shield360 1.0.1 → 1.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (424) hide show
  1. package/README.md +392 -37
  2. package/dist/__tests__/build-info.test.d.ts +1 -0
  3. package/dist/__tests__/build-info.test.js +196 -0
  4. package/dist/__tests__/build-info.test.js.map +1 -0
  5. package/dist/__tests__/code-location.test.d.ts +1 -0
  6. package/dist/__tests__/code-location.test.js +180 -0
  7. package/dist/__tests__/code-location.test.js.map +1 -0
  8. package/dist/__tests__/masking.test.d.ts +1 -0
  9. package/dist/__tests__/masking.test.js +66 -0
  10. package/dist/__tests__/masking.test.js.map +1 -0
  11. package/dist/__tests__/pricing-claude-5.test.js +3 -0
  12. package/dist/__tests__/pricing-claude-5.test.js.map +1 -1
  13. package/dist/__tests__/register.e2e.test.d.ts +1 -0
  14. package/dist/__tests__/register.e2e.test.js +264 -0
  15. package/dist/__tests__/register.e2e.test.js.map +1 -0
  16. package/dist/__tests__/register.test.js +60 -0
  17. package/dist/__tests__/register.test.js.map +1 -1
  18. package/dist/agents/__tests__/agents.test.d.ts +1 -0
  19. package/dist/agents/__tests__/agents.test.js +529 -0
  20. package/dist/agents/__tests__/agents.test.js.map +1 -0
  21. package/dist/agents/index.d.ts +15 -0
  22. package/dist/agents/index.js +25 -0
  23. package/dist/agents/index.js.map +1 -0
  24. package/dist/agents/passport.d.ts +92 -0
  25. package/dist/agents/passport.js +301 -0
  26. package/dist/agents/passport.js.map +1 -0
  27. package/dist/agents/policy.d.ts +24 -0
  28. package/dist/agents/policy.js +93 -0
  29. package/dist/agents/policy.js.map +1 -0
  30. package/dist/agents/replay.d.ts +20 -0
  31. package/dist/agents/replay.js +47 -0
  32. package/dist/agents/replay.js.map +1 -0
  33. package/dist/agents/report.d.ts +30 -0
  34. package/dist/agents/report.js +93 -0
  35. package/dist/agents/report.js.map +1 -0
  36. package/dist/agents/types.d.ts +148 -0
  37. package/dist/agents/types.js +37 -0
  38. package/dist/agents/types.js.map +1 -0
  39. package/dist/agents/verifier.d.ts +33 -0
  40. package/dist/agents/verifier.js +276 -0
  41. package/dist/agents/verifier.js.map +1 -0
  42. package/dist/ai-security/__tests__/bench.test.d.ts +1 -0
  43. package/dist/ai-security/__tests__/bench.test.js +50 -0
  44. package/dist/ai-security/__tests__/bench.test.js.map +1 -0
  45. package/dist/ai-security/__tests__/checks.test.d.ts +1 -0
  46. package/dist/ai-security/__tests__/checks.test.js +248 -0
  47. package/dist/ai-security/__tests__/checks.test.js.map +1 -0
  48. package/dist/ai-security/__tests__/config.test.d.ts +1 -0
  49. package/dist/ai-security/__tests__/config.test.js +164 -0
  50. package/dist/ai-security/__tests__/config.test.js.map +1 -0
  51. package/dist/ai-security/__tests__/detection.test.d.ts +1 -0
  52. package/dist/ai-security/__tests__/detection.test.js +114 -0
  53. package/dist/ai-security/__tests__/detection.test.js.map +1 -0
  54. package/dist/ai-security/__tests__/fixtures.d.ts +8 -0
  55. package/dist/ai-security/__tests__/fixtures.js +30 -0
  56. package/dist/ai-security/__tests__/fixtures.js.map +1 -0
  57. package/dist/ai-security/__tests__/hooks.test.d.ts +1 -0
  58. package/dist/ai-security/__tests__/hooks.test.js +174 -0
  59. package/dist/ai-security/__tests__/hooks.test.js.map +1 -0
  60. package/dist/ai-security/__tests__/stream.test.d.ts +1 -0
  61. package/dist/ai-security/__tests__/stream.test.js +85 -0
  62. package/dist/ai-security/__tests__/stream.test.js.map +1 -0
  63. package/dist/ai-security/config.d.ts +94 -0
  64. package/dist/ai-security/config.js +241 -0
  65. package/dist/ai-security/config.js.map +1 -0
  66. package/dist/ai-security/context.d.ts +45 -0
  67. package/dist/ai-security/context.js +108 -0
  68. package/dist/ai-security/context.js.map +1 -0
  69. package/dist/ai-security/custom-kinds.d.ts +23 -0
  70. package/dist/ai-security/custom-kinds.js +97 -0
  71. package/dist/ai-security/custom-kinds.js.map +1 -0
  72. package/dist/ai-security/events.d.ts +77 -0
  73. package/dist/ai-security/events.js +153 -0
  74. package/dist/ai-security/events.js.map +1 -0
  75. package/dist/ai-security/hooks.d.ts +48 -0
  76. package/dist/ai-security/hooks.js +461 -0
  77. package/dist/ai-security/hooks.js.map +1 -0
  78. package/dist/ai-security/index.d.ts +209 -0
  79. package/dist/ai-security/index.js +587 -0
  80. package/dist/ai-security/index.js.map +1 -0
  81. package/dist/ai-security/injection-rules.json +1024 -0
  82. package/dist/ai-security/injection.d.ts +46 -0
  83. package/dist/ai-security/injection.js +635 -0
  84. package/dist/ai-security/injection.js.map +1 -0
  85. package/dist/ai-security/jailbreak.d.ts +38 -0
  86. package/dist/ai-security/jailbreak.js +73 -0
  87. package/dist/ai-security/jailbreak.js.map +1 -0
  88. package/dist/ai-security/limits.d.ts +84 -0
  89. package/dist/ai-security/limits.js +195 -0
  90. package/dist/ai-security/limits.js.map +1 -0
  91. package/dist/ai-security/mcp.d.ts +82 -0
  92. package/dist/ai-security/mcp.js +150 -0
  93. package/dist/ai-security/mcp.js.map +1 -0
  94. package/dist/ai-security/output.d.ts +107 -0
  95. package/dist/ai-security/output.js +390 -0
  96. package/dist/ai-security/output.js.map +1 -0
  97. package/dist/ai-security/policy.d.ts +125 -0
  98. package/dist/ai-security/policy.js +196 -0
  99. package/dist/ai-security/policy.js.map +1 -0
  100. package/dist/ai-security/rag.d.ts +70 -0
  101. package/dist/ai-security/rag.js +174 -0
  102. package/dist/ai-security/rag.js.map +1 -0
  103. package/dist/ai-security/tool-rules.json +203 -0
  104. package/dist/ai-security/tools.d.ts +46 -0
  105. package/dist/ai-security/tools.js +62 -0
  106. package/dist/ai-security/tools.js.map +1 -0
  107. package/dist/budgets/__tests__/budgets.test.d.ts +1 -0
  108. package/dist/budgets/__tests__/budgets.test.js +134 -0
  109. package/dist/budgets/__tests__/budgets.test.js.map +1 -0
  110. package/dist/budgets/auto.d.ts +25 -0
  111. package/dist/budgets/auto.js +63 -0
  112. package/dist/budgets/auto.js.map +1 -0
  113. package/dist/budgets/index.d.ts +110 -0
  114. package/dist/budgets/index.js +239 -0
  115. package/dist/budgets/index.js.map +1 -0
  116. package/dist/config.js +1 -1
  117. package/dist/config.js.map +1 -1
  118. package/dist/customer/__tests__/customer.test.d.ts +1 -0
  119. package/dist/customer/__tests__/customer.test.js +155 -0
  120. package/dist/customer/__tests__/customer.test.js.map +1 -0
  121. package/dist/customer/index.d.ts +48 -0
  122. package/dist/customer/index.js +132 -0
  123. package/dist/customer/index.js.map +1 -0
