@n8n/expression-runtime 0.3.0 → 0.5.0

package/dist/{bridge → cjs/bridge}/isolated-vm-bridge.d.ts

@@ -1,4 +1,4 @@
-import type { RuntimeBridge, BridgeConfig } from '../types';
+import type { RuntimeBridge, BridgeConfig, ExecuteOptions } from '../types';
 /**
  * IsolatedVmBridge - Runtime bridge using isolated-vm for secure expression evaluation.
  *
@@ -20,6 +20,7 @@ export declare class IsolatedVmBridge implements RuntimeBridge {
     private valueAtPathRef?;
     private arrayElementRef?;
     private callFunctionRef?;
+    private resetDataProxiesRef?;
     constructor(config?: BridgeConfig);
     /**
      * Initialize the isolate and create execution context.
@@ -115,7 +116,7 @@ export declare class IsolatedVmBridge implements RuntimeBridge {
      * @returns Result of the expression
      * @throws {Error} If bridge not initialized or execution fails
      */
-    execute(code: string, data: Record<string, unknown>): unknown;
+    execute(code: string, data: Record<string, unknown>, options?: ExecuteOptions): unknown;
     /**
      * Dispose of the isolate and free resources.
      *

package/dist/cjs/bridge/isolated-vm-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolated-vm-bridge.d.ts","sourceRoot":"","sources":["../../../src/bridge/isolated-vm-bridge.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAwC5E;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,YAAW,aAAa;IACrD,OAAO,CAAC,OAAO,CAAc;IAC7B,OAAO,CAAC,OAAO,CAAC,CAAc;IAC9B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAyB;IAIvC,OAAO,CAAC,WAAW,CAAiC;IAIpD,OAAO,CAAC,cAAc,CAAC,CAAgB;IACvC,OAAO,CAAC,eAAe,CAAC,CAAgB;IACxC,OAAO,CAAC,eAAe,CAAC,CAAgB;IAKxC,OAAO,CAAC,mBAAmB,CAAC,CAAgB;gBAEhC,MAAM,GAAE,YAAiB;IAWrC;;;;;;;;;;OAUG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAqCjC;;;;;;;;;;;OAWG;YACW,mBAAmB;IAoCjC;;;;;;;;OAQG;YACW,iBAAiB;IA+B/B;;;;;;;;;;;OAWG;YACW,kBAAkB;IA0BhC;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,gBAAgB;IAmBxB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,iBAAiB;IAiIzB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO;IAsDvF;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAwB9B;;;;OAIG;IACH,UAAU,IAAI,OAAO;CAGrB"}

package/dist/cjs/bridge/isolated-vm-bridge.js

@@ -0,0 +1,512 @@
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+(function (factory) {
+    if (typeof module === "object" && typeof module.exports === "object") {
+        var v = factory(require, exports);
+        if (v !== undefined) module.exports = v;
+    }
+    else if (typeof define === "function" && define.amd) {
+        define(["require", "exports", "node:fs/promises", "node:path", "../types"], factory);
+    }
+})(function (require, exports) {
+    "use strict";
+    Object.defineProperty(exports, "__esModule", { value: true });
+    exports.IsolatedVmBridge = void 0;
+    const promises_1 = require("node:fs/promises");
+    const path = __importStar(require("node:path"));
+    const types_1 = require("../types");
+    let _ivm = null;
+    function getIvm() {
+        if (!_ivm) {
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            _ivm = require('isolated-vm');
+        }
+        return _ivm;
+    }
+    const BUNDLE_RELATIVE_PATH = path.join('dist', 'bundle', 'runtime.iife.js');
+    /**
+     * Read the runtime IIFE bundle by walking up from `__dirname` until
+     * `dist/bundle/runtime.iife.js` is found.
+     *
+     * This works regardless of where the compiled output lives:
+     *   - `src/bridge/`               (vitest running against source)
+     *   - `dist/cjs/bridge/`          (CJS build)
+     */
+    async function readRuntimeBundle() {
+        let dir = __dirname;
+        while (dir !== path.dirname(dir)) {
+            try {
+                return await (0, promises_1.readFile)(path.join(dir, BUNDLE_RELATIVE_PATH), 'utf-8');
+            }
+            catch { }
+            dir = path.dirname(dir);
+        }
+        throw new Error(`Could not find runtime bundle (${BUNDLE_RELATIVE_PATH}) in any parent of ${__dirname}`);
+    }
+    /**
+     * IsolatedVmBridge - Runtime bridge using isolated-vm for secure expression evaluation.
