@mondaydotcomorg/atp-server 0.17.14

package/dist/executor/executor.js

@@ -0,0 +1,452 @@
+import ivm from 'isolated-vm';
+import { ExecutionStatus, ProvenanceMode } from '@mondaydotcomorg/atp-protocol';
+import { log, setPauseForClient, setReplayMode, setProgressCallback, initializeVectorStore, runInExecutionContext, setVectorStoreExecutionId, clearVectorStoreExecutionId, initializeApproval, } from '@mondaydotcomorg/atp-runtime';
+import { nanoid } from 'nanoid';
+import { BOOTSTRAP_CODE } from './bootstrap-generated.js';
+import { SandboxBuilder } from './sandbox-builder.js';
+import { StateManager, CodeInstrumentor } from '../instrumentation/index.js';
+import { ATP_COMPILER_ENABLED } from './constants.js';
+import { transformCodeWithCompiler, getCompilerRuntime } from './compiler-config.js';
+import { setupResumeExecution } from './resume-handler.js';
+import { injectTimerPolyfills, injectSandbox, setupAPINamespace, setupRuntimeNamespace, } from './sandbox-injector.js';
+import { handleExecutionError } from './execution-error-handler.js';
+import { SecurityPolicyEngine, instrumentCode as astInstrumentCode, createTrackingRuntime, setProvenanceExecutionId, clearProvenanceExecutionId, cleanupProvenanceForExecution, captureProvenanceSnapshot, registerProvenanceMetadata, } from '@mondaydotcomorg/atp-provenance';
+import { registerIsolateContext, unregisterIsolateContext, createASTProvenanceChecker, } from './ast-provenance-bridge.js';
+import { instrumentLiteralsFromHints } from '../utils/hint-based-instrumentation.js';
+import { getHintMap } from '../utils/provenance-reattachment.js';
+export class SandboxExecutor {
+    config;
+    sandboxBuilder;
+    approvalHandler;
+    sessionManager;
+    constructor(config, apiGroups = [], approvalHandler, sessionManager) {
+        this.config = config;
+        this.sandboxBuilder = new SandboxBuilder(apiGroups);
+        this.approvalHandler = approvalHandler;
+        this.sessionManager = sessionManager;
+    }
+    async execute(code, config, clientId, resumeData) {
+        const executionId = resumeData?.executionId || nanoid();
+        return runInExecutionContext(executionId, async () => {
+            return await this.executeInContext(executionId, clientId || 'anonymous', code, config, resumeData);
+        });
+    }
+    async executeInContext(executionId, clientId, code, config, resumeData) {
+        const context = {
+            llmCallCount: 0,
+            approvalCallCount: 0,
+            logs: [],
+            startTime: Date.now(),
+            maxLLMCalls: config.maxLLMCalls,
+            executionId,
+            clientId,
+        };
+        setVectorStoreExecutionId(executionId);
+        initializeVectorStore(executionId);
+        const executionLogger = log.child({ executionId, clientId });
+        if (config.provenanceMode && config.provenanceMode !== ProvenanceMode.NONE) {
+            setProvenanceExecutionId(executionId);
+            executionLogger.debug('Provenance execution tracking initialized', { executionId });
+        }
+        if (this.approvalHandler) {
+            initializeApproval(async (request) => {
+                executionLogger.debug('Approval requested', { message: request.message });
+                const response = await this.approvalHandler(request);
+                return response;
+            });
+            executionLogger.debug('Approval handler initialized');
+        }
+        let stateManager = null;
+        if (this.config.cacheProvider) {
+            stateManager = new StateManager(executionId, clientId, this.config.cacheProvider, executionLogger);
+            if (resumeData) {
+                const loaded = await stateManager.loadForResume(executionId);
+                if (loaded) {
+                    executionLogger.info('State loaded for resume', {
+                        executionId,
+                        statementsRestored: stateManager.getStats().statementsExecuted,
+                    });
+                }
+            }
+        }
+        if (config.progressCallback) {
+            setProgressCallback(config.progressCallback);
+        }
+        const callbackHistory = [];
+        if (resumeData) {
+            setupResumeExecution(resumeData, callbackHistory, executionLogger);
+        }
+        if (config.clientServices &&
+            (config.clientServices.hasLLM ||
+                config.clientServices.hasApproval ||
+                config.clientServices.hasEmbedding ||
+                config.clientServices.hasTools)) {
+            setPauseForClient(true);
+            executionLogger.debug('Client services detected, pause mode enabled', {
+                hasLLM: config.clientServices.hasLLM,
+                hasApproval: config.clientServices.hasApproval,
+                hasEmbedding: config.clientServices.hasEmbedding,
+                hasTools: config.clientServices.hasTools,
+            });
+        }
+        const isolate = new ivm.Isolate({
+            memoryLimit: Math.floor(config.maxMemory / (1024 * 1024)),
+        });
+        const memoryBefore = process.memoryUsage().heapUsed;
+        let pauseError = null;
+        const onPauseError = (error) => {
+            pauseError = error;
+        };
+        let codeToExecute = code;
+        let alreadyTransformed = false;
+        try {
+            const ivmContext = await isolate.createContext();
+            const jail = ivmContext.global;
+            await jail.set('global', jail.derefInto());
