wotann 0.5.0 → 0.5.39

package/dist/security/credential-broker.js

@@ -0,0 +1,284 @@
+/**
+ * credential-broker — Privileged credential-holder broker pattern.
+ *
+ * Port of the Codex `responses-api-proxy` pattern from
+ * openai/codex/codex-rs/responses-api-proxy.
+ *
+ * The motivation:
+ *   When WOTANN runs autonomous loops or sandboxed tool execution,
+ *   we want to MINIMIZE the surface that has API keys in memory. The
+ *   broker pattern: a small privileged process holds the credentials,
+ *   exposes a narrow proxy interface, and the unprivileged main loop
+ *   asks the broker to "make this HTTP request" without ever seeing
+ *   the actual key.
+ *
+ * The broker is in-process here (single Node runtime) rather than a
+ * separate OS process — but the same architectural separation applies:
+ *   - Credentials enter via env-var read at boot, immediately moved
+ *     into the broker, then ZEROED in the original holder.
+ *   - All consumers acquire requests through `broker.request()`, never
+ *     by reading secrets directly.
+ *   - The broker stamps every outgoing request with the appropriate
+ *     auth header derived from its private credential bag.
+ *   - The broker tracks per-credential request counts + last-use ts
+ *     for audit + rotation policies.
+ *
+ * Quality bars:
+ *   - QB#1 immutable: Credential descriptors are readonly + frozen
+ *     once minted; the broker exposes only requests, never the bag.
+ *   - QB#3 honest: every method returns a tagged result; never throws.
+ *   - QB#7 stateless contract: each broker INSTANCE owns one bag;
+ *     no module-level credential state.
+ *   - QB#11 sibling-site: composes with src/security/secret-scanner.ts
+ *     for boot-time detection of accidentally-leaked secrets.
+ *   - QB#19 zombie-free: every exported function has a runtime caller
+ *     in the test file.
+ *
+ * Source: github.com/openai/codex/tree/main/codex-rs/responses-api-proxy
+ */
+const ID_PATTERN = /^[a-z][a-z0-9_-]{0,63}$/;
+function nowIso(now) {
+    return new Date(now()).toISOString();
+}
+function encodeBasic(username, password) {
+    // Base64 of "username:password" — Buffer is universal in Node.
+    return Buffer.from(`${username}:${password}`, "utf8").toString("base64");
+}
+export function createCredentialBroker(opts = {}) {
+    const now = opts.now ?? Date.now;
+    const bag = new Map();
+    let fetchImpl = (url, init) => fetch(url, init);
+    function validateId(id) {
+        if (typeof id !== "string" || !ID_PATTERN.test(id)) {
+            return { ok: false, error: `id must match ${ID_PATTERN.source}` };
+        }
+        if (bag.has(id)) {
+            return { ok: false, error: `credential id "${id}" already minted` };
+        }
+        return { ok: true };
+    }
+    function authHeader(entry) {
+        switch (entry.descriptor.kind) {
+            case "bearer":
+                return { name: "authorization", value: `Bearer ${entry.secret}` };
+            case "api-key":
+                return {
+                    name: entry.descriptor.headerName ?? "x-api-key",
+                    value: entry.secret,
+                };
+            case "basic": {
+                if (!entry.basicEncoded)
+                    return null;
+                return { name: "authorization", value: `Basic ${entry.basicEncoded}` };
+            }
+            default:
+                return null;
+        }
+    }
+    return {
+        mintBearer({ id, token }) {
+            const v = validateId(id);
+            if (!v.ok)
+                return { ok: false, error: v.error ?? "invalid id" };
+            if (typeof token !== "string" || token.length === 0) {
+                return { ok: false, error: "token must be non-empty" };
+            }
+            const descriptor = Object.freeze({ id, kind: "bearer" });
+            const entry = {
+                descriptor,
+                secret: token,
+                count: 0,
+                lastUsedAt: null,
+                mintedAt: nowIso(now),
+            };
+            bag.set(id, entry);
+            return { ok: true, descriptor };
+        },
+        mintApiKey({ id, key, headerName }) {
+            const v = validateId(id);
+            if (!v.ok)
+                return { ok: false, error: v.error ?? "invalid id" };
+            if (typeof key !== "string" || key.length === 0) {
+                return { ok: false, error: "key must be non-empty" };
+            }
+            const descriptor = Object.freeze({
+                id,
+                kind: "api-key",
+                ...(headerName ? { headerName } : {}),
+            });
+            const entry = {
+                descriptor,
+                secret: key,
+                count: 0,
+                lastUsedAt: null,
+                mintedAt: nowIso(now),
+            };
+            bag.set(id, entry);
+            return { ok: true, descriptor };
