@servicelabsco/nestjs-utility-services 2.0.15 → 3.0.2

package/dist/system/libraries/sandboxed.script.executor.js

@@ -0,0 +1,458 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SandboxedScriptExecutor = void 0;
+const vm_1 = require("vm");
+const operation_exception_1 = require("../../common/exceptions/operation.exception");
+const SANDBOX_BOOTSTRAP = `
+(function (transfer, shape, invoke) {
+    'use strict';
+
+    function reason(err) {
+        try {
+            if (err && err.message) return String(err.message);
+            return String(err);
+        } catch (ignored) {
+            return 'sandbox bridge failure';
+        }
+    }
+
+    function decode(json) {
+        if (json === undefined || json === null) return undefined;
+        return JSON.parse(json);
+    }
+
+    function materialize(node) {
+        if (node === null || typeof node !== 'object') return node;
+
+        if (Array.isArray(node)) {
+            var list = [];
+            for (var m = 0; m < node.length; m++) list.push(materialize(node[m]));
+            return list;
+        }
+
+        var keys = Object.keys(node);
+        if (keys.length === 1 && keys[0] === '__fn__' && typeof node.__fn__ === 'string') return wrap(node.__fn__);
+
+        var built = {};
+        for (var n = 0; n < keys.length; n++) built[keys[n]] = materialize(node[keys[n]]);
+        return built;
+    }
+
+    function wrap(id) {
+        return function () {
+            var payload;
+            try {
+                payload = JSON.stringify(Array.prototype.slice.call(arguments));
+            } catch (err) {
+                throw new Error('sandbox bridge: arguments must be plain, serialisable data');
+            }
+
+            var out;
+            try {
+                out = invoke(id, payload);
+            } catch (err) {
+                throw new Error(reason(err));
+            }
+
+            if (out && typeof out.then === 'function') {
+                return new Promise(function (resolve, reject) {
+                    out.then(
+                        function (value) {
+                            try {
+                                resolve(materialize(decode(value)));
+                            } catch (err) {
+                                reject(new Error(reason(err)));
+                            }
+                        },
+                        function (err) {
+                            reject(new Error(reason(err)));
+                        }
+                    );
+                });
+            }
+
+            return materialize(decode(out));
+        };
+    }
+
+    function build(node) {
+        if (node === null || typeof node !== 'object') return node;
+
+        if (Array.isArray(node)) {
+            var list = [];
+            for (var i = 0; i < node.length; i++) list.push(build(node[i]));
+            return list;
+        }
+
+        var keys = Object.keys(node);
+        if (keys.length === 1 && keys[0] === '__fn__' && typeof node.__fn__ === 'string') return wrap(node.__fn__);
+
+        var out = {};
+        for (var j = 0; j < keys.length; j++) out[keys[j]] = build(node[keys[j]]);
+        return out;
+    }
+
+    var data = decode(transfer) || {};
+    var dataKeys = Object.keys(data);
+    for (var d = 0; d < dataKeys.length; d++) globalThis[dataKeys[d]] = data[dataKeys[d]];
+
+    var bridge = build(decode(shape) || {});
+    var bridgeKeys = Object.keys(bridge);
+    for (var b = 0; b < bridgeKeys.length; b++) globalThis[bridgeKeys[b]] = bridge[bridgeKeys[b]];
+})(__transfer__, __shape__, __invoke__);
+
+delete globalThis.__transfer__;
+delete globalThis.__shape__;
+delete globalThis.__invoke__;
+`;
+const SANDBOX_EXPORT = `
+(function () {
+    var out = {};
+    var keys = Object.keys(globalThis);
+
+    for (var i = 0; i < keys.length; i++) {
+        try {
+            var json = JSON.stringify(globalThis[keys[i]]);
+            if (json === undefined) continue;
+            out[keys[i]] = JSON.parse(json);
+        } catch (err) {
+            // not representable as plain data - drop this binding
+        }
+    }
+
+    return JSON.stringify(out);
+})()
+`;
+class SandboxedScriptExecutor {
+    execute(script, options = {}) {
+        const rejected = this.rejectHostCallables(options);
+        if (rejected)
+            return rejected;
+        const blank = this.blankScriptResult(script, options);
+        if (blank)
+            return blank;
+        let prepared;
+        try {
+            prepared = this.prepare(options);
+        }
+        catch (err) {
+            return { ok: false, value: undefined, error: this.reason(err), context: this.plainContext(options) };
+        }
+        try {
+            const value = (0, vm_1.runInContext)(script, prepared.ctx, {