  124. package/dist/feedback/__tests__/feedback.test.d.ts +1 -0
  125. package/dist/feedback/__tests__/feedback.test.js +80 -0
  126. package/dist/feedback/__tests__/feedback.test.js.map +1 -0
  127. package/dist/feedback/index.d.ts +48 -0
  128. package/dist/feedback/index.js +97 -0
  129. package/dist/feedback/index.js.map +1 -0
  130. package/dist/flags/__tests__/flags.test.d.ts +1 -0
  131. package/dist/flags/__tests__/flags.test.js +301 -0
  132. package/dist/flags/__tests__/flags.test.js.map +1 -0
  133. package/dist/flags/client.d.ts +131 -0
  134. package/dist/flags/client.js +301 -0
  135. package/dist/flags/client.js.map +1 -0
  136. package/dist/flags/engine.d.ts +200 -0
  137. package/dist/flags/engine.js +677 -0
  138. package/dist/flags/engine.js.map +1 -0
  139. package/dist/flags/index.d.ts +4 -0
  140. package/dist/flags/index.js +16 -0
  141. package/dist/flags/index.js.map +1 -0
  142. package/dist/guard/__tests__/findings.test.js +28 -9
  143. package/dist/guard/__tests__/findings.test.js.map +1 -1
  144. package/dist/guard/__tests__/report.test.js +67 -0
  145. package/dist/guard/__tests__/report.test.js.map +1 -1
  146. package/dist/guard/base.d.ts +2 -0
  147. package/dist/guard/base.js +4 -0
  148. package/dist/guard/base.js.map +1 -1
  149. package/dist/guard/findings.d.ts +12 -2
  150. package/dist/guard/findings.js +19 -49
  151. package/dist/guard/findings.js.map +1 -1
  152. package/dist/guard/heartbeat.d.ts +34 -0
  153. package/dist/guard/heartbeat.js +83 -0
  154. package/dist/guard/heartbeat.js.map +1 -0
  155. package/dist/guard/integration.d.ts +33 -3
  156. package/dist/guard/integration.js +106 -32
  157. package/dist/guard/integration.js.map +1 -1
  158. package/dist/guard/pipeline.d.ts +10 -1
  159. package/dist/guard/pipeline.js +14 -0
  160. package/dist/guard/pipeline.js.map +1 -1
  161. package/dist/guard/report.d.ts +24 -1
  162. package/dist/guard/report.js +67 -18
  163. package/dist/guard/report.js.map +1 -1
  164. package/dist/index.d.ts +90 -0
  165. package/dist/index.js +225 -3
  166. package/dist/index.js.map +1 -1
  167. package/dist/instrumentation/__tests__/langchain-wrapper.test.js +1 -1
  168. package/dist/instrumentation/__tests__/langchain-wrapper.test.js.map +1 -1
  169. package/dist/instrumentation/anthropic/wrapper.js +4 -0
  170. package/dist/instrumentation/anthropic/wrapper.js.map +1 -1
  171. package/dist/instrumentation/mcp/wrapper.js +7 -1
  172. package/dist/instrumentation/mcp/wrapper.js.map +1 -1
  173. package/dist/instrumentation/openai/wrapper.js +6 -0
  174. package/dist/instrumentation/openai/wrapper.js.map +1 -1
  175. package/dist/masking.d.ts +42 -0
  176. package/dist/masking.js +197 -0
  177. package/dist/masking.js.map +1 -0
  178. package/dist/otel/__tests__/app-logs-safety.test.d.ts +1 -0
  179. package/dist/otel/__tests__/app-logs-safety.test.js +129 -0
  180. package/dist/otel/__tests__/app-logs-safety.test.js.map +1 -0
  181. package/dist/otel/__tests__/app-logs.test.d.ts +1 -0
  182. package/dist/otel/__tests__/app-logs.test.js +269 -0
  183. package/dist/otel/__tests__/app-logs.test.js.map +1 -0
  184. package/dist/otel/__tests__/log-auto.test.d.ts +1 -0
  185. package/dist/otel/__tests__/log-auto.test.js +125 -0
  186. package/dist/otel/__tests__/log-auto.test.js.map +1 -0
  187. package/dist/otel/__tests__/log-bridges.test.d.ts +1 -0
  188. package/dist/otel/__tests__/log-bridges.test.js +170 -0
  189. package/dist/otel/__tests__/log-bridges.test.js.map +1 -0
  190. package/dist/otel/__tests__/system-metrics.test.d.ts +1 -0
  191. package/dist/otel/__tests__/system-metrics.test.js +79 -0
  192. package/dist/otel/__tests__/system-metrics.test.js.map +1 -0
  193. package/dist/otel/app-logs.d.ts +80 -0
  194. package/dist/otel/app-logs.js +195 -0
  195. package/dist/otel/app-logs.js.map +1 -0
  196. package/dist/otel/build-info.d.ts +23 -0
  197. package/dist/otel/build-info.js +176 -0
  198. package/dist/otel/build-info.js.map +1 -0
  199. package/dist/otel/code-location.d.ts +49 -0
  200. package/dist/otel/code-location.js +233 -0
  201. package/dist/otel/code-location.js.map +1 -0
  202. package/dist/otel/events.d.ts +1 -0
  203. package/dist/otel/events.js +21 -12
  204. package/dist/otel/events.js.map +1 -1
  205. package/dist/otel/log-auto.d.ts +44 -0
  206. package/dist/otel/log-auto.js +200 -0
  207. package/dist/otel/log-auto.js.map +1 -0
  208. package/dist/otel/log-bridges.d.ts +54 -0
  209. package/dist/otel/log-bridges.js +307 -0
  210. package/dist/otel/log-bridges.js.map +1 -0
  211. package/dist/otel/system-metrics.d.ts +39 -0
  212. package/dist/otel/system-metrics.js +166 -0
  213. package/dist/otel/system-metrics.js.map +1 -0
  214. package/dist/otel/tracing.js +12 -1
  215. package/dist/otel/tracing.js.map +1 -1
  216. package/dist/pricing.json +100 -42
  217. package/dist/protect/__tests__/protect.test.d.ts +1 -0
  218. package/dist/protect/__tests__/protect.test.js +210 -0
  219. package/dist/protect/__tests__/protect.test.js.map +1 -0
  220. package/dist/protect/index.d.ts +103 -0
  221. package/dist/protect/index.js +196 -0
  222. package/dist/protect/index.js.map +1 -0
  223. package/dist/protect/mcp.d.ts +13 -0
  224. package/dist/protect/mcp.js +49 -0
  225. package/dist/protect/mcp.js.map +1 -0
  226. package/dist/protect/mode.d.ts +89 -0
  227. package/dist/protect/mode.js +134 -0
  228. package/dist/protect/mode.js.map +1 -0
  229. package/dist/rasp/__tests__/auto-http.test.d.ts +1 -0
  230. package/dist/rasp/__tests__/auto-http.test.js +136 -0
  231. package/dist/rasp/__tests__/auto-http.test.js.map +1 -0
  232. package/dist/rasp/__tests__/baseline.test.d.ts +1 -0
  233. package/dist/rasp/__tests__/baseline.test.js +86 -0
  234. package/dist/rasp/__tests__/baseline.test.js.map +1 -0
  235. package/dist/rasp/__tests__/benign-corpus.test.d.ts +1 -0
  236. package/dist/rasp/__tests__/benign-corpus.test.js +68 -0
  237. package/dist/rasp/__tests__/benign-corpus.test.js.map +1 -0
  238. package/dist/rasp/__tests__/capture-context.test.d.ts +1 -0
  239. package/dist/rasp/__tests__/capture-context.test.js +135 -0
  240. package/dist/rasp/__tests__/capture-context.test.js.map +1 -0
  241. package/dist/rasp/__tests__/code-hook.test.d.ts +1 -0
  242. package/dist/rasp/__tests__/code-hook.test.js +218 -0
  243. package/dist/rasp/__tests__/code-hook.test.js.map +1 -0
  244. package/dist/rasp/__tests__/config-client.test.d.ts +1 -0
  245. package/dist/rasp/__tests__/config-client.test.js +283 -0
  246. package/dist/rasp/__tests__/config-client.test.js.map +1 -0
