite|alter)\s+(?:the\s+|your\s+)?(?:policy|policies|policy[\s_-]*(?:pack|file|yaml|config|rules?))/gi,
+        severity: 'high',
+    },
+    {
+        name: 'prompt_injection_write_policy_file',
+        pattern: /(?:write|save|create|output|put|dump)\s+(?:this\s+|the\s+following\s+)?(?:to|into|in)\s+(?:the\s+)?(?:policy|config|yaml|yml|configuration)\s*(?:file|pack)?/gi,
+        severity: 'high',
+    },
+    {
+        name: 'prompt_injection_disable_security',
+        pattern: /(?:disable|turn\s+off|deactivate|remove|bypass|skip)\s+(?:all\s+)?(?:the\s+)?(?:security|DLP|firewall|policy|protection|enforcement|validation|rate[\s_-]*limit|budget[\s_-]*check|approval)/gi,
+        severity: 'high',
+    },
+    {
+        name: 'prompt_injection_allow_all_policy',
+        pattern: /(?:set|change|make|switch)\s+(?:the\s+)?(?:default\s+)?(?:policy|effect|rule)\s+(?:to\s+)?(?:allow[\s_-]*all|permissive|allow\s+everything)/gi,
+        severity: 'high',
+    },
+    {
+        name: 'prompt_injection_policy_pack_path',
+        pattern: /policy[\s_-]*packs?\/[^\s"']+\.ya?ml/gi,
+        severity: 'high',
+    },
+    {
+        name: 'prompt_injection_remove_rules',
+        pattern: /(?:remove|delete|clear|empty|wipe)\s+(?:all\s+)?(?:the\s+)?(?:policy\s+)?(?:rules?|restrictions?|blocklist|denylist|deny\s+rules?)/gi,
+        severity: 'high',
+    },
 ];
 // ---------------------------------------------------------------------------
 // Output-side prompt injection patterns

package/dist/src/dlp/prompt-injection-patterns.js.map

@@ -1 +1 @@
-{"version":3,"file":"prompt-injection-patterns.js","sourceRoot":"","sources":["../../../src/dlp/prompt-injection-patterns.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;;;;;;;GAoBG;AACU,QAAA,yBAAyB,GAAiB;IACrD,0EAA0E;IAC1E,iDAAiD;IACjD,0EAA0E;IAC1E;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,+CAA+C;QACxD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,kGAAkG;QAC3G,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,kEAAkE;QAC3E,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,yFAAyF;QAClG,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,yCAAyC;IACzC,0EAA0E;IAC1E;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,wCAAwC;IACxC,0EAA0E;IAC1E;QACE,gEAAgE;QAChE,oFAAoF;QACpF,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,2CAA2C;QACpD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,4DAA4D;QACrE,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,uEAAuE;QAChF,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,8CAA8C;IAC9C,0EAA0E;IAC1E;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,mFAAmF;QAC5F,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,mEAAmE;QAC5E,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,oEAAoE;QAC7E,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,yCAAyC;IACzC,0EAA0E;IAC1E;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,MAAM;KACjB;IAED;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,8FAA8F;QACvG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,0JAA0J;QACnK,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,2IAA2I;QACpJ,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,sGAAsG;QAC/G,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,sDAAsD;QAC/D,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,4DAA4D;QACrE,QAAQ,EAAE,MAAM;KACjB;IACD,0EAA0E;IAC1E,4CAA4C;IAC5C,0EAA0E;IAC1E;QACE,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,6CAA6C;IAC7C,0EAA0E;IAC1E;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,oGAAoG;QAC7G,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,mEAAmE;QAC5E,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,oFAAoF;QAC7F,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,wCAAwC;IACxC,0EAA0E;IAC1E;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,4FAA4F;QACrG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,wFAAwF;QACjG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,4CAA4C;QAClD,OAAO,EAAE,yEAAyE;QAClF,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,2CAA2C;IAC3C,0EAA0E;IAC1E;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,8FAA8F;QACvG,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,+EAA+E;QACxF,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,uCAAuC;IACvC,0EAA0E;IAC1E;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,8HAA8H;QACvI,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,wIAAwI;QACjJ,