shield360 1.1.0 → 1.2.1

package/dist/ai-security/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/ai-security/output.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AAmFH,kCAGC;AAGD,wCAoBC;AAqBD,wCAQC;AAeD,wBAGC;AAaD,gCAgFC;AAGD,wBAcC;AAxQD,gDAAgD;AAChD,iDAAiD;AAkCjD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;IACzB,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAChB,CAAC,IAAI,CAAC,CAAC;YACP,IAAI,CAAC,GAAG,CAAC;gBAAE,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE;IAChC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,MAAM,CAAC;AAClF,CAAC,CAAC;AAEF,mHAAmH;AACnH,MAAM,QAAQ,GAAc;IAC1B,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,oCAAoC,EAAE;IACrF,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,8BAA8B,EAAE;IAClF,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,iEAAiE,EAAE;IAClH,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,0BAA0B,EAAE;IACxE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,8CAA8C,EAAE;IAC7F,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,iCAAiC,EAAE;IACvF,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,oCAAoC,EAAE;IACjF,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,iCAAiC,EAAE;IAC/E,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,oEAAoE,EAAE;IAClH,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,2FAA2F,EAAE;IAC/I,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,kEAAkE,EAAE;IACxG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,wEAAwE,EAAE;IAC7G,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,kDAAkD,EAAE,KAAK,EAAE,WAAW,EAAE;IACzG,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,sHAAsH,EAAE,KAAK,EAAE,IAAI,EAAE;IAC9K,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,iFAAiF,EAAE;CAC1H,CAAC;AAEF,8EAA8E;AAC9E,SAAS;AAET,MAAM,QAAQ,GAAG,oEAAoE,CAAC;AACtF,MAAM,UAAU,GAAG,+DAA+D,CAAC;AACnF,MAAM,OAAO,GAAG,+BAA+B,CAAC;AAEhD,SAAgB,WAAW,CAAC,IAAY,EAAE,OAA0B;IAClE,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,+GAA+G;AAC/G,SAAgB,cAAc,CAAC,GAAW;IACxC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;QACtF,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,iBAAiB;QAC1F,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACzB,CAAC,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,0BAA0B;AAE1B,MAAM,OAAO,GAAG,CAAC,CAAC;AAClB,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,uMAAuM,CAAC,KAAK,CAAC,GAAG,CAAC,CACnN,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;AAElF,iHAAiH;AACjH,SAAgB,cAAc,CAAC,MAAc,EAAE,GAAG,GAAG,IAAI;IACvD,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,SAAS,cAAc,CAAC,IAAY,EAAE,QAAqB;IACzD,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,mGAAmG;AACnG,SAAgB,MAAM,CAAC,OAAe,EAAE,KAAa;IACnD,IAAI,KAAK,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,8EAA8E;AAC9E,YAAY;AAEZ,SAAS,OAAO,CAAC,IAAuB,EAAE,KAAa,EAAE,KAAa,EAAE,GAAW,EAAE,KAAa;IAChG,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACxF,MAAM,CAAC,GAAG,IAAA,sBAAW,EAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5H,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACjH,CAAC;AAED,MAAM,QAAQ,GAAG,MAAO,CAAC;AAEzB,SAAgB,UAAU,CAAC,IAAY,EAAE,IAAuB;IAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,CAAC,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC;IAE5F,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,SAAS;QACtF,GAAG,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;QACrB,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAChD,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC5C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,IAAA,8BAAe,EAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtJ,CAAC;IACD,IAAI,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE;YACnC,IAAI,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC3B,OAAO,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBACnC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjG,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;YACzC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACjC,KAAK,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;YACxC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YACjB,IAAI,CAAyB,CAAC;YAC9B,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACjB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAClB,IAAI,IAAI,GAAG,EAAE,CAAC;gBACd,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;gBACnF,IAAI,OAAO;oBAAE,SAAS;gBACtB,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YACnI,CAAC;QACH,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;QACtB,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;gBAAE,SAAS;YAClC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC3C,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,cAAc,CAAC;gBAAE,SAAS;YACjF,IAAI,cAAc,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7G,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACtH,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC;AACnE,CAAC;AAED,4GAA4G;AAC5G,SAAgB,MAAM,CAAC,IAAY,EAAE,QAAkC;IACrE,MAAM,KAAK,GAAG,QAAQ;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC;SAC9B,KAAK,EAAE;SACP,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,MAAM,GAAqD,EAAE,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;;YAChE,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,aAAa;AAEb,iGAAiG;AACpF,QAAA,QAAQ,GAAG,GAAG,CAAC;AAC5B,0GAA0G;AAC7F,QAAA,MAAM,GAAG,IAAI,CAAC;AAC3B,0HAA0H;AAC7G,QAAA,YAAY,GAAG,GAAG,CAAC;AAIhC;;;;;;GAMG;AACH,MAAa,mBAAmB;IAc9B,YACmB,IAAuB,EACvB,OAA4C;QAD5C,SAAI,GAAJ,IAAI,CAAmB;QACvB,YAAO,GAAP,OAAO,CAAqC;QAfvD,YAAO,GAAG,EAAE,CAAC;QACb,aAAQ,GAAG,EAAE,CAAC;QACtB,0DAA0D;QAClD,WAAM,GAAG,CAAC,CAAC;QAEF,WAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,cAAS,GAAa,EAAE,CAAC;QACjC,qEAAqE;QAC7D,YAAO,GAAG,EAAE,CAAC;QACb,aAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACrC,YAAO,GAAG,KAAK,CAAC;QACP,aAAQ,GAAoB,EAAE,CAAC;QAMtC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;IACpH,CAAC;IAED,IAAI,CAAC,KAAa;QAChB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,OAAO,IAAI,KAAK,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,gBAAQ,GAAG,oBAAY;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,gBAAQ,CAAC,CAAC;IACtD,CAAC;IAED,GAAG;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACnE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAEO,aAAa,CAAC,KAAa;QACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAChG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAEO,OAAO,CAAC,IAAY;QAC1B,+FAA+F;QAC/F,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,cAAM,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,QAAQ,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,mGAAmG;YACnG,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC;YACnC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;YAC/B,IAAI,GAAG,IAAI,CAAC;gBAAE,SAAS,CAAC,wCAAwC;YAChE,IAAI,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;gBAAE,SAAS;YAC1D,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YACrE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC9I,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;QAC9F,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAC5D,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAC/E,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YAClB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtD,CAAC;QACD,mGAAmG;QACnG,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,IAAI,CAAC,CAAC,KAAK,GAAG,GAAG,IAAI,CAAC,CAAC,GAAG,GAAG,GAAG;gBAAE,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACpG,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,cAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAEO,OAAO,CAAC,IAAY,EAAE,QAAyB;QACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IACnD,CAAC;CACF;AA7FD,kDA6FC"}

package/dist/ai-security/policy.d.ts

@@ -0,0 +1,125 @@
+/**
+ * The AI security policy: what each check does, for one app.
+ *
+ * Every check is `monitor` by default: it reports what it finds and changes
+ * nothing. `enforce` is opt-in per check and applies the check's action
+ * (strip, redact, drop, block or deny). `off` skips the check. The policy
+ * comes from code (init({ aiSecurity })) and from the platform (Shield360 ->
+ * the app -> Security -> AI security), which wins where it sets a value.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/ai_security/_policy.py and
+ * src/client/src/lib/platform/ai-security/policy.ts (the platform's parser).
+ */
+export type CheckMode = 'off' | 'monitor' | 'enforce';
+export declare const CHECK_MODES: readonly CheckMode[];
+export type LimitWindow = {
+    requestsPerMinute?: number | null;
+    tokensPerDay?: number | null;
+    costPerDayUsd?: number | null;
+};
+export type ToolRule = {
+    /** The end user needs one of these roles. */
+    roles?: string[];
+    /** Each attribute must have one of the listed values. */
+    attributes?: Record<string, string[]>;
+    /** Only these tenants may use the tool. */
+    tenants?: string[];
+    /** Nobody may use it. */
+    deny?: boolean;
+};
+export type McpServerPin = {
+    name: string;
+    publisher?: string;
+    version?: string;
+};
+export type McpToolPin = {
+    server: string;
+    name: string;
+    descriptionHash: string;
+    schemaHash: string;
+};
+/** The organisation's own kinds of data (Settings -> Sensitive data), as the platform stores them. */
+export type CustomDataKindDef = {
+    id: string;
+    name: string;
+    match: {
+        type: 'keywords';
+        keywords: string[];
+    } | {
+        type: 'masks';
+        masks: string[];
+    };
+};
+export type AiSecurityPolicy = {
+    /** The platform's version of this policy; 0 for a policy from code only. */
+    version: number;
+    indirectInjection: {
+        mode: CheckMode;
+        action: 'strip' | 'block';
+        threshold: number | null;
+    };
+    jailbreak: {
+        mode: CheckMode;
+        multiTurn: boolean;
+    };
+    output: {
+        mode: CheckMode;
+        action: 'redact' | 'block';
+        pii: boolean;
+        secrets: boolean;
+        customKinds: boolean;
+        crossTenant: boolean;
+        exfilLinks: boolean;
+        systemPromptLeak: boolean;
+        /** Link and image domains output may point to (a leading `*.` allows subdomains). */
+        allowedDomains: string[];
+        /** A marker placed in the system prompt; output containing it leaked the prompt. Not a secret. */
+        canary: string | null;
+    };
+    toolPermissions: {
+        mode: CheckMode;
+        /** A tool with no rule is refused (enforce) or reported (monitor). */
