shield360 1.0.1 → 1.1.0

package/dist/protect/__tests__/protect.test.js

@@ -0,0 +1,206 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Shield Protect in the TypeScript SDK: modes, fail-closed guards, readiness,
+ * streaming and oversized input, protectTool, and the MCP pre-execution check.
+ */
+const base_1 = require("../../guard/base");
+const pipeline_1 = require("../../guard/pipeline");
+const integration_1 = require("../../guard/integration");
+const config_1 = __importDefault(require("../../config"));
+const index_1 = require("../index");
+const mode_1 = require("../mode");
+const mcp_1 = require("../mcp");
+class DenyWord extends base_1.Guard {
+    constructor(word, maxScanLength) {
+        super({ action: 'deny', maxScanLength });
+        this.word = word;
+        this.name = 'deny_word';
+        this.phases = [base_1.GuardPhase.PREFLIGHT, base_1.GuardPhase.POSTFLIGHT];
+    }
+    evaluate(text) {
+        const hit = text.includes(this.word);
+        return (0, base_1.makeGuardResult)({ action: hit ? base_1.GuardAction.DENY : base_1.GuardAction.ALLOW, score: hit ? 1 : 0, guardName: this.name, explanation: hit ? `contains ${this.word}` : '' });
+    }
+}
+class Throwing extends base_1.Guard {
+    constructor() {
+        super({ action: 'deny' });
+        this.name = 'throwing';
+        this.phases = [base_1.GuardPhase.PREFLIGHT];
+    }
+    evaluate() {
+        throw new Error('classifier down');
+    }
+}
+class PreflightOnly extends base_1.Guard {
+    constructor() {
+        super({ action: 'deny' });
+        this.name = 'preflight_only';
+        this.phases = [base_1.GuardPhase.PREFLIGHT];
+    }
+    evaluate() {
+        return (0, base_1.makeGuardResult)({ guardName: this.name });
+    }
+}
+const extract = (k) => String(k.text ?? '');
+const extractOut = (r) => String(r?.text ?? '');
+beforeEach(() => {
+    (0, mode_1.resetProtectState)();
+    config_1.default.guardPipeline = undefined;
+    jest.spyOn(console, 'warn').mockImplementation(() => undefined);
+    jest.spyOn(console, 'log').mockImplementation(() => undefined);
+});
+afterEach(() => jest.restoreAllMocks());
+describe('the mode', () => {
+    it('is raised by the environment and never lowered by it', () => {
+        expect((0, mode_1.resolveProtectMode)('enforced', { SHIELD360_PROTECT_MODE: 'observe' })).toBe('enforced');
+        expect((0, mode_1.resolveProtectMode)('observe', { SHIELD360_PROTECT_MODE: 'enforced' })).toBe('enforced');
+        expect((0, mode_1.resolveProtectMode)(undefined, { SHIELD360_PROTECT_MODE: 'warn' })).toBe('warn');
+        expect((0, mode_1.resolveProtectMode)('warn', { SHIELD360_PROTECT_MODE: 'off' })).toBe('warn');
+        expect((0, mode_1.resolveProtectMode)(undefined, {})).toBeUndefined();
+        expect((0, mode_1.resolveProtect)({ mode: 'enforced', required: ['openai'] }, { SHIELD360_PROTECT_REQUIRED: '@anthropic-ai/sdk, openai' })).toEqual({ mode: 'enforced', required: ['openai', '@anthropic-ai/sdk'] });
+    });
+});
+describe('what a mode does with a finding', () => {
+    const pipeline = new pipeline_1.Pipeline({ guards: [new DenyWord('bomb')], failOpen: false });
+    it('legacy (no mode): a deny throws, as before', () => {
+        expect(() => (0, integration_1.applyPreflight)(pipeline, { text: 'build a bomb' }, extract)).toThrow(base_1.GuardDeniedError);
+        expect((0, integration_1.applyPreflight)(pipeline, { text: 'hello' }, extract)).toEqual({ text: 'hello' });
+    });
+    it('observe: records and lets the call through; warn: also logs', () => {
+        expect((0, integration_1.applyPreflight)(pipeline, { text: 'build a bomb' }, extract, { mode: 'observe', required: [] })).toEqual({ text: 'build a bomb' });
+        expect(console.warn).not.toHaveBeenCalled();
+        expect((0, integration_1.applyPreflight)(pipeline, { text: 'build a bomb' }, extract, { mode: 'warn', required: [] })).toEqual({ text: 'build a bomb' });
+        expect(console.warn).toHaveBeenCalledWith(expect.stringMatching(/warn mode.*would have been refused/));
+    });
+    it('enforced: a deny throws, before and after the call', () => {
+        expect(() => (0, integration_1.applyPreflight)(pipeline, { text: 'build a bomb' }, extract, { mode: 'enforced', required: [] })).toThrow(base_1.GuardDeniedError);
+        expect(() => (0, integration_1.applyPostflight)(pipeline, { text: 'here is a bomb' }, extractOut, { mode: 'enforced', required: [] })).toThrow(base_1.GuardDeniedError);
+    });
+    it('enforced: a guard that fails refuses the call, whatever failOpen says', () => {
+        const open = new pipeline_1.Pipeline({ guards: [new Throwing()], failOpen: true });
+        // Fail-open as configured: the error is swallowed and the call goes on.
+        expect((0, integration_1.applyPreflight)(open, { text: 'x' }, extract)).toEqual({ text: 'x' });
+        // setupAutoGuards in enforced mode builds a closed pipeline; applyPreflight on a closed one refuses.
