@mondaydotcomorg/atp-server 0.17.14

package/dist/executor/sandbox-builder.js

@@ -0,0 +1,538 @@
+import { ToolOperationType, ToolSensitivityLevel, ProvenanceMode, CallbackType, ToolOperation, } from '@mondaydotcomorg/atp-protocol';
+import { llm, cache, approval, embedding, setCurrentExecutionId, clearCurrentExecutionId, setVectorStoreExecutionId, clearVectorStoreExecutionId, isPauseError, pauseForCallback, nextSequenceNumber, getCachedResult, } from '@mondaydotcomorg/atp-runtime';
+import { createProvenanceProxy, getProvenance, ProvenanceSource, registerProvenanceMetadata, } from '@mondaydotcomorg/atp-provenance';
+import { getHintMap, reattachProvenanceFromHints } from '../utils/provenance-reattachment.js';
+export class SandboxBuilder {
+    apiGroups;
+    policyEngine = null;
+    constructor(apiGroups) {
+        this.apiGroups = apiGroups;
+    }
+    createSandbox(context, config, logger, executionId, policyEngine, clientTools) {
+        this.policyEngine = policyEngine || null;
+        const clientId = context.clientId || 'default';
+        const sandbox = {
+            module: { exports: {} },
+            exports: {},
+            require: () => {
+                throw new Error('require() is not allowed in sandbox');
+            },
+            atp: {
+                approval: {
+                    request: async (message, approvalContext) => {
+                        context.approvalCallCount++;
+                        logger.debug('Approval request from sandbox', { message });
+                        setCurrentExecutionId(executionId);
+                        try {
+                            return await approval.request(message, approvalContext);
+                        }
+                        finally {
+                            clearCurrentExecutionId();
+                        }
+                    },
+                },
+                llm: {
+                    call: async (options) => {
+                        if (!config.allowLLMCalls) {
+                            throw new Error('LLM calls are not allowed in this execution');
+                        }
+                        if (++context.llmCallCount > config.maxLLMCalls) {
+                            throw new Error(`Exceeded max LLM calls: ${config.maxLLMCalls}`);
+                        }
+                        logger.debug('LLM call from sandbox', {
+                            promptLength: options.prompt.length,
+                            model: options.model,
+                        });
+                        if (config.customLLMHandler) {
+                            return await config.customLLMHandler(options.prompt, options);
+                        }
+                        setCurrentExecutionId(executionId);
+                        try {
+                            return await llm.call(options);
+                        }
+                        finally {
+                            clearCurrentExecutionId();
+                        }
+                    },
+                    extract: async (options) => {
+                        if (!config.allowLLMCalls) {
+                            throw new Error('LLM calls are not allowed in this execution');
+                        }
+                        if (++context.llmCallCount > config.maxLLMCalls) {
+                            throw new Error(`Exceeded max LLM calls: ${config.maxLLMCalls}`);
+                        }
+                        logger.debug('LLM extract from sandbox');
+                        setCurrentExecutionId(executionId);
+                        try {
+                            return await llm.extract(options);
+                        }
+                        finally {
+                            clearCurrentExecutionId();
+                        }
+                    },
+                    classify: async (options) => {
+                        if (!config.allowLLMCalls) {
+                            throw new Error('LLM calls are not allowed in this execution');
+                        }
+                        if (++context.llmCallCount > config.maxLLMCalls) {
+                            throw new Error(`Exceeded max LLM calls: ${config.maxLLMCalls}`);
+                        }
+                        logger.debug('LLM classify from sandbox');
+                        setCurrentExecutionId(executionId);
+                        try {
+                            return await llm.classify(options);
+                        }
+                        finally {
+                            clearCurrentExecutionId();
+                        }
+                    },
+                },
+                cache: {
+                    get: async (key) => {
+                        const scopedKey = `client:${clientId}:cache:${key}`;
+                        setCurrentExecutionId(executionId);
+                        try {
+                            return await cache.get(scopedKey);
+                        }
+                        finally {
+                            clearCurrentExecutionId();
+                        }
+                    },
+                    set: async (key, value, ttl) => {
+                        const scopedKey = `client:${clientId}:cache:${key}`;
+                        setCurrentExecutionId(executionId);
+                        try {
+                            return await cache.set(scopedKey, value, ttl);
+                        }
+                        finally {
+                            clearCurrentExecutionId();
+                        }
+                    },
+                    delete: async (key) => {
+                        const scopedKey = `client:${clientId}:cache:${key}`;
+                        setCurrentExecutionId(executionId);
+                        try {
+                            return await cache.delete(scopedKey);
+                        }
+                        finally {
+                            clearCurrentExecutionId();
+                        }
+                    },