  247. package/dist/rasp/__tests__/corpus.d.ts +13 -0
  248. package/dist/rasp/__tests__/corpus.js +111 -0
  249. package/dist/rasp/__tests__/corpus.js.map +1 -0
  250. package/dist/rasp/__tests__/custom-rules.test.d.ts +1 -0
  251. package/dist/rasp/__tests__/custom-rules.test.js +276 -0
  252. package/dist/rasp/__tests__/custom-rules.test.js.map +1 -0
  253. package/dist/rasp/__tests__/db-hook.test.d.ts +1 -0
  254. package/dist/rasp/__tests__/db-hook.test.js +438 -0
  255. package/dist/rasp/__tests__/db-hook.test.js.map +1 -0
  256. package/dist/rasp/__tests__/deception.test.d.ts +1 -0
  257. package/dist/rasp/__tests__/deception.test.js +567 -0
  258. package/dist/rasp/__tests__/deception.test.js.map +1 -0
  259. package/dist/rasp/__tests__/detect.test.d.ts +1 -0
  260. package/dist/rasp/__tests__/detect.test.js +276 -0
  261. package/dist/rasp/__tests__/detect.test.js.map +1 -0
  262. package/dist/rasp/__tests__/esm-exports.test.d.ts +1 -0
  263. package/dist/rasp/__tests__/esm-exports.test.js +20 -0
  264. package/dist/rasp/__tests__/esm-exports.test.js.map +1 -0
  265. package/dist/rasp/__tests__/fs-hook.test.d.ts +1 -0
  266. package/dist/rasp/__tests__/fs-hook.test.js +241 -0
  267. package/dist/rasp/__tests__/fs-hook.test.js.map +1 -0
  268. package/dist/rasp/__tests__/hook-contracts.test.d.ts +1 -0
  269. package/dist/rasp/__tests__/hook-contracts.test.js +201 -0
  270. package/dist/rasp/__tests__/hook-contracts.test.js.map +1 -0
  271. package/dist/rasp/__tests__/hook-kit.d.ts +42 -0
  272. package/dist/rasp/__tests__/hook-kit.js +139 -0
  273. package/dist/rasp/__tests__/hook-kit.js.map +1 -0
  274. package/dist/rasp/__tests__/http-hook.test.d.ts +1 -0
  275. package/dist/rasp/__tests__/http-hook.test.js +250 -0
  276. package/dist/rasp/__tests__/http-hook.test.js.map +1 -0
  277. package/dist/rasp/__tests__/iast.test.d.ts +1 -0
  278. package/dist/rasp/__tests__/iast.test.js +361 -0
  279. package/dist/rasp/__tests__/iast.test.js.map +1 -0
  280. package/dist/rasp/__tests__/include-hook.test.d.ts +1 -0
  281. package/dist/rasp/__tests__/include-hook.test.js +122 -0
  282. package/dist/rasp/__tests__/include-hook.test.js.map +1 -0
  283. package/dist/rasp/__tests__/middleware.test.d.ts +1 -0
  284. package/dist/rasp/__tests__/middleware.test.js +302 -0
  285. package/dist/rasp/__tests__/middleware.test.js.map +1 -0
  286. package/dist/rasp/__tests__/process-hook.test.d.ts +1 -0
  287. package/dist/rasp/__tests__/process-hook.test.js +238 -0
  288. package/dist/rasp/__tests__/process-hook.test.js.map +1 -0
  289. package/dist/rasp/__tests__/reporter.test.d.ts +1 -0
  290. package/dist/rasp/__tests__/reporter.test.js +114 -0
  291. package/dist/rasp/__tests__/reporter.test.js.map +1 -0
  292. package/dist/rasp/__tests__/route.test.d.ts +1 -0
  293. package/dist/rasp/__tests__/route.test.js +46 -0
  294. package/dist/rasp/__tests__/route.test.js.map +1 -0
  295. package/dist/rasp/__tests__/rule-expr.test.d.ts +1 -0
  296. package/dist/rasp/__tests__/rule-expr.test.js +151 -0
  297. package/dist/rasp/__tests__/rule-expr.test.js.map +1 -0
  298. package/dist/rasp/__tests__/rule-phases.test.d.ts +1 -0
  299. package/dist/rasp/__tests__/rule-phases.test.js +271 -0
  300. package/dist/rasp/__tests__/rule-phases.test.js.map +1 -0
  301. package/dist/rasp/__tests__/sinks-hook.test.d.ts +1 -0
  302. package/dist/rasp/__tests__/sinks-hook.test.js +177 -0
  303. package/dist/rasp/__tests__/sinks-hook.test.js.map +1 -0
  304. package/dist/rasp/__tests__/targets.test.d.ts +1 -0
  305. package/dist/rasp/__tests__/targets.test.js +82 -0
  306. package/dist/rasp/__tests__/targets.test.js.map +1 -0
  307. package/dist/rasp/__tests__/template-hook.test.d.ts +1 -0
  308. package/dist/rasp/__tests__/template-hook.test.js +254 -0
  309. package/dist/rasp/__tests__/template-hook.test.js.map +1 -0
  310. package/dist/rasp/__tests__/upload.test.d.ts +1 -0
  311. package/dist/rasp/__tests__/upload.test.js +81 -0
  312. package/dist/rasp/__tests__/upload.test.js.map +1 -0
  313. package/dist/rasp/__tests__/vpatch-engine.test.d.ts +1 -0
  314. package/dist/rasp/__tests__/vpatch-engine.test.js +177 -0
  315. package/dist/rasp/__tests__/vpatch-engine.test.js.map +1 -0
  316. package/dist/rasp/auto-http.d.ts +6 -0
  317. package/dist/rasp/auto-http.js +194 -0
  318. package/dist/rasp/auto-http.js.map +1 -0
  319. package/dist/rasp/baseline.d.ts +35 -0
  320. package/dist/rasp/baseline.js +91 -0
  321. package/dist/rasp/baseline.js.map +1 -0
  322. package/dist/rasp/capture.d.ts +76 -0
  323. package/dist/rasp/capture.js +304 -0
  324. package/dist/rasp/capture.js.map +1 -0
  325. package/dist/rasp/config-client.d.ts +122 -0
  326. package/dist/rasp/config-client.js +337 -0
  327. package/dist/rasp/config-client.js.map +1 -0
  328. package/dist/rasp/context.d.ts +65 -0
  329. package/dist/rasp/context.js +68 -0
  330. package/dist/rasp/context.js.map +1 -0
  331. package/dist/rasp/custom-rules.d.ts +68 -0
  332. package/dist/rasp/custom-rules.js +222 -0
  333. package/dist/rasp/custom-rules.js.map +1 -0
  334. package/dist/rasp/data/default-rules.json +199 -0
  335. package/dist/rasp/data/default-sinks.json +4 -0
  336. package/dist/rasp/data/dnslog-domains.json +11 -0
  337. package/dist/rasp/deception.d.ts +70 -0
  338. package/dist/rasp/deception.js +220 -0
  339. package/dist/rasp/deception.js.map +1 -0
  340. package/dist/rasp/detect.d.ts +68 -0
  341. package/dist/rasp/detect.js +671 -0
  342. package/dist/rasp/detect.js.map +1 -0
  343. package/dist/rasp/engine.d.ts +107 -0
  344. package/dist/rasp/engine.js +330 -0
  345. package/dist/rasp/engine.js.map +1 -0
  346. package/dist/rasp/hooks/code.d.ts +20 -0
  347. package/dist/rasp/hooks/code.js +334 -0
  348. package/dist/rasp/hooks/code.js.map +1 -0
  349. package/dist/rasp/hooks/db.d.ts +48 -0
  350. package/dist/rasp/hooks/db.js +322 -0
  351. package/dist/rasp/hooks/db.js.map +1 -0
  352. package/dist/rasp/hooks/esm.d.ts +7 -0
  353. package/dist/rasp/hooks/esm.js +18 -0
  354. package/dist/rasp/hooks/esm.js.map +1 -0
  355. package/dist/rasp/hooks/fs.d.ts +3 -0
  356. package/dist/rasp/hooks/fs.js +206 -0
  357. package/dist/rasp/hooks/fs.js.map +1 -0
  358. package/dist/rasp/hooks/http.d.ts +4 -0
  359. package/dist/rasp/hooks/http.js +213 -0
  360. package/dist/rasp/hooks/http.js.map +1 -0
  361. package/dist/rasp/hooks/include.d.ts +9 -0
  362. package/dist/rasp/hooks/include.js +79 -0
  363. package/dist/rasp/hooks/include.js.map +1 -0
  364. package/dist/rasp/hooks/marks.d.ts +2 -0
  365. package/dist/rasp/hooks/marks.js +16 -0
  366. package/dist/rasp/hooks/marks.js.map +1 -0
