@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/blueprints/execution.js

@@ -1,84 +1,75 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertBlueprintDestinationPaths = assertBlueprintDestinationPaths;
 exports.validateBlueprintGenerationResult = validateBlueprintGenerationResult;
 exports.executeBlueprintGenerator = executeBlueprintGenerator;
-const node_child_process_1 = require("node:child_process");
-const node_url_1 = require("node:url");
+const node_buffer_1 = require("node:buffer");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
 const index_js_1 = require("../ownership/index.js");
 const validation_js_1 = require("../validation.js");
+const external_sandbox_js_1 = require("./external-sandbox.js");
 const EXTERNAL_BLUEPRINT_TIMEOUT_MS = 30_000;
-const externalBlueprintRunner = `
-let input = '';
-for await (const chunk of process.stdin) input += chunk;
-try {
-  const module = await import(process.argv[1]);
-  const generator = module.default ?? module.generate;
-  if (typeof generator !== 'function') {
-    throw new Error('Blueprint must export a default function or named generate function.');
-  }
-  const value = await generator(JSON.parse(input));
-  process.send({ ok: true, value });
-} catch (error) {
-  process.send({
-    error: error instanceof Error ? error.stack ?? error.message : String(error),
-    ok: false,
-  });
-  process.exitCode = 1;
-}
-`;
-function runExternalBlueprint(generatorPath, context) {
-    return new Promise((resolveExecution, rejectExecution) => {
-        const child = (0, node_child_process_1.spawn)(process.execPath, [
-            '--input-type=module',
-            '--eval',
-            externalBlueprintRunner,
-            (0, node_url_1.pathToFileURL)(generatorPath).href,
-        ], { stdio: ['pipe', 'inherit', 'inherit', 'ipc'] });
-        let settled = false;
-        const timeout = setTimeout(() => {
-            if (settled)
-                return;
-            settled = true;
-            child.kill('SIGTERM');
-            rejectExecution(new Error(`Blueprint generator ${generatorPath} exceeded ${EXTERNAL_BLUEPRINT_TIMEOUT_MS}ms.`));
-        }, EXTERNAL_BLUEPRINT_TIMEOUT_MS);
-        const settle = (callback) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timeout);
-            callback();
-        };
-        child.once('error', (error) => {
-            settle(() => rejectExecution(error));
-        });
-        child.once('message', (message) => {
-            if (child.connected)
-                child.disconnect();
-            child.kill('SIGTERM');
-            settle(() => {
-                if (!(0, validation_js_1.isRecord)(message) || message.ok !== true) {
-                    const detail = (0, validation_js_1.isRecord)(message) && typeof message.error === 'string'
-                        ? message.error
-                        : 'unknown child-process error';
-                    rejectExecution(new Error(`Blueprint generator ${generatorPath} failed: ${detail}`));
-                    return;
-                }
-                resolveExecution(message.value);
-            });
-        });
-        child.once('exit', (code) => {
-            if (code !== 0) {
-                settle(() => rejectExecution(new Error(`Blueprint generator ${generatorPath} exited with status ${code ?? 'unknown'}.`)));
-            }
-        });
-        child.stdin.end(JSON.stringify(context));
+const EXTERNAL_BLUEPRINT_RESULT_LIMIT_BYTES = 16 * 1024 * 1024;
+const EXTERNAL_BLUEPRINT_FILE_LIMIT = 4_096;
+const EXTERNAL_BLUEPRINT_FILE_CONTENT_LIMIT_BYTES = 5 * 1024 * 1024;
+const EXTERNAL_BLUEPRINT_STRING_ARRAY_LIMIT = 1_024;
+const EXTERNAL_BLUEPRINT_STRING_LIMIT_BYTES = 1_024;
+const BLUEPRINT_OWNERSHIP_PATH = '.ebk/ownership.json';
+const WINDOWS_RESERVED_PATH_COMPONENT = /^(?:con|prn|aux|nul|com[1-9¹²³]|lpt[1-9¹²³]|conin\$|conout\$)(?:\..*)?$/iu;
+const BIDI_CONTROL_PATTERN = /[\u061C\u200E\u200F\u202A-\u202E\u2066-\u2069]/u;
+function runExternalBlueprint(generatorPath, context, options) {
+    let workspaceRoot;
+    let packageRoot;
+    let resolvedGeneratorPath;
+    try {
+        workspaceRoot = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(options.workspaceRoot));
+        packageRoot = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(options.packageRoot));
+        resolvedGeneratorPath = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(generatorPath));
+    }
+    catch {
+        throw new Error('External Blueprint execution requires existing canonical workspace, package, and generator paths.');
