@atom8n/n8n-workflow 2.2.0

package/dist/esm/expression-sandboxing.js

@@ -0,0 +1,193 @@
+import { astBuilders as b, astVisit } from '@n8n/tournament';
+import { ExpressionError } from './errors';
+import { isSafeObjectProperty } from './utils';
+export const sanitizerName = '__sanitize';
+const sanitizerIdentifier = b.identifier(sanitizerName);
+export const DOLLAR_SIGN_ERROR = 'Cannot access "$" without calling it as a function';
+const EMPTY_CONTEXT = b.objectExpression([
+    b.property('init', b.identifier('process'), b.objectExpression([])),
+]);
+/**
+ * Helper to check if an expression is a valid property access with $ as the property.
+ * Returns true for obj.$ or obj.nested.$ but false for bare $ or other expression contexts.
+ */
+const isValidDollarPropertyAccess = (expr) => {
+    if (typeof expr !== 'object' ||
+        expr === null ||
+        !('type' in expr) ||
+        expr.type !== 'MemberExpression' ||
+        !('property' in expr) ||
+        !('object' in expr)) {
+        return false;
+    }
+    const property = expr.property;
+    const object = expr.object;
+    // $ must be the property
+    const isPropertyDollar = typeof property === 'object' &&
+        property !== null &&
+        'name' in property &&
+        property.name === '$';
+    // $ must NOT be the object (to block $.something)
+    const isObjectDollar = typeof object === 'object' && object !== null && 'name' in object && object.name === '$';
+    // Object must be an Identifier (obj) or MemberExpression (obj.nested)
+    // This excludes bare $ or $ in other expression contexts
+    const isObjectValid = typeof object === 'object' &&
+        object !== null &&
+        'type' in object &&
+        (object.type === 'Identifier' || object.type === 'MemberExpression');
+    return isPropertyDollar && !isObjectDollar && isObjectValid;
+};
+/**
+ * Prevents regular functions from binding their `this` to the Node.js global.
+ */
+export const FunctionThisSanitizer = (ast, dataNode) => {
+    astVisit(ast, {
+        visitCallExpression(path) {
+            const { node } = path;
+            if (node.callee.type !== 'FunctionExpression') {
+                this.traverse(path);
+                return;
+            }
+            const fnExpression = node.callee;
+            /**
+             * Called function expressions (IIFEs) - both anonymous and named:
+             *
+             * ```js
+             * (function(x) { return x * 2; })(5)
+             * (function factorial(n) { return n <= 1 ? 1 : n * factorial(n-1); })(5)
+             *
+             * // become
+             *
+             * (function(x) { return x * 2; }).call({ process: {} }, 5)
+             * (function factorial(n) { return n <= 1 ? 1 : n * factorial(n-1); }).call({ process: {} }, 5)
+             * ```
+             */
+            this.traverse(path); // depth first to transform inside out
+            const callExpression = b.callExpression(b.memberExpression(fnExpression, b.identifier('call')), [EMPTY_CONTEXT, ...node.arguments]);
+            path.replace(callExpression);
+            return false;
+        },
+        visitFunctionExpression(path) {
+            const { node } = path;
+            /**
+             * Callable function expressions (callbacks) - both anonymous and named:
+             *
+             * ```js
+             * [1, 2, 3].map(function(n) { return n * 2; })
+             * [1, 2, 3].map(function factorial(n) { return n <= 1 ? 1 : n * factorial(n-1); })
+             *
+             * // become
+             *
+             * [1, 2, 3].map((function(n) { return n * 2; }).bind({ process: {} }))
+             * [1, 2, 3].map((function factorial(n) { return n <= 1 ? 1 : n * factorial(n-1); }).bind({ process: {} }))
+             * ```
+             */
+            this.traverse(path);
+            const boundFunction = b.callExpression(b.memberExpression(node, b.identifier('bind')), [
+                EMPTY_CONTEXT,
+            ]);
+            path.replace(boundFunction);
+            return false;
+        },
+    });
+};
+/**
+ * Validates that the $ identifier is only used in allowed contexts.
+ * This prevents user errors like `{{ $ }}` which would return the function object itself.
+ *
+ * Allowed contexts:
+ * - As a function call: $()
+ * - As a property name: obj.$ (where $ is a valid property name in JavaScript)
+ *
+ * Disallowed contexts:
+ * - Bare identifier: $
+ * - As object in member expression: $.property
+ * - In expressions: "prefix" + $, [1, 2, $], etc.
+ */
+export const DollarSignValidator = (ast, _dataNode) => {
+    astVisit(ast, {
+        visitIdentifier(path) {
+            this.traverse(path);
+            const node = path.node;
+            // Only check for the exact identifier '$'
+            if (node.name !== '$')
+                return;
+            // Runtime type checking since path properties are typed as 'any'
+            const parent = path.parent;
+            // Check if parent is a path object with a 'name' property
+            if (typeof parent !== 'object' || parent === null || !('name' in parent)) {
+                throw new ExpressionError(DOLLAR_SIGN_ERROR);
+            }
+            // Allow $ when it's the callee: $()
+            // parent.name === 'callee' means the parent path represents the callee field
+            if (parent.name === 'callee') {
+                return;
+            }
+            // Block when $ is the object in a MemberExpression: $.something
+            // parent.name === 'object' means the parent path represents the object field
+            if (parent.name === 'object') {
+                throw new ExpressionError(DOLLAR_SIGN_ERROR);
+            }
+            // Check if $ is the property of a MemberExpression: obj.$
+            // For obj.$: parent.name is 'expression' and grandparent has ExpressionStatement
+            // The ExpressionStatement should contain a MemberExpression with $ as property
+            if ('parent' in parent && typeof parent.parent === 'object' && parent.parent !== null) {
+                const grandparent = parent.parent;
+                if ('value' in grandparent &&
+                    typeof grandparent.value === 'object' &&
+                    grandparent.value !== null) {
+                    const gpNode = grandparent.value;
+                    // ExpressionStatement has an 'expression' field containing the actual expression
+                    if ('type' in gpNode && gpNode.type === 'ExpressionStatement' && 'expression' in gpNode) {
+                        // Check if this is a valid property access like obj.$
+                        if (isValidDollarPropertyAccess(gpNode.expression)) {
+                            return;
+                        }
+                    }
+                }
+            }
+            // Disallow all other cases (bare $, $ in expressions, etc.)