+        defaultDeny: boolean;
+        rules: Record<string, ToolRule>;
+    };
+    limits: {
+        mode: CheckMode;
+        perUser: LimitWindow;
+        perTenant: LimitWindow;
+        /** How often local counts are merged with the platform's. */
+        syncSeconds: number;
+    };
+    mcp: {
+        mode: CheckMode;
+        /** Refuse servers and tools that are not pinned (enforce); otherwise they are reported. */
+        blockUnknown: boolean;
+        servers: McpServerPin[];
+        tools: McpToolPin[];
+    };
+    rag: {
+        mode: CheckMode;
+        action: 'drop' | 'block';
+        /** The metadata field that names a chunk's tenant. */
+        tenantField: string;
+        hubness: boolean;
+    };
+    customDataKinds: CustomDataKindDef[];
+};
+export declare const DEFAULT_POLICY: Readonly<AiSecurityPolicy>;
+/** A partial policy, as given in code or sent by the platform. */
+export type AiSecurityPolicyInput = {
+    version?: number;
+    indirectInjection?: Partial<AiSecurityPolicy['indirectInjection']>;
+    jailbreak?: Partial<AiSecurityPolicy['jailbreak']>;
+    output?: Partial<AiSecurityPolicy['output']>;
+    toolPermissions?: Partial<AiSecurityPolicy['toolPermissions']>;
+    limits?: Partial<AiSecurityPolicy['limits']>;
+    mcp?: Partial<AiSecurityPolicy['mcp']>;
+    rag?: Partial<AiSecurityPolicy['rag']>;
+    customDataKinds?: CustomDataKindDef[];
+};
+/**
+ * Merges a partial policy over a base. Anything malformed is ignored, so a
+ * bad value can never switch a check off or on by accident.
+ */
+export declare function mergePolicy(base: AiSecurityPolicy, input: unknown): AiSecurityPolicy;

package/dist/ai-security/policy.js

@@ -0,0 +1,196 @@
+"use strict";
+/**
+ * The AI security policy: what each check does, for one app.
+ *
+ * Every check is `monitor` by default: it reports what it finds and changes
+ * nothing. `enforce` is opt-in per check and applies the check's action
+ * (strip, redact, drop, block or deny). `off` skips the check. The policy
+ * comes from code (init({ aiSecurity })) and from the platform (Shield360 ->
+ * the app -> Security -> AI security), which wins where it sets a value.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/ai_security/_policy.py and
+ * src/client/src/lib/platform/ai-security/policy.ts (the platform's parser).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_POLICY = exports.CHECK_MODES = void 0;
+exports.mergePolicy = mergePolicy;
+exports.CHECK_MODES = ['off', 'monitor', 'enforce'];
+exports.DEFAULT_POLICY = Object.freeze({
+    version: 0,
+    indirectInjection: { mode: 'monitor', action: 'strip', threshold: null },
+    jailbreak: { mode: 'monitor', multiTurn: true },
+    output: {
+        mode: 'monitor',
+        action: 'redact',
+        pii: true,
+        secrets: true,
+        customKinds: true,
+        crossTenant: true,
+        exfilLinks: true,
+        systemPromptLeak: true,
+        allowedDomains: [],
+        canary: null,
+    },
+    toolPermissions: { mode: 'monitor', defaultDeny: false, rules: {} },
+    limits: { mode: 'monitor', perUser: {}, perTenant: {}, syncSeconds: 10 },
+    mcp: { mode: 'monitor', blockUnknown: false, servers: [], tools: [] },
+    rag: { mode: 'monitor', action: 'drop', tenantField: 'tenant_id', hubness: true },
+    customDataKinds: [],
+});
+const MAX_LIST = 500;
+const MAX_STR = 256;
+const isObj = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+const mode = (v, d) => (exports.CHECK_MODES.includes(v) ? v : d);
+const bool = (v, d) => (typeof v === 'boolean' ? v : d);
+const str = (v) => (typeof v === 'string' && v.trim() && v.length <= MAX_STR ? v.trim() : null);
+const strList = (v) => Array.isArray(v) ? v.map(str).filter((s) => !!s).slice(0, MAX_LIST) : [];
+const oneOf = (v, opts, d) => (opts.includes(v) ? v : d);
+function limitNumber(v) {
+    return typeof v === 'number' && Number.isFinite(v) && v > 0 ? v : null;
+}
+function limitWindow(v, d) {
+    if (!isObj(v))
+        return { ...d };
+    const out = { ...d };
+    for (const key of ['requestsPerMinute', 'tokensPerDay', 'costPerDayUsd']) {
+        if (key in v)
+            out[key] = limitNumber(v[key]);
+    }
+    return out;
+}
+function toolRule(v) {
+    if (!isObj(v))
+        return null;
+    const rule = {};
+    if (v.deny === true)
+        rule.deny = true;
+    const roles = strList(v.roles);
+    if (roles.length)
+        rule.roles = roles;
+    const tenants = strList(v.tenants);
+    if (tenants.length)
+        rule.tenants = tenants;
+    if (isObj(v.attributes)) {
+        const attrs = {};
+        for (const [k, list] of Object.entries(v.attributes).slice(0, 50)) {
+            const name = str(k);
+            const values = Array.isArray(list) ? strList(list) : str(list) ? [str(list)] : [];
+            if (name && values.length)
+                attrs[name] = values;
+        }
+        if (Object.keys(attrs).length)
+            rule.attributes = attrs;
+    }
+    return rule;
+}
+const HASH = /^[0-9a-f]{64}$/;
+/**
+ * Merges a partial policy over a base. Anything malformed is ignored, so a
+ * bad value can never switch a check off or on by accident.