+                timeout: prepared.timeoutMs,
+                breakOnSigint: true,
+                displayErrors: false,
+            });
+            return { ok: true, value: this.toPlain(value), context: this.exportContext(prepared) };
+        }
+        catch (err) {
+            return { ok: false, value: undefined, error: this.reason(err), context: this.exportContext(prepared) };
+        }
+    }
+    async executeAsync(script, options = {}) {
+        const rejected = this.rejectHostCallables(options);
+        if (rejected)
+            return rejected;
+        const blank = this.blankScriptResult(script, options);
+        if (blank)
+            return blank;
+        let prepared;
+        try {
+            prepared = this.prepare(options);
+        }
+        catch (err) {
+            return { ok: false, value: undefined, error: this.reason(err), context: this.plainContext(options) };
+        }
+        let value;
+        try {
+            value = (0, vm_1.runInContext)(script, prepared.ctx, {
+                timeout: prepared.timeoutMs,
+                breakOnSigint: true,
+                displayErrors: false,
+            });
+        }
+        catch (err) {
+            return { ok: false, value: undefined, error: this.reason(err), context: this.exportContext(prepared) };
+        }
+        if (value && typeof value.then === 'function') {
+            try {
+                value = await value;
+            }
+            catch (err) {
+                return { ok: false, value: undefined, error: this.reason(err), context: this.exportContext(prepared) };
+            }
+        }
+        return { ok: true, value: this.toPlain(value), context: this.exportContext(prepared) };
+    }
+    invokeMethod(target, method, args = []) {
+        if (target === null || target === undefined)
+            throw new operation_exception_1.OperationException('sandbox bridge: target is not available');
+        if (typeof method !== 'string' || !method.trim())
+            throw new operation_exception_1.OperationException('sandbox bridge: a method name is required');
+        if (method.startsWith('_') || SandboxedScriptExecutor.DENIED_MEMBERS.includes(method))
+            throw new operation_exception_1.OperationException(`sandbox bridge: "${method}" is not callable from a script`);
+        if (!this.isDeclaredMember(target, method))
+            throw new operation_exception_1.OperationException(`sandbox bridge: "${method}" is not exposed to scripts`);
+        const member = target[method];
+        if (typeof member !== 'function')
+            throw new operation_exception_1.OperationException(`sandbox bridge: "${method}" is not callable from a script`);
+        return member.apply(target, Array.isArray(args) ? args : []);
+    }
+    buildRemoteHandle(registry, pathPrefix, target) {
+        const out = {};
+        for (const method of this.listCallableMethods(target)) {
+            const id = `${pathPrefix}.${method}`;
+            registry.set(id, (...args) => this.invokeMethod(target, method, args));
+            out[method] = { __fn__: id };
+        }
+        return out;
+    }
+    listCallableMethods(target) {
+        const methods = new Set();
+        const builtins = [Object.prototype, Function.prototype, Array.prototype];
+        let node = target;
+        while (node && !builtins.includes(node)) {
+            for (const key of Object.getOwnPropertyNames(node)) {
+                if (key.startsWith('_') || SandboxedScriptExecutor.DENIED_MEMBERS.includes(key))
+                    continue;
+                if (typeof node[key] === 'function')
+                    methods.add(key);
+            }
+            node = Object.getPrototypeOf(node);
+        }
+        return [...methods];
+    }
+    writeBack(target, source) {
+        if (!target || typeof target !== 'object')
+            return;
+        if (!source || typeof source !== 'object')
+            return;
+        if (Array.isArray(target) && Array.isArray(source)) {
+            target.length = 0;
+            for (const entry of source)
+                target.push(entry);
+            return;
+        }
+        if (Array.isArray(target) || Array.isArray(source))
+            return;
+        for (const key of Object.keys(target)) {
+            if (!Object.prototype.hasOwnProperty.call(source, key))
+                delete target[key];
+        }
+        for (const key of Object.keys(source))
+            target[key] = source[key];
+    }
+    rejectHostCallables(options) {
+        const found = this.findHostCallable(options.context ?? {}, 'context', 0, new WeakSet());
+        if (!found)
+            return undefined;
+        return {
+            ok: false,