+                    has: async (key) => {
+                        const scopedKey = `client:${clientId}:cache:${key}`;
+                        setCurrentExecutionId(executionId);
+                        try {
+                            return await cache.has(scopedKey);
+                        }
+                        finally {
+                            clearCurrentExecutionId();
+                        }
+                    },
+                },
+                embedding: {
+                    embed: async (text, options) => {
+                        logger.debug('Embedding request from sandbox', { textLength: text.length });
+                        setCurrentExecutionId(executionId);
+                        setVectorStoreExecutionId(executionId);
+                        try {
+                            return await embedding.embed(text, options);
+                        }
+                        finally {
+                            clearCurrentExecutionId();
+                            clearVectorStoreExecutionId();
+                        }
+                    },
+                    search: async (query, options) => {
+                        logger.debug('Embedding search from sandbox', { query });
+                        setCurrentExecutionId(executionId);
+                        setVectorStoreExecutionId(executionId);
+                        try {
+                            return await embedding.search(query, options);
+                        }
+                        finally {
+                            clearCurrentExecutionId();
+                            clearVectorStoreExecutionId();
+                        }
+                    },
+                },
+                progress: {
+                    report: (message, fraction) => {
+                        logger.debug('Progress report from sandbox', { message, fraction });
+                        if (config.progressCallback) {
+                            config.progressCallback(message, fraction);
+                        }
+                    },
+                },
+            },
+            api: this.createAPIFunctionsWithClientTools(logger, executionId, config, clientTools),
+            console: {
+                log: (...args) => {
+                    const message = args.join(' ');
+                    logger.debug(`[Sandbox console] ${message}`);
+                    context.logs.push(`LOG: ${message}`);
+                },
+                error: (...args) => {
+                    const message = args.join(' ');
+                    logger.error(`[Sandbox console] ${message}`);
+                    context.logs.push(`ERROR: ${message}`);
+                },
+                warn: (...args) => {
+                    const message = args.join(' ');
+                    logger.warn(`[Sandbox console] ${message}`);
+                    context.logs.push(`WARN: ${message}`);
+                },
+            },
+            JSON: JSON,
+            Math: Math,
+            Date: Date,
+            Array: Array,
+            Object: Object,
+            String: String,
+            Number: Number,
+            Boolean: Boolean,
+            Promise: Promise,
+            setTimeout: setTimeout,
+            setInterval: setInterval,
+            clearTimeout: clearTimeout,
+            clearInterval: clearInterval,
+        };
+        if (config.provenanceMode === ProvenanceMode.PROXY ||
+            config.provenanceMode === ProvenanceMode.AST) {
+            sandbox.__getProvenance = getProvenance;
+        }
+        return sandbox;
+    }
+    createAPIFunctions(logger, executionId, config) {
+        const api = {};
+        for (const group of this.apiGroups) {
+            if (group.functions) {
+                const groupObj = this.getOrCreateNestedGroup(api, group.name);
+                for (const func of group.functions) {
+                    const handler = func.handler;
+                    const metadata = func.metadata;
+                    groupObj[func.name] = async (input) => {
+                        logger.info(`API function called: ${group.name}.${func.name}`, {
+                            inputType: typeof input,
+                            hasMetadata: !!metadata,
+                            provenanceMode: config.provenanceMode || ProvenanceMode.NONE,
+                            inputKeys: input && typeof input === 'object' ? Object.keys(input) : [],
+                            inputPreview: JSON.stringify(input)?.substring(0, 200) || 'undefined',
+                        });
+                        // In AST mode, recursively unwrap tainted primitives and register their provenance
+                        if (config.provenanceMode === ProvenanceMode.AST &&
+                            input &&
+                            typeof input === 'object') {
+                            logger.info('Checking for tainted values to unwrap', {
+                                tool: func.name,
+                                inputKeys: Object.keys(input),
+                            });
+                            function unwrapTaintedValues(obj, visited = new WeakSet()) {
+                                if (obj === null || obj === undefined)
+                                    return obj;
+                                // Check if this is a wrapped tainted primitive
+                                if (typeof obj === 'object' && '__tainted_value' in obj && '__prov_meta' in obj) {
+                                    const taintedVal = obj.__tainted_value;
+                                    const provMeta = obj.__prov_meta;
+                                    logger.info('FOUND wrapped tainted value!', {
+                                        taintedValType: typeof taintedVal,
+                                        taintedValIsString: typeof taintedVal === 'string',
+                                        taintedValIsNumber: typeof taintedVal === 'number',
+                                        taintedValIsObject: typeof taintedVal === 'object',