+            await injectTimerPolyfills(ivmContext);
+            let result = null;
+            const provenanceMode = config.provenanceMode || ProvenanceMode.NONE;
+            let policyEngine;
+            let astTracker;
+            if (provenanceMode !== ProvenanceMode.NONE &&
+                config.securityPolicies &&
+                config.securityPolicies.length > 0) {
+                policyEngine = new SecurityPolicyEngine(config.securityPolicies, executionLogger);
+                if (this.approvalHandler) {
+                    policyEngine.setApprovalCallback(async (message, context) => {
+                        executionLogger.debug('Policy engine requesting approval', { message, context });
+                        const response = await this.approvalHandler({ message, context });
+                        return response.approved === true;
+                    });
+                    executionLogger.debug('Approval callback connected to policy engine');
+                }
+                executionLogger.info('Security policy engine initialized', {
+                    provenanceMode,
+                    policies: config.securityPolicies.map((p) => p.name),
+                    hasApprovalCallback: !!this.approvalHandler,
+                });
+            }
+            if (provenanceMode === ProvenanceMode.AST) {
+                registerIsolateContext(executionId, ivmContext);
+                executionLogger.info('Registered isolate context for AST provenance bridge', {
+                    executionId,
+                });
+                if (policyEngine) {
+                    const astChecker = createASTProvenanceChecker(executionId);
+                    policyEngine.setGetProvenance(astChecker);
+                    executionLogger.info('Set AST provenance checker for policy engine', { executionId });
+                }
+            }
+            if (provenanceMode === ProvenanceMode.AST) {
+                astTracker = createTrackingRuntime();
+                executionLogger.debug('AST provenance tracker initialized');
+            }
+            let clientTools = [];
+            if (this.sessionManager && clientId && clientId !== 'anonymous') {
+                try {
+                    const session = await this.sessionManager.getSession(clientId);
+                    if (session?.tools && session.tools.length > 0) {
+                        clientTools = session.tools;
+                    }
+                }
+                catch (error) { }
+            }
+            const sandbox = this.sandboxBuilder.createSandbox(context, config, executionLogger, executionId, policyEngine, clientTools);
+            if (astTracker) {
+                Object.assign(sandbox, astTracker.runtime);
+                executionLogger.debug('AST tracking runtime injected into sandbox', {
+                    runtimeFunctions: Object.keys(astTracker.runtime),
+                });
+            }
+            if (stateManager) {
+                sandbox.__state = {
+                    capture: async (statementId, getVars) => {
+                        return await stateManager.capture(statementId, getVars);
+                    },
+                    call: async (statementId, fn) => {
+                        return await stateManager.call(statementId, fn);
+                    },
+                    branch: (statementId, condition) => {
+                        return stateManager.branch(statementId, condition);
+                    },
+                };
+            }
+            if (ATP_COMPILER_ENABLED) {
+                sandbox.__runtime = getCompilerRuntime();
+            }
+            let hintMetadata;
+            if (provenanceMode === ProvenanceMode.AST) {
+                hintMetadata = getHintMap(executionId);
+                if (hintMetadata && hintMetadata.size > 0) {
+                    for (const [digest, metadata] of hintMetadata.entries()) {
+                        executionLogger.info('Registering hint by digest', {
+                            digest: digest.substring(0, 20),
+                            hasSource: !!metadata?.source,
+                            sourceType: metadata?.source?.type,
+                            metadataKeys: metadata ? Object.keys(metadata) : [],
+                        });
+                        registerProvenanceMetadata(digest, metadata, executionId);
+                    }
+                    executionLogger.info('Registered hint metadata in host registry', {
+                        hintCount: hintMetadata.size,
+                    });
+                }
+            }
+            await injectSandbox(ivmContext, jail, sandbox, executionLogger, onPauseError, executionId, provenanceMode, hintMetadata);
+            await ivmContext.eval(BOOTSTRAP_CODE);
+            await setupAPINamespace(ivmContext, sandbox, provenanceMode);
+            if (ATP_COMPILER_ENABLED) {
+                await setupRuntimeNamespace(ivmContext, sandbox);
+            }
+            let useCompiler = false;
+            let astInstrumented = false;
+            const isResume = resumeData !== undefined;
+            const isAlreadyWrapped = code.trim().startsWith('(async function');
+            alreadyTransformed = isAlreadyWrapped;
+            if (isAlreadyWrapped && provenanceMode === ProvenanceMode.AST) {
+                astInstrumented = true;
+                executionLogger.info('Code already AST-instrumented (from previous execution)', {
+                    codeLength: code.length,