+     *
+     * This bridge creates a V8 isolate with:
+     * - Hard memory limit (128MB default)
+     * - No access to Node.js APIs
+     * - Timeout enforcement
+     * - Complete isolation from host process
+     *
+     * Context reuse pattern: Create isolate/context once, reset state between evaluations.
+     */
+    class IsolatedVmBridge {
+        isolate;
+        context;
+        initialized = false;
+        disposed = false;
+        config;
+        // Script compilation cache for performance
+        // Maps expression code -> compiled ivm.Script
+        scriptCache = new Map();
+        // Active ivm.Reference callbacks — released before each re-registration
+        // to prevent reference accumulation across execute() calls
+        valueAtPathRef;
+        arrayElementRef;
+        callFunctionRef;
+        // Pre-resolved reference to resetDataProxies() inside the isolate.
+        // Using applySync on a stored reference avoids the per-call
+        // ScriptCompiler::Compile() cost that evalSync incurs.
+        resetDataProxiesRef;
+        constructor(config = {}) {
+            this.config = {
+                ...types_1.DEFAULT_BRIDGE_CONFIG,
+                ...config,
+            };
+            // Create isolate with memory limit
+            // Note: memoryLimit is in MB
+            this.isolate = new (getIvm().Isolate)({ memoryLimit: this.config.memoryLimit });
+        }
+        /**
+         * Initialize the isolate and create execution context.
+         *
+         * Steps:
+         * 1. Create context
+         * 2. Set up basic globals (global reference)
+         * 3. Load runtime bundle (DateTime, extend, proxy system)
+         * 4. Verify proxy system
+         *
+         * Must be called before execute().
+         */
+        async initialize() {
+            if (this.initialized) {
+                return;
+            }
+            // Create context in the isolate
+            this.context = await this.isolate.createContext();
+            // Set up basic globals
+            // jail is a reference to the context's global object
+            const jail = this.context.global;
+            // Set 'global' to reference itself (pattern from POC)
+            // This allows code in isolate to access 'global.something'
+            await jail.set('global', jail.derefInto());
+            // Load runtime bundle (DateTime, extend, SafeObject, proxy system)
+            await this.loadVendorLibraries();
+            // Verify proxy system loaded correctly
+            await this.verifyProxySystem();
+            // Inject E() error handler needed by tournament-generated try-catch code
+            await this.injectErrorHandler();
+            // Store a reference to resetDataProxies for efficient per-call invocation
+            this.resetDataProxiesRef = await this.context.global.get('resetDataProxies', {
+                reference: true,
+            });
+            this.initialized = true;
+            if (this.config.debug) {
+                console.log('[IsolatedVmBridge] Initialized successfully');
+            }
+        }
+        /**
+         * Load runtime bundle into the isolate.
+         *
+         * The runtime bundle includes:
+         * - DateTime, extend, extendOptional (expression engine globals)
+         * - SafeObject and SafeError wrappers
+         * - createDeepLazyProxy function
+         * - __data object initialization
+         *
+         * @private
+         * @throws {Error} If context not initialized or bundle loading fails
+         */
+        async loadVendorLibraries() {
+            if (!this.context) {
+                throw new Error('Context not initialized');
+            }
+            try {
+                // Load runtime bundle (includes vendor libraries + proxy system)
+                const runtimeBundle = await readRuntimeBundle();
+                // Evaluate bundle in isolate context
+                // This makes all exported globals available (DateTime, extend, extendOptional, SafeObject, SafeError, createDeepLazyProxy, resetDataProxies, __data)
+                await this.context.eval(runtimeBundle);
+                if (this.config.debug) {
+                    console.log('[IsolatedVmBridge] Runtime bundle loaded');
+                }
+                // Verify vendor libraries loaded correctly
+                const hasDateTime = await this.context.eval('typeof DateTime !== "undefined"');
+                const hasExtend = await this.context.eval('typeof extend !== "undefined"');
+                if (!hasDateTime || !hasExtend) {
+                    throw new Error(`Library verification failed: DateTime=${hasDateTime}, extend=${hasExtend}`);
+                }
+                if (this.config.debug) {
+                    console.log('[IsolatedVmBridge] Vendor libraries verified successfully');
+                }
+            }
+            catch (error) {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                throw new Error(`Failed to load runtime bundle: ${errorMessage}`);
+            }
+        }
+        /**
+         * Verify the proxy system loaded correctly.