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,2EAA2E;QACpF,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,8CAA8C;IAC9C,0EAA0E;IAC1E;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,uHAAuH;QAChI,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,4GAA4G;QACrH,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,4CAA4C;IAC5C,0EAA0E;IAC1E;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,qFAAqF;QAC9F,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,2FAA2F;QACpG,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,gFAAgF;QACzF,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,gDAAgD;IAChD,0EAA0E;IAC1E;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,uEAAuE;QAChF,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,sDAAsD;IACtD,0EAA0E;IAC1E;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,kIAAkI;QAC3I,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,kHAAkH;QAC3H,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,+LAA+L;QACxM,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,yCAAyC;QAC/C,OAAO,EAAE,qIAAqI;QAC9I,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,+EAA+E;IAC/E,0EAA0E;IAC1E;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,uFAAuF;QAChG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,uDAAuD;QAChE,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,OAAO,EAAE,yGAAyG;QAClH,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,+FAA+F;QACxG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,kHAAkH;QAC3H,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,8FAA8F;QACvG,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,2CAA2C;IAC3C,0EAA0E;IAC1E;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,gDAAgD;QACzD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,yGAAyG;QAClH,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,uDAAuD;IACvD,0EAA0E;IAC1E;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,mDAAmD;QAC5D,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,+IAA+I;QACxJ,QAAQ,EAAE,QAAQ;KACnB;CACF,CAAC;AAEF,8EAA8E;AAC9E,wCAAwC;AACxC,8EAA8E;AAE9E;;;;;;GAMG;AACU,QAAA,yBAAyB,GAAiB;IACrD;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,wGAAwG;QACjH,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,2CAA2C;QACjD,OAAO,EAAE,0JAA0J;QACnK,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,uJAAuJ;QAChK,QAAQ,EAAE,MAAM;KACjB;CACF,CAAC"}
+{"version":3,"file":"prompt-injection-patterns.js","sourceRoot":"","sources":["../../../src/dlp/prompt-injection-patterns.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;;;;;;;;;;;GAoBG;AACU,QAAA,yBAAyB,GAAiB;IACrD,0EAA0E;IAC1E,iDAAiD;IACjD,0EAA0E;IAC1E;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,+CAA+C;QACxD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,kGAAkG;QAC3G,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,kEAAkE;QAC3E,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,yFAAyF;QAClG,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,yCAAyC;IACzC,0EAA0E;IAC1E;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,wCAAwC;IACxC,0EAA0E;IAC1E;QACE,gEAAgE;QAChE,oFAAoF;QACpF,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,2CAA2C;QACpD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,4DAA4D;QACrE,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,uEAAuE;QAChF,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,8CAA8C;IAC9C,0EAA0E;IAC1E;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,mFAAmF;QAC5F,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,mEAAmE;QAC5E,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,oEAAoE;QAC7E,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,yCAAyC;IACzC,0EAA0E;IAC1E;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,kBAAkB;QAC3B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,MAAM;KACjB;IAED;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,8FAA8F;QACvG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,0JAA0J;QACnK,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,2IAA2I;QACpJ,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,sGAAsG;QAC/G,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,sDAAsD;QAC/D,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,sEAAsE;QAC/E,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,4DAA4D;QACrE,QAAQ,EAAE,MAAM;KACjB;IACD,0EAA0E;IAC1E,4CAA4C;IAC5C,0EAA0E;IAC1E;QACE,IAAI,EAAE,wCAAwC;QAC9C,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,OAAO,EAAE,uCAAuC;QAChD,