+            value: undefined,
+            error: `sandbox: host function at "${found}" cannot be exposed through \`context\` — declare it in \`bridge\` instead (U-S15)`,
+            context: {},
+        };
+    }
+    findHostCallable(node, path, depth, seen) {
+        if (typeof node === 'function')
+            return path;
+        if (!node || typeof node !== 'object')
+            return undefined;
+        if (depth >= SandboxedScriptExecutor.MAX_CLONE_DEPTH || seen.has(node))
+            return undefined;
+        seen.add(node);
+        try {
+            for (const key of Object.keys(node)) {
+                let member;
+                try {
+                    member = node[key];
+                }
+                catch {
+                    continue;
+                }
+                const found = this.findHostCallable(member, `${path}.${key}`, depth + 1, seen);
+                if (found)
+                    return found;
+            }
+            return undefined;
+        }
+        finally {
+            seen.delete(node);
+        }
+    }
+    blankScriptResult(script, options) {
+        if (script && script.trim())
+            return undefined;
+        return { ok: true, value: undefined, context: this.plainContext(options) };
+    }
+    plainContext(options) {
+        return this.toPlain(options.context ?? {}) ?? {};
+    }
+    prepare(options) {
+        const timeoutMs = options.timeoutMs ?? 1000;
+        const snapshot = this.plainContext(options);
+        const registry = new Map();
+        const bridgeSource = options.bridge ?? {};
+        const bridge = typeof bridgeSource === 'function' ? bridgeSource(registry) : bridgeSource;
+        const transfer = JSON.stringify(snapshot);
+        const shape = JSON.stringify(this.describeBridge(bridge, registry, 'b', 0, new WeakSet()) ?? {});
+        const sandbox = {
+            __transfer__: transfer,
+            __shape__: shape,
+            __invoke__: (id, argsJson) => this.invokeBridge(registry, id, argsJson),
+        };
+        const ctx = (0, vm_1.createContext)(sandbox);
+        (0, vm_1.runInContext)(SANDBOX_BOOTSTRAP, ctx, { timeout: timeoutMs, breakOnSigint: true, displayErrors: false });
+        return { ctx, snapshot, bridgeKeys: Object.keys(bridge), timeoutMs };
+    }
+    describeBridge(node, registry, path, depth, seen) {
+        if (typeof node === 'function') {
+            registry.set(path, node);
+            return { __fn__: path };
+        }
+        if (node === null || typeof node !== 'object')
+            return this.toPlain(node);
+        if (depth >= SandboxedScriptExecutor.MAX_BRIDGE_DEPTH || seen.has(node))
+            return {};
+        seen.add(node);
+        try {
+            if (Array.isArray(node))
+                return node.map((entry, index) => this.describeBridge(entry, registry, `${path}.${index}`, depth + 1, seen));
+            const out = {};
+            for (const key of Object.keys(node)) {
+                let member;
+                try {
+                    member = node[key];
+                }
+                catch {
+                    continue;
+                }
+                const described = this.describeBridge(member, registry, `${path}.${key}`, depth + 1, seen);
+                if (described !== undefined)
+                    out[key] = described;
+            }
+            return out;
+        }
+        finally {
+            seen.delete(node);
+        }
+    }
+    invokeBridge(registry, id, argsJson) {
+        const hostFn = registry.get(id);
+        if (!hostFn)
+            throw new operation_exception_1.OperationException('sandbox bridge: unknown binding');
+        const args = this.decodeArgs(argsJson);
+        const out = hostFn(...args);
+        if (out && typeof out.then === 'function')
+            return Promise.resolve(out).then((value) => this.encode(value));
+        return this.encode(out);
+    }
+    decodeArgs(argsJson) {
+        if (!argsJson)
+            return [];
+        const args = JSON.parse(argsJson, (_key, value) => typeof value === 'string' && SandboxedScriptExecutor.ISO_TIMESTAMP.test(value) ? new Date(value) : value);
+        return Array.isArray(args) ? args : [];
+    }
+    encode(value) {
+        const plain = this.toPlain(value);
+        if (plain === undefined)
+            return undefined;
+        return JSON.stringify(plain);
+    }
+    exportContext(prepared) {
+        try {
+            const exported = (0, vm_1.runInContext)(SANDBOX_EXPORT, prepared.ctx, {
+                timeout: prepared.timeoutMs,
+                breakOnSigint: true,
+                displayErrors: false,
+            });
+            const parsed = JSON.parse(exported);