+         *
+         * The proxy system is loaded as part of the runtime bundle in loadVendorLibraries().
+         * This method verifies all required components are available.
+         *
+         * @private
+         * @throws {Error} If context not initialized or proxy system verification fails
+         */
+        async verifyProxySystem() {
+            if (!this.context) {
+                throw new Error('Context not initialized');
+            }
+            try {
+                // Verify proxy system components loaded correctly
+                const hasProxyCreator = await this.context.eval('typeof createDeepLazyProxy !== "undefined"');
+                const hasData = await this.context.eval('typeof __data !== "undefined"');
+                const hasSafeObject = await this.context.eval('typeof SafeObject !== "undefined"');
+                const hasSafeError = await this.context.eval('typeof SafeError !== "undefined"');
+                const hasResetFunction = await this.context.eval('typeof resetDataProxies !== "undefined"');
+                if (!hasProxyCreator || !hasData || !hasSafeObject || !hasSafeError || !hasResetFunction) {
+                    throw new Error(`Proxy system verification failed: ` +
+                        `createDeepLazyProxy=${hasProxyCreator}, __data=${hasData}, ` +
+                        `SafeObject=${hasSafeObject}, SafeError=${hasSafeError}, ` +
+                        `resetDataProxies=${hasResetFunction}`);
+                }
+                if (this.config.debug) {
+                    console.log('[IsolatedVmBridge] Proxy system verified successfully');
+                }
+            }
+            catch (error) {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                throw new Error(`Failed to verify proxy system: ${errorMessage}`);
+            }
+        }
+        /**
+         * Inject the E() error handler into the isolate context.
+         *
+         * Tournament wraps expressions with try-catch that calls E(error, this).
+         * This handler:
+         * - Re-throws security violations from __sanitize
+         * - Swallows TypeErrors (failed attack attempts return undefined)
+         * - Re-throws all other errors
+         *
+         * @private
+         * @throws {Error} If context not initialized
+         */
+        async injectErrorHandler() {
+            if (!this.context) {
+                throw new Error('Context not initialized');
+            }
+            await this.context.eval(`
+			if (typeof E === 'undefined') {
+				globalThis.E = function(error, _context) {
+					// Re-throw security violations from __sanitize
+					if (error && error.message && error.message.includes('due to security concerns')) {
+						throw error;
+					}
+					// Swallow TypeErrors (failed attack attempts return undefined)
+					if (error instanceof TypeError) {
+						return undefined;
+					}
+					throw error;
+				};
+			}
+		`);
+            if (this.config.debug) {
+                console.log('[IsolatedVmBridge] Error handler injected successfully');
+            }
+        }
+        /**
+         * Reset data proxies in the isolate context.
+         *
+         * This method should be called before each execute() to:
+         * 1. Clear proxy caches from previous evaluations
+         * 2. Initialize fresh workflow data references
+         * 3. Expose workflow properties to globalThis
+         *
+         * The reset function runs in the isolate and calls back to the host
+         * via ivm.Reference callbacks to fetch workflow data.
+         *
+         * @private
+         * @throws {Error} If context not initialized or reset fails
+         */
+        resetDataProxies(timezone) {
+            if (!this.resetDataProxiesRef) {
+                throw new Error('Context not initialized');
+            }
+            try {
+                this.resetDataProxiesRef.applySync(null, [timezone ?? null], {
+                    arguments: { copy: true },
+                });
+                if (this.config.debug) {
+                    console.log('[IsolatedVmBridge] Data proxies reset successfully');
+                }
+            }
+            catch (error) {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                throw new Error(`Failed to reset data proxies: ${errorMessage}`);
+            }
+        }
+        /**
+         * Register callback functions for cross-isolate communication.
+         *
+         * Creates three ivm.Reference callbacks that the runtime bundle uses
+         * to fetch data from the host process:
+         *
+         * - __getValueAtPath: Returns metadata or primitive for a property path
+         * - __getArrayElement: Returns individual array elements
+         * - __callFunctionAtPath: Executes functions in host context
+         *
+         * These callbacks are called synchronously from isolate proxy traps.
