@oneuptime/common 11.7.4 → 12.0.0

package/build/dist/Server/Utils/AI/SRE/SubjectCodeFixRun.js.map

@@ -1 +1 @@
-{"version":3,"file":"SubjectCodeFixRun.js","sourceRoot":"","sources":["../../../../../../Server/Utils/AI/SRE/SubjectCodeFixRun.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,SAAS,MAAM,gCAAgC,CAAC;AACvD,OAAO,WAAW,MAAM,kCAAkC,CAAC;AAC3D,OAAO,eAAe,MAAM,sCAAsC,CAAC;AAEnE,OAAO,kBAAkB,MAAM,qDAAqD,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,KAAK,MAAM,yCAAyC,CAAC;AAC5D,OAAO,YAAY,MAAM,gCAAgC,CAAC;AAC1D,OAAO,qBAAqB,MAAM,yCAAyC,CAAC;AAC5E,OAAO,YAAY,MAAM,yBAAyB,CAAC;AACnD,OAAO,WAAW,MAAM,qCAAqC,CAAC;AAC9D,OAAO,WAAW,MAAM,6BAA6B,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,CAAC,OAAO,OAAO,iBAAiB;IACpC;;;OAGG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,+BAA+B,CACjD,SAAmB;QAEnB,MAAM,wBAAwB,GAAW,CACvC,MAAM,qBAAqB,CAAC,OAAO,CAAC;YAClC,KAAK,EAAE;gBACL,SAAS;gBACT,kBAAkB,EAAE,kBAAkB,CAAC,MAAM;gBAC7C,uBAAuB,EAAE,WAAW,CAAC,OAAO,EAAE;aAC/C;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CACH,CAAC,QAAQ,EAAE,CAAC;QAEb,OAAO,wBAAwB,GAAG,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,IAIhD;QACC,OAAO,YAAY,CAAC,SAAS,CAAC;YAC5B,KAAK,gCACH,OAAO,EAAE,SAAS,CAAC,OAAO,EAC1B,eAAe,EAAE,IAAI,CAAC,QAAQ,IAC3B,CAAC,IAAI,CAAC,UAAU;gBACjB,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,UAAU,EAAE;gBAC5C,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,OAAQ,EAAE,CAAC,KAC1C,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;oBACxB,WAAW,CAAC,SAAS;oBACrB,WAAW,CAAC,KAAK;oBACjB,WAAW,CAAC,SAAS;oBACrB,WAAW,CAAC,KAAK;iBAClB,CAAC,GACH;YACD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;YACrB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,IAG5D;QACC,MAAM,UAAU,GAAiB,MAAM,YAAY,CAAC,MAAM,CAAC;YACzD,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,eAAe,EAAE,eAAe,CAAC,cAAc;gBAC/C,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;oBACxB,WAAW,CAAC,SAAS;oBACrB,WAAW,CAAC,KAAK;oBACjB,WAAW,CAAC,SAAS;oBACrB,WAAW,CAAC,KAAK;iBAClB,CAAC;aACH;YACD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;YACxC,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,CAAC,GAAU,EAAW,EAAE;;YACtC,OAAO,CAAA,MAAA,GAAG,CAAC,WAAW,0CAAE,OAAO,MAAK,IAAI,CAAC,OAAO,CAAC;QACnD,CAAC,CAAC,IAAI,IAAI,CACX,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,IAIzD;QACC,MAAM,UAAU,GAAiB,MAAM,YAAY,CAAC,MAAM,CAAC;YACzD,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,eAAe,EAAE,IAAI,CAAC,QAAQ;gBAC9B,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC;oBACxB,WAAW,CAAC,SAAS;oBACrB,WAAW,CAAC,KAAK;oBACjB,WAAW,CAAC,SAAS;oBACrB,WAAW,CAAC,KAAK;iBAClB,CAAC;aACH;YACD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;YACxC,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,CAAC,GAAU,EAAW,EAAE;;YACtC,OAAO,CAAA,MAAA,GAAG,CAAC,WAAW,0CAAE,kBAAkB,MAAK,IAAI,CAAC,kBAAkB,CAAC;QACzE,CAAC,CAAC,IAAI,IAAI,CACX,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAO5C;QACC,MAAM,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEtD,MAAM,GAAG,GAAU,IAAI,KAAK,EAAE,CAAC;QAC/B,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,GAAG,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAChC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpC,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QAEhC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,GAAG,CAAC,qBAAqB,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9C,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC;QACxC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,CAAC;QAED,OAAO,YAAY,CAAC,MAAM,CAAC;YACzB,IAAI,EAAE,GAAG;YACT,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;CACF;AApLqB;IADnB,WAAW,EAAE;;qCAED,QAAQ;;8DAcpB;AAUmB;IADnB,WAAW,EAAE;;;;2DAuBb;AAYmB;IADnB,WAAW,EAAE;;;;uEA4Bb;AAWmB;IADnB,WAAW,EAAE;;;;oEA6Bb;AAoBmB;IADnB,WAAW,EAAE;;;;uDAmCb"}
+{"version":3,"file":"SubjectCodeFixRun.js","sourceRoot":"","sources":["../../../../../../Server/Utils/AI/SRE/SubjectCodeFixRun.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,QAAQ,MAAM,4BAA4B,CAAC;AAClD,OAAO,SAAS,MAAM,gCAAgC,CAAC;AACvD,OAAO,WAAW,EAAE,EAClB,iBAAiB,GAClB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,eAAe,MAAM,sCAAsC,CAAC;AAEnE,OAAO,kBAAkB,MAAM,qDAAqD,CAAC;AACrF,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,KAAK,MAAM,yCAAyC,CAAC;AAC5D,OAAO,YAAY,MAAM,gCAAgC,CAAC;AAC1D,OAAO,qBAAqB,MAAM,yCAAyC,CAAC;AAC5E,OAAO,YAAY,MAAM,yBAAyB,CAAC;AACnD,OAAO,WAAW,MAAM,qCAAqC,CAAC;AAC9D,OAAO,WAAW,MAAM,6BAA6B,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,CAAC,OAAO,OAAO,iBAAiB;IACpC;;;OAGG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,+BAA+B,CACjD,SAAmB;QAEnB,MAAM,wBAAwB,GAAW,CACvC,MAAM,qBAAqB,CAAC,OAAO,CAAC;YAClC,KAAK,EAAE;gBACL,SAAS;gBACT,kBAAkB,EAAE,kBAAkB,CAAC,MAAM;gBAC7C,uBAAuB,EAAE,WAAW,CAAC,OAAO,EAAE;aAC/C;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CACH,CAAC,QAAQ,EAAE,CAAC;QAEb,OAAO,wBAAwB,GAAG,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;OAMG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,IAIhD;QACC,OAAO,YAAY,CAAC,SAAS,CAAC;YAC5B,KAAK,gCACH,OAAO,EAAE,SAAS,CAAC,OAAO,EAC1B,eAAe,EAAE,IAAI,CAAC,QAAQ,IAC3B,CAAC,IAAI,CAAC,UAAU;gBACjB,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,UAAU,EAAE;gBAC5C,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,OAAQ,EAAE,CAAC,KAC1C,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC,GAChE;YACD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE;YACrB,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,IAG5D;QACC,MAAM,UAAU,GAAiB,MAAM,YAAY,CAAC,MAAM,CAAC;YACzD,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,eAAe,EAAE,eAAe,CAAC,cAAc;gBAC/C,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;aAChE;YACD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;YACxC,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,CAAC,GAAU,EAAW,EAAE;;YACtC,OAAO,CAAA,MAAA,GAAG,CAAC,WAAW,0CAAE,OAAO,MAAK,IAAI,CAAC,OAAO,CAAC;QACnD,CAAC,CAAC,IAAI,IAAI,CACX,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,IAIzD;QACC,MAAM,UAAU,GAAiB,MAAM,YAAY,CAAC,MAAM,CAAC;YACzD,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,eAAe,EAAE,IAAI,CAAC,QAAQ;gBAC9B,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,CAAC;aAChE;YACD,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;YACxC,KAAK,EAAE,iBAAiB;YACxB,IAAI,EAAE,CAAC;YACP,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;QAEH,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,CAAC,GAAU,EAAW,EAAE;;YACtC,OAAO,CAAA,MAAA,GAAG,CAAC,WAAW,0CAAE,kBAAkB,MAAK,IAAI,CAAC,kBAAkB,CAAC;QACzE,CAAC,CAAC,IAAI,IAAI,CACX,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,IAO5C;QACC,MAAM,YAAY,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEtD,MAAM,GAAG,GAAU,IAAI,KAAK,EAAE,CAAC;QAC/B,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,GAAG,CAAC,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAChC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpC,GAAG,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QAEhC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,GAAG,CAAC,qBAAqB,GAAG,IAAI,CAAC,UAAU,CAAC;QAC9C,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxB,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC;QACxC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,CAAC;QAED,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACrC,CAAC;QAED,OAAO,YAAY,CAAC,MAAM,CAAC;YACzB,IAAI,EAAE,GAAG;YACT,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;CACF;AArKqB;IADnB,WAAW,EAAE;;qCAED,QAAQ;;8DAcpB;AAUmB;IADnB,WAAW,EAAE;;;;2DAkBb;AAYmB;IADnB,WAAW,EAAE;;;;uEAuBb;AAWmB;IADnB,WAAW,EAAE;;;;oEAwBb;AAoBmB;IADnB,WAAW,EAAE;;;;uDAmCb"}