+                                        valuePreview: typeof taintedVal === 'string' || typeof taintedVal === 'number'
+                                            ? String(taintedVal).substring(0, 30)
+                                            : '[OBJECT: ' + Object.keys(taintedVal || {}).join(',') + ']',
+                                        hasProvMeta: !!provMeta,
+                                    });
+                                    // Register the provenance so host-side checks can find it
+                                    if (provMeta && provMeta.source) {
+                                        registerProvenanceMetadata(`tainted:${String(taintedVal)}`, {
+                                            id: `tainted:${String(taintedVal)}`,
+                                            source: provMeta.source,
+                                            readers: provMeta.readers || { type: 'public' },
+                                            dependencies: provMeta.deps || provMeta.dependencies || [],
+                                        }, executionId);
+                                        logger.info('Unwrapped and registered tainted primitive', {
+                                            tool: func.name,
+                                            valuePreview: String(taintedVal).substring(0, 30),
+                                            source: provMeta.source?.type,
+                                            executionId: executionId,
+                                        });
+                                    }
+                                    // Recursively unwrap in case taintedVal contains more wrapped values
+                                    return unwrapTaintedValues(taintedVal, visited);
+                                }
+                                // Recursively unwrap objects/arrays
+                                if (typeof obj === 'object') {
+                                    if (visited.has(obj))
+                                        return obj;
+                                    visited.add(obj);
+                                    if (Array.isArray(obj)) {
+                                        return obj.map((item) => unwrapTaintedValues(item, visited));
+                                    }
+                                    else {
+                                        const unwrapped = {};
+                                        for (const [key, value] of Object.entries(obj)) {
+                                            unwrapped[key] = unwrapTaintedValues(value, visited);
+                                        }
+                                        return unwrapped;
+                                    }
+                                }
+                                return obj;
+                            }
+                            input = unwrapTaintedValues(input);
+                            logger.info('After unwrapping', {
+                                tool: func.name,
+                                inputPreview: JSON.stringify(input).substring(0, 200),
+                            });
+                        }
+                        // Re-attach provenance from hints before policy checks
+                        const hintMap = getHintMap(executionId);
+                        if (hintMap && hintMap.size > 0 && input && typeof input === 'object') {
+                            try {
+                                reattachProvenanceFromHints(input, hintMap);
+                                logger.debug('Provenance re-attached from hints', {
+                                    tool: func.name,
+                                    group: group.name,
+                                    hintsAvailable: hintMap.size,
+                                });
+                            }
+                            catch (error) {
+                                logger.warn('Failed to re-attach provenance from hints', { error });
+                            }
+                        }
+                        if (this.policyEngine &&
+                            config.provenanceMode &&
+                            config.provenanceMode !== ProvenanceMode.NONE) {
+                            logger.debug('Checking security policies', {
+                                tool: func.name,
+                                group: group.name,
+                                hasPolicyEngine: !!this.policyEngine,
+                                provenanceMode: config.provenanceMode,
+                            });
+                            try {
+                                await this.policyEngine.checkTool(func.name, group.name, input);
+                                logger.debug('Security policies passed', { tool: func.name, group: group.name });
+                            }
+                            catch (error) {
+                                logger.error('Security policy denied tool execution', {
+                                    tool: func.name,
+                                    group: group.name,
+                                    error: error instanceof Error ? error.message : String(error),
+                                });
+                                throw error;
+                            }
+                        }
+                        const isDestructive = metadata?.operationType === ToolOperationType.DESTRUCTIVE;
+                        const isSensitive = metadata?.sensitivityLevel === ToolSensitivityLevel.SENSITIVE;
+                        const needsApproval = metadata?.requiresApproval || isDestructive || isSensitive;
+                        if (needsApproval) {
+                            let operationDescription = 'operation';
+                            if (isDestructive)
+                                operationDescription = 'destructive operation';
+                            else if (isSensitive)
+                                operationDescription = 'sensitive operation';