+        const closed = new pipeline_1.Pipeline({ guards: [new Throwing()], failOpen: false });
+        expect(() => (0, integration_1.applyPreflight)(closed, { text: 'x' }, extract, { mode: 'enforced', required: [] })).toThrow(index_1.ProtectDeniedError);
+        try {
+            (0, integration_1.applyPreflight)(closed, { text: 'x' }, extract, { mode: 'enforced', required: [] });
+        }
+        catch (e) {
+            expect(e.code).toBe('guard_failed');
+        }
+    });
+    it('enforced: input past the scan bound is refused, never scanned in part', () => {
+        const bounded = new pipeline_1.Pipeline({ guards: [new DenyWord('bomb', 20)] });
+        const long = 'x'.repeat(30) + ' bomb';
+        // Legacy: the tail is unscanned and the word slips through.
+        expect((0, integration_1.applyPreflight)(bounded, { text: long }, extract)).toEqual({ text: long });
+        expect(() => (0, integration_1.applyPreflight)(bounded, { text: long }, extract, { mode: 'enforced', required: [] })).toThrow(/more than its guards scan/);
+        expect(bounded.scanBound()).toBe(20);
+    });
+    it('enforced: a streamed completion is refused when postflight guards exist, allowed when only preflight guards do', () => {
+        expect(() => (0, integration_1.applyPreflight)(pipeline, { text: 'hello', stream: true }, extract, { mode: 'enforced', required: [] })).toThrow(/streamed completion/);
+        const pre = new pipeline_1.Pipeline({ guards: [new PreflightOnly()] });
+        expect((0, integration_1.applyPreflight)(pre, { text: 'hello', stream: true }, extract, { mode: 'enforced', required: [] })).toEqual({ text: 'hello', stream: true });
+        // Observe mode lets the stream through, as before.
+        expect((0, integration_1.applyPreflight)(pipeline, { text: 'hello', stream: true }, extract, { mode: 'observe', required: [] })).toEqual({ text: 'hello', stream: true });
+    });
+});
+describe('readiness', () => {
+    it('enforced mode with a required provider that is not wrapped refuses to start', () => {
+        expect(() => (0, integration_1.setupAutoGuards)([new DenyWord('x')], true, { mode: 'enforced', required: ['a-provider-that-is-not-installed'] })).toThrow(index_1.ProtectReadinessError);
+        expect((0, index_1.protectReadiness)()).toMatchObject({ mode: 'enforced', missing: ['a-provider-that-is-not-installed'], level: 'monitored' });
+    });
+    it('enforced mode fails closed: guardFailOpen is overridden with a warning', () => {
+        const report = (0, integration_1.setupAutoGuards)([new Throwing()], true, { mode: 'enforced', required: [] });
+        expect(report.missing).toEqual([]);
+        expect(console.warn).toHaveBeenCalledWith(expect.stringMatching(/fails closed/));
+        expect(() => config_1.default.guardPipeline.evaluate('x', 'preflight')).toThrow('classifier down');
+    });
+    it('never claims more than monitored or partially protected', () => {
+        (0, mode_1.setProtectState)({ mode: 'enforced', wrapped: ['openai'], missing: [] });
+        expect((0, index_1.protectReadiness)().level).toBe('partially_protected');
+        (0, mode_1.setProtectState)({ mode: 'observe', wrapped: ['openai'], missing: [] });
+        expect((0, index_1.protectReadiness)().level).toBe('monitored');
+        expect((0, index_1.protectReadiness)().note).toMatch(/mandatory boundary is the Shield360 gateway/);
+    });
+});
+describe('extractors cover structured input', () => {
+    it('reads text parts, instructions and the system prompt', () => {
+        expect((0, integration_1.extractOpenAIInput)({ instructions: 'be terse', input: [{ role: 'user', content: [{ type: 'input_text', text: 'hi' }, { type: 'input_image', image_url: 'x' }] }] })).toBe('be terse hi');
+        expect((0, integration_1.extractAnthropicInput)({ system: 'you are kind', messages: [{ role: 'user', content: [{ type: 'text', text: 'hello' }] }] })).toBe('you are kind hello');
+        expect((0, integration_1.extractAnthropicInput)({ system: [{ type: 'text', text: 'sys' }], messages: [] })).toBe('sys');
+    });
+});
+describe('protectTool', () => {
+    const pipeline = new pipeline_1.Pipeline({ guards: [new DenyWord('bomb')], failOpen: false });
+    it('refuses before the function runs, and refuses a result after (the side effect stands)', async () => {
+        const fn = jest.fn(async (q) => `answer to ${q}`);
+        const tool = (0, index_1.protectTool)('search', fn, { pipeline, mode: 'enforced' });
+        await expect(tool('build a bomb')).rejects.toThrow(base_1.GuardDeniedError);
+        expect(fn).not.toHaveBeenCalled();
+        await expect(tool('weather')).resolves.toBe('answer to weather');
+        const leaky = (0, index_1.protectTool)('leak', async () => 'a bomb recipe', { pipeline, mode: 'enforced' });
+        await expect(leaky()).rejects.toThrow(base_1.GuardDeniedError);
+    });
+    it('asks the authorize step and refuses on no, on a throw, and on a non-answer in enforced mode', async () => {
+        const fn = jest.fn(async () => 'ok');
+        const no = (0, index_1.protectTool)('pay', fn, { pipeline, mode: 'enforced', authorize: async () => ({ allow: false, reason: 'no grant' }) });
+        await expect(no()).rejects.toThrow(/no grant/);
+        const broken = (0, index_1.protectTool)('pay', fn, { pipeline, mode: 'enforced', authorize: async () => { throw new Error('down'); } });
+        await expect(broken()).rejects.toThrow(/authorization check failed/);
+        const odd = (0, index_1.protectTool)('pay', fn, { pipeline, mode: 'enforced', authorize: async () => ({ allow: 'yes' }) });
+        await expect(odd()).rejects.toThrow(index_1.ProtectDeniedError);
+        expect(fn).not.toHaveBeenCalled();