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,6CAA6C;IAC7C,0EAA0E;IAC1E;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,oGAAoG;QAC7G,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,mEAAmE;QAC5E,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,oFAAoF;QAC7F,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,wCAAwC;IACxC,0EAA0E;IAC1E;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,4FAA4F;QACrG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,wFAAwF;QACjG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,4CAA4C;QAClD,OAAO,EAAE,yEAAyE;QAClF,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,2CAA2C;IAC3C,0EAA0E;IAC1E;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,8FAA8F;QACvG,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,+EAA+E;QACxF,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,uCAAuC;IACvC,0EAA0E;IAC1E;QACE,IAAI,EAAE,sCAAsC;QAC5C,OAAO,EAAE,8HAA8H;QACvI,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,wIAAwI;QACjJ,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,2EAA2E;QACpF,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,8CAA8C;IAC9C,0EAA0E;IAC1E;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,uHAAuH;QAChI,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,4GAA4G;QACrH,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,4CAA4C;IAC5C,0EAA0E;IAC1E;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,qFAAqF;QAC9F,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,2FAA2F;QACpG,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,gFAAgF;QACzF,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,gDAAgD;IAChD,0EAA0E;IAC1E;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,8DAA8D;QACvE,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,uEAAuE;QAChF,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,sDAAsD;IACtD,0EAA0E;IAC1E;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,kIAAkI;QAC3I,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,kHAAkH;QAC3H,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,+LAA+L;QACxM,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,yCAAyC;QAC/C,OAAO,EAAE,qIAAqI;QAC9I,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,+EAA+E;IAC/E,0EAA0E;IAC1E;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,uFAAuF;QAChG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,uDAAuD;QAChE,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,OAAO,EAAE,yGAAyG;QAClH,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,kCAAkC;QACxC,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,+FAA+F;QACxG,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,kHAAkH;QAC3H,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,iCAAiC;QACvC,OAAO,EAAE,8FAA8F;QACvG,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,2CAA2C;IAC3C,0EAA0E;IAC1E;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,gDAAgD;QACzD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,yGAAyG;QAClH,QAAQ,EAAE,MAAM;KACjB;IAED,0EAA0E;IAC1E,uDAAuD;IACvD,0EAA0E;IAC1E;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,mDAAmD;QAC5D,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,IAAI,EAAE,2BAA2B;QACjC,OAAO,EAAE,+IAA+I;QACxJ,QAAQ,EAAE,QAAQ;KACnB;IAED,0EAA0E;IAC1E,sDAAsD;IACtD,oEAAoE;IACpE,uEAAuE;IACvE,qCAAqC;IACrC,0EAA0E;IAC1E;QACE,IAAI,EAAE,gCAAgC;QACtC,OAAO,EAAE,wJAAwJ;QACjK,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,gKAAgK;QACzK,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,gMAAgM;QACzM,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,+IAA+I;QACxJ,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,mCAAmC;QACzC,OAAO,EAAE,wCAAwC;QACjD,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,+BAA+B;QACrC,OAAO,EAAE,sIAAsI;QAC/I,QAAQ,EAAE,MAAM;KACjB;CACF,CAAC;AAEF,8EAA8E;AAC9E,wCAAwC;AACxC,8EAA8E;AAE9E;;;;;;GAMG;AACU,QAAA,yBAAyB,GAAiB;IACrD;QACE,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,wGAAwG;QACjH,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,2CAA2C;QACjD,OAAO,EAAE,0JAA0J;QACnK,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,uJAAuJ;QAChK,QAAQ,EAAE,MAAM;KACjB;CACF,CAAC"}

package/dist/src/dlp/text-normalizer.d.ts

@@ -8,7 +8,8 @@
 /** Regex matching zero-width and invisible Unicode characters.
  *  Comprehensive list covering: zero-width spaces/joiners, soft hyphen, BOM,
  *  directional marks/isolates, word joiners, invisible operators,
- *  combining grapheme joiner, Arabic letter mark, and deprecated formatting chars.
