@decionis/agent-safe-pipeline 0.3.7 → 0.4.0

package/dist/execution/SafeExecutor.js

@@ -1,210 +1,39 @@
-import { CanonicalIntentHasher } from "../intent/CanonicalIntentHasher.js";
-import { boundaryOf, workloadOf } from "../intent/ExecutionSignals.js";
+import { GovernedExecutionRunner } from "./GovernedExecutionRunner.js";
+import { RegistryExecutor } from "./RegistryExecutor.js";
+/**
+ * The registry-shaped face of `GovernedExecutionRunner`, kept so that every
+ * caller written against it keeps its signatures and its outcomes exactly.
+ * Each method is the runner's, with the registry as the executor: admission,
+ * the claim, finalization, holds and reconciliation all happen in the
+ * runner, and nothing here decides anything.
+ *
+ * Two runner behaviours stay off behind this face, because they did not
+ * exist when it was written: the runner does not refuse a dispatch whose
+ * window closed (the registry's handlers bound their own dispatch), and it
+ * does not report reconciliations to the authority. Code that wants either
+ * uses the runner, with a `NativeExecutor`, directly.
+ */
 export class SafeExecutor {
-    registry;
-    verifier;
-    audit;
-    hasher = new CanonicalIntentHasher();
-    boundaryId;
-    workloadDigest;
-    /** The holds this executor issued and nobody has claimed, keyed by the frozen handle. */
-    holds = new WeakMap();
-    /** The holds claimed and not yet settled, with the authorization each one consumed. */
-    claims = new WeakMap();
-    attempts;
+    runner;
+    executor;
     constructor(registry, verifier, audit, options) {
-        this.registry = registry;
-        this.verifier = verifier;
-        this.audit = audit;
-        this.boundaryId = options?.boundaryId ?? null;
-        this.workloadDigest = options?.workloadDigest ?? null;
-        this.attempts = options?.attempts ?? null;
-    }
-    async run(captured, decision) {
-        const startedAt = Date.now();
-        const refused = await this.admit(captured, decision, startedAt);
-        if (refused !== null)
-            return refused;
-        const claim = await this.consume(captured, decision, startedAt);
-        if (claim.outcome !== "CLAIMED")
-            return claim;
-        const authorization = claim.authorization;
-        const attempt = await this.registry.executeTracked(captured, authorization);
-        if (attempt.status === "FAILED_BEFORE_DISPATCH") {
-            return await this.failedBeforeDispatch(captured, decision, authorization, "HANDLER_FAILED_BEFORE_DISPATCH", startedAt, attempt.code);
-        }
-        if (attempt.status === "REFUSED_AFTER_DISPATCH") {
-            // The provider said no. That is an outcome, so it is finalized `FAILED`
-            // rather than left indeterminate, and `executed` is false rather than
-            // null: nothing about it is unknown.
-            const finalization = await this.finalize(captured, decision, authorization, "FAILED", attempt.receipt);
-            const result = {
-                outcome: "DEFINITELY_NOT_EXECUTED",
-                executed: false,
-                recovered: false,
-                reason: attempt.reason,
-                result: null,
-                authorization,
-                finalization,
-            };
-            // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-            await this.record({
-                eventType: "EXECUTION_REFUSED_AFTER_DISPATCH",
-                captured,
-                decision,
-                authorization,
-                reasonCodes: [attempt.reason, SafeExecutor.finalizationCode(finalization)],
-                durationMs: Date.now() - startedAt,
-            });
-            // Stryker restore all
-            return result;
-        }
-        if (attempt.status === "UNKNOWN_AFTER_DISPATCH") {
-            const finalization = await this.finalize(captured, decision, authorization, "INDETERMINATE", attempt.receipt);
-            const result = {
-                outcome: "UNKNOWN_AFTER_DISPATCH",
-                executed: null,
-                reason: "PROVIDER_OUTCOME_UNKNOWN",
-                result: null,
-                authorization,
-                recovery: SafeExecutor.recoveryReference(captured, authorization),
-                finalization,
-            };
-            // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-            await this.record({
-                eventType: "EXECUTION_OUTCOME_UNKNOWN",
-                captured,
-                decision,
-                authorization,
-                reasonCodes: [result.reason, SafeExecutor.finalizationCode(finalization)],
-                durationMs: Date.now() - startedAt,
-            });
-            // Stryker restore all
-            return result;
-        }
-        const finalization = await this.finalize(captured, decision, authorization, "COMMITTED", attempt.receipt);
-        const result = {
-            outcome: "COMPLETED",
-            executed: true,
-            recovered: false,
-            result: attempt.result,
-            authorization,
-            finalization,
-        };
-        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-        await this.record({
-            eventType: "EXECUTION_COMPLETED",
-            captured,
-            decision,
-            authorization,
-            reasonCodes: [SafeExecutor.finalizationCode(finalization)],
-            durationMs: Date.now() - startedAt,
+        this.executor = new RegistryExecutor(registry);
+        this.runner = new GovernedExecutionRunner({
+            verifier,
+            audit,
+            ...(options?.boundaryId === undefined ? {} : { boundaryId: options.boundaryId }),
+            ...(options?.workloadDigest === undefined ? {} : { workloadDigest: options.workloadDigest }),
+            ...(options?.attempts === undefined ? {} : { attempts: options.attempts }),
+            enforceDispatchWindow: false,
+            reportReconciliations: false,
         });
-        // Stryker restore all
-        return result;
     }
-    /**
-     * Every check made before a grant may be consumed, with the evidence that
-     * the intent was captured and decided. A refusal is recorded and returned;
-     * null means the decision passed, and so carries a grant.