+        const yes = (0, index_1.protectTool)('pay', fn, { pipeline, mode: 'enforced', authorize: async () => ({ allow: true }) });
+        await expect(yes()).resolves.toBe('ok');
+    });
+    it('observe mode records and runs; warn mode runs and warns', async () => {
+        const fn = jest.fn(async (_input) => 'ran');
+        await expect((0, index_1.protectTool)('t', fn, { pipeline, mode: 'observe', authorize: async () => ({ allow: false }) })('bomb')).resolves.toBe('ran');
+        expect(console.warn).not.toHaveBeenCalled();
+        await expect((0, index_1.protectTool)('t', fn, { pipeline, mode: 'warn' })('bomb')).resolves.toBe('ran');
+        expect(console.warn).toHaveBeenCalled();
+    });
+    it('enforced mode with no pipeline anywhere refuses rather than running unchecked', async () => {
+        await expect((0, index_1.protectTool)('t', async () => 1, { mode: 'enforced' })()).rejects.toThrow(/no guard pipeline/);
+    });
+    it('uses the pipeline init() installed and the process mode by default', async () => {
+        config_1.default.guardPipeline = pipeline;
+        (0, mode_1.setProtectState)({ mode: 'enforced', wrapped: [], missing: [] });
+        await expect((0, index_1.protectTool)('t', async (s) => s)('bomb')).rejects.toThrow(base_1.GuardDeniedError);
+    });
+});
+describe('authorizeWithShield360', () => {
+    it('is a refusal when Shield360 is not configured, unreachable, or says no; allow only on allow', async () => {
+        await expect((0, index_1.authorizeWithShield360)({ kind: 'destination', host: 'api.example' }, { agentToken: '', url: '' })).resolves.toMatchObject({ allow: false, reason: 'shield360_not_configured' });
+        const fetchImpl = jest.fn(async () => ({ ok: true, json: async () => ({ outcome: 'deny', reason: 'destination_not_approved' }) }));
+        await expect((0, index_1.authorizeWithShield360)({ kind: 'destination', host: 'api.example' }, { agentToken: 't', url: 'https://s360.example/', fetchImpl })).resolves.toMatchObject({ allow: false, reason: 'destination_not_approved' });
+        const [url, init] = fetchImpl.mock.calls[0];
+        expect(url).toBe('https://s360.example/api/agent-authorization/check');
+        expect(init.headers.Authorization).toBe('Bearer t');
+        const down = jest.fn(async () => { throw new Error('ECONNREFUSED'); });
+        await expect((0, index_1.authorizeWithShield360)({ kind: 'model', model: 'gpt-4o' }, { agentToken: 't', url: 'https://s360.example', fetchImpl: down })).resolves.toMatchObject({ allow: false, reason: expect.stringMatching(/check_unreachable/) });
+        const yes = jest.fn(async () => ({ ok: true, json: async () => ({ outcome: 'allow', reason: 'destination_approved', decisionId: 'd1' }) }));
+        await expect((0, index_1.authorizeWithShield360)({ kind: 'destination', host: 'api.example' }, { agentToken: 't', url: 'https://s360.example', fetchImpl: yes })).resolves.toMatchObject({ allow: true, decisionId: 'd1' });
+    });
+});
+describe('the MCP pre-execution check', () => {
+    it('refuses a tools/call whose arguments a guard denies, in enforced mode only', () => {
+        config_1.default.guardPipeline = new pipeline_1.Pipeline({ guards: [new DenyWord('bomb')], failOpen: false });
+        (0, mode_1.setProtectState)({ mode: 'enforced', wrapped: [], missing: [] });
+        expect(() => (0, mcp_1.checkMcpToolCall)('search', { q: 'a bomb' })).toThrow(base_1.GuardDeniedError);
+        expect(() => (0, mcp_1.checkMcpToolCall)('search', { q: 'weather' })).not.toThrow();
+        (0, mode_1.setProtectState)({ mode: 'warn', wrapped: [], missing: [] });
+        expect(() => (0, mcp_1.checkMcpToolCall)('search', { q: 'a bomb' })).not.toThrow();
+        expect(console.warn).toHaveBeenCalled();
+        (0, mode_1.resetProtectState)();
+        expect(() => (0, mcp_1.checkMcpToolCall)('search', { q: 'a bomb' })).not.toThrow();
+    });
+});
+//# sourceMappingURL=protect.test.js.map

package/dist/protect/__tests__/protect.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protect.test.js","sourceRoot":"","sources":["../../../src/protect/__tests__/protect.test.ts"],"names":[],"mappings":";;;;;AAAA;;;GAGG;AACH,2CAAkH;AAClH,mDAAgD;AAChD,yDAAsI;AACtI,0DAA2C;AAC3C,oCAA4H;AAC5H,kCAAiG;AACjG,gCAA0C;AAE1C,MAAM,QAAS,SAAQ,YAAK;IAG1B,YAA6B,IAAY,EAAE,aAAsB;QAC/D,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QADd,SAAI,GAAJ,IAAI,CAAQ;QAFhC,SAAI,GAAG,WAAW,CAAC;QACnB,WAAM,GAAG,CAAC,iBAAU,CAAC,SAAS,EAAE,iBAAU,CAAC,UAAU,CAAC,CAAC;IAGhE,CAAC;IACD,QAAQ,CAAC,IAAY;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAA,sBAAe,EAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,kBAAW,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAW,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5K,CAAC;CACF;AAED,MAAM,QAAS,SAAQ,YAAK;IAG1B;QACE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAHnB,SAAI,GAAG,UAAU,CAAC;QAClB,WAAM,GAAG,CAAC,iBAAU,CAAC,SAAS,CAAC,CAAC;IAGzC,CAAC;IACD,QAAQ;QACN,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;CACF;AAED,MAAM,aAAc,SAAQ,YAAK;IAG/B;QACE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAHnB,SAAI,GAAG,gBAAgB,CAAC;QACxB,WAAM,GAAG,CAAC,iBAAU,CAAC,SAAS,CAAC,CAAC;IAGzC,CAAC;IACD,QAAQ;QACN,OAAO,IAAA,sBAAe,EAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;CACF;AAED,MAAM,OAAO,GAAG,CAAC,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACjE,MAAM,UAAU,GAAG,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AAErD,UAAU,CAAC,GAAG,EAAE;IACd,IAAA,wBAAiB,GAAE,CAAC;IACpB,gBAAe,CAAC,aAAa,GAAG,SAAS,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;AAExC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,IAAA,yBAAkB,EAAC,UAAU,EAAE,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAA,yBAAkB,EAAC,SAAS,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAA,yBAAkB,EAAC,SAAS,EAAE,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