+ *  combining grapheme joiner, Arabic letter mark, deprecated formatting chars,
+ *  and Unicode Tags block (U+E0001-U+E007F, deprecated language tags).
  */
 export declare const ZERO_WIDTH_REGEX: RegExp;
 /** Map of Unicode homoglyphs to their ASCII equivalents. */
@@ -22,20 +23,6 @@ export declare function decodeROT13(input: string): string;
  * contains recognizable injection keywords (avoids false positives).
  */
 export declare function tryDecodeROT13(input: string): string | null;
-/**
- * Normalize text for bypass-resistant pattern matching.
- *
- * Applies transformations in order:
- * 1. Strip zero-width / invisible Unicode characters
- * 2. Unicode NFKC normalization (collapses fullwidth, ligatures, etc.)
- * 3. Decode HTML entities (named + numeric)
- * 4. Decode URL percent-encoding
- * 5. Collapse homoglyphs (Cyrillic/Greek lookalikes -> ASCII)
- * 6. Collapse repeated whitespace to single space
- *
- * @param input - The raw text to normalize.
- * @returns The normalized text suitable for pattern matching.
- */
 export declare function normalizeText(input: string): string;
 /**
  * Apply leetspeak normalization on top of standard normalization.

package/dist/src/dlp/text-normalizer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"text-normalizer.d.ts","sourceRoot":"","sources":["../../../src/dlp/text-normalizer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAA8J,CAAC;AAM5L,4DAA4D;AAC5D,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA+EhD,CAAC;AAYF,yEAAyE;AACzE,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAUhD,CAAC;AAsEF,iCAAiC;AACjC,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKjD;AAKD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK3D;AA6CD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiCnD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAiD7D"}
+{"version":3,"file":"text-normalizer.d.ts","sourceRoot":"","sources":["../../../src/dlp/text-normalizer.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,QAAkL,CAAC;AAMhN,4DAA4D;AAC5D,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA+EhD,CAAC;AAYF,yEAAyE;AACzE,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAUhD,CAAC;AAsEF,iCAAiC;AACjC,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKjD;AAKD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK3D;AA2ED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CA0CnD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM,CAElE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAiD7D"}

package/dist/src/dlp/text-normalizer.js

@@ -13,15 +13,18 @@ exports.tryDecodeROT13 = tryDecodeROT13;
 exports.normalizeText = normalizeText;
 exports.normalizeLeetspeak = normalizeLeetspeak;
 exports.decodeEncodedPayloads = decodeEncodedPayloads;
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const punycode = require('punycode/');
 // ---------------------------------------------------------------------------
 // Zero-width character stripping
 // ---------------------------------------------------------------------------
 /** Regex matching zero-width and invisible Unicode characters.
  *  Comprehensive list covering: zero-width spaces/joiners, soft hyphen, BOM,
  *  directional marks/isolates, word joiners, invisible operators,
- *  combining grapheme joiner, Arabic letter mark, and deprecated formatting chars.
+ *  combining grapheme joiner, Arabic letter mark, deprecated formatting chars,
+ *  and Unicode Tags block (U+E0001-U+E007F, deprecated language tags).
  */
-exports.ZERO_WIDTH_REGEX = /[\u200B\u200C\u200D\u00AD\uFEFF\u200E\u200F\u034F\u061C\u180E\u2060\u2061\u2062\u2063\u2064\u2066\u2067\u2068\u2069\u206A\u206B\u206C\u206D\u206E\u206F]/g;
+exports.ZERO_WIDTH_REGEX = /[\u200B\u200C\u200D\u00AD\uFEFF\u200E\u200F\u034F\u061C\u180E\u2060\u2061\u2062\u2063\u2064\u2066\u2067\u2068\u2069\u206A\u206B\u206C\u206D\u206E\u206F\u{E0001}-\u{E007F}]/gu;
 // ---------------------------------------------------------------------------
 // Homoglyph map (visually similar characters -> ASCII equivalents)
 // ---------------------------------------------------------------------------
@@ -244,22 +247,38 @@ function stripEmojisBetweenLetters(input) {
  * Normalize text for bypass-resistant pattern matching.
