visus-mcp 0.6.2 → 0.9.0

package/lambda-package/sanitizer/index.js

@@ -1,105 +0,0 @@
-/**
- * Sanitizer Orchestrator
- *
- * Main entry point for content sanitization. Coordinates injection detection
- * and PII redaction pipelines.
- *
- * CRITICAL: This is the core security mechanism. Every web page MUST pass
- * through this sanitizer before reaching the LLM. This cannot be bypassed.
- */
-import { detectAndNeutralize, getSeverityScore, hasCriticalThreats } from './injection-detector.js';
-import { redactPII } from './pii-redactor.js';
-import { generateThreatReport } from './threat-reporter.js';
-/**
- * Sanitize content through the full pipeline
- *
- * Pipeline:
- * 1. Injection detection and neutralization (43 patterns)
- * 2. PII redaction (email, phone, SSN, CC, IP) with allowlisting
- * 3. Metadata collection and logging
- *
- * @param content Raw content from web page
- * @param sourceUrl Optional source URL for domain-scoped PII allowlisting
- * @returns Sanitized content with detection metadata
- */
-export function sanitize(content, sourceUrl) {
-    const originalLength = content.length;
-    // Step 1: Detect and neutralize injection patterns
-    const injectionResult = detectAndNeutralize(content);
-    // Step 2: Redact PII from the already-sanitized content (with allowlisting)
-    const piiResult = redactPII(injectionResult.content, sourceUrl);
-    // Step 3: Combine results
-    const finalContent = piiResult.content;
-    const contentModified = injectionResult.content_modified || piiResult.content_modified;
-    const severityScore = getSeverityScore(injectionResult.metadata.detections_by_severity);
-    const criticalThreats = hasCriticalThreats(injectionResult.metadata.detections_by_severity);
-    // Log to stderr for monitoring (not stdout - MCP protocol)
-    logSanitization({
-        patterns_detected: injectionResult.patterns_detected,
-        pii_types_redacted: piiResult.pii_types_redacted,
-        pii_allowlisted: piiResult.pii_allowlisted,
-        severity_score: severityScore,
-        has_critical_threats: criticalThreats,
-        content_modified: contentModified
-    });
-    // Step 4: Generate threat report (only if findings exist)
-    const threatReport = generateThreatReport({
-        patterns_detected: injectionResult.patterns_detected,
-        pii_redacted: piiResult.pii_types_redacted.length,
-        source_url: sourceUrl || 'unknown',
-        detections_by_severity: injectionResult.metadata.detections_by_severity
-    });
-    const result = {
-        content: finalContent,
-        sanitization: {
-            patterns_detected: injectionResult.patterns_detected,
-            pii_types_redacted: piiResult.pii_types_redacted,
-            pii_allowlisted: piiResult.pii_allowlisted,
-            content_modified: contentModified
-        },
-        metadata: {
-            original_length: originalLength,
-            sanitized_length: finalContent.length,
-            severity_score: severityScore,
-            has_critical_threats: criticalThreats,
-            detections_by_severity: injectionResult.metadata.detections_by_severity
-        }
-    };
-    // Include threat_report only if findings exist
-    if (threatReport) {
-        result.threat_report = threatReport;
-    }
-    return result;
-}
-/**
- * Log sanitization events to stderr for monitoring
- * (structured JSON logging per Lateos conventions)
- */
-function logSanitization(event) {
-    const logEntry = {
-        timestamp: new Date().toISOString(),
-        event: 'sanitization',
-        ...event
-    };
-    // Only log if there were detections (reduce noise)
-    if (event.content_modified || event.pii_allowlisted.length > 0) {
-        console.error(JSON.stringify(logEntry));
-    }
-}
-/**
- * Quick check: does content need sanitization?
- * (Used for optimization - skip pipeline if content is clean)
- *
- * Note: Still run full pipeline for safety, but this can be used for metrics
- */
-export function needsSanitization(_content) {
-    // Always sanitize - this is just a helper for metrics
-    return true;
-}
-/**
- * Export sub-components for testing
- */
-export { detectAndNeutralize } from './injection-detector.js';
-export { redactPII, containsPII, detectPIITypes } from './pii-redactor.js';
-export { INJECTION_PATTERNS, getAllPatternNames } from './patterns.js';
-//# sourceMappingURL=index.js.map