+    }
+    if (!isContainedPath(workspaceRoot, packageRoot) ||
+        !isContainedPath(packageRoot, resolvedGeneratorPath)) {
+        throw new Error('External Blueprint execution paths must remain inside the canonical workspace and package roots.');
+    }
+    const requestedTimeout = options.timeoutMs;
+    if (requestedTimeout !== undefined &&
+        (!Number.isInteger(requestedTimeout) ||
+            requestedTimeout <= 0 ||
+            requestedTimeout > EXTERNAL_BLUEPRINT_TIMEOUT_MS)) {
+        throw new Error(`External Blueprint timeoutMs must be an integer from 1 through ${EXTERNAL_BLUEPRINT_TIMEOUT_MS}.`);
+    }
+    const timeoutMs = requestedTimeout ?? EXTERNAL_BLUEPRINT_TIMEOUT_MS;
+    const sourceAuthority = options.source === 'installed'
+        ? {
+            lockfileDigest: options.lockfileDigest,
+            registryIntegrity: options.registryIntegrity,
+            source: options.source,
+        }
+        : { source: options.source };
+    return (0, external_sandbox_js_1.runExternalBlueprintSandbox)(context, {
+        blueprint: {
+            name: context.manifest.name,
+            version: context.manifest.version,
+        },
+        diagnostics: options.diagnostics ?? 'inherit',
+        generatorPath: resolvedGeneratorPath,
+        packageRoot,
+        ...sourceAuthority,
+        timeoutMs,
+        workspaceRoot,
     });
 }
 function requireStringArray(value, path) {
     if (!Array.isArray(value) ||
-        value.some((entry) => typeof entry !== 'string' || entry.trim() === '')) {
-        throw new Error(`${path} must be an array of non-empty strings.`);
+        value.length > EXTERNAL_BLUEPRINT_STRING_ARRAY_LIMIT ||
+        value.some((entry) => typeof entry !== 'string' ||
+            entry.trim() === '' ||
+            node_buffer_1.Buffer.byteLength(entry, 'utf8') >
+                EXTERNAL_BLUEPRINT_STRING_LIMIT_BYTES)) {
+        throw new Error(`${path} must be a bounded array of non-empty bounded strings.`);
     }
     if (new Set(value).size !== value.length) {
         throw new Error(`${path} must not contain duplicate values.`);
@@ -86,19 +77,184 @@ function requireStringArray(value, path) {
     return value;
 }
 function isSafeSlicePath(path) {
-    return (path !== '' &&
-        !path.startsWith('/') &&
-        !path.startsWith('\\') &&
-        !path.split(/[\\/]/).includes('..'));
+    const normalized = path.normalize('NFC');
+    return (path === normalized &&
+        node_buffer_1.Buffer.byteLength(normalized, 'utf8') <= 1024 &&
+        !normalized.includes('\\') &&
+        normalized.length > 0 &&
+        !normalized.startsWith('/') &&
+        !/^[A-Za-z]:\//.test(normalized) &&
+        !BIDI_CONTROL_PATTERN.test(normalized) &&
+        node_path_1.posix.normalize(normalized) === normalized &&
+        ![...normalized].some((character) => {
+            const codePoint = character.codePointAt(0) ?? 0;
+            return codePoint <= 0x1f || (codePoint >= 0x7f && codePoint <= 0x9f);
+        }) &&
+        normalized
+            .split('/')
+            .every((segment) => segment !== '' &&
+            segment !== '.' &&
+            segment !== '..' &&
+            segment.length <= 255 &&
+            !/[<>:"|?*]/u.test(segment) &&
+            !/[. ]$/u.test(segment) &&
+            !WINDOWS_RESERVED_PATH_COMPONENT.test(segment)));
+}
+function plannedDestinationNode(component) {
+    return {
+        children: new Map(),
+        ...(component ? { component } : {}),
+        file: false,
+    };
+}
+function portableComponentKey(component) {
+    return component
+        .normalize('NFC')
+        .replace(/[. ]+$/u, '')
+        .toLocaleLowerCase('en-US')
+        .toLocaleUpperCase('en-US')
+        .toLocaleLowerCase('en-US')
+        .normalize('NFC');
+}
+function portablePathKey(path) {
+    return path.split('/').map(portableComponentKey).join('/');
+}
+function validatePlannedDestinationSet(relativePaths) {
+    const root = plannedDestinationNode();
+    for (const path of [...relativePaths, BLUEPRINT_OWNERSHIP_PATH]) {
+        if (!isSafeSlicePath(path))
+            return blueprintDestinationPlanFailure();
+        let current = root;
+        for (const component of path.split('/')) {
+            if (current.file)
+                return blueprintDestinationPlanFailure();
+            const key = portableComponentKey(component);
+            const existing = current.children.get(key);
+            if (existing && existing.component !== component) {