+         *
+         * @param data - Current workflow data to use for callback responses
+         * @private
+         */
+        registerCallbacks(data) {
+            if (!this.context) {
+                throw new Error('Context not initialized');
+            }
+            // Callback 1: Get value/metadata at path
+            // Used by createDeepLazyProxy when accessing properties
+            const getValueAtPath = new (getIvm().Reference)((path) => {
+                // Navigate to value
+                let value = data;
+                for (const key of path) {
+                    value = value?.[key];
+                    if (value === undefined || value === null) {
+                        return value;
+                    }
+                }
+                // Handle functions - return metadata marker
+                if (typeof value === 'function') {
+                    const fnString = value.toString();
+                    // Block native functions for security
+                    if (fnString.includes('[native code]')) {
+                        return undefined;
+                    }
+                    return { __isFunction: true, __name: path[path.length - 1] };
+                }
+                // Handle arrays - always lazy, only transfer length
+                if (Array.isArray(value)) {
+                    return {
+                        __isArray: true,
+                        __length: value.length,
+                        __data: null,
+                    };
+                }
+                // Handle objects - return metadata with keys
+                if (value !== null && typeof value === 'object') {
+                    return {
+                        __isObject: true,
+                        __keys: Object.keys(value),
+                    };
+                }
+                // Primitive value
+                return value;
+            });
+            // Callback 2: Get array element at index
+            // Used by array proxy when accessing numeric indices
+            const getArrayElement = new (getIvm().Reference)((path, index) => {
+                // Navigate to array
+                let arr = data;
+                for (const key of path) {
+                    arr = arr?.[key];
+                    if (arr === undefined || arr === null) {
+                        return undefined;
+                    }
+                }
+                if (!Array.isArray(arr)) {
+                    return undefined;
+                }
+                const element = arr[index];
+                // If element is object/array, return metadata
+                if (element !== null && typeof element === 'object') {
+                    if (Array.isArray(element)) {
+                        return {
+                            __isArray: true,
+                            __length: element.length,
+                            __data: null,
+                        };
+                    }
+                    return {
+                        __isObject: true,
+                        __keys: Object.keys(element),
+                    };
+                }
+                // Primitive element
+                return element;
+            });
+            // Callback 3: Call function at path with arguments
+            // Used when expressions invoke functions from workflow data
+            const callFunctionAtPath = new (getIvm().Reference)((path, ...args) => {
+                // Navigate to function, tracking parent to preserve `this` context
+                let fn = data;
+                let parent = undefined;
+                for (const key of path) {
+                    parent = fn;
+                    fn = fn?.[key];
+                }
+                if (typeof fn !== 'function') {
+                    throw new Error(`${path.join('.')} is not a function`);
+                }
+                // Block native functions for security (same check as getValueAtPath)
+                if (fn.toString().includes('[native code]')) {
+                    throw new Error(`${path.join('.')} is a native function and cannot be called`);
+                }
+                // Execute function with parent as `this` to preserve method context
+                return fn.call(parent, ...args);
+            });
+            // Release previous references before replacing to avoid accumulation
+            this.valueAtPathRef?.release();
+            this.arrayElementRef?.release();
+            this.callFunctionRef?.release();
+            // Store references so they can be released on the next call or on dispose()
+            this.valueAtPathRef = getValueAtPath;
+            this.arrayElementRef = getArrayElement;
+            this.callFunctionRef = callFunctionAtPath;
+            // Register all callbacks in isolate global context
+            this.context.global.setSync('__getValueAtPath', getValueAtPath);
+            this.context.global.setSync('__getArrayElement', getArrayElement);
+            this.context.global.setSync('__callFunctionAtPath', callFunctionAtPath);
+            if (this.config.debug) {
+                console.log('[IsolatedVmBridge] Callbacks registered successfully');
+            }
+        }
+        /**
+         * Execute JavaScript code in the isolated context.
+         *
+         * Flow:
+         * 1. Register callbacks as ivm.Reference for cross-isolate communication
+         * 2. Call resetDataProxies() to initialize workflow data proxies
+         * 3. Compile script (with caching for performance)
+         * 4. Execute with timeout enforcement
+         * 5. Return result (copied from isolate)
+         *
+         * @param code - JavaScript expression to evaluate
+         * @param data - Workflow data (e.g., { $json: {...}, $runIndex: 0 })
+         * @returns Result of the expression
+         * @throws {Error} If bridge not initialized or execution fails
+         */
+        execute(code, data, options) {
+            if (!this.initialized || !this.context) {
+                throw new Error('Bridge not initialized. Call initialize() first.');
+            }
+            try {
+                // Step 1: Register callbacks with current data context
+                this.registerCallbacks(data);
+                // Step 2: Reset proxies for this evaluation
+                // This initializes $json, $binary, etc. as lazy proxies
+                this.resetDataProxies(options?.timezone);
+                // Step 3: Wrap transformed code so 'this' === __data in the isolate.