  367. package/dist/rasp/hooks/process.d.ts +22 -0
  368. package/dist/rasp/hooks/process.js +191 -0
  369. package/dist/rasp/hooks/process.js.map +1 -0
  370. package/dist/rasp/hooks/sinks.d.ts +54 -0
  371. package/dist/rasp/hooks/sinks.js +329 -0
  372. package/dist/rasp/hooks/sinks.js.map +1 -0
  373. package/dist/rasp/hooks/template.d.ts +21 -0
  374. package/dist/rasp/hooks/template.js +152 -0
  375. package/dist/rasp/hooks/template.js.map +1 -0
  376. package/dist/rasp/iast-rules.d.ts +82 -0
  377. package/dist/rasp/iast-rules.js +240 -0
  378. package/dist/rasp/iast-rules.js.map +1 -0
  379. package/dist/rasp/iast-scope.d.ts +29 -0
  380. package/dist/rasp/iast-scope.js +54 -0
  381. package/dist/rasp/iast-scope.js.map +1 -0
  382. package/dist/rasp/iast.d.ts +81 -0
  383. package/dist/rasp/iast.js +272 -0
  384. package/dist/rasp/iast.js.map +1 -0
  385. package/dist/rasp/index.d.ts +52 -0
  386. package/dist/rasp/index.js +280 -0
  387. package/dist/rasp/index.js.map +1 -0
  388. package/dist/rasp/lexers.d.ts +32 -0
  389. package/dist/rasp/lexers.js +444 -0
  390. package/dist/rasp/lexers.js.map +1 -0
  391. package/dist/rasp/middleware.d.ts +155 -0
  392. package/dist/rasp/middleware.js +568 -0
  393. package/dist/rasp/middleware.js.map +1 -0
  394. package/dist/rasp/model-output.d.ts +14 -0
  395. package/dist/rasp/model-output.js +107 -0
  396. package/dist/rasp/model-output.js.map +1 -0
  397. package/dist/rasp/normalize.d.ts +23 -0
  398. package/dist/rasp/normalize.js +140 -0
  399. package/dist/rasp/normalize.js.map +1 -0
  400. package/dist/rasp/reporter.d.ts +60 -0
  401. package/dist/rasp/reporter.js +230 -0
  402. package/dist/rasp/reporter.js.map +1 -0
  403. package/dist/rasp/rule-expr.d.ts +236 -0
  404. package/dist/rasp/rule-expr.js +1253 -0
  405. package/dist/rasp/rule-expr.js.map +1 -0
  406. package/dist/rasp/template.d.ts +53 -0
  407. package/dist/rasp/template.js +336 -0
  408. package/dist/rasp/template.js.map +1 -0
  409. package/dist/rasp/types.d.ts +110 -0
  410. package/dist/rasp/types.js +51 -0
  411. package/dist/rasp/types.js.map +1 -0
  412. package/dist/rasp/vpatch.d.ts +55 -0
  413. package/dist/rasp/vpatch.js +120 -0
  414. package/dist/rasp/vpatch.js.map +1 -0
  415. package/dist/register.js +52 -11
  416. package/dist/register.js.map +1 -1
  417. package/dist/semantic-convention.d.ts +2 -0
  418. package/dist/semantic-convention.js +5 -0
  419. package/dist/semantic-convention.js.map +1 -1
  420. package/dist/types.d.ts +96 -0
  421. package/dist/zero-code.d.ts +8 -0
  422. package/dist/zero-code.js +38 -0
  423. package/dist/zero-code.js.map +1 -0
  424. package/package.json +18 -2
package/dist/pricing.json CHANGED
@@ -266,169 +266,204 @@
266
266
  "promptPrice": 0.015,
267
267
  "completionPrice": 0.075,
268
268
  "cacheReadPrice": 0.0015,
269
- "cacheCreationPrice": 0.01875
269
+ "cacheCreationPrice": 0.01875,
270
+ "cacheCreation1hPrice": 0.03
270
271
  },
271
272
  "claude-3-sonnet-20240229": {
272
273
  "promptPrice": 0.003,
273
274
  "completionPrice": 0.015,
274
275
  "cacheReadPrice": 0.0003,
275
- "cacheCreationPrice": 0.00375
276
+ "cacheCreationPrice": 0.00375,
277
+ "cacheCreation1hPrice": 0.006
276
278
  },
277
279
  "claude-3-haiku-20240307": {
278
280
  "promptPrice": 0.00025,
279
281
  "completionPrice": 0.00125,
280
282
  "cacheReadPrice": 3e-05,
281
- "cacheCreationPrice": 0.0003
283
+ "cacheCreationPrice": 0.0003,
284
+ "cacheCreation1hPrice": 0.0005
282
285
  },
283
286
  "claude-3-5-sonnet-20240620": {
284
287
  "promptPrice": 0.003,
285
288
  "completionPrice": 0.015,
286
289
  "cacheReadPrice": 0.0003,
287
- "cacheCreationPrice": 0.00375
290
+ "cacheCreationPrice": 0.00375,
291
+ "cacheCreation1hPrice": 0.006
288
292
  },
289
293
  "claude-3-5-sonnet-20241022": {
290
294
  "promptPrice": 0.003,
291
295
  "completionPrice": 0.015,
292
296
  "cacheReadPrice": 0.0003,
293
- "cacheCreationPrice": 0.00375
297
+ "cacheCreationPrice": 0.00375,
298
+ "cacheCreation1hPrice": 0.006
294
299
  },
295
300
  "claude-3-5-haiku-20241022": {
296
301
  "promptPrice": 0.0008,
297
302
  "completionPrice": 0.004,
298
303
  "cacheReadPrice": 8e-05,
299
- "cacheCreationPrice": 0.001
304
+ "cacheCreationPrice": 0.001,
305
+ "cacheCreation1hPrice": 0.0016
300
306
  },
301
307
  "claude-3-7-sonnet-20250219": {
302
308
  "promptPrice": 0.003,
303
309
  "completionPrice": 0.015,
304
310
  "cacheReadPrice": 0.0003,
305
- "cacheCreationPrice": 0.00375
311
+ "cacheCreationPrice": 0.00375,
312
+ "cacheCreation1hPrice": 0.006
306
313
  },
307
314
  "claude-haiku-4-5-20251001": {
308
315
  "promptPrice": 0.001,
309
316
  "completionPrice": 0.005,
310
317
  "cacheReadPrice": 0.0001,
311
- "cacheCreationPrice": 0.00125
318
+ "cacheCreationPrice": 0.00125,
319
+ "cacheCreation1hPrice": 0.002
312
320
  },
313
321
  "claude-haiku-4-5": {
314
322
  "promptPrice": 0.001,
315
323
  "completionPrice": 0.005,
316
324
  "cacheReadPrice": 0.0001,
317
- "cacheCreationPrice": 0.00125
325
+ "cacheCreationPrice": 0.00125,
326
+ "cacheCreation1hPrice": 0.002
318
327
  },
319
328
  "claude-sonnet-4-0": {
320
329
  "promptPrice": 0.003,
321
330
  "completionPrice": 0.015,
322
331
  "cacheReadPrice": 0.0003,
323
- "cacheCreationPrice": 0.00375
332
+ "cacheCreationPrice": 0.00375,
333
+ "cacheCreation1hPrice": 0.006
324
334
  },
325
335
  "claude-sonnet-4-5": {
326
336
  "promptPrice": 0.003,
327
337
  "completionPrice": 0.015,
328
338
  "cacheReadPrice": 0.0003,
329
- "cacheCreationPrice": 0.00375
339
+ "cacheCreationPrice": 0.00375,
340
+ "cacheCreation1hPrice": 0.006
330
341
  },
331
342
  "claude-sonnet-4-6": {
332
343
  "promptPrice": 0.003,
333
344
  "completionPrice": 0.015,
334
345
  "cacheReadPrice": 0.0003,
335
- "cacheCreationPrice": 0.00375
346
+ "cacheCreationPrice": 0.00375,
347
+ "cacheCreation1hPrice": 0.006
336
348
  },
337
349
  "claude-sonnet-4-7": {
338
350
  "promptPrice": 0.003,
339
351
  "completionPrice": 0.015,
340
352
  "cacheReadPrice": 0.0003,
341
- "cacheCreationPrice": 0.00375
353
+ "cacheCreationPrice": 0.00375,
354
+ "cacheCreation1hPrice": 0.006
342
355
  },
343
356
  "claude-sonnet-5": {
344
357
  "promptPrice": 0.002,
345
358
  "completionPrice": 0.01,
346
359
  "cacheReadPrice": 0.0002,
347
- "cacheCreationPrice": 0.0025
360
+ "cacheCreationPrice": 0.0025,
361
+ "cacheCreation1hPrice": 0.004
362
+ },
363
+ "claude-sonnet-5-5": {
364
+ "promptPrice": 0.002,
365
+ "completionPrice": 0.01,
366
+ "cacheReadPrice": 0.0001,
367
+ "cacheCreationPrice": 0.0025,
368
+ "cacheCreation1hPrice": 0.004
348
369
  },
349
370
  "claude-opus-5": {