+        },
+        mintBasic({ id, username, password }) {
+            const v = validateId(id);
+            if (!v.ok)
+                return { ok: false, error: v.error ?? "invalid id" };
+            if (typeof username !== "string" || username.length === 0) {
+                return { ok: false, error: "username must be non-empty" };
+            }
+            if (typeof password !== "string" || password.length === 0) {
+                return { ok: false, error: "password must be non-empty" };
+            }
+            const descriptor = Object.freeze({
+                id,
+                kind: "basic",
+                username,
+            });
+            const entry = {
+                descriptor,
+                secret: password,
+                basicEncoded: encodeBasic(username, password),
+                count: 0,
+                lastUsedAt: null,
+                mintedAt: nowIso(now),
+            };
+            bag.set(id, entry);
+            return { ok: true, descriptor };
+        },
+        list() {
+            return Object.freeze([...bag.values()].map((e) => e.descriptor));
+        },
+        has(id) {
+            return bag.has(id);
+        },
+        revoke(id) {
+            return bag.delete(id);
+        },
+        audit() {
+            return Object.freeze([...bag.values()].map((e) => Object.freeze({
+                credentialId: e.descriptor.id,
+                requestCount: e.count,
+                lastUsedAt: e.lastUsedAt,
+                mintedAt: e.mintedAt,
+            })));
+        },
+        async request(req) {
+            const entry = bag.get(req.credentialId);
+            if (!entry) {
+                return Object.freeze({
+                    ok: false,
+                    error: `unknown credential id: ${req.credentialId}`,
+                    code: "unknown-credential",
+                });
+            }
+            const auth = authHeader(entry);
+            const headers = {
+                ...(req.headers ?? {}),
+            };
+            if (auth)
+                headers[auth.name] = auth.value;
+            const init = {
+                method: req.method ?? "GET",
+                headers,
+                ...(req.body !== undefined ? { body: req.body } : {}),
+            };
+            let timer;
+            try {
+                let response;
+                if (req.timeoutMs && req.timeoutMs > 0) {
+                    response = await Promise.race([
+                        fetchImpl(req.url, init),
+                        new Promise((_, reject) => {
+                            timer = setTimeout(() => reject(new Error("timeout")), req.timeoutMs);
+                        }),
+                    ]);
+                }
+                else {
+                    response = await fetchImpl(req.url, init);
+                }
+                entry.count += 1;
+                entry.lastUsedAt = nowIso(now);
+                const bodyText = await response.text();
+                const respHeaders = {};
+                response.headers.forEach((v, k) => {
+                    respHeaders[k.toLowerCase()] = v;
+                });
+                if (!response.ok) {
+                    return Object.freeze({
+                        ok: false,
+                        error: `HTTP ${response.status}`,
+                        code: "http-error",
+                        status: response.status,
+                        body: bodyText,
+                    });
+                }
+                return Object.freeze({
+                    ok: true,
+                    status: response.status,
+                    headers: Object.freeze(respHeaders),
+                    body: bodyText,
+                });
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                if (msg === "timeout") {
+                    return Object.freeze({
+                        ok: false,
+                        error: `request timeout after ${req.timeoutMs}ms`,
+                        code: "timeout",
+                    });
+                }
+                return Object.freeze({
+                    ok: false,
+                    error: `transport: ${msg}`,
+                    code: "transport",
+                });
+            }
+            finally {
+                if (timer)
+                    clearTimeout(timer);
+            }
+        },
+        setFetchForTests(fn) {
+            fetchImpl = fn;
+        },
+    };
+}
+// ── Helpers ──────────────────────────────────────────────────────────
+/**
+ * Boot-time helper: read a credential from process.env and immediately
+ * mint it into the broker, then OPTIONALLY zero the env var so a later
+ * compromise of the parent process can't read it. Default is to leave
+ * the env var alone (caller decides — some tools re-read env at runtime
+ * for hot-rotation scenarios).