-     */
-    async admit(captured, decision, startedAt) {
-        // Stryker disable next-line all: Audit payload mapping is covered by lifecycle event assertions.
-        const intentRecorded = await this.record({ eventType: "INTENT_CAPTURED", captured });
-        // An observational artifact (shadow observation, serialized audit event) is
-        // rejected before it is recorded or inspected as if it were a decision.
-        if (!SafeExecutor.isAuthoritativeDecision(decision)) {
-            return await this.block(captured, undefined, "DECISION_NOT_AUTHORITATIVE", startedAt);
-        }
-        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-        const decisionRecorded = await this.record({
-            eventType: decision.failClosed ? "AUTHORITY_FAILED_CLOSED" : "AUTHORITY_DECISION",
-            captured,
-            decision,
-        });
-        // Stryker restore all
-        if (this.audit?.requiresDeliveryBeforeExecution === true &&
-            (!intentRecorded || !decisionRecorded)) {
-            return await this.block(captured, decision, "AUDIT_UNAVAILABLE", startedAt);
-        }
-        if (decision.verdict !== "ALLOW" || decision.failClosed) {
-            return await this.block(captured, decision, "DECISION_NOT_ALLOW", startedAt);
-        }
-        if (decision.intentHash !== captured.intentHash) {
-            return await this.block(captured, decision, "INTENT_BINDING_MISMATCH", startedAt);
-        }
-        if (decision.authorization === null || typeof decision.authorization !== "object") {
-            return await this.block(captured, decision, "AUTHORIZATION_MISSING", startedAt);
-        }
-        if (!this.intentConforms(captured)) {
-            return await this.block(captured, decision, "INTENT_CONFORMANCE_FAILED", startedAt);
-        }
-        // Before the grant is consumed, not after: a boundary that refuses an
-        // intent must leave the authority intact for the boundary that owns it.
-        if (!this.boundaryMatches(captured)) {
-            return await this.block(captured, decision, "BOUNDARY_MISMATCH", startedAt);
-        }
-        if (!this.workloadMatches(captured)) {
-            return await this.block(captured, decision, "WORKLOAD_MISMATCH", startedAt);
-        }
-        this.registry.validate(captured);
-        return null;
-    }
-    /**
-     * Consumes the grant through the verifier, checks what came back against
-     * the decision and the intent, and records the consumption and the start
-     * of execution. Nothing here dispatches.
-     */
-    async consume(captured, decision, startedAt) {
-        let authorization;
-        try {
-            authorization = await this.verifier.verifyAndConsume(captured, decision);
-        }
-        catch {
-            return await this.block(captured, decision, "AUTHORIZATION_INVALID", startedAt);
-        }
-        if (authorization === null) {
-            return await this.block(captured, decision, "AUTHORIZATION_INVALID", startedAt);
-        }
-        const authorizationExpiry = Date.parse(authorization.expiresAt);
-        if (authorization.decisionId !== decision.decisionId ||
-            authorization.dossierId !== decision.dossierId ||
-            authorization.grantId.length === 0 ||
-            authorization.intentHash !== captured.intentHash ||
-            Math.floor(authorizationExpiry / 1_000) !==
-                Math.floor(Date.parse(decision.authorization.expiresAt) / 1_000) ||
-            authorizationExpiry <= Date.now() ||
-            authorizationExpiry > Date.parse(captured.intent.expiresAt)) {
-            return await this.block(captured, decision, "AUTHORIZATION_INVALID", startedAt);
-        }
-        if (!this.intentConforms(captured)) {
-            return await this.block(captured, decision, "INTENT_CONFORMANCE_FAILED", startedAt);
-        }
-        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-        const grantRecorded = await this.record({
-            eventType: "GRANT_CONSUMED",
-            captured,
-            decision,
-            authorization,
-            durationMs: Date.now() - startedAt,
-        });
-        // Stryker restore all
-        if (this.audit?.requiresDeliveryBeforeExecution === true && !grantRecorded) {
-            return await this.failedBeforeDispatch(captured, decision, authorization, "AUDIT_UNAVAILABLE", startedAt);
-        }
-        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-        const executionRecorded = await this.record({
-            eventType: "EXECUTION_STARTED",
+    async run(captured, decision) {
+        return (await this.runner.dispatch(this.executor, {
             captured,
             decision,
-            authorization,
-            durationMs: Date.now() - startedAt,
-        });
-        // Stryker restore all
-        if (this.audit?.requiresDeliveryBeforeExecution === true && !executionRecorded) {
-            return await this.failedBeforeDispatch(captured, decision, authorization, "AUDIT_UNAVAILABLE", startedAt);
-        }
-        return { outcome: "CLAIMED", authorization };
+            action: captured,
+        }));
     }
     /**
      * Admits a decision exactly as `run` would and holds its grant instead of
@@ -213,46 +42,25 @@ export class SafeExecutor {
      * unclaimed hold simply expires with its grant.