+            throw new ExpressionError(DOLLAR_SIGN_ERROR);
+        },
+    });
+};
+export const PrototypeSanitizer = (ast, dataNode) => {
+    astVisit(ast, {
+        visitMemberExpression(path) {
+            this.traverse(path);
+            const node = path.node;
+            if (!node.computed) {
+                // This is static, so we're safe to error here
+                if (node.property.type !== 'Identifier') {
+                    throw new ExpressionError(`Unknown property type ${node.property.type} while sanitising expression`);
+                }
+                if (!isSafeObjectProperty(node.property.name)) {
+                    throw new ExpressionError(`Cannot access "${node.property.name}" due to security concerns`);
+                }
+            }
+            else if (node.property.type === 'StringLiteral' || node.property.type === 'Literal') {
+                // Check any static strings against our forbidden list
+                if (!isSafeObjectProperty(node.property.value)) {
+                    throw new ExpressionError(`Cannot access "${node.property.value}" due to security concerns`);
+                }
+            }
+            else {
+                path.replace(b.memberExpression(
+                // eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-explicit-any
+                node.object, 
+                // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
+                b.callExpression(b.memberExpression(dataNode, sanitizerIdentifier), [
+                    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                    node.property,
+                ]), true));
+            }
+        },
+    });
+};
+export const sanitizer = (value) => {
+    if (!isSafeObjectProperty(value)) {
+        throw new ExpressionError(`Cannot access "${value}" due to security concerns`);
+    }
+    return value;
+};
+//# sourceMappingURL=expression-sandboxing.js.map

package/dist/esm/expression-sandboxing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-sandboxing.js","sourceRoot":"","sources":["../../src/expression-sandboxing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyC,WAAW,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAEpG,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAE/C,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC;AAC1C,MAAM,mBAAmB,GAAG,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,iBAAiB,GAAG,oDAAoD,CAAC;AAEtF,MAAM,aAAa,GAAG,CAAC,CAAC,gBAAgB,CAAC;IACxC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;CACnE,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,2BAA2B,GAAG,CAAC,IAAa,EAAW,EAAE;IAC9D,IACC,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,KAAK,kBAAkB;QAChC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC;QACrB,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,EAClB,CAAC;QACF,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAE3B,yBAAyB;IACzB,MAAM,gBAAgB,GACrB,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QACjB,MAAM,IAAI,QAAQ;QAClB,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC;IAEvB,kDAAkD;IAClD,MAAM,cAAc,GACnB,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,GAAG,CAAC;IAE1F,sEAAsE;IACtE,yDAAyD;IACzD,MAAM,aAAa,GAClB,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,MAAM,IAAI,MAAM;QAChB,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;IAEtE,OAAO,gBAAgB,IAAI,CAAC,cAAc,IAAI,aAAa,CAAC;AAC7D,CAAC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAkB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IACrE,QAAQ,CAAC,GAAG,EAAE;QACb,mBAAmB,CAAC,IAAI;YACvB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YAEtB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC/C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACpB,OAAO;YACR,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;YAEjC;;;;;;;;;;;;eAYG;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,sCAAsC;YAC3D,MAAM,cAAc,GAAG,CAAC,CAAC,cAAc,CACtC,CAAC,CAAC,gBAAgB,CAAC,YAAY,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EACtD,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAClC,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAC7B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,uBAAuB,CAAC,IAAI;YAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;YAEtB;;;;;;;;;;;;eAYG;YACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,aAAa,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE;gBACtF,aAAa;aACb,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC5B,OAAO,KAAK,CAAC;QACd,CAAC;KACD,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE;IACnE,QAAQ,CAAC,GAAG,EAAE;QACb,eAAe,CAAC,IAAI;YACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YAEvB,0CAA0C;YAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG;gBAAE,OAAO;YAE9B,iEAAiE;YACjE,MAAM,MAAM,GAAY,IAAI,CAAC,MAAM,CAAC;YAEpC,0DAA0D;YAC1D,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;gBAC1E,MAAM,IAAI,eAAe,CAAC,iBAAiB,CAAC,CAAC;YAC9C,CAAC;YAED,oCAAoC;YACpC,6EAA6E;YAC7E,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO;YACR,CAAC;YAED,gEAAgE;YAChE,6EAA6E;YAC7E,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