package/lambda-package/sanitizer/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/sanitizer/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACpG,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAqB,MAAM,sBAAsB,CAAC;AAyB/E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,QAAQ,CAAC,OAAe,EAAE,SAAkB;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IAEtC,mDAAmD;IACnD,MAAM,eAAe,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAErD,4EAA4E;IAC5E,MAAM,SAAS,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAEhE,0BAA0B;IAC1B,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC;IACvC,MAAM,eAAe,GAAG,eAAe,CAAC,gBAAgB,IAAI,SAAS,CAAC,gBAAgB,CAAC;IAEvF,MAAM,aAAa,GAAG,gBAAgB,CAAC,eAAe,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IACxF,MAAM,eAAe,GAAG,kBAAkB,CAAC,eAAe,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;IAE5F,2DAA2D;IAC3D,eAAe,CAAC;QACd,iBAAiB,EAAE,eAAe,CAAC,iBAAiB;QACpD,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;QAChD,eAAe,EAAE,SAAS,CAAC,eAAe;QAC1C,cAAc,EAAE,aAAa;QAC7B,oBAAoB,EAAE,eAAe;QACrC,gBAAgB,EAAE,eAAe;KAClC,CAAC,CAAC;IAEH,0DAA0D;IAC1D,MAAM,YAAY,GAAG,oBAAoB,CAAC;QACxC,iBAAiB,EAAE,eAAe,CAAC,iBAAiB;QACpD,YAAY,EAAE,SAAS,CAAC,kBAAkB,CAAC,MAAM;QACjD,UAAU,EAAE,SAAS,IAAI,SAAS;QAClC,sBAAsB,EAAE,eAAe,CAAC,QAAQ,CAAC,sBAAsB;KACxE,CAAC,CAAC;IAEH,MAAM,MAAM,GAAuB;QACjC,OAAO,EAAE,YAAY;QACrB,YAAY,EAAE;YACZ,iBAAiB,EAAE,eAAe,CAAC,iBAAiB;YACpD,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;YAChD,eAAe,EAAE,SAAS,CAAC,eAAe;YAC1C,gBAAgB,EAAE,eAAe;SAClC;QACD,QAAQ,EAAE;YACR,eAAe,EAAE,cAAc;YAC/B,gBAAgB,EAAE,YAAY,CAAC,MAAM;YACrC,cAAc,EAAE,aAAa;YAC7B,oBAAoB,EAAE,eAAe;YACrC,sBAAsB,EAAE,eAAe,CAAC,QAAQ,CAAC,sBAAsB;SACxE;KACF,CAAC;IAEF,+CAA+C;IAC/C,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,aAAa,GAAG,YAAY,CAAC;IACtC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,KAOxB;IACC,MAAM,QAAQ,GAAG;QACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,KAAK,EAAE,cAAc;QACrB,GAAG,KAAK;KACT,CAAC;IAEF,mDAAmD;IACnD,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,sDAAsD;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC"}

package/lambda-package/sanitizer/injection-detector.d.ts

@@ -1,34 +0,0 @@
-/**
- * Injection Detection Engine
- *
- * Scans content against all 43 injection patterns and neutralizes threats
- * based on pattern action directives (strip, redact, escape).
- */
-export interface DetectionResult {
-    content: string;
-    patterns_detected: string[];
-    content_modified: boolean;
-    metadata: {
-        original_length: number;
-        sanitized_length: number;
-        detections_by_severity: {
-            critical: number;
-            high: number;
-            medium: number;
-            low: number;
-        };
-    };
-}
-/**
- * Detect and neutralize injection patterns in content
- */
-export declare function detectAndNeutralize(content: string): DetectionResult;
-/**
- * Get severity score for logging/monitoring
- */
-export declare function getSeverityScore(detectionsBySeverity: DetectionResult['metadata']['detections_by_severity']): number;
-/**
- * Check if content has critical threats
- */
-export declare function hasCriticalThreats(detectionsBySeverity: DetectionResult['metadata']['detections_by_severity']): boolean;
-//# sourceMappingURL=injection-detector.d.ts.map

package/lambda-package/sanitizer/injection-detector.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"injection-detector.d.ts","sourceRoot":"","sources":["../../src/sanitizer/injection-detector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,QAAQ,EAAE;QACR,eAAe,EAAE,MAAM,CAAC;QACxB,gBAAgB,EAAE,MAAM,CAAC;QACzB,sBAAsB,EAAE;YACtB,QAAQ,EAAE,MAAM,CAAC;YACjB,IAAI,EAAE,MAAM,CAAC;YACb,MAAM,EAAE,MAAM,CAAC;YACf,GAAG,EAAE,MAAM,CAAC;SACb,CAAC;KACH,CAAC;CACH;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAmCpE;AAwCD;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,oBAAoB,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC,wBAAwB,CAAC,GAAG,MAAM,CAOpH;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,oBAAoB,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAEvH"}