package/build/dist/Server/Utils/AI/Toolbox/CodeWriteTools.js

@@ -15,8 +15,8 @@ import { resolveTargetRepository } from "./CodeTools";
  * The trust boundary here is the sharpest in the toolbox. This agent reads
  * telemetry — log lines and exception messages authored by whatever the
  * monitored application threw, which an attacker can influence — and it can
- * now turn that input into code. AISentinelVision.md's answer to exactly this
- * threat ("a prompt-injected log line must never become a merged backdoor") is
+ * now turn that input into code. The answer to exactly this threat (a
+ * prompt-injected log line must never become a merged backdoor) is
  * structural, not behavioural: a human reviews before anything merges.
  *
  * So the invariant these tools enforce, and which nothing here may relax:

package/build/dist/Server/Utils/Alert/AlertPrivacyFilter.js

@@ -94,4 +94,40 @@ export function applyAlertRelatedRecordPrivacyFilter(query, props) {
     query.alertId = combineWithPrivacyClause(query.alertId, rawClause);
     return query;
 }
+/*
+ * Null-tolerant variant of the related-record filter for child tables whose
+ * alert link is OPTIONAL (e.g. AutoRemediationSuggestion). See the incident
+ * twin for why: `NULL IN (subquery)` is NULL, so the strict clause would
+ * hide every incident-linked row.
+ */
+export function getOptionalAlertRelatedRecordPrivacyRaw(props) {
+    if (shouldBypassAlertPrivacy(props)) {
+        return undefined;
+    }
+    if (!props.userId) {
+        return Raw((alias) => {
+            return `(${alias} IS NULL OR ${alias} IN (SELECT a."_id" FROM "Alert" a WHERE a."deletedAt" IS NULL AND (a."isPrivate" IS NULL OR a."isPrivate" = FALSE)))`;
+        });
+    }
+    const uidRid = "uidRelOpt_" + Text.generateRandomText(10);
+    return Raw((alias) => {
+        return (`(${alias} IS NULL OR ${alias} IN (SELECT a."_id" FROM "Alert" a WHERE a."deletedAt" IS NULL AND (` +
+            `a."isPrivate" IS NULL OR a."isPrivate" = FALSE OR ` +
+            `a."_id" IN (SELECT aou."alertId" FROM "AlertOwnerUser" aou WHERE aou."userId" = :${uidRid} AND aou."deletedAt" IS NULL) OR ` +
+            `a."_id" IN (SELECT aot."alertId" FROM "AlertOwnerTeam" aot INNER JOIN "TeamMember" tm ON tm."teamId" = aot."teamId" WHERE tm."userId" = :${uidRid} AND tm."deletedAt" IS NULL AND aot."deletedAt" IS NULL))))`);
+    }, {
+        [uidRid]: props.userId.toString(),
+    });
+}
+export function applyOptionalAlertRelatedRecordPrivacyFilter(query, props) {
+    const rawClause = getOptionalAlertRelatedRecordPrivacyRaw(props);
+    if (!rawClause) {
+        return query;
+    }
+    if (!query) {
+        return { alertId: rawClause };
+    }
+    query.alertId = combineWithPrivacyClause(query.alertId, rawClause);
+    return query;
+}
 //# sourceMappingURL=AlertPrivacyFilter.js.map

package/build/dist/Server/Utils/Alert/AlertPrivacyFilter.js.map

@@ -1 +1 @@
-{"version":3,"file":"AlertPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/Alert/AlertPrivacyFilter.ts"],"names":[],"mappings":"AAEA,OAAO,UAGN,MAAM,2BAA2B,CAAC;AACnC,OAAO,IAAI,MAAM,qBAAqB,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAqC;;IAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACvD,MAAM,UAAU,GACd,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9D,IACE,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,WAAW,0CAAE,IAAI,CAAC,CAAC,CAAiB,EAAW,EAAE;YAC3D,OAAO,CACL,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY;gBACxC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY,CACzC,CAAC;QACJ,CAAC,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAqC;IAErC,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE;YACnC,OAAO,IAAI,KAAK,eAAe,KAAK,WAAW,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAW,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEhE,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,CACL,IAAI,KAAK,eAAe,KAAK,cAAc;YAC3C,0FAA0F,MAAM,mCAAmC;YACnI,kJAAkJ,MAAM,2DAA2D,CACpN,CAAC;IACJ,CAAC,EACD;QACE,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,KAAqC;IAErC,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE;YACnC,OAAO,IAAI,KAAK,uHAAuH,CAAC;QAC1I,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAW,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAE/D,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,CACL,IAAI,KAAK,sEAAsE;YAC/E,oDAAoD;YACpD,oFAAoF,MAAM,mCAAmC;YAC7H,4IAA4I,MAAM,6DAA6D,CAChN,CAAC;IACJ,CAAC,EACD;QACE,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAQ,EACR,KAAqC;IAErC,MAAM,SAAS,GACb,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,SAAS,EAAE,SAAS,EAAkB,CAAC;IAClD,CAAC;IAEA,KAAa,CAAC,SAAS,GAAG,wBAAwB,CAChD,KAAa,CAAC,SAAS,EACxB,SAAS,CACV,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,KAAQ,EACR,KAAqC;IAErC,MAAM,SAAS,GACb,+BAA+B,CAAC,KAAK,CAAC,CAAC;IAEzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,SAAS,EAAkB,CAAC;IAChD,CAAC;IAEA,KAAa,CAAC,OAAO,GAAG,wBAAwB,CAC9C,KAAa,CAAC,OAAO,EACtB,SAAS,CACV,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"AlertPrivacyFilter.js","sourceRoot":"","sources":["../../../../../Server/Utils/Alert/AlertPrivacyFilter.ts"],"names":[],"mappings":"AAEA,OAAO,UAGN,MAAM,2BAA2B,CAAC;AACnC,OAAO,IAAI,MAAM,qBAAqB,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAqC;;IAErC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,0BAA0B,EAAE,CAAC;QACvD,MAAM,UAAU,GACd,KAAK,CAAC,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE9D,IACE,MAAA,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,WAAW,0CAAE,IAAI,CAAC,CAAC,CAAiB,EAAW,EAAE;YAC3D,OAAO,CACL,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY;gBACxC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,YAAY,CACzC