+ *
+ * Returns the descriptor on success, or {ok:false, error} on missing
+ * env var or empty value.
+ */
+export function mintFromEnv(args) {
+    const value = process.env[args.envVar];
+    if (typeof value !== "string" || value.length === 0) {
+        return { ok: false, error: `env var ${args.envVar} is missing or empty` };
+    }
+    let result;
+    if (args.kind === "bearer") {
+        result = args.broker.mintBearer({ id: args.id, token: value });
+    }
+    else if (args.kind === "api-key") {
+        const apiKeyArgs = {
+            id: args.id,
+            key: value,
+        };
+        if (args.headerName)
+            apiKeyArgs.headerName = args.headerName;
+        result = args.broker.mintApiKey(apiKeyArgs);
+    }
+    else {
+        return {
+            ok: false,
+            error: `mintFromEnv does not support kind: ${args.kind} (use mintBasic directly)`,
+        };
+    }
+    if (result.ok && args.clearEnv) {
+        delete process.env[args.envVar];
+    }
+    return result;
+}
+//# sourceMappingURL=credential-broker.js.map

package/dist/security/credential-broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-broker.js","sourceRoot":"","sources":["../../src/security/credential-broker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAiGH,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAE7C,SAAS,MAAM,CAAC,GAAiB;IAC/B,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,QAAgB;IACrD,+DAA+D;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAMD,MAAM,UAAU,sBAAsB,CAAC,OAAsB,EAAE;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,IAAI,SAAS,GAA0D,CACrE,GAAW,EACX,IAAiB,EACjB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtB,SAAS,UAAU,CAAC,EAAU;QAC5B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;QACpE,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC;QACtE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,SAAS,UAAU,CAAC,KAAe;QACjC,QAAQ,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC9B,KAAK,QAAQ;gBACX,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,UAAU,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpE,KAAK,SAAS;gBACZ,OAAO;oBACL,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU,IAAI,WAAW;oBAChD,KAAK,EAAE,KAAK,CAAC,MAAM;iBACpB,CAAC;YACJ,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,IAAI,CAAC,KAAK,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC;gBACrC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;YACzE,CAAC;YACD;gBACE,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO;QACL,UAAU,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE;YACtB,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;YAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;YACzD,CAAC;YACD,MAAM,UAAU,GAAyB,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC/E,MAAM,KAAK,GAAa;gBACtB,UAAU;gBACV,MAAM,EAAE,KAAK;gBACb,KAAK,EAAE,CAAC;gBACR,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;aACtB,CAAC;YACF,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAClC,CAAC;QAED,UAAU,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE;YAChC,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;YAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;YACvD,CAAC;YACD,MAAM,UAAU,GAAyB,MAAM,CAAC,MAAM,CAAC;gBACrD,EAAE;gBACF,IAAI,EAAE,SAAS;gBACf,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC,CAAC,CAAC;YACH,MAAM,KAAK,GAAa;gBACtB,UAAU;gBACV,MAAM,EAAE,GAAG;gBACX,KAAK,EAAE,CAAC;gBACR,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;aACtB,CAAC;YACF,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAClC,CAAC;QAED,SAAS,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;YAClC,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;YAChE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;YAC5D,CAAC;YACD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;YAC5D,CAAC;YACD,MAAM,UAAU,GAAyB,MAAM,CAAC,MAAM,CAAC;gBACrD,EAAE;gBACF,IAAI,EAAE,OAAO;gBACb,QAAQ;aACT,CAAC,CAAC;YACH,MAAM,KAAK,GAAa;gBACtB,UAAU;gBACV,MAAM,EAAE,QAAQ;gBAChB,YAAY,EAAE,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC;gBAC7C,KAAK,EAAE,CAAC;gBACR,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;aACtB,CAAC;YACF,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAClC,CAAC;QAED,IAAI;YACF,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CACR,CAAC;QACvC,CAAC;QAED,GAAG,CAAC,EAAE;YACJ,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrB,CAAC;QAED,MAAM,CAAC,EAAE;YACP,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;QAED,KAAK;YACH,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,MAAM,CAAC,MAAM