+                    isResume,
+                });
+            }
+            executionLogger.info('Instrumentation decision', {
+                provenanceMode,
+                useCompiler,
+                alreadyTransformed,
+                isResume,
+                resumeDataPresent: !!resumeData,
+                astCondition: provenanceMode === ProvenanceMode.AST && !useCompiler && !alreadyTransformed,
+                codeLength: code.length,
+                codePreview: code.substring(0, 100),
+            });
+            if (provenanceMode === ProvenanceMode.AST && !useCompiler && !alreadyTransformed) {
+                try {
+                    const instrumentResult = astInstrumentCode(code);
+                    codeToExecute = instrumentResult.code;
+                    astInstrumented = true;
+                    executionLogger.info('Code instrumented for provenance tracking (AST mode)', {
+                        trackingCalls: instrumentResult.metadata.trackingCalls,
+                        instrumentedCodeStart: codeToExecute.substring(0, 150),
+                        instrumentedCodeEnd: codeToExecute.substring(codeToExecute.length - 150),
+                    });
+                    if (hintMetadata && hintMetadata.size > 0) {
+                        const hintInstrumented = instrumentLiteralsFromHints(codeToExecute, hintMetadata);
+                        if (hintInstrumented.taintedCount > 0) {
+                            codeToExecute = hintInstrumented.code;
+                            executionLogger.info('Applied hint instrumentation to AST code', {
+                                taintedCount: hintInstrumented.taintedCount,
+                                hintsAvailable: hintMetadata.size,
+                                finalCodeStart: codeToExecute.substring(0, 200),
+                                finalCodeEnd: codeToExecute.substring(codeToExecute.length - 200),
+                            });
+                        }
+                    }
+                }
+                catch (error) {
+                    executionLogger.warn('Failed to instrument code for provenance, executing without tracking', {
+                        error: error instanceof Error ? error.message : String(error),
+                        codeLength: code.length,
+                        codeStart: code.substring(0, 100),
+                        codeEnd: code.substring(code.length - 100),
+                    });
+                }
+            }
+            if (ATP_COMPILER_ENABLED &&
+                this.config.cacheProvider &&
+                !astInstrumented &&
+                !alreadyTransformed) {
+                const compilerResult = await transformCodeWithCompiler(code, executionId, this.config.cacheProvider, executionLogger);
+                codeToExecute = compilerResult.code;
+                useCompiler = compilerResult.useCompiler;
+            }
+            else if (alreadyTransformed) {
+                codeToExecute = code;
+                useCompiler = true;
+                executionLogger.debug('Using already-transformed code on resume');
+            }
+            if (!useCompiler && !astInstrumented && stateManager) {
+                try {
+                    const instrumentor = new CodeInstrumentor();
+                    const instrumented = instrumentor.instrument(code);
+                    codeToExecute = instrumented.code;
+                    executionLogger.debug('Code instrumented for state capture', {
+                        statements: instrumented.metadata.statements.length,
+                        variables: instrumented.metadata.variables.size,
+                        functions: instrumented.metadata.functions.length,
+                    });
+                }
+                catch (error) {
+                    executionLogger.warn('Failed to instrument code, executing without state capture', {
+                        error,
+                    });
+                }
+            }
+            const wrappedCode = astInstrumented
+                ? `${codeToExecute}()`
+                : `
+		(async function() {
+			${codeToExecute}
+		})();
+	`;
+            executionLogger.debug('Final wrapped code', {
+                astInstrumented,
+                codeLength: wrappedCode.length,
+                codeStart: wrappedCode.substring(0, 200),
+                codeEnd: wrappedCode.substring(wrappedCode.length - 100),
+            });
+            const script = await isolate.compileScript(wrappedCode);
+            result = await script.run(ivmContext, { timeout: config.timeout, promise: true, copy: true });
+            if (pauseError) {
+                throw pauseError;
+            }
+            const memoryAfter = process.memoryUsage().heapUsed;
+            const memoryUsed = Math.max(0, memoryAfter - memoryBefore);
+            if (stateManager) {
+                await stateManager.persist();
+                executionLogger.info('Final state persisted', {
+                    executionId,
+                    statements: stateManager.getStats().statementsExecuted,
+                });
+            }
+            if (provenanceMode === ProvenanceMode.AST && ivmContext) {
+                try {
+                    const trackTest = await ivmContext.eval(`
+						(function() {
+							if (typeof globalThis.__track !== 'function') {
+								return { error: '__track not found', type: typeof globalThis.__track };
+							}
+							try {