+                            const approvalMessage = `Approve ${operationDescription}: ${func.name}`;
+                            setCurrentExecutionId(executionId);
+                            try {
+                                const approvalResult = await approval.request(approvalMessage, {
+                                    tool: func.name,
+                                    group: group.name,
+                                    params: input,
+                                    metadata: metadata,
+                                });
+                                if (!approvalResult || !approvalResult.approved) {
+                                    throw new Error(`Operation ${func.name} denied by user`);
+                                }
+                                logger.info(`Tool approved by user: ${group.name}.${func.name}`, {
+                                    operationType: metadata?.operationType,
+                                    sensitivityLevel: metadata?.sensitivityLevel,
+                                });
+                            }
+                            catch (error) {
+                                clearCurrentExecutionId();
+                                if (isPauseError(error)) {
+                                    throw error;
+                                }
+                                throw error;
+                            }
+                            clearCurrentExecutionId();
+                        }
+                        const result = await handler(input);
+                        if (config.provenanceMode === ProvenanceMode.PROXY) {
+                            let readers = { type: 'public' };
+                            if (metadata?.sensitivityLevel === ToolSensitivityLevel.SENSITIVE ||
+                                metadata?.operationType === ToolOperationType.DESTRUCTIVE) {
+                                const inputEmail = input?.email || input?.user || input?.userId;
+                                if (inputEmail && typeof inputEmail === 'string') {
+                                    readers = {
+                                        type: 'restricted',
+                                        readers: [inputEmail],
+                                    };
+                                }
+                                else {
+                                    readers = {
+                                        type: 'restricted',
+                                        readers: [`tool:${func.name}`],
+                                    };
+                                }
+                            }
+                            return createProvenanceProxy(result, {
+                                type: ProvenanceSource.TOOL,
+                                toolName: func.name,
+                                apiGroup: group.name,
+                                timestamp: Date.now(),
+                            }, readers);
+                        }
+                        else if (config.provenanceMode === ProvenanceMode.AST) {
+                            let readers = { type: 'public' };
+                            if (metadata?.sensitivityLevel === ToolSensitivityLevel.SENSITIVE ||
+                                metadata?.operationType === ToolOperationType.DESTRUCTIVE) {
+                                const inputEmail = input?.email || input?.user || input?.userId;
+                                if (inputEmail && typeof inputEmail === 'string') {
+                                    readers = {
+                                        type: 'restricted',
+                                        readers: [inputEmail],
+                                    };
+                                }
+                                else {
+                                    readers = {
+                                        type: 'restricted',
+                                        readers: [`tool:${func.name}`],
+                                    };
+                                }
+                            }
+                            return createProvenanceProxy(result, {
+                                type: ProvenanceSource.TOOL,
+                                toolName: func.name,
+                                apiGroup: group.name,
+                                timestamp: Date.now(),
+                            }, readers);
+                        }
+                        return result;
+                    };
+                }
+            }
+        }
+        return api;
+    }
+    /**
+     * Creates API functions combining both server tools and client tools
+     */
+    createAPIFunctionsWithClientTools(logger, executionId, config, clientTools) {
+        const api = this.createAPIFunctions(logger, executionId, config);
+        if (clientTools && clientTools.length > 0) {
+            const clientToolFunctions = this.createClientToolFunctions(clientTools, logger, executionId, config);
+            for (const [namespace, functions] of Object.entries(clientToolFunctions)) {
+                if (api[namespace]) {
+                    Object.assign(api[namespace], functions);
+                }
+                else {
+                    api[namespace] = functions;
+                }
+            }
+        }
+        return api;
+    }
+    /**
+     * Creates API functions for client-provided tools that trigger pause/resume
+     */
+    createClientToolFunctions(clientTools, logger, executionId, config) {
+        const api = {};
+        for (const tool of clientTools) {
+            const namespace = tool.namespace || 'client';
+            if (!api[namespace]) {
+                api[namespace] = {};
+            }
+            const toolName = tool.name;
+            const metadata = tool.metadata;
+            const provenanceMode = config.provenanceMode || ProvenanceMode.NONE;
+            const policyEngine = this.policyEngine;
+            api[namespace][toolName] = async (input) => {
+                setCurrentExecutionId(executionId);