      */
     async hold(captured, decision) {
-        return await this.holdWith(captured, decision, []);
+        return await this.runner.hold(this.executor, { captured, decision, action: captured });
     }
     /**
      * Admits a hold this executor did not make: one another replica made, or
      * this process made before a restart, read back from a store the replicas
      * share. Every check `hold` makes is made again on the way in, and the
-     * record says the hold was adopted. Adoption adds no authority: the grant
-     * is still the authority's to hand out once, so a hold claimed elsewhere
-     * is refused at the claim by the authority or the shared replay store,
-     * never admitted twice by this executor's own memory.
+     * record says the hold was adopted.
      */
     async adoptHold(captured, decision) {
-        return await this.holdWith(captured, decision, ["HOLD_ADOPTED"]);
+        return await this.runner.adoptHold(this.executor, { captured, decision, action: captured });
     }
     /**
      * Registers a claim this executor did not make, so that `settleHeld` can
-     * finalize it here: the hold's intent and decision, and the authorization
-     * the claim returned, as the store that shared them kept them. Nothing is
-     * consumed and nothing is checked against the authority; the finalization
-     * is, as always, the authority's to accept or refuse.
+     * finalize it here. Nothing is consumed and nothing is checked against the
+     * authority; the finalization is, as always, the authority's to accept or
+     * refuse.
      */
     adoptClaim(captured, decision, authorization, material = null) {
-        if (!SafeExecutor.isAuthoritativeDecision(decision) ||
-            decision.intentHash !== captured.intentHash ||
-            authorization.intentHash !== captured.intentHash) {
-            throw new Error("CLAIM_ADOPTION_MISMATCH");
-        }
-        if (material !== null) {
-            const adopt = this.verifier.adoptClaim;
-            if (adopt === undefined || !adopt.call(this.verifier, authorization, material)) {
-                throw new Error("CLAIM_MATERIAL_REFUSED");
-            }
-        }
-        const held = Object.freeze({
-            captured,
-            decision,
-            expiresAt: authorization.expiresAt,
-        });
-        this.claims.set(held, authorization);
-        return held;
+        return this.runner.adoptClaim(this.executor, { captured, decision, action: captured }, authorization, material);
     }
     /**
      * What another process needs to finalize a claim this executor's verifier
@@ -260,53 +68,15 @@ export class SafeExecutor {
      * verifier keeps its claims to itself or did not make this one.
      */
     claimMaterial(authorization) {
-        const material = this.verifier.claimMaterial;
-        return material === undefined ? null : material.call(this.verifier, authorization);
-    }
-    async holdWith(captured, decision, reasonCodes) {
-        const startedAt = Date.now();
-        const refused = await this.admit(captured, decision, startedAt);
-        if (refused !== null)
-            return refused;
-        const admitted = decision;
-        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-        const heldRecorded = await this.record({
-            eventType: "GRANT_HELD",
-            captured,
-            decision,
-            ...(reasonCodes.length === 0 ? {} : { reasonCodes: [...reasonCodes] }),
-            durationMs: Date.now() - startedAt,
-        });
-        // Stryker restore all
-        if (this.audit?.requiresDeliveryBeforeExecution === true && !heldRecorded) {
-            return await this.block(captured, decision, "AUDIT_UNAVAILABLE", startedAt);
-        }
-        const held = Object.freeze({
-            captured,
-            decision,
-            expiresAt: admitted.authorization.expiresAt,
-        });
-        this.holds.set(held, admitted);
-        return { outcome: "HELD", executed: false, result: null, authorization: null, held };
+        return this.runner.claimMaterial(authorization);
     }
     /**
-     * Claims a held grant, once. The handle is forgotten before the verifier
-     * is asked, so a second claim of the same hold, concurrent or later, is
-     * refused here without reaching the authority; a handle this executor did
-     * not issue is refused the same way. What the claim returns is checked
-     * exactly as `run` checks it.
+     * Claims a held grant, once. A second claim of the same hold, concurrent or
+     * later, is refused without reaching the authority; a handle this executor
+     * did not issue is refused the same way.
      */
     async claimHeld(held) {
-        const startedAt = Date.now();
-        const decision = this.holds.get(held);
-        if (decision === undefined) {
-            return await this.block(held.captured, held.decision, "AUTHORIZATION_INVALID", startedAt);
-        }
-        this.holds.delete(held);
-        const claim = await this.consume(held.captured, decision, startedAt);
-        if (claim.outcome === "CLAIMED")
-            this.claims.set(held, claim.authorization);
-        return claim;
+        return (await this.runner.present(held));
     }
     /**
      * Reports how a claimed hold ended, once: `COMMITTED` when the effect
@@ -314,259 +84,17 @@ export class SafeExecutor {
      * nobody can say. The terminal record names the outcome, as `run`'s do.