+								const testObj = { test: 'value' };
+								const tracked = globalThis.__track(testObj, { type: 'tool', tool: 'test' }, []);
+								const metadata = globalThis.__get_all_metadata ? globalThis.__get_all_metadata() : [];
+								return { success: true, metadataCount: metadata.length, tracked: !!tracked };
+							} catch (e) {
+								return { error: String(e) };
+							}
+						})()
+					`, { copy: true });
+                    executionLogger.info('Track function test', trackTest);
+                    const metadataArray = await ivmContext.eval('globalThis.__get_all_metadata ? globalThis.__get_all_metadata() : []', { copy: true });
+                    executionLogger.info('Extracted AST metadata from isolate', {
+                        entries: Array.isArray(metadataArray) ? metadataArray.length : 0,
+                    });
+                    if (Array.isArray(metadataArray) && metadataArray.length > 0) {
+                        for (const [id, metadata] of metadataArray) {
+                            executionLogger.info('Registering metadata', {
+                                id,
+                                idType: typeof id,
+                                hasMetadata: !!metadata,
+                                metadataKeys: metadata ? Object.keys(metadata) : [],
+                            });
+                            registerProvenanceMetadata(id, metadata, executionId);
+                        }
+                        executionLogger.info('Linked AST metadata to host registry', {
+                            count: metadataArray.length,
+                        });
+                    }
+                }
+                catch (error) {
+                    executionLogger.warn('Failed to extract AST metadata from isolate', {
+                        error: error instanceof Error ? error.message : String(error),
+                        stack: error instanceof Error ? error.stack : undefined,
+                    });
+                }
+            }
+            ivmContext.release();
+            isolate.dispose();
+            const stats = {
+                duration: Date.now() - context.startTime,
+                memoryUsed,
+                llmCallsCount: context.llmCallCount,
+                approvalCallsCount: context.approvalCallCount,
+            };
+            if (stateManager) {
+                const captureStats = stateManager.getStats();
+                stats.statementsExecuted = captureStats.statementsExecuted;
+                stats.statementsCached = captureStats.statementsCached;
+            }
+            let provenanceSnapshot;
+            if (provenanceMode !== ProvenanceMode.NONE) {
+                try {
+                    provenanceSnapshot = captureProvenanceSnapshot(executionId);
+                    executionLogger.debug('Provenance snapshot captured', {
+                        registrySize: provenanceSnapshot?.registry?.length || 0,
+                        primitivesSize: provenanceSnapshot?.primitives?.length || 0,
+                    });
+                }
+                catch (error) {
+                    executionLogger.warn('Failed to capture provenance snapshot', { error });
+                }
+            }
+            return {
+                executionId,
+                status: ExecutionStatus.COMPLETED,
+                result,
+                stats,
+                transformedCode: codeToExecute !== code || alreadyTransformed ? codeToExecute : undefined,
+                provenanceSnapshot,
+            };
+        }
+        catch (error) {
+            if (stateManager) {
+                try {
+                    await stateManager.persist();
+                    executionLogger.debug('State persisted after error for potential resume');
+                }
+                catch (persistError) {
+                    executionLogger.error('Failed to persist state after error', { persistError });
+                }
+            }
+            return handleExecutionError(error, pauseError, context, executionId, callbackHistory, memoryBefore, executionLogger, isolate, codeToExecute !== code || alreadyTransformed ? codeToExecute : undefined);
+        }
+        finally {
+            this.cleanup(executionId, config.provenanceMode);
+        }
+    }
+    cleanProvenanceIds(value) {
+        if (value === null || value === undefined) {
+            return value;
+        }
+        if (typeof value !== 'object') {
+            return value;
+        }
+        if (Array.isArray(value)) {
+            return value.map((item) => this.cleanProvenanceIds(item));
+        }
+        const cleaned = {};
+        const allKeys = Object.getOwnPropertyNames(value);
+        for (const key of allKeys) {
+            if (key !== '__prov_id__') {
+                cleaned[key] = this.cleanProvenanceIds(value[key]);
+            }
+        }
+        return cleaned;
+    }
+    cleanup(executionId, provenanceMode) {
+        try {
+            setPauseForClient(false);
+        }
+        catch (e) { }
+        try {
+            setReplayMode(undefined);
+        }
+        catch (e) { }
+        if (executionId && provenanceMode === ProvenanceMode.AST) {
+            try {
+                unregisterIsolateContext(executionId);
+            }
+            catch (e) { }
+        }
+        if (executionId && provenanceMode && provenanceMode !== ProvenanceMode.NONE) {
+            try {
+                cleanupProvenanceForExecution(executionId);