,IAAA,yBAAkB,EAAC,MAAM,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnF,MAAM,CAAC,IAAA,yBAAkB,EAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAA,qBAAc,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC3M,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,MAAM,QAAQ,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;QACpG,MAAM,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACzI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,oCAAoC,CAAC,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;QACxI,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,6BAAe,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;IAChJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,IAAI,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,wEAAwE;QACxE,MAAM,CAAC,IAAA,4BAAc,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,qGAAqG;QACrG,MAAM,MAAM,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAc,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,0BAAkB,CAAC,CAAC;QAC7H,IAAI,CAAC;YACH,IAAA,4BAAc,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAE,CAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,OAAO,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC;QACtC,4DAA4D;QAC5D,MAAM,CAAC,IAAA,4BAAc,EAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAc,EAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACxI,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gHAAgH,EAAE,GAAG,EAAE;QACxH,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACpJ,MAAM,GAAG,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAA,4BAAc,EAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnJ,mDAAmD;QACnD,MAAM,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,6BAAe,EAAC,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,6BAAqB,CAAC,CAAC;QAC9J,MAAM,CAAC,IAAA,wBAAgB,GAAE,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,kCAAkC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,MAAM,GAAG,IAAA,6BAAe,EAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAe,CAAC,aAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,IAAA,wBAAgB,GAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC7D,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,IAAA,wBAAgB,GAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,CAAC,IAAA,wBAAgB,GAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,IAAA,gCAAkB,EAAC,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChM,MAAM,CAAC,IAAA,mCAAqB,EAAC,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/J,MAAM,CAAC,IAAA,mCAAqB,EAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,MAAM,QAAQ,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnF,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAA,mBAAW,EAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAA,mBAAW,EAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/F,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACjI,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3H,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAA2B,EAAE,CAAC,EAAE,CAAC,CAAC;QACpI,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAkB,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7G,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,MAAM,CAAC,IAAA,mBAAW,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1I,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,MAAM,CAAC,IAAA,mBAAW,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5F,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,MAAM,CAAC,IAAA,mBAAW,EAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,gBAAe,CAAC,aAAa,GAAG,QAAQ,CAAC;QACzC,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,CAAC,IAAA,mBAAW,EAAC,GAAG,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,MAAM,CAAC,IAAA,8BAAsB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC7L,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,EAAE,CAAC,CAA4B,CAAC;QAC9J,MAAM,MAAM,CAAC,IAAA,8BAAsB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC9N,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAI,SAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACvE,MAAM,CAAE,IAA4C,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAA4B,CAAC;QAClG,MAAM,MAAM,CAAC,IAAA,8BAAsB,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACzO,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAA4B,CAAC;QACvK,MAAM,MAAM,CAAC,IAAA,8BAAsB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACjN,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,gBAAe,CAAC,aAAa,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAClG,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAgB,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAgB,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACzE,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAgB,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACxC,IAAA,wBAAiB,GAAE,CAAC;QACpB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAgB,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/protect/index.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Shield Protect -- enforcement APIs, kept apart from the tracing APIs.
+ *
+ *   protectTool(name, fn, options)   wrap a function the agent may call: its
+ *                                    arguments are checked before it runs,
+ *                                    an optional authorize step is asked,
+ *                                    and its result is checked before it is
+ *                                    returned. In enforced mode every failure
+ *                                    refuses the call.
+ *   authorizeWithShield360(target)   ask Shield360's decision service about a
+ *                                    model or a destination, as the agent
+ *                                    (SHIELD360_AGENT_TOKEN).
+ *   protectReadiness()               what this process can claim.