+                try {
+                    const currentSequence = nextSequenceNumber();
+                    const cachedResult = getCachedResult(currentSequence);
+                    if (cachedResult !== undefined) {
+                        if (cachedResult && typeof cachedResult === 'object' && cachedResult.__error) {
+                            throw new Error(cachedResult.message);
+                        }
+                        return cachedResult;
+                    }
+                    // Re-attach provenance from hints before policy checks
+                    const hintMap = getHintMap(executionId);
+                    if (hintMap && hintMap.size > 0 && input && typeof input === 'object') {
+                        try {
+                            reattachProvenanceFromHints(input, hintMap);
+                        }
+                        catch (error) {
+                            // Silent fail - re-attachment is best-effort
+                        }
+                    }
+                    if (policyEngine && provenanceMode !== ProvenanceMode.NONE) {
+                        await policyEngine.checkTool(toolName, namespace, input);
+                    }
+                    if (metadata) {
+                        const isDestructive = metadata.operationType === ToolOperationType.DESTRUCTIVE;
+                        const isSensitive = metadata.sensitivityLevel === ToolSensitivityLevel.SENSITIVE;
+                        const needsApproval = metadata.requiresApproval || isDestructive || isSensitive;
+                        if (needsApproval) {
+                            const operationDescription = isDestructive
+                                ? 'destructive operation'
+                                : isSensitive
+                                    ? 'sensitive operation'
+                                    : 'operation';
+                            const approvalMessage = `Approve client tool ${operationDescription}: ${toolName}`;
+                            const approvalResult = await approval.request(approvalMessage, {
+                                tool: toolName,
+                                namespace,
+                                params: input,
+                                metadata: metadata,
+                                isClientTool: true,
+                            });
+                            if (!approvalResult || !approvalResult.approved) {
+                                throw new Error(`Client tool ${toolName} denied by user`);
+                            }
+                        }
+                    }
+                    pauseForCallback(CallbackType.TOOL, ToolOperation.CALL, {
+                        toolName,
+                        namespace,
+                        input,
+                        sequenceNumber: currentSequence,
+                    });
+                    throw new Error('Tool execution should have paused');
+                }
+                finally {
+                    clearCurrentExecutionId();
+                }
+            };
+        }
+        return api;
+    }
+    /**
+     * Get or create nested group object from hierarchical path.
+     * Supports hierarchical group names like "github/readOnly/repos"
+     * Creates nested structure: api.github.readOnly.repos
+     * @param api - Root API object
+     * @param groupName - Group name (may contain / for hierarchy)
+     * @returns The deepest nested object for the group
+     */
+    getOrCreateNestedGroup(api, groupName) {
+        if (!groupName.includes('/')) {
+            if (!api[groupName]) {
+                api[groupName] = {};
+            }
+            return api[groupName];
+        }
+        const parts = groupName.split('/');
+        let current = api;
+        for (const part of parts) {
+            if (!current[part]) {
+                current[part] = {};
+            }
+            current = current[part];
+        }
+        return current;
+    }
+}
+//# sourceMappingURL=sandbox-builder.js.map

package/dist/executor/sandbox-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-builder.js","sourceRoot":"","sources":["../../src/executor/sandbox-builder.ts"],"names":[],"mappings":"AAMA,OAAO,EACN,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,aAAa,GACb,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,GAAG,EACH,KAAK,EAEL,QAAQ,EACR,SAAS,EACT,qBAAqB,EACrB,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,YAAY,EACZ,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,GACf,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EACN,qBAAqB,EACrB,aAAa,EAEb,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAG9F,MAAM,OAAO,cAAc;IAGN;IAFZ,YAAY,GAAgC,IAAI,CAAC;IAEzD,YAAoB,SAA2B;QAA3B,cAAS,GAAT,SAAS,CAAkB;IAAG,CAAC;IAEnD,aAAa,CACZ,OAAuB,EACvB,MAAuB,EACvB,MAAoC,EACpC,WAAmB,EACnB,YAAmC,EACnC,WAAoC;QAEpC,IAAI,CAAC,YAAY,GAAG,YAAY,IAAI,IAAI,CAAC;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAC;QAE/C,MAAM,OAAO,GAA4B;YACxC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;YACvB,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,GAAG,EAAE;gBACb,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACxD,CAAC;YAED,GAAG,EAAE;gBACJ,QAAQ,EAAE;oBACT,OAAO,EAAE,KAAK,EAAE,OAAe,EAAE,eAAyC,EAAE,EAAE;wBAC7E,OAAO,CAAC,iBAAiB,EAAE,CAAC;wBAC5B,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;wBAC3D,qBAAqB,CAAC,WAAW,CAAC,CAAC;wBACnC,IAAI,CAAC;4BACJ,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;wBACzD,CAAC;gCAAS,CAAC;4BACV,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;oBACF,CAAC;iBACD;gBACD,GAAG,EAAE;oBACJ,IAAI,EAAE,KAAK,EAAE,OAMZ,EAAE,EAAE;wBACJ,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;4BAC3B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;wBAChE,CAAC;wBACD,IAAI,EAAE,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;4BACjD,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;wBAClE,CAAC;wBACD,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE;4BACrC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM;4BACnC,KAAK,EAAE,OAAO,CAAC,KAAK;yBACpB,CAAC,CAAC;wBAEH,