+                clearProvenanceExecutionId();
+            }
+            catch (e) { }
+        }
+        setProgressCallback(null);
+        clearVectorStoreExecutionId();
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/executor/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/executor/executor.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,aAAa,CAAC;AAO9B,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAChF,OAAO,EACN,GAAG,EACH,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,yBAAyB,EACzB,2BAA2B,EAC3B,kBAAkB,GAClB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGhC,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EACN,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,qBAAqB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EACN,oBAAoB,EACpB,cAAc,IAAI,iBAAiB,EACnC,qBAAqB,EACrB,wBAAwB,EACxB,0BAA0B,EAC1B,6BAA6B,EAG7B,yBAAyB,EACzB,0BAA0B,GAC1B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,EAAE,UAAU,EAA+B,MAAM,qCAAqC,CAAC;AAC9F,MAAM,OAAO,eAAe;IACnB,MAAM,CAAiB;IACvB,cAAc,CAAiB;IAC/B,eAAe,CAAkC;IACjD,cAAc,CAAwB;IAE9C,YACC,MAAsB,EACtB,YAA8B,EAAE,EAChC,eAAgD,EAChD,cAAqC;QAErC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,IAAY,EACZ,MAAuB,EACvB,QAAiB,EACjB,UAIC;QAED,MAAM,WAAW,GAAG,UAAU,EAAE,WAAW,IAAI,MAAM,EAAE,CAAC;QAExD,OAAO,qBAAqB,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE;YACpD,OAAO,MAAM,IAAI,CAAC,gBAAgB,CACjC,WAAW,EACX,QAAQ,IAAI,WAAW,EACvB,IAAI,EACJ,MAAM,EACN,UAAU,CACV,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC7B,WAAmB,EACnB,QAAgB,EAChB,IAAY,EACZ,MAAuB,EACvB,UAGC;QAED,MAAM,OAAO,GAAmB;YAC/B,YAAY,EAAE,CAAC;YACf,iBAAiB,EAAE,CAAC;YACpB,IAAI,EAAE,EAAE;YACR,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW;YACX,QAAQ;SACR,CAAC;QAEF,yBAAyB,CAAC,WAAW,CAAC,CAAC;QACvC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAEnC,MAAM,eAAe,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;QAE7D,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;YAC5E,wBAAwB,CAAC,WAAW,CAAC,CAAC;YACtC,eAAe,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC1B,kBAAkB,CAAC,KAAK,EAAE,OAAyB,EAAE,EAAE;gBACtD,eAAe,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC1E,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAgB,CAAC,OAAO,CAAC,CAAC;gBACtD,OAAO,QAAQ,CAAC;YACjB,CAAC,CAAC,CAAC;YACH,eAAe,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,YAAY,GAAwB,IAAI,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/B,YAAY,GAAG,IAAI,YAAY,CAC9B,WAAW,EACX,QAAQ,EACR,IAAI,CAAC,MAAM,CAAC,aAAa,EACzB,eAAe,CACf,CAAC;YAEF,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;gBAC7D,IAAI,MAAM,EAAE,CAAC;oBACZ,eAAe,CAAC,IAAI,CAAC,yBAAyB,EAAE;wBAC/C,WAAW;wBACX,kBAAkB,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,kBAAkB;qBAC9D,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;QACF,CAAC;QAED,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC7B,mBAAmB,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,eAAe,GAAqB,EAAE,CAAC;QAE7C,IAAI,UAAU,EAAE,CAAC;YAChB,oBAAoB,CAAC,UAAU,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;QACpE,CAAC;QAED,IACC,MAAM,CAAC,cAAc;YACrB,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM;gBAC5B,MAAM,CAAC,cAAc,CAAC,WAAW;gBACjC,MAAM,CAAC,cAAc,CAAC,YAAY;gBAClC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,EAC/B,CAAC;YACF,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACxB,eAAe,CAAC,KAAK,CAAC,8CAA8C,EAAE;gBACrE,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC,MAAM;gBACpC,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,WAAW;gBAC9C,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,YAAY;gBAChD,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC,QAAQ;aACxC,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC;YAC/B,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;SACzD,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;QAEpD,IAAI,UAAU,GAAY,IAAI,CAAC;QAC/B,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,EAAE;YACvC,UAAU,GAAG,KAAK,CAAC;QACpB,CAAC,CAAC;QAEF,IAAI,aAAa,GAAG,IAAI,CAAC;QACzB,IAAI,kBAAkB,GAAG,KAAK,CAAC;QAE/B,IAAI,CAAC;YACJ,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC;YAE/B,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAE3C,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAEvC,IAAI,MAAM,GAAY,IAAI,CAAC;YAE3B,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,cAAc,CAAC,IAAI,CAAC;YACpE,IAAI,YAA8C,CAAC;YACnD,IAAI,UAAgE,CAAC;YAErE,IACC,cAAc,KAAK,cAAc,CAAC,IAAI;gBACtC,MAAM,CAAC,gBAAgB;gBACvB,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EACjC,CAAC;gBACF,YAAY,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;gBAElF,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;oBAC1B,YAAY,CAAC,mBAAmB,CAC/B,KAAK,EAAE,OAAe,EAAE,OAAgC,EAAE,EAAE;wBAC3D,eAAe,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;wBACjF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAgB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;wBACnE,OAAO,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC;oBACnC,CAAC,CACD,CAAC;oBACF,eAAe,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACvE,CAAC;gBAED,eAAe,CAAC,IAAI,CAAC,oCAAoC,EAAE;oBAC1D,cAAc;oBACd,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;oBACpD,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe;iBAC3C,CAAC,CAAC;YACJ,CAAC;YAED,IAAI,cAAc,KAAK,cAAc,CAAC,GAAG,EAAE,CAAC;gBAC3C,sBAAsB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;gBAChD,eAAe,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBAC5E,WAAW;iBACX,CAAC,CAAC;gBAEH,IAAI,YAAY,EAAE,CAAC;oBAClB,MAAM,UAAU,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;oBAC3D,YAAY,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