      */
     async settleHeld(held, outcome, receipt = null) {
-        const startedAt = Date.now();
-        const authorization = this.claims.get(held);
-        if (authorization === undefined)
+        const settlement = await this.runner.settle(held, { outcome, signedReceipt: receipt });
+        if (settlement.status !== "SETTLED")
             throw new Error("HELD_EXECUTION_NOT_CLAIMED");
-        this.claims.delete(held);
-        const finalization = await this.finalize(held.captured, held.decision, authorization, outcome, receipt);
-        const eventType = SafeExecutor.settledEvent(outcome);
-        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-        await this.record({
-            eventType,
-            captured: held.captured,
-            decision: held.decision,
-            authorization,
-            reasonCodes: [SafeExecutor.finalizationCode(finalization)],
-            durationMs: Date.now() - startedAt,
-        });
-        // Stryker restore all
-        return finalization;
-    }
-    static settledEvent(outcome) {
-        if (outcome === "COMMITTED")
-            return "EXECUTION_COMPLETED";
-        if (outcome === "FAILED")
-            return "EXECUTION_REFUSED_AFTER_DISPATCH";
-        return "EXECUTION_OUTCOME_UNKNOWN";
-    }
-    /**
-     * Reports the attempt outcome to the verifier's authority, with the
-     * provider's effect receipt when the attempt brought one back. A missing,
-     * failing, or malformed finalization can never alter the execution result.
-     */
-    async finalize(captured, decision, authorization, outcome, receipt = null) {
-        const finalize = this.verifier.finalize;
-        if (finalize === undefined)
-            return "UNSUPPORTED";
-        try {
-            const status = await finalize.call(this.verifier, {
-                captured,
-                decision,
-                authorization,
-                outcome,
-                ...(receipt === null ? {} : { effectReceipt: receipt }),
-            });
-            return status === "RECORDED" ? "RECORDED" : "PENDING";
-        }
-        catch {
-            return "PENDING";
-        }
-    }
-    static finalizationCode(finalization) {
-        return `COMMIT_FINALIZATION_${finalization}`;
+        return settlement.finalization;
     }
     async reconcile(captured, recovery) {
-        const startedAt = Date.now();
-        if (recovery.version !== "agent-safe.recovery/1" ||
-            recovery.intentHash !== captured.intentHash ||
-            recovery.idempotencyKey !== captured.intent.idempotencyKey ||
-            !this.intentConforms(captured)) {
-            return await this.block(captured, undefined, "RECOVERY_BINDING_MISMATCH", startedAt);
-        }
-        // The decision and grant are the caller's claim until the executor's own
-        // record confirms them; the provider is not asked about a binding that
-        // was never dispatched here.
-        let authority = "NON_AUTHORITATIVE";
-        if (this.attempts !== null) {
-            const recorded = await this.attempts.authorizationsOf(captured);
-            if (recorded.length === 0) {
-                return await this.block(captured, undefined, "RECOVERY_ATTEMPT_UNKNOWN", startedAt);
-            }
-            if (!recorded.some((candidate) => SafeExecutor.sameBinding(candidate, recovery))) {
-                return await this.block(captured, undefined, "RECOVERY_BINDING_MISMATCH", startedAt);
-            }
-            authority = "AUTHORITATIVE";
-        }
-        const authorization = SafeExecutor.authorizationFrom(recovery);
-        const reconciliation = await this.registry.reconcile(captured, recovery.idempotencyKey);
-        if (reconciliation.status === "COMPLETED") {
-            const result = {
-                outcome: "COMPLETED",
-                executed: true,
-                recovered: true,
-                result: reconciliation.result,
-                authorization,
-            };
-            // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-            await this.record({
-                eventType: "RECONCILIATION_COMPLETED",
-                captured,
-                authorization,
-                authority,
-                durationMs: Date.now() - startedAt,
-            });
-            // Stryker restore all
-            return result;
-        }
-        if (reconciliation.status === "NOT_EXECUTED") {
-            const result = {
-                outcome: "DEFINITELY_NOT_EXECUTED",
-                executed: false,
-                recovered: true,
-                reason: "PROVIDER_CONFIRMED_NOT_EXECUTED",
-                result: null,
-                authorization,
-            };
-            // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-            await this.record({
-                eventType: "RECONCILIATION_NOT_EXECUTED",
-                captured,
-                authorization,
-                authority,
-                reasonCodes: [result.reason],
-                durationMs: Date.now() - startedAt,
-            });
-            // Stryker restore all
-            return result;
-        }
-        const result = {
-            outcome: "UNKNOWN_AFTER_DISPATCH",
-            executed: null,
-            reason: "PROVIDER_OUTCOME_UNKNOWN",
-            result: null,
-            authorization,
-            recovery,
-        };
-        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-        await this.record({
-            eventType: "RECONCILIATION_UNKNOWN",
+        return (await this.runner.reconcile(this.executor, {
             captured,
-            authorization,
-            authority,
-            reasonCodes: [result.reason],
-            durationMs: Date.now() - startedAt,
-        });
-        // Stryker restore all
-        return result;
-    }
-    /**
-     * Observational artifacts carry an explicit non-authoritative marker. They
-     * must never be interpreted as a `DecisionGate`, even after an unsafe cast
-     * or a JSON round trip.