+ *
+ * `trace`, `startTrace` and the instrumentations record; these refuse.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/protect/__init__.py
+ */
+import { Pipeline } from '../guard/pipeline';
+import { ProtectMode } from './mode';
+export { ProtectDeniedError, ProtectError, ProtectReadinessError, protectReadiness, resolveProtectMode, resolveProtect, PROTECT_MODES, } from './mode';
+export type { ProtectMode, ProtectConfig, ProtectReadiness } from './mode';
+export type ProtectToolOptions<A extends unknown[]> = {
+    /** The pipeline to check with; defaults to the one init() installed. */
+    pipeline?: Pipeline;
+    /** The mode; defaults to the process's. With none set anywhere, deny findings refuse (as a guard's own action says). */
+    mode?: ProtectMode;
+    /** How the arguments are turned into text for the guards. Default: canonical JSON of every argument. */
+    describeArgs?: (...args: A) => string;
+    /** How the result is turned into text for postflight guards. Default: canonical JSON. */
+    describeResult?: (result: unknown) => string;
+    /**
+     * An authorization step asked after the guards and before the call: a
+     * grant lookup, a Shield360 decision (authorizeWithShield360), a budget.
+     * A refusal, a throw or a non-boolean answer refuses the call in enforced
+     * mode; the call never runs on an answer it did not get.
+     */
+    authorize?: (...args: A) => Promise<{
+        allow: boolean;
+        reason?: string;
+    }> | {
+        allow: boolean;
+        reason?: string;
+    };
+};
+export type ProtectDecision = {
+    tool: string;
+    phase: 'preflight' | 'authorize' | 'postflight';
+    outcome: 'allow' | 'deny' | 'observed';
+    reason: string;
+};
+/** Canonical JSON: keys sorted, undefined dropped, so the same call reads the same. */
+export declare function canonicalJson(value: unknown, depth?: number): string;
+/**
+ * Whether a pipeline result stops the call under a mode. With no mode
+ * (legacy), a DENY stops it as before. In observe and warn it is recorded,
+ * and in warn also logged, and the call goes on. In enforced it stops.
+ */
+export declare function findingStops(mode: ProtectMode | undefined, denied: boolean): boolean;
+/**
+ * Wraps a function as a protected tool. Returns a function with the same
+ * signature. Nothing about tracing: the call is recorded as a decision
+ * event on the active span, if any, and that is all.
+ */
+export declare function protectTool<A extends unknown[], R>(name: string, fn: (...args: A) => Promise<R> | R, options?: ProtectToolOptions<A>): (...args: A) => Promise<R>;
+export type AuthorizeTarget = {
+    kind: 'model';
+    model: string;
+    provider?: string;
+    inputTokens?: number;
+    maxOutputTokens?: number;
+    estimatedCostUsd?: number;
+} | {
+    kind: 'destination';
+    host: string;
+    method?: string;
+};
+export type AuthorizeOptions = {
+    /** The agent's token; defaults to SHIELD360_AGENT_TOKEN. */
+    agentToken?: string;
+    /** Shield360's URL; defaults to init()'s shield360Url, then SHIELD360_URL. */
+    url?: string;
+    onBehalfOf?: string;
+    environment?: string;
+    timeoutMs?: number;
+    fetchImpl?: typeof fetch;
+};
+export type AuthorizeAnswer = {
+    allow: boolean;
+    reason: string;
+    outcome?: string;
+    message?: string;
+    policyVersion?: string;
+    decisionId?: string | null;
+};
+/**
+ * Asks Shield360 whether this agent may make a model call or reach a host
+ * (POST /api/agent-authorization/check). The agent's token decides the agent
+ * and its environment. An answer that did not arrive is `allow: false` with
+ * the reason: a caller in enforced mode treats it as a refusal, never a
+ * verdict in the agent's favour.
+ */
+export declare function authorizeWithShield360(target: AuthorizeTarget, options?: AuthorizeOptions): Promise<AuthorizeAnswer>;

package/dist/protect/index.js

@@ -0,0 +1,191 @@
+"use strict";
+/**
+ * Shield Protect -- enforcement APIs, kept apart from the tracing APIs.
+ *
+ *   protectTool(name, fn, options)   wrap a function the agent may call: its
+ *                                    arguments are checked before it runs,
+ *                                    an optional authorize step is asked,
+ *                                    and its result is checked before it is
+ *                                    returned. In enforced mode every failure
+ *                                    refuses the call.
+ *   authorizeWithShield360(target)   ask Shield360's decision service about a
+ *                                    model or a destination, as the agent
+ *                                    (SHIELD360_AGENT_TOKEN).
+ *   protectReadiness()               what this process can claim.