;oBAC1C,eAAe,CAAC,IAAI,CAAC,8CAA8C,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;gBACvF,CAAC;YACF,CAAC;YAED,IAAI,cAAc,KAAK,cAAc,CAAC,GAAG,EAAE,CAAC;gBAC3C,UAAU,GAAG,qBAAqB,EAAE,CAAC;gBACrC,eAAe,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC7D,CAAC;YAED,IAAI,WAAW,GAA2B,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,cAAc,IAAI,QAAQ,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;gBACjE,IAAI,CAAC;oBACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAC/D,IAAI,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAChD,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;oBAC7B,CAAC;gBACF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC,CAAA,CAAC;YACnB,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,CAChD,OAAO,EACP,MAAM,EACN,eAAe,EACf,WAAW,EACX,YAAY,EACZ,WAAW,CACX,CAAC;YAEF,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;gBAC3C,eAAe,CAAC,KAAK,CAAC,4CAA4C,EAAE;oBACnE,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;iBACjD,CAAC,CAAC;YACJ,CAAC;YAED,IAAI,YAAY,EAAE,CAAC;gBAClB,OAAO,CAAC,OAAO,GAAG;oBACjB,OAAO,EAAE,KAAK,EAAE,WAAmB,EAAE,OAAsC,EAAE,EAAE;wBAC9E,OAAO,MAAM,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;oBACzD,CAAC;oBACD,IAAI,EAAE,KAAK,EAAE,WAAmB,EAAE,EAAiB,EAAE,EAAE;wBACtD,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;oBACjD,CAAC;oBACD,MAAM,EAAE,CAAC,WAAmB,EAAE,SAAkB,EAAE,EAAE;wBACnD,OAAO,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;oBACpD,CAAC;iBACD,CAAC;YACH,CAAC;YAED,IAAI,oBAAoB,EAAE,CAAC;gBAC1B,OAAO,CAAC,SAAS,GAAG,kBAAkB,EAAE,CAAC;YAC1C,CAAC;YAED,IAAI,YAA0C,CAAC;YAC/C,IAAI,cAAc,KAAK,cAAc,CAAC,GAAG,EAAE,CAAC;gBAC3C,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;gBAEvC,IAAI,YAAY,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;oBAC3C,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;wBACzD,eAAe,CAAC,IAAI,CAAC,4BAA4B,EAAE;4BAClD,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;4BAC/B,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM;4BAC7B,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI;4BAClC,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;yBACnD,CAAC,CAAC;wBACH,0BAA0B,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;oBAC3D,CAAC;oBACD,eAAe,CAAC,IAAI,CAAC,2CAA2C,EAAE;wBACjE,SAAS,EAAE,YAAY,CAAC,IAAI;qBAC5B,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YAED,MAAM,aAAa,CAClB,UAAU,EACV,IAAI,EACJ,OAAO,EACP,eAAe,EACf,YAAY,EACZ,WAAW,EACX,cAAc,EACd,YAAY,CACZ,CAAC;YAEF,MAAM,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAEtC,MAAM,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;YAE7D,IAAI,oBAAoB,EAAE,CAAC;gBAC1B,MAAM,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,eAAe,GAAG,KAAK,CAAC;YAE5B,MAAM,QAAQ,GAAG,UAAU,KAAK,SAAS,CAAC;YAC1C,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;YACnE,kBAAkB,GAAG,gBAAgB,CAAC;YAEtC,IAAI,gBAAgB,IAAI,cAAc,KAAK,cAAc,CAAC,GAAG,EAAE,CAAC;gBAC/D,eAAe,GAAG,IAAI,CAAC;gBACvB,eAAe,CAAC,IAAI,CAAC,yDAAyD,EAAE;oBAC/E,UAAU,EAAE,IAAI,CAAC,MAAM;oBACvB,QAAQ;iBACR,CAAC,CAAC;YACJ,CAAC;YAED,eAAe,CAAC,IAAI,CAAC,0BAA0B,EAAE;gBAChD,cAAc;gBACd,WAAW;gBACX,kBAAkB;gBAClB,QAAQ;gBACR,iBAAiB,EAAE,CAAC,CAAC,UAAU;gBAC/B,YAAY,EAAE,cAAc,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,kBAAkB;gBAC1F,UAAU,EAAE,IAAI,CAAC,MAAM;gBACvB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;aACnC,CAAC,CAAC;YAEH,IAAI,cAAc,KAAK,cAAc,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAClF,IAAI,CAAC;oBACJ,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;oBACjD,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC;oBACtC,eAAe,GAAG,IAAI,CAAC;oBACvB,eAAe,CAAC,IAAI,CAAC,sDAAsD,EAAE;wBAC5E,aAAa,EAAE,gBAAgB,CAAC,QAAQ,CAAC,aAAa;wBACtD,qBAAqB,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;wBACtD,mBAAmB,EAAE,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC;qBACxE,CAAC,CAAC;oBAEH,IAAI,YAAY,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;wBAC3C,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;wBAClF,IAAI,gBAAgB,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;4BACvC,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC;4BACtC,eAAe,CAAC,IAAI,CAAC,0CAA0C,EAAE;gCAChE,YAAY,EAAE,gBAAgB,CAAC,YAAY;gCAC3C,cAAc,EAAE,YAAY,CAAC,IAAI;gCACjC,cAAc,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gCAC/C,YAAY,EAAE,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC;6BACjE,CAAC,CAAC;wBACJ,CAAC;oBACF,CAAC;gBACF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,eAAe,CAAC,IAAI,CACnB,sEAAsE,EACtE;wBACC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wBAC7D,UAAU,EAAE,IAAI,CAAC,MAAM;wBACvB,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;wBACjC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;qBAC1C,CACD,CAAC;gBACH,CAAC;YACF,CAAC;YAED,IACC,oBAAoB;gBACpB,IAAI,CAAC,MAAM,CAAC,aAAa;gBACzB,CAAC,eAAe;gBAChB,CAAC,kBAAkB,EAClB,CAAC;gBACF,MAAM,cAAc,GAAG,MAAM,yBAAyB,CACrD,IAAI,EACJ,WAAW,EACX,IAAI,CAAC,MAAM,CAAC,aAAa,EACzB,eAAe,CACf,CAAC;gBACF,aAAa,GAAG,cAAc,CAAC,IAAI,CAAC;gBACpC,WAAW,GAAG,cAAc,CAAC,WAAW,CAAC;YAC1C,CAAC;iBAAM,IAAI,kBAAkB,EAAE,CAAC;gBAC/B,aAAa,GAAG,IAAI,CAAC;gBACrB,WAAW,GAAG,IAAI,CAAC;gBACnB,eAAe,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACnE,CAAC;YAED,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,IAAI,YAAY,EAAE,CAAC;gBACtD,IAAI,CAAC;oBACJ,MAAM,YAAY,GAAG,IAAI,gBAAgB,EAAE,CAAC;oBAC5C,MAAM,YAAY,GAAG,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBACnD,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC;oBAClC,eAAe,CAAC,KAAK,CAAC,qCAAqC,EAAE;wBAC5D,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM;wBACnD,