shield360 1.0.1 → 1.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (424) hide show
  1. package/README.md +392 -37
  2. package/dist/__tests__/build-info.test.d.ts +1 -0
  3. package/dist/__tests__/build-info.test.js +196 -0
  4. package/dist/__tests__/build-info.test.js.map +1 -0
  5. package/dist/__tests__/code-location.test.d.ts +1 -0
  6. package/dist/__tests__/code-location.test.js +180 -0
  7. package/dist/__tests__/code-location.test.js.map +1 -0
  8. package/dist/__tests__/masking.test.d.ts +1 -0
  9. package/dist/__tests__/masking.test.js +66 -0
  10. package/dist/__tests__/masking.test.js.map +1 -0
  11. package/dist/__tests__/pricing-claude-5.test.js +3 -0
  12. package/dist/__tests__/pricing-claude-5.test.js.map +1 -1
  13. package/dist/__tests__/register.e2e.test.d.ts +1 -0
  14. package/dist/__tests__/register.e2e.test.js +264 -0
  15. package/dist/__tests__/register.e2e.test.js.map +1 -0
  16. package/dist/__tests__/register.test.js +60 -0
  17. package/dist/__tests__/register.test.js.map +1 -1
  18. package/dist/agents/__tests__/agents.test.d.ts +1 -0
  19. package/dist/agents/__tests__/agents.test.js +529 -0
  20. package/dist/agents/__tests__/agents.test.js.map +1 -0
  21. package/dist/agents/index.d.ts +15 -0
  22. package/dist/agents/index.js +25 -0
  23. package/dist/agents/index.js.map +1 -0
  24. package/dist/agents/passport.d.ts +92 -0
  25. package/dist/agents/passport.js +301 -0
  26. package/dist/agents/passport.js.map +1 -0
  27. package/dist/agents/policy.d.ts +24 -0
  28. package/dist/agents/policy.js +93 -0
  29. package/dist/agents/policy.js.map +1 -0
  30. package/dist/agents/replay.d.ts +20 -0
  31. package/dist/agents/replay.js +47 -0
  32. package/dist/agents/replay.js.map +1 -0
  33. package/dist/agents/report.d.ts +30 -0
  34. package/dist/agents/report.js +93 -0
  35. package/dist/agents/report.js.map +1 -0
  36. package/dist/agents/types.d.ts +148 -0
  37. package/dist/agents/types.js +37 -0
  38. package/dist/agents/types.js.map +1 -0
  39. package/dist/agents/verifier.d.ts +33 -0
  40. package/dist/agents/verifier.js +276 -0
  41. package/dist/agents/verifier.js.map +1 -0
  42. package/dist/ai-security/__tests__/bench.test.d.ts +1 -0
  43. package/dist/ai-security/__tests__/bench.test.js +50 -0
  44. package/dist/ai-security/__tests__/bench.test.js.map +1 -0
  45. package/dist/ai-security/__tests__/checks.test.d.ts +1 -0
  46. package/dist/ai-security/__tests__/checks.test.js +248 -0
  47. package/dist/ai-security/__tests__/checks.test.js.map +1 -0
  48. package/dist/ai-security/__tests__/config.test.d.ts +1 -0
  49. package/dist/ai-security/__tests__/config.test.js +164 -0
  50. package/dist/ai-security/__tests__/config.test.js.map +1 -0
  51. package/dist/ai-security/__tests__/detection.test.d.ts +1 -0
  52. package/dist/ai-security/__tests__/detection.test.js +114 -0
  53. package/dist/ai-security/__tests__/detection.test.js.map +1 -0
  54. package/dist/ai-security/__tests__/fixtures.d.ts +8 -0
  55. package/dist/ai-security/__tests__/fixtures.js +30 -0
  56. package/dist/ai-security/__tests__/fixtures.js.map +1 -0
  57. package/dist/ai-security/__tests__/hooks.test.d.ts +1 -0
  58. package/dist/ai-security/__tests__/hooks.test.js +174 -0
  59. package/dist/ai-security/__tests__/hooks.test.js.map +1 -0
  60. package/dist/ai-security/__tests__/stream.test.d.ts +1 -0
  61. package/dist/ai-security/__tests__/stream.test.js +85 -0
  62. package/dist/ai-security/__tests__/stream.test.js.map +1 -0
  63. package/dist/ai-security/config.d.ts +94 -0
  64. package/dist/ai-security/config.js +241 -0
  65. package/dist/ai-security/config.js.map +1 -0
  66. package/dist/ai-security/context.d.ts +45 -0
  67. package/dist/ai-security/context.js +108 -0
  68. package/dist/ai-security/context.js.map +1 -0
  69. package/dist/ai-security/custom-kinds.d.ts +23 -0
  70. package/dist/ai-security/custom-kinds.js +97 -0
  71. package/dist/ai-security/custom-kinds.js.map +1 -0
  72. package/dist/ai-security/events.d.ts +77 -0
  73. package/dist/ai-security/events.js +153 -0
  74. package/dist/ai-security/events.js.map +1 -0
  75. package/dist/ai-security/hooks.d.ts +48 -0
  76. package/dist/ai-security/hooks.js +461 -0
  77. package/dist/ai-security/hooks.js.map +1 -0
  78. package/dist/ai-security/index.d.ts +209 -0
  79. package/dist/ai-security/index.js +587 -0
  80. package/dist/ai-security/index.js.map +1 -0
  81. package/dist/ai-security/injection-rules.json +1024 -0
  82. package/dist/ai-security/injection.d.ts +46 -0
  83. package/dist/ai-security/injection.js +635 -0
  84. package/dist/ai-security/injection.js.map +1 -0
  85. package/dist/ai-security/jailbreak.d.ts +38 -0
  86. package/dist/ai-security/jailbreak.js +73 -0
  87. package/dist/ai-security/jailbreak.js.map +1 -0
  88. package/dist/ai-security/limits.d.ts +84 -0
  89. package/dist/ai-security/limits.js +195 -0
  90. package/dist/ai-security/limits.js.map +1 -0
  91. package/dist/ai-security/mcp.d.ts +82 -0
  92. package/dist/ai-security/mcp.js +150 -0
  93. package/dist/ai-security/mcp.js.map +1 -0
  94. package/dist/ai-security/output.d.ts +107 -0
  95. package/dist/ai-security/output.js +390 -0
  96. package/dist/ai-security/output.js.map +1 -0
  97. package/dist/ai-security/policy.d.ts +125 -0
  98. package/dist/ai-security/policy.js +196 -0
  99. package/dist/ai-security/policy.js.map +1 -0
  100. package/dist/ai-security/rag.d.ts +70 -0
  101. package/dist/ai-security/rag.js +174 -0
  102. package/dist/ai-security/rag.js.map +1 -0
  103. package/dist/ai-security/tool-rules.json +203 -0
  104. package/dist/ai-security/tools.d.ts +46 -0
  105. package/dist/ai-security/tools.js +62 -0
  106. package/dist/ai-security/tools.js.map +1 -0
  107. package/dist/budgets/__tests__/budgets.test.d.ts +1 -0
  108. package/dist/budgets/__tests__/budgets.test.js +134 -0
  109. package/dist/budgets/__tests__/budgets.test.js.map +1 -0
  110. package/dist/budgets/auto.d.ts +25 -0
  111. package/dist/budgets/auto.js +63 -0
  112. package/dist/budgets/auto.js.map +1 -0
  113. package/dist/budgets/index.d.ts +110 -0
  114. package/dist/budgets/index.js +239 -0
  115. package/dist/budgets/index.js.map +1 -0
  116. package/dist/config.js +1 -1
  117. package/dist/config.js.map +1 -1
  118. package/dist/customer/__tests__/customer.test.d.ts +1 -0
  119. package/dist/customer/__tests__/customer.test.js +155 -0
  120. package/dist/customer/__tests__/customer.test.js.map +1 -0
  121. package/dist/customer/index.d.ts +48 -0
  122. package/dist/customer/index.js +132 -0
  123. package/dist/customer/index.js.map +1 -0
  124. package/dist/feedback/__tests__/feedback.test.d.ts +1 -0
  125. package/dist/feedback/__tests__/feedback.test.js +80 -0
  126. package/dist/feedback/__tests__/feedback.test.js.map +1 -0