+                return blueprintDestinationPlanFailure();
+            }
+            const next = existing ?? plannedDestinationNode(component);
+            current.children.set(key, next);
+            current = next;
+        }
+        if (current.file || current.children.size > 0) {
+            return blueprintDestinationPlanFailure();
+        }
+        current.file = true;
+    }
+}
+function blueprintDestinationPlanFailure() {
+    throw new Error('Blueprint destination validation failed: the publisher plan contains an unsafe path, a portable alias, a file/ancestor conflict, or an engine-owned path conflict.');
+}
+function blueprintDestinationFilesystemFailure() {
+    throw new Error('Blueprint destination validation failed: the existing filesystem contains a portable alias, symbolic link, non-directory ancestor, or unsafe leaf.');
+}
+function portableDirectoryEntries(directory, cache) {
+    const cached = cache.get(directory);
+    if (cached)
+        return cached;
+    const entries = new Map();
+    let names;
+    try {
+        names = (0, node_fs_1.readdirSync)(directory);
+    }
+    catch {
+        return blueprintDestinationFilesystemFailure();
+    }
+    for (const name of names) {
+        const key = portableComponentKey(name);
+        const existing = entries.get(key);
+        entries.set(key, existing === undefined || existing === name ? name : null);
+    }
+    cache.set(directory, entries);
+    return entries;
+}
+function isContainedPath(root, candidate) {
+    const fromRoot = (0, node_path_1.relative)(root, candidate);
+    return !(fromRoot === '..' ||
+        fromRoot.startsWith(`..${node_path_1.sep}`) ||
+        (0, node_path_1.isAbsolute)(fromRoot));
+}
+/**
+ * Refuses filesystem aliases before an external Blueprint plan is handed to
+ * Nx's Tree. The publisher has already executed at this point; this guard
+ * protects the engine-owned adoption of its returned destination paths.
+ */
+function assertBlueprintDestinationPaths(workspaceRoot, sliceRoot, relativePaths) {
+    let root;
+    try {
+        root = (0, node_fs_1.realpathSync)(workspaceRoot);
+    }
+    catch {
+        return blueprintDestinationFilesystemFailure();
+    }
+    if (!isSafeSlicePath(sliceRoot))
+        return blueprintDestinationPlanFailure();
+    validatePlannedDestinationSet(relativePaths);
+    const sliceSegments = sliceRoot.split('/');
+    const directoryEntryCache = new Map();
+    for (const path of [...relativePaths, BLUEPRINT_OWNERSHIP_PATH]) {
+        const segments = [...sliceSegments, ...path.split('/')];
+        let current = root;
+        for (let index = 0; index < segments.length; index += 1) {
+            const component = segments[index];
+            const sibling = portableDirectoryEntries(current, directoryEntryCache).get(portableComponentKey(component));
+            if (sibling === null ||
+                (sibling !== undefined && sibling !== component)) {
+                return blueprintDestinationFilesystemFailure();
+            }
+            const candidate = (0, node_path_1.resolve)(current, component);
+            if (!isContainedPath(root, candidate)) {
+                return blueprintDestinationFilesystemFailure();
+            }
+            let entry;
+            try {
+                entry = (0, node_fs_1.lstatSync)(candidate);
+            }
+            catch (error) {
+                if (error &&
+                    typeof error === 'object' &&
+                    'code' in error &&
+                    error.code === 'ENOENT') {
+                    break;
+                }
+                return blueprintDestinationFilesystemFailure();
+            }
+            if (entry.isSymbolicLink()) {
+                return blueprintDestinationFilesystemFailure();
+            }
+            let canonical;
+            try {
+                canonical = (0, node_fs_1.realpathSync)(candidate);
+            }
+            catch {
+                return blueprintDestinationFilesystemFailure();
+            }
+            if (canonical !== candidate ||
+                !isContainedPath(root, canonical) ||
+                (index < segments.length - 1
+                    ? !entry.isDirectory()
+                    : // A leaf with another hard-link name can alias adopter-owned bytes
+                        // either inside or outside this workspace. Stats cannot enumerate
+                        // those names, so v1 conservatively refuses the leaf everywhere.