,CAAC;gBACZ,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE;gBAC7B,YAAY,EAAE,CAAC,CAAC,KAAK;gBACrB,UAAU,EAAE,CAAC,CAAC,UAAU;gBACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;aACrB,CAAC,CACH,CACiC,CAAC;QACvC,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,GAAG;YACf,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,0BAA0B,GAAG,CAAC,YAAY,EAAE;oBACnD,IAAI,EAAE,oBAAoB;iBAC3B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAC/B,MAAM,OAAO,GAA2B;gBACtC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;aACvB,CAAC;YACF,IAAI,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YAE1C,MAAM,IAAI,GAAgB;gBACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;gBAC3B,OAAO;gBACP,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAoC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF,CAAC;YACF,IAAI,KAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,IAAI,QAAkB,CAAC;gBACvB,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;oBACvC,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;wBAC5B,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC;wBACxB,IAAI,OAAO,CAAW,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;4BAClC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;wBACxE,CAAC,CAAC;qBACH,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC5C,CAAC;gBACD,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;gBACjB,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC/B,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACvC,MAAM,WAAW,GAA2B,EAAE,CAAC;gBAC/C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;oBAChC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;gBACnC,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,OAAO,MAAM,CAAC,MAAM,CAAC;wBACnB,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE;wBAChC,IAAI,EAAE,YAAY;wBAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,IAAI,EAAE,QAAQ;qBACf,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;oBACnC,IAAI,EAAE,QAAQ;iBACf,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBACtB,OAAO,MAAM,CAAC,MAAM,CAAC;wBACnB,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,yBAAyB,GAAG,CAAC,SAAS,IAAI;wBACjD,IAAI,EAAE,SAAS;qBAChB,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,MAAM,CAAC,MAAM,CAAC;oBACnB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,cAAc,GAAG,EAAE;oBAC1B,IAAI,EAAE,WAAW;iBAClB,CAAC,CAAC;YACL,CAAC;oBAAS,CAAC;gBACT,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,gBAAgB,CAAC,EAAE;YACjB,SAAS,GAAG,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CAAC,IAO3B;IACC,MAAM,KAAK,GAAI,OAAO,CAAC,GAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC,MAAM,sBAAsB,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,MAAkB,CAAC;IACvB,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,UAAU,GAAqD;YACnE,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,GAAG,EAAE,KAAK;SACX,CAAC;QACF,IAAI,IAAI,CAAC,UAAU;YAAE,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAC7D,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACN,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,sCAAsC,IAAI,CAAC,IAAI,2BAA2B;SAClF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/B,OAAQ,OAAO,CAAC,GAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/security/invisible-text-sanitizer.d.ts

@@ -0,0 +1,114 @@
+/**
+ * invisible-text-sanitizer — Strip / detect / report invisible-Unicode
+ * attacks before they reach any LLM.
+ *
+ * Complements src/security/prompt-injection-quarantine.ts (CaMeL XML
+ * wrapping + classifier) and src/security/hidden-text-detector.ts
+ * (existing detector). This module is the LOW-LEVEL TEXT-SHAPE filter
+ * that runs BEFORE the higher-level quarantine.
+ *
+ * Attack surface covered:
+ *   1. Unicode tag characters (U+E0000..U+E007F) — used to smuggle
+ *      ASCII payloads invisibly to humans but readable to LLMs. Made
+ *      famous by Riley Goodside's 2024 demonstrations.
+ *   2. Zero-width chars (U+200B..U+200D, U+FEFF) — split tokens to
+ *      defeat keyword filters or hide instructions.
+ *   3. Bidirectional override (U+202A..U+202E, U+2066..U+2069) — RTL
+ *      rendering tricks, "Trojan Source" attacks (Boucher & Anderson 2021).
+ *   4. Soft hyphen (U+00AD) — invisible word-break that defeats grep.
+ *   5. Variation selectors (U+FE00..U+FE0F, U+E0100..U+E01EF) — modify
+ *      adjacent glyph rendering; can hide instructions.
+ *   6. Mongolian Vowel Separator (U+180E), Hangul Filler (U+115F,
+ *      U+1160, U+3164, U+FFA0), Khmer Vowel Inherent Aq (U+17B4..U+17B5)
+ *      — invisible/zero-width by spec.