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI;wBAC/C,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM;qBACjD,CAAC,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,eAAe,CAAC,IAAI,CAAC,4DAA4D,EAAE;wBAClF,KAAK;qBACL,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YAED,MAAM,WAAW,GAAG,eAAe;gBAClC,CAAC,CAAC,GAAG,aAAa,IAAI;gBACtB,CAAC,CAAC;;KAED,aAAa;;EAEhB,CAAC;YAEA,eAAe,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBAC3C,eAAe;gBACf,UAAU,EAAE,WAAW,CAAC,MAAM;gBAC9B,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;gBACxC,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,CAAC;aACxD,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;YACxD,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAE9F,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,UAAU,CAAC;YAClB,CAAC;YAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC;YACnD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,YAAY,CAAC,CAAC;YAE3D,IAAI,YAAY,EAAE,CAAC;gBAClB,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;gBAC7B,eAAe,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC7C,WAAW;oBACX,UAAU,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,kBAAkB;iBACtD,CAAC,CAAC;YACJ,CAAC;YAED,IAAI,cAAc,KAAK,cAAc,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC;gBACzD,IAAI,CAAC;oBACJ,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CACtC;;;;;;;;;;;;;;MAcA,EACA,EAAE,IAAI,EAAE,IAAI,EAAE,CACd,CAAC;oBACF,eAAe,CAAC,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC;oBAEvD,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,IAAI,CAC1C,sEAAsE,EACtE,EAAE,IAAI,EAAE,IAAI,EAAE,CACd,CAAC;oBACF,eAAe,CAAC,IAAI,CAAC,qCAAqC,EAAE;wBAC3D,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;qBAChE,CAAC,CAAC;oBAEH,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC9D,KAAK,MAAM,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC;4BAC5C,eAAe,CAAC,IAAI,CAAC,sBAAsB,EAAE;gCAC5C,EAAE;gCACF,MAAM,EAAE,OAAO,EAAE;gCACjB,WAAW,EAAE,CAAC,CAAC,QAAQ;gCACvB,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;6BACnD,CAAC,CAAC;4BACH,0BAA0B,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;wBACvD,CAAC;wBAED,eAAe,CAAC,IAAI,CAAC,sCAAsC,EAAE;4BAC5D,KAAK,EAAE,aAAa,CAAC,MAAM;yBAC3B,CAAC,CAAC;oBACJ,CAAC;gBACF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,eAAe,CAAC,IAAI,CAAC,6CAA6C,EAAE;wBACnE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;wBAC7D,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;qBACvD,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YAED,UAAU,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,CAAC,OAAO,EAAE,CAAC;YAElB,MAAM,KAAK,GAAQ;gBAClB,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS;gBACxC,UAAU;gBACV,aAAa,EAAE,OAAO,CAAC,YAAY;gBACnC,kBAAkB,EAAE,OAAO,CAAC,iBAAiB;aAC7C,CAAC;YAEF,IAAI,YAAY,EAAE,CAAC;gBAClB,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;gBAC7C,KAAK,CAAC,kBAAkB,GAAG,YAAY,CAAC,kBAAkB,CAAC;gBAC3D,KAAK,CAAC,gBAAgB,GAAG,YAAY,CAAC,gBAAgB,CAAC;YACxD,CAAC;YAED,IAAI,kBAA2B,CAAC;YAChC,IAAI,cAAc,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC;oBACJ,kBAAkB,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;oBAC5D,eAAe,CAAC,KAAK,CAAC,8BAA8B,EAAE;wBACrD,YAAY,EAAG,kBAA0B,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC;wBAChE,cAAc,EAAG,kBAA0B,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;qBACpE,CAAC,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,eAAe,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1E,CAAC;YACF,CAAC;YAED,OAAO;gBACN,WAAW;gBACX,MAAM,EAAE,eAAe,CAAC,SAAS;gBACjC,MAAM;gBACN,KAAK;gBACL,eAAe,EAAE,aAAa,KAAK,IAAI,IAAI,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;gBACzF,kBAAkB;aAClB,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACJ,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;oBAC7B,eAAe,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBAC3E,CAAC;gBAAC,OAAO,YAAY,EAAE,CAAC;oBACvB,eAAe,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBAChF,CAAC;YACF,CAAC;YAED,OAAO,oBAAoB,CAC1B,KAAK,EACL,UAAU,EACV,OAAO,EACP,WAAW,EACX,eAAe,EACf,YAAY,EACZ,eAAe,EACf,OAAO,EACP,aAAa,KAAK,IAAI,IAAI,kBAAkB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CACxE,CAAC;QACH,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QAClD,CAAC;IACF,CAAC;IAEO,kBAAkB,CAAC,KAAc;QACxC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC;QACd,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC3B,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC;YACjF,CAAC;QACF,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAEO,OAAO,CAAC,WAAoB,EAAE,cAAuB;QAC5D,IAAI,CAAC;YACJ,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC;QACd,IAAI,CAAC;YACJ,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC;QAEd,IAAI,WAAW,IAAI,cAAc,KAAK,cAAc,CAAC,GAAG,EAAE,CAAC;YAC1D,IAAI,CAAC;gBACJ,wBAAwB,CAAC,WAAW,CAAC,CAAC;YACvC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC;QACf,CAAC;QAED,IAAI,WAAW,IAAI,cAAc,IAAI,cAAc,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;YAC7E,IAAI,CAAC;gBACJ,6BAA6B,CAAC,WAAW,CAAC,CAAC;gBAC3C,0BAA0B,EAAE,CAAC;YAC9B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC,CAAA,CAAC;QACf,CAAC;QACD,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE1B,2BAA2B,EAAE,CAAC;IAC/B,CAAC;CACD"}

package/dist/executor/index.d.ts

@@ -0,0 +1,4 @@
+export { SandboxExecutor } from './executor.js';
+export type { RuntimeContext, ExecutorConfig } from './types.js';
+export { categorizeError } from './error-handler.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/executor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/executor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/executor/index.js