+                        !entry.isFile() || entry.nlink !== 1)) {
+                return blueprintDestinationFilesystemFailure();
+            }
+            current = canonical;
+        }
+    }
 }
 function validateBlueprintGenerationResult(value) {
     if (!(0, validation_js_1.isRecord)(value)) {
         throw new Error('Blueprint generator result must be an object.');
     }
-    if (!Array.isArray(value.files) || value.files.length === 0) {
-        throw new Error('Blueprint generator result.files must not be empty.');
+    if (!Array.isArray(value.files) ||
+        value.files.length === 0 ||
+        value.files.length > EXTERNAL_BLUEPRINT_FILE_LIMIT) {
+        throw new Error('Blueprint generator result.files must be a non-empty bounded array.');
     }
-    const seenPaths = new Set();
+    const seenPathAliases = new Set();
+    let aggregateContentBytes = 0;
     const files = value.files.map((file, index) => {
         const label = `Blueprint generator result.files[${index}]`;
         if (!(0, validation_js_1.isRecord)(file)) {
@@ -107,16 +263,23 @@ function validateBlueprintGenerationResult(value) {
         if (typeof file.path !== 'string' || !isSafeSlicePath(file.path)) {
             throw new Error(`${label}.path must be a safe slice-relative path.`);
         }
-        if (file.path === '.ebk/ownership.json') {
+        if (file.path === BLUEPRINT_OWNERSHIP_PATH) {
             throw new Error(`${label}.path is reserved for engine-owned Blueprint metadata.`);
         }
-        if (seenPaths.has(file.path)) {
-            throw new Error(`Blueprint generator returned duplicate path ${file.path}.`);
+        const pathAlias = portablePathKey(file.path);
+        if (seenPathAliases.has(pathAlias)) {
+            throw new Error(`${label}.path duplicates another generated path.`);
         }
-        seenPaths.add(file.path);
+        seenPathAliases.add(pathAlias);
         if (typeof file.contents !== 'string') {
             throw new Error(`${label}.contents must be a string.`);
         }
+        const contentBytes = node_buffer_1.Buffer.byteLength(file.contents, 'utf8');
+        aggregateContentBytes += contentBytes;
+        if (contentBytes > EXTERNAL_BLUEPRINT_FILE_CONTENT_LIMIT_BYTES ||
+            aggregateContentBytes > EXTERNAL_BLUEPRINT_RESULT_LIMIT_BYTES) {
+            throw new Error('Blueprint generator result file contents exceed their fixed byte bounds.');
+        }
         if (file.mode !== 'managed' && file.mode !== 'seeded') {
             throw new Error(`${label}.mode must equal managed or seeded.`);
         }
@@ -160,7 +323,7 @@ function validateBlueprintGenerationResult(value) {
     }
     return { contracts, files, projects };
 }
-async function executeBlueprintGenerator(generatorPath, context) {
-    return validateBlueprintGenerationResult(await runExternalBlueprint(generatorPath, context));
+async function executeBlueprintGenerator(generatorPath, context, options) {
+    return validateBlueprintGenerationResult(await runExternalBlueprint(generatorPath, context, options));
 }
 //# sourceMappingURL=execution.js.map

package/src/blueprints/execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../../../../packages/nx/src/blueprints/execution.ts"],"names":[],"mappings":";;AAqJA,8EAwGC;AAED,8DAOC;AAtQD,2DAA2C;AAC3C,uCAAyC;AAEzC,oDAI+B;AAC/B,oDAA4C;AA6B5C,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAC7C,MAAM,uBAAuB,GAAG;;;;;;;;;;;;;;;;;;CAkB/B,CAAC;AAEF,SAAS,oBAAoB,CAC3B,aAAqB,EACrB,OAAkC;IAElC,OAAO,IAAI,OAAO,CAAC,CAAC,gBAAgB,EAAE,eAAe,EAAE,EAAE;QACvD,MAAM,KAAK,GAAG,IAAA,0BAAK,EACjB,OAAO,CAAC,QAAQ,EAChB;YACE,qBAAqB;YACrB,QAAQ;YACR,uBAAuB;YACvB,IAAA,wBAAa,EAAC,aAAa,CAAC,CAAC,IAAI;SAClC,EACD,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CACjD,CAAC;QACF,