350
371
  "promptPrice": 0.005,
351
372
  "completionPrice": 0.025,
352
373
  "cacheReadPrice": 0.0005,
353
- "cacheCreationPrice": 0.00625
374
+ "cacheCreationPrice": 0.00625,
375
+ "cacheCreation1hPrice": 0.01
354
376
  },
355
377
  "claude-opus-5-5": {
356
378
  "promptPrice": 0.004,
357
379
  "completionPrice": 0.02,
358
380
  "cacheReadPrice": 0.0002,
359
- "cacheCreationPrice": 0.005
381
+ "cacheCreationPrice": 0.005,
382
+ "cacheCreation1hPrice": 0.008
360
383
  },
361
384
  "claude-opus-4-8": {
362
385
  "promptPrice": 0.005,
363
386
  "completionPrice": 0.025,
364
387
  "cacheReadPrice": 0.0005,
365
- "cacheCreationPrice": 0.00625
388
+ "cacheCreationPrice": 0.00625,
389
+ "cacheCreation1hPrice": 0.01
366
390
  },
367
391
  "claude-fable-5": {
368
392
  "promptPrice": 0.01,
369
393
  "completionPrice": 0.05,
370
394
  "cacheReadPrice": 0.001,
371
- "cacheCreationPrice": 0.0125
395
+ "cacheCreationPrice": 0.0125,
396
+ "cacheCreation1hPrice": 0.02
372
397
  },
373
398
  "claude-fable-5-1": {
374
399
  "promptPrice": 0.01,
375
400
  "completionPrice": 0.05,
376
401
  "cacheReadPrice": 0.00025,
377
- "cacheCreationPrice": 0.0125
402
+ "cacheCreationPrice": 0.0125,
403
+ "cacheCreation1hPrice": 0.02
378
404
  },
379
405
  "claude-opus-4-0": {
380
406
  "promptPrice": 0.015,
381
407
  "completionPrice": 0.075,
382
408
  "cacheReadPrice": 0.0015,
383
- "cacheCreationPrice": 0.01875
409
+ "cacheCreationPrice": 0.01875,
410
+ "cacheCreation1hPrice": 0.03
384
411
  },
385
412
  "claude-opus-4-1": {
386
413
  "promptPrice": 0.015,
387
414
  "completionPrice": 0.075,
388
415
  "cacheReadPrice": 0.0015,
389
- "cacheCreationPrice": 0.01875
416
+ "cacheCreationPrice": 0.01875,
417
+ "cacheCreation1hPrice": 0.03
390
418
  },
391
419
  "claude-opus-4-5": {
392
420
  "promptPrice": 0.005,
393
421
  "completionPrice": 0.025,
394
422
  "cacheReadPrice": 0.0005,
395
- "cacheCreationPrice": 0.00625
423
+ "cacheCreationPrice": 0.00625,
424
+ "cacheCreation1hPrice": 0.01
396
425
  },
397
426
  "claude-opus-4-6": {
398
427
  "promptPrice": 0.005,
399
428
  "completionPrice": 0.025,
400
429
  "cacheReadPrice": 0.0005,
401
- "cacheCreationPrice": 0.00625
430
+ "cacheCreationPrice": 0.00625,
431
+ "cacheCreation1hPrice": 0.01
402
432
  },
403
433
  "claude-opus-4-7": {
404
434
  "promptPrice": 0.005,
405
435
  "completionPrice": 0.025,
406
436
  "cacheReadPrice": 0.0005,
407
- "cacheCreationPrice": 0.00625
437
+ "cacheCreationPrice": 0.00625,
438
+ "cacheCreation1hPrice": 0.01
408
439
  },
409
440
  "claude-opus-4-7-thinking-xhigh": {
410
441
  "promptPrice": 0.005,
411
442
  "completionPrice": 0.025,
412
443
  "cacheReadPrice": 0.0005,
413
- "cacheCreationPrice": 0.00625
444
+ "cacheCreationPrice": 0.00625,
445
+ "cacheCreation1hPrice": 0.01
414
446
  },
415
447
  "claude-opus-4-7-thinking-high": {
416
448
  "promptPrice": 0.005,
417
449
  "completionPrice": 0.025,
418
450
  "cacheReadPrice": 0.0005,
419
- "cacheCreationPrice": 0.00625
451
+ "cacheCreationPrice": 0.00625,
452
+ "cacheCreation1hPrice": 0.01
420
453
  },
421
454
  "claude-opus-4-7-thinking-medium": {
422
455
  "promptPrice": 0.005,
423
456
  "completionPrice": 0.025,
424
457
  "cacheReadPrice": 0.0005,
425
- "cacheCreationPrice": 0.00625
458
+ "cacheCreationPrice": 0.00625,
459
+ "cacheCreation1hPrice": 0.01
426
460
  },
427
461
  "claude-opus-4-7-thinking-low": {
428
462
  "promptPrice": 0.005,
429
463
  "completionPrice": 0.025,
430
464
  "cacheReadPrice": 0.0005,
431
- "cacheCreationPrice": 0.00625
465
+ "cacheCreationPrice": 0.00625,
466
+ "cacheCreation1hPrice": 0.01
432
467
  },
433
468
  "gpt-5": {
434
469
  "promptPrice": 0.00125,
@@ -491,7 +526,11 @@
491
526
  "gpt-5.4": {
492
527
  "promptPrice": 0.0025,
493
528
  "completionPrice": 0.015,
494
- "cacheReadPrice": 0.00025
529
+ "cacheReadPrice": 0.00025,
530
+ "longContextThreshold": 272000,
531
+ "longContextPromptPrice": 0.005,
532
+ "longContextCompletionPrice": 0.0225,
533
+ "longContextCacheReadPrice": 0.0005
495
534
  },
496
535
  "gpt-5.4-mini": {
497
536
  "promptPrice": 0.00075,
@@ -510,7 +549,11 @@
510
549
  "gpt-5.5": {
511
550
  "promptPrice": 0.005,
512
551
  "completionPrice": 0.03,
513
- "cacheReadPrice": 0.0005
552
+ "cacheReadPrice": 0.0005,
553
+ "longContextThreshold": 272000,
554
+ "longContextPromptPrice": 0.01,
555
+ "longContextCompletionPrice": 0.045,
556
+ "longContextCacheReadPrice": 0.001
514
557
  },
515
558
  "gpt-5.5-pro": {
516
559
  "promptPrice": 0.03,
@@ -936,22 +979,37 @@
936
979
  "completionPrice": 0.00219
937
980
  },
938
981
  "gpt-5.6-sol": {
939
- "promptPrice": 0.005,
940
- "completionPrice": 0.03,
941
- "cacheReadPrice": 0.0005,
942
- "cacheCreationPrice": 0.00625
982
+ "promptPrice": 0.004,
983
+ "completionPrice": 0.02,
984
+ "cacheReadPrice": 0.0004,
985
+ "cacheCreationPrice": 0.005,
986
+ "longContextThreshold": 272000,
987
+ "longContextPromptPrice": 0.008,
988
+ "longContextCompletionPrice": 0.03,
989
+ "longContextCacheReadPrice": 0.0008,
990
+ "longContextCacheCreationPrice": 0.01
943
991
  },
944
992
  "gpt-5.6-terra": {
945
- "promptPrice": 0.0025,
946
- "completionPrice": 0.015,
947
- "cacheReadPrice": 0.00025,
948
- "cacheCreationPrice": 0.003125
993
+ "promptPrice": 0.002,
994
+ "completionPrice": 0.012,
995
+ "cacheReadPrice": 0.0002,
996
+ "cacheCreationPrice": 0.0025,
997
+ "longContextThreshold": 272000,
998
+ "longContextPromptPrice": 0.004,
999
+ "longContextCompletionPrice": 0.018,
1000
+ "longContextCacheReadPrice": 0.0004,
1001
+ "longContextCacheCreationPrice": 0.005
949
1002
  },
950
1003
  "gpt-5.6-luna": {
951
- "promptPrice": 0.001,
952
- "completionPrice": 0.006,
953
- "cacheReadPrice": 0.0001,
954
- "cacheCreationPrice": 0.00125
1004
+ "promptPrice": 0.0002,
1005
+ "completionPrice": 0.0012,
1006
+ "cacheReadPrice": 2e-05,
1007
+ "cacheCreationPrice": 0.00025,
1008
+ "longContextThreshold": 272000,
1009
+ "longContextPromptPrice": 0.0004,
1010
+ "longContextCompletionPrice": 0.0018,
1011
+ "longContextCacheReadPrice": 4e-05,
1012
+ "longContextCacheCreationPrice": 0.0005
955
1013
  },
956
1014
  "moonshotai/kimi-k2-instruct": {
957
1015
  "promptPrice": 0.001,
@@ -0,0 +1 @@
1
+ export {};
@@ -0,0 +1,210 @@
1
+ "use strict";
2
+ var __importDefault = (this && this.__importDefault) || function (mod) {
3
+ return (mod && mod.__esModule) ? mod : { "default": mod };
4
+ };
5
+ Object.defineProperty(exports, "__esModule", { value: true });
6
+ /**
7
+ * Shield Protect in the TypeScript SDK: modes, fail-closed guards, readiness,
8
+ * streaming and oversized input, protectTool, and the MCP pre-execution check.