  127. package/dist/feedback/index.d.ts +48 -0
  128. package/dist/feedback/index.js +97 -0
  129. package/dist/feedback/index.js.map +1 -0
  130. package/dist/flags/__tests__/flags.test.d.ts +1 -0
  131. package/dist/flags/__tests__/flags.test.js +301 -0
  132. package/dist/flags/__tests__/flags.test.js.map +1 -0
  133. package/dist/flags/client.d.ts +131 -0
  134. package/dist/flags/client.js +301 -0
  135. package/dist/flags/client.js.map +1 -0
  136. package/dist/flags/engine.d.ts +200 -0
  137. package/dist/flags/engine.js +677 -0
  138. package/dist/flags/engine.js.map +1 -0
  139. package/dist/flags/index.d.ts +4 -0
  140. package/dist/flags/index.js +16 -0
  141. package/dist/flags/index.js.map +1 -0
  142. package/dist/guard/__tests__/findings.test.js +28 -9
  143. package/dist/guard/__tests__/findings.test.js.map +1 -1
  144. package/dist/guard/__tests__/report.test.js +67 -0
  145. package/dist/guard/__tests__/report.test.js.map +1 -1
  146. package/dist/guard/base.d.ts +2 -0
  147. package/dist/guard/base.js +4 -0
  148. package/dist/guard/base.js.map +1 -1
  149. package/dist/guard/findings.d.ts +12 -2
  150. package/dist/guard/findings.js +19 -49
  151. package/dist/guard/findings.js.map +1 -1
  152. package/dist/guard/heartbeat.d.ts +34 -0
  153. package/dist/guard/heartbeat.js +83 -0
  154. package/dist/guard/heartbeat.js.map +1 -0
  155. package/dist/guard/integration.d.ts +33 -3
  156. package/dist/guard/integration.js +106 -32
  157. package/dist/guard/integration.js.map +1 -1
  158. package/dist/guard/pipeline.d.ts +10 -1
  159. package/dist/guard/pipeline.js +14 -0
  160. package/dist/guard/pipeline.js.map +1 -1
  161. package/dist/guard/report.d.ts +24 -1
  162. package/dist/guard/report.js +67 -18
  163. package/dist/guard/report.js.map +1 -1
  164. package/dist/index.d.ts +90 -0
  165. package/dist/index.js +225 -3
  166. package/dist/index.js.map +1 -1
  167. package/dist/instrumentation/__tests__/langchain-wrapper.test.js +1 -1
  168. package/dist/instrumentation/__tests__/langchain-wrapper.test.js.map +1 -1
  169. package/dist/instrumentation/anthropic/wrapper.js +4 -0
  170. package/dist/instrumentation/anthropic/wrapper.js.map +1 -1
  171. package/dist/instrumentation/mcp/wrapper.js +7 -1
  172. package/dist/instrumentation/mcp/wrapper.js.map +1 -1
  173. package/dist/instrumentation/openai/wrapper.js +6 -0
  174. package/dist/instrumentation/openai/wrapper.js.map +1 -1
  175. package/dist/masking.d.ts +42 -0
  176. package/dist/masking.js +197 -0
  177. package/dist/masking.js.map +1 -0
  178. package/dist/otel/__tests__/app-logs-safety.test.d.ts +1 -0
  179. package/dist/otel/__tests__/app-logs-safety.test.js +129 -0
  180. package/dist/otel/__tests__/app-logs-safety.test.js.map +1 -0
  181. package/dist/otel/__tests__/app-logs.test.d.ts +1 -0
  182. package/dist/otel/__tests__/app-logs.test.js +269 -0
  183. package/dist/otel/__tests__/app-logs.test.js.map +1 -0
  184. package/dist/otel/__tests__/log-auto.test.d.ts +1 -0
  185. package/dist/otel/__tests__/log-auto.test.js +125 -0
  186. package/dist/otel/__tests__/log-auto.test.js.map +1 -0
  187. package/dist/otel/__tests__/log-bridges.test.d.ts +1 -0
  188. package/dist/otel/__tests__/log-bridges.test.js +170 -0
  189. package/dist/otel/__tests__/log-bridges.test.js.map +1 -0
  190. package/dist/otel/__tests__/system-metrics.test.d.ts +1 -0
  191. package/dist/otel/__tests__/system-metrics.test.js +79 -0
  192. package/dist/otel/__tests__/system-metrics.test.js.map +1 -0
  193. package/dist/otel/app-logs.d.ts +80 -0
  194. package/dist/otel/app-logs.js +195 -0
  195. package/dist/otel/app-logs.js.map +1 -0
  196. package/dist/otel/build-info.d.ts +23 -0
  197. package/dist/otel/build-info.js +176 -0
  198. package/dist/otel/build-info.js.map +1 -0
  199. package/dist/otel/code-location.d.ts +49 -0
  200. package/dist/otel/code-location.js +233 -0
  201. package/dist/otel/code-location.js.map +1 -0
  202. package/dist/otel/events.d.ts +1 -0
  203. package/dist/otel/events.js +21 -12
  204. package/dist/otel/events.js.map +1 -1
  205. package/dist/otel/log-auto.d.ts +44 -0
  206. package/dist/otel/log-auto.js +200 -0
  207. package/dist/otel/log-auto.js.map +1 -0
  208. package/dist/otel/log-bridges.d.ts +54 -0
  209. package/dist/otel/log-bridges.js +307 -0
  210. package/dist/otel/log-bridges.js.map +1 -0
  211. package/dist/otel/system-metrics.d.ts +39 -0
  212. package/dist/otel/system-metrics.js +166 -0
  213. package/dist/otel/system-metrics.js.map +1 -0
  214. package/dist/otel/tracing.js +12 -1
  215. package/dist/otel/tracing.js.map +1 -1
  216. package/dist/pricing.json +100 -42
  217. package/dist/protect/__tests__/protect.test.d.ts +1 -0
  218. package/dist/protect/__tests__/protect.test.js +210 -0
  219. package/dist/protect/__tests__/protect.test.js.map +1 -0
  220. package/dist/protect/index.d.ts +103 -0
  221. package/dist/protect/index.js +196 -0
  222. package/dist/protect/index.js.map +1 -0
  223. package/dist/protect/mcp.d.ts +13 -0
  224. package/dist/protect/mcp.js +49 -0
  225. package/dist/protect/mcp.js.map +1 -0
  226. package/dist/protect/mode.d.ts +89 -0
  227. package/dist/protect/mode.js +134 -0
  228. package/dist/protect/mode.js.map +1 -0
  229. package/dist/rasp/__tests__/auto-http.test.d.ts +1 -0
  230. package/dist/rasp/__tests__/auto-http.test.js +136 -0
  231. package/dist/rasp/__tests__/auto-http.test.js.map +1 -0
  232. package/dist/rasp/__tests__/baseline.test.d.ts +1 -0
  233. package/dist/rasp/__tests__/baseline.test.js +86 -0
  234. package/dist/rasp/__tests__/baseline.test.js.map +1 -0
  235. package/dist/rasp/__tests__/benign-corpus.test.d.ts +1 -0
  236. package/dist/rasp/__tests__/benign-corpus.test.js +68 -0
  237. package/dist/rasp/__tests__/benign-corpus.test.js.map +1 -0
  238. package/dist/rasp/__tests__/capture-context.test.d.ts +1 -0
  239. package/dist/rasp/__tests__/capture-context.test.js +135 -0
  240. package/dist/rasp/__tests__/capture-context.test.js.map +1 -0
  241. package/dist/rasp/__tests__/code-hook.test.d.ts +1 -0
  242. package/dist/rasp/__tests__/code-hook.test.js +218 -0
  243. package/dist/rasp/__tests__/code-hook.test.js.map +1 -0
  244. package/dist/rasp/__tests__/config-client.test.d.ts +1 -0
  245. package/dist/rasp/__tests__/config-client.test.js +283 -0
  246. package/dist/rasp/__tests__/config-client.test.js.map +1 -0
  247. package/dist/rasp/__tests__/corpus.d.ts +13 -0
  248. package/dist/rasp/__tests__/corpus.js +111 -0
  249. package/dist/rasp/__tests__/corpus.js.map +1 -0
  250. package/dist/rasp/__tests__/custom-rules.test.d.ts +1 -0
  251. package/dist/rasp/__tests__/custom-rules.test.js +276 -0
  252. package/dist/rasp/__tests__/custom-rules.test.js.map +1 -0