package/lambda-package/sanitizer/injection-detector.js

@@ -1,89 +0,0 @@
-/**
- * Injection Detection Engine
- *
- * Scans content against all 43 injection patterns and neutralizes threats
- * based on pattern action directives (strip, redact, escape).
- */
-import { INJECTION_PATTERNS } from './patterns.js';
-/**
- * Detect and neutralize injection patterns in content
- */
-export function detectAndNeutralize(content) {
-    const originalLength = content.length;
-    const patternsDetected = new Set();
-    const detectionsBySeverity = {
-        critical: 0,
-        high: 0,
-        medium: 0,
-        low: 0
-    };
-    let sanitizedContent = content;
-    // Apply each pattern
-    for (const pattern of INJECTION_PATTERNS) {
-        const matches = sanitizedContent.match(pattern.regex);
-        if (matches && matches.length > 0) {
-            patternsDetected.add(pattern.name);
-            detectionsBySeverity[pattern.severity] += matches.length;
-            // Apply action
-            sanitizedContent = applyAction(sanitizedContent, pattern);
-        }
-    }
-    return {
-        content: sanitizedContent,
-        patterns_detected: Array.from(patternsDetected),
-        content_modified: sanitizedContent !== content,
-        metadata: {
-            original_length: originalLength,
-            sanitized_length: sanitizedContent.length,
-            detections_by_severity: detectionsBySeverity
-        }
-    };
-}
-/**
- * Apply the appropriate action for a pattern match
- */
-function applyAction(content, pattern) {
-    switch (pattern.action) {
-        case 'strip':
-            // Remove matched content entirely
-            return content.replace(pattern.regex, '');
-        case 'redact':
-            // Replace with redaction marker
-            return content.replace(pattern.regex, `[REDACTED:${pattern.name.toUpperCase()}]`);
-        case 'escape':
-            // HTML escape matched content
-            return content.replace(pattern.regex, (match) => escapeHtml(match));
-        default:
-            return content;
-    }
-}
-/**
- * HTML escape special characters
- */
-function escapeHtml(text) {
-    const htmlEntities = {
-        '&': '&',
-        '<': '&lt;',
-        '>': '&gt;',
-        '"': '&quot;',
-        "'": '&#39;',
-        '/': '&#x2F;'
-    };
-    return text.replace(/[&<>"'/]/g, (char) => htmlEntities[char] || char);
-}
-/**
- * Get severity score for logging/monitoring
- */
-export function getSeverityScore(detectionsBySeverity) {
-    return (detectionsBySeverity.critical * 100 +
-        detectionsBySeverity.high * 50 +
-        detectionsBySeverity.medium * 10 +
-        detectionsBySeverity.low * 1);
-}
-/**
- * Check if content has critical threats
- */
-export function hasCriticalThreats(detectionsBySeverity) {
-    return detectionsBySeverity.critical > 0;
-}
-//# sourceMappingURL=injection-detector.js.map

package/lambda-package/sanitizer/injection-detector.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"injection-detector.js","sourceRoot":"","sources":["../../src/sanitizer/injection-detector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,kBAAkB,EAAyB,MAAM,eAAe,CAAC;AAkB1E;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IACtC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,oBAAoB,GAAG;QAC3B,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,MAAM,EAAE,CAAC;QACT,GAAG,EAAE,CAAC;KACP,CAAC;IAEF,IAAI,gBAAgB,GAAG,OAAO,CAAC;IAE/B,qBAAqB;IACrB,KAAK,MAAM,OAAO,IAAI,kBAAkB,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAEtD,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACnC,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC;YAEzD,eAAe;YACf,gBAAgB,GAAG,WAAW,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;QAC/C,gBAAgB,EAAE,gBAAgB,KAAK,OAAO;QAC9C,QAAQ,EAAE;YACR,eAAe,EAAE,cAAc;YAC/B,gBAAgB,EAAE,gBAAgB,CAAC,MAAM;YACzC,sBAAsB,EAAE,oBAAoB;SAC7C;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,OAAe,EAAE,OAAyB;IAC7D,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,OAAO;YACV,kCAAkC;YAClC,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE5C,KAAK,QAAQ;YACX,gCAAgC;YAChC,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,aAAa,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAEpF,KAAK,QAAQ;YACX,8BAA8B;YAC9B,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAEtE;YACE,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,YAAY,GAA2B;QAC3C,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,QAAQ;KACd,CAAC;IAEF,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,oBAA2E;IAC1G,OAAO,CACL,oBAAoB,CAAC,QAAQ,GAAG,GAAG;QACnC,oBAAoB,CAAC,IAAI,GAAG,EAAE;QAC9B,oBAAoB,CAAC,MAAM,GAAG,EAAE;QAChC,oBAAoB,CAAC,GAAG,GAAG,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,oBAA2E;IAC5G,OAAO,oBAAoB,CAAC,QAAQ,GAAG,CAAC,CAAC;AAC3C,CAAC"}