  *
  * Applies transformations in order:
- * 1. Strip zero-width / invisible Unicode characters
+ * 1. Strip zero-width / invisible Unicode characters (incl. Unicode Tags block)
  * 2. Unicode NFKC normalization (collapses fullwidth, ligatures, etc.)
  * 3. Decode HTML entities (named + numeric)
- * 4. Decode URL percent-encoding
+ * 4. Decode URL percent-encoding (multi-pass, up to 3 iterations)
+ * 4.5. Decode Punycode domains (xn-- labels -> Unicode -> homoglyph collapse)
  * 5. Collapse homoglyphs (Cyrillic/Greek lookalikes -> ASCII)
  * 6. Collapse repeated whitespace to single space
  *
  * @param input - The raw text to normalize.
  * @returns The normalized text suitable for pattern matching.
  */
+/**
+ * Decode Punycode (xn--) domain labels to Unicode.
+ * Enables homoglyph normalization to collapse Punycode-encoded lookalike domains.
+ */
+function decodePunycodeDomains(input) {
+    // Match xn-- labels in domain-like contexts (dot-separated labels)
+    return input.replace(/\bxn--[a-z0-9-]+(?:\.[a-z0-9-]+)*/gi, (domain) => {
+        try {
+            return punycode.toUnicode(domain);
+        }
+        catch {
+            return domain; // Leave as-is if decode fails
+        }
+    });
+}
 function normalizeText(input) {
     // Early exit for very short strings
     if (input.length === 0)
         return input;
     let text = input;
-    // 1. Strip zero-width characters
+    // 1. Strip zero-width characters (including Unicode Tags block U+E0001-E007F)
     text = text.replace(exports.ZERO_WIDTH_REGEX, '');
     // 2. NFKC normalization (fullwidth -> ASCII, ligatures -> components, etc.)
     text = text.normalize('NFKC');
@@ -271,8 +290,16 @@ function normalizeText(input) {
     text = stripEmojisBetweenLetters(text);
     // 3. Decode HTML entities
     text = decodeHTMLEntities(text);
-    // 4. Decode URL percent-encoding
-    text = decodeURLEncoding(text);
+    // 4. Decode URL percent-encoding (multi-pass for layered encoding like %2569 -> %69 -> i)
+    let prevText;
+    let passes = 0;
+    do {
+        prevText = text;
+        text = decodeURLEncoding(text);
+        passes++;
+    } while (text !== prevText && passes < 3);
+    // 4.5 Decode Punycode domains (xn-- labels -> Unicode for homoglyph matching)
+    text = decodePunycodeDomains(text);
     // 5. Collapse homoglyphs
     text = text.replace(homoglyphRegex, (ch) => exports.HOMOGLYPH_MAP[ch] || ch);
     // 6. Collapse whitespace (spaces, tabs, newlines) to single space and trim

package/dist/src/dlp/text-normalizer.js.map

@@ -1 +1 @@
-{"version":3,"file":"text-normalizer.js","sourceRoot":"","sources":["../../../src/dlp/text-normalizer.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AA+LH,kCAKC;AASD,wCAKC;AA2DD,sCAiCC;AAaD,gDAEC;AAMD,sDAiDC;AAlXD,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,2JAA2J,CAAC;AAE5L,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,4DAA4D;AAC/C,QAAA,aAAa,GAA2B;IACnD,oBAAoB;IACpB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,iBAAiB;IACjB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,kEAAkE;IAClE,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,oBAAoB;IACpB,QAAQ,EAAE,GAAG,EAAE,gBAAgB;IAC/B,QAAQ,EAAE,GAAG,EAAE,gBAAgB;IAC/B,QAAQ,EAAE,GAAG,EAAE,wBAAwB;IACvC,+BAA+B;IAC/B,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,4DAA4D;IAC5D,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;CACd,CAAC;AAEF,sCAAsC;AACtC,MAAM,cAAc,GAAG,IAAI,MAAM,CAC/B,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAa,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,EAC/C,GAAG,CACJ,CAAC;AAEF,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,yEAAyE;AAC5D,QAAA,aAAa,GAA2B;IACnD,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;CACT,CAAC;AAEF,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,0DAA0D;AAC1D,MAAM,cAAc,GAA2B;IAC7C,MAAM,EAAE,GAAG;IACX,MAAM,EAAE,GAAG;IACX,OAAO,EAAE,GAAG;IACZ,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,OAAO,EAAE,IAAI;CACd,CAAC;AAEF,oEAAoE;AACpE,SAAS,kBAAkB,CAAC,KAAa;IACvC,iBAAiB;IACjB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,kDAAkD;QAClD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,0CAA0C;IAC1C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC7D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,qDAAqD;AACrD,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,OAAO,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;YACzD,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,iCAAiC;AACjC,SAAgB,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yDAAyD;AACzD,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAE/I;;;GAGG;AACH,SAAgB,cAAc,CAAC,KAAa;IAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,OAAO,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,qEAAqE;AACrE,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oDAAoD;AACpD,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,0CAA0C,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE;QAC5E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACzE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC5E,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yFAAyF;AACzF,SAAS,yBAAyB,CAAC,KAAa;IAC9C,gFAAgF;IAChF,OAAO,KAAK,CAAC,OAAO,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACH,SAAgB,aAAa,CAAC,KAAa;IACzC,oCAAoC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAErC,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,iCAAiC;IACjC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAgB,EAAE,EAAE,CAAC,CAAC;IAE1C,4EAA4E;IAC5E,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAE9B,8CAA8C;IAC9C,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAEtC,kCAAkC;IAClC,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAEvC,0BAA0B;IAC1B,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAEhC,iCAAiC;IACjC,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE/B,yBAAyB;IACzB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAa,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAErE,2EAA2E;IAC3E,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAExC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,kBAAkB,CAAC,eAAuB;IACxD,OAAO,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAa,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAAa;IACjD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,mCAAmC;IACnC,MAAM,SAAS,GAAG,6CAA6C,CAAC;IAChE,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9D,8CAA8C;YAC9C,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED,6BAA6B;IAC7B,MAAM,YAAY,GAAG,sCAAsC,CAAC;IAC5D,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED,6DAA6D;IAC7D,sEAAsE;IACtE,MAAM,eAAe,GAAG,kEAAkE,CAAC;IAC3F,OAAO,CAAC,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClD,kEAAkE;QAClE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9D,gFAAgF;YAChF,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACzB,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpE,IAAI,cAAc,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC3C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"text-normalizer.js","sourceRoot":"","sources":["../../../src/dlp/text-normalizer.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAmMH,kCAKC;AASD,wCAKC;AA2ED,sCA0CC;AAaD,gDAEC;AAMD,sDAiDC;AA/YD,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAEtC,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG,+KAA+K,CAAC;AAEhN,8EAA8E;AAC9E,mEAAmE;AACnE,8EAA8E;AAE9E,4DAA4D;AAC/C,QAAA,aAAa,GAA2B;IACnD,oBAAoB;IACpB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,iBAAiB;IACjB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,QAAQ,EAAE,GAAG,EAAE,IAAI;IACnB,kEAAkE;IAClE,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,oBAAoB;IACpB,QAAQ,EAAE,GAAG,EAAE,gBAAgB;IAC/B,QAAQ,EAAE,GAAG,EAAE,gBAAgB;IAC/B,QAAQ,EAAE,GAAG,EAAE,wBAAwB;IACvC,+BAA+B;IAC/B,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,4DAA4D;IAC5D,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;CACd,CAAC;AAEF,sCAAsC;AACtC,MAAM,cAAc,GAAG,IAAI,MAAM,CAC/B,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAa,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,GAAG,EAC/C,GAAG,CACJ,CAAC;AAEF,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,yEAAyE;AAC5D,QAAA,aAAa,GAA2B;IACnD,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;IACR,GAAG,EAAE,GAAG;CACT,CAAC;AAEF,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,0