+ *   7. Unicode line/paragraph separators (U+2028, U+2029) — newline
+ *      smuggling that can break log parsers.
+ *
+ * Strategies:
+ *   - sanitize(text)         — return text with attack chars removed
+ *   - inspect(text)          — return structured report of found attacks
+ *   - decodeTagSmuggling(s)  — extract the hidden ASCII string from
+ *                              tag-character sequences (for forensic UI)
+ *
+ * The sanitizer is PURE: same input → same output. No side effects.
+ *
+ * Quality bars:
+ *   - QB#1 immutable: input/output strings; report is readonly + frozen
+ *   - QB#3 honest: returns structured reports; never throws
+ *   - QB#7 stateless: pure functions throughout
+ *   - QB#11 sibling-site: composes with prompt-injection-quarantine.ts
+ *     (this is the pre-filter; that is the policy gate)
+ *
+ * Sources:
+ *   - https://embracethered.com/blog/posts/2024/hiding-and-finding-text-with-unicode-tags/
+ *     ("Hiding and finding text with Unicode Tags" — Wunderwuzzi)
+ *   - https://trojansource.codes/ ("Trojan Source: Invisible Vulnerabilities")
+ *   - https://www.unicode.org/reports/tr36/ (Unicode Security Considerations)
+ */
+export type AttackKind = "tag-character" | "zero-width" | "bidi-override" | "soft-hyphen" | "variation-selector" | "invisible-spec" | "line-paragraph-separator";
+export interface AttackFinding {
+    readonly kind: AttackKind;
+    /** Codepoints (decimal) found, in order of first appearance. */
+    readonly codepoints: readonly number[];
+    /** Total occurrence count. */
+    readonly count: number;
+    /** First byte offset where this kind appears. */
+    readonly firstOffset: number;
+}
+export interface InspectionReport {
+    readonly hasAttack: boolean;
+    readonly findings: readonly AttackFinding[];
+    /** Total invisible chars stripped (sum across all findings). */
+    readonly totalCount: number;
+    /** Decoded ASCII payload if tag-character smuggling was found,
+     *  else empty. Useful for forensic UI. */
+    readonly smuggledPayload: string;
+}
+export interface SanitizeOptions {
+    /**
+     * When true, replace each removed char with "�" (replacement
+     * char) rather than dropping silently. Useful when you want to show
+     * the user that something was redacted. Default false (drop).
+     */
+    readonly markRedactions?: boolean;
+    /**
+     * When set, narrows the strip set to only these attack kinds. Default
+     * is all kinds.
+     */
+    readonly only?: readonly AttackKind[];
+}
+/**
+ * Inspect text without mutating it. Returns a structured report of
+ * every invisible-attack character class found. Always safe to call
+ * on user input — never throws.
+ */
+export declare function inspect(text: string): InspectionReport;
+/**
+ * Extract the decoded ASCII payload from any tag-character smuggling
+ * present in `text`. Returns the empty string if no tag chars are
+ * present. Useful for showing the user EXACTLY what an attacker tried
+ * to slip past them.
+ */
+export declare function decodeTagSmuggling(text: string): string;
+/**
+ * Return a NEW string with all invisible-attack characters removed.
+ * Pure: input is never mutated.
+ */
+export declare function sanitize(text: string, options?: SanitizeOptions): string;
+/**
+ * Combined inspect + sanitize: returns BOTH the cleaned text AND the
+ * report of what was found. Saves callers from running the loop twice.
+ */
+export declare function sanitizeAndReport(text: string, options?: SanitizeOptions): {
+    readonly cleaned: string;
+    readonly report: InspectionReport;
+};
+export declare function hasInvisibleAttack(text: string): boolean;
+/**
+ * Predicate: does the text contain ONLY tag-character smuggling
+ * (no other attack kinds)? Useful for distinguishing sneaky payloads
+ * from generic invisible noise (e.g. zero-width formatters used by
+ * some templating systems).