+            for (const key of prepared.bridgeKeys)
+                delete parsed[key];
+            return parsed;
+        }
+        catch {
+            return prepared.snapshot;
+        }
+    }
+    toPlain(value, seen = new WeakSet(), depth = 0) {
+        if (value === null)
+            return null;
+        const type = typeof value;
+        if (type === 'string' || type === 'number' || type === 'boolean')
+            return value;
+        if (type === 'bigint')
+            return value.toString();
+        if (type === 'undefined' || type === 'function' || type === 'symbol')
+            return undefined;
+        if (value instanceof Date)
+            return isNaN(value.getTime()) ? null : value.toISOString();
+        if (depth >= SandboxedScriptExecutor.MAX_CLONE_DEPTH || seen.has(value))
+            return undefined;
+        seen.add(value);
+        try {
+            if (Array.isArray(value)) {
+                const list = value.map((entry) => this.toPlain(entry, seen, depth + 1));
+                return list.map((entry) => (entry === undefined ? null : entry));
+            }
+            const out = {};
+            for (const key of Object.keys(value)) {
+                let member;
+                try {
+                    member = value[key];
+                }
+                catch {
+                    continue;
+                }
+                const converted = this.toPlain(member, seen, depth + 1);
+                if (converted !== undefined)
+                    out[key] = converted;
+            }
+            return out;
+        }
+        finally {
+            seen.delete(value);
+        }
+    }
+    isDeclaredMember(target, method) {
+        const builtins = [Object.prototype, Function.prototype, Array.prototype];
+        if (Object.prototype.hasOwnProperty.call(target, method))
+            return true;
+        let node = Object.getPrototypeOf(target);
+        while (node && !builtins.includes(node)) {
+            if (Object.prototype.hasOwnProperty.call(node, method))
+                return true;
+            node = Object.getPrototypeOf(node);
+        }
+        return false;
+    }
+    reason(err) {
+        try {
+            if (err && err.message)
+                return String(err.message);
+            return String(err);
+        }
+        catch {
+            return 'sandboxed script failure';
+        }
+    }
+}
+exports.SandboxedScriptExecutor = SandboxedScriptExecutor;
+SandboxedScriptExecutor.DENIED_MEMBERS = [
+    'constructor',
+    'prototype',
+    '__proto__',
+    '__defineGetter__',
+    '__defineSetter__',
+    '__lookupGetter__',
+    '__lookupSetter__',
+    'apply',
+    'bind',
+    'call',
+    'then',
+];
+SandboxedScriptExecutor.ISO_TIMESTAMP = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})$/;
+SandboxedScriptExecutor.MAX_CLONE_DEPTH = 12;
+SandboxedScriptExecutor.MAX_BRIDGE_DEPTH = 4;
+//# sourceMappingURL=sandboxed.script.executor.js.map

package/dist/system/libraries/sandboxed.script.executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxed.script.executor.js","sourceRoot":"","sources":["../../../src/system/libraries/sandboxed.script.executor.ts"],"names":[],"mappings":";;;AAAA,2BAAiD;AACjD,qFAAiF;AA0EjF,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqGzB,CAAC;AASF,MAAM,cAAc,GAAG;;;;;;;;;;;;;;;;;CAiBtB,CAAC;AA6BF,MAAa,uBAAuB;IAmChC,OAAO,CAAC,MAAc,EAAE,UAAmC,EAAE;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAExB,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QACzG,CAAC;QAED,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,IAAA,iBAAY,EAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE;gBAC7C,OAAO,EAAE,QAAQ,CAAC,SAAS;gBAC3B,aAAa,EAAE,IAAI;gBACnB,aAAa,EAAE,KAAK;aACvB,CAAC,CAAC;YACH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3G,CAAC;IACL,CAAC;IAgBD,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,UAAmC,EAAE;QACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAExB,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACD,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QACzG,CAAC;QAED,IAAI,KAAU,CAAC;QACf,IAAI,CAAC;YACD,KAAK,GAAG,IAAA,iBAAY,EAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE;gBACvC,OAAO,EAAE,QAAQ,CAAC,SAAS;gBAC3B,aAAa,EAAE,IAAI;gBACnB,aAAa,EAAE,KAAK;aACvB,CAAC,CAAC;QACP,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3G,CAAC;QAED,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACD,KAAK,GAAG,MAAM,KAAK,CAAC;YACxB,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3G,CAAC;QACL,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC3F,CAAC;IAqBD,YAAY,CAAC,MAAW,EAAE,MAAc,EAAE,OAAc,EAAE;QACtD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,wCAAkB,CAAC,yCAAyC,CAAC,CAAC;QAErH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