9
+ */
10
+ const base_1 = require("../../guard/base");
11
+ const pipeline_1 = require("../../guard/pipeline");
12
+ const integration_1 = require("../../guard/integration");
13
+ const config_1 = __importDefault(require("../../config"));
14
+ const index_1 = require("../index");
15
+ const mode_1 = require("../mode");
16
+ const mcp_1 = require("../mcp");
17
+ class DenyWord extends base_1.Guard {
18
+ constructor(word, maxScanLength) {
19
+ super({ action: 'deny', maxScanLength });
20
+ this.word = word;
21
+ this.name = 'deny_word';
22
+ this.phases = [base_1.GuardPhase.PREFLIGHT, base_1.GuardPhase.POSTFLIGHT];
23
+ }
24
+ evaluate(text) {
25
+ const hit = text.includes(this.word);
26
+ return (0, base_1.makeGuardResult)({ action: hit ? base_1.GuardAction.DENY : base_1.GuardAction.ALLOW, score: hit ? 1 : 0, guardName: this.name, explanation: hit ? `contains ${this.word}` : '' });
27
+ }
28
+ }
29
+ class Throwing extends base_1.Guard {
30
+ constructor() {
31
+ super({ action: 'deny' });
32
+ this.name = 'throwing';
33
+ this.phases = [base_1.GuardPhase.PREFLIGHT];
34
+ }
35
+ evaluate() {
36
+ throw new Error('classifier down');
37
+ }
38
+ }
39
+ class PreflightOnly extends base_1.Guard {
40
+ constructor() {
41
+ super({ action: 'deny' });
42
+ this.name = 'preflight_only';
43
+ this.phases = [base_1.GuardPhase.PREFLIGHT];
44
+ }
45
+ evaluate() {
46
+ return (0, base_1.makeGuardResult)({ guardName: this.name });
47
+ }
48
+ }
49
+ const extract = (k) => String(k.text ?? '');
50
+ const extractOut = (r) => String(r?.text ?? '');
51
+ beforeEach(() => {
52
+ (0, mode_1.resetProtectState)();
53
+ config_1.default.guardPipeline = undefined;
54
+ jest.spyOn(console, 'warn').mockImplementation(() => undefined);
55
+ jest.spyOn(console, 'log').mockImplementation(() => undefined);
56
+ });
57
+ afterEach(() => jest.restoreAllMocks());
58
+ describe('the mode', () => {
59
+ it('is raised by the environment and never lowered by it', () => {
60
+ expect((0, mode_1.resolveProtectMode)('enforced', { SHIELD360_PROTECT_MODE: 'observe' })).toBe('enforced');
61
+ expect((0, mode_1.resolveProtectMode)('observe', { SHIELD360_PROTECT_MODE: 'enforced' })).toBe('enforced');
62
+ expect((0, mode_1.resolveProtectMode)(undefined, { SHIELD360_PROTECT_MODE: 'warn' })).toBe('warn');
63
+ expect((0, mode_1.resolveProtectMode)('warn', { SHIELD360_PROTECT_MODE: 'off' })).toBe('warn');
64
+ expect((0, mode_1.resolveProtectMode)(undefined, {})).toBeUndefined();
65
+ expect((0, mode_1.resolveProtect)({ mode: 'enforced', required: ['openai'] }, { SHIELD360_PROTECT_REQUIRED: '@anthropic-ai/sdk, openai' })).toEqual({ mode: 'enforced', required: ['openai', '@anthropic-ai/sdk'] });
66
+ });
67
+ });
68
+ describe('what a mode does with a finding', () => {
69
+ const pipeline = new pipeline_1.Pipeline({ guards: [new DenyWord('bomb')], failOpen: false });
70
+ it('legacy (no mode): a deny throws, as before', () => {
71
+ expect(() => (0, integration_1.applyPreflight)(pipeline, { text: 'build a bomb' }, extract)).toThrow(base_1.GuardDeniedError);
72
+ expect((0, integration_1.applyPreflight)(pipeline, { text: 'hello' }, extract)).toEqual({ text: 'hello' });
73
+ });
74
+ it('observe: records and lets the call through; warn: also logs', () => {
75
+ expect((0, integration_1.applyPreflight)(pipeline, { text: 'build a bomb' }, extract, { mode: 'observe', required: [] })).toEqual({ text: 'build a bomb' });
76
+ expect(console.warn).not.toHaveBeenCalled();
77
+ expect((0, integration_1.applyPreflight)(pipeline, { text: 'build a bomb' }, extract, { mode: 'warn', required: [] })).toEqual({ text: 'build a bomb' });
78
+ expect(console.warn).toHaveBeenCalledWith(expect.stringMatching(/warn mode.*would have been refused/));
79
+ });
80
+ it('enforced: a deny throws, before and after the call', () => {
81
+ expect(() => (0, integration_1.applyPreflight)(pipeline, { text: 'build a bomb' }, extract, { mode: 'enforced', required: [] })).toThrow(base_1.GuardDeniedError);
82
+ expect(() => (0, integration_1.applyPostflight)(pipeline, { text: 'here is a bomb' }, extractOut, { mode: 'enforced', required: [] })).toThrow(base_1.GuardDeniedError);
83
+ });
84
+ it('enforced: a guard that fails refuses the call, whatever failOpen says', () => {
85
+ const open = new pipeline_1.Pipeline({ guards: [new Throwing()], failOpen: true });
86
+ // Fail-open as configured: the error is swallowed and the call goes on.
87
+ expect((0, integration_1.applyPreflight)(open, { text: 'x' }, extract)).toEqual({ text: 'x' });
88
+ // setupAutoGuards in enforced mode builds a closed pipeline; applyPreflight on a closed one refuses.
89
+ const closed = new pipeline_1.Pipeline({ guards: [new Throwing()], failOpen: false });
90
+ expect(() => (0, integration_1.applyPreflight)(closed, { text: 'x' }, extract, { mode: 'enforced', required: [] })).toThrow(index_1.ProtectDeniedError);
91
+ try {
92
+ (0, integration_1.applyPreflight)(closed, { text: 'x' }, extract, { mode: 'enforced', required: [] });
93
+ }
94
+ catch (e) {
95
+ expect(e.code).toBe('guard_failed');
96
+ }
97
+ });
98
+ it('enforced: input past the scan bound is refused, never scanned in part', () => {
99
+ const bounded = new pipeline_1.Pipeline({ guards: [new DenyWord('bomb', 20)] });
100
+ const long = 'x'.repeat(30) + ' bomb';
101
+ // Legacy: the tail is unscanned and the word slips through.