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;4BAC7B,OAAO,MAAM,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;wBAC/D,CAAC;wBAED,qBAAqB,CAAC,WAAW,CAAC,CAAC;wBACnC,IAAI,CAAC;4BACJ,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAChC,CAAC;gCAAS,CAAC;4BACV,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;oBACF,CAAC;oBACD,OAAO,EAAE,KAAK,EAAE,OAIf,EAAE,EAAE;wBACJ,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;4BAC3B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;wBAChE,CAAC;wBACD,IAAI,EAAE,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;4BACjD,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;wBAClE,CAAC;wBACD,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;wBACzC,qBAAqB,CAAC,WAAW,CAAC,CAAC;wBACnC,IAAI,CAAC;4BACJ,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;wBACnC,CAAC;gCAAS,CAAC;4BACV,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;oBACF,CAAC;oBACD,QAAQ,EAAE,KAAK,EAAE,OAIhB,EAAE,EAAE;wBACJ,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;4BAC3B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;wBAChE,CAAC;wBACD,IAAI,EAAE,OAAO,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;4BACjD,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;wBAClE,CAAC;wBACD,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;wBAC1C,qBAAqB,CAAC,WAAW,CAAC,CAAC;wBACnC,IAAI,CAAC;4BACJ,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;wBACpC,CAAC;gCAAS,CAAC;4BACV,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;oBACF,CAAC;iBACD;gBACD,KAAK,EAAE;oBACN,GAAG,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE;wBAC1B,MAAM,SAAS,GAAG,UAAU,QAAQ,UAAU,GAAG,EAAE,CAAC;wBACpD,qBAAqB,CAAC,WAAW,CAAC,CAAC;wBACnC,IAAI,CAAC;4BACJ,OAAO,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;wBACnC,CAAC;gCAAS,CAAC;4BACV,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;oBACF,CAAC;oBACD,GAAG,EAAE,KAAK,EAAE,GAAW,EAAE,KAAc,EAAE,GAAY,EAAE,EAAE;wBACxD,MAAM,SAAS,GAAG,UAAU,QAAQ,UAAU,GAAG,EAAE,CAAC;wBACpD,qBAAqB,CAAC,WAAW,CAAC,CAAC;wBACnC,IAAI,CAAC;4BACJ,OAAO,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;wBAC/C,CAAC;gCAAS,CAAC;4BACV,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;oBACF,CAAC;oBACD,MAAM,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE;wBAC7B,MAAM,SAAS,GAAG,UAAU,QAAQ,UAAU,GAAG,EAAE,CAAC;wBACpD,qBAAqB,CAAC,WAAW,CAAC,CAAC;wBACnC,IAAI,CAAC;4BACJ,OAAO,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;wBACtC,CAAC;gCAAS,CAAC;4BACV,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;oBACF,CAAC;oBACD,GAAG,EAAE,KAAK,EAAE,GAAW,EAAE,EAAE;wBAC1B,MAAM,SAAS,GAAG,UAAU,QAAQ,UAAU,GAAG,EAAE,CAAC;wBACpD,qBAAqB,CAAC,WAAW,CAAC,CAAC;wBACnC,IAAI,CAAC;4BACJ,OAAO,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;wBACnC,CAAC;gCAAS,CAAC;4BACV,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;oBACF,CAAC;iBACD;gBACD,SAAS,EAAE;oBACV,KAAK,EAAE,KAAK,EAAE,IAAY,EAAE,OAAiC,EAAE,EAAE;wBAChE,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;wBAC5E,qBAAqB,CAAC,WAAW,CAAC,CAAC;wBACnC,yBAAyB,CAAC,WAAW,CAAC,CAAC;wBACvC,IAAI,CAAC;4BACJ,OAAO,MAAM,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;wBAC7C,CAAC;gCAAS,CAAC;4BACV,uBAAuB,EAAE,CAAC;4BAC1B,2BAA2B,EAAE,CAAC;wBAC/B,CAAC;oBACF,CAAC;oBACD,MAAM,EAAE,KAAK,EAAE,KAAa,EAAE,OAAiC,EAAE,EAAE;wBAClE,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;wBACzD,qBAAqB,CAAC,WAAW,CAAC,CAAC;wBACnC,yBAAyB,CAAC,WAAW,CAAC,CAAC;wBACvC,IAAI,CAAC;4BACJ,OAAO,MAAM,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;wBAC/C,CAAC;gCAAS,CAAC;4BACV,uBAAuB,EAAE,CAAC;4BAC1B,2BAA2B,EAAE,CAAC;wBAC/B,CAAC;oBACF,CAAC;iBACD;gBACD,QAAQ,EAAE;oBACT,MAAM,EAAE,CAAC,OAAe,EAAE,QAAgB,EAAE,EAAE;wBAC7C,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;wBACpE,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;4BAC7B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;wBAC5C,CAAC;oBACF,CAAC;iBACD;aACD;YAED,GAAG,EAAE,IAAI,CAAC,iCAAiC,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC;YAErF,OAAO,EAAE;gBACR,GAAG,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC/B,MAAM,CAAC,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;oBAC7C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC;gBACtC,CAAC;gBACD,KAAK,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC/B,MAAM,CAAC,KAAK,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;oBAC7C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,OAAO,EAAE,CAAC,CAAC;gBACxC,CAAC;gBACD,IAAI,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC/B,MAAM,CAAC,IAAI,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;oBAC5C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;gBACvC,CAAC;aACD;YAED,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,OAAO;YAChB,UAAU,EAAE,UAAU;YACtB,WAAW,EAAE,WAAW;YACxB,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,aAAa;SAC5B,CAAC;QAEF,IACC,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,KAAK;YAC9C,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,GAAG,EAC3C,CAAC;YACF,OAAO,CAAC,eAAe,GAAG,aAAa,CAAC;QACzC,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;IAEO,kBAAkB,CACzB,MAAoC,EACpC,WAAmB,EACnB,MAAuB;QAEvB,MAAM,GAAG,GAA4B,EAAE,CAAC;QAExC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBAE9D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBACpC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;oBAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;oBAE/B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,KAAc,EAAE,EAAE;wBAC9C,MAAM,CAAC,IAAI,CAAC,wBAAwB,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE;4BAC9D,SAAS,EAAE,OAAO,KAAK;4BACvB,WAAW,EAAE,CAAC,CAAC,QAAQ;4BACvB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,cAAc,CAAC,IAAI;4BAC5D,SAAS,EAAE,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;4BACvE,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,WAAW;yBACrE,CAAC,CAAC;wBAEH,mFAAmF;wBACnF,IACC,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,GAAG;4BAC5C,KAAK;4BACL,OAAO,KAAK,KAAK,QAAQ,EACxB,CAAC;4BACF,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;gCACpD,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;6BAC7B,CAAC,CAAC;4BAEH,SAAS,mBAAmB,CAAC,GAAQ,EAAE,UAAU,IAAI,OAAO,EAAU;gCACrE