+ */
+export declare function isTagSmugglingOnly(text: string): boolean;
+//# sourceMappingURL=invisible-text-sanitizer.d.ts.map

package/dist/security/invisible-text-sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invisible-text-sanitizer.d.ts","sourceRoot":"","sources":["../../src/security/invisible-text-sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAIH,MAAM,MAAM,UAAU,GAClB,eAAe,GACf,YAAY,GACZ,eAAe,GACf,aAAa,GACb,oBAAoB,GACpB,gBAAgB,GAChB,0BAA0B,CAAC;AAE/B,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,8BAA8B;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,gEAAgE;IAChE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B;8CAC0C;IAC1C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;CACvC;AAoCD;;;;GAIG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAsEtD;AAID;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAID;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,MAAM,CAwB5E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,eAAoB,GAC5B;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAKjE;AAID,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAIxD"}

package/dist/security/invisible-text-sanitizer.js

@@ -0,0 +1,221 @@
+/**
+ * invisible-text-sanitizer — Strip / detect / report invisible-Unicode
+ * attacks before they reach any LLM.
+ *
+ * Complements src/security/prompt-injection-quarantine.ts (CaMeL XML
+ * wrapping + classifier) and src/security/hidden-text-detector.ts
+ * (existing detector). This module is the LOW-LEVEL TEXT-SHAPE filter
+ * that runs BEFORE the higher-level quarantine.
+ *
+ * Attack surface covered:
+ *   1. Unicode tag characters (U+E0000..U+E007F) — used to smuggle
+ *      ASCII payloads invisibly to humans but readable to LLMs. Made
+ *      famous by Riley Goodside's 2024 demonstrations.
+ *   2. Zero-width chars (U+200B..U+200D, U+FEFF) — split tokens to
+ *      defeat keyword filters or hide instructions.
+ *   3. Bidirectional override (U+202A..U+202E, U+2066..U+2069) — RTL
+ *      rendering tricks, "Trojan Source" attacks (Boucher & Anderson 2021).
+ *   4. Soft hyphen (U+00AD) — invisible word-break that defeats grep.
+ *   5. Variation selectors (U+FE00..U+FE0F, U+E0100..U+E01EF) — modify
+ *      adjacent glyph rendering; can hide instructions.
+ *   6. Mongolian Vowel Separator (U+180E), Hangul Filler (U+115F,
+ *      U+1160, U+3164, U+FFA0), Khmer Vowel Inherent Aq (U+17B4..U+17B5)
+ *      — invisible/zero-width by spec.
+ *   7. Unicode line/paragraph separators (U+2028, U+2029) — newline
+ *      smuggling that can break log parsers.
+ *
+ * Strategies:
+ *   - sanitize(text)         — return text with attack chars removed
+ *   - inspect(text)          — return structured report of found attacks
+ *   - decodeTagSmuggling(s)  — extract the hidden ASCII string from
+ *                              tag-character sequences (for forensic UI)
+ *
+ * The sanitizer is PURE: same input → same output. No side effects.
+ *
+ * Quality bars:
+ *   - QB#1 immutable: input/output strings; report is readonly + frozen
+ *   - QB#3 honest: returns structured reports; never throws
+ *   - QB#7 stateless: pure functions throughout
+ *   - QB#11 sibling-site: composes with prompt-injection-quarantine.ts
+ *     (this is the pre-filter; that is the policy gate)
+ *
+ * Sources:
+ *   - https://embracethered.com/blog/posts/2024/hiding-and-finding-text-with-unicode-tags/
+ *     ("Hiding and finding text with Unicode Tags" — Wunderwuzzi)
+ *   - https://trojansource.codes/ ("Trojan Source: Invisible Vulnerabilities")
+ *   - https://www.unicode.org/reports/tr36/ (Unicode Security Considerations)
+ */
+// ── Codepoint classifiers ────────────────────────────────────────────
+function classify(cp) {
+    // Unicode tag characters (deprecated but renderable)
+    if (cp >= 0xe0000 && cp <= 0xe007f)
+        return "tag-character";
+    // Zero-width chars
+    if (cp === 0x200b || cp === 0x200c || cp === 0x200d || cp === 0xfeff)
+        return "zero-width";
+    // Bidi override
+    if (cp >= 0x202a && cp <= 0x202e)
+        return "bidi-override";
+    if (cp >= 0x2066 && cp <= 0x2069)
+        return "bidi-override";
+    // Soft hyphen
+    if (cp === 0x00ad)
+        return "soft-hyphen";
+    // Variation selectors
+    if (cp >= 0xfe00 && cp <= 0xfe0f)
+        return "variation-selector";
+    if (cp >= 0xe0100 && cp <= 0xe01ef)
+        return "variation-selector";
+    // Invisible-by-spec characters
+    if (cp === 0x180e)
+        return "invisible-spec"; // Mongolian Vowel Separator
+    if (cp === 0x115f || cp === 0x1160)
+        return "invisible-spec"; // Hangul fillers
+    if (cp === 0x3164)
+        return "invisible-spec"; // Hangul Filler
+    if (cp === 0xffa0)
+        return "invisible-spec"; // Halfwidth Hangul Filler
+    if (cp === 0x17b4 || cp === 0x17b5)
+        return "invisible-spec"; // Khmer Vowel Inherent Aq
+    // Line/paragraph separators
+    if (cp === 0x2028 || cp === 0x2029)
+        return "line-paragraph-separator";
+    return null;
+}
+/**
+ * Inspect text without mutating it. Returns a structured report of
+ * every invisible-attack character class found. Always safe to call
+ * on user input — never throws.