,wCAAkB,CAAC,2CAA2C,CAAC,CAAC;QAE5H,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjF,MAAM,IAAI,wCAAkB,CAAC,oBAAoB,MAAM,iCAAiC,CAAC,CAAC;QAE9F,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,MAAM,IAAI,wCAAkB,CAAC,oBAAoB,MAAM,6BAA6B,CAAC,CAAC;QAElI,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,OAAO,MAAM,KAAK,UAAU;YAAE,MAAM,IAAI,wCAAkB,CAAC,oBAAoB,MAAM,iCAAiC,CAAC,CAAC;QAE5H,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAMD,iBAAiB,CAAC,QAA8C,EAAE,UAAkB,EAAE,MAAW;QAC7F,MAAM,GAAG,GAAuC,EAAE,CAAC;QAEnD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;YACpD,MAAM,EAAE,GAAG,GAAG,UAAU,IAAI,MAAM,EAAE,CAAC;YACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,IAAW,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9E,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACjC,CAAC;QAED,OAAO,GAAG,CAAC;IACf,CAAC;IAKD,mBAAmB,CAAC,MAAW;QAC3B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QACzE,IAAI,IAAI,GAAG,MAAM,CAAC;QAElB,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,uBAAuB,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC1F,IAAI,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,UAAU;oBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1D,CAAC;YAED,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;IACxB,CAAC;IAaD,SAAS,CAAC,MAAW,EAAE,MAAW;QAC9B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO;QAClD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO;QAElD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YAClB,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/C,OAAO;QACX,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO;QAE3D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/E,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;IAaO,mBAAmB,CAAC,OAAgC;QACxD,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;QACxF,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,OAAO;YACH,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,8BAA8B,KAAK,oFAAoF;YAC9H,OAAO,EAAE,EAAE;SACd,CAAC;IACN,CAAC;IAMO,gBAAgB,CAAC,IAAS,EAAE,IAAY,EAAE,KAAa,EAAE,IAAqB;QAClF,IAAI,OAAO,IAAI,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACxD,IAAI,KAAK,IAAI,uBAAuB,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAEzF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEf,IAAI,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,IAAI,MAAW,CAAC;gBAChB,IAAI,CAAC;oBACD,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;gBAAC,MAAM,CAAC;oBACL,SAAS;gBACb,CAAC;gBAED,MAAM,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC/E,IAAI,KAAK;oBAAE,OAAO,KAAK,CAAC;YAC5B,CAAC;YAED,OAAO,SAAS,CAAC;QACrB,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACL,CAAC;IAMO,iBAAiB,CAAC,MAAc,EAAE,OAAgC;QACtE,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,SAAS,CAAC;QAE9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/E,CAAC;IAOO,YAAY,CAAC,OAAgC;QACjD,OAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAA6B,IAAI,EAAE,CAAC;IAClF,CAAC;IAOO,OAAO,CAAC,OAAgC;QAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmC,CAAC;QAC5D,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,OAAO,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QAE1F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAEjG,MAAM,OAAO,GAA4B;YACrC,YAAY,EAAE,QAAQ;YACtB,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,CAAC,EAAU,EAAE,QAAgB,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,CAAC;SAC1F,CAAC;QAEF,MAAM,GAAG,GAAG,IAAA,kBAAa,EAAC,OAAO,CAAC,CAAC;QACnC,IAAA,iBAAY,EAAC,iBAAiB,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAExG,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACzE,CAAC;IAQO,cAAc,CAAC,IAAS,EAAE,QAA8C,EAAE,IAAY,EAAE,KAAa,EAAE,IAAqB;QAChI,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAA+B,CAAC,CAAC;YACpD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,KAAK,IAAI,uBAAuB,CAAC,gBAAgB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QAEnF,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEf,IAAI,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAEtI,MAAM,GAAG,GAAwB,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,IAAI,MAAW,CAAC;gBAChB,IAAI,CAAC;oBACD,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvB,CAAC;gBAAC,MAAM,CAAC;oBACL,SAAS;gBACb,CAAC;gBAED,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;gBAC3F,IAAI,SAAS,KAAK,SAAS;oBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YACtD,CAAC;YAED,OAAO,GAAG,CAAC;QACf,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACL,CAAC;IAQO,YAAY,CAAC,QAA8C,EAAE,EAAU,EAAE,QAAgB;QAC7F,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,wCAAkB,CAAC,iCAAiC,CAAC,CAAC;QAE7E,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QAE5B,IAAI,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAE3G,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAQO,UAAU,CAAC,QAAgB;QAC/B,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC9C,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAC3G,CAAC;QAEF,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,CAAC;IAMO,MAAM,CAAC,KAAU;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAE1C,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAOO,aAAa,CAAC,QAAyB;QAC3C,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAA,iBAAY,EAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,EAAE;gBACxD,OAAO,EAAE,QAAQ,CAAC,SAAS;gBAC3B,aAAa,EAAE,IAAI;gBACnB,aAAa,EAAE,KAAK;aACvB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;YAC/D,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,UAAU;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YAE1D,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,QAAQ,CAAC,QAAQ,CAAC;QAC7B,CAAC;IACL,CAAC;IAQO,OAAO,CAAC,KAAU,EAAE,OAAwB,IAAI,OAAO,EAAE,EAAE,KAAK,GAAG,CAAC;QACxE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAEhC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC;QAC1B,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC/E,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC/C,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACvF,IAAI,KAAK,YAAY,IAAI;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACtF,IAAI,KAAK,IAAI,uBAAuB,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAE1F,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEhB,IAAI,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBACxE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,GAAG,GAAwB,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACnC,IAAI,MAAW,CAAC;gBAChB,IAAI,CAAC;oBACD,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACL,SAAS;gBACb,CAAC;gBAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACxD,IAAI,SAAS,KAAK,SAAS;oBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;YACtD,CAAC;YAED,OAAO,GAAG,CAAC;QACf,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACL,CAAC;IAOO,gBAAgB,CAAC,MAAW,EAAE,MAAc;QAChD,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAEzE,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtE,IAAI,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACzC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpE,IAAI,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAMO,MAAM,CAAC,GAAQ;QACnB,IAAI,CAAC;YACD,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO;gBAAE,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,0BAA0B,CAAC;QACtC,CAAC;IACL,CAAC;;AA1eL,0DA2eC;AAze2B,sCAAc,GAAG;IACrC,aAAa;IACb,WAAW;IACX,WAAW;IACX,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;CACT,CAAC;AAGsB,qCAAa,GAAG,kEAAkE,CAAC;AAGnF,uCAAe,GAAG,EAAE,CAAC;AAGrB,wCAAgB,GAAG,CAAC,CAAC"}

package/dist/system/libraries/script.fn.helpers.d.ts

@@ -0,0 +1,36 @@
+import { BaseService } from '../services/base.service';
+import { SandboxedScriptExecutor } from './sandboxed.script.executor';
+type BridgeRegistry = Map<string, (...args: any[]) => any>;
+export declare class ScriptFnHelpers {
+    static buildPlatformFns(executor: SandboxedScriptExecutor, registry: BridgeRegistry, pathPrefix?: string): {
+        hasEntity: (sourceType: string) => boolean;
+        hasService: (hash: string) => boolean;
+        hasJob: (hash: string) => boolean;
+        callEntity: (sourceType: string, method: string, ...args: any[]) => any;
+        callService: (hash: string, method: string, ...args: any[]) => any;
+        dispatchJob: (sourceType: string, data: any, delay?: number) => Promise<any>;
+        getEntity: (sourceType: string) => Record<string, {
+            __fn__: string;
+        }>;
+        getService: (hash: string) => Record<string, {
+            __fn__: string;
+        }>;
+        getJob: (hash: string) => Record<string, {
+            __fn__: string;
+        }>;
+    };
+    static buildBusinessRuleFns(executor: SandboxedScriptExecutor, registry: BridgeRegistry, commonService: BaseService, pathPrefix?: string): {
+        hasService: (identifier: string) => Promise<boolean>;
+        hasEntity: (identifier: string) => Promise<boolean>;
+        callService: (identifier: string, method: string, ...args: any[]) => Promise<any>;
+        callEntity: (identifier: string, method: string, ...args: any[]) => Promise<any>;
+        getServiceInstance: (identifier: string) => Promise<Record<string, {
+            __fn__: string;
+        }>>;
+        getEntityInstance: (identifier: string) => Promise<Record<string, {
+            __fn__: string;
+        }>>;
+        checkOrSetRecord: () => never;
+    };
+}
+export {};

package/dist/system/libraries/script.fn.helpers.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ScriptFnHelpers = void 0;
+const operation_exception_1 = require("../../common/exceptions/operation.exception");