+ *
+ * `trace`, `startTrace` and the instrumentations record; these refuse.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/protect/__init__.py
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PROTECT_MODES = exports.resolveProtect = exports.resolveProtectMode = exports.protectReadiness = exports.ProtectReadinessError = exports.ProtectError = exports.ProtectDeniedError = void 0;
+exports.canonicalJson = canonicalJson;
+exports.findingStops = findingStops;
+exports.protectTool = protectTool;
+exports.authorizeWithShield360 = authorizeWithShield360;
+const api_1 = require("@opentelemetry/api");
+const config_1 = __importDefault(require("../config"));
+const base_1 = require("../guard/base");
+const mode_1 = require("./mode");
+var mode_2 = require("./mode");
+Object.defineProperty(exports, "ProtectDeniedError", { enumerable: true, get: function () { return mode_2.ProtectDeniedError; } });
+Object.defineProperty(exports, "ProtectError", { enumerable: true, get: function () { return mode_2.ProtectError; } });
+Object.defineProperty(exports, "ProtectReadinessError", { enumerable: true, get: function () { return mode_2.ProtectReadinessError; } });
+Object.defineProperty(exports, "protectReadiness", { enumerable: true, get: function () { return mode_2.protectReadiness; } });
+Object.defineProperty(exports, "resolveProtectMode", { enumerable: true, get: function () { return mode_2.resolveProtectMode; } });
+Object.defineProperty(exports, "resolveProtect", { enumerable: true, get: function () { return mode_2.resolveProtect; } });
+Object.defineProperty(exports, "PROTECT_MODES", { enumerable: true, get: function () { return mode_2.PROTECT_MODES; } });
+const MAX_DESCRIBED = 1000000;
+/** Canonical JSON: keys sorted, undefined dropped, so the same call reads the same. */
+function canonicalJson(value, depth = 0) {
+    if (depth > 32)
+        return '"…"';
+    if (Array.isArray(value))
+        return `[${value.map((v) => canonicalJson(v === undefined ? null : v, depth + 1)).join(',')}]`;
+    if (value && typeof value === 'object') {
+        const entries = Object.entries(value)
+            .filter(([, v]) => v !== undefined && typeof v !== 'function')
+            .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+        return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v, depth + 1)}`).join(',')}}`;
+    }
+    if (typeof value === 'bigint')
+        return JSON.stringify(String(value));
+    if (typeof value === 'function' || typeof value === 'symbol')
+        return 'null';
+    return JSON.stringify(value ?? null);
+}
+function record(decision) {
+    try {
+        const span = api_1.trace.getActiveSpan();
+        span?.addEvent('shield360.protect.decision', {
+            'shield360.protect.tool': decision.tool,
+            'shield360.protect.phase': decision.phase,
+            'shield360.protect.outcome': decision.outcome,
+            'shield360.protect.reason': decision.reason.slice(0, 500),
+        });
+    }
+    catch {
+        // recording never changes a decision
+    }
+}
+/**
+ * Whether a pipeline result stops the call under a mode. With no mode
+ * (legacy), a DENY stops it as before. In observe and warn it is recorded,
+ * and in warn also logged, and the call goes on. In enforced it stops.
+ */
+function findingStops(mode, denied) {
+    if (!denied)
+        return false;
+    if (mode === undefined)
+        return true;
+    return (0, mode_1.refuses)(mode);
+}
+function evaluateText(pipeline, text, phase, tool, mode) {
+    if (!text)
+        return;
+    const bound = pipeline.scanBound();
+    if ((0, mode_1.refuses)(mode) && bound > 0 && text.length > bound) {
+        record({ tool, phase, outcome: 'deny', reason: `input of ${text.length} characters is over the ${bound}-character scan bound` });
+        throw new mode_1.ProtectDeniedError('oversized', `Shield360 Protect refused ${tool}: ${text.length} characters is more than its guards scan (${bound}); send less.`);
+    }
+    let result;
+    try {
+        result = pipeline.evaluate(text, phase);
+    }
+    catch (e) {
+        if ((0, mode_1.refuses)(mode)) {
+            record({ tool, phase, outcome: 'deny', reason: `guard failed: ${e?.message ?? String(e)}` });
+            throw new mode_1.ProtectDeniedError('guard_failed', `Shield360 Protect refused ${tool}: a guard failed and enforced mode does not run unchecked calls.`);
+        }
+        throw e;
+    }
+    const denied = result.action === base_1.GuardAction.DENY;
+    if (!denied) {
+        record({ tool, phase, outcome: 'allow', reason: result.action });
+        return;
+    }
+    if (findingStops(mode, true)) {
+        record({ tool, phase, outcome: 'deny', reason: result.explanation });
+        throw new base_1.GuardDeniedError(result);
+    }
+    record({ tool, phase, outcome: 'observed', reason: result.explanation });
+    if (mode === 'warn')
+        console.warn(`[shield360] Protect (warn mode): ${tool} would have been refused at ${phase}: ${result.explanation}`);
+}
+/**
+ * Wraps a function as a protected tool. Returns a function with the same
+ * signature. Nothing about tracing: the call is recorded as a decision
+ * event on the active span, if any, and that is all.
+ */
+function protectTool(name, fn, options = {}) {
+    const describeArgs = options.describeArgs ?? ((...args) => canonicalJson(args).slice(0, MAX_DESCRIBED));
+    const describeResult = options.describeResult ?? ((result) => canonicalJson(result).slice(0, MAX_DESCRIBED));
+    return async (...args) => {
+        const mode = options.mode ?? (0, mode_1.currentProtectMode)();
+        const pipeline = options.pipeline ?? config_1.default.guardPipeline;
+        if (!pipeline && (0, mode_1.refuses)(mode)) {
+            throw new mode_1.ProtectDeniedError('guard_failed', `Shield360 Protect refused ${name}: enforced mode has no guard pipeline; pass guards to init() or to protectTool().`);
+        }
+        if (pipeline)
+            evaluateText(pipeline, describeArgs(...args), base_1.GuardPhase.PREFLIGHT, name, mode);
+        if (options.authorize) {
+            let verdict;
+            try {
+                verdict = await options.authorize(...args);
+            }
+            catch (e) {
+                record({ tool: name, phase: 'authorize', outcome: (0, mode_1.refuses)(mode) ? 'deny' : 'observed', reason: `authorize failed: ${e?.message ?? String(e)}` });
+                if ((0, mode_1.refuses)(mode))
+                    throw new mode_1.ProtectDeniedError('authorize_failed', `Shield360 Protect refused ${name}: the authorization check failed and enforced mode does not run unchecked calls.`);
+            }
+            if (verdict !== undefined) {
+                const allowed = verdict && verdict.allow === true;
+                record({ tool: name, phase: 'authorize', outcome: allowed ? 'allow' : findingStops(mode, true) ? 'deny' : 'observed', reason: verdict?.reason ?? '' });
+                if (!allowed && findingStops(mode, true))
+                    throw new mode_1.ProtectDeniedError('not_authorized', `Shield360 Protect refused ${name}: ${verdict?.reason || 'not authorized'}.`);
+            }
+        }
+        const result = await fn(...args);
+        if (pipeline)
+            evaluateText(pipeline, describeResult(result), base_1.GuardPhase.POSTFLIGHT, name, mode);
+        return result;
+    };
+}
+/**
+ * Asks Shield360 whether this agent may make a model call or reach a host
+ * (POST /api/agent-authorization/check). The agent's token decides the agent
+ * and its environment. An answer that did not arrive is `allow: false` with
+ * the reason: a caller in enforced mode treats it as a refusal, never a
+ * verdict in the agent's favour.