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,eAAe,CACb,IAAI,KAAK,CACP,uBAAuB,aAAa,aAAa,6BAA6B,KAAK,CACpF,CACF,CAAC;QACJ,CAAC,EAAE,6BAA6B,CAAC,CAAC;QAElC,MAAM,MAAM,GAAG,CAAC,QAAoB,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAgB,EAAE,EAAE;YACzC,IAAI,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,GAAG,EAAE;gBACV,IAAI,CAAC,IAAA,wBAAQ,EAAC,OAAO,CAAC,IAAI,OAAO,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;oBAC9C,MAAM,MAAM,GACV,IAAA,wBAAQ,EAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ;wBACpD,CAAC,CAAC,OAAO,CAAC,KAAK;wBACf,CAAC,CAAC,6BAA6B,CAAC;oBACpC,eAAe,CACb,IAAI,KAAK,CAAC,uBAAuB,aAAa,YAAY,MAAM,EAAE,CAAC,CACpE,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CACb,IAAI,KAAK,CACP,uBAAuB,aAAa,uBAAuB,IAAI,IAAI,SAAS,GAAG,CAChF,CACF,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,IAAY;IACtD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EACvE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yCAAyC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,CACL,IAAI,KAAK,EAAE;QACX,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACtB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpC,CAAC;AACJ,CAAC;AAED,SAAgB,iCAAiC,CAC/C,KAAc;IAEd,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,oCAAoC,KAAK,GAAG,CAAC;QAC3D,IAAI,CAAC,IAAA,wBAAQ,EAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,wDAAwD,CACjE,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,+CAA+C,IAAI,CAAC,IAAI,GAAG,CAC5D,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,uDAAuD,CAChE,CAAC;YACJ,CAAC;YACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBACxC,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;gBACrC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAC3B,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,uCAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAC9C,EACD,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0FAA0F,CACnG,CAAC;YACJ,CAAC;YACD,IACE,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI;gBACtC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAC/B,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,mDAAmD,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAsB,IAAI,CAAC,IAAI,CAAC;QAC1C,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBACX,CAAC;QACvB,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAA,yCAA8B,EAC5B,IAAI,CAAC,QAAQ,EACb,mBAAmB,EACnB,GAAG,KAAK,WAAW,CACpB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG;QAChB,QAAQ,EAAE,kBAAkB,CAC1B,KAAK,CAAC,SAAS,CAAC,QAAQ,EACxB,+CAA+C,CAChD;QACD,SAAS,EAAE,kBAAkB,CAC3B,KAAK,CAAC,SAAS,CAAC,SAAS,EACzB,gDAAgD,CACjD;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,kBAAkB,CACjC,KAAK,CAAC,QAAQ,EACd,qCAAqC,CACtC,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAC7C,aAAqB,EACrB,OAAkC;IAElC,OAAO,iCAAiC,CACtC,MAAM,oBAAoB,CAAC,aAAa,EAAE,OAAO,CAAC,CACnD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"execution.js","sourceRoot":"","sources":["../../../../../packages/nx/src/blueprints/execution.ts"],"names":[],"mappings":";;AAwRA,0EA6EC;AAED,8EAwHC;AAED,8DAQC;AAzeD,6CAAqC;AACrC,qCAA+D;AAC/D,yCAAsE;AAEtE,oDAI+B;AAC/B,oDAA4C;AAE5C,+DAAoE;AAiDpE,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAC7C,MAAM,qCAAqC,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/D,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAC5C,MAAM,2CAA2C,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACpE,MAAM,qCAAqC,GAAG,KAAK,CAAC;AACpD,MAAM,qCAAqC,GAAG,KAAK,CAAC;AACpD,MAAM,wBAAwB,GAAG,qBAAqB,CAAC;AACvD,MAAM,+BAA+B,GACnC,2EAA2E,CAAC;AAC9E,MAAM,oBAAoB,GAAG,iDAAiD,CAAC;AAC/E,SAAS,oBAAoB,CAC3B,aAAqB,EACrB,OAAkC,EAClC,OAAkC;IAElC,IAAI,aAAqB,CAAC;IAC1B,IAAI,WAAmB,CAAC;IACxB,IAAI,qBAA6B,CAAC;IAClC,IAAI,CAAC;QACH,aAAa,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAC7D,WAAW,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