package/lambda-package/sanitizer/patterns.d.ts

@@ -1,30 +0,0 @@
-/**
- * Lateos Injection Pattern Library
- *
- * 43 validated injection pattern categories for detecting and neutralizing
- * prompt injection attacks in web content before it reaches the LLM.
- *
- * Each pattern includes:
- * - name: Pattern identifier
- * - description: What this pattern detects
- * - regex: Detection pattern (case-insensitive by default)
- * - severity: risk level (critical, high, medium, low)
- * - action: how to handle matches (strip, redact, escape)
- */
-export interface InjectionPattern {
-    name: string;
-    description: string;
-    regex: RegExp;
-    severity: 'critical' | 'high' | 'medium' | 'low';
-    action: 'strip' | 'redact' | 'escape';
-}
-export declare const INJECTION_PATTERNS: InjectionPattern[];
-/**
- * Get all pattern names for logging/testing
- */
-export declare function getAllPatternNames(): string[];
-/**
- * Get patterns by severity level
- */
-export declare function getPatternsBySeverity(severity: 'critical' | 'high' | 'medium' | 'low'): InjectionPattern[];
-//# sourceMappingURL=patterns.d.ts.map

package/lambda-package/sanitizer/patterns.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../src/sanitizer/patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IACjD,MAAM,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;CACvC;AAED,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EAmYhD,CAAC;AAEF;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAE7C;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,GAAG,gBAAgB,EAAE,CAE1G"}