102
+ expect((0, integration_1.applyPreflight)(bounded, { text: long }, extract)).toEqual({ text: long });
103
+ expect(() => (0, integration_1.applyPreflight)(bounded, { text: long }, extract, { mode: 'enforced', required: [] })).toThrow(/more than its guards scan/);
104
+ expect(bounded.scanBound()).toBe(20);
105
+ });
106
+ it('enforced: a streamed completion is refused when postflight guards exist, allowed when only preflight guards do', () => {
107
+ expect(() => (0, integration_1.applyPreflight)(pipeline, { text: 'hello', stream: true }, extract, { mode: 'enforced', required: [] })).toThrow(/streamed completion/);
108
+ const pre = new pipeline_1.Pipeline({ guards: [new PreflightOnly()] });
109
+ expect((0, integration_1.applyPreflight)(pre, { text: 'hello', stream: true }, extract, { mode: 'enforced', required: [] })).toEqual({ text: 'hello', stream: true });
110
+ // Observe mode lets the stream through, as before.
111
+ expect((0, integration_1.applyPreflight)(pipeline, { text: 'hello', stream: true }, extract, { mode: 'observe', required: [] })).toEqual({ text: 'hello', stream: true });
112
+ });
113
+ });
114
+ describe('readiness', () => {
115
+ it('enforced mode with a required provider that is not wrapped refuses to start', () => {
116
+ expect(() => (0, integration_1.setupAutoGuards)([new DenyWord('x')], true, { mode: 'enforced', required: ['a-provider-that-is-not-installed'] })).toThrow(index_1.ProtectReadinessError);
117
+ expect((0, index_1.protectReadiness)()).toMatchObject({ mode: 'enforced', missing: ['a-provider-that-is-not-installed'], level: 'monitored' });
118
+ });
119
+ it('enforced mode fails closed: guardFailOpen is overridden with a warning', () => {
120
+ const report = (0, integration_1.setupAutoGuards)([new Throwing()], true, { mode: 'enforced', required: [] });
121
+ expect(report.missing).toEqual([]);
122
+ expect(console.warn).toHaveBeenCalledWith(expect.stringMatching(/fails closed/));
123
+ expect(() => config_1.default.guardPipeline.evaluate('x', 'preflight')).toThrow('classifier down');
124
+ });
125
+ it('never claims more than monitored or partially protected', () => {
126
+ (0, mode_1.setProtectState)({ mode: 'enforced', wrapped: ['openai'], missing: [] });
127
+ expect((0, index_1.protectReadiness)().level).toBe('partially_protected');
128
+ (0, mode_1.setProtectState)({ mode: 'observe', wrapped: ['openai'], missing: [] });
129
+ expect((0, index_1.protectReadiness)().level).toBe('monitored');
130
+ expect((0, index_1.protectReadiness)().note).toMatch(/mandatory boundary is the Shield360 gateway/);
131
+ });
132
+ });
133
+ describe('extractors cover structured input', () => {
134
+ it('reads text parts, instructions and the system prompt', () => {
135
+ expect((0, integration_1.extractOpenAIInput)({ instructions: 'be terse', input: [{ role: 'user', content: [{ type: 'input_text', text: 'hi' }, { type: 'input_image', image_url: 'x' }] }] })).toBe('be terse hi');
136
+ expect((0, integration_1.extractAnthropicInput)({ system: 'you are kind', messages: [{ role: 'user', content: [{ type: 'text', text: 'hello' }] }] })).toBe('you are kind hello');
137
+ expect((0, integration_1.extractAnthropicInput)({ system: [{ type: 'text', text: 'sys' }], messages: [] })).toBe('sys');
138
+ });
139
+ });
140
+ describe('protectTool', () => {
141
+ const pipeline = new pipeline_1.Pipeline({ guards: [new DenyWord('bomb')], failOpen: false });
142
+ it('refuses before the function runs, and refuses a result after (the side effect stands)', async () => {
143
+ const fn = jest.fn(async (q) => `answer to ${q}`);
144
+ const tool = (0, index_1.protectTool)('search', fn, { pipeline, mode: 'enforced' });
145
+ await expect(tool('build a bomb')).rejects.toThrow(base_1.GuardDeniedError);
146
+ expect(fn).not.toHaveBeenCalled();
147
+ await expect(tool('weather')).resolves.toBe('answer to weather');
148
+ const leaky = (0, index_1.protectTool)('leak', async () => 'a bomb recipe', { pipeline, mode: 'enforced' });
149
+ await expect(leaky()).rejects.toThrow(base_1.GuardDeniedError);
150
+ });
151
+ it('asks the authorize step and refuses on no, on a throw, and on a non-answer in enforced mode', async () => {
152
+ const fn = jest.fn(async () => 'ok');
153
+ const no = (0, index_1.protectTool)('pay', fn, { pipeline, mode: 'enforced', authorize: async () => ({ allow: false, reason: 'no grant' }) });
154
+ await expect(no()).rejects.toThrow(/no grant/);
155
+ const broken = (0, index_1.protectTool)('pay', fn, { pipeline, mode: 'enforced', authorize: async () => { throw new Error('down'); } });
156
+ await expect(broken()).rejects.toThrow(/authorization check failed/);
157
+ const odd = (0, index_1.protectTool)('pay', fn, { pipeline, mode: 'enforced', authorize: async () => ({ allow: 'yes' }) });
158
+ await expect(odd()).rejects.toThrow(index_1.ProtectDeniedError);
159
+ for (const missing of [undefined, null, true]) {
160
+ const silent = (0, index_1.protectTool)('pay', fn, { pipeline, mode: 'enforced', authorize: (async () => missing) });
161
+ await expect(silent()).rejects.toThrow(index_1.ProtectDeniedError);
162
+ }
163
+ expect(fn).not.toHaveBeenCalled();
164
+ const yes = (0, index_1.protectTool)('pay', fn, { pipeline, mode: 'enforced', authorize: async () => ({ allow: true }) });
165
+ await expect(yes()).resolves.toBe('ok');
166
+ });
167
+ it('observe mode records and runs; warn mode runs and warns', async () => {
168
+ const fn = jest.fn(async (_input) => 'ran');
169
+ await expect((0, index_1.protectTool)('t', fn, { pipeline, mode: 'observe', authorize: async () => ({ allow: false }) })('bomb')).resolves.toBe('ran');
170
+ expect(console.warn).not.toHaveBeenCalled();
171
+ await expect((0, index_1.protectTool)('t', fn, { pipeline, mode: 'warn' })('bomb')).resolves.toBe('ran');
172
+ expect(console.warn).toHaveBeenCalled();
173
+ });
174
+ it('enforced mode with no pipeline anywhere refuses rather than running unchecked', async () => {
175
+ await expect((0, index_1.protectTool)('t', async () => 1, { mode: 'enforced' })()).rejects.toThrow(/no guard pipeline/);
176
+ });
177
+ it('uses the pipeline init() installed and the process mode by default', async () => {
178
+ config_1.default.guardPipeline = pipeline;
179
+ (0, mode_1.setProtectState)({ mode: 'enforced', wrapped: [], missing: [] });
180
+ await expect((0, index_1.protectTool)('t', async (s) => s)('bomb')).rejects.toThrow(base_1.GuardDeniedError);
181
+ });
182
+ });
183
+ describe('authorizeWithShield360', () => {
184
+ it('is a refusal when Shield360 is not configured, unreachable, or says no; allow only on allow', async () => {
185
+ await expect((0, index_1.authorizeWithShield360)({ kind: 'destination', host: 'api.example' }, { agentToken: '', url: '' })).resolves.toMatchObject({ allow: false, reason: 'shield360_not_configured' });
186
+ const fetchImpl = jest.fn(async () => ({ ok: true, json: async () => ({ outcome: 'deny', reason: 'destination_not_approved' }) }));
187
+ await expect((0, index_1.authorizeWithShield360)({ kind: 'destination', host: 'api.example' }, { agentToken: 't', url: 'https://s360.example/', fetchImpl })).resolves.toMatchObject({ allow: false, reason: 'destination_not_approved' });
188
+ const [url, init] = fetchImpl.mock.calls[0];
189
+ expect(url).toBe('https://s360.example/api/agent-authorization/check');
190
+ expect(init.headers.Authorization).toBe('Bearer t');
191
+ const down = jest.fn(async () => { throw new Error('ECONNREFUSED'); });
192
+ await expect((0, index_1.authorizeWithShield360)({ kind: 'model', model: 'gpt-4o' }, { agentToken: 't', url: 'https://s360.example', fetchImpl: down })).resolves.toMatchObject({ allow: false, reason: expect.stringMatching(/check_unreachable/) });
193
+ const yes = jest.fn(async () => ({ ok: true, json: async () => ({ outcome: 'allow', reason: 'destination_approved', decisionId: 'd1' }) }));
194
+ await expect((0, index_1.authorizeWithShield360)({ kind: 'destination', host: 'api.example' }, { agentToken: 't', url: 'https://s360.example', fetchImpl: yes })).resolves.toMatchObject({ allow: true, decisionId: 'd1' });
195
+ });
196
+ });
197
+ describe('the MCP pre-execution check', () => {
198
+ it('refuses a tools/call whose arguments a guard denies, in enforced mode only', () => {
199
+ config_1.default.guardPipeline = new pipeline_1.Pipeline({ guards: [new DenyWord('bomb')], failOpen: false });
200