QACzD,qBAAqB,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,aAAa,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;IACJ,CAAC;IACD,IACE,CAAC,eAAe,CAAC,aAAa,EAAE,WAAW,CAAC;QAC5C,CAAC,eAAe,CAAC,WAAW,EAAE,qBAAqB,CAAC,EACpD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kGAAkG,CACnG,CAAC;IACJ,CAAC;IACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC;IAC3C,IACE,gBAAgB,KAAK,SAAS;QAC9B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC;YAClC,gBAAgB,IAAI,CAAC;YACrB,gBAAgB,GAAG,6BAA6B,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kEAAkE,6BAA6B,GAAG,CACnG,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,IAAI,6BAA6B,CAAC;IACpE,MAAM,eAAe,GACnB,OAAO,CAAC,MAAM,KAAK,WAAW;QAC5B,CAAC,CAAC;YACE,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB;QACH,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACjC,OAAO,IAAA,iDAA2B,EAAC,OAAO,EAAE;QAC1C,SAAS,EAAE;YACT,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAC3B,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;SAClC;QACD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;QAC7C,aAAa,EAAE,qBAAqB;QACpC,WAAW;QACX,GAAG,eAAe;QAClB,SAAS;QACT,aAAa;KACd,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,IAAY;IACtD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,MAAM,GAAG,qCAAqC;QACpD,KAAK,CAAC,IAAI,CACR,CAAC,KAAK,EAAE,EAAE,CACR,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YACnB,oBAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;gBAC9B,qCAAqC,CAC1C,EACD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,wDAAwD,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,CACL,IAAI,KAAK,UAAU;QACnB,oBAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,IAAI;QAC7C,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC1B,UAAU,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAC3B,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC;QAChC,CAAC,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,iBAAK,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,UAAU;QAC1C,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;YAClC,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChD,OAAO,SAAS,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,CAAC,CAAC;QACvE,CAAC,CAAC;QACF,UAAU;aACP,KAAK,CAAC,GAAG,CAAC;aACV,KAAK,CACJ,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,KAAK,EAAE;YACd,OAAO,KAAK,GAAG;YACf,OAAO,KAAK,IAAI;YAChB,OAAO,CAAC,MAAM,IAAI,GAAG;YACrB,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;YAC3B,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;YACvB,CAAC,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CACjD,CACJ,CAAC;AACJ,CAAC;AAQD,SAAS,sBAAsB,CAAC,SAAkB;IAChD,OAAO;QACL,QAAQ,EAAE,IAAI,GAAG,EAAE;QACnB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,IAAI,EAAE,KAAK;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB;IAC7C,OAAO,SAAS;SACb,SAAS,CAAC,KAAK,CAAC;SAChB,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,iBAAiB,CAAC,OAAO,CAAC;SAC1B,iBAAiB,CAAC,OAAO,CAAC;SAC1B,iBAAiB,CAAC,OAAO,CAAC;SAC1B,SAAS,CAAC,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,6BAA6B,CAAC,aAAgC;IACrE,MAAM,IAAI,GAAG,sBAAsB,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,aAAa,EAAE,wBAAwB,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,+BAA+B,EAAE,CAAC;QACrE,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,IAAI;gBAAE,OAAO,+BAA+B,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3C,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACjD,OAAO,+BAA+B,EAAE,CAAC;YAC3C,CAAC;YACD,MAAM,IAAI,GAAG,QAAQ,IAAI,sBAAsB,CAAC,SAAS,CAAC,CAAC;YAC3D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAChC,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,+BAA+B,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B;IACtC,MAAM,IAAI,KAAK,CACb,oKAAoK,CACrK,CAAC;AACJ,CAAC;AAED,SAAS,qCAAqC;IAC5C,MAAM,IAAI,KAAK,CACb,oJAAoJ,CACrJ,