+                // Tournament generates: this.$json.email, this.$items(), etc.
+                // __data has $json, $items, etc. as lazy proxies (set in resetDataProxies).
+                const wrappedCode = `(function() { var __result = (function() {\n${code}\n}).call(__data); return __prepareForTransfer(__result); })()`;
+                let script = this.scriptCache.get(code);
+                if (!script) {
+                    script = this.isolate.compileScriptSync(wrappedCode);
+                    this.scriptCache.set(code, script);
+                    if (this.config.debug) {
+                        console.log('[IsolatedVmBridge] Script compiled and cached');
+                    }
+                }
+                // Step 4: Execute with timeout and copy result back
+                const result = script.runSync(this.context, {
+                    timeout: this.config.timeout,
+                    copy: true,
+                });
+                if (this.config.debug) {
+                    console.log('[IsolatedVmBridge] Expression executed successfully');
+                }
+                return result;
+            }
+            catch (error) {
+                const errorMessage = error instanceof Error ? error.message : String(error);
+                if (errorMessage.includes('Script execution timed out')) {
+                    throw new types_1.TimeoutError(`Expression timed out after ${this.config.timeout}ms`, {});
+                }
+                if (errorMessage.includes('memory limit')) {
+                    throw new types_1.MemoryLimitError(`Expression exceeded memory limit of ${this.config.memoryLimit}MB`, {});
+                }
+                throw new Error(`Expression evaluation failed: ${errorMessage}`);
+            }
+        }
+        /**
+         * Dispose of the isolate and free resources.
+         *
+         * After disposal, the bridge cannot be used again.
+         */
+        async dispose() {
+            if (this.disposed) {
+                return;
+            }
+            // Dispose isolate (this also disposes all contexts, references, etc.)
+            if (!this.isolate.isDisposed) {
+                this.isolate.dispose();
+            }
+            // Release callback references
+            this.valueAtPathRef?.release();
+            this.arrayElementRef?.release();
+            this.callFunctionRef?.release();
+            this.disposed = true;
+            this.initialized = false;
+            this.scriptCache.clear();
+            if (this.config.debug) {
+                console.log('[IsolatedVmBridge] Disposed');
+            }
+        }
+        /**
+         * Check if the bridge has been disposed.
+         *
+         * @returns true if disposed, false otherwise
+         */
+        isDisposed() {
+            return this.disposed;
+        }
+    }
+    exports.IsolatedVmBridge = IsolatedVmBridge;
+});
+//# sourceMappingURL=isolated-vm-bridge.js.map

package/dist/cjs/bridge/isolated-vm-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isolated-vm-bridge.js","sourceRoot":"","sources":["../../../src/bridge/isolated-vm-bridge.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IACA,+CAA4C;IAC5C,gDAAkC;IAElC,oCAAiF;IAMjF,IAAI,IAAI,GAAsB,IAAI,CAAC;IAEnC,SAAS,MAAM;QACd,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,iEAAiE;YACjE,IAAI,GAAG,OAAO,CAAC,aAAa,CAAe,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,oBAAoB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAE5E;;;;;;;OAOG;IACH,KAAK,UAAU,iBAAiB;QAC/B,IAAI,GAAG,GAAG,SAAS,CAAC;QACpB,OAAO,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC;gBACJ,OAAO,MAAM,IAAA,mBAAQ,EAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,KAAK,CACd,kCAAkC,oBAAoB,sBAAsB,SAAS,EAAE,CACvF,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,MAAa,gBAAgB;QACpB,OAAO,CAAc;QACrB,OAAO,CAAe;QACtB,WAAW,GAAG,KAAK,CAAC;QACpB,QAAQ,GAAG,KAAK,CAAC;QACjB,MAAM,CAAyB;QAEvC,2CAA2C;QAC3C,8CAA8C;QACtC,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;QAEpD,wEAAwE;QACxE,2DAA2D;QACnD,cAAc,CAAiB;QAC/B,eAAe,CAAiB;QAChC,eAAe,CAAiB;QAExC,mEAAmE;QACnE,4DAA4D;QAC5D,uDAAuD;QAC/C,mBAAmB,CAAiB;QAE5C,YAAY,SAAuB,EAAE;YACpC,IAAI,CAAC,MAAM,GAAG;gBACb,GAAG,6BAAqB;gBACxB,GAAG,MAAM;aACT,CAAC;YAEF,mCAAmC;YACnC,6BAA6B;YAC7B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACjF,CAAC;QAED;;;;;;;;;;WAUG;QACH,KAAK,CAAC,UAAU;YACf,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtB,OAAO;YACR,CAAC;YAED,gCAAgC;YAChC,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAElD,uBAAuB;YACvB,qDAAqD;YACrD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAEjC,sDAAsD;YACtD,2DAA2D;YAC3D,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAE3C,mEAAmE;YACnE,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAEjC,uCAAuC;YACvC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAE/B,yEAAyE;YACzE,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAEhC,0EAA0E;YAC1E,IAAI,CAAC,mBAAmB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,kBAAkB,EAAE;gBAC5E,SAAS,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAExB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;YAC5D,CAAC;QACF,CAAC;QAED;;;;;;;;;;;WAWG;QACK,KAAK,CAAC,mBAAmB;YAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC;gBACJ,iEAAiE;gBACjE,MAAM,aAAa,GAAG,MAAM,iBAAiB,EAAE,CAAC;gBAEhD,qCAAqC;gBACrC,qJAAqJ;gBACrJ,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAEvC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;gBACzD,CAAC;gBAED,2CAA2C;gBAC3C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;gBAC/E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;gBAE3E,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;oBAChC,MAAM,IAAI,KAAK,CACd,yCAAyC,WAAW,YAAY,SAAS,EAAE,CAC3E,CAAC;gBACH,CAAC;gBAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;gBAC1E,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;YACnE,CAAC;QACF,CAAC;QAED;;;;;;;;WAQG;QACK,KAAK,CAAC,iBAAiB;YAC9B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC;gBACJ,kDAAkD;gBAClD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;gBAC9F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;gBACzE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;gBACnF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBACjF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;gBAE5F,IAAI,CAAC,eAAe,IAAI,CAAC,OAAO,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBAC1F,MAAM,IAAI,KAAK,CACd,oCAAoC;wBACnC,uBAAuB,eAAe,YAAY,OAAO,IAAI;wBAC7D,cAAc,aAAa,eAAe,YAAY,IAAI;wBAC1D,oBAAoB,gBAAgB,EAAE,CACvC,CAAC;gBACH,CAAC;gBAED,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;gBACtE,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,MAAM,IAAI,KAAK,CAAC,kCAAkC,YAAY,EAAE,CAAC,CAAC;YACnE,CAAC;QACF,CAAC;QAED;;;;;;;;;;;WAWG;QACK,KAAK,CAAC,kBAAkB;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC5C,CAAC;YAED,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;;;;;;;;;;;;;;GAcvB,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;YACvE,CAAC;QACF,CAAC;QAED;;;;;;;;;;;;;WAaG;QACK,gBAAgB,CAAC,QAAiB;YACzC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC;gBACJ,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,QAAQ,IAAI,IAAI,CAAC,EAAE;oBAC5D,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;iBACzB,CAAC,CAAC;gBAEH,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;gBACnE,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;YAClE,CAAC;QACF,CAAC;QAED;;;;;;;;;;;;;;WAcG;QACK,iBAAiB,CAAC,IAA6B;YACtD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC5C,CAAC;YAED,yCAAyC;YACzC,wDAAwD;YACxD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAc,EAAE,EAAE;gBAClE,oBAAoB;gBACpB,IAAI,KAAK,GAAY,IAAI,CAAC;gBAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACxB,KAAK,GAAI,KAAiC,EAAE,CAAC,GAAG,CAAC,CAAC;oBAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBAC3C,OAAO,KAAK,CAAC;oBACd,CAAC;gBACF,CAAC;gBAED,4CAA4C;gBAC5C,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;oBACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;oBAClC,sCAAsC;oBACtC,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;wBACxC,OAAO,SAAS,CAAC;oBAClB,CAAC;oBACD,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;gBAC9D,CAAC;gBAED,oDAAoD;gBACpD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC1B,OAAO;wBACN,SAAS,EAAE,IAAI;wBACf,QAAQ,EAAE,KAAK,CAAC,MAAM;wBACtB,MAAM,EAAE,IAAI;qBACZ,CAAC;gBACH,CAAC;gBAED,6CAA6C;gBAC7C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACjD,OAAO;wBACN,UAAU,EAAE,IAAI;wBAChB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