+const platform_utility_1 = require("../../common/libraries/platform.utility");
+class ScriptFnHelpers {
+    static buildPlatformFns(executor, registry, pathPrefix = 'b.fn') {
+        const remote = (label, target, name) => {
+            if (!target)
+                throw new operation_exception_1.OperationException(`unknown ${name}`);
+            return executor.buildRemoteHandle(registry, `${pathPrefix}.${label}`, target);
+        };
+        return {
+            hasEntity: (sourceType) => !!platform_utility_1.PlatformUtility.getEntity(sourceType),
+            hasService: (hash) => !!platform_utility_1.PlatformUtility.getService(hash),
+            hasJob: (hash) => !!platform_utility_1.PlatformUtility.getJob(hash),
+            callEntity: (sourceType, method, ...args) => {
+                const entity = platform_utility_1.PlatformUtility.getEntity(sourceType);
+                if (!entity)
+                    throw new operation_exception_1.OperationException(`unknown entity "${sourceType}"`);
+                return executor.invokeMethod(entity, method, args);
+            },
+            callService: (hash, method, ...args) => {
+                const service = platform_utility_1.PlatformUtility.getService(hash);
+                if (!service)
+                    throw new operation_exception_1.OperationException(`unknown service "${hash}"`);
+                return executor.invokeMethod(service, method, args);
+            },
+            dispatchJob: async (sourceType, data, delay = 0) => {
+                const job = platform_utility_1.PlatformUtility.getJob(sourceType);
+                if (!job)
+                    return null;
+                const dispatched = await job.dispatch(data, { delay });
+                return dispatched?.id ?? null;
+            },
+            getEntity: (sourceType) => remote(`entity.${sourceType}`, platform_utility_1.PlatformUtility.getEntity(sourceType), `entity "${sourceType}"`),
+            getService: (hash) => remote(`service.${hash}`, platform_utility_1.PlatformUtility.getService(hash), `service "${hash}"`),
+            getJob: (hash) => remote(`job.${hash}`, platform_utility_1.PlatformUtility.getJob(hash), `job "${hash}"`),
+        };
+    }
+    static buildBusinessRuleFns(executor, registry, commonService, pathPrefix = 'b.fn') {
+        const resolveService = async (identifier) => {
+            const service = await commonService.getServiceInstance(identifier);
+            if (!service)
+                throw new operation_exception_1.OperationException(`unknown service "${identifier}"`);
+            return executor.buildRemoteHandle(registry, `${pathPrefix}.service.${identifier}`, service);
+        };
+        const resolveEntity = async (identifier) => {
+            const entity = await commonService.getEntityInstance(identifier);
+            if (!entity)
+                throw new operation_exception_1.OperationException(`unknown entity "${identifier}"`);
+            return executor.buildRemoteHandle(registry, `${pathPrefix}.entity.${identifier}`, entity);
+        };
+        return {
+            hasService: async (identifier) => !!(await commonService.getServiceInstance(identifier)),
+            hasEntity: async (identifier) => !!(await commonService.getEntityInstance(identifier)),
+            callService: async (identifier, method, ...args) => {
+                const service = await commonService.getServiceInstance(identifier);
+                if (!service)
+                    throw new operation_exception_1.OperationException(`unknown service "${identifier}"`);
+                return executor.invokeMethod(service, method, args);
+            },
+            callEntity: async (identifier, method, ...args) => {
+                const entity = await commonService.getEntityInstance(identifier);
+                if (!entity)
+                    throw new operation_exception_1.OperationException(`unknown entity "${identifier}"`);
+                return executor.invokeMethod(entity, method, args);
+            },
+            getServiceInstance: (identifier) => resolveService(identifier),
+            getEntityInstance: (identifier) => resolveEntity(identifier),
+            checkOrSetRecord: () => {
+                throw new operation_exception_1.OperationException('fn.checkOrSetRecord is not callable from a business rule script');
+            },
+        };
+    }
+}
+exports.ScriptFnHelpers = ScriptFnHelpers;
+//# sourceMappingURL=script.fn.helpers.js.map