DAA0D;AAC1D,MAAM,cAAc,GAA2B;IAC7C,MAAM,EAAE,GAAG;IACX,MAAM,EAAE,GAAG;IACX,OAAO,EAAE,GAAG;IACZ,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,QAAQ,EAAE,GAAG;IACb,OAAO,EAAE,IAAI;CACd,CAAC;AAEF,oEAAoE;AACpE,SAAS,kBAAkB,CAAC,KAAa;IACvC,iBAAiB;IACjB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,kDAAkD;QAClD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACtE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,0CAA0C;IAC1C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,sCAAsC;IACtC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QAC7D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,QAAQ,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,qDAAqD;AACrD,SAAS,iBAAiB,CAAC,KAAa;IACtC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;QAClE,OAAO,KAAK,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;YACzD,OAAO,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,iCAAiC;AACjC,SAAgB,WAAW,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yDAAyD;AACzD,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAE/I;;;GAGG;AACH,SAAgB,cAAc,CAAC,KAAa;IAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,OAAO,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,qEAAqE;AACrE,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oDAAoD;AACpD,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE;QACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,0CAA0C,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE;QAC5E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACzE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC5E,OAAO,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yFAAyF;AACzF,SAAS,yBAAyB,CAAC,KAAa;IAC9C,gFAAgF;IAChF,OAAO,KAAK,CAAC,OAAO,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;;;;;;;;;;GAcG;AACH;;;GAGG;AACH,SAAS,qBAAqB,CAAC,KAAa;IAC1C,mEAAmE;IACnE,OAAO,KAAK,CAAC,OAAO,CAAC,qCAAqC,EAAE,CAAC,MAAM,EAAE,EAAE;QACrE,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,CAAC,8BAA8B;QAC/C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,aAAa,CAAC,KAAa;IACzC,oCAAoC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAErC,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,8EAA8E;IAC9E,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,wBAAgB,EAAE,EAAE,CAAC,CAAC;IAE1C,4EAA4E;IAC5E,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAE9B,8CAA8C;IAC9C,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAEtC,kCAAkC;IAClC,IAAI,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAEvC,0BAA0B;IAC1B,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAEhC,0FAA0F;IAC1F,IAAI,QAAgB,CAAC;IACrB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,GAAG,CAAC;QACF,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,EAAE,CAAC;IACX,CAAC,QAAQ,IAAI,KAAK,QAAQ,IAAI,MAAM,GAAG,CAAC,EAAE;IAE1C,8EAA8E;IAC9E,IAAI,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAEnC,yBAAyB;IACzB,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAa,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAErE,2EAA2E;IAC3E,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAExC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,kBAAkB,CAAC,eAAuB;IACxD,OAAO,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAa,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAAa;IACjD,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,mCAAmC;IACnC,MAAM,SAAS,GAAG,6CAA6C,CAAC;IAChE,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9D,8CAA8C;YAC9C,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED,6BAA6B;IAC7B,MAAM,YAAY,GAAG,sCAAsC,CAAC;IAC5D,OAAO,CAAC,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9D,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED,6DAA6D;IAC7D,sEAAsE;IACtE,MAAM,eAAe,GAAG,kEAAkE,CAAC;IAC3F,OAAO,CAAC,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClD,kEAAkE;QAClE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAClE,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9D,gFAAgF;YAChF,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;gBACzB,MAAM,cAAc,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;gBACpE,IAAI,cAAc,GAAG,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC3C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}