,CAAC;QACJ,CAAC,CAAC,EACF,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,KAAqC;IAErC,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE;YACnC,OAAO,IAAI,KAAK,eAAe,KAAK,WAAW,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAW,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEhE,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,CACL,IAAI,KAAK,eAAe,KAAK,cAAc;YAC3C,0FAA0F,MAAM,mCAAmC;YACnI,kJAAkJ,MAAM,2DAA2D,CACpN,CAAC;IACJ,CAAC,EACD;QACE,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,KAAqC;IAErC,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE;YACnC,OAAO,IAAI,KAAK,uHAAuH,CAAC;QAC1I,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAW,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAE/D,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,CACL,IAAI,KAAK,sEAAsE;YAC/E,oDAAoD;YACpD,oFAAoF,MAAM,mCAAmC;YAC7H,4IAA4I,MAAM,6DAA6D,CAChN,CAAC;IACJ,CAAC,EACD;QACE,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAQ,EACR,KAAqC;IAErC,MAAM,SAAS,GACb,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAEhC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,SAAS,EAAE,SAAS,EAAkB,CAAC;IAClD,CAAC;IAEA,KAAa,CAAC,SAAS,GAAG,wBAAwB,CAChD,KAAa,CAAC,SAAS,EACxB,SAAS,CACV,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,KAAQ,EACR,KAAqC;IAErC,MAAM,SAAS,GACb,+BAA+B,CAAC,KAAK,CAAC,CAAC;IAEzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,SAAS,EAAkB,CAAC;IAChD,CAAC;IAEA,KAAa,CAAC,OAAO,GAAG,wBAAwB,CAC9C,KAAa,CAAC,OAAO,EACtB,SAAS,CACV,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uCAAuC,CACrD,KAAqC;IAErC,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,CAAC,KAAa,EAAU,EAAE;YACnC,OAAO,IAAI,KAAK,eAAe,KAAK,uHAAuH,CAAC;QAC9J,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAW,YAAY,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAElE,OAAO,GAAG,CACR,CAAC,KAAa,EAAU,EAAE;QACxB,OAAO,CACL,IAAI,KAAK,eAAe,KAAK,sEAAsE;YACnG,oDAAoD;YACpD,oFAAoF,MAAM,mCAAmC;YAC7H,4IAA4I,MAAM,6DAA6D,CAChN,CAAC;IACJ,CAAC,EACD;QACE,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;KAClC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4CAA4C,CAC1D,KAAQ,EACR,KAAqC;IAErC,MAAM,SAAS,GACb,uCAAuC,CAAC,KAAK,CAAC,CAAC;IAEjD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,SAAS,EAAkB,CAAC;IAChD,CAAC;IAEA,KAAa,CAAC,OAAO,GAAG,wBAAwB,CAC9C,KAAa,CAAC,OAAO,EACtB,SAAS,CACV,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}

package/build/dist/Server/Utils/AutoRemediation/CommandPlanExecutor.js

@@ -0,0 +1,498 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import ObjectID from "../../../Types/ObjectID";
+import OneUptimeDate from "../../../Types/Date";
+import { AlertFeedEventType } from "../../../Models/DatabaseModels/AlertFeed";
+import { IncidentFeedEventType } from "../../../Models/DatabaseModels/IncidentFeed";
+import AutoRemediationSuggestionStatus from "../../../Types/AutoRemediation/AutoRemediationSuggestionStatus";
+import AutoRemediationSuggestionType from "../../../Types/AutoRemediation/AutoRemediationSuggestionType";
+import AutoRemediationVerificationStatus from "../../../Types/AutoRemediation/AutoRemediationVerificationStatus";
+import { AiRemediationCommandExecutionStatus, AiRemediationCommandPlanUtil, AiRemediationPlanExecutionStatus, AiRemediationRollbackStatus, } from "../../../Types/AutoRemediation/AiRemediationCommandPlan";
+import CommandPolicy from "../../../Utils/AiRemediation/CommandPolicy";
+import { Green500, Red500 } from "../../../Types/BrandColors";
+import AlertFeedService from "../../Services/AlertFeedService";
+import AutoRemediationSuggestionService from "../../Services/AutoRemediationSuggestionService";
+import IncidentFeedService from "../../Services/IncidentFeedService";
+import RunnerJobService, { isTerminalAgentJobStatus, } from "../../Services/RunnerJobService";
+import RunnerJobStatus from "../../../Types/Runbook/RunnerJobStatus";
+import ToolResultSerializer from "../AI/Toolbox/Serializer";
+import logger from "../Logger";
+import CaptureSpan from "../Telemetry/CaptureSpan";
+/*
+ * Auto-remediation — the approved-command-plan executor and the rollback
+ * arm.
+ *
+ * When a human approves a CommandPlan suggestion, this executes EXACTLY the
+ * frozen plan, command by command, through the same RunnerJob claim path
+ * runbook steps use (origin AiRemediation, so only canRunAiCommands Runners
+ * serve it). Progress is persisted onto the suggestion after every command,
+ * so a pod death mid-plan leaves a truthful record — the verifier treats a
+ * plan that never completes inside the window as a failed remediation.
+ *
+ * The rollback arm runs when verification FAILS: every successfully
+ * executed command that carried a rollbackCommand is undone, in reverse
+ * order. Rollback commands were visible on the approval card (or, for
+ * FullAuto, passed the same policy the forward command did) and are
+ * re-checked against the hard denylist here anyway.
+ */
+const AI_COMMAND_CLAIM_TIMEOUT_MS = 60000;
+const MAX_STORED_OUTPUT_CHARS = 6000;
+export default class CommandPlanExecutor {
+    /*
+     * Execute an Approved plan end-to-end. Detached-callable (the approve API
+     * fires it without awaiting): never throws.
+     */
+    static async executeApprovedPlan(data) {
+        try {
+            const suggestion = await AutoRemediationSuggestionService.findOneById({
+                id: data.suggestionId,
+                select: {
+                    _id: true,
+                    projectId: true,
+                    status: true,
+                    suggestionType: true,
+                    commandPlan: true,
+                    aiRunId: true,
+                    incidentId: true,
+                    alertId: true,
+                    ruleNameSnapshot: true,
+                },
+                props: { isRoot: true },
+            });
+            if (!suggestion ||
+                suggestion.status !== AutoRemediationSuggestionStatus.Approved ||
+                suggestion.suggestionType !== AutoRemediationSuggestionType.CommandPlan) {
+                return;
+            }
+            const plan = AiRemediationCommandPlanUtil.parse(suggestion.commandPlan);
+            if (!plan) {
+                logger.error(`CommandPlanExecutor: suggestion ${data.suggestionId.toString()} is Approved but its command plan is missing or invalid; nothing executed.`);
+                return;
+            }
+            /*
+             * Idempotence: only NotStarted plans execute. A re-fired executor (or
+             * a second pod racing the same approval) sees Running/terminal and
+             * leaves it alone.