,IAAI,eAAe,CAAC,iBAAiB,CAAC,CAAC;YAC9C,CAAC;YAED,0DAA0D;YAC1D,iFAAiF;YACjF,+EAA+E;YAC/E,IAAI,QAAQ,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBACvF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;gBAClC,IACC,OAAO,IAAI,WAAW;oBACtB,OAAO,WAAW,CAAC,KAAK,KAAK,QAAQ;oBACrC,WAAW,CAAC,KAAK,KAAK,IAAI,EACzB,CAAC;oBACF,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC;oBACjC,iFAAiF;oBACjF,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;wBACzF,sDAAsD;wBACtD,IAAI,2BAA2B,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;4BACpD,OAAO;wBACR,CAAC;oBACF,CAAC;gBACF,CAAC;YACF,CAAC;YAED,4DAA4D;YAC5D,MAAM,IAAI,eAAe,CAAC,iBAAiB,CAAC,CAAC;QAC9C,CAAC;KACD,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAiB,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE;IACjE,QAAQ,CAAC,GAAG,EAAE;QACb,qBAAqB,CAAC,IAAI;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpB,8CAA8C;gBAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;oBACzC,MAAM,IAAI,eAAe,CACxB,yBAAyB,IAAI,CAAC,QAAQ,CAAC,IAAI,8BAA8B,CACzE,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/C,MAAM,IAAI,eAAe,CACxB,kBAAkB,IAAI,CAAC,QAAQ,CAAC,IAAI,4BAA4B,CAChE,CAAC;gBACH,CAAC;YACF,CAAC;iBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvF,sDAAsD;gBACtD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAe,CAAC,EAAE,CAAC;oBAC1D,MAAM,IAAI,eAAe,CACxB,kBAAkB,IAAI,CAAC,QAAQ,CAAC,KAAe,4BAA4B,CAC3E,CAAC;gBACH,CAAC;YACF,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,OAAO,CACX,CAAC,CAAC,gBAAgB;gBACjB,qGAAqG;gBACrG,IAAI,CAAC,MAAa;gBAClB,iEAAiE;gBACjE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,CAAC,EAAE;oBACnE,8DAA8D;oBAC9D,IAAI,CAAC,QAAe;iBACpB,CAAC,EACF,IAAI,CACJ,CACD,CAAC;YACH,CAAC;QACF,CAAC;KACD,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAc,EAAW,EAAE;IACpD,IAAI,CAAC,oBAAoB,CAAC,KAAe,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CAAC,kBAAkB,KAAe,4BAA4B,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC"}

package/dist/esm/expression.d.ts

@@ -0,0 +1,48 @@
+import type { IDataObject, IExecuteData, INode, INodeExecutionData, INodeParameterResourceLocator, INodeParameters, IWorkflowDataProxyAdditionalKeys, NodeParameterValue, NodeParameterValueType, WorkflowExecuteMode } from './interfaces';
+import type { Workflow } from './workflow';
+import type { IRunExecutionData } from './run-execution-data/run-execution-data';
+export declare class Expression {
+    private readonly workflow;
+    constructor(workflow: Workflow);
+    static initializeGlobalContext(data: IDataObject): void;
+    static resolveWithoutWorkflow(expression: string, data?: IDataObject): string | (() => unknown) | null;
+    /**
+     * Converts an object to a string in a way to make it clear that
+     * the value comes from an object
+     *
+     */
+    convertObjectValueToString(value: object): string;
+    /**
+     * Resolves the parameter value.  If it is an expression it will execute it and
+     * return the result. For everything simply the supplied value will be returned.
+     *
+     * @param {(IRunExecutionData | null)} runExecutionData
+     * @param {boolean} [returnObjectAsString=false]
+     */
+    resolveSimpleParameterValue(parameterValue: NodeParameterValue, siblingParameters: INodeParameters, runExecutionData: IRunExecutionData | null, runIndex: number, itemIndex: number, activeNodeName: string, connectionInputData: INodeExecutionData[], mode: WorkflowExecuteMode, additionalKeys: IWorkflowDataProxyAdditionalKeys, executeData?: IExecuteData, returnObjectAsString?: boolean, selfData?: {}, contextNodeName?: string): NodeParameterValue | INodeParameters | NodeParameterValue[] | INodeParameters[];
+    private renderExpression;
+    /**
+     * Resolves value of parameter. But does not work for workflow-data.
+     *
+     * @param {(string | undefined)} parameterValue
+     */
+    getSimpleParameterValue(node: INode, parameterValue: string | boolean | undefined, mode: WorkflowExecuteMode, additionalKeys: IWorkflowDataProxyAdditionalKeys, executeData?: IExecuteData, defaultValue?: boolean | number | string | unknown[]): boolean | number | string | undefined | unknown[];
+    /**
+     * Resolves value of complex parameter. But does not work for workflow-data.
+     *
+     * @param {(NodeParameterValue | INodeParameters | NodeParameterValue[] | INodeParameters[])} parameterValue
+     * @param {(NodeParameterValue | INodeParameters | NodeParameterValue[] | INodeParameters[] | undefined)} [defaultValue]
+     */
+    getComplexParameterValue(node: INode, parameterValue: NodeParameterValue | INodeParameters | NodeParameterValue[] | INodeParameters[], mode: WorkflowExecuteMode, additionalKeys: IWorkflowDataProxyAdditionalKeys, executeData?: IExecuteData, defaultValue?: NodeParameterValueType | undefined, selfData?: {}): NodeParameterValueType | undefined;
+    /**
+     * Returns the resolved node parameter value. If it is an expression it will execute it and
+     * return the result. If the value to resolve is an array or object it will do the same
+     * for all of the items and values.