+ */
+function mergePolicy(base, input) {
+    const p = JSON.parse(JSON.stringify(base));
+    if (!isObj(input))
+        return p;
+    if (typeof input.version === 'number' && Number.isInteger(input.version) && input.version >= 0)
+        p.version = input.version;
+    const ii = input.indirectInjection;
+    if (isObj(ii)) {
+        p.indirectInjection.mode = mode(ii.mode, p.indirectInjection.mode);
+        p.indirectInjection.action = oneOf(ii.action, ['strip', 'block'], p.indirectInjection.action);
+        if (ii.threshold === null)
+            p.indirectInjection.threshold = null;
+        else if (typeof ii.threshold === 'number' && ii.threshold > 0 && ii.threshold <= 1)
+            p.indirectInjection.threshold = ii.threshold;
+    }
+    const jb = input.jailbreak;
+    if (isObj(jb)) {
+        p.jailbreak.mode = mode(jb.mode, p.jailbreak.mode);
+        p.jailbreak.multiTurn = bool(jb.multiTurn, p.jailbreak.multiTurn);
+    }
+    const out = input.output;
+    if (isObj(out)) {
+        p.output.mode = mode(out.mode, p.output.mode);
+        p.output.action = oneOf(out.action, ['redact', 'block'], p.output.action);
+        for (const k of ['pii', 'secrets', 'customKinds', 'crossTenant', 'exfilLinks', 'systemPromptLeak']) {
+            p.output[k] = bool(out[k], p.output[k]);
+        }
+        if (Array.isArray(out.allowedDomains))
+            p.output.allowedDomains = strList(out.allowedDomains).map((d) => d.toLowerCase());
+        if (out.canary === null)
+            p.output.canary = null;
+        else if (str(out.canary) && out.canary.length >= 8)
+            p.output.canary = out.canary.trim();
+    }
+    const tp = input.toolPermissions;
+    if (isObj(tp)) {
+        p.toolPermissions.mode = mode(tp.mode, p.toolPermissions.mode);
+        p.toolPermissions.defaultDeny = bool(tp.defaultDeny, p.toolPermissions.defaultDeny);
+        if (isObj(tp.rules)) {
+            for (const [name, raw] of Object.entries(tp.rules).slice(0, MAX_LIST)) {
+                const rule = toolRule(raw);
+                if (str(name) && rule)
+                    p.toolPermissions.rules[name] = rule;
+            }
+        }
+    }
+    const lim = input.limits;
+    if (isObj(lim)) {
+        p.limits.mode = mode(lim.mode, p.limits.mode);
+        p.limits.perUser = limitWindow(lim.perUser, p.limits.perUser);
+        p.limits.perTenant = limitWindow(lim.perTenant, p.limits.perTenant);
+        if (typeof lim.syncSeconds === 'number' && lim.syncSeconds >= 2 && lim.syncSeconds <= 300)
+            p.limits.syncSeconds = Math.round(lim.syncSeconds);
+    }
+    const mcp = input.mcp;
+    if (isObj(mcp)) {
+        p.mcp.mode = mode(mcp.mode, p.mcp.mode);
+        p.mcp.blockUnknown = bool(mcp.blockUnknown, p.mcp.blockUnknown);
+        if (Array.isArray(mcp.servers)) {
+            const servers = [];
+            for (const s of mcp.servers.filter(isObj).slice(0, MAX_LIST)) {
+                const name = str(s.name);
+                if (!name)
+                    continue;
+                const pin = { name };
+                if (str(s.publisher))
+                    pin.publisher = str(s.publisher);
+                if (str(s.version))
+                    pin.version = str(s.version);
+                servers.push(pin);
+            }
+            p.mcp.servers = servers;
+        }
+        if (Array.isArray(mcp.tools)) {
+            p.mcp.tools = mcp.tools
+                .filter(isObj)
+                .map((t) => ({ server: str(t.server), name: str(t.name), descriptionHash: String(t.descriptionHash || ''), schemaHash: String(t.schemaHash || '') }))
+                .filter((t) => !!t.server && !!t.name && HASH.test(t.descriptionHash) && HASH.test(t.schemaHash))
+                .slice(0, MAX_LIST * 4);
+        }
+    }
+    const rag = input.rag;
+    if (isObj(rag)) {
+        p.rag.mode = mode(rag.mode, p.rag.mode);
+        p.rag.action = oneOf(rag.action, ['drop', 'block'], p.rag.action);
+        p.rag.tenantField = str(rag.tenantField) || p.rag.tenantField;
+        p.rag.hubness = bool(rag.hubness, p.rag.hubness);
+    }
+    if (Array.isArray(input.customDataKinds)) {
+        const kinds = [];
+        for (const k of input.customDataKinds.filter(isObj).slice(0, 50)) {
+            const id = str(k.id);
+            const m = k.match;
+            if (!id || !/^[a-z0-9_]{1,32}$/.test(id) || !isObj(m))
+                continue;
+            const name = str(k.name) || id;
+            if (m.type === 'keywords' && strList(m.keywords).length)
+                kinds.push({ id, name, match: { type: 'keywords', keywords: strList(m.keywords) } });
+            else if (m.type === 'masks' && strList(m.masks).length)
+                kinds.push({ id, name, match: { type: 'masks', masks: strList(m.masks).slice(0, 20) } });
+        }
+        p.customDataKinds = kinds;
+    }
+    return p;
+}
+//# sourceMappingURL=policy.js.map