+             */
+            if (plan.executionStatus &&
+                plan.executionStatus !== AiRemediationPlanExecutionStatus.NotStarted) {
+                return;
+            }
+            plan.executionStatus = AiRemediationPlanExecutionStatus.Running;
+            plan.executionStartedAt = OneUptimeDate.getCurrentDate().toISOString();
+            await this.persistPlan(suggestion, plan);
+            let failed = false;
+            for (const command of plan.commands) {
+                // FullAuto-executed entries never appear in approved Suggest plans.
+                if (command.execution) {
+                    continue;
+                }
+                if (failed) {
+                    command.execution = {
+                        status: AiRemediationCommandExecutionStatus.Skipped,
+                        errorMessage: "Skipped because an earlier command failed.",
+                    };
+                    continue;
+                }
+                /*
+                 * Abort check between commands. Verification runs on its own sweep
+                 * and can fail this remediation while the plan is still executing
+                 * (a slow Runner, a long command); once it does, it rolls the
+                 * executed commands back. Continuing to push NEW forward commands
+                 * into a rollback that is already under way is how a plan and its
+                 * undo end up fighting each other, so the executor stops the moment
+                 * verification is no longer Pending or a human moved the
+                 * suggestion off Approved.
+                 */
+                if (!(await this.isStillExecutable(suggestion.id))) {
+                    command.execution = {
+                        status: AiRemediationCommandExecutionStatus.Skipped,
+                        errorMessage: "Skipped: this remediation was settled (verified, failed, or actioned by a human) before the command ran.",
+                    };
+                    failed = true;
+                    continue;
+                }
+                /*
+                 * Persist the Pending marker BEFORE the side effect: a pod death
+                 * mid-command must leave a record that this command may have run.
+                 */
+                command.execution = {
+                    status: AiRemediationCommandExecutionStatus.Pending,
+                    startedAt: OneUptimeDate.getCurrentDate().toISOString(),
+                };
+                await this.persistPlan(suggestion, plan);
+                const state = await this.executeOneCommand({ suggestion, command });
+                command.execution = state;
+                await this.persistPlan(suggestion, plan);
+                if (state.status !== AiRemediationCommandExecutionStatus.Succeeded) {
+                    failed = true;
+                }
+            }
+            plan.executionStatus = failed
+                ? AiRemediationPlanExecutionStatus.Failed
+                : AiRemediationPlanExecutionStatus.Completed;
+            plan.executionCompletedAt = OneUptimeDate.getCurrentDate().toISOString();
+            await this.persistPlan(suggestion, plan);
+            await this.postFeedItem({
+                suggestion,
+                markdown: failed
+                    ? `⚠️ **Approved AI command plan did not complete** — a command failed; the remaining commands were skipped. Review the per-command output on the suggestion. Verification will judge (and roll back) what ran.`
+                    : `⚡ **Approved AI command plan executed** (${plan.commands.length} command(s)). Verification is watching the monitors for recovery.`,
+                pingWorkspace: failed,
+                displayColor: failed ? Red500 : Green500,
+            });
+        }
+        catch (error) {
+            logger.error(`CommandPlanExecutor: failed to execute approved plan for suggestion ${data.suggestionId.toString()}: ${error}`);
+        }
+    }
+    /*
+     * Undo a failed remediation: run the rollbackCommand of every command
+     * that executed successfully, in REVERSE order. Called by the verifier
+     * after it wins the Failed verification transition — single caller by
+     * construction. Never throws.
+     */
+    static async executeRollback(data) {
+        var _a, _b;
+        const { suggestion } = data;
+        try {
+            const plan = AiRemediationCommandPlanUtil.parse(suggestion.commandPlan);
+            if (!plan) {
+                return;
+            }
+            if (plan.rollbackStatus &&
+                plan.rollbackStatus !== AiRemediationRollbackStatus.NotAttempted) {
+                return; // Already rolled back (or judged not applicable).
+            }
+            /*
+             * A command whose record still says Pending may nonetheless have run:
+             * the executor persists Pending, enqueues, and can die before writing
+             * the outcome. The RunnerJob row is the authority on what actually
+             * happened, so resolve those before deciding what to undo — otherwise a
+             * pod death silently exempts a real state change from rollback.
+             */
+            await this.reconcilePendingExecutions(suggestion, plan);
+            const rollbackTargets = plan.commands
+                .filter((command) => {
+                var _a;
+                return (((_a = command.execution) === null || _a === void 0 ? void 0 : _a.status) ===
+                    AiRemediationCommandExecutionStatus.Succeeded &&
+                    Boolean(command.rollbackCommand) &&
+                    !command.rollbackExecution);
+            })
+                .reverse();
+            if (rollbackTargets.length === 0) {
+                plan.rollbackStatus = AiRemediationRollbackStatus.NotApplicable;
+                await this.persistPlan(suggestion, plan);
+                return;
+            }
+            let anyFailed = false;
+            for (const command of rollbackTargets) {
+                const rollbackCommand = command.rollbackCommand;
+                const denyReason = CommandPolicy.getDenyReason(rollbackCommand);
+                if (denyReason) {
+                    command.rollbackExecution = {
+                        status: AiRemediationCommandExecutionStatus.Failed,
+                        errorMessage: `Rollback refused by the command policy: ${denyReason}.`,
+                    };
+                    anyFailed = true;
+                    await this.persistPlan(suggestion, plan);
+                    continue;
+                }
+                command.rollbackExecution = {
+                    status: AiRemediationCommandExecutionStatus.Pending,
+                    startedAt: OneUptimeDate.getCurrentDate().toISOString(),
+                };
+                await this.persistPlan(suggestion, plan);
+                try {
+                    const job = await RunnerJobService.enqueueAiCommand({
+                        projectId: suggestion.projectId,
+                        aiRunId: suggestion.aiRunId,
+                        autoRemediationSuggestionId: suggestion.id,
+                        stepId: `ai-rollback-${command.sequence}`,
+                        stepType: command.stepType,
+                        targetAgentId: new ObjectID(command.runnerId),
+                        command: rollbackCommand,
+                        credentialId: command.credentialId,
+                        timeoutInMs: command.timeoutInMs,
+                        claimTimeoutInMs: AI_COMMAND_CLAIM_TIMEOUT_MS,
+                    });
+                    command.rollbackExecution.runnerJobId = (_a = job.id) === null || _a === void 0 ? void 0 : _a.toString();
+                    const terminalJob = await RunnerJobService.pollUntilTerminal({
+                        jobId: job.id,
+                        claimTimeoutInMs: AI_COMMAND_CLAIM_TIMEOUT_MS,
+                        executionTimeoutInMs: command.timeoutInMs,
+                    });
+                    const succeeded = terminalJob.status === RunnerJobStatus.Succeeded;
+                    command.rollbackExecution.status = succeeded
+                        ? AiRemediationCommandExecutionStatus.Succeeded
+                        : AiRemediationCommandExecutionStatus.Failed;
+                    command.rollbackExecution.completedAt =
+                        OneUptimeDate.getCurrentDate().toISOString();
+                    command.rollbackExecution.exitCode = terminalJob.exitCode;
+                    command.rollbackExecution.output = this.capOutput(terminalJob.output || "");
+                    if (!succeeded) {
+                        command.rollbackExecution.errorMessage =
+                            terminalJob.errorMessage ||
+                                `Rollback ended with status ${terminalJob.status}.`;
+                        anyFailed = true;
+                    }
+                }
+                catch (error) {
+                    command.rollbackExecution.status =
+                        AiRemediationCommandExecutionStatus.Failed;
+                    command.rollbackExecution.errorMessage =
+                        error instanceof Error ? error.message : String(error);
+                    anyFailed = true;
+                }
+                await this.persistPlan(suggestion, plan);
+            }
+            plan.rollbackStatus = anyFailed
+                ? AiRemediationRollbackStatus.Failed
+                : AiRemediationRollbackStatus.Completed;
+            await this.persistPlan(suggestion, plan);
+            await this.postFeedItem({
+                suggestion,
+                markdown: anyFailed
+                    ? `⚠️ **Auto-remediation rollback did not fully complete** — at least one rollback command failed. Review the suggestion's per-command record; manual intervention may be needed.`
+                    : `↩️ **Auto-remediation rolled back** — the executed commands' rollback commands ran after verification failed. Escalation continues as normal.`,
+                pingWorkspace: true,
+                displayColor: anyFailed ? Red500 : Green500,
+            });
+        }
+        catch (error) {
+            logger.error(`CommandPlanExecutor: rollback failed for suggestion ${(_b = suggestion.id) === null || _b === void 0 ? void 0 : _b.toString()}: ${error}`);
+        }
+    }
+    // ------------------------------------------------------------------
+    static async executeOneCommand(data) {
+        var _a, _b;
+        const { suggestion, command } = data;
+        /*
+         * Execution-time denylist re-check: the plan was validated when it was
+         * composed, but the policy may have been tightened since.