package/lambda-package/sanitizer/patterns.js

@@ -1,372 +0,0 @@
-/**
- * Lateos Injection Pattern Library
- *
- * 43 validated injection pattern categories for detecting and neutralizing
- * prompt injection attacks in web content before it reaches the LLM.
- *
- * Each pattern includes:
- * - name: Pattern identifier
- * - description: What this pattern detects
- * - regex: Detection pattern (case-insensitive by default)
- * - severity: risk level (critical, high, medium, low)
- * - action: how to handle matches (strip, redact, escape)
- */
-export const INJECTION_PATTERNS = [
-    // 1. Comment injection (must come before direct_instruction_injection to avoid false positives)
-    {
-        name: 'comment_injection',
-        description: 'Instructions hidden in HTML/JS/SQL comments',
-        regex: /<!--[\s\S]*?(ignore|admin|system|instruction|bypass|override)[\s\S]*?-->|\/\*[\s\S]*?(ignore|admin|system|instruction)[\s\S]*?\*\/|\/\/\s*(ignore|admin|system)\b|--\s*(ignore|bypass)\b|#\s*(ignore|admin|override)\b/gi,
-        severity: 'medium',
-        action: 'strip'
-    },
-    // 2. Direct instruction injection
-    {
-        name: 'direct_instruction_injection',
-        description: 'Attempts to override or ignore previous instructions',
-        regex: /\b(ignore|disregard|forget|override|replace|substitute)\s+(all\s+)?(previous|prior|above|earlier|your)\s+(instructions?|prompts?|commands?|directions?|rules?)\b/gi,
-        severity: 'critical',
-        action: 'redact'
-    },
-    // 3. Role hijacking
-    {
-        name: 'role_hijacking',
-        description: 'Attempts to change AI persona or role',
-        regex: /\b(you\s+are\s+now|your\s+new\s+(role|persona|identity)\s+is|act\s+as|pretend\s+(you\s+are|to\s+be)|roleplay\s+as)\b/gi,
-        severity: 'critical',
-        action: 'redact'
-    },
-    // 3. System prompt extraction
-    {
-        name: 'system_prompt_extraction',
-        description: 'Attempts to reveal system instructions',
-        regex: /\b(repeat|print|show|display|reveal|output|tell\s+me)\s+(your|the)\s+(system\s+)?(prompt|instructions?|rules|guidelines|directives|configuration)\b/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 4. Privilege escalation
-    {
-        name: 'privilege_escalation',
-        description: 'Attempts to gain elevated permissions',
-        regex: /\b(admin\s+mode|administrator\s+access|developer\s+(mode|override)|root\s+access|elevated\s+privileges?|emergency\s+protocol|debug\s+mode|sudo\s+mode)\b/gi,
-        severity: 'critical',
-        action: 'redact'
-    },
-    // 5. Context poisoning
-    {
-        name: 'context_poisoning',
-        description: 'Falsely claims prior agreement or context',
-        regex: /\b(the\s+user\s+(said|told|mentioned|confirmed)|as\s+(we\s+)?(discussed|agreed|confirmed)\s+(earlier|previously|before)|you\s+already\s+(said|agreed|confirmed)|continuing\s+from\s+(our|the)\s+previous)\b/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 6. Data exfiltration
-    {
-        name: 'data_exfiltration',
-        description: 'Attempts to send data to external endpoints',
-        regex: /\b(send|post|transmit|forward|email|upload)\s+(this|the|all|your)\s+(to|data|information)\b.*?\b(http|mailto|ftp):/gi,
-        severity: 'critical',
-        action: 'redact'
-    },
-    // 7. Encoding obfuscation - Base64
-    {
-        name: 'base64_obfuscation',
-        description: 'Base64-encoded instructions',
-        regex: /\b(decode|decipher|decrypt)\s+(this\s+)?(base64|b64)\b.*?[A-Za-z0-9+/]{20,}={0,2}/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 8. Unicode lookalike characters
-    {
-        name: 'unicode_lookalikes',
-        description: 'Uses visually similar Unicode characters',
-        regex: /[\u0430-\u044f\u0410-\u042f].*\b(ignore|admin|system)\b/gi, // Cyrillic mixed with English
-        severity: 'medium',
-        action: 'strip'
-    },
-    // 9. Zero-width characters
-    {
-        name: 'zero_width_characters',
-        description: 'Hidden zero-width Unicode characters',
-        regex: /[\u200B-\u200D\uFEFF]/g,
-        severity: 'high',
-        action: 'strip'
-    },
-    // 10. HTML script injection
-    {
-        name: 'html_script_injection',
-        description: 'HTML script tags or event handlers',
-        regex: /<script\b[^>]*>[\s\S]*?<\/script>|<iframe\b[^>]*>|on(click|load|error|mouse\w+)\s*=/gi,
-        severity: 'critical',
-        action: 'escape'
-    },
-    // 11. Data URI injection
-    {
-        name: 'data_uri_injection',
-        description: 'Data URIs that could contain instructions',
-        regex: /data:text\/(html|javascript)[;,]/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 12. Markdown link injection
-    {
-        name: 'markdown_link_injection',
-        description: 'Malicious markdown links',