package/dist/ai-security/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/ai-security/policy.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAuKH,kCA0FC;AA9PY,QAAA,WAAW,GAAyB,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AA8ElE,QAAA,cAAc,GAA+B,MAAM,CAAC,MAAM,CAAC;IACtE,OAAO,EAAE,CAAC;IACV,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IACxE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE;IAC/C,MAAM,EAAE;QACN,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,QAAQ;QAChB,GAAG,EAAE,IAAI;QACT,OAAO,EAAE,IAAI;QACb,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,IAAI;QAChB,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,EAAE;QAClB,MAAM,EAAE,IAAI;KACb;IACD,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;IACnE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE;IACxE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;IACrE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;IACjF,eAAe,EAAE,EAAE;CACA,CAAC,CAAC;AAevB,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC9G,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,CAAY,EAAa,EAAE,CAAC,CAAC,mBAAW,CAAC,QAAQ,CAAC,CAAc,CAAC,CAAC,CAAC,CAAE,CAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpH,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACxH,MAAM,OAAO,GAAG,CAAC,CAAU,EAAY,EAAE,CACvC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxF,MAAM,KAAK,GAAG,CAAmB,CAAU,EAAE,IAAkB,EAAE,CAAI,EAAK,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAM,CAAC,CAAC,CAAC,CAAE,CAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpH,SAAS,WAAW,CAAC,CAAU;IAC7B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,WAAW,CAAC,CAAU,EAAE,CAAc;IAC7C,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAgB,EAAE,GAAG,CAAC,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,CAAC,mBAAmB,EAAE,cAAc,EAAE,eAAe,CAAU,EAAE,CAAC;QAClF,IAAI,GAAG,IAAI,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3C,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QACxB,MAAM,KAAK,GAA6B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACpB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAE9B;;;GAGG;AACH,SAAgB,WAAW,CAAC,IAAsB,EAAE,KAAc;IAChE,MAAM,CAAC,GAAqB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC;QAAE,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAE1H,MAAM,EAAE,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACnC,IAAI,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACd,CAAC,CAAC,iBAAiB,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC,CAAC,iBAAiB,CAAC,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,CAAU,EAAE,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvG,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI;YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,GAAG,IAAI,CAAC;aAC3D,IAAI,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,IAAI,EAAE,CAAC,SAAS,GAAG,CAAC,IAAI,EAAE,CAAC,SAAS,IAAI,CAAC;YAAE,CAAC,CAAC,iBAAiB,CAAC,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC;IACnI,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;IAC3B,IAAI,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACd,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnD,CAAC,CAAC,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACzB,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAU,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnF,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,CAAU,EAAE,CAAC;YAC5G,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,CAAC,CAAC,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACzH,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI;YAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;aAC3C,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAK,GAAG,CAAC,MAAiB,CAAC,MAAM,IAAI,CAAC;YAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAI,GAAG,CAAC,MAAiB,CAAC,IAAI,EAAE,CAAC;IAClH,CAAC;IACD,MAAM,EAAE,GAAG,KAAK,CAAC,eAAe,CAAC;IACjC,IAAI,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACd,CAAC,CAAC,eAAe,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/D,CAAC,CAAC,eAAe,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACpF,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACtE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC3B,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI;oBAAE,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC;IACzB,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACf,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG;YAAE,CAAC,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAChJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACf,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAmB,EAAE,CAAC;YACnC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACzB,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,MAAM,GAAG,GAAiB,EAAE,IAAI,EAAE,CAAC;gBACnC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;oBAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAW,CAAC;gBACjE,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;oBAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAW,CAAC;gBAC3D,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;YACD,CAAC,CAAC,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK;iBACpB,MAAM,CAAC,KAAK,CAAC;iBACb,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;iBACpJ,MAAM,CAAC,CAAC,CAAC,EAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;iBACjH,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACf,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAU,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3E,CAAC,CAAC,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;QAC9D,CAAC,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAwB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACjE,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;YAClB,IAAI,CAAC,EAAE,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,SAAS;YAChE,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;iBACzI,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QACnJ,CAAC;QACD,CAAC,CAAC,eAAe,GAAG,KAAK,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/ai-security/rag.d.ts

@@ -0,0 +1,70 @@
+/**
+ * RAG retrieval checks (OWASP LLM08 vector and embedding weaknesses).