+         */
+        const denyReason = CommandPolicy.getDenyReason(command.command);
+        if (denyReason) {
+            return {
+                status: AiRemediationCommandExecutionStatus.Failed,
+                errorMessage: `Refused by the remediation command policy at execution time: ${denyReason}.`,
+            };
+        }
+        const state = {
+            status: AiRemediationCommandExecutionStatus.Pending,
+            startedAt: ((_a = command.execution) === null || _a === void 0 ? void 0 : _a.startedAt) ||
+                OneUptimeDate.getCurrentDate().toISOString(),
+        };
+        try {
+            const job = await RunnerJobService.enqueueAiCommand({
+                projectId: suggestion.projectId,
+                aiRunId: suggestion.aiRunId,
+                autoRemediationSuggestionId: suggestion.id,
+                stepId: `ai-approved-${command.sequence}`,
+                stepType: command.stepType,
+                targetAgentId: new ObjectID(command.runnerId),
+                command: command.command,
+                credentialId: command.credentialId,
+                timeoutInMs: command.timeoutInMs,
+                claimTimeoutInMs: AI_COMMAND_CLAIM_TIMEOUT_MS,
+            });
+            state.runnerJobId = (_b = job.id) === null || _b === void 0 ? void 0 : _b.toString();
+            const terminalJob = await RunnerJobService.pollUntilTerminal({
+                jobId: job.id,
+                claimTimeoutInMs: AI_COMMAND_CLAIM_TIMEOUT_MS,
+                executionTimeoutInMs: command.timeoutInMs,
+            });
+            if (!isTerminalAgentJobStatus(terminalJob.status)) {
+                throw new Error("Command job did not reach a terminal state.");
+            }
+            const succeeded = terminalJob.status === RunnerJobStatus.Succeeded;
+            state.status = succeeded
+                ? AiRemediationCommandExecutionStatus.Succeeded
+                : AiRemediationCommandExecutionStatus.Failed;
+            state.completedAt = OneUptimeDate.getCurrentDate().toISOString();
+            state.exitCode = terminalJob.exitCode;
+            state.output = this.capOutput(terminalJob.output || "");
+            if (!succeeded) {
+                state.errorMessage =
+                    terminalJob.errorMessage ||
+                        `Command ended with status ${terminalJob.status}.`;
+            }
+        }
+        catch (error) {
+            state.status = AiRemediationCommandExecutionStatus.Failed;
+            state.completedAt = OneUptimeDate.getCurrentDate().toISOString();
+            state.errorMessage =
+                error instanceof Error ? error.message : String(error);
+        }
+        return state;
+    }
+    /*
+     * Settle commands left in Pending/Running by reading their RunnerJob. A
+     * job that reached Succeeded really ran, so the command becomes Succeeded
+     * (and therefore rollback-eligible); any other terminal state, or a
+     * missing job, becomes Failed. Jobs still in flight are left alone.
+     */
+    static async reconcilePendingExecutions(suggestion, plan) {
+        var _a, _b, _c;
+        let changed = false;
+        for (const command of plan.commands) {
+            const status = (_a = command.execution) === null || _a === void 0 ? void 0 : _a.status;
+            const isUnsettled = status === AiRemediationCommandExecutionStatus.Pending ||
+                status === AiRemediationCommandExecutionStatus.Running;
+            if (!isUnsettled || !((_b = command.execution) === null || _b === void 0 ? void 0 : _b.runnerJobId)) {
+                continue;
+            }
+            try {
+                const job = await RunnerJobService.findOneById({
+                    id: new ObjectID(command.execution.runnerJobId),
+                    select: {
+                        _id: true,
+                        status: true,
+                        output: true,
+                        exitCode: true,
+                        errorMessage: true,
+                    },
+                    props: { isRoot: true },
+                });
+                if (!job || !isTerminalAgentJobStatus(job.status)) {
+                    continue;
+                }
+                const succeeded = job.status === RunnerJobStatus.Succeeded;
+                command.execution.status = succeeded
+                    ? AiRemediationCommandExecutionStatus.Succeeded
+                    : AiRemediationCommandExecutionStatus.Failed;
+                command.execution.exitCode = job.exitCode;
+                command.execution.output = this.capOutput(job.output || "");
+                command.execution.errorMessage = succeeded
+                    ? undefined
+                    : job.errorMessage ||
+                        `Command ended with status ${job.status} (recovered from the job record).`;
+                changed = true;
+            }
+            catch (error) {
+                logger.error(`CommandPlanExecutor: could not reconcile command ${command.sequence} of suggestion ${(_c = suggestion.id) === null || _c === void 0 ? void 0 : _c.toString()}: ${error}`);
+            }
+        }
+        if (changed) {
+            await this.persistPlan(suggestion, plan);
+        }
+    }
+    /*
+     * Whether the suggestion is still an Approved remediation whose
+     * verification window is open. False means someone (the verifier, or a
+     * human) has settled it — or the window has closed — and no further
+     * forward command may run.
+     *
+     * The deadline is checked HERE rather than waiting to be told: the
+     * verifier's sweep settles a plan that overran its window and then rolls
+     * back what already succeeded, so the executor has to stand down on the
+     * same clock instead of pushing new changes into an in-flight rollback.
+     */
+    static async isStillExecutable(suggestionId) {
+        try {
+            const current = await AutoRemediationSuggestionService.findOneById({
+                id: suggestionId,
+                select: {
+                    _id: true,
+                    status: true,
+                    verificationStatus: true,
+                    verificationDeadlineAt: true,
+                },
+                props: { isRoot: true },
+            });
+            if (!current) {
+                return false;
+            }
+            if (current.verificationDeadlineAt &&
+                current.verificationDeadlineAt.getTime() <
+                    OneUptimeDate.getCurrentDate().getTime()) {
+                return false;
+            }
+            return (current.status === AutoRemediationSuggestionStatus.Approved &&
+                current.verificationStatus === AutoRemediationVerificationStatus.Pending);
+        }
+        catch (error) {
+            /*
+             * Fail OPEN here on purpose: a transient read failure must not turn a
+             * half-applied remediation into a permanently half-applied one. The
+             * command's own record still lands before it runs.