;qBAC1B,CAAC;gBACH,CAAC;gBAED,kBAAkB;gBAClB,OAAO,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,yCAAyC;YACzC,qDAAqD;YACrD,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAc,EAAE,KAAa,EAAE,EAAE;gBAClF,oBAAoB;gBACpB,IAAI,GAAG,GAAY,IAAI,CAAC;gBACxB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACxB,GAAG,GAAI,GAA+B,EAAE,CAAC,GAAG,CAAC,CAAC;oBAC9C,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;wBACvC,OAAO,SAAS,CAAC;oBAClB,CAAC;gBACF,CAAC;gBAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,OAAO,SAAS,CAAC;gBAClB,CAAC;gBAED,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;gBAE3B,8CAA8C;gBAC9C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC5B,OAAO;4BACN,SAAS,EAAE,IAAI;4BACf,QAAQ,EAAE,OAAO,CAAC,MAAM;4BACxB,MAAM,EAAE,IAAI;yBACZ,CAAC;oBACH,CAAC;oBACD,OAAO;wBACN,UAAU,EAAE,IAAI;wBAChB,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;qBAC5B,CAAC;gBACH,CAAC;gBAED,oBAAoB;gBACpB,OAAO,OAAO,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,mDAAmD;YACnD,4DAA4D;YAC5D,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAc,EAAE,GAAG,IAAe,EAAE,EAAE;gBAC1F,mEAAmE;gBACnE,IAAI,EAAE,GAAY,IAAI,CAAC;gBACvB,IAAI,MAAM,GAAY,SAAS,CAAC;gBAChC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACxB,MAAM,GAAG,EAAE,CAAC;oBACZ,EAAE,GAAI,EAA8B,EAAE,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC;gBAED,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;oBAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;gBACxD,CAAC;gBAED,qEAAqE;gBACrE,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;gBAChF,CAAC;gBAED,oEAAoE;gBACpE,OAAQ,EAAwC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;YACxE,CAAC,CAAC,CAAC;YAEH,qEAAqE;YACrE,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC;YAEhC,4EAA4E;YAC5E,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;YACrC,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;YACvC,IAAI,CAAC,eAAe,GAAG,kBAAkB,CAAC;YAE1C,mDAAmD;YACnD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;YAChE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,eAAe,CAAC,CAAC;YAClE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;YAExE,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;YACrE,CAAC;QACF,CAAC;QAED;;;;;;;;;;;;;;WAcG;QACH,OAAO,CAAC,IAAY,EAAE,IAA6B,EAAE,OAAwB;YAC5E,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,CAAC;gBACJ,uDAAuD;gBACvD,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;gBAE7B,4CAA4C;gBAC5C,wDAAwD;gBACxD,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAEzC,qEAAqE;gBACrE,8DAA8D;gBAC9D,4EAA4E;gBAC5E,MAAM,WAAW,GAAG,+CAA+C,IAAI,gEAAgE,CAAC;gBAExI,IAAI,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACb,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;oBACrD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBAEnC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;wBACvB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;oBAC9D,CAAC;gBACF,CAAC;gBAED,oDAAoD;gBACpD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE;oBAC3C,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;oBAC5B,IAAI,EAAE,IAAI;iBACV,CAAC,CAAC;gBAEH,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;gBACpE,CAAC;gBAED,OAAO,MAAM,CAAC;YACf,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5E,IAAI,YAAY,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;oBACzD,MAAM,IAAI,oBAAY,CAAC,8BAA8B,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC;gBACnF,CAAC;gBACD,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;oBAC3C,MAAM,IAAI,wBAAgB,CACzB,uCAAuC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAClE,EAAE,CACF,CAAC;gBACH,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;YAClE,CAAC;QACF,CAAC;QAED;;;;WAIG;QACH,KAAK,CAAC,OAAO;YACZ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,OAAO;YACR,CAAC;YAED,sEAAsE;YACtE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC9B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,CAAC;YAED,8BAA8B;YAC9B,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC;YAEhC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YACzB,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;YAEzB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC5C,CAAC;QACF,CAAC;QAED;;;;WAIG;QACH,UAAU;YACT,OAAO,IAAI,CAAC,QAAQ,CAAC;QACtB,CAAC;KACD;IA1eD,4CA0eC"}