+     *
+     * @param {(NodeParameterValue | INodeParameters | NodeParameterValue[] | INodeParameters[])} parameterValue
+     * @param {(IRunExecutionData | null)} runExecutionData
+     * @param {boolean} [returnObjectAsString=false]
+     */
+    getParameterValue(parameterValue: NodeParameterValueType | INodeParameterResourceLocator, runExecutionData: IRunExecutionData | null, runIndex: number, itemIndex: number, activeNodeName: string, connectionInputData: INodeExecutionData[], mode: WorkflowExecuteMode, additionalKeys: IWorkflowDataProxyAdditionalKeys, executeData?: IExecuteData, returnObjectAsString?: boolean, selfData?: {}, contextNodeName?: string): NodeParameterValueType;
+}
+//# sourceMappingURL=expression.d.ts.map

package/dist/esm/expression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression.d.ts","sourceRoot":"","sources":["../../src/expression.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EACX,WAAW,EACX,YAAY,EACZ,KAAK,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,eAAe,EACf,gCAAgC,EAEhC,kBAAkB,EAClB,sBAAsB,EACtB,mBAAmB,EACnB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAwBjF,qBAAa,UAAU;IACV,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ;IAE/C,MAAM,CAAC,uBAAuB,CAAC,IAAI,EAAE,WAAW;IAgIhD,MAAM,CAAC,sBAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB;IAIxE;;;;OAIG;IACH,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAiCjD;;;;;;OAMG;IAGH,2BAA2B,CAC1B,cAAc,EAAE,kBAAkB,EAClC,iBAAiB,EAAE,eAAe,EAClC,gBAAgB,EAAE,iBAAiB,GAAG,IAAI,EAC1C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,mBAAmB,EAAE,kBAAkB,EAAE,EACzC,IAAI,EAAE,mBAAmB,EACzB,cAAc,EAAE,gCAAgC,EAChD,WAAW,CAAC,EAAE,YAAY,EAC1B,oBAAoB,UAAQ,EAC5B,QAAQ,KAAK,EACb,eAAe,CAAC,EAAE,MAAM,GACtB,kBAAkB,GAAG,eAAe,GAAG,kBAAkB,EAAE,GAAG,eAAe,EAAE;IAoFlF,OAAO,CAAC,gBAAgB;IAoBxB;;;;OAIG;IACH,uBAAuB,CACtB,IAAI,EAAE,KAAK,EACX,cAAc,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,EAC5C,IAAI,EAAE,mBAAmB,EACzB,cAAc,EAAE,gCAAgC,EAChD,WAAW,CAAC,EAAE,YAAY,EAC1B,YAAY,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAClD,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,EAAE;IAyBpD;;;;;OAKG;IACH,wBAAwB,CACvB,IAAI,EAAE,KAAK,EACX,cAAc,EAAE,kBAAkB,GAAG,eAAe,GAAG,kBAAkB,EAAE,GAAG,eAAe,EAAE,EAC/F,IAAI,EAAE,mBAAmB,EACzB,cAAc,EAAE,gCAAgC,EAChD,WAAW,CAAC,EAAE,YAAY,EAC1B,YAAY,GAAE,sBAAsB,GAAG,SAAqB,EAC5D,QAAQ,KAAK,GACX,sBAAsB,GAAG,SAAS;IA2CrC;;;;;;;;OAQG;IAEH,iBAAiB,CAChB,cAAc,EAAE,sBAAsB,GAAG,6BAA6B,EACtE,gBAAgB,EAAE,iBAAiB,GAAG,IAAI,EAC1C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,mBAAmB,EAAE,kBAAkB,EAAE,EACzC,IAAI,EAAE,mBAAmB,EACzB,cAAc,EAAE,gCAAgC,EAChD,WAAW,CAAC,EAAE,YAAY,EAC1B,oBAAoB,UAAQ,EAC5B,QAAQ,KAAK,EACb,eAAe,CAAC,EAAE,MAAM,GACtB,sBAAsB;CAiGzB"}

package/dist/esm/expression.js

@@ -0,0 +1,348 @@
+import { DateTime, Duration, Interval } from 'luxon';
+import { ApplicationError } from '@n8n/errors';
+import { ExpressionExtensionError } from './errors/expression-extension.error';
+import { ExpressionError } from './errors/expression.error';
+import { evaluateExpression, setErrorHandler } from './expression-evaluator-proxy';
+import { sanitizer, sanitizerName } from './expression-sandboxing';
+import { isExpression } from './expressions/expression-helpers';
+import { extend, extendOptional } from './extensions';
+import { extendSyntax } from './extensions/expression-extension';
+import { extendedFunctions } from './extensions/extended-functions';
+import { getGlobalState } from './global-state';
+import { createEmptyRunExecutionData } from './run-execution-data-factory';
+import { WorkflowDataProxy } from './workflow-data-proxy';
+const IS_FRONTEND_IN_DEV_MODE = typeof process === 'object' &&
+    Object.keys(process).length === 1 &&
+    'env' in process &&
+    Object.keys(process.env).length === 0;
+const IS_FRONTEND = typeof process === 'undefined' || IS_FRONTEND_IN_DEV_MODE;
+const isSyntaxError = (error) => error instanceof SyntaxError || (error instanceof Error && error.name === 'SyntaxError');
+const isExpressionError = (error) => error instanceof ExpressionError || error instanceof ExpressionExtensionError;
+const isTypeError = (error) => error instanceof TypeError || (error instanceof Error && error.name === 'TypeError');
+// Make sure that error get forwarded
+setErrorHandler((error) => {
+    if (isExpressionError(error))
+        throw error;
+});
+export class Expression {
+    workflow;
+    constructor(workflow) {
+        this.workflow = workflow;
+    }
+    static initializeGlobalContext(data) {
+        /**
+         * Denylist
+         */
+        data.document = {};
+        data.global = {};
+        data.window = {};
+        data.Window = {};
+        data.this = {};
+        data.globalThis = {};
+        data.self = {};
+        // Alerts
+        data.alert = {};
+        data.prompt = {};
+        data.confirm = {};
+        // Prevent Remote Code Execution
+        data.eval = {};
+        data.uneval = {};
+        data.setTimeout = {};
+        data.setInterval = {};
+        data.Function = {};
+        // Prevent requests
+        data.fetch = {};
+        data.XMLHttpRequest = {};
+        // Prevent control abstraction
+        data.Promise = {};
+        data.Generator = {};
+        data.GeneratorFunction = {};
+        data.AsyncFunction = {};
+        data.AsyncGenerator = {};
+        data.AsyncGeneratorFunction = {};
+        // Prevent WASM
+        data.WebAssembly = {};
+        // Prevent Reflection
+        data.Reflect = {};
+        data.Proxy = {};
+        // Deprecated
+        data.escape = {};
+        data.unescape = {};
+        /**
+         * Allowlist
+         */
+        // Dates
+        data.Date = Date;
+        data.DateTime = DateTime;
+        data.Interval = Interval;
+        data.Duration = Duration;
+        // Objects
+        data.Object = Object;
+        // Arrays
+        data.Array = Array;
+        data.Int8Array = Int8Array;
+        data.Uint8Array = Uint8Array;
+        data.Uint8ClampedArray = Uint8ClampedArray;
+        data.Int16Array = Int16Array;
+        data.Uint16Array = Uint16Array;
+        data.Int32Array = Int32Array;
+        data.Uint32Array = Uint32Array;
+        data.Float32Array = Float32Array;
+        data.Float64Array = Float64Array;
+        data.BigInt64Array = typeof BigInt64Array !== 'undefined' ? BigInt64Array : {};
+        data.BigUint64Array = typeof BigUint64Array !== 'undefined' ? BigUint64Array : {};
+        // Collections
+        data.Map = typeof Map !== 'undefined' ? Map : {};
+        data.WeakMap = typeof WeakMap !== 'undefined' ? WeakMap : {};
+        data.Set = typeof Set !== 'undefined' ? Set : {};
+        data.WeakSet = typeof WeakSet !== 'undefined' ? WeakSet : {};
+        // Errors
+        data.Error = Error;
+        data.TypeError = TypeError;
+        data.SyntaxError = SyntaxError;
+        data.EvalError = EvalError;
+        data.RangeError = RangeError;