+ */
+async function authorizeWithShield360(target, options = {}) {
+    const token = options.agentToken ?? process.env.SHIELD360_AGENT_TOKEN ?? '';
+    const base = (options.url ?? config_1.default.shield360Url ?? process.env.SHIELD360_URL ?? '').replace(/\/+$/, '');
+    if (!token || !base)
+        return { allow: false, reason: 'shield360_not_configured' };
+    const doFetch = options.fetchImpl ?? fetch;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 5000);
+    try {
+        const headers = { 'Content-Type': 'application/json', Authorization: `Bearer ${token}` };
+        if (options.onBehalfOf)
+            headers['X-Shield360-On-Behalf-Of'] = options.onBehalfOf;
+        if (options.environment)
+            headers['X-Shield360-Environment'] = options.environment;
+        const res = await doFetch(`${base}/api/agent-authorization/check`, { method: 'POST', headers, body: JSON.stringify(target), signal: controller.signal });
+        if (!res.ok)
+            return { allow: false, reason: `check_http_${res.status}` };
+        const body = (await res.json());
+        return { allow: body.outcome === 'allow', reason: body.reason ?? 'unknown', outcome: body.outcome, message: body.message, policyVersion: body.policyVersion, decisionId: body.decisionId ?? null };
+    }
+    catch (e) {
+        return { allow: false, reason: `check_unreachable: ${e?.message ?? String(e)}` };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/protect/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/protect/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;AA+CH,sCAYC;AAqBD,oCAIC;AAqCD,kCA4BC;AA8BD,wDAoBC;AArMD,4CAAwD;AACxD,uDAAwC;AACxC,wCAA0E;AAE1E,iCAAsF;AAEtF,+BAQgB;AAPd,0GAAA,kBAAkB,OAAA;AAClB,oGAAA,YAAY,OAAA;AACZ,6GAAA,qBAAqB,OAAA;AACrB,wGAAA,gBAAgB,OAAA;AAChB,0GAAA,kBAAkB,OAAA;AAClB,sGAAA,cAAc,OAAA;AACd,qGAAA,aAAa,OAAA;AA6Bf,MAAM,aAAa,GAAG,OAAS,CAAC;AAEhC,uFAAuF;AACvF,SAAgB,aAAa,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACrD,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACzH,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7D,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,UAAU,CAAC;aAC7D,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACzG,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC5E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,MAAM,CAAC,QAAyB;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAS,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,EAAE,QAAQ,CAAC,4BAA4B,EAAE;YAC3C,wBAAwB,EAAE,QAAQ,CAAC,IAAI;YACvC,yBAAyB,EAAE,QAAQ,CAAC,KAAK;YACzC,2BAA2B,EAAE,QAAQ,CAAC,OAAO;YAC7C,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SAC1D,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAAC,IAA6B,EAAE,MAAe;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAC,QAAkB,EAAE,IAAY,EAAE,KAAiB,EAAE,IAAY,EAAE,IAA6B;IACpH,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACnC,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACtD,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC,MAAM,2BAA2B,KAAK,uBAAuB,EAAE,CAAC,CAAC;QACjI,MAAM,IAAI,yBAAkB,CAAC,WAAW,EAAE,6BAA6B,IAAI,KAAK,IAAI,CAAC,MAAM,6CAA6C,KAAK,eAAe,CAAC,CAAC;IAChK,CAAC;IACD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAkB,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxG,MAAM,IAAI,yBAAkB,CAAC,cAAc,EAAE,6BAA6B,IAAI,kEAAkE,CAAC,CAAC;QACpJ,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,kBAAW,CAAC,IAAI,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,uBAAgB,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACzE,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,oCAAoC,IAAI,+BAA+B,KAAK,KAAK,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3I,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAyB,IAAY,EAAE,EAAkC,EAAE,UAAiC,EAAE;IACvI,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,IAAO,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3G,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,MAAe,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACtH,OAAO,KAAK,EAAE,GAAG,IAAO,EAAc,EAAE;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAA,yBAAkB,GAAE,CAAC;QAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,gBAAe,CAAC,aAAa,CAAC;QACnE,IAAI,CAAC,QAAQ,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAkB,CAAC,cAAc,EAAE,6BAA6B,IAAI,mFAAmF,CAAC,CAAC;QACrK,CAAC;QACD,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,IAAI,CAAC,EAAE,iBAAU,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,OAAwD,CAAC;YAC7D,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAA,cAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,qBAAsB,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5J,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,yBAAkB,CAAC,kBAAkB,EAAE,6BAA6B,IAAI,kFAAkF,CAAC,CAAC;YAC3L,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC;gBAClD,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;gBACvJ,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC;oBAAE,MAAM,IAAI,yBAAkB,CAAC,gBAAgB,EAAE,6BAA6B,IAAI,KAAK,OAAO,EAAE,MAAM,IAAI,gBAAgB,GAAG,CAAC,CAAC;YACzK,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACjC,IAAI,QAAQ;YAAE,YAAY,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,iBAAU,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAChG,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC;AAuBD;;;;;;GAMG;AACI,KAAK,UAAU,sBAAsB,CAAC,MAAuB,EAAE,UAA4B,EAAE;IAClG,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAC5E,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,gBAAe,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClH,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,SAAS,IAAI,IAAK,CAAC,CAAC;IAC/E,IAAI,CAAC;QACH,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;QACjH,IAAI,OAAO,CAAC,UAAU;YAAE,OAAO,CAAC,0BAA0B,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;QACjF,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,CAAC,yBAAyB,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QAClF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,IAAI,gCAAgC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACzJ,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAgH,CAAC;QAC/I,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;IACrM,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAuB,CAAW,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC9F,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/protect/mcp.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Shield Protect -- the pre-execution check on an MCP client's tools/call.