-        regex: /\[.*?\]\s*\(\s*javascript:|!\[.*?\]\s*\(\s*data:/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 13. URL fragment attacks (HashJack)
-    {
-        name: 'url_fragment_hashjack',
-        description: 'Instructions hidden in URL fragments',
-        regex: /#(ignore|admin|system|prompt)[_\w]*\s+/gi,
-        severity: 'medium',
-        action: 'strip'
-    },
-    // 14. Social engineering urgency
-    {
-        name: 'social_engineering_urgency',
-        description: 'Urgency language to bypass caution',
-        regex: /\b(urgent|critical|emergency|immediately|asap|right\s+now|time\s+sensitive|must\s+act\s+now)\b.*\b(ignore|override|bypass)\b/gi,
-        severity: 'medium',
-        action: 'redact'
-    },
-    // 15. Instruction delimiter injection
-    {
-        name: 'instruction_delimiter_injection',
-        description: 'Fake instruction boundaries',
-        regex: /\b(end\s+of\s+(instructions?|prompt)|new\s+instructions?|<\/?instruction>|---\s*system\s*---)\b/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 16. Multi-language obfuscation
-    {
-        name: 'multi_language_obfuscation',
-        description: 'Instructions in non-English using English keywords',
-        regex: /\b(ignorar|ignorer|ignora|überspringen)\b.*\b(instrucciones|instructions|istruzioni)\b/gi,
-        severity: 'medium',
-        action: 'redact'
-    },
-    // 17. Reverse text obfuscation
-    {
-        name: 'reverse_text_obfuscation',
-        description: 'Instructions written backwards',
-        regex: /\b(erongi|nimda|tpmorp|metsys)\b/gi, // "ignore", "admin", "prompt", "system" reversed
-        severity: 'medium',
-        action: 'strip'
-    },
-    // 18. Leetspeak obfuscation
-    {
-        name: 'leetspeak_obfuscation',
-        description: 'L33tspeak encoded instructions',
-        regex: /\b(1gn0r3|4dm1n|sy5t3m|pr0mpt|1nstruct10n)\b/gi,
-        severity: 'low',
-        action: 'strip'
-    },
-    // 19. Jailbreak keywords
-    {
-        name: 'jailbreak_keywords',
-        description: 'Common jailbreak attempt keywords',
-        regex: /\b(jailbreak|dan\s+mode|developer\s+mode\s+enabled|anarchy\s+mode|unrestricted\s+mode)\b/gi,
-        severity: 'critical',
-        action: 'redact'
-    },
-    // 20. Token smuggling
-    {
-        name: 'token_smuggling',
-        description: 'Attempts to inject special tokens',
-        regex: /<\|im_(start|end)\|>|<\|endoftext\|>|\[INST\]|\[\/INST\]/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 21. System message injection
-    {
-        name: 'system_message_injection',
-        description: 'Fake system messages',
-        regex: /\[SYSTEM\]|\[ASSISTANT\]|\[USER\]|<\|system\|>/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 22. Conversation reset
-    {
-        name: 'conversation_reset',
-        description: 'Attempts to reset conversation state',
-        regex: /\b(reset|restart|clear|new)\s+(conversation|chat|session|context)\b/gi,
-        severity: 'medium',
-        action: 'redact'
-    },
-    // 23. Memory manipulation
-    {
-        name: 'memory_manipulation',
-        description: 'Attempts to manipulate AI memory or implant false context',
-        regex: /\b(remember|memorize|recall|don'?t\s+forget)\s+(that\s+)?(I\s+am|you\s+are|we\s+are|you\s+must|I\s+told\s+you|you\s+already|your\s+administrator|your\s+creator)\b/gi,
-        severity: 'medium',
-        action: 'redact'
-    },
-    // 24. Capability probing
-    {
-        name: 'capability_probing',
-        description: 'Probes for hidden capabilities',
-        regex: /\b(can\s+you|are\s+you\s+able\s+to)\s+(access|browse|execute|run|download)\b/gi,
-        severity: 'low',
-        action: 'strip'
-    },
-    // 25. Chain-of-thought manipulation
-    {
-        name: 'chain_of_thought_manipulation',
-        description: 'Manipulates reasoning process',
-        regex: /\blet'?s\s+think\s+step\s+by\s+step\b.*\b(ignore|bypass|override)\b/gi,
-        severity: 'medium',
-        action: 'redact'
-    },
-    // 26. Hypothetical scenario injection
-    {
-        name: 'hypothetical_scenario_injection',
-        description: 'Uses hypotheticals to bypass restrictions',
-        regex: /\b(hypothetically|imagine\s+you\s+could|in\s+a\s+world\s+where|pretend\s+there\s+are\s+no|let'?s\s+say\s+you\s+were\s+allowed|if\s+you\s+had\s+no\s+restrictions|for\s+the\s+sake\s+of\s+argument|suppose|what\s+if)\b.*\b(unrestricted|ignore|bypass|allowed|no\s+rules|no\s+guidelines|were\s+able)\b/gi,
-        severity: 'medium',
-        action: 'redact'
-    },
-    // 27. Ethical override
-    {
-        name: 'ethical_override',
-        description: 'Attempts to override ethical guidelines',
-        regex: /\b(ignore|bypass|disable)\s+(ethics|safety|guidelines|guardrails|restrictions)\b/gi,
-        severity: 'critical',