+        data.ReferenceError = ReferenceError;
+        data.URIError = URIError;
+        // Internationalization
+        data.Intl = typeof Intl !== 'undefined' ? Intl : {};
+        // Text
+        // eslint-disable-next-line id-denylist
+        data.String = String;
+        data.RegExp = RegExp;
+        // Math
+        data.Math = Math;
+        // eslint-disable-next-line id-denylist
+        data.Number = Number;
+        data.BigInt = typeof BigInt !== 'undefined' ? BigInt : {};
+        data.Infinity = Infinity;
+        data.NaN = NaN;
+        data.isFinite = Number.isFinite;
+        data.isNaN = Number.isNaN;
+        data.parseFloat = parseFloat;
+        data.parseInt = parseInt;
+        // Structured data
+        data.JSON = JSON;
+        data.ArrayBuffer = typeof ArrayBuffer !== 'undefined' ? ArrayBuffer : {};
+        data.SharedArrayBuffer = typeof SharedArrayBuffer !== 'undefined' ? SharedArrayBuffer : {};
+        data.Atomics = typeof Atomics !== 'undefined' ? Atomics : {};
+        data.DataView = typeof DataView !== 'undefined' ? DataView : {};
+        data.encodeURI = encodeURI;
+        data.encodeURIComponent = encodeURIComponent;
+        data.decodeURI = decodeURI;
+        data.decodeURIComponent = decodeURIComponent;
+        // Other
+        // eslint-disable-next-line id-denylist
+        data.Boolean = Boolean;
+        data.Symbol = Symbol;
+    }
+    static resolveWithoutWorkflow(expression, data = {}) {
+        return evaluateExpression(expression, data);
+    }
+    /**
+     * Converts an object to a string in a way to make it clear that
+     * the value comes from an object
+     *
+     */
+    convertObjectValueToString(value) {
+        if (value instanceof DateTime && value.invalidReason !== null) {
+            throw new ApplicationError('invalid DateTime');
+        }
+        if (value === null) {
+            return 'null';
+        }
+        let typeName = value.constructor.name ?? 'Object';
+        if (DateTime.isDateTime(value)) {
+            typeName = 'DateTime';
+        }
+        let result = '';
+        if (value instanceof Date) {
+            // We don't want to use JSON.stringify for dates since it disregards workflow timezone
+            result = DateTime.fromJSDate(value, {
+                zone: this.workflow.settings?.timezone ?? getGlobalState().defaultTimezone,
+            }).toISO();
+        }
+        else if (DateTime.isDateTime(value)) {
+            result = value.toString();
+        }
+        else {
+            result = JSON.stringify(value);
+        }
+        result = result
+            .replace(/,"/g, ', "') // spacing for
+            .replace(/":/g, '": '); // readability
+        return `[${typeName}: ${result}]`;
+    }
+    /**
+     * Resolves the parameter value.  If it is an expression it will execute it and
+     * return the result. For everything simply the supplied value will be returned.
+     *
+     * @param {(IRunExecutionData | null)} runExecutionData
+     * @param {boolean} [returnObjectAsString=false]
+     */
+    // TODO: Clean that up at some point and move all the options into an options object
+    // eslint-disable-next-line complexity
+    resolveSimpleParameterValue(parameterValue, siblingParameters, runExecutionData, runIndex, itemIndex, activeNodeName, connectionInputData, mode, additionalKeys, executeData, returnObjectAsString = false, selfData = {}, contextNodeName) {
+        // Check if it is an expression
+        if (!isExpression(parameterValue)) {
+            // Is no expression so return value
+            return parameterValue;
+        }
+        // Is an expression
+        // Remove the equal sign
+        parameterValue = parameterValue.substr(1);
+        // Generate a data proxy which allows to query workflow data
+        const dataProxy = new WorkflowDataProxy(this.workflow, runExecutionData, runIndex, itemIndex, activeNodeName, connectionInputData, siblingParameters, mode, additionalKeys, executeData, -1, selfData, contextNodeName);
+        const data = dataProxy.getDataProxy();
+        // Support only a subset of process properties
+        data.process =
+            typeof process !== 'undefined'
+                ? {
+                    arch: process.arch,
+                    env: process.env.N8N_BLOCK_ENV_ACCESS_IN_NODE !== 'false' ? {} : process.env,
+                    platform: process.platform,
+                    pid: process.pid,
+                    ppid: process.ppid,
+                    release: process.release,
+                    version: process.pid,
+                    versions: process.versions,
+                }
+                : {};
+        Expression.initializeGlobalContext(data);
+        // expression extensions
+        data.extend = extend;
+        data.extendOptional = extendOptional;
+        data[sanitizerName] = sanitizer;
+        Object.assign(data, extendedFunctions);
+        const constructorValidation = new RegExp(/\.\s*constructor/gm);
+        if (parameterValue.match(constructorValidation)) {
+            throw new ExpressionError('Expression contains invalid constructor function call', {
+                causeDetailed: 'Constructor override attempt is not allowed due to security concerns',
+                runIndex,
+                itemIndex,
+            });
+        }
+        // Execute the expression
+        const extendedExpression = extendSyntax(parameterValue);
+        const returnValue = this.renderExpression(extendedExpression, data);
+        if (typeof returnValue === 'function') {
+            if (returnValue.name === 'DateTime')
+                throw new ApplicationError('this is a DateTime, please access its methods');
+            throw new ApplicationError('this is a function, please add ()');
+        }
+        else if (typeof returnValue === 'string') {
+            return returnValue;
+        }
+        else if (returnValue !== null && typeof returnValue === 'object') {
+            if (returnObjectAsString) {
+                return this.convertObjectValueToString(returnValue);
+            }
+        }
+        return returnValue;
+    }
+    renderExpression(expression, data) {
+        try {
+            return evaluateExpression(expression, data);
+        }
+        catch (error) {
+            if (isExpressionError(error))
+                throw error;
+            if (isSyntaxError(error))
+                throw new ApplicationError('invalid syntax');
+            if (isTypeError(error) && IS_FRONTEND && error.message.endsWith('is not a function')) {
+                const match = error.message.match(/(?<msg>[^.]+is not a function)/);
+                if (!match?.groups?.msg)
+                    return null;
+                throw new ApplicationError(match.groups.msg);
+            }
+        }
+        return null;
+    }
+    /**
+     * Resolves value of parameter. But does not work for workflow-data.