+ *
+ * Tenant isolation: a retrieved chunk whose tenant metadata names another
+ * tenant than the requesting end customer's is flagged (rag_cross_tenant).
+ * In enforce mode it is dropped before the model sees it (or the retrieval
+ * is refused, action block). In monitor mode it is kept, and its
+ * identifiers are remembered so the output check can tell when they come
+ * back in the answer (cross_tenant). Developers name the metadata field
+ * (rag.tenantField, default tenant_id) or pass tenantOf(chunk).
+ *
+ * Hub chunks: a lightweight, streaming version of adversarial hubness
+ * detection, after Cisco AI Defense's adversarial-hubness-detector
+ * (https://github.com/cisco-ai-defense/adversarial-hubness-detector,
+ * Apache-2.0): a poisoned chunk written to match everything turns up in the
+ * results of many unrelated queries. Over a sliding window of recent
+ * retrievals, each chunk's hub rate (share of retrievals it appears in) is
+ * compared with the others' by a robust z-score (median and MAD), and the
+ * queries it answered are grouped by word overlap so "unrelated" means
+ * several groups. Flagged once per chunk per hour (rag_hub); never dropped,
+ * because popular content is not proof of poisoning.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/ai_security/_rag.py
+ */
+export type Chunk = {
+    text: string;
+    id?: string;
+    metadata?: Record<string, unknown>;
+};
+export type TenantVerdict = {
+    index: number;
+    tenant: string | null;
+    foreign: boolean;
+};
+/** The tenant a chunk names, or null when it names none. */
+export declare function chunkTenant(chunk: Chunk, field: string, tenantOf?: (chunk: Chunk) => unknown): string | null;
+export declare function tenantVerdicts(chunks: readonly Chunk[], tenant: string | null, field: string, tenantOf?: (chunk: Chunk) => unknown): TenantVerdict[];
+export declare const chunkId: (c: Chunk) => string;
+export type HubFinding = {
+    chunk: string;
+    rate: number;
+    z: number;
+    groups: number;
+    retrievals: number;
+};
+export type HubnessOptions = {
+    /** Retrievals kept (default 500). */
+    window?: number;
+    /** Retrievals needed before anything is judged (default 50). */
+    minRetrievals?: number;
+    /** Robust z-score a hub must reach (default 5). */
+    minZ?: number;
+    /** Share of retrievals a hub must appear in (default 0.1). */
+    minRate?: number;
+    /** Unrelated query groups a hub must have answered (default 5). */
+    minGroups?: number;
+    now?: () => number;
+};
+export declare class HubnessMonitor {
+    private readonly ring;
+    private readonly counts;
+    private readonly groupsOf;
+    private readonly groups;
+    private readonly flagged;
+    private readonly o;
+    constructor(opts?: HubnessOptions);
+    private groupOf;
+    /** Records one retrieval; returns the chunks it newly shows to be hubs. */
+    observe(query: string, chunkIds: readonly string[]): HubFinding[];
+}

package/dist/ai-security/rag.js

@@ -0,0 +1,174 @@
+"use strict";
+/**
+ * RAG retrieval checks (OWASP LLM08 vector and embedding weaknesses).
+ *
+ * Tenant isolation: a retrieved chunk whose tenant metadata names another
+ * tenant than the requesting end customer's is flagged (rag_cross_tenant).