  253. package/dist/rasp/__tests__/db-hook.test.d.ts +1 -0
  254. package/dist/rasp/__tests__/db-hook.test.js +438 -0
  255. package/dist/rasp/__tests__/db-hook.test.js.map +1 -0
  256. package/dist/rasp/__tests__/deception.test.d.ts +1 -0
  257. package/dist/rasp/__tests__/deception.test.js +567 -0
  258. package/dist/rasp/__tests__/deception.test.js.map +1 -0
  259. package/dist/rasp/__tests__/detect.test.d.ts +1 -0
  260. package/dist/rasp/__tests__/detect.test.js +276 -0
  261. package/dist/rasp/__tests__/detect.test.js.map +1 -0
  262. package/dist/rasp/__tests__/esm-exports.test.d.ts +1 -0
  263. package/dist/rasp/__tests__/esm-exports.test.js +20 -0
  264. package/dist/rasp/__tests__/esm-exports.test.js.map +1 -0
  265. package/dist/rasp/__tests__/fs-hook.test.d.ts +1 -0
  266. package/dist/rasp/__tests__/fs-hook.test.js +241 -0
  267. package/dist/rasp/__tests__/fs-hook.test.js.map +1 -0
  268. package/dist/rasp/__tests__/hook-contracts.test.d.ts +1 -0
  269. package/dist/rasp/__tests__/hook-contracts.test.js +201 -0
  270. package/dist/rasp/__tests__/hook-contracts.test.js.map +1 -0
  271. package/dist/rasp/__tests__/hook-kit.d.ts +42 -0
  272. package/dist/rasp/__tests__/hook-kit.js +139 -0
  273. package/dist/rasp/__tests__/hook-kit.js.map +1 -0
  274. package/dist/rasp/__tests__/http-hook.test.d.ts +1 -0
  275. package/dist/rasp/__tests__/http-hook.test.js +250 -0
  276. package/dist/rasp/__tests__/http-hook.test.js.map +1 -0
  277. package/dist/rasp/__tests__/iast.test.d.ts +1 -0
  278. package/dist/rasp/__tests__/iast.test.js +361 -0
  279. package/dist/rasp/__tests__/iast.test.js.map +1 -0
  280. package/dist/rasp/__tests__/include-hook.test.d.ts +1 -0
  281. package/dist/rasp/__tests__/include-hook.test.js +122 -0
  282. package/dist/rasp/__tests__/include-hook.test.js.map +1 -0
  283. package/dist/rasp/__tests__/middleware.test.d.ts +1 -0
  284. package/dist/rasp/__tests__/middleware.test.js +302 -0
  285. package/dist/rasp/__tests__/middleware.test.js.map +1 -0
  286. package/dist/rasp/__tests__/process-hook.test.d.ts +1 -0
  287. package/dist/rasp/__tests__/process-hook.test.js +238 -0
  288. package/dist/rasp/__tests__/process-hook.test.js.map +1 -0
  289. package/dist/rasp/__tests__/reporter.test.d.ts +1 -0
  290. package/dist/rasp/__tests__/reporter.test.js +114 -0
  291. package/dist/rasp/__tests__/reporter.test.js.map +1 -0
  292. package/dist/rasp/__tests__/route.test.d.ts +1 -0
  293. package/dist/rasp/__tests__/route.test.js +46 -0
  294. package/dist/rasp/__tests__/route.test.js.map +1 -0
  295. package/dist/rasp/__tests__/rule-expr.test.d.ts +1 -0
  296. package/dist/rasp/__tests__/rule-expr.test.js +151 -0
  297. package/dist/rasp/__tests__/rule-expr.test.js.map +1 -0
  298. package/dist/rasp/__tests__/rule-phases.test.d.ts +1 -0
  299. package/dist/rasp/__tests__/rule-phases.test.js +271 -0
  300. package/dist/rasp/__tests__/rule-phases.test.js.map +1 -0
  301. package/dist/rasp/__tests__/sinks-hook.test.d.ts +1 -0
  302. package/dist/rasp/__tests__/sinks-hook.test.js +177 -0
  303. package/dist/rasp/__tests__/sinks-hook.test.js.map +1 -0
  304. package/dist/rasp/__tests__/targets.test.d.ts +1 -0
  305. package/dist/rasp/__tests__/targets.test.js +82 -0
  306. package/dist/rasp/__tests__/targets.test.js.map +1 -0
  307. package/dist/rasp/__tests__/template-hook.test.d.ts +1 -0
  308. package/dist/rasp/__tests__/template-hook.test.js +254 -0
  309. package/dist/rasp/__tests__/template-hook.test.js.map +1 -0
  310. package/dist/rasp/__tests__/upload.test.d.ts +1 -0
  311. package/dist/rasp/__tests__/upload.test.js +81 -0
  312. package/dist/rasp/__tests__/upload.test.js.map +1 -0
  313. package/dist/rasp/__tests__/vpatch-engine.test.d.ts +1 -0
  314. package/dist/rasp/__tests__/vpatch-engine.test.js +177 -0
  315. package/dist/rasp/__tests__/vpatch-engine.test.js.map +1 -0
  316. package/dist/rasp/auto-http.d.ts +6 -0
  317. package/dist/rasp/auto-http.js +194 -0
  318. package/dist/rasp/auto-http.js.map +1 -0
  319. package/dist/rasp/baseline.d.ts +35 -0
  320. package/dist/rasp/baseline.js +91 -0
  321. package/dist/rasp/baseline.js.map +1 -0
  322. package/dist/rasp/capture.d.ts +76 -0
  323. package/dist/rasp/capture.js +304 -0
  324. package/dist/rasp/capture.js.map +1 -0
  325. package/dist/rasp/config-client.d.ts +122 -0
  326. package/dist/rasp/config-client.js +337 -0
  327. package/dist/rasp/config-client.js.map +1 -0
  328. package/dist/rasp/context.d.ts +65 -0
  329. package/dist/rasp/context.js +68 -0
  330. package/dist/rasp/context.js.map +1 -0
  331. package/dist/rasp/custom-rules.d.ts +68 -0
  332. package/dist/rasp/custom-rules.js +222 -0
  333. package/dist/rasp/custom-rules.js.map +1 -0
  334. package/dist/rasp/data/default-rules.json +199 -0
  335. package/dist/rasp/data/default-sinks.json +4 -0
  336. package/dist/rasp/data/dnslog-domains.json +11 -0
  337. package/dist/rasp/deception.d.ts +70 -0
  338. package/dist/rasp/deception.js +220 -0
  339. package/dist/rasp/deception.js.map +1 -0
  340. package/dist/rasp/detect.d.ts +68 -0
  341. package/dist/rasp/detect.js +671 -0
  342. package/dist/rasp/detect.js.map +1 -0
  343. package/dist/rasp/engine.d.ts +107 -0
  344. package/dist/rasp/engine.js +330 -0
  345. package/dist/rasp/engine.js.map +1 -0
  346. package/dist/rasp/hooks/code.d.ts +20 -0
  347. package/dist/rasp/hooks/code.js +334 -0
  348. package/dist/rasp/hooks/code.js.map +1 -0
  349. package/dist/rasp/hooks/db.d.ts +48 -0
  350. package/dist/rasp/hooks/db.js +322 -0
  351. package/dist/rasp/hooks/db.js.map +1 -0
  352. package/dist/rasp/hooks/esm.d.ts +7 -0
  353. package/dist/rasp/hooks/esm.js +18 -0
  354. package/dist/rasp/hooks/esm.js.map +1 -0
  355. package/dist/rasp/hooks/fs.d.ts +3 -0
  356. package/dist/rasp/hooks/fs.js +206 -0
  357. package/dist/rasp/hooks/fs.js.map +1 -0
  358. package/dist/rasp/hooks/http.d.ts +4 -0
  359. package/dist/rasp/hooks/http.js +213 -0
  360. package/dist/rasp/hooks/http.js.map +1 -0
  361. package/dist/rasp/hooks/include.d.ts +9 -0
  362. package/dist/rasp/hooks/include.js +79 -0
  363. package/dist/rasp/hooks/include.js.map +1 -0
  364. package/dist/rasp/hooks/marks.d.ts +2 -0
  365. package/dist/rasp/hooks/marks.js +16 -0
  366. package/dist/rasp/hooks/marks.js.map +1 -0
  367. package/dist/rasp/hooks/process.d.ts +22 -0
  368. package/dist/rasp/hooks/process.js +191 -0
  369. package/dist/rasp/hooks/process.js.map +1 -0
  370. package/dist/rasp/hooks/sinks.d.ts +54 -0
  371. package/dist/rasp/hooks/sinks.js +329 -0
  372. package/dist/rasp/hooks/sinks.js.map +1 -0
  373. package/dist/rasp/hooks/template.d.ts +21 -0
  374. package/dist/rasp/hooks/template.js +152 -0
  375. package/dist/rasp/hooks/template.js.map +1 -0