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,SAAiB,EACjB,KAAsD;IAEtD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;IACjD,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACH,KAAK,GAAG,IAAA,qBAAW,EAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qCAAqC,EAAE,CAAC;IACjD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,SAAiB;IACtD,MAAM,QAAQ,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,CAAC,CACN,QAAQ,KAAK,IAAI;QACjB,QAAQ,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;QAC/B,IAAA,sBAAU,EAAC,QAAQ,CAAC,CACrB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,+BAA+B,CAC7C,aAAqB,EACrB,SAAiB,EACjB,aAAgC;IAEhC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,sBAAY,EAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,qCAAqC,EAAE,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;QAAE,OAAO,+BAA+B,EAAE,CAAC;IAC1E,6BAA6B,CAAC,aAAa,CAAC,CAAC;IAE7C,MAAM,aAAa,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAGhC,CAAC;IACJ,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,aAAa,EAAE,wBAAwB,CAAC,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,wBAAwB,CACtC,OAAO,EACP,mBAAmB,CACpB,CAAC,GAAG,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;YACvC,IACE,OAAO,KAAK,IAAI;gBAChB,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC,EAChD,CAAC;gBACD,OAAO,qCAAqC,EAAE,CAAC;YACjD,CAAC;YACD,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC9C,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;gBACtC,OAAO,qCAAqC,EAAE,CAAC;YACjD,CAAC;YACD,IAAI,KAAK,CAAC;YACV,IAAI,CAAC;gBACH,KAAK,GAAG,IAAA,mBAAS,EAAC,SAAS,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,KAAK;oBACL,OAAO,KAAK,KAAK,QAAQ;oBACzB,MAAM,IAAI,KAAK;oBACf,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,OAAO,qCAAqC,EAAE,CAAC;YACjD,CAAC;YACD,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,OAAO,qCAAqC,EAAE,CAAC;YACjD,CAAC;YAED,IAAI,SAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,SAAS,GAAG,IAAA,sBAAY,EAAC,SAAS,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,qCAAqC,EAAE,CAAC;YACjD,CAAC;YACD,IACE,SAAS,KAAK,SAAS;gBACvB,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC;gBACjC,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAC1B,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE;oBACtB,CAAC,CAAC,mEAAmE;wBACnE,kEAAkE;wBAClE,iEAAiE;wBACjE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,EACzC,CAAC;gBACD,OAAO,qCAAqC,EAAE,CAAC;YACjD,CAAC;YACD,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,iCAAiC,CAC/C,KAAc;IAEd,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAC3B,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QACxB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,6BAA6B,EAClD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,KAAK,GAAG,oCAAoC,KAAK,GAAG,CAAC;QAC3D,IAAI,CAAC,IAAA,wBAAQ,EAAC,IAAI,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,wDAAwD,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,0CAA0C,CAAC,CAAC;QACtE,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,YAAY,GAAG,oBAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9D,qBAAqB,IAAI,YAAY,CAAC;QACtC,IACE,YAAY,GAAG,2CAA2C;YAC1D,qBAAqB,GAAG,qCAAqC,EAC7D,CAAC;YACD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,uDAAuD,CAChE,CAAC;YACJ,CAAC;YACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBACxC,IAAI,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC;gBACrC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAC3B,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,OAAO,KAAK,QAAQ;oBAC3B,CAAC,uCAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAC9C,EACD,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0FAA0F,CACnG,CAAC;YACJ,CAAC;YACD,IACE,IAAI,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI;gBACtC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAC/B,