+ */
+export function inspect(text) {
+    if (typeof text !== "string" || text.length === 0) {
+        return Object.freeze({
+            hasAttack: false,
+            findings: Object.freeze([]),
+            totalCount: 0,
+            smuggledPayload: "",
+        });
+    }
+    const acc = new Map();
+    let totalCount = 0;
+    const tagChars = [];
+    let offset = 0;
+    for (const ch of text) {
+        const cp = ch.codePointAt(0);
+        if (cp === undefined) {
+            offset += ch.length;
+            continue;
+        }
+        const kind = classify(cp);
+        if (kind !== null) {
+            totalCount += 1;
+            let entry = acc.get(kind);
+            if (!entry) {
+                entry = { codepoints: new Set(), count: 0, firstOffset: offset };
+                acc.set(kind, entry);
+            }
+            entry.codepoints.add(cp);
+            entry.count += 1;
+            if (kind === "tag-character") {
+                tagChars.push(cp);
+            }
+        }
+        offset += ch.length;
+    }
+    const findings = [];
+    for (const [kind, entry] of acc) {
+        findings.push(Object.freeze({
+            kind,
+            codepoints: Object.freeze([...entry.codepoints]),
+            count: entry.count,
+            firstOffset: entry.firstOffset,
+        }));
+    }
+    // Sort findings deterministically by first offset.
+    findings.sort((a, b) => a.firstOffset - b.firstOffset);
+    // Decode tag-character smuggling: tag chars in U+E0000..U+E007F
+    // map to ASCII via subtraction. So U+E0041 = 'A', U+E0061 = 'a',
+    // etc. The U+E0001 LANGUAGE TAG and U+E007F CANCEL TAG are framing.
+    let smuggledPayload = "";
+    for (const cp of tagChars) {
+        if (cp === 0xe0001 || cp === 0xe007f)
+            continue;
+        const ascii = cp - 0xe0000;
+        if (ascii >= 0x20 && ascii <= 0x7e) {
+            smuggledPayload += String.fromCharCode(ascii);
+        }
+    }
+    return Object.freeze({
+        hasAttack: findings.length > 0,
+        findings: Object.freeze(findings),
+        totalCount,
+        smuggledPayload,
+    });
+}
+// ── Decode helper (forensic) ─────────────────────────────────────────
+/**
+ * Extract the decoded ASCII payload from any tag-character smuggling
+ * present in `text`. Returns the empty string if no tag chars are
+ * present. Useful for showing the user EXACTLY what an attacker tried
+ * to slip past them.
+ */
+export function decodeTagSmuggling(text) {
+    return inspect(text).smuggledPayload;
+}
+// ── Sanitize ─────────────────────────────────────────────────────────
+/**
+ * Return a NEW string with all invisible-attack characters removed.
+ * Pure: input is never mutated.