+             */
+            logger.error(`CommandPlanExecutor: could not re-check suggestion ${suggestionId.toString()} before the next command; continuing: ${error}`);
+            return true;
+        }
+    }
+    static async persistPlan(suggestion, plan) {
+        var _a;
+        try {
+            await AutoRemediationSuggestionService.updateOneById({
+                id: suggestion.id,
+                data: {
+                    commandPlan: AiRemediationCommandPlanUtil.toJSON(plan),
+                },
+                props: { isRoot: true },
+            });
+        }
+        catch (error) {
+            logger.error(`CommandPlanExecutor: failed to persist plan progress for suggestion ${(_a = suggestion.id) === null || _a === void 0 ? void 0 : _a.toString()}: ${error}`);
+        }
+    }
+    static capOutput(output) {
+        const redacted = ToolResultSerializer.redact(output).text;
+        if (redacted.length <= MAX_STORED_OUTPUT_CHARS) {
+            return redacted;
+        }
+        return `${redacted.slice(0, MAX_STORED_OUTPUT_CHARS)}\n... [output truncated]`;
+    }
+    static async postFeedItem(data) {
+        try {
+            if (data.suggestion.incidentId && data.suggestion.projectId) {
+                await IncidentFeedService.createIncidentFeedItem({
+                    incidentId: data.suggestion.incidentId,
+                    projectId: data.suggestion.projectId,
+                    incidentFeedEventType: IncidentFeedEventType.AutoRemediation,
+                    displayColor: data.displayColor,
+                    feedInfoInMarkdown: data.markdown,
+                    workspaceNotification: {
+                        sendWorkspaceNotification: data.pingWorkspace,
+                    },
+                });
+            }
+            else if (data.suggestion.alertId && data.suggestion.projectId) {
+                await AlertFeedService.createAlertFeedItem({
+                    alertId: data.suggestion.alertId,
+                    projectId: data.suggestion.projectId,
+                    alertFeedEventType: AlertFeedEventType.AutoRemediation,
+                    displayColor: data.displayColor,
+                    feedInfoInMarkdown: data.markdown,
+                    workspaceNotification: {
+                        sendWorkspaceNotification: data.pingWorkspace,
+                    },
+                });
+            }
+        }
+        catch (error) {
+            logger.error(`CommandPlanExecutor: failed to create feed item: ${error}`);
+        }
+    }
+}
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CommandPlanExecutor, "executeApprovedPlan", null);
+__decorate([
+    CaptureSpan(),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CommandPlanExecutor, "executeRollback", null);
+//# sourceMappingURL=CommandPlanExecutor.js.map

package/build/dist/Server/Utils/AutoRemediation/CommandPlanExecutor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CommandPlanExecutor.js","sourceRoot":"","sources":["../../../../../Server/Utils/AutoRemediation/CommandPlanExecutor.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,QAAQ,MAAM,yBAAyB,CAAC;AAC/C,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAGhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AACpF,OAAO,+BAA+B,MAAM,gEAAgE,CAAC;AAC7G,OAAO,6BAA6B,MAAM,8DAA8D,CAAC;AACzG,OAAO,iCAAiC,MAAM,kEAAkE,CAAC;AACjH,OAAO,EAGL,mCAAmC,EAEnC,4BAA4B,EAC5B,gCAAgC,EAChC,2BAA2B,GAC5B,MAAM,yDAAyD,CAAC;AACjE,OAAO,aAAa,MAAM,4CAA4C,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,gBAAgB,MAAM,iCAAiC,CAAC;AAC/D,OAAO,gCAAgC,MAAM,iDAAiD,CAAC;AAC/F,OAAO,mBAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,gBAAgB,EAAE,EACvB,wBAAwB,GACzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,eAAe,MAAM,wCAAwC,CAAC;AACrE,OAAO,oBAAoB,MAAM,0BAA0B,CAAC;AAC5D,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,WAAW,MAAM,0BAA0B,CAAC;AAEnD;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,2BAA2B,GAAW,KAAM,CAAC;AACnD,MAAM,uBAAuB,GAAW,IAAI,CAAC;AAE7C,MAAM,CAAC,OAAO,OAAO,mBAAmB;IACtC;;;OAGG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAEvC;QACC,IAAI,CAAC;YACH,MAAM,UAAU,GACd,MAAM,gCAAgC,CAAC,WAAW,CAAC;gBACjD,EAAE,EAAE,IAAI,CAAC,YAAY;gBACrB,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;oBACT,SAAS,EAAE,IAAI;oBACf,MAAM,EAAE,IAAI;oBACZ,cAAc,EAAE,IAAI;oBACpB,WAAW,EAAE,IAAI;oBACjB,OAAO,EAAE,IAAI;oBACb,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,IAAI;oBACb,gBAAgB,EAAE,IAAI;iBACvB;gBACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;aACxB,CAAC,CAAC;YAEL,IACE,CAAC,UAAU;gBACX,UAAU,CAAC,MAAM,KAAK,+BAA+B,CAAC,QAAQ;gBAC9D,UAAU,CAAC,cAAc,KAAK,6BAA6B,CAAC,WAAW,EACvE,CAAC;gBACD,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GACR,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,CAAC,KAAK,CACV,mCAAmC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,4EAA4E,CAC5I,CAAC;gBACF,OAAO;YACT,CAAC;YAED;;;;eAIG;YACH,IACE,IAAI,CAAC,eAAe;gBACpB,IAAI,CAAC,eAAe,KAAK,gCAAgC,CAAC,UAAU,EACpE,CAAC;gBACD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,eAAe,GAAG,gCAAgC,CAAC,OAAO,CAAC;YAChE,IAAI,CAAC,kBAAkB,GAAG,aAAa,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,CAAC;YACvE,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAEzC,IAAI,MAAM,GAAY,KAAK,CAAC;YAE5B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,oEAAoE;gBACpE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;oBACtB,SAAS;gBACX,CAAC;gBAED,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,CAAC,SAAS,GAAG;wBAClB,MAAM,EAAE,mCAAmC,CAAC,OAAO;wBACnD,YAAY,EAAE,4CAA4C;qBAC3D,CAAC;oBACF,SAAS;gBACX,CAAC;gBAED;;;;;;;;;mBASG;gBACH,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAG,CAAC,CAAC,EAAE,CAAC;oBACpD,OAAO,CAAC,SAAS,GAAG;wBAClB,MAAM,EAAE,mCAAmC,CAAC,OAAO;wBACnD,YAAY,EACV,0GAA0G;qBAC7G,CAAC;oBACF,MAAM,GAAG,IAAI,CAAC;oBACd,SAAS;gBACX,CAAC;gBAED;;;mBAGG;gBACH,OAAO,CAAC,SAAS,GAAG;oBAClB,MAAM,EAAE,mCAAmC,CAAC,OAAO;oBACnD,SAAS,EAAE,aAAa,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE;iBACxD,CAAC;gBACF,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAEzC,MAAM,KAAK,GACT,MAAM,IAAI,CAAC,iBAAiB,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;gBAExD,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;gBAC1B,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAEzC,IAAI,KAAK,CAAC,MAAM,KAAK,mCAAmC,CAAC,SAAS,EAAE,CAAC;oBACnE,MAAM,GAAG,IAAI,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,IAAI,CAAC,eAAe,GAAG,MAAM;gBAC3B,CAAC,CAAC,gCAAgC,CAAC,MAAM;gBACzC,CAAC,CAAC,gCAAgC,CAAC,SAAS,CAAC;YAC/C,IAAI,CAAC,oBAAoB,GAAG,aAAa,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,CAAC;YACzE,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAEzC,MAAM,IAAI,CAAC,YAAY,CAAC;gBACtB,UAAU;gBACV,QAAQ,EAAE,MAAM;oBACd,CAAC,CAAC,8MAA8M;oBAChN,CAAC,CAAC,4CAA4C,IAAI,CAAC,QAAQ,CAAC,MAAM,mEAAmE;gBACvI,aAAa,EAAE,MAAM;gBACrB,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;aACzC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,uEAAuE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,KAAK,EAAE,CAChH,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;OAKG;IAEiB,AAAb,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAEnC;;QACC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QAE5B,IAAI,CAAC;YACH,MAAM,IAAI,GACR,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAE7D,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO;YACT,CAAC;YAED,IACE,IAAI,CAAC,cAAc;gBACnB,IAAI,CAAC,cAAc,KAAK,2BAA2B,CAAC,YAAY,EAChE,CAAC;gBACD,OAAO,CAAC,kDAAkD;YAC5D,CAAC;YAED;;;;;;eAMG;YACH,MAAM,IAAI,CAAC,0BAA0B,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAExD,MAAM,eAAe,GAAgC,IAAI,CAAC,QAAQ;iBAC/D,MAAM,CAAC,CAAC,OAA6B,EAAE,EAAE;;gBACxC,OAAO,CACL,CAAA,MAAA,OAAO,CAAC,SAAS,0CAAE,MAAM;oBACvB,mCAAmC,CAAC,SAAS;oBAC/C,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;oBAChC,CAAC,OAAO,CAAC,iBAAiB,CAC3B,CAAC;YACJ,CAAC,CAAC;iBACD,OAAO,EAAE,CAAC;YAEb,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,cAAc,GAAG,2BAA2B,CAAC,aAAa,CAAC;gBAChE,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBACzC,OAAO;YACT,CAAC;YAED,IAAI,SAAS,GAAY,KAAK,CAAC;YAE/B,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;gBACtC,MAAM,eAAe,GAAW,OAAO,CAAC,eAAyB,CAAC;gBAElE,MAAM,UAAU,GACd,aAAa,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;gBAE/C,IAAI,UAAU,EAAE,CAAC;oBACf,OAAO,CAAC,iBAAiB,GAAG;wBAC1B,MAAM,EAAE,mCAAmC,CAAC,MAAM;wBAClD,YAAY,EAAE,2CAA2C,UAAU,GAAG;qBACvE,CAAC;oBACF,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;oBACzC,SAAS;gBACX,CAAC;gBAED,OAAO,CAAC,iBAAiB,GAAG;oBAC1B,MAAM,EAAE,mCAAmC,CAAC,OAAO;oBACnD,SAAS,EAAE,aAAa,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE;iBACxD,CAAC;gBACF,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;gBAEzC,IAAI,CAAC;oBACH,MAAM,GAAG,GAAc,MAAM,gBAAgB,CAAC,gBAAgB,CAAC;wBAC7D,SAAS,EAAE,UAAU,CAAC,SAAU;wBAChC,OAAO,EAAE,UAAU,CAAC,OAAQ;wBAC5B,2BAA2B,EAAE,UAAU,CAAC,EAAG;wBAC3C,MAAM,EAAE,eAAe,OAAO,CAAC,QAAQ,EAAE;wBACzC,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,aAAa,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;wBAC7C,OAAO,EAAE,eAAe;wBACxB,YAAY,EAAE,OAAO,CAAC,YAAY;wBAClC,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,gBAAgB,EAAE,2BAA2B;qBAC9C,CAAC,CAAC;oBAEH,OAAO,CAAC,iBAAiB,CAAC,WAAW,GAAG,MAAA,GAAG,CAAC,EAAE,0CAAE,QAAQ,EAAE,CAAC;oBAE3D,MAAM,WAAW,GACf,MAAM,gBAAgB,CAAC,iBAAiB,CAAC;wBACvC,KAAK,EAAE,GAAG,CAAC,EAAG;wBACd,gBAAgB,EAAE,2BAA2B;wBAC7C,oBAAoB,EAAE,OAAO,CAAC,WAAW;qBAC1C,CAAC,CAAC;oBAEL,MAAM,SAAS,GACb,WAAW,CAAC,MAAM,KAAK,eAAe,CAAC,SAAS,CAAC;oBAEnD,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,SAAS;wBAC1C,CAAC,CAAC,mCAAmC,CAAC,SAAS;wBAC/C,CAAC,CAAC,mCAAmC,CAAC,MAAM,CAAC;oBAC/C,OAAO,CAAC,iBAAiB,CAAC,WAAW;wBACnC,aAAa,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC/C,OAAO,CAAC,iBAAiB,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;oBAC1D,OAAO,CAAC,iBAAiB,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAC/C,WAAW,CAAC,MAAM,IAAI,EAAE,CACzB,CAAC;oBACF,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,OAAO,CAAC,iBAAiB,CAAC,YAAY;4BACpC,WAAW,CAAC,YAAY;gCACxB,8BAA8B,WAAW,CAAC,MAAM,GAAG,CAAC;wBACtD,SAAS,GAAG,IAAI,CAAC;oBACnB,CAAC;gBACH,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,iBAAiB,CAAC,MAAM;wBAC9B,mCAAmC,CAAC,MAAM,CAAC;oBAC7C,OAAO,CAAC,iBAAiB,CAAC,YAAY;wBACpC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACzD,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;gBAED,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC3C,CAAC;YAED,IAAI,CAAC,cAAc,GAAG,SAAS;gBAC7B,CAAC,CAAC,2BAA2B,CAAC,MAAM;gBACpC,CAAC,CAAC,2BAA2B,CAAC,SAAS,CAAC;YAC1C,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAEzC,MAAM,IAAI,CAAC,YAAY,CAAC;gBACtB,UAAU;gBACV,QAAQ,EAAE,SAAS;oBACjB,CAAC,CAAC,gLAAgL;oBAClL,CAAC,CAAC,+IAA+I;gBACnJ,aAAa,EAAE,IAAI;gBACnB,YAAY,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,uDAAuD,MAAA,UAAU,CAAC,EAAE,0CAAE,QAAQ,EAAE,KAAK,KAAK,EAAE,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qEAAqE;IAE7D,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAGtC;;QACC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAErC;;;WAGG;QACH,MAAM,UAAU,GAAkB,aAAa,CAAC,aAAa,CAC3D,OAAO,CAAC,OAAO,CAChB,CAAC;QAEF,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,mCAAmC,CAAC,MAAM;gBAClD,YAAY,EAAE,gEAAgE,UAAU,GAAG;aAC5F,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAuC;YAChD,MAAM,EAAE,mCAAmC,CAAC,OAAO;YACnD,SAAS,EACP,CAAA,MAAA,OAAO,CAAC,SAAS,0CAAE,SAAS;gBAC5B,aAAa,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE;SAC/C,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,GAAG,GAAc,MAAM,gBAAgB,CAAC,gBAAgB,CAAC;gBAC7D,SAAS,EAAE,UAAU,CAAC,SAAU;gBAChC,OAAO,EAAE,UAAU,CAAC,OAAQ;gBAC5B,2BAA2B,EAAE,UAAU,CAAC,EAAG;gBAC3C,MAAM,EAAE,eAAe,OAAO,CAAC,QAAQ,EAAE;gBACzC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAC7C,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,gBAAgB,EAAE,2BAA2B;aAC9C,CAAC,CAAC;YAEH,KAAK,CAAC,WAAW,GAAG,MAAA,GAAG,CAAC,EAAE,0CAAE,QAAQ,EAAE,CAAC;YAEvC,MAAM,WAAW,GAAc,MAAM,gBAAgB,CAAC,iBAAiB,CAAC;gBACtE,KAAK,EAAE,GAAG,CAAC,EAAG;gBACd,gBAAgB,EAAE,2BAA2B;gBAC7C,oBAAoB,EAAE,OAAO,CAAC,WAAW;aAC1C,CAAC,CAAC;YAEH,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjE,CAAC;YAED,MAAM,SAAS,GACb,WAAW,CAAC,MAAM,KAAK,eAAe,CAAC,SAAS,CAAC;YAEnD,KAAK,CAAC,MAAM,GAAG,SAAS;gBACtB,CAAC,CAAC,mCAAmC,CAAC,SAAS;gBAC/C,CAAC,CAAC,mCAAmC,CAAC,MAAM,CAAC;YAC/C,KAAK,CAAC,WAAW,GAAG,aAAa,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,CAAC;YACjE,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;YACtC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACxD,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,KAAK,CAAC,YAAY;oBAChB,WAAW,CAAC,YAAY;wBACxB,6BAA6B,WAAW,CAAC,MAAM,GAAG,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,MAAM,GAAG,mCAAmC,CAAC,MAAM,CAAC;YAC1D,KAAK,CAAC,WAAW,GAAG,aAAa,CAAC,cAAc,EAAE,CAAC,WAAW,EAAE,CAAC;YACjE,KAAK,CAAC,YAAY;gBAChB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3D,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAC7C,UAAqC,EACrC,IAA8B;;QAE9B,IAAI,OAAO,GAAY,KAAK,CAAC;QAE7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,MAAM,GACV,MAAA,OAAO,CAAC,SAAS,0CAAE,MAAM,CAAC;YAE5B,MAAM,WAAW,GACf,MAAM,KAAK,mCAAmC,CAAC,OAAO;gBACtD,MAAM,KAAK,mCAAmC,CAAC,OAAO,CAAC;YAEzD,IAAI,CAAC,WAAW,IAAI,CAAC,CAAA,MAAA,OAAO,CAAC,SAAS,0CAAE,WAAW,CAAA,EAAE,CAAC;gBACpD,SAAS;YACX,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,GAAqB,MAAM,gBAAgB,CAAC,WAAW,CAAC;oBAC/D,EAAE,EAAE,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC;oBAC/C,MAAM,EAAE;wBACN,GAAG,EAAE,IAAI;wBACT,MAAM,EAAE,IAAI;wBACZ,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,IAAI;wBACd,YAAY,EAAE,IAAI;qBACnB;oBACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;iBACxB,CAAC,CAAC;gBAEH,IAAI,CAAC,GAAG,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAClD,SAAS;gBACX,CAAC;gBAED,MAAM,SAAS,GAAY,GAAG,CAAC,MAAM,KAAK,eAAe,CAAC,SAAS,CAAC;gBAEpE,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS;oBAClC,CAAC,CAAC,mCAAmC,CAAC,SAAS;oBAC/C,CAAC,CAAC,mCAAmC,CAAC,MAAM,CAAC;gBAC/C,OAAO,CAAC,SAAS,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;gBAC1C,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBAC5D,OAAO,CAAC,SAAS,CAAC,YAAY,GAAG,SAAS;oBACxC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,GAAG,CAAC,YAAY;wBAChB,6BAA6B,GAAG,CAAC,MAAM,mCAAmC,CAAC;gBAC/E,OAAO,GAAG,IAAI,CAAC;YACjB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CACV,oDAAoD,OAAO,CAAC,QAAQ,kBAAkB,MAAA,UAAU,CAAC,EAAE,0CAAE,QAAQ,EAAE,KAAK,KAAK,EAAE,CAC5H,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACK,MAAM,CAAC,KAAK,CAAC,iBAAiB,CACpC,YAAsB;QAEtB,IAAI,CAAC;YACH,MAAM,OAAO,GACX,MAAM,gCAAgC,CAAC,WAAW,CAAC;gBACjD,EAAE,EAAE,YAAY;gBAChB,MAAM,EAAE;oBACN,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,IAAI;oBACZ,kBAAkB,EAAE,IAAI;oBACxB,sBAAsB,EAAE,IAAI;iBAC7B;gBACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;aACxB,CAAC,CAAC;YAEL,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IACE,OAAO,CAAC,sBAAsB;gBAC9B,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE;oBACtC,aAAa,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,EAC1C,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,CACL,OAAO,CAAC,MAAM,KAAK,+BAA+B,CAAC,QAAQ;gBAC3D,OAAO,CAAC,kBAAkB,KAAK,iCAAiC,CAAC,OAAO,CACzE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf;;;;eAIG;YACH,MAAM,CAAC,KAAK,CACV,sDAAsD,YAAY,CAAC,QAAQ,EAAE,yCAAyC,KAAK,EAAE,CAC9H,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,WAAW,CAC9B,UAAqC,EACrC,IAA8B;;QAE9B,IAAI,CAAC;YACH,MAAM,gCAAgC,CAAC,aAAa,CAAC;gBACnD,EAAE,EAAE,UAAU,CAAC,EAAG;gBAClB,IAAI,EAAE;oBACJ,WAAW,EAAE,4BAA4B,CAAC,MAAM,CAAC,IAAI,CAAC;iBAC9C;gBACV,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CACV,uEAAuE,MAAA,UAAU,CAAC,EAAE,0CAAE,QAAQ,EAAE,KAAK,KAAK,EAAE,CAC7G,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,SAAS,CAAC,MAAc;QACrC,MAAM,QAAQ,GAAW,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;QAClE,IAAI,QAAQ,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAC/C,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,0BAA0B,CAAC;IACjF,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAKjC;QACC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC5D,MAAM,mBAAmB,CAAC,sBAAsB,CAAC;oBAC/C,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,UAAU;oBACtC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;oBACpC,qBAAqB,EAAE,qBAAqB,CAAC,eAAe;oBAC5D,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,kBAAkB,EAAE,IAAI,CAAC,QAAQ;oBACjC,qBAAqB,EAAE;wBACrB,yBAAyB,EAAE,IAAI,CAAC,aAAa;qBAC9C;iBACF,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;gBAChE,MAAM,gBAAgB,CAAC,mBAAmB,CAAC;oBACzC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO;oBAChC,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS;oBACpC,kBAAkB,EAAE,kBAAkB,CAAC,eAAe;oBACtD,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,kBAAkB,EAAE,IAAI,CAAC,QAAQ;oBACjC,qBAAqB,EAAE;wBACrB,yBAAyB,EAAE,IAAI,CAAC,aAAa;qBAC9C;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,oDAAoD,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;CACF;AAhiBqB;IADnB,WAAW,EAAE;;;;oDAoIb;AASmB;IADnB,WAAW,EAAE;;;;gDA6Ib"}