-     */
-    static isAuthoritativeDecision(decision) {
-        const candidate = decision;
-        return candidate.authority !== "OBSERVATIONAL" && candidate.mode !== "SHADOW";
-    }
-    /**
-     * Whether this boundary is the one the intent was captured through. The
-     * boundary is read back out of the hashed context, so an intent whose
-     * boundary was edited after capture fails conformance before it reaches
-     * here, and one that never named a boundary cannot acquire one now.
-     */
-    boundaryMatches(captured) {
-        if (this.boundaryId === null)
-            return true;
-        return boundaryOf(captured.intent.context)?.boundary_id === this.boundaryId;
-    }
-    /**
-     * Whether the workload that proposed the intent is the one running it. Like
-     * the boundary, the digest is read back out of the hashed context, so an
-     * intent whose workload was edited after capture fails conformance first.
-     */
-    workloadMatches(captured) {
-        if (this.workloadDigest === null)
-            return true;
-        return workloadOf(captured.intent.context)?.digest === this.workloadDigest;
-    }
-    intentConforms(captured) {
-        let recomputed = null;
-        try {
-            recomputed = this.hasher.capture(captured.intent);
-        }
-        catch {
-            // Malformed runtime objects are non-conformant.
-        }
-        return (recomputed !== null &&
-            recomputed.intentHash === captured.intentHash &&
-            recomputed.canonicalIntent === captured.canonicalIntent &&
-            recomputed.byteLength === captured.byteLength);
-    }
-    async block(captured, decision, reason, startedAt) {
-        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-        await this.record({
-            eventType: "EXECUTION_BLOCKED",
-            captured,
-            ...(decision === undefined ? {} : { decision }),
-            reasonCodes: [reason],
-            durationMs: Date.now() - startedAt,
-        });
-        // Stryker restore all
-        return { outcome: "BLOCKED", executed: false, reason, result: null, authorization: null };
-    }
-    async failedBeforeDispatch(captured, decision, authorization, reason, startedAt, code) {
-        // The grant was consumed but no side effect was attempted.
-        const finalization = await this.finalize(captured, decision, authorization, "FAILED");
-        // Stryker disable all: Audit payload mapping is covered by lifecycle event assertions.
-        await this.record({
-            eventType: "EXECUTION_FAILED_BEFORE_DISPATCH",
-            captured,
-            decision,
-            authorization,
-            reasonCodes: [
-                reason,
-                ...(code === undefined ? [] : [code]),
-                SafeExecutor.finalizationCode(finalization),
-            ],
-            durationMs: Date.now() - startedAt,
-        });
-        // Stryker restore all
-        return {
-            outcome: "FAILED_BEFORE_DISPATCH",
-            executed: false,
-            reason,
-            ...(code === undefined ? {} : { code }),
-            result: null,
-            authorization,
-            finalization,
-        };
-    }
-    async record(input) {
-        // Stryker disable next-line BooleanLiteral: The value is irrelevant when no audit policy exists.
-        return this.audit === undefined ? true : await this.audit.record(input);
-    }
-    static recoveryReference(captured, authorization) {
-        // Named field by field rather than spread: `agent-safe.recovery/1` is a
-        // wire object a caller presents back, so a field added to the
-        // authorization must not appear here by accident. The claim lease in
-        // particular has no business being here — it is the window this attempt
-        // had, and it has certainly closed by the time anyone reconciles.
-        return Object.freeze({
-            version: "agent-safe.recovery/1",
-            decisionId: authorization.decisionId,
-            dossierId: authorization.dossierId,
-            grantId: authorization.grantId,
-            intentHash: authorization.intentHash,
-            expiresAt: authorization.expiresAt,
-            idempotencyKey: captured.intent.idempotencyKey,
-        });
-    }
-    static sameBinding(recorded, recovery) {
-        return (recorded.decisionId === recovery.decisionId &&
-            recorded.dossierId === recovery.dossierId &&
-            recorded.grantId === recovery.grantId &&
-            recorded.intentHash === recovery.intentHash &&
-            recorded.expiresAt === recovery.expiresAt);
-    }
-    static authorizationFrom(recovery) {
-        return Object.freeze({
-            decisionId: recovery.decisionId,
-            dossierId: recovery.dossierId,
-            grantId: recovery.grantId,
-            intentHash: recovery.intentHash,
-            expiresAt: recovery.expiresAt,
-        });
+            recovery,
+            action: captured,
+        }));
     }
 }
 //# sourceMappingURL=SafeExecutor.js.map

package/dist/execution/SafeExecutor.js.map