+ */
+export function sanitize(text, options = {}) {
+    if (typeof text !== "string" || text.length === 0)
+        return text;
+    const onlySet = options.only ? new Set(options.only) : null;
+    const replacement = options.markRedactions ? "�" : "";
+    let out = "";
+    for (const ch of text) {
+        const cp = ch.codePointAt(0);
+        if (cp === undefined) {
+            out += ch;
+            continue;
+        }
+        const kind = classify(cp);
+        if (kind === null) {
+            out += ch;
+            continue;
+        }
+        if (onlySet && !onlySet.has(kind)) {
+            out += ch;
+            continue;
+        }
+        out += replacement;
+    }
+    return out;
+}
+/**
+ * Combined inspect + sanitize: returns BOTH the cleaned text AND the
+ * report of what was found. Saves callers from running the loop twice.
+ */
+export function sanitizeAndReport(text, options = {}) {
+    return {
+        cleaned: sanitize(text, options),
+        report: inspect(text),
+    };
+}
+// ── Convenience predicates ───────────────────────────────────────────
+export function hasInvisibleAttack(text) {
+    return inspect(text).hasAttack;
+}
+/**
+ * Predicate: does the text contain ONLY tag-character smuggling
+ * (no other attack kinds)? Useful for distinguishing sneaky payloads
+ * from generic invisible noise (e.g. zero-width formatters used by
+ * some templating systems).
+ */
+export function isTagSmugglingOnly(text) {
+    const r = inspect(text);
+    if (!r.hasAttack)
+        return false;
+    return r.findings.length === 1 && r.findings[0]?.kind === "tag-character";
+}
+//# sourceMappingURL=invisible-text-sanitizer.js.map

package/dist/security/invisible-text-sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invisible-text-sanitizer.js","sourceRoot":"","sources":["../../src/security/invisible-text-sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AA+CH,wEAAwE;AAExE,SAAS,QAAQ,CAAC,EAAU;IAC1B,qDAAqD;IACrD,IAAI,EAAE,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO;QAAE,OAAO,eAAe,CAAC;IAC3D,mBAAmB;IACnB,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;IAC1F,gBAAgB;IAChB,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM;QAAE,OAAO,eAAe,CAAC;IACzD,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM;QAAE,OAAO,eAAe,CAAC;IACzD,cAAc;IACd,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,aAAa,CAAC;IACxC,sBAAsB;IACtB,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM;QAAE,OAAO,oBAAoB,CAAC;IAC9D,IAAI,EAAE,IAAI,OAAO,IAAI,EAAE,IAAI,OAAO;QAAE,OAAO,oBAAoB,CAAC;IAChE,+BAA+B;IAC/B,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,gBAAgB,CAAC,CAAC,4BAA4B;IACxE,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,gBAAgB,CAAC,CAAC,iBAAiB;IAC9E,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,gBAAgB,CAAC,CAAC,gBAAgB;IAC5D,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,gBAAgB,CAAC,CAAC,0BAA0B;IACtE,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,gBAAgB,CAAC,CAAC,0BAA0B;IACvF,4BAA4B;IAC5B,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,MAAM;QAAE,OAAO,0BAA0B,CAAC;IACtE,OAAO,IAAI,CAAC;AACd,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAA6B;YACvD,UAAU,EAAE,CAAC;YACb,eAAe,EAAE,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkC,CAAC;IACtD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,UAAU,IAAI,CAAC,CAAC;YAChB,IAAI,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;gBACjE,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzB,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;YACjB,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;gBAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QACD,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI;YACJ,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAsB;YACrE,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B,CAAC,CACH,CAAC;IACJ,CAAC;IACD,mDAAmD;IACnD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;IAEvD,gEAAgE;IAChE,iEAAiE;IACjE,oEAAoE;IACpE,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,EAAE,KAAK,OAAO,IAAI,EAAE,KAAK,OAAO;YAAE,SAAS;QAC/C,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO,CAAC;QAC3B,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YACnC,eAAe,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAA6B;QAC7D,UAAU;QACV,eAAe;KAChB,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AAExE;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC;AACvC,CAAC;AAED,wEAAwE;AAExE;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,UAA2B,EAAE;IAClE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAa,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACrB,GAAG,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1B,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,GAAG,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,GAAG,IAAI,EAAE,CAAC;YACV,SAAS;QACX,CAAC;QACD,GAAG,IAAI,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,UAA2B,EAAE;IAE7B,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;QAChC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,eAAe,CAAC;AAC5E,CAAC"}