  376. package/dist/rasp/iast-rules.d.ts +82 -0
  377. package/dist/rasp/iast-rules.js +240 -0
  378. package/dist/rasp/iast-rules.js.map +1 -0
  379. package/dist/rasp/iast-scope.d.ts +29 -0
  380. package/dist/rasp/iast-scope.js +54 -0
  381. package/dist/rasp/iast-scope.js.map +1 -0
  382. package/dist/rasp/iast.d.ts +81 -0
  383. package/dist/rasp/iast.js +272 -0
  384. package/dist/rasp/iast.js.map +1 -0
  385. package/dist/rasp/index.d.ts +52 -0
  386. package/dist/rasp/index.js +280 -0
  387. package/dist/rasp/index.js.map +1 -0
  388. package/dist/rasp/lexers.d.ts +32 -0
  389. package/dist/rasp/lexers.js +444 -0
  390. package/dist/rasp/lexers.js.map +1 -0
  391. package/dist/rasp/middleware.d.ts +155 -0
  392. package/dist/rasp/middleware.js +568 -0
  393. package/dist/rasp/middleware.js.map +1 -0
  394. package/dist/rasp/model-output.d.ts +14 -0
  395. package/dist/rasp/model-output.js +107 -0
  396. package/dist/rasp/model-output.js.map +1 -0
  397. package/dist/rasp/normalize.d.ts +23 -0
  398. package/dist/rasp/normalize.js +140 -0
  399. package/dist/rasp/normalize.js.map +1 -0
  400. package/dist/rasp/reporter.d.ts +60 -0
  401. package/dist/rasp/reporter.js +230 -0
  402. package/dist/rasp/reporter.js.map +1 -0
  403. package/dist/rasp/rule-expr.d.ts +236 -0
  404. package/dist/rasp/rule-expr.js +1253 -0
  405. package/dist/rasp/rule-expr.js.map +1 -0
  406. package/dist/rasp/template.d.ts +53 -0
  407. package/dist/rasp/template.js +336 -0
  408. package/dist/rasp/template.js.map +1 -0
  409. package/dist/rasp/types.d.ts +110 -0
  410. package/dist/rasp/types.js +51 -0
  411. package/dist/rasp/types.js.map +1 -0
  412. package/dist/rasp/vpatch.d.ts +55 -0
  413. package/dist/rasp/vpatch.js +120 -0
  414. package/dist/rasp/vpatch.js.map +1 -0
  415. package/dist/register.js +52 -11
  416. package/dist/register.js.map +1 -1
  417. package/dist/semantic-convention.d.ts +2 -0
  418. package/dist/semantic-convention.js +5 -0
  419. package/dist/semantic-convention.js.map +1 -1
  420. package/dist/types.d.ts +96 -0
  421. package/dist/zero-code.d.ts +8 -0
  422. package/dist/zero-code.js +38 -0
  423. package/dist/zero-code.js.map +1 -0
  424. package/package.json +18 -2
@@ -0,0 +1,197 @@
1
+ "use strict";
2
+ /**
3
+ * Credential masking shared by RASP snippets and application logs.
4
+ *
5
+ * The contract is sdk/rasp/README.md ("Masking"), checked by
6
+ * sdk/rasp/testdata/masking.json; every Shield360 SDK applies it the same
7
+ * way. In short:
8
+ *
9
+ * 1. A credential pair (`password=x`, `"api_key": "x"`, `Authorization:
10
+ * Bearer x`) keeps its name and loses its value, quotes kept.
11
+ * 2. A `Bearer <credential>` keeps the word and loses the credential.
12
+ * 3. A run of 20 or more token characters (`A-Z a-z 0-9 _ - + / = .`) is
13
+ * masked when it is opaque: it holds `+`, ends in `=`, or one of its pieces
14
+ * (split on `. / - _ =`) of 8 or more characters is not a readable word.
15
+ * Dotted, slashed and CamelCase identifiers (class names, package and file
16
+ * paths) survive; keys, hashes, base64, JWTs and UUIDs do not.
17
+ *
18
+ * Masking runs over the value plus 1,024 characters of look-ahead before it
19
+ * is cut, so a credential that crosses the cut is never left half visible.
20
+ * An attribute whose name is a credential (`password`, `x-api-key`,
21
+ * `sessionId`...) is masked whole; lists and maps are masked item by item.
22
+ */
23
+ Object.defineProperty(exports, "__esModule", { value: true });
24
+ exports.MAX_TARGET_LENGTH = exports.MASK = exports.LOOKAHEAD = void 0;
25
+ exports.isOpaque = isOpaque;
26
+ exports.maskSecrets = maskSecrets;
27
+ exports.maskTarget = maskTarget;
28
+ exports.maskText = maskText;
29
+ exports.isSensitiveKey = isSensitiveKey;
30
+ exports.maskValue = maskValue;
31
+ exports.LOOKAHEAD = 1024;
32
+ exports.MASK = '***';
33
+ const KEY = '(?:pass(?:word|wd|phrase)?|pwd|secret|token|api[_-]?key|access[_-]?key|private[_-]?key' +
34
+ '|client[_-]?secret|auth(?:orization)?|bearer|cookie|session(?:[_-]?id)?|credentials?)';
35
+ const PAIR = new RegExp('(' +
36
+ KEY +
37
+ `["']?[ \\t]*[=:][ \\t]*)` +
38
+ `("(?:[^"\\\\]|\\\\.)*"?|'(?:[^'\\\\]|\\\\.)*'?` +
39
+ `|(?:(?:bearer|basic|digest|negotiate|token)[ \\t]+)?[^ \\t\\r\\n\\f\\x0B&;,'"]+)`, 'gi');
40
+ const BEARER = /(bearer[ \t]+)[A-Za-z0-9._~+/=-]+/gi;
41
+ const RUN = /[A-Za-z0-9_\-+/=.]{20,}/g;
42
+ const PIECE_SPLIT = /[./\-_=]/;
43
+ const READABLE = /^[A-Za-z]+[0-9]{0,4}$/;
44
+ const VOWELS = new Set('aeiouyAEIOUY');
45
+ const SENSITIVE_WORDS = new Set([
46
+ 'password',
47
+ 'passwd',
48
+ 'passphrase',
49
+ 'pwd',
50
+ 'secret',
51
+ 'token',
52
+ 'apikey',
53
+ 'authorization',
54
+ 'cookie',
55
+ 'credential',
56
+ 'credentials',
57
+ 'bearer',
58
+ 'otp',
59
+ 'signature',
60
+ 'privatekey',
61
+ 'sessionid',
62
+ 'jwt',
63
+ 'accesskey',
64
+ 'secretkey',
65
+ ]);
66
+ const SENSITIVE_PAIRS = new Set(['api key', 'private key', 'access key', 'secret key', 'session id']);
67
+ const isUpper = (c) => c >= 'A' && c <= 'Z';
68
+ const isLower = (c) => c >= 'a' && c <= 'z';
69
+ const isDigit = (c) => c >= '0' && c <= '9';
70
+ function readable(piece) {
71
+ if (!READABLE.test(piece))
72
+ return false;
73
+ let letters = 0;
74
+ let vowels = 0;
75
+ let upperRun = 0;
76
+ let longest = 0;
77
+ let transitions = 0;
78
+ let previous = '';
79
+ for (const c of piece) {
80
+ if (isDigit(c))
81
+ continue;
82
+ letters += 1;
83
+ if (VOWELS.has(c))
84
+ vowels += 1;
85
+ if (isUpper(c)) {
86
+ upperRun += 1;
87
+ longest = Math.max(longest, upperRun);
88
+ if (isLower(previous))
89
+ transitions += 1;
90
+ }
91
+ else {
92
+ upperRun = 0;
93
+ }
94
+ previous = c;
95
+ }
96
+ return vowels * 5 >= letters && longest <= 6 && transitions * 3 <= letters;
97
+ }
98
+ /** Whether a run of 20+ token characters reads as a secret rather than an identifier. */
99
+ function isOpaque(run) {
100
+ if (run.includes('+') || run.endsWith('='))
101
+ return true;
102
+ return run.split(PIECE_SPLIT).some((p) => p.length >= 8 && !readable(p));
103
+ }
104
+ function maskCredentials(value) {
105
+ return value
106
+ .replace(PAIR, (_m, name, v) => {
107
+ if (v.startsWith('"'))
108
+ return `${name}"${exports.MASK}"`;
109
+ if (v.startsWith("'"))
110
+ return `${name}'${exports.MASK}'`;
111
+ return name + exports.MASK;
112
+ })
113
+ .replace(BEARER, (_m, word) => word + exports.MASK);
114
+ }
115
+ /** `value` with credentials and opaque tokens masked; nothing is cut. */
116
+ function maskSecrets(value) {
117
+ return maskCredentials(value).replace(RUN, (run) => (isOpaque(run) ? exports.MASK : run));
118
+ }
119
+ // Allow-list targets (README "Masking", "Targets"): the strict long-token rule,
120
+ // piece by piece between `/` and `.`.