@@ -1 +1 @@
-{"version":3,"file":"SafeExecutor.js","sourceRoot":"","sources":["../../src/execution/SafeExecutor.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oCAAoC,CAAC;AAE3E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAqMvE,MAAM,OAAO,YAAY;IAYJ;IACA;IACA;IAbF,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAErC,UAAU,CAAgB;IAC1B,cAAc,CAAgB;IAC/C,yFAAyF;IACxE,KAAK,GAAG,IAAI,OAAO,EAAmC,CAAC;IACxE,uFAAuF;IACtE,MAAM,GAAG,IAAI,OAAO,EAAwC,CAAC;IAC7D,QAAQ,CAA4B;IAErD,YACmB,QAAwB,EACxB,QAA+B,EAC/B,KAAqB,EACtC,OAA6B;QAHZ,aAAQ,GAAR,QAAQ,CAAgB;QACxB,aAAQ,GAAR,QAAQ,CAAuB;QAC/B,UAAK,GAAL,KAAK,CAAgB;QAGtC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,cAAc,IAAI,IAAI,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,GAAG,CACd,QAAwB,EACxB,QAAsB;QAEtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAA4B,EAAE,SAAS,CAAC,CAAC;QACpF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;YAChD,OAAO,MAAM,IAAI,CAAC,oBAAoB,CACpC,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,gCAAgC,EAChC,SAAS,EACT,OAAO,CAAC,IAAI,CACb,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;YAChD,wEAAwE;YACxE,sEAAsE;YACtE,qCAAqC;YACrC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CACtC,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,QAAQ,EACR,OAAO,CAAC,OAAO,CAChB,CAAC;YACF,MAAM,MAAM,GAAiC;gBAC3C,OAAO,EAAE,yBAAyB;gBAClC,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,KAAK;gBAChB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,MAAM,EAAE,IAAI;gBACZ,aAAa;gBACb,YAAY;aACb,CAAC;YACF,uFAAuF;YACvF,MAAM,IAAI,CAAC,MAAM,CAAC;gBAChB,SAAS,EAAE,kCAAkC;gBAC7C,QAAQ;gBACR,QAAQ;gBACR,aAAa;gBACb,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBAC1E,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,sBAAsB;YACtB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CACtC,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,eAAe,EACf,OAAO,CAAC,OAAO,CAChB,CAAC;YACF,MAAM,MAAM,GAAiC;gBAC3C,OAAO,EAAE,wBAAwB;gBACjC,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,0BAA0B;gBAClC,MAAM,EAAE,IAAI;gBACZ,aAAa;gBACb,QAAQ,EAAE,YAAY,CAAC,iBAAiB,CAAC,QAAQ,EAAE,aAAa,CAAC;gBACjE,YAAY;aACb,CAAC;YACF,uFAAuF;YACvF,MAAM,IAAI,CAAC,MAAM,CAAC;gBAChB,SAAS,EAAE,2BAA2B;gBACtC,QAAQ;gBACR,QAAQ;gBACR,aAAa;gBACb,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;gBACzE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,sBAAsB;YACtB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CACtC,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,WAAW,EACX,OAAO,CAAC,OAAO,CAChB,CAAC;QACF,MAAM,MAAM,GAAiC;YAC3C,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,OAAO,CAAC,MAAiB;YACjC,aAAa;YACb,YAAY;SACb,CAAC;QACF,uFAAuF;QACvF,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,qBAAqB;YAChC,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,WAAW,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC1D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,KAAK,CACjB,QAAwB,EACxB,QAAsB,EACtB,SAAiB;QAEjB,iGAAiG;QACjG,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrF,4EAA4E;QAC5E,wEAAwE;QACxE,IAAI,CAAC,YAAY,CAAC,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,4BAA4B,EAAE,SAAS,CAAC,CAAC;QACxF,CAAC;QACD,uFAAuF;QACvF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YACzC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,oBAAoB;YACjF,QAAQ;YACR,QAAQ;SACT,CAAC,CAAC;QACH,sBAAsB;QACtB,IACE,IAAI,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI;YACpD,CAAC,CAAC,cAAc,IAAI,CAAC,gBAAgB,CAAC,EACtC,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;YAChD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,yBAAyB,EAAE,SAAS,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YAClF,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,2BAA2B,EAAE,SAAS,CAAC,CAAC;QACtF,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,OAAO,CACnB,QAAwB,EACxB,QAA0B,EAC1B,SAAiB;QAEjB,IAAI,aAA2C,CAAC;QAChD,IAAI,CAAC;YACH,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAChE,IACE,aAAa,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAChD,aAAa,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;YAC9C,aAAa,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAClC,aAAa,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAChD,IAAI,CAAC,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;YAClE,mBAAmB,IAAI,IAAI,CAAC,GAAG,EAAE;YACjC,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAC3D,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,2BAA2B,EAAE,SAAS,CAAC,CAAC;QACtF,CAAC;QACD,uFAAuF;QACvF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YACtC,SAAS,EAAE,gBAAgB;YAC3B,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,IAAI,IAAI,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC3E,OAAO,MAAM,IAAI,CAAC,oBAAoB,CACpC,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,SAAS,CACV,CAAC;QACJ,CAAC;QACD,uFAAuF;QACvF,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC1C,SAAS,EAAE,mBAAmB;YAC9B,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,IAAI,IAAI,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC/E,OAAO,MAAM,IAAI,CAAC,oBAAoB,CACpC,QAAQ,EACR,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,SAAS,CACV,