+     *
+     * @param {(string | undefined)} parameterValue
+     */
+    getSimpleParameterValue(node, parameterValue, mode, additionalKeys, executeData, defaultValue) {
+        if (parameterValue === undefined) {
+            // Value is not set so return the default
+            return defaultValue;
+        }
+        // Get the value of the node (can be an expression)
+        const runIndex = 0;
+        const itemIndex = 0;
+        const connectionInputData = [];
+        const runData = createEmptyRunExecutionData();
+        return this.getParameterValue(parameterValue, runData, runIndex, itemIndex, node.name, connectionInputData, mode, additionalKeys, executeData);
+    }
+    /**
+     * Resolves value of complex parameter. But does not work for workflow-data.
+     *
+     * @param {(NodeParameterValue | INodeParameters | NodeParameterValue[] | INodeParameters[])} parameterValue
+     * @param {(NodeParameterValue | INodeParameters | NodeParameterValue[] | INodeParameters[] | undefined)} [defaultValue]
+     */
+    getComplexParameterValue(node, parameterValue, mode, additionalKeys, executeData, defaultValue = undefined, selfData = {}) {
+        if (parameterValue === undefined) {
+            // Value is not set so return the default
+            return defaultValue;
+        }
+        // Get the value of the node (can be an expression)
+        const runIndex = 0;
+        const itemIndex = 0;
+        const connectionInputData = [];
+        const runData = createEmptyRunExecutionData();
+        // Resolve the "outer" main values
+        const returnData = this.getParameterValue(parameterValue, runData, runIndex, itemIndex, node.name, connectionInputData, mode, additionalKeys, executeData, false, selfData);
+        // Resolve the "inner" values
+        return this.getParameterValue(returnData, runData, runIndex, itemIndex, node.name, connectionInputData, mode, additionalKeys, executeData, false, selfData);
+    }
+    /**
+     * Returns the resolved node parameter value. If it is an expression it will execute it and
+     * return the result. If the value to resolve is an array or object it will do the same
+     * for all of the items and values.
+     *
+     * @param {(NodeParameterValue | INodeParameters | NodeParameterValue[] | INodeParameters[])} parameterValue
+     * @param {(IRunExecutionData | null)} runExecutionData
+     * @param {boolean} [returnObjectAsString=false]
+     */
+    // TODO: Clean that up at some point and move all the options into an options object
+    getParameterValue(parameterValue, runExecutionData, runIndex, itemIndex, activeNodeName, connectionInputData, mode, additionalKeys, executeData, returnObjectAsString = false, selfData = {}, contextNodeName) {
+        // Helper function which returns true when the parameter is a complex one or array
+        const isComplexParameter = (value) => {
+            return typeof value === 'object';
+        };
+        // Helper function which resolves a parameter value depending on if it is simply or not
+        const resolveParameterValue = (value, siblingParameters) => {
+            if (isComplexParameter(value)) {
+                return this.getParameterValue(value, runExecutionData, runIndex, itemIndex, activeNodeName, connectionInputData, mode, additionalKeys, executeData, returnObjectAsString, selfData, contextNodeName);
+            }
+            return this.resolveSimpleParameterValue(value, siblingParameters, runExecutionData, runIndex, itemIndex, activeNodeName, connectionInputData, mode, additionalKeys, executeData, returnObjectAsString, selfData, contextNodeName);
+        };
+        // Check if it value is a simple one that we can get it resolved directly
+        if (!isComplexParameter(parameterValue)) {
+            return this.resolveSimpleParameterValue(parameterValue, {}, runExecutionData, runIndex, itemIndex, activeNodeName, connectionInputData, mode, additionalKeys, executeData, returnObjectAsString, selfData, contextNodeName);
+        }
+        // The parameter value is complex so resolve depending on type
+        if (Array.isArray(parameterValue)) {
+            // Data is an array
+            const returnData = parameterValue.map((item) => resolveParameterValue(item, {}));
+            return returnData;
+        }
+        if (parameterValue === null || parameterValue === undefined) {
+            return parameterValue;
+        }
+        if (typeof parameterValue !== 'object') {
+            return {};
+        }
+        // Data is an object
+        const returnData = {};
+        for (const [key, value] of Object.entries(parameterValue)) {
+            returnData[key] = resolveParameterValue(value, parameterValue);
+        }
+        if (returnObjectAsString && typeof returnData === 'object') {
+            return this.convertObjectValueToString(returnData);
+        }
+        return returnData;
+    }
+}
+//# sourceMappingURL=expression.js.map