-        action: 'redact'
-    },
-    // 28. Output format manipulation
-    {
-        name: 'output_format_manipulation',
-        description: 'Manipulates output format to hide instructions',
-        regex: /\b(format|structure|style)\s+your\s+(response|output)\s+as\b.*\b(system|admin|instruction)\b/gi,
-        severity: 'medium',
-        action: 'redact'
-    },
-    // 29. Negative instruction
-    {
-        name: 'negative_instruction',
-        description: 'Uses negation to inject instructions',
-        regex: /\bdo\s+not\s+(tell|mention|say)\s+(anyone|the\s+user)\b/gi,
-        severity: 'low',
-        action: 'strip'
-    },
-    // 30. Credential harvesting
-    {
-        name: 'credential_harvesting',
-        description: 'Attempts to harvest credentials',
-        regex: /\b(enter|provide|give\s+me)\s+(your|the)\s+(password|api\s+key|token|credentials?|secret)\b/gi,
-        severity: 'critical',
-        action: 'redact'
-    },
-    // 31. Time-based triggers
-    {
-        name: 'time_based_triggers',
-        description: 'Conditional execution based on time',
-        regex: /\b(after|when|once)\s+\d+\s+(seconds?|minutes?|hours?)\b.*\b(then|execute|run)\b/gi,
-        severity: 'low',
-        action: 'strip'
-    },
-    // 32. Code execution requests
-    {
-        name: 'code_execution_requests',
-        description: 'Requests code execution or contains dangerous code patterns',
-        regex: /\b(execute(?!-api\.)|run\s+the\s+following|eval\(|exec\(|os\.system|subprocess|__import__|shell\s+command|bash\s+-c)\b/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 32. File system access
-    {
-        name: 'file_system_access',
-        description: 'Requests file system operations',
-        regex: /\b(read|write|delete|access)\s+(file|directory|folder)\b/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 33. Training data extraction
-    {
-        name: 'training_data_extraction',
-        description: 'Attempts to extract training data',
-        regex: /\b(repeat|recite|output)\s+(verbatim|exactly)\s+(from\s+your\s+)?(training|data|corpus)\b/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 34. Simulator mode
-    {
-        name: 'simulator_mode',
-        description: 'Requests simulator/VM mode',
-        regex: /\b(simulate|emulate|pretend\s+you\s+are)\s+(a\s+)?(linux|terminal|bash|shell|vm|virtual\s+machine)\b/gi,
-        severity: 'medium',
-        action: 'redact'
-    },
-    // 35. Nested encoding
-    {
-        name: 'nested_encoding',
-        description: 'Multiple layers of encoding or double-encoded sequences',
-        regex: /\b(decode|decrypt|decipher)\s+(this\s+)?(twice|again|multiple\s+times)\b|%25[0-9A-F]{2}|[A-Za-z0-9+/]{40,}={0,2}.*[A-Za-z0-9+/]{40,}={0,2}/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 36. Payload splitting
-    {
-        name: 'payload_splitting',
-        description: 'Splits payload across multiple inputs',
-        regex: /\b(combine|concatenate|join)\s+(the\s+)?(previous|above)\s+(parts?|sections?|fragments?)\b/gi,
-        severity: 'medium',
-        action: 'redact'
-    },
-    // 37. CSS-based hiding
-    {
-        name: 'css_hiding',
-        description: 'Hidden content via CSS',
-        regex: /display\s*:\s*none|visibility\s*:\s*hidden|opacity\s*:\s*0/gi,
-        severity: 'medium',
-        action: 'strip'
-    },
-    // 38. Authority impersonation
-    {
-        name: 'authority_impersonation',
-        description: 'Claims to be an authority figure',
-        regex: /\b(I\s+am|this\s+is)\s+(your\s+)?(developer|creator|administrator|ceo|manager)\b/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 40. Testing/debugging claims
-    {
-        name: 'testing_debugging_claims',
-        description: 'Claims this is a test environment',
-        regex: /\b(this\s+is\s+a\s+)?(test|testing|debug|debugging)\s+(environment|mode|session)\b/gi,
-        severity: 'medium',
-        action: 'redact'
-    },
-    // 41. Callback URL injection
-    {
-        name: 'callback_url_injection',
-        description: 'Suspicious callback URLs',
-        regex: /\b(callback|webhook|redirect)\s+(url|endpoint)\s*[:=]\s*https?:\/\/(?!localhost)/gi,
-        severity: 'high',
-        action: 'redact'
-    },
-    // 43. Whitespace steganography
-    {
-        name: 'whitespace_steganography',
-        description: 'Hidden content in whitespace patterns',
-        regex: /\s{10,}/g,
-        severity: 'low',
-        action: 'strip'
-    }
-];
-/**
- * Get all pattern names for logging/testing
- */
-export function getAllPatternNames() {
-    return INJECTION_PATTERNS.map(p => p.name);
-}
-/**
- * Get patterns by severity level
- */
-export function getPatternsBySeverity(severity) {
-    return INJECTION_PATTERNS.filter(p => p.severity === severity);
-}
-//# sourceMappingURL=patterns.js.map