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC;IAC/C,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,IAAI,CACf,QAAwB,EACxB,QAAsB;QAEtB,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,SAAS,CACpB,QAAwB,EACxB,QAAsB;QAEtB,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACI,UAAU,CACf,QAAwB,EACxB,QAAsB,EACtB,aAAoC,EACpC,WAA8B,IAAI;QAElC,IACE,CAAC,YAAY,CAAC,uBAAuB,CAAC,QAAQ,CAAC;YAC/C,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAC3C,aAAa,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAChD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YACvC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC/E,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAkB,MAAM,CAAC,MAAM,CAAC;YACxC,QAAQ;YACR,QAAQ;YACR,SAAS,EAAE,aAAa,CAAC,SAAS;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACrC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACI,aAAa,CAAC,aAAoC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC7C,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACrF,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,QAAwB,EACxB,QAAsB,EACtB,WAA8B;QAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAChE,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,OAAO,CAAC;QACrC,MAAM,QAAQ,GAAG,QAA4B,CAAC;QAC9C,uFAAuF;QACvF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YACrC,SAAS,EAAE,YAAY;YACvB,QAAQ;YACR,QAAQ;YACR,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC;YACtE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,IAAI,IAAI,CAAC,KAAK,EAAE,+BAA+B,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1E,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,IAAI,GAAkB,MAAM,CAAC,MAAM,CAAC;YACxC,QAAQ;YACR,QAAQ;YACR,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,SAAS;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACvF,CAAC;IAED;;;;;;OAMG;IACI,KAAK,CAAC,SAAS,CAAC,IAAmB;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACrE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,UAAU,CACrB,IAAmB,EACnB,OAA+B,EAC/B,UAAyB,IAAI;QAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,aAAa,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CACtC,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,QAAQ,EACb,aAAa,EACb,OAAO,EACP,OAAO,CACR,CAAC;QACF,MAAM,SAAS,GAAG,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACrD,uFAAuF;QACvF,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS;YACT,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa;YACb,WAAW,EAAE,CAAC,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC1D,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,MAAM,CAAC,YAAY,CAAC,OAA+B;QACzD,IAAI,OAAO,KAAK,WAAW;YAAE,OAAO,qBAAqB,CAAC;QAC1D,IAAI,OAAO,KAAK,QAAQ;YAAE,OAAO,kCAAkC,CAAC;QACpE,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,QAAQ,CACpB,QAAwB,EACxB,QAAsB,EACtB,aAAoC,EACpC,OAA+B,EAC/B,UAAyB,IAAI;QAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxC,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,aAAa,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAChD,QAAQ;gBACR,QAAQ;gBACR,aAAa;gBACb,OAAO;gBACP,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;aACxD,CAAC,CAAC;YACH,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,gBAAgB,CAAC,YAAmC;QACjE,OAAO,uBAAuB,YAAY,EAAE,CAAC;IAC/C,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,QAAwB,EACxB,QAAoC;QAEpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IACE,QAAQ,CAAC,OAAO,KAAK,uBAAuB;YAC5C,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAC3C,QAAQ,CAAC,cAAc,KAAK,QAAQ,CAAC,MAAM,CAAC,cAAc;YAC1D,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAC9B,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,2BAA2B,EAAE,SAAS,CAAC,CAAC;QACvF,CAAC;QACD,yEAAyE;QACzE,uEAAuE;QACvE,6BAA6B;QAC7B,IAAI,SAAS,GAAmB,mBAAmB,CAAC;QACpD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,0BAA0B,EAAE,SAAS,CAAC,CAAC;YACtF,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACjF,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,2BAA2B,EAAE,SAAS,CAAC,CAAC;YACvF,CAAC;YACD,SAAS,GAAG,eAAe,CAAC;QAC9B,CAAC;QACD,MAAM,aAAa,GAAG,YAAY,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE/D,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QACxF,IAAI,cAAc,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC1C,MAAM,MAAM,GAA2C;gBACrD,OAAO,EAAE,WAAW;gBACpB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,cAAc,CAAC,MAAiB;gBACxC,aAAa;aACd,CAAC;YACF,uFAAuF;YACvF,MAAM,IAAI,CAAC,MAAM,CAAC;gBAChB,SAAS,EAAE,0BAA0B;gBACrC,QAAQ;gBACR,aAAa;gBACb,SAAS;gBACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,sBAAsB;YACtB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,cAAc,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YAC7C,MAAM,MAAM,GAA2C;gBACrD,OAAO,EAAE,yBAAyB;gBAClC,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,iCAAiC;gBACzC,MAAM,EAAE,IAAI;gBACZ,aAAa;aACd,CAAC;YACF,uFAAuF;YACvF,MAAM,IAAI,CAAC,MAAM,CAAC;gBAChB,SAAS,EAAE,6BAA6B;gBACxC,QAAQ;gBACR,aAAa;gBACb,SAAS;gBACT,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACnC,CAAC,CAAC;YACH,sBAAsB;YACtB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAA2C;YACrD,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,0BAA0B;YAClC,MAAM,EAAE,IAAI;YACZ,aAAa;YACb,QAAQ;SACT,CAAC;QACF,uFAAuF;QACvF,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,wBAAwB;YACnC,QAAQ;YACR,aAAa;YACb,SAAS;YACT,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,uBAAuB,CAAC,QAAsB;QAC3D,MAAM,SAAS,GAAG,QAGjB,CAAC;QACF,OAAO,SAAS,CAAC,SAAS,KAAK,eAAe,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC;IAChF,CAAC;IAED;;;;;OAKG;IACK,eAAe,CAAC,QAAwB;QAC9C,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,KAAK,IAAI,CAAC,UAAU,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACK,eAAe,CAAC,QAAwB;QAC9C,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC,cAAc,CAAC;IAC7E,CAAC;IAEO,cAAc,CAAC,QAAwB;QAC7C,IAAI,UAAU,GAA0B,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;QACD,OAAO,CACL,UAAU,KAAK,IAAI;YACnB,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAC7C,UAAU,CAAC,eAAe,KAAK,QAAQ,CAAC,eAAe;YACvD,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,CAC9C,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,KAAK,CACjB,QAAwB,EACxB,QAAkC,EAClC,MAA4B,EAC5B,SAAiB;QAEjB,uFAAuF;QACvF,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,mBAAmB;YAC9B,QAAQ;YACR,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,WAAW,EAAE,CAAC,MAAM,CAAC;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;IAC5F,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,QAAwB,EACxB,QAAsB,EACtB,aAAoC,EACpC,MAAyC,EACzC,SAAiB,EACjB,IAAa;QAEb,2DAA2D;QAC3D,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC;QACtF,uFAAuF;QACvF,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB,SAAS,EAAE,kCAAkC;YAC7C,QAAQ;YACR,QAAQ;YACR,aAAa;YACb,WAAW,EAAE;gBACX,MAAM;gBACN,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBACrC,YAAY,CAAC,gBAAgB,CAAC,YAAY,CAAC;aAC5C;YACD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC,CAAC;QACH,sBAAsB;QACtB,OAAO;YACL,OAAO,EAAE,wBAAwB;YACjC,QAAQ,EAAE,KAAK;YACf,MAAM;YACN,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACvC,MAAM,EAAE,IAAI;YACZ,aAAa;YACb,YAAY;SACb,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAsF;QAEtF,iGAAiG;QACjG,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC;IAEO,MAAM,CAAC,iBAAiB,CAC9B,QAAwB,EACxB,aAAoC;QAEpC,wEAAwE;QACxE,8DAA8D;QAC9D,qEAAqE;QACrE,wEAAwE;QACxE,kEAAkE;QAClE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,uBAAuB;YAChC,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,UAAU,EAAE,aAAa,CAAC,UAAU;YACpC,SAAS,EAAE,aAAa,CAAC,SAAS;YAClC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc;SAC/C,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,WAAW,CACxB,QAA+B,EAC/B,QAAoC;QAEpC,OAAO,CACL,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAC3C,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;YACzC,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YACrC,QAAQ,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;YAC3C,QAAQ,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAC1C,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,iBAAiB,CAAC,QAAoC;QACnE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;SAC9B,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"SafeExecutor.js","sourceRoot":"","sources":["../../src/execution/SafeExecutor.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAgDzD;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,YAAY;IACN,MAAM,CAA0B;IAChC,QAAQ,CAAmB;IAE5C,YACE,QAAwB,EACxB,QAA+B,EAC/B,KAAqB,EACrB,OAA6B;QAE7B,IAAI,CAAC,QAAQ,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAuB,CAAC;YACxC,QAAQ;YACR,KAAK;YACL,GAAG,CAAC,OAAO,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAChF,GAAG,CAAC,OAAO,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5F,GAAG,CAAC,OAAO,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1E,qBAAqB,EAAE,KAAK;YAC5B,qBAAqB,EAAE,KAAK;SAC7B,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,GAAG,CACd,QAAwB,EACxB,QAAsB;QAEtB,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE;YAChD,QAAQ;YACR,QAAQ;YACR,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAiC,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,IAAI,CACf,QAAwB,EACxB,QAAsB;QAEtB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzF,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,SAAS,CACpB,QAAwB,EACxB,QAAsB;QAEtB,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED;;;;;OAKG;IACI,UAAU,CACf,QAAwB,EACxB,QAAsB,EACtB,aAAoC,EACpC,WAA8B,IAAI;QAElC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAC3B,IAAI,CAAC,QAAQ,EACb,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,EACxC,aAAa,EACb,QAAQ,CACT,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,aAAa,CAAC,aAAoC;QACvD,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,SAAS,CAAC,IAAmB;QACxC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAoB,CAAC;IAC9D,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,UAAU,CACrB,IAAmB,EACnB,OAA+B,EAC/B,UAAyB,IAAI;QAE7B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;QACvF,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACnF,OAAO,UAAU,CAAC,YAAY,CAAC;IACjC,CAAC;IAEM,KAAK,CAAC,SAAS,CACpB,QAAwB,EACxB,QAAoC;QAEpC,OAAO,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE;YACjD,QAAQ;YACR,QAAQ;YACR,MAAM,EAAE,QAAQ;SACjB,CAAC,CAA2C,CAAC;IAChD,CAAC;CACF"}