121
+ const TARGET_LONG_TOKEN = /[A-Za-z0-9_\-+/]{20,}={0,2}/g;
122
+ exports.MAX_TARGET_LENGTH = 256;
123
+ /**
124
+ * An allow-list target as an event carries it: the credential rules on the
125
+ * whole target, a `/` segment holding `@` (userinfo) as `***`, then the
126
+ * strict long-token rule piece by piece between `/` and `.`; never cut.
127
+ * Undefined when empty, holding a control character or longer than 256
128
+ * characters.
129
+ */
130
+ function maskTarget(raw) {
131
+ if (!raw)
132
+ return undefined;
133
+ const out = maskCredentials(raw)
134
+ .split('/')
135
+ .map((segment) => (segment.includes('@') ? exports.MASK : segment))
136
+ .join('/')
137
+ .split(/([/.])/)
138
+ .map((piece) => (piece === '/' || piece === '.' ? piece : piece.replace(TARGET_LONG_TOKEN, exports.MASK)))
139
+ .join('');
140
+ // eslint-disable-next-line no-control-regex
141
+ if (!out || out.length > exports.MAX_TARGET_LENGTH || /[\u0000-\u001f\u007f]/.test(out))
142
+ return undefined;
143
+ return out;
144
+ }
145
+ /** At most `limit` characters of `value`, masked before it is cut. */
146
+ function maskText(value, limit) {
147
+ return maskSecrets(value.slice(0, limit + exports.LOOKAHEAD)).slice(0, limit);
148
+ }
149
+ function words(key) {
150
+ const out = [];
151
+ for (const chunk of key.split(/[^A-Za-z0-9]+/)) {
152
+ let start = 0;
153
+ for (let i = 1; i < chunk.length; i++) {
154
+ const a = chunk[i - 1];
155
+ const b = chunk[i];
156
+ const next = i + 1 < chunk.length ? chunk[i + 1] : '';
157
+ const lowerToUpper = (isLower(a) || isDigit(a)) && isUpper(b);
158
+ const acronymEnd = isUpper(a) && isUpper(b) && isLower(next);
159
+ if (lowerToUpper || acronymEnd) {
160
+ out.push(chunk.slice(start, i));
161
+ start = i;
162
+ }
163
+ }
164
+ if (chunk)
165
+ out.push(chunk.slice(start));
166
+ }
167
+ return out.filter(Boolean).map((w) => w.toLowerCase());
168
+ }
169
+ /** Whether an attribute name names a credential (`password`, `x-api-key`, `sessionId`). */
170
+ function isSensitiveKey(key) {
171
+ const w = words(key);
172
+ if (w.some((word) => SENSITIVE_WORDS.has(word)))
173
+ return true;
174
+ for (let i = 0; i + 1 < w.length; i++)
175
+ if (SENSITIVE_PAIRS.has(`${w[i]} ${w[i + 1]}`))
176
+ return true;
177
+ return false;
178
+ }
179
+ /** An attribute value as it may leave the process (strings at most `limit` characters). */
180
+ function maskValue(key, value, limit) {
181
+ if (value === null || value === undefined)
182
+ return value;
183
+ if (isSensitiveKey(key))
184
+ return exports.MASK;
185
+ if (typeof value === 'string')
186
+ return maskText(value, limit);
187
+ if (Array.isArray(value))
188
+ return value.map((v) => maskValue(key, v, limit));
189
+ if (typeof value === 'object') {
190
+ const out = {};
191
+ for (const [k, v] of Object.entries(value))
192
+ out[k] = maskValue(k, v, limit);
193
+ return out;
194
+ }
195
+ return value;
196
+ }
197
+ //# sourceMappingURL=masking.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"masking.js","sourceRoot":"","sources":["../src/masking.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AA0EH,4BAGC;AAaD,kCAEC;AAcD,gCAYC;AAGD,4BAEC;AAuBD,wCAKC;AAGD,8BAWC;AAnKY,QAAA,SAAS,GAAG,IAAI,CAAC;AACjB,QAAA,IAAI,GAAG,KAAK,CAAC;AAE1B,MAAM,GAAG,GACP,wFAAwF;IACxF,uFAAuF,CAAC;AAC1F,MAAM,IAAI,GAAG,IAAI,MAAM,CACrB,GAAG;IACD,GAAG;IACH,0BAA0B;IAC1B,gDAAgD;IAChD,kFAAkF,EACpF,IAAI,CACL,CAAC;AACF,MAAM,MAAM,GAAG,qCAAqC,CAAC;AACrD,MAAM,GAAG,GAAG,0BAA0B,CAAC;AACvC,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;AAEvC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,KAAK;IACL,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,QAAQ;IACR,KAAK;IACL,WAAW;IACX,YAAY;IACZ,WAAW;IACX,KAAK;IACL,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAEtG,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;AACpD,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;AACpD,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;AAEpD,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,CAAC,CAAC;YAAE,SAAS;QACzB,OAAO,IAAI,CAAC,CAAC;QACb,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,QAAQ,IAAI,CAAC,CAAC;YACd,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,QAAQ,CAAC;gBAAE,WAAW,IAAI,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,CAAC,CAAC;QACf,CAAC;QACD,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,MAAM,GAAG,CAAC,IAAI,OAAO,IAAI,OAAO,IAAI,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,OAAO,CAAC;AAC7E,CAAC;AAED,yFAAyF;AACzF,SAAgB,QAAQ,CAAC,GAAW;IAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,CAAS,EAAE,EAAE;QAC7C,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,IAAI,IAAI,YAAI,GAAG,CAAC;QACjD,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,IAAI,IAAI,YAAI,GAAG,CAAC;QACjD,OAAO,IAAI,GAAG,YAAI,CAAC;IACrB,CAAC,CAAC;SACD,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,GAAG,YAAI,CAAC,CAAC;AACxD,CAAC;AAED,yEAAyE;AACzE,SAAgB,WAAW,CAAC,KAAa;IACvC,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,gFAAgF;AAChF,sCAAsC;AACtC,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAC5C,QAAA,iBAAiB,GAAG,GAAG,CAAC;AAErC;;;;;;GAMG;AACH,SAAgB,UAAU,CAAC,GAAuB;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC;SAC7B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SAC1D,IAAI,CAAC,GAAG,CAAC;SACT,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAI,CAAC,CAAC,CAAC;SACjG,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,4CAA4C;IAC5C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,yBAAiB,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,SAAgB,QAAQ,CAAC,KAAa,EAAE,KAAa;IACnD,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,iBAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,YAAY,IAAI,UAAU,EAAE,CAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChC,KAAK,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,2FAA2F;AAC3F,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IACnG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2FAA2F;AAC3F,SAAgB,SAAS,CAAC,GAAW,EAAE,KAAc,EAAE,KAAa;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,YAAI,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACvG,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
@@ -0,0 +1 @@
1
+ export {};
@@ -0,0 +1,129 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ const sdk_logs_1 = require("@opentelemetry/sdk-logs");
4
+ const engine_1 = require("../../rasp/engine");
5
+ const app_logs_1 = require("../app-logs");
6
+ /**
7
+ * What leaves the process: credentials and long tokens masked with the RASP
8
+ * snippet rules, long values cut, the SDK's own scopes never sent, a storm
9
+ * capped per logger, the call site recorded, and nothing thrown into the app.
10
+ * The Python SDK carries the same tests.