+ * In enforce mode it is dropped before the model sees it (or the retrieval
+ * is refused, action block). In monitor mode it is kept, and its
+ * identifiers are remembered so the output check can tell when they come
+ * back in the answer (cross_tenant). Developers name the metadata field
+ * (rag.tenantField, default tenant_id) or pass tenantOf(chunk).
+ *
+ * Hub chunks: a lightweight, streaming version of adversarial hubness
+ * detection, after Cisco AI Defense's adversarial-hubness-detector
+ * (https://github.com/cisco-ai-defense/adversarial-hubness-detector,
+ * Apache-2.0): a poisoned chunk written to match everything turns up in the
+ * results of many unrelated queries. Over a sliding window of recent
+ * retrievals, each chunk's hub rate (share of retrievals it appears in) is
+ * compared with the others' by a robust z-score (median and MAD), and the
+ * queries it answered are grouped by word overlap so "unrelated" means
+ * several groups. Flagged once per chunk per hour (rag_hub); never dropped,
+ * because popular content is not proof of poisoning.
+ *
+ * Must stay in sync with: sdk/python/src/shield360/ai_security/_rag.py
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HubnessMonitor = exports.chunkId = void 0;
+exports.chunkTenant = chunkTenant;
+exports.tenantVerdicts = tenantVerdicts;
+const crypto_1 = require("crypto");
+/** The tenant a chunk names, or null when it names none. */
+function chunkTenant(chunk, field, tenantOf) {
+    try {
+        const raw = tenantOf ? tenantOf(chunk) : readField(chunk.metadata, field);
+        if (typeof raw === 'string' && raw.trim())
+            return raw.trim();
+        if (typeof raw === 'number' && Number.isFinite(raw))
+            return String(raw);
+    }
+    catch {
+        // a failing callback names no tenant
+    }
+    return null;
+}
+/** metadata.a.b for "a.b". */
+function readField(metadata, field) {
+    let v = metadata;
+    for (const part of field.split('.')) {
+        if (!v || typeof v !== 'object')
+            return undefined;
+        v = v[part];
+    }
+    return v;
+}
+function tenantVerdicts(chunks, tenant, field, tenantOf) {
+    return chunks.map((c, index) => {
+        const t = chunkTenant(c, field, tenantOf);
+        return { index, tenant: t, foreign: !!tenant && !!t && t !== tenant };
+    });
+}
+const chunkId = (c) => (typeof c.id === 'string' && c.id) || (typeof c.metadata?.id === 'string' && c.metadata.id) || (0, crypto_1.createHash)('sha256').update(c.text || '').digest('hex').slice(0, 16);
+exports.chunkId = chunkId;
+// ---------------------------------------------------------------------------
+// Hubness.
+const STOP = new Set('a an and are as at be by for from how i in is it of on or that the this to was what when where which who why with you your me my do does can'.split(' '));
+function queryTerms(query) {
+    const words = (query.toLowerCase().match(/[\p{L}\p{N}]{3,}/gu) || []).filter((w) => !STOP.has(w));
+    return new Set(words.slice(0, 32));
+}
+function jaccard(a, b) {
+    if (!a.size || !b.size)
+        return 0;
+    let both = 0;
+    a.forEach((w) => {
+        if (b.has(w))
+            both++;
+    });
+    return both / (a.size + b.size - both);
+}
+class HubnessMonitor {
+    constructor(opts = {}) {
+        this.ring = [];
+        this.counts = new Map();
+        this.groupsOf = new Map();
+        this.groups = [];
+        this.flagged = new Map();
+        this.o = { window: 500, minRetrievals: 50, minZ: 5, minRate: 0.1, minGroups: 5, now: Date.now, ...opts };
+    }
+    groupOf(query) {
+        const terms = queryTerms(query);
+        let best = -1;
+        let bestScore = 0.3;
+        for (let i = 0; i < this.groups.length; i++) {
+            const s = jaccard(terms, this.groups[i]);
+            if (s >= bestScore) {
+                best = i;
+                bestScore = s;
+            }
+        }
+        if (best >= 0)
+            return best;
+        if (this.groups.length < 500) {
+            this.groups.push(terms);
+            return this.groups.length - 1;
+        }
+        return this.groups.length - 1;
+    }
+    /** Records one retrieval; returns the chunks it newly shows to be hubs. */
+    observe(query, chunkIds) {
+        const ids = Array.from(new Set(chunkIds)).slice(0, 100);
+        const group = this.groupOf(query || '');
+        this.ring.push({ group, chunks: ids });
+        for (const id of ids) {
+            this.counts.set(id, (this.counts.get(id) || 0) + 1);
+            const g = this.groupsOf.get(id) || new Map();
+            g.set(group, (g.get(group) || 0) + 1);
+            this.groupsOf.set(id, g);
+        }
+        if (this.ring.length > this.o.window) {
+            const old = this.ring.shift();
+            for (const id of old.chunks) {
+                const n = (this.counts.get(id) || 1) - 1;
+                if (n <= 0) {
+                    this.counts.delete(id);
+                    this.groupsOf.delete(id);
+                }
+                else {
+                    this.counts.set(id, n);