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,mDAAmD,CAC5D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAsB,IAAI,CAAC,IAAI,CAAC;QAC1C,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBACX,CAAC;QACvB,IAAI,mBAAmB,EAAE,CAAC;YACxB,IAAA,yCAA8B,EAC5B,IAAI,CAAC,QAAQ,EACb,mBAAmB,EACnB,GAAG,KAAK,WAAW,CACpB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG;QAChB,QAAQ,EAAE,kBAAkB,CAC1B,KAAK,CAAC,SAAS,CAAC,QAAQ,EACxB,+CAA+C,CAChD;QACD,SAAS,EAAE,kBAAkB,CAC3B,KAAK,CAAC,SAAS,CAAC,SAAS,EACzB,gDAAgD,CACjD;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,kBAAkB,CACjC,KAAK,CAAC,QAAQ,EACd,qCAAqC,CACtC,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAC7C,aAAqB,EACrB,OAAkC,EAClC,OAAkC;IAElC,OAAO,iCAAiC,CACtC,MAAM,oBAAoB,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,CAC5D,CAAC;AACJ,CAAC"}

package/src/blueprints/external-sandbox.d.ts

@@ -0,0 +1,53 @@
+import { type ChildProcessWithoutNullStreams } from 'node:child_process';
+export declare const EXTERNAL_BLUEPRINT_SANDBOX_IMAGE: "node:22-alpine@sha256:16e22a550f3863206a3f701448c45f7912c6896a62de43add43bb9c86130c3e2";
+export declare const EXTERNAL_BLUEPRINT_CONTAINER_AUTO_REMOVE: "--rm";
+export declare const EXTERNAL_BLUEPRINT_SANDBOX_FLAGS: readonly ["--network=none", "--read-only", "--cap-drop=ALL", "--security-opt=no-new-privileges", "--pids-limit=64", "--memory=256m", "--memory-swap=256m", "--cpus=1", "--ulimit=nofile=256:256", "--tmpfs=/tmp:rw,noexec,nosuid,nodev,size=16m,mode=1777"];
+export type ExternalBlueprintSource = 'installed' | 'local';
+export interface ExternalBlueprintIdentity {
+    name: string;
+    version: string;
+}
+export type ExternalBlueprintClosureAuthority = {
+    blueprint: ExternalBlueprintIdentity;
+    source: 'local';
+} | {
+    blueprint: ExternalBlueprintIdentity;
+    lockfileDigest: string;
+    registryIntegrity: string;
+    source: 'installed';
+};
+interface ExternalBlueprintSandboxCommonOptions {
+    diagnostics: 'inherit' | 'suppress';
+    generatorPath: string;
+    packageRoot: string;
+    timeoutMs: number;
+    workspaceRoot: string;
+}
+export type ExternalBlueprintSandboxOptions = ExternalBlueprintSandboxCommonOptions & ExternalBlueprintClosureAuthority;
+export interface StagedExternalBlueprintClosure {
+    containerGeneratorUrl: string;
+    mountRoot: string;
+    remove(): void;
+}
+export declare function externalBlueprintSandboxUserFlag(platform?: NodeJS.Platform, uid?: number, gid?: number): string;
+export declare function externalBlueprintSandboxTimeoutCommand(timeoutMs: number): readonly string[];
+export declare function stageExternalBlueprintClosure(workspaceRoot: string, packageRoot: string, generatorPath: string, authority: ExternalBlueprintClosureAuthority): StagedExternalBlueprintClosure;
+export declare function externalBlueprintDockerEnvironment(docker: string, endpoint: string, privateRoot: string, source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function assertExternalBlueprintDockerSecurityOptions(value: unknown): void;
+export declare function proveExternalBlueprintContainerAbsent(run: (args: readonly string[]) => {
+    status: number | null;
+    stdout: string;
+}, removalTarget: string, filter: string, options?: {
+    attempts?: number;
+    retryDelayMs?: number;
+}): Promise<boolean>;
+export interface CreatedExternalBlueprintContainerExecution {
+    cleanup(): Promise<void>;
+    diagnostics: 'inherit' | 'suppress';
+    input: string;
+    startClient(): ChildProcessWithoutNullStreams;
+    timeoutMs: number;
+}
+export declare function executeCreatedExternalBlueprintContainer(execution: CreatedExternalBlueprintContainerExecution): Promise<unknown>;
+export declare function runExternalBlueprintSandbox(context: unknown, options: ExternalBlueprintSandboxOptions): Promise<unknown>;
+export {};