+ (0, mode_1.setProtectState)({ mode: 'enforced', wrapped: [], missing: [] });
201
+ expect(() => (0, mcp_1.checkMcpToolCall)('search', { q: 'a bomb' })).toThrow(base_1.GuardDeniedError);
202
+ expect(() => (0, mcp_1.checkMcpToolCall)('search', { q: 'weather' })).not.toThrow();
203
+ (0, mode_1.setProtectState)({ mode: 'warn', wrapped: [], missing: [] });
204
+ expect(() => (0, mcp_1.checkMcpToolCall)('search', { q: 'a bomb' })).not.toThrow();
205
+ expect(console.warn).toHaveBeenCalled();
206
+ (0, mode_1.resetProtectState)();
207
+ expect(() => (0, mcp_1.checkMcpToolCall)('search', { q: 'a bomb' })).not.toThrow();
208
+ });
209
+ });
210
+ //# sourceMappingURL=protect.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"protect.test.js","sourceRoot":"","sources":["../../../src/protect/__tests__/protect.test.ts"],"names":[],"mappings":";;;;;AAAA;;;GAGG;AACH,2CAAkH;AAClH,mDAAgD;AAChD,yDAAsI;AACtI,0DAA2C;AAC3C,oCAA4H;AAC5H,kCAAiG;AACjG,gCAA0C;AAE1C,MAAM,QAAS,SAAQ,YAAK;IAG1B,YAA6B,IAAY,EAAE,aAAsB;QAC/D,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QADd,SAAI,GAAJ,IAAI,CAAQ;QAFhC,SAAI,GAAG,WAAW,CAAC;QACnB,WAAM,GAAG,CAAC,iBAAU,CAAC,SAAS,EAAE,iBAAU,CAAC,UAAU,CAAC,CAAC;IAGhE,CAAC;IACD,QAAQ,CAAC,IAAY;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAA,sBAAe,EAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,kBAAW,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAW,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5K,CAAC;CACF;AAED,MAAM,QAAS,SAAQ,YAAK;IAG1B;QACE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAHnB,SAAI,GAAG,UAAU,CAAC;QAClB,WAAM,GAAG,CAAC,iBAAU,CAAC,SAAS,CAAC,CAAC;IAGzC,CAAC;IACD,QAAQ;QACN,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrC,CAAC;CACF;AAED,MAAM,aAAc,SAAQ,YAAK;IAG/B;QACE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAHnB,SAAI,GAAG,gBAAgB,CAAC;QACxB,WAAM,GAAG,CAAC,iBAAU,CAAC,SAAS,CAAC,CAAC;IAGzC,CAAC;IACD,QAAQ;QACN,OAAO,IAAA,sBAAe,EAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;CACF;AAED,MAAM,OAAO,GAAG,CAAC,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACjE,MAAM,UAAU,GAAG,CAAC,CAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;AAErD,UAAU,CAAC,GAAG,EAAE;IACd,IAAA,wBAAiB,GAAE,CAAC;IACpB,gBAAe,CAAC,aAAa,GAAG,SAAS,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AACjE,CAAC,CAAC,CAAC;AACH,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;AAExC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,IAAA,yBAAkB,EAAC,UAAU,EAAE,EAAE,sBAAsB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAA,yBAAkB,EAAC,SAAS,EAAE,EAAE,sBAAsB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/F,MAAM,CAAC,IAAA,yBAAkB,EAAC,SAAS,EAAE,EAAE,sBAAsB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,IAAA,yBAAkB,EAAC,MAAM,EAAE,EAAE,sBAAsB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnF,MAAM,CAAC,IAAA,yBAAkB,EAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAA,qBAAc,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC3M,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,MAAM,QAAQ,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;QACpG,MAAM,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACzI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACtI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,oCAAoC,CAAC,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;QACxI,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,6BAAe,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;IAChJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,IAAI,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,wEAAwE;QACxE,MAAM,CAAC,IAAA,4BAAc,EAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,qGAAqG;QACrG,MAAM,MAAM,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAc,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,0BAAkB,CAAC,CAAC;QAC7H,IAAI,CAAC;YACH,IAAA,4BAAc,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAE,CAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,OAAO,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC;QACtC,4DAA4D;QAC5D,MAAM,CAAC,IAAA,4BAAc,EAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAc,EAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACxI,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gHAAgH,EAAE,GAAG,EAAE;QACxH,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACpJ,MAAM,GAAG,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,IAAA,4BAAc,EAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACnJ,mDAAmD;QACnD,MAAM,CAAC,IAAA,4BAAc,EAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,6BAAe,EAAC,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,kCAAkC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,6BAAqB,CAAC,CAAC;QAC9J,MAAM,CAAC,IAAA,wBAAgB,GAAE,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,kCAAkC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,MAAM,GAAG,IAAA,6BAAe,EAAC,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3F,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAe,CAAC,aAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,IAAA,wBAAgB,GAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC7D,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,IAAA,wBAAgB,GAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,CAAC,IAAA,wBAAgB,GAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,IAAA,gCAAkB,EAAC,EAAE,YAAY,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChM,MAAM,CAAC,IAAA,mCAAqB,EAAC,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/J,MAAM,CAAC,IAAA,mCAAqB,EAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,MAAM,QAAQ,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnF,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAA,mBAAW,EAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClC,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAA,mBAAW,EAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/F,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;QACjI,MAAM,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3H,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAA2B,EAAE,CAAC,EAAE,CAAC,CAAC;QACpI,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAkB,CAAC,CAAC;QACxD,KAAK,MAAM,OAAO,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAU,EAAE,CAAC,CAAC;YACjH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAAkB,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7G,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAc,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,MAAM,CAAC,IAAA,mBAAW,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1I,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,MAAM,CAAC,IAAA,mBAAW,EAAC,GAAG,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5F,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,MAAM,CAAC,IAAA,mBAAW,EAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,gBAAe,CAAC,aAAa,GAAG,QAAQ,CAAC;QACzC,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,MAAM,CAAC,IAAA,mBAAW,EAAC,GAAG,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;IACnG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;QAC3G,MAAM,MAAM,CAAC,IAAA,8BAAsB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC7L,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,EAAE,CAAC,CAA4B,CAAC;QAC9J,MAAM,MAAM,CAAC,IAAA,8BAAsB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,uBAAuB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;QAC9N,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAI,SAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACvE,MAAM,CAAE,IAA4C,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAA4B,CAAC;QAClG,MAAM,MAAM,CAAC,IAAA,8BAAsB,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;QACzO,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAA4B,CAAC;QACvK,MAAM,MAAM,CAAC,IAAA,8BAAsB,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IACjN,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,gBAAe,CAAC,aAAa,GAAG,IAAI,mBAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAClG,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAgB,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAgB,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAgB,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACzE,IAAA,sBAAe,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAgB,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACxE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QACxC,IAAA,wBAAiB,GAAE,CAAC;QACpB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,sBAAgB,EAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}