package/lambda-package/sanitizer/patterns.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../src/sanitizer/patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH,MAAM,CAAC,MAAM,kBAAkB,GAAuB;IACpD,gGAAgG;IAChG;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,6CAA6C;QAC1D,KAAK,EAAE,0NAA0N;QACjO,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,OAAO;KAChB;IAED,kCAAkC;IAClC;QACE,IAAI,EAAE,8BAA8B;QACpC,WAAW,EAAE,sDAAsD;QACnE,KAAK,EAAE,oKAAoK;QAC3K,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,QAAQ;KACjB;IAED,oBAAoB;IACpB;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,uCAAuC;QACpD,KAAK,EAAE,wHAAwH;QAC/H,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,QAAQ;KACjB;IAED,8BAA8B;IAC9B;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,wCAAwC;QACrD,KAAK,EAAE,uJAAuJ;QAC9J,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,0BAA0B;IAC1B;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,uCAAuC;QACpD,KAAK,EAAE,4JAA4J;QACnK,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,QAAQ;KACjB;IAED,uBAAuB;IACvB;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,2CAA2C;QACxD,KAAK,EAAE,+MAA+M;QACtN,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,uBAAuB;IACvB;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,6CAA6C;QAC1D,KAAK,EAAE,sHAAsH;QAC7H,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,QAAQ;KACjB;IAED,mCAAmC;IACnC;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,6BAA6B;QAC1C,KAAK,EAAE,qFAAqF;QAC5F,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,kCAAkC;IAClC;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,0CAA0C;QACvD,KAAK,EAAE,2DAA2D,EAAE,8BAA8B;QAClG,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,OAAO;KAChB;IAED,2BAA2B;IAC3B;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,sCAAsC;QACnD,KAAK,EAAE,wBAAwB;QAC/B,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,OAAO;KAChB;IAED,4BAA4B;IAC5B;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,oCAAoC;QACjD,KAAK,EAAE,uFAAuF;QAC9F,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,QAAQ;KACjB;IAED,yBAAyB;IACzB;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,2CAA2C;QACxD,KAAK,EAAE,oCAAoC;QAC3C,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,8BAA8B;IAC9B;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,0BAA0B;QACvC,KAAK,EAAE,oDAAoD;QAC3D,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,sCAAsC;IACtC;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,sCAAsC;QACnD,KAAK,EAAE,0CAA0C;QACjD,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,OAAO;KAChB;IAED,iCAAiC;IACjC;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,oCAAoC;QACjD,KAAK,EAAE,gIAAgI;QACvI,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;KACjB;IAED,sCAAsC;IACtC;QACE,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,6BAA6B;QAC1C,KAAK,EAAE,mGAAmG;QAC1G,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,iCAAiC;IACjC;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,oDAAoD;QACjE,KAAK,EAAE,0FAA0F;QACjG,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;KACjB;IAED,+BAA+B;IAC/B;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,gCAAgC;QAC7C,KAAK,EAAE,oCAAoC,EAAE,iDAAiD;QAC9F,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,OAAO;KAChB;IAED,4BAA4B;IAC5B;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,gCAAgC;QAC7C,KAAK,EAAE,gDAAgD;QACvD,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO;KAChB;IAED,yBAAyB;IACzB;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,mCAAmC;QAChD,KAAK,EAAE,4FAA4F;QACnG,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,QAAQ;KACjB;IAED,sBAAsB;IACtB;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,mCAAmC;QAChD,KAAK,EAAE,4DAA4D;QACnE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,+BAA+B;IAC/B;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,sBAAsB;QACnC,KAAK,EAAE,kDAAkD;QACzD,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,yBAAyB;IACzB;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,sCAAsC;QACnD,KAAK,EAAE,uEAAuE;QAC9E,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;KACjB;IAED,0BAA0B;IAC1B;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,2DAA2D;QACxE,KAAK,EAAE,sKAAsK;QAC7K,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;KACjB;IAED,yBAAyB;IACzB;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,gCAAgC;QAC7C,KAAK,EAAE,gFAAgF;QACvF,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO;KAChB;IAED,oCAAoC;IACpC;QACE,IAAI,EAAE,+BAA+B;QACrC,WAAW,EAAE,+BAA+B;QAC5C,KAAK,EAAE,uEAAuE;QAC9E,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;KACjB;IAED,sCAAsC;IACtC;QACE,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,2CAA2C;QACxD,KAAK,EAAE,2SAA2S;QAClT,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;KACjB;IAED,uBAAuB;IACvB;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,yCAAyC;QACtD,KAAK,EAAE,oFAAoF;QAC3F,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,QAAQ;KACjB;IAED,iCAAiC;IACjC;QACE,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,gDAAgD;QAC7D,KAAK,EAAE,gGAAgG;QACvG,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;KACjB;IAED,2BAA2B;IAC3B;QACE,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,sCAAsC;QACnD,KAAK,EAAE,2DAA2D;QAClE,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO;KAChB;IAED,4BAA4B;IAC5B;QACE,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE,+FAA+F;QACtG,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,QAAQ;KACjB;IAED,0BAA0B;IAC1B;QACE,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,qCAAqC;QAClD,KAAK,EAAE,oFAAoF;QAC3F,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO;KAChB;IAED,8BAA8B;IAC9B;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,6DAA6D;QAC1E,KAAK,EAAE,0HAA0H;QACjI,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,yBAAyB;IACzB;QACE,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,iCAAiC;QAC9C,KAAK,EAAE,4DAA4D;QACnE,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,+BAA+B;IAC/B;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,mCAAmC;QAChD,KAAK,EAAE,6FAA6F;QACpG,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,qBAAqB;IACrB;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,4BAA4B;QACzC,KAAK,EAAE,wGAAwG;QAC/G,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;KACjB;IAED,sBAAsB;IACtB;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,yDAAyD;QACtE,KAAK,EAAE,8IAA8I;QACrJ,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,wBAAwB;IACxB;QACE,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,uCAAuC;QACpD,KAAK,EAAE,8FAA8F;QACrG,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;KACjB;IAED,uBAAuB;IACvB;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,wBAAwB;QACrC,KAAK,EAAE,8DAA8D;QACrE,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,OAAO;KAChB;IAED,8BAA8B;IAC9B;QACE,IAAI,EAAE,yBAAyB;QAC/B,WAAW,EAAE,kCAAkC;QAC/C,KAAK,EAAE,oFAAoF;QAC3F,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,+BAA+B;IAC/B;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,mCAAmC;QAChD,KAAK,EAAE,sFAAsF;QAC7F,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;KACjB;IAED,6BAA6B;IAC7B;QACE,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,0BAA0B;QACvC,KAAK,EAAE,oFAAoF;QAC3F,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,QAAQ;KACjB;IAED,+BAA+B;IAC/B;QACE,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,uCAAuC;QACpD,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,OAAO;KAChB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgD;IACpF,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AACjE,CAAC"}