11
+ */
12
+ function memory() {
13
+ const exporter = new sdk_logs_1.InMemoryLogRecordExporter();
14
+ const provider = new sdk_logs_1.LoggerProvider({ processors: [new sdk_logs_1.SimpleLogRecordProcessor({ exporter })] });
15
+ return { exporter, provider };
16
+ }
17
+ describe('application log safety', () => {
18
+ afterEach(() => (0, app_logs_1.disableAppLogs)());
19
+ it('masks credentials and long tokens in the body', () => {
20
+ const { exporter, provider } = memory();
21
+ (0, app_logs_1.enableAppLogs)(provider);
22
+ const log = (0, app_logs_1.createLogger)('auth');
23
+ log.info('login password=hunter2 for ann');
24
+ log.info('key k3j4h5g6f7d8s9a0q1w2e3r4 used');
25
+ expect(exporter.getFinishedLogRecords().map((r) => r.body)).toEqual(['login password=*** for ann', 'key *** used']);
26
+ });
27
+ it('masks string attributes, but not the code location or exception type', () => {
28
+ const { exporter, provider } = memory();
29
+ (0, app_logs_1.enableAppLogs)(provider);
30
+ const err = new TypeError('token=abc123 rejected');
31
+ (0, app_logs_1.createLogger)().error(err, { header: 'Authorization: xyz', count: 3 });
32
+ const [record] = exporter.getFinishedLogRecords();
33
+ expect(record.attributes.header).toBe('Authorization: ***');
34
+ expect(record.attributes.count).toBe(3);
35
+ expect(record.attributes['exception.type']).toBe('TypeError');
36
+ expect(record.attributes['exception.message']).toBe('token=*** rejected');
37
+ expect(String(record.attributes['exception.stacktrace'])).not.toContain('token=abc123');
38
+ expect(record.body).toBe('token=*** rejected');
39
+ expect(String(record.attributes['code.file.path'])).toContain('app-logs-safety.test.ts');
40
+ expect(typeof record.attributes['code.line.number']).toBe('number');
41
+ });
42
+ it('leaves the code location out when captureCodeLocation is off', () => {
43
+ const { exporter, provider } = memory();
44
+ (0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
45
+ (0, app_logs_1.createLogger)().info('plain');
46
+ expect(exporter.getFinishedLogRecords()[0].attributes).toEqual({});
47
+ });
48
+ it('cuts long bodies and attributes', () => {
49
+ const { exporter, provider } = memory();
50
+ (0, app_logs_1.enableAppLogs)(provider);
51
+ (0, app_logs_1.createLogger)().info('a '.repeat(20000), { note: 'b '.repeat(5000) });
52
+ const [record] = exporter.getFinishedLogRecords();
53
+ expect(String(record.body)).toHaveLength(app_logs_1.MAX_BODY_LENGTH);
54
+ expect(String(record.attributes.note)).toHaveLength(app_logs_1.MAX_ATTRIBUTE_LENGTH);
55
+ });
56
+ it('never sends the SDK\'s own scopes', () => {
57
+ const { exporter, provider } = memory();
58
+ (0, app_logs_1.enableAppLogs)(provider);
59
+ (0, app_logs_1.createLogger)('shield360').warn('sdk');
60
+ (0, app_logs_1.createLogger)('shield360.flags').warn('sdk');
61
+ (0, app_logs_1.createLogger)('opentelemetry').warn('otel');
62
+ (0, app_logs_1.createLogger)('@opentelemetry/exporter').warn('otel');
63
+ (0, app_logs_1.createLogger)('shield360_app').warn('not ours');
64
+ expect(exporter.getFinishedLogRecords().map((r) => r.body)).toEqual(['not ours']);
65
+ expect((0, app_logs_1.isOwnScope)('Shield360')).toBe(true);
66
+ expect((0, app_logs_1.isOwnScope)('app')).toBe(false);
67
+ });
68
+ it('sends at most maxPerSecond records a second per logger (500 by default)', () => {
69
+ const { exporter, provider } = memory();
70
+ (0, app_logs_1.enableAppLogs)(provider);
71
+ const capped = (0, app_logs_1.createLogger)('storm', { maxPerSecond: 3 });
72
+ for (let i = 0; i < 10; i++)
73
+ capped.info(`m${i}`);
74
+ expect(exporter.getFinishedLogRecords().map((r) => r.body)).toEqual(['m0', 'm1', 'm2']);
75
+ const unbounded = (0, app_logs_1.createLogger)('default');
76
+ for (let i = 0; i < 600; i++)
77
+ unbounded.info('x');
78
+ expect(exporter.getFinishedLogRecords()).toHaveLength(3 + 500);
79
+ });
80
+ it('never throws into the application when the pipeline fails', () => {
81
+ const throwing = {
82
+ getLogger: () => ({
83
+ emit: () => {
84
+ throw new Error('endpoint down');
85
+ },
86
+ }),
87
+ };
88
+ (0, app_logs_1.enableAppLogs)(throwing);
89
+ expect(() => (0, app_logs_1.createLogger)().error('still fine')).not.toThrow();
90
+ });
91
+ it('keeps RASP snippets as they were', () => {
92
+ expect((0, engine_1.maskSnippet)('password=hunter2&x=1')).toBe('password=***&x=1');
93
+ expect((0, engine_1.maskSnippet)('t k3j4h5g6f7d8s9a0q1w2e3r4')).toBe('t ***');
94
+ expect((0, engine_1.maskSnippet)('a '.repeat(100))).toHaveLength(64);
95
+ });
96
+ });
97
+ describe('application log masking by the shared contract', () => {
98
+ afterEach(() => (0, app_logs_1.disableAppLogs)());
99
+ it('masks a whole value under a credential name, and lists item by item', () => {
100
+ const { exporter, provider } = memory();
101
+ (0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
102
+ (0, app_logs_1.createLogger)().info('sign-in', { password: 'pw1', 'x-api-key': 'short', sessionId: 42, tags: ['token=abc', 'ok'], user: 'ann' });
103
+ const [record] = exporter.getFinishedLogRecords();
104
+ expect(record.attributes).toEqual({ password: '***', 'x-api-key': '***', sessionId: '***', tags: ['token=***', 'ok'], user: 'ann' });
105
+ });
106
+ it('masks quoted credentials and the credential after Bearer', () => {
107
+ const { exporter, provider } = memory();
108
+ (0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
109
+ (0, app_logs_1.createLogger)().info('{"password":"pw1","user":"ann"} Authorization: Bearer abc sent Bearer xyz');
110
+ expect(exporter.getFinishedLogRecords()[0].body).toBe('{"password":"***","user":"ann"} Authorization: *** sent Bearer ***');
111
+ });
112
+ it('masks a token that crosses the cut instead of leaving its start', () => {
113
+ const { exporter, provider } = memory();
114
+ (0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
115
+ (0, app_logs_1.createLogger)().info('a'.repeat(app_logs_1.MAX_BODY_LENGTH - 10) + ' 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b');
116
+ const body = String(exporter.getFinishedLogRecords()[0].body);
117
+ expect(body.endsWith(' ***')).toBe(true);
118
+ expect(body).not.toContain('9f86');
119
+ });
120
+ it('keeps exception class names and file paths readable', () => {
121
+ const { exporter, provider } = memory();
122
+ (0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
123
+ (0, app_logs_1.createLogger)().error(Object.assign(new Error('java.lang.ArrayIndexOutOfBoundsException at /srv/app/orders/OrderService.ts'), { name: 'ArrayIndexOutOfBoundsError' }));
124
+ const [record] = exporter.getFinishedLogRecords();
125
+ expect(record.body).toBe('java.lang.ArrayIndexOutOfBoundsException at /srv/app/orders/OrderService.ts');
126
+ expect(String(record.attributes['exception.stacktrace'])).toContain('app-logs-safety.test.ts');
127
+ });
128
+ });
129
+ //# sourceMappingURL=app-logs-safety.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"app-logs-safety.test.js","sourceRoot":"","sources":["../../../src/otel/__tests__/app-logs-safety.test.ts"],"names":[],"mappings":";;AAAA,sDAA8G;AAC9G,8CAAgD;AAChD,0CAOqB;AAErB;;;;;GAKG;AACH,SAAS,MAAM;IACb,MAAM,QAAQ,GAAG,IAAI,oCAAyB,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,yBAAc,CAAC,EAAE,UAAU,EAAE,CAAC,IAAI,mCAAwB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,yBAAc,GAAE,CAAC,CAAC;IAElC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAA,uBAAY,EAAC,MAAM,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,4BAA4B,EAAE,cAAc,CAAC,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACnD,IAAA,uBAAY,GAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACzF,MAAM,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,0BAAe,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,+BAAoB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,IAAA,uBAAY,EAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,IAAA,uBAAY,EAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAA,uBAAY,EAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAA,uBAAY,EAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,IAAA,uBAAY,EAAC,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,IAAA,qBAAU,EAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAA,qBAAU,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,IAAA,uBAAY,EAAC,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACxF,MAAM,SAAS,GAAG,IAAA,uBAAY,EAAC,SAAS,CAAC,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAG;YACf,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChB,IAAI,EAAE,GAAG,EAAE;oBACT,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnC,CAAC;aACF,CAAC;SACH,CAAC;QACF,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,uBAAY,GAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,IAAA,oBAAW,EAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrE,MAAM,CAAC,IAAA,oBAAW,EAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,CAAC,IAAA,oBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,yBAAc,GAAE,CAAC,CAAC;IAElC,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjI,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QACjG,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IAC9H,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,0BAAe,GAAG,EAAE,CAAC,GAAG,2CAA2C,CAAC,CAAC;QACpG,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,GAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6EAA6E,CAAC,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;QACtK,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;QACxG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1 @@
1
+ export {};
@@ -0,0 +1,269 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
15
+ }) : function(o, v) {
16
+ o["default"] = v;
17
+ });
18
+ var __importStar = (this && this.__importStar) || (function () {
19
+ var ownKeys = function(o) {
20
+ ownKeys = Object.getOwnPropertyNames || function (o) {
21
+ var ar = [];
22
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
+ return ar;
24
+ };
25
+ return ownKeys(o);
26
+ };
27
+ return function (mod) {
28
+ if (mod && mod.__esModule) return mod;
29
+ var result = {};
30
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
+ __setModuleDefault(result, mod);
32
+ return result;
33
+ };
34
+ })();
35
+ Object.defineProperty(exports, "__esModule", { value: true });
36
+ const api_1 = require("@opentelemetry/api");
37
+ const api_logs_1 = require("@opentelemetry/api-logs");
38
+ const context_async_hooks_1 = require("@opentelemetry/context-async-hooks");
39
+ const sdk_logs_1 = require("@opentelemetry/sdk-logs");
40
+ const sdk_trace_base_1 = require("@opentelemetry/sdk-trace-base");
41
+ const app_logs_1 = require("../app-logs");
42
+ /**
43
+ * Application logs reach Shield360 only when asked for, through the SDK's own
44
+ * LoggerProvider, and linked to the span that was active when they were written.