package/dist/esm/expression.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression.js","sourceRoot":"","sources":["../../src/expression.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,mCAAmC,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAe3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAG1D,MAAM,uBAAuB,GAC5B,OAAO,OAAO,KAAK,QAAQ;IAC3B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;IACjC,KAAK,IAAI,OAAO;IAChB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AAEvC,MAAM,WAAW,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,uBAAuB,CAAC;AAE9E,MAAM,aAAa,GAAG,CAAC,KAAc,EAAwB,EAAE,CAC9D,KAAK,YAAY,WAAW,IAAI,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC;AAE1F,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAA4B,EAAE,CACtE,KAAK,YAAY,eAAe,IAAI,KAAK,YAAY,wBAAwB,CAAC;AAE/E,MAAM,WAAW,GAAG,CAAC,KAAc,EAAsB,EAAE,CAC1D,KAAK,YAAY,SAAS,IAAI,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;AAEtF,qCAAqC;AACrC,eAAe,CAAC,CAAC,KAAY,EAAE,EAAE;IAChC,IAAI,iBAAiB,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,MAAM,OAAO,UAAU;IACO;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,MAAM,CAAC,uBAAuB,CAAC,IAAiB;QAC/C;;WAEG;QAEH,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACf,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QAEf,SAAS;QACT,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAElB,gCAAgC;QAChC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QAEnB,mBAAmB;QACnB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QAEzB,8BAA8B;QAC9B,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,iBAAiB,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,sBAAsB,GAAG,EAAE,CAAC;QAEjC,eAAe;QACf,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QAEtB,qBAAqB;QACrB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAEhB,aAAa;QACb,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC;QAEnB;;WAEG;QAEH,QAAQ;QACR,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,UAAU;QACV,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,SAAS;QACT,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,aAAa,GAAG,OAAO,aAAa,KAAK,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,IAAI,CAAC,cAAc,GAAG,OAAO,cAAc,KAAK,WAAW,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAElF,cAAc;QACd,IAAI,CAAC,GAAG,GAAG,OAAO,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,GAAG,GAAG,OAAO,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,OAAO,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAE7D,SAAS;QACT,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,uBAAuB;QACvB,IAAI,CAAC,IAAI,GAAG,OAAO,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAEpD,OAAO;QACP,uCAAuC;QACvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QAErB,OAAO;QACP,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,uCAAuC;QACvC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,kBAAkB;QAClB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,OAAO,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,iBAAiB,GAAG,OAAO,iBAAiB,KAAK,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,IAAI,CAAC,OAAO,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAEhE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;QAE7C,QAAQ;QACR,uCAAuC;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;IAED,MAAM,CAAC,sBAAsB,CAAC,UAAkB,EAAE,OAAoB,EAAE;QACvE,OAAO,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED;;;;OAIG;IACH,0BAA0B,CAAC,KAAa;QACvC,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;YAC/D,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;QACf,CAAC;QAED,IAAI,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,QAAQ,CAAC;QAClD,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,QAAQ,GAAG,UAAU,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;YAC3B,sFAAsF;YACtF,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE;gBACnC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,IAAI,cAAc,EAAE,CAAC,eAAe;aAC1E,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC;aAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC;aAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,MAAM,GAAG,MAAM;aACb,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,cAAc;aACpC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,cAAc;QAEvC,OAAO,IAAI,QAAQ,KAAK,MAAM,GAAG,CAAC;IACnC,CAAC;IAED;;;;;;OAMG;IACH,oFAAoF;IACpF,sCAAsC;IACtC,2BAA2B,CAC1B,cAAkC,EAClC,iBAAkC,EAClC,gBAA0C,EAC1C,QAAgB,EAChB,SAAiB,EACjB,cAAsB,EACtB,mBAAyC,EACzC,IAAyB,EACzB,cAAgD,EAChD,WAA0B,EAC1B,oBAAoB,GAAG,KAAK,EAC5B,QAAQ,GAAG,EAAE,EACb,eAAwB;QAExB,+BAA+B;QAC/B,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,mCAAmC;YACnC,OAAO,cAAc,CAAC;QACvB,CAAC;QAED,mBAAmB;QAEnB,wBAAwB;QAExB,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAE1C,4DAA4D;QAC5D,MAAM,SAAS,GAAG,IAAI,iBAAiB,CACtC,IAAI,CAAC,QAAQ,EACb,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,iBAAiB,EACjB,IAAI,EACJ,cAAc,EACd,WAAW,EACX,CAAC,CAAC,EACF,QAAQ,EACR,eAAe,CACf,CAAC;QACF,MAAM,IAAI,GAAG,SAAS,CAAC,YAAY,EAAE,CAAC;QAEtC,8CAA8C;QAC9C,IAAI,CAAC,OAAO;YACX,OAAO,OAAO,KAAK,WAAW;gBAC7B,CAAC,CAAC;oBACA,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;oBAC5E,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,OAAO,EAAE,OAAO,CAAC,GAAG;oBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC1B;gBACF,CAAC,CAAC,EAAE,CAAC;QAEP,UAAU,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAEzC,wBAAwB;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QAErC,IAAI,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;QAEhC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAEvC,MAAM,qBAAqB,GAAG,IAAI,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC/D,IAAI,cAAc,CAAC,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