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;oCAAE,OAAO,GAAG,CAAC;gCAElD,+CAA+C;gCAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,iBAAiB,IAAI,GAAG,IAAI,aAAa,IAAI,GAAG,EAAE,CAAC;oCACjF,MAAM,UAAU,GAAG,GAAG,CAAC,eAAe,CAAC;oCACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC;oCAEjC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;wCAC3C,cAAc,EAAE,OAAO,UAAU;wCACjC,kBAAkB,EAAE,OAAO,UAAU,KAAK,QAAQ;wCAClD,kBAAkB,EAAE,OAAO,UAAU,KAAK,QAAQ;wCAClD,kBAAkB,EAAE,OAAO,UAAU,KAAK,QAAQ;wCAClD,YAAY,EACX,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,UAAU,KAAK,QAAQ;4CAC/D,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;4CACrC,CAAC,CAAC,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG;wCAC/D,WAAW,EAAE,CAAC,CAAC,QAAQ;qCACvB,CAAC,CAAC;oCAEH,0DAA0D;oCAC1D,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;wCACjC,0BAA0B,CACzB,WAAW,MAAM,CAAC,UAAU,CAAC,EAAE,EAC/B;4CACC,EAAE,EAAE,WAAW,MAAM,CAAC,UAAU,CAAC,EAAE;4CACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;4CACvB,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;4CAC/C,YAAY,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,YAAY,IAAI,EAAE;yCAC1D,EACD,WAAW,CACX,CAAC;wCACF,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;4CACzD,IAAI,EAAE,IAAI,CAAC,IAAI;4CACf,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;4CACjD,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI;4CAC7B,WAAW,EAAE,WAAW;yCACxB,CAAC,CAAC;oCACJ,CAAC;oCAED,qEAAqE;oCACrE,OAAO,mBAAmB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;gCACjD,CAAC;gCAED,oCAAoC;gCACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;oCAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;wCAAE,OAAO,GAAG,CAAC;oCACjC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oCAEjB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;wCACxB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;oCAC9D,CAAC;yCAAM,CAAC;wCACP,MAAM,SAAS,GAA4B,EAAE,CAAC;wCAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;4CAChD,SAAS,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;wCACtD,CAAC;wCACD,OAAO,SAAS,CAAC;oCAClB,CAAC;gCACF,CAAC;gCAED,OAAO,GAAG,CAAC;4BACZ,CAAC;4BAED,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;4BACnC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;gCAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;6BACrD,CAAC,CAAC;wBACJ,CAAC;wBAED,uDAAuD;wBACvD,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;wBACxC,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;4BACvE,IAAI,CAAC;gCACJ,2BAA2B,CAAC,KAAgC,EAAE,OAAO,CAAC,CAAC;gCACvE,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;oCACjD,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,KAAK,EAAE,KAAK,CAAC,IAAI;oCACjB,cAAc,EAAE,OAAO,CAAC,IAAI;iCAC5B,CAAC,CAAC;4BACJ,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCAChB,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;4BACrE,CAAC;wBACF,CAAC;wBAED,IACC,IAAI,CAAC,YAAY;4BACjB,MAAM,CAAC,cAAc;4BACrB,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,IAAI,EAC5C,CAAC;4BACF,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;gCAC1C,IAAI,EAAE,IAAI,CAAC,IAAI;gCACf,KAAK,EAAE,KAAK,CAAC,IAAI;gCACjB,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY;gCACpC,cAAc,EAAE,MAAM,CAAC,cAAc;6BACrC,CAAC,CAAC;4BAEH,IAAI,CAAC;gCACJ,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAChC,IAAI,CAAC,IAAI,EACT,KAAK,CAAC,IAAI,EACV,KAAgC,CAChC,CAAC;gCACF,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;4BAClF,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCAChB,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE;oCACrD,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,KAAK,EAAE,KAAK,CAAC,IAAI;oCACjB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iCAC7D,CAAC,CAAC;gCACH,MAAM,KAAK,CAAC;4BACb,CAAC;wBACF,CAAC;wBAED,MAAM,aAAa,GAAG,QAAQ,EAAE,aAAa,KAAK,iBAAiB,CAAC,WAAW,CAAC;wBAChF,MAAM,WAAW,GAAG,QAAQ,EAAE,gBAAgB,KAAK,oBAAoB,CAAC,SAAS,CAAC;wBAClF,MAAM,aAAa,GAAG,QAAQ,EAAE,gBAAgB,IAAI,aAAa,IAAI,WAAW,CAAC;wBAEjF,IAAI,aAAa,EAAE,CAAC;4BACnB,IAAI,oBAAoB,GAAG,WAAW,CAAC;4BACvC,IAAI,aAAa;gCAAE,oBAAoB,GAAG,uBAAuB,CAAC;iCAC7D,IAAI,WAAW;gCAAE,oBAAoB,GAAG,qBAAqB,CAAC;4BAEnE,MAAM,eAAe,GAAG,WAAW,oBAAoB,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;4BAExE,qBAAqB,CAAC,WAAW,CAAC,CAAC;4BACnC,IAAI,CAAC;gCACJ,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE;oCAC9D,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,KAAK,EAAE,KAAK,CAAC,IAAI;oCACjB,MAAM,EAAE,KAAK;oCACb,QAAQ,EAAE,QAAQ;iCAClB,CAAC,CAAC;gCAEH,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;oCACjD,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,IAAI,iBAAiB,CAAC,CAAC;gCAC1D,CAAC;gCAED,MAAM,CAAC,IAAI,CAAC,0BAA0B,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE;oCAChE,aAAa,EAAE,QAAQ,EAAE,aAAa;oCACtC,gBAAgB,EAAE,QAAQ,EAAE,gBAAgB;iCAC5C,CAAC,CAAC;4BACJ,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCAChB,uBAAuB,EAAE,CAAC;gCAC1B,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;oCACzB,MAAM,KAAK,CAAC;gCACb,CAAC;gCACD,MAAM,KAAK,CAAC;4BACb,CAAC;4BACD,uBAAuB,EAAE,CAAC;wBAC3B,CAAC;wBAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;wBAEpC,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,KAAK,EAAE,CAAC;4BACpD,IAAI,OAAO,GAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;4BAEpD,IACC,QAAQ,EAAE,gBAAgB,KAAK,oBAAoB,CAAC,SAAS;gCAC7D,QAAQ,EAAE,aAAa,KAAK,iBAAiB,CAAC,WAAW,EACxD,CAAC;gCACF,MAAM,UAAU,GACd,KAAa,EAAE,KAAK,IAAK,KAAa,EAAE,IAAI,IAAK,KAAa,EAAE,MAAM,CAAC;gCACzE,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;oCAClD,OAAO,GAAG;wCACT,IAAI,EAAE,YAAY;wCAClB,OAAO,EAAE,CAAC,UAAU,CAAC;qCACrB,CAAC;gCACH,CAAC;qCAAM,CAAC;oCACP,OAAO,GAAG;wCACT,IAAI,EAAE,YAAY;wCAClB,OAAO,EAAE,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;qCAC9B,CAAC;gCACH,CAAC;4BACF,CAAC;4BAED,OAAO,qBAAqB,CAC3B,MAAM,EACN;gCACC,IAAI,EAAE,gBAAgB,CAAC,IAAI;gCAC3B,QAAQ,EAAE,IAAI,CAAC,IAAI;gCACnB,QAAQ,EAAE,KAAK,CAAC,IAAI;gCACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;6BACrB,EACD,OAAO,CACP,CAAC;wBACH,CAAC;6BAAM,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,GAAG,EAAE,CAAC;4BACzD,IAAI,OAAO,GAAsB,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;4BAEpD,IACC,QAAQ,EAAE,gBAAgB,KAAK,oBAAoB,CAAC,SAAS;gCAC7D,QAAQ,EAAE,aAAa,KAAK,iBAAiB,CAAC,WAAW,EACxD,CAAC;gCACF,MAAM,UAAU,GACd,KAAa,EAAE,KAAK,IAAK,KAAa,EAAE,IAAI,IAAK,KAAa,EAAE,MAAM,CAAC;gCACzE,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;oCAClD,OAAO,GAAG;wCACT,IAAI,EAAE,YAAY;wCAClB,OAAO,EAAE,CAAC,UAAU,CAAC;qCACrB,CAAC;gCACH,CAAC;qCAAM,CAAC;oCACP,OAAO,GAAG;wCACT,IAAI,EAAE,YAAY;wCAClB,OAAO,EAAE,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;qCAC9B,CAAC;gCACH,CAAC;4BACF,CAAC;4BAED,OAAO,qBAAqB,CAC3B,MAAM,EACN;gCACC,IAAI,EAAE,gBAAgB,CAAC,IAAI;gCAC3B,QAAQ,EAAE,IAAI,CAAC,IAAI;gCACnB,QAAQ,EAAE,KAAK,CAAC,IAAI;gCACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;6BACrB,EACD,OAAO,CACP,CAAC;wBACH,CAAC;wBAED,OAAO,MAAM,CAAC;oBACf,CAAC,CAAC;gBACH,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,GAAG,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,iCAAiC,CACxC,MAAoC,EACpC,WAAmB,EACnB,MAAuB,EACvB,WAAoC;QAEpC,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAEjE,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,CACzD,WAAW,EACX,MAAM,EACN,WAAW,EACX,MAAM,CACN,CAAC;YAEF,KAAK,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC1E,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;oBACpB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACP,GAAG,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC;gBAC5B,CAAC;YACF,CAAC;QACF,CAAC;QAED,OAAO,GAAG,CAAC;IACZ,CAAC;IAED;;OAEG;IACK,yBAAyB,CAChC,WAAmC,EACnC,MAAoC,EACpC,WAAmB,EACnB,MAAuB;QAEvB,MAAM,GAAG,GAA4C,EAAE,CAAC;QAExD,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC;YAE7C,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACrB,CAAC;YAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,cAAc,CAAC,IAAI,CAAC;YACpE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;YAEvC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,KAAc,EAAE,EAAE;gBACnD,qBAAqB,CAAC,WAAW,CAAC,CAAC;gBAEnC,IAAI,CAAC;oBACJ,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;oBAE7C,MAAM,YAAY,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;oBACtD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;wBAChC,IAAI,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAK,YAAoB,CAAC,OAAO,EAAE,CAAC;4BACvF,MAAM,IAAI,KAAK,CAAE,YAAoB,CAAC,OAAO,CAAC,CAAC;wBAChD,CAAC;wBACD,OAAO,YAAY,CAAC;oBACrB,CAAC;oBAED,uDAAuD;oBACvD,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;oBACxC,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACvE,IAAI,CAAC;4BACJ,2BAA2B,CAAC,KAAgC,EAAE,OAAO,CAAC,CAAC;wBACxE,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BAChB,6CAA6C;wBAC9C,CAAC;oBACF,CAAC;oBAED,IAAI,YAAY,IAAI,cAAc,KAAK,cAAc,CAAC,IAAI,EAAE,CAAC;wBAC5D,MAAM,YAAY,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAgC,CAAC,CAAC;oBACrF,CAAC;oBAED,IAAI,QAAQ,EAAE,CAAC;wBACd,MAAM,aAAa,GAAG,QAAQ,CAAC,aAAa,KAAK,iBAAiB,CAAC,WAAW,CAAC;wBAC/E,MAAM,WAAW,GAAG,QAAQ,CAAC,gBAAgB,KAAK,oBAAoB,CAAC,SAAS,CAAC;wBACjF,MAAM,aAAa,GAAG,QAAQ,CAAC,gBAAgB,IAAI,aAAa,IAAI,WAAW,CAAC;wBAEhF,IAAI,aAAa,EAAE,CAAC;4BACnB,MAAM,oBAAoB,GAAG,aAAa;gCACzC,CAAC,CAAC,uBAAuB;gCACzB,CAAC,CAAC,WAAW;oCACZ,CAAC,CAAC,qBAAqB;oCACvB,CAAC,CAAC,WAAW,CAAC;4BAChB,MAAM,eAAe,GAAG,uBAAuB,oBAAoB,KAAK,QAAQ,EAAE,CAAC;4BAEnF,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE;gCAC9D,IAAI,EAAE,QAAQ;gCACd,SAAS;gCACT,MAAM,EAAE,KAAK;gCACb,QAAQ,EAAE,QAAQ;gCAClB,YAAY,EAAE,IAAI;6BAClB,CAAC,CAAC;4BAEH,IAAI,CAAC,cAAc,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;gCACjD,MAAM,IAAI,KAAK,CAAC,eAAe,QAAQ,iBAAiB,CAAC,CAAC;4BAC3D,CAAC;wBACF,CAAC;oBACF,CAAC;oBAED,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE;wBACvD,QAAQ;wBACR,SAAS;wBACT,KAAK;wBACL,cAAc,EAAE,eAAe;qBAC/B,CAAC,CAAC;oBAEH,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACtD,CAAC;wBAAS,CAAC;oBACV,uBAAuB,EAAE,CAAC;gBAC3B,CAAC;YACF,CAAC,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACZ,CAAC;IAED;;;;;;;OAOG;IACK,sBAAsB,CAC7B,GAA4B,EAC5B,SAAiB;QAEjB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;YACrB,CAAC;YACD,OAAO,GAAG,CAAC,SAAS,CAA4B,CAAC;QAClD,CAAC;QAED,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,GAAG,GAAG,CAAC;QAElB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YACpB,CAAC;YACD,OAAO,GAAG,OAAO,CAAC,IAAI,CAA4B,CAAC;QACpD,CAAC;QAED,OAAO,OAAO,CAAC;IAChB,CAAC;CACD"}

package/dist/executor/sandbox-injector.d.ts

@@ -0,0 +1,7 @@
+import ivm from 'isolated-vm';
+import type { Logger } from '@mondaydotcomorg/atp-runtime';
+export declare function injectTimerPolyfills(ivmContext: ivm.Context): Promise<void>;
+export declare function injectSandbox(ivmContext: ivm.Context, jail: ivm.Reference<Record<string, unknown>>, sandbox: Record<string, unknown>, executionLogger: Logger, onPauseError: (error: unknown) => void, executionId?: string, provenanceMode?: string, hintMetadata?: Map<string, any>): Promise<void>;
+export declare function setupRuntimeNamespace(ivmContext: ivm.Context, sandbox: Record<string, unknown>): Promise<void>;
+export declare function setupAPINamespace(ivmContext: ivm.Context, sandbox: Record<string, unknown>, provenanceMode?: string): Promise<void>;
+//# sourceMappingURL=sandbox-injector.d.ts.map

package/dist/executor/sandbox-injector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-injector.d.ts","sourceRoot":"","sources":["../../src/executor/sandbox-injector.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,aAAa,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAK3D,wBAAsB,oBAAoB,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BjF;AAED,wBAAsB,aAAa,CAClC,UAAU,EAAE,GAAG,CAAC,OAAO,EACvB,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC5C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,eAAe,EAAE,MAAM,EACvB,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,EACtC,WAAW,CAAC,EAAE,MAAM,EACpB,cAAc,CAAC,EAAE,MAAM,EACvB,YAAY,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAC7B,OAAO,CAAC,IAAI,CAAC,CA4Kf;AAED,wBAAsB,qBAAqB,CAC1C,UAAU,EAAE,GAAG,CAAC,OAAO,EACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,IAAI,CAAC,CAuBf;AAED,wBAAsB,iBAAiB,CACtC,UAAU,EAAE,GAAG,CAAC,OAAO,EACvB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,cAAc,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,IAAI,CAAC,CA0Ff"}