45
+ */
46
+ function memoryProvider() {
47
+ const exporter = new sdk_logs_1.InMemoryLogRecordExporter();
48
+ const provider = new sdk_logs_1.LoggerProvider({
49
+ processors: [new sdk_logs_1.SimpleLogRecordProcessor({ exporter })],
50
+ });
51
+ return { exporter, provider };
52
+ }
53
+ describe('application logs', () => {
54
+ const originalEnv = process.env;
55
+ beforeEach(() => {
56
+ process.env = { ...originalEnv };
57
+ delete process.env.SHIELD360_CAPTURE_LOGS;
58
+ delete process.env.SHIELD360_LOG_LEVEL;
59
+ (0, app_logs_1.disableAppLogs)();
60
+ });
61
+ afterEach(() => {
62
+ process.env = originalEnv;
63
+ (0, app_logs_1.disableAppLogs)();
64
+ });
65
+ describe('opt-in', () => {
66
+ it('is off by default', () => {
67
+ expect((0, app_logs_1.resolveCaptureLogs)()).toBe(false);
68
+ expect((0, app_logs_1.resolveCaptureLogs)(undefined)).toBe(false);
69
+ });
70
+ it('turns on with the option or SHIELD360_CAPTURE_LOGS', () => {
71
+ expect((0, app_logs_1.resolveCaptureLogs)(true)).toBe(true);
72
+ process.env.SHIELD360_CAPTURE_LOGS = 'true';
73
+ expect((0, app_logs_1.resolveCaptureLogs)()).toBe(true);
74
+ });
75
+ it('lets an explicit false win over the environment', () => {
76
+ process.env.SHIELD360_CAPTURE_LOGS = 'true';
77
+ expect((0, app_logs_1.resolveCaptureLogs)(false)).toBe(false);
78
+ });
79
+ it('sends nothing while off, even with a provider about', () => {
80
+ const { exporter } = memoryProvider();
81
+ (0, app_logs_1.createLogger)('svc').error('nobody asked');
82
+ expect(exporter.getFinishedLogRecords()).toHaveLength(0);
83
+ });
84
+ });
85
+ describe('level', () => {
86
+ it('defaults to info and reads SHIELD360_LOG_LEVEL', () => {
87
+ expect((0, app_logs_1.resolveLogLevel)()).toBe('info');
88
+ process.env.SHIELD360_LOG_LEVEL = 'WARNING';
89
+ expect((0, app_logs_1.resolveLogLevel)()).toBe('warn');
90
+ expect((0, app_logs_1.resolveLogLevel)('error')).toBe('error');
91
+ expect((0, app_logs_1.resolveLogLevel)('critical')).toBe('fatal');
92
+ expect((0, app_logs_1.resolveLogLevel)('loud')).toBe('info');
93
+ });
94
+ it('drops records below the minimum and keeps the rest', () => {
95
+ const { exporter, provider } = memoryProvider();
96
+ (0, app_logs_1.enableAppLogs)(provider, 'warn');
97
+ const log = (0, app_logs_1.createLogger)('svc');
98
+ log.debug('d');
99
+ log.info('i');
100
+ log.warn('w');
101
+ log.error('e');
102
+ log.fatal('f');
103
+ const records = exporter.getFinishedLogRecords();
104
+ expect(records.map((r) => r.body)).toEqual(['w', 'e', 'f']);
105
+ expect(records.map((r) => r.severityNumber)).toEqual([
106
+ api_logs_1.SeverityNumber.WARN,
107
+ api_logs_1.SeverityNumber.ERROR,
108
+ api_logs_1.SeverityNumber.FATAL,
109
+ ]);
110
+ expect(records.map((r) => r.severityText)).toEqual(['WARN', 'ERROR', 'FATAL']);
111
+ });
112
+ });
113
+ it('writes the message as the body, the attributes as given and the scope name', () => {
114
+ const { exporter, provider } = memoryProvider();
115
+ (0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
116
+ (0, app_logs_1.createLogger)('checkout').info('order placed', { 'order.id': 'o-1', items: 3 });
117
+ const [record] = exporter.getFinishedLogRecords();
118
+ expect(record.body).toBe('order placed');
119
+ expect(record.severityNumber).toBe(api_logs_1.SeverityNumber.INFO);
120
+ expect(record.severityText).toBe('INFO');
121
+ expect(record.attributes).toEqual({ 'order.id': 'o-1', items: 3 });
122
+ expect(record.instrumentationScope.name).toBe('checkout');
123
+ });
124
+ it('records an Error as exception attributes', () => {
125
+ const { exporter, provider } = memoryProvider();
126
+ (0, app_logs_1.enableAppLogs)(provider);
127
+ (0, app_logs_1.createLogger)().error(new TypeError('bad input'));
128
+ const [record] = exporter.getFinishedLogRecords();
129
+ expect(record.body).toBe('bad input');
130
+ expect(record.attributes['exception.type']).toBe('TypeError');
131
+ expect(record.attributes['exception.message']).toBe('bad input');
132
+ expect(String(record.attributes['exception.stacktrace'])).toContain('TypeError');
133
+ expect(record.instrumentationScope.name).toBe('app');
134
+ });
135
+ it('stops sending once turned off again', () => {
136
+ const { exporter, provider } = memoryProvider();
137
+ (0, app_logs_1.enableAppLogs)(provider);
138
+ const log = (0, app_logs_1.createLogger)();
139
+ (0, app_logs_1.disableAppLogs)();
140
+ log.error('after');
141
+ expect(exporter.getFinishedLogRecords()).toHaveLength(0);
142
+ });
143
+ it('links a record to the active span', () => {
144
+ const contextManager = new context_async_hooks_1.AsyncLocalStorageContextManager().enable();
145
+ api_1.context.setGlobalContextManager(contextManager);
146
+ try {
147
+ const { exporter, provider } = memoryProvider();
148
+ (0, app_logs_1.enableAppLogs)(provider);
149
+ const tracer = new sdk_trace_base_1.BasicTracerProvider().getTracer('test');
150
+ let traceId = '';
151
+ let spanId = '';
152
+ tracer.startActiveSpan('work', (span) => {
153
+ traceId = span.spanContext().traceId;
154
+ spanId = span.spanContext().spanId;
155
+ (0, app_logs_1.createLogger)().info('inside');
156
+ span.end();
157
+ });
158
+ (0, app_logs_1.createLogger)().info('outside');
159
+ const [inside, outside] = exporter.getFinishedLogRecords();
160
+ expect(inside.spanContext?.traceId).toBe(traceId);
161
+ expect(inside.spanContext?.spanId).toBe(spanId);
162
+ expect(outside.spanContext).toBeUndefined();
163
+ expect(api_1.trace.getActiveSpan()).toBeUndefined();
164
+ }
165
+ finally {
166
+ api_1.context.disable();
167
+ }
168
+ });
169
+ });
170
+ describe('Shield360.init and application logs', () => {
171
+ const originalEnv = process.env;
172
+ let exporterArgs;
173
+ beforeEach(() => {
174
+ jest.resetModules();
175
+ exporterArgs = jest.fn();
176
+ process.env = { ...originalEnv };
177
+ for (const name of [
178
+ 'SHIELD360_CAPTURE_LOGS',
179
+ 'SHIELD360_CAPTURE_STDIO',
180
+ 'SHIELD360_LOG_LEVEL',
181
+ 'OTEL_EXPORTER_OTLP_ENDPOINT',
182
+ 'OTEL_EXPORTER_OTLP_HEADERS',
183
+ 'OTEL_LOGS_EXPORTER',
184
+ 'SHIELD360_URL',
185
+ 'SHIELD360_API_KEY',
186
+ ]) {
187
+ delete process.env[name];
188
+ }
189
+ // Tracing is covered elsewhere; here it would only load instrumentations.