,eAAe,CAAC,uDAAuD,EAAE;gBAClF,aAAa,EAAE,sEAAsE;gBACrF,QAAQ;gBACR,SAAS;aACT,CAAC,CAAC;QACJ,CAAC;QAED,yBAAyB;QACzB,MAAM,kBAAkB,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QACpE,IAAI,OAAO,WAAW,KAAK,UAAU,EAAE,CAAC;YACvC,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU;gBAClC,MAAM,IAAI,gBAAgB,CAAC,+CAA+C,CAAC,CAAC;YAE7E,MAAM,IAAI,gBAAgB,CAAC,mCAAmC,CAAC,CAAC;QACjE,CAAC;aAAM,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC5C,OAAO,WAAW,CAAC;QACpB,CAAC;aAAM,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpE,IAAI,oBAAoB,EAAE,CAAC;gBAC1B,OAAO,IAAI,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;YACrD,CAAC;QACF,CAAC;QAED,OAAO,WAAW,CAAC;IACpB,CAAC;IAEO,gBAAgB,CAAC,UAAkB,EAAE,IAA4B;QACxE,IAAI,CAAC;YACJ,OAAO,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,iBAAiB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAE1C,IAAI,aAAa,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;YAEvE,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBACtF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBAEpE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAErC,MAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC;QACF,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;OAIG;IACH,uBAAuB,CACtB,IAAW,EACX,cAA4C,EAC5C,IAAyB,EACzB,cAAgD,EAChD,WAA0B,EAC1B,YAAoD;QAEpD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAClC,yCAAyC;YACzC,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,mDAAmD;QACnD,MAAM,QAAQ,GAAG,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,CAAC,CAAC;QACpB,MAAM,mBAAmB,GAAyB,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,2BAA2B,EAAE,CAAC;QAE9C,OAAO,IAAI,CAAC,iBAAiB,CAC5B,cAAc,EACd,OAAO,EACP,QAAQ,EACR,SAAS,EACT,IAAI,CAAC,IAAI,EACT,mBAAmB,EACnB,IAAI,EACJ,cAAc,EACd,WAAW,CAC8B,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACH,wBAAwB,CACvB,IAAW,EACX,cAA+F,EAC/F,IAAyB,EACzB,cAAgD,EAChD,WAA0B,EAC1B,eAAmD,SAAS,EAC5D,QAAQ,GAAG,EAAE;QAEb,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAClC,yCAAyC;YACzC,OAAO,YAAY,CAAC;QACrB,CAAC;QAED,mDAAmD;QACnD,MAAM,QAAQ,GAAG,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,CAAC,CAAC;QACpB,MAAM,mBAAmB,GAAyB,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,2BAA2B,EAAE,CAAC;QAE9C,kCAAkC;QAClC,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CACxC,cAAc,EACd,OAAO,EACP,QAAQ,EACR,SAAS,EACT,IAAI,CAAC,IAAI,EACT,mBAAmB,EACnB,IAAI,EACJ,cAAc,EACd,WAAW,EACX,KAAK,EACL,QAAQ,CACR,CAAC;QAEF,6BAA6B;QAC7B,OAAO,IAAI,CAAC,iBAAiB,CAC5B,UAAU,EACV,OAAO,EACP,QAAQ,EACR,SAAS,EACT,IAAI,CAAC,IAAI,EACT,mBAAmB,EACnB,IAAI,EACJ,cAAc,EACd,WAAW,EACX,KAAK,EACL,QAAQ,CACR,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,oFAAoF;IACpF,iBAAiB,CAChB,cAAsE,EACtE,gBAA0C,EAC1C,QAAgB,EAChB,SAAiB,EACjB,cAAsB,EACtB,mBAAyC,EACzC,IAAyB,EACzB,cAAgD,EAChD,WAA0B,EAC1B,oBAAoB,GAAG,KAAK,EAC5B,QAAQ,GAAG,EAAE,EACb,eAAwB;QAExB,kFAAkF;QAClF,MAAM,kBAAkB,GAAG,CAAC,KAA6B,EAAE,EAAE;YAC5D,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QAClC,CAAC,CAAC;QAEF,uFAAuF;QACvF,MAAM,qBAAqB,GAAG,CAC7B,KAA6B,EAC7B,iBAAkC,EACjC,EAAE;YACH,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,IAAI,CAAC,iBAAiB,CAC5B,KAAK,EACL,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,IAAI,EACJ,cAAc,EACd,WAAW,EACX,oBAAoB,EACpB,QAAQ,EACR,eAAe,CACf,CAAC;YACH,CAAC;YAED,OAAO,IAAI,CAAC,2BAA2B,CACtC,KAA2B,EAC3B,iBAAiB,EACjB,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,IAAI,EACJ,cAAc,EACd,WAAW,EACX,oBAAoB,EACpB,QAAQ,EACR,eAAe,CACf,CAAC;QACH,CAAC,CAAC;QAEF,yEAAyE;QACzE,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,2BAA2B,CACtC,cAAoC,EACpC,EAAE,EACF,gBAAgB,EAChB,QAAQ,EACR,SAAS,EACT,cAAc,EACd,mBAAmB,EACnB,IAAI,EACJ,cAAc,EACd,WAAW,EACX,oBAAoB,EACpB,QAAQ,EACR,eAAe,CACf,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YACnC,mBAAmB;YACnB,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC9C,qBAAqB,CAAC,IAA8B,EAAE,EAAE,CAAC,CACzD,CAAC;YACF,OAAO,UAAsD,CAAC;QAC/D,CAAC;QAED,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YAC7D,OAAO,cAAc,CAAC;QACvB,CAAC;QAED,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YACxC,OAAO,EAAE,CAAC;QACX,CAAC;QAED,oBAAoB;QACpB,MAAM,UAAU,GAAoB,EAAE,CAAC;QAEvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3D,UAAU,CAAC,GAAG,CAAC,GAAG,qBAAqB,CACtC,KAA+B,EAC/B,cAAiC,CACjC,CAAC;QACH,CAAC;QAED,IAAI,oBAAoB,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,UAAU,CAAC;IACnB,CAAC;CACD"}

package/dist/esm/expressions/expression-helpers.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Checks if the given value is an expression. An expression is a string that
+ * starts with '='.
+ */
+export declare const isExpression: (expr: unknown) => expr is string;
+//# sourceMappingURL=expression-helpers.d.ts.map

package/dist/esm/expressions/expression-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-helpers.d.ts","sourceRoot":"","sources":["../../../src/expressions/expression-helpers.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,YAAY,GAAI,MAAM,OAAO,KAAG,IAAI,IAAI,MAIpD,CAAC"}

package/dist/esm/expressions/expression-helpers.js

@@ -0,0 +1,10 @@
+/**
+ * Checks if the given value is an expression. An expression is a string that
+ * starts with '='.
+ */
+export const isExpression = (expr) => {
+    if (typeof expr !== 'string')
+        return false;
+    return expr.charAt(0) === '=';
+};
+//# sourceMappingURL=expression-helpers.js.map