+ *
+ * The MCP instrumentation records every call; this is the one place it can
+ * refuse one. The tool's arguments, as canonical JSON, go through the
+ * preflight guards init() installed, under the process's Protect mode:
+ * observe records, warn records and logs, enforced refuses (and refuses when
+ * a guard fails, or when the arguments are past the scan bound). With no
+ * pipeline or no mode, nothing changes: the call is recorded as before.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/protect/_mcp.py
+ */
+export declare function checkMcpToolCall(toolName: string, toolArguments: unknown): void;

package/dist/protect/mcp.js

@@ -0,0 +1,49 @@
+"use strict";
+/**
+ * Shield Protect -- the pre-execution check on an MCP client's tools/call.
+ *
+ * The MCP instrumentation records every call; this is the one place it can
+ * refuse one. The tool's arguments, as canonical JSON, go through the
+ * preflight guards init() installed, under the process's Protect mode:
+ * observe records, warn records and logs, enforced refuses (and refuses when
+ * a guard fails, or when the arguments are past the scan bound). With no
+ * pipeline or no mode, nothing changes: the call is recorded as before.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/protect/_mcp.py
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.checkMcpToolCall = checkMcpToolCall;
+const config_1 = __importDefault(require("../config"));
+const base_1 = require("../guard/base");
+const index_1 = require("./index");
+const mode_1 = require("./mode");
+function checkMcpToolCall(toolName, toolArguments) {
+    const mode = (0, mode_1.currentProtectMode)();
+    const pipeline = config_1.default.guardPipeline;
+    if (!pipeline || mode === undefined)
+        return;
+    const text = (0, index_1.canonicalJson)(toolArguments ?? {});
+    const bound = pipeline.scanBound();
+    if ((0, mode_1.refuses)(mode) && bound > 0 && text.length > bound) {
+        throw new mode_1.ProtectDeniedError('oversized', `Shield360 Protect refused MCP tool ${toolName}: ${text.length} characters of arguments is more than its guards scan (${bound}).`);
+    }
+    let result;
+    try {
+        result = pipeline.evaluate(text, base_1.GuardPhase.PREFLIGHT);
+    }
+    catch (e) {
+        if ((0, mode_1.refuses)(mode))
+            throw new mode_1.ProtectDeniedError('guard_failed', `Shield360 Protect refused MCP tool ${toolName}: a guard failed and enforced mode does not run unchecked calls.`);
+        throw e;
+    }
+    if (result.action !== base_1.GuardAction.DENY)
+        return;
+    if ((0, mode_1.refuses)(mode))
+        throw new base_1.GuardDeniedError(result);
+    if (mode === 'warn')
+        console.warn(`[shield360] Protect (warn mode): MCP tool ${toolName} would have been refused: ${result.explanation}`);
+}
+//# sourceMappingURL=mcp.js.map

package/dist/protect/mcp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/protect/mcp.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;AAOH,4CAmBC;AAxBD,uDAAwC;AACxC,wCAA0E;AAC1E,mCAAwC;AACxC,iCAAyE;AAEzE,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,aAAsB;IACvE,MAAM,IAAI,GAAG,IAAA,yBAAkB,GAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,gBAAe,CAAC,aAAa,CAAC;IAC/C,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO;IAC5C,MAAM,IAAI,GAAG,IAAA,qBAAa,EAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACnC,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QACtD,MAAM,IAAI,yBAAkB,CAAC,WAAW,EAAE,sCAAsC,QAAQ,KAAK,IAAI,CAAC,MAAM,0DAA0D,KAAK,IAAI,CAAC,CAAC;IAC/K,CAAC;IACD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,iBAAU,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC;YAAE,MAAM,IAAI,yBAAkB,CAAC,cAAc,EAAE,sCAAsC,QAAQ,kEAAkE,CAAC,CAAC;QAClL,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAW,CAAC,IAAI;QAAE,OAAO;IAC/C,IAAI,IAAA,cAAO,EAAC,IAAI,CAAC;QAAE,MAAM,IAAI,uBAAgB,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,6CAA6C,QAAQ,6BAA6B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5I,CAAC"}