190
+ jest.doMock('../tracing', () => ({ __esModule: true, default: { setup: jest.fn() } }));
191
+ jest.doMock('@opentelemetry/exporter-logs-otlp-http', () => ({
192
+ OTLPLogExporter: class {
193
+ constructor(config) {
194
+ exporterArgs(config);
195
+ }
196
+ export(_records, done) {
197
+ done({ code: 0 });
198
+ }
199
+ shutdown() {
200
+ return Promise.resolve();
201
+ }
202
+ forceFlush() {
203
+ return Promise.resolve();
204
+ }
205
+ },
206
+ }));
207
+ });
208
+ afterEach(async () => {
209
+ // init() with captureLogs copies console output; put console back.
210
+ const bridges = await Promise.resolve().then(() => __importStar(require('../log-bridges')));
211
+ bridges.releaseConsole();
212
+ bridges.releaseStdio();
213
+ process.env = originalEnv;
214
+ jest.dontMock('../tracing');
215
+ jest.dontMock('@opentelemetry/exporter-logs-otlp-http');
216
+ });
217
+ async function load() {
218
+ const { logs } = await Promise.resolve().then(() => __importStar(require('@opentelemetry/api-logs')));
219
+ logs.disable();
220
+ const { default: Shield360 } = await Promise.resolve().then(() => __importStar(require('../../index')));
221
+ const { appLogsEnabled } = await Promise.resolve().then(() => __importStar(require('../app-logs')));
222
+ return { Shield360, appLogsEnabled };
223
+ }
224
+ it('leaves application logs off by default', async () => {
225
+ const { Shield360, appLogsEnabled } = await load();
226
+ Shield360.init({ disableMetrics: true, disableEvents: true });
227
+ expect(appLogsEnabled()).toBe(false);
228
+ expect(exporterArgs).not.toHaveBeenCalled();
229
+ });
230
+ it('sends to <SHIELD360_URL>/api/ingest/otlp/v1/logs with the key as bearer, as traces do', async () => {
231
+ const { Shield360, appLogsEnabled } = await load();
232
+ Shield360.init({
233
+ shield360Url: 'https://app.shield360.ai/',
234
+ shield360ApiKey: 'k-1',
235
+ captureLogs: true,
236
+ disableMetrics: true,
237
+ disableEvents: true,
238
+ });
239
+ expect(appLogsEnabled()).toBe(true);
240
+ expect(exporterArgs).toHaveBeenCalledWith({
241
+ url: 'https://app.shield360.ai/api/ingest/otlp/v1/logs',
242
+ headers: { Authorization: 'Bearer k-1' },
243
+ });
244
+ expect(Shield360.options.otlpEndpoint).toBe('https://app.shield360.ai/api/ingest/otlp');
245
+ });
246
+ it('turns on from SHIELD360_CAPTURE_LOGS', async () => {
247
+ process.env.SHIELD360_CAPTURE_LOGS = 'true';
248
+ process.env.SHIELD360_URL = 'https://app.shield360.ai';
249
+ process.env.SHIELD360_API_KEY = 'k-2';
250
+ const { Shield360, appLogsEnabled } = await load();
251
+ Shield360.init({ disableMetrics: true });
252
+ expect(appLogsEnabled()).toBe(true);
253
+ // One provider, shared by GenAI events and application logs.
254
+ expect(exporterArgs).toHaveBeenCalledTimes(1);
255
+ });
256
+ it('with SHIELD360_CAPTURE_STDIO takes stdout and stderr instead of console, so a line is sent once', async () => {
257
+ process.env.SHIELD360_CAPTURE_LOGS = 'true';
258
+ process.env.SHIELD360_CAPTURE_STDIO = 'true';
259
+ const consoleLog = console.log;
260
+ const stdoutWrite = process.stdout.write;
261
+ const { Shield360 } = await load();
262
+ Shield360.init({ disableMetrics: true, disableEvents: true });
263
+ expect(console.log).toBe(consoleLog);
264
+ expect(process.stdout.write).not.toBe(stdoutWrite);
265
+ (await Promise.resolve().then(() => __importStar(require('../log-bridges')))).releaseStdio();
266
+ expect(process.stdout.write).toBe(stdoutWrite);
267
+ });
268
+ });
269
+ //# sourceMappingURL=app-logs.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"app-logs.test.js","sourceRoot":"","sources":["../../../src/otel/__tests__/app-logs.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAAoD;AACpD,sDAAyD;AACzD,4EAAqF;AACrF,sDAIiC;AACjC,kEAAoE;AACpE,0CAMqB;AAErB;;;GAGG;AACH,SAAS,cAAc;IACrB,MAAM,QAAQ,GAAG,IAAI,oCAAyB,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,yBAAc,CAAC;QAClC,UAAU,EAAE,CAAC,IAAI,mCAAwB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;KACzD,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,IAAA,yBAAc,GAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC1B,IAAA,yBAAc,GAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;YAC3B,MAAM,CAAC,IAAA,6BAAkB,GAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,CAAC,IAAA,6BAAkB,EAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,CAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC;YAC5C,MAAM,CAAC,IAAA,6BAAkB,GAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC;YAC5C,MAAM,CAAC,IAAA,6BAAkB,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;YACtC,IAAA,uBAAY,EAAC,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC1C,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,IAAA,0BAAe,GAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,SAAS,CAAC;YAC5C,MAAM,CAAC,IAAA,0BAAe,GAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,IAAA,0BAAe,EAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAA,0BAAe,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,CAAC,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;YAChD,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,IAAA,uBAAY,EAAC,KAAK,CAAC,CAAC;YAChC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACjD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;gBACnD,yBAAc,CAAC,IAAI;gBACnB,yBAAc,CAAC,KAAK;gBACpB,yBAAc,CAAC,KAAK;aACrB,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;QAChD,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,EAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,yBAAc,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;QAChD,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,IAAA,uBAAY,GAAE,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;QAChD,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAA,uBAAY,GAAE,CAAC;QAC3B,IAAA,yBAAc,GAAE,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,cAAc,GAAG,IAAI,qDAA+B,EAAE,CAAC,MAAM,EAAE,CAAC;QACtE,aAAO,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;YAChD,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,oCAAmB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACtC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;gBACrC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;gBACnC,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,CAAC,CAAC,CAAC;YACH,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,CAAC,WAAK,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,aAAO,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAChC,IAAI,YAAuB,CAAC;IAE5B,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,YAAY,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI;YACjB,wBAAwB;YACxB,yBAAyB;YACzB,qBAAqB;YACrB,6BAA6B;YAC7B,4BAA4B;YAC5B,oBAAoB;YACpB,eAAe;YACf,mBAAmB;SACpB,EAAE,CAAC;YACF,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,MAAM,CAAC,wCAAwC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3D,eAAe,EAAE;gBACf,YAAY,MAAe;oBACzB,YAAY,CAAC,MAAM,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,CAAC,QAAiB,EAAE,IAAmC;oBAC3D,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;gBACpB,CAAC;gBACD,QAAQ;oBACN,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBACD,UAAU;oBACR,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;aACF;SACF,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,mEAAmE;QACnE,MAAM,OAAO,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QAC/C,OAAO,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,IAAI;QACjB,MAAM,EAAE,IAAI,EAAE,GAAG,wDAAa,yBAAyB,GAAC,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,wDAAa,aAAa,GAAC,CAAC;QAC3D,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,aAAa,GAAC,CAAC;QACvD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACvC,CAAC;IAED,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACnD,SAAS,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACnD,SAAS,CAAC,IAAI,CAAC;YACb,YAAY,EAAE,2BAA2B;YACzC,eAAe,EAAE,KAAK;YACtB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC;YACxC,GAAG,EAAE,kDAAkD;YACvD,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,0BAA0B,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,KAAK,CAAC;QACtC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACnD,SAAS,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,6DAA6D;QAC7D,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,MAAM,CAAC;QAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;QAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,CAAC,wDAAa,gBAAgB,GAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1 @@
1
+ export {};