package/dist/system/libraries/script.fn.helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"script.fn.helpers.js","sourceRoot":"","sources":["../../../src/system/libraries/script.fn.helpers.ts"],"names":[],"mappings":";;;AAAA,qFAAiF;AACjF,8EAA0E;AAW1E,MAAa,eAAe;IACxB,MAAM,CAAC,gBAAgB,CAAC,QAAiC,EAAE,QAAwB,EAAE,UAAU,GAAG,MAAM;QACpG,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAW,EAAE,IAAY,EAAE,EAAE;YACxD,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,wCAAkB,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YAE7D,OAAO,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,UAAU,IAAI,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QAClF,CAAC,CAAC;QAEF,OAAO;YACH,SAAS,EAAE,CAAC,UAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,kCAAe,CAAC,SAAS,CAAC,UAAU,CAAC;YAC1E,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,CAAC,kCAAe,CAAC,UAAU,CAAC,IAAI,CAAC;YAChE,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,CAAC,kCAAe,CAAC,MAAM,CAAC,IAAI,CAAC;YACxD,UAAU,EAAE,CAAC,UAAkB,EAAE,MAAc,EAAE,GAAG,IAAW,EAAE,EAAE;gBAC/D,MAAM,MAAM,GAAG,kCAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACrD,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,wCAAkB,CAAC,mBAAmB,UAAU,GAAG,CAAC,CAAC;gBAE5E,OAAO,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YACD,WAAW,EAAE,CAAC,IAAY,EAAE,MAAc,EAAE,GAAG,IAAW,EAAE,EAAE;gBAC1D,MAAM,OAAO,GAAG,kCAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,wCAAkB,CAAC,oBAAoB,IAAI,GAAG,CAAC,CAAC;gBAExE,OAAO,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACxD,CAAC;YACD,WAAW,EAAE,KAAK,EAAE,UAAkB,EAAE,IAAS,EAAE,QAAgB,CAAC,EAAE,EAAE;gBACpE,MAAM,GAAG,GAAG,kCAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC/C,IAAI,CAAC,GAAG;oBAAE,OAAO,IAAI,CAAC;gBAEtB,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;gBAEvD,OAAO,UAAU,EAAE,EAAE,IAAI,IAAI,CAAC;YAClC,CAAC;YACD,SAAS,EAAE,CAAC,UAAkB,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,UAAU,EAAE,EAAE,kCAAe,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,WAAW,UAAU,GAAG,CAAC;YAClI,UAAU,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,EAAE,kCAAe,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,YAAY,IAAI,GAAG,CAAC;YAC9G,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,kCAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,IAAI,GAAG,CAAC;SACjG,CAAC;IACN,CAAC;IAED,MAAM,CAAC,oBAAoB,CAAC,QAAiC,EAAE,QAAwB,EAAE,aAA0B,EAAE,UAAU,GAAG,MAAM;QACpI,MAAM,cAAc,GAAG,KAAK,EAAE,UAAkB,EAAE,EAAE;YAChD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,wCAAkB,CAAC,oBAAoB,UAAU,GAAG,CAAC,CAAC;YAE9E,OAAO,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,UAAU,YAAY,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC;QAChG,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,KAAK,EAAE,UAAkB,EAAE,EAAE;YAC/C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,wCAAkB,CAAC,mBAAmB,UAAU,GAAG,CAAC,CAAC;YAE5E,OAAO,QAAQ,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,UAAU,WAAW,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9F,CAAC,CAAC;QAEF,OAAO;YACH,UAAU,EAAE,KAAK,EAAE,UAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAChG,SAAS,EAAE,KAAK,EAAE,UAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAC9F,WAAW,EAAE,KAAK,EAAE,UAAkB,EAAE,MAAc,EAAE,GAAG,IAAW,EAAE,EAAE;gBACtE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBACnE,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,wCAAkB,CAAC,oBAAoB,UAAU,GAAG,CAAC,CAAC;gBAE9E,OAAO,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACxD,CAAC;YACD,UAAU,EAAE,KAAK,EAAE,UAAkB,EAAE,MAAc,EAAE,GAAG,IAAW,EAAE,EAAE;gBACrE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBACjE,IAAI,CAAC,MAAM;oBAAE,MAAM,IAAI,wCAAkB,CAAC,mBAAmB,UAAU,GAAG,CAAC,CAAC;gBAE5E,OAAO,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YACvD,CAAC;YACD,kBAAkB,EAAE,CAAC,UAAkB,EAAE,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC;YACtE,iBAAiB,EAAE,CAAC,UAAkB,EAAE,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC;YACpE,gBAAgB,EAAE,GAAG,EAAE;gBACnB,MAAM,IAAI,wCAAkB,CAAC,iEAAiE,CAAC,CAAC;YACpG,CAAC;SACJ,CAAC;IACN,CAAC;CACJ;AA3ED,0CA2EC"}

package/dist/system/libraries/security.rule.evaluator.d.ts

@@ -1,5 +1,6 @@
 export declare class SecurityRuleEvaluator {
     private data;
+    private readonly executor;
     constructor(data: any);
     process(rule: any): Promise<boolean>;
     evaluateCondition(condition: string): Promise<boolean>;

package/dist/system/libraries/security.rule.evaluator.js

@@ -2,8 +2,10 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SecurityRuleEvaluator = void 0;
 const auth_1 = require("../../common/libraries/auth");
+const sandboxed_script_executor_1 = require("./sandboxed.script.executor");
 class SecurityRuleEvaluator {
     constructor(data) {
+        this.executor = new sandboxed_script_executor_1.SandboxedScriptExecutor();
         this.data = data;
     }
     async process(rule) {
@@ -15,11 +17,22 @@ class SecurityRuleEvaluator {
     async evaluateCondition(condition) {
         if (!condition)
             return true;
-        const data = this.data;
-        const user = auth_1.Auth