@@ -0,0 +1,3 @@
+export { SandboxExecutor } from './executor.js';
+export { categorizeError } from './error-handler.js';
+//# sourceMappingURL=index.js.map

package/dist/executor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/executor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/executor/resume-handler.d.ts

@@ -0,0 +1,9 @@
+import type { Logger } from '@mondaydotcomorg/atp-runtime';
+import type { CallbackRecord } from '../execution-state/index.js';
+export interface ResumeData {
+    callbackHistory: CallbackRecord[];
+    newCallbackResult: unknown;
+    executionId?: string;
+}
+export declare function setupResumeExecution(resumeData: ResumeData, callbackHistory: CallbackRecord[], executionLogger: Logger): void;
+//# sourceMappingURL=resume-handler.d.ts.map

package/dist/executor/resume-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-handler.d.ts","sourceRoot":"","sources":["../../src/executor/resume-handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAE3D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE,MAAM,WAAW,UAAU;IAC1B,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,oBAAoB,CACnC,UAAU,EAAE,UAAU,EACtB,eAAe,EAAE,cAAc,EAAE,EACjC,eAAe,EAAE,MAAM,GACrB,IAAI,CAwBN"}

package/dist/executor/resume-handler.js

@@ -0,0 +1,22 @@
+import { setReplayMode } from '@mondaydotcomorg/atp-runtime';
+export function setupResumeExecution(resumeData, callbackHistory, executionLogger) {
+    executionLogger.info('Resuming execution with callback history', {
+        historyLength: resumeData.callbackHistory.length,
+    });
+    const replayMap = new Map();
+    for (const record of resumeData.callbackHistory) {
+        if (record.result !== undefined) {
+            replayMap.set(record.sequenceNumber, record.result);
+        }
+    }
+    const lastCallback = resumeData.callbackHistory[resumeData.callbackHistory.length - 1];
+    if (lastCallback) {
+        replayMap.set(lastCallback.sequenceNumber, resumeData.newCallbackResult);
+    }
+    setReplayMode(replayMap);
+    callbackHistory.push(...resumeData.callbackHistory);
+    executionLogger.debug('Replay map configured', {
+        replayEntries: replayMap.size,
+    });
+}
+//# sourceMappingURL=resume-handler.js.map

package/dist/executor/resume-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume-handler.js","sourceRoot":"","sources":["../../src/executor/resume-handler.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAS7D,MAAM,UAAU,oBAAoB,CACnC,UAAsB,EACtB,eAAiC,EACjC,eAAuB;IAEvB,eAAe,CAAC,IAAI,CAAC,0CAA0C,EAAE;QAChE,aAAa,EAAE,UAAU,CAAC,eAAe,CAAC,MAAM;KAChD,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,GAAG,EAAmB,CAAC;IAE7C,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;IACF,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,eAAe,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvF,IAAI,YAAY,EAAE,CAAC;QAClB,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC1E,CAAC;IAED,aAAa,CAAC,SAAS,CAAC,CAAC;IACzB,eAAe,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAEpD,eAAe,CAAC,KAAK,CAAC,uBAAuB,EAAE;QAC9C,aAAa,EAAE,SAAS,CAAC,IAAI;KAC7B,CAAC,CAAC;AACJ,CAAC"}

package/dist/executor/sandbox-builder.d.ts

@@ -0,0 +1,29 @@
+import type { ExecutionConfig, APIGroupConfig, ClientToolDefinition } from '@mondaydotcomorg/atp-protocol';
+import { log } from '@mondaydotcomorg/atp-runtime';
+import type { RuntimeContext } from './types.js';
+import { SecurityPolicyEngine } from '@mondaydotcomorg/atp-provenance';
+export declare class SandboxBuilder {
+    private apiGroups;
+    private policyEngine;
+    constructor(apiGroups: APIGroupConfig[]);
+    createSandbox(context: RuntimeContext, config: ExecutionConfig, logger: ReturnType<typeof log.child>, executionId: string, policyEngine?: SecurityPolicyEngine, clientTools?: ClientToolDefinition[]): Record<string, unknown>;
+    private createAPIFunctions;
+    /**
+     * Creates API functions combining both server tools and client tools
+     */
+    private createAPIFunctionsWithClientTools;
+    /**
+     * Creates API functions for client-provided tools that trigger pause/resume
+     */
+    private createClientToolFunctions;
+    /**
+     * Get or create nested group object from hierarchical path.
+     * Supports hierarchical group names like "github/readOnly/repos"
+     * Creates nested structure: api.github.readOnly.repos
+     * @param api - Root API object
+     * @param groupName - Group name (may contain / for hierarchy)
+     * @returns The deepest nested object for the group
+     */
+    private getOrCreateNestedGroup;
+}
+//# sourceMappingURL=sandbox-builder.d.ts.map

package/dist/executor/sandbox-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-builder.d.ts","sourceRoot":"","sources":["../../src/executor/sandbox-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,eAAe,EACf,cAAc,EACd,oBAAoB,EAEpB,MAAM,+BAA+B,CAAC;AAQvC,OAAO,EAGN,GAAG,EAWH,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAGN,oBAAoB,EAGpB,MAAM,iCAAiC,CAAC;AAKzC,qBAAa,cAAc;IAGd,OAAO,CAAC,SAAS;IAF7B,OAAO,CAAC,YAAY,CAAqC;gBAErC,SAAS,EAAE,cAAc,EAAE;IAE/C,aAAa,CACZ,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,UAAU,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,EACpC,WAAW,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,oBAAoB,EACnC,WAAW,CAAC,EAAE,oBAAoB,EAAE,GAClC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAkN1B,OAAO,CAAC,kBAAkB;IAwQ1B;;OAEG;IACH,OAAO,CAAC,iCAAiC;IA4BzC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IA4FjC;;;;;;;OAOG;IACH,OAAO,CAAC,sBAAsB;CAuB9B"}