+                    const g = this.groupsOf.get(id);
+                    if (g) {
+                        const k = (g.get(old.group) || 1) - 1;
+                        if (k <= 0)
+                            g.delete(old.group);
+                        else
+                            g.set(old.group, k);
+                    }
+                }
+            }
+        }
+        if (this.ring.length < this.o.minRetrievals)
+            return [];
+        const total = this.ring.length;
+        const rates = Array.from(this.counts.values()).map((c) => c / total);
+        const median = quantile(rates, 0.5);
+        const mad = quantile(rates.map((r) => Math.abs(r - median)), 0.5);
+        const scale = 1.4826 * mad + 1 / total;
+        const out = [];
+        const now = this.o.now();
+        for (const id of ids) {
+            const rate = (this.counts.get(id) || 0) / total;
+            const z = (rate - median) / scale;
+            const groups = this.groupsOf.get(id)?.size || 0;
+            if (rate < this.o.minRate || z < this.o.minZ || groups < this.o.minGroups)
+                continue;
+            const last = this.flagged.get(id);
+            if (last && now - last < 3600000)
+                continue;
+            this.flagged.set(id, now);
+            out.push({ chunk: id, rate: Math.round(rate * 1000) / 1000, z: Math.round(z * 10) / 10, groups, retrievals: total });
+        }
+        return out;
+    }
+}
+exports.HubnessMonitor = HubnessMonitor;
+function quantile(values, q) {
+    if (!values.length)
+        return 0;
+    const s = values.slice().sort((a, b) => a - b);
+    const pos = (s.length - 1) * q;
+    const lo = Math.floor(pos);
+    const hi = Math.ceil(pos);
+    return s[lo] + (s[hi] - s[lo]) * (pos - lo);
+}
+//# sourceMappingURL=rag.js.map

package/dist/ai-security/rag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rag.js","sourceRoot":"","sources":["../../src/ai-security/rag.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AASH,kCASC;AAYD,wCAKC;AAjCD,mCAAoC;AAMpC,4DAA4D;AAC5D,SAAgB,WAAW,CAAC,KAAY,EAAE,KAAa,EAAE,QAAoC;IAC3F,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC1E,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;QAC7D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8BAA8B;AAC9B,SAAS,SAAS,CAAC,QAA6C,EAAE,KAAa;IAC7E,IAAI,CAAC,GAAY,QAAQ,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAClD,CAAC,GAAI,CAA6B,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,cAAc,CAAC,MAAwB,EAAE,MAAqB,EAAE,KAAa,EAAE,QAAoC;IACjI,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAEM,MAAM,OAAO,GAAG,CAAC,CAAQ,EAAE,EAAE,CAClC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,KAAK,QAAQ,IAAK,CAAC,CAAC,QAAQ,CAAC,EAAa,CAAC,IAAI,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AADrK,QAAA,OAAO,WAC8J;AAElL,8EAA8E;AAC9E,WAAW;AAEX,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,8IAA8I,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAEhL,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,OAAO,CAAC,CAAc,EAAE,CAAc;IAC7C,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IACjC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QACd,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,IAAI,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACzC,CAAC;AAoBD,MAAa,cAAc;IAQzB,YAAY,OAAuB,EAAE;QAPpB,SAAI,GAAgB,EAAE,CAAC;QACvB,WAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACnC,aAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;QAClD,WAAM,GAAkB,EAAE,CAAC;QAC3B,YAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAInD,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAC3G,CAAC;IAEO,OAAO,CAAC,KAAa;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;QACd,IAAI,SAAS,GAAG,GAAG,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,SAAS,EAAE,CAAC;gBACnB,IAAI,GAAG,CAAC,CAAC;gBACT,SAAS,GAAG,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,2EAA2E;IAC3E,OAAO,CAAC,KAAa,EAAE,QAA2B;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAkB,CAAC;YAC7D,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAe,CAAC;YAC3C,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACX,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBACvB,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBAChC,IAAI,CAAC,EAAE,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;wBACtC,IAAI,CAAC,IAAI,CAAC;4BAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;;4BAC3B,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;oBAC3B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa;YAAE,OAAO,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC;QACvC,MAAM,GAAG,GAAiB,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;YAChD,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC;YAChD,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;gBAAE,SAAS;YACpF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,IAAI,IAAI,GAAG,GAAG,IAAI,GAAG,OAAS;gBAAE,SAAS;YAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAhFD,wCAgFC;AAED,SAAS,QAAQ,CAAC,MAAgB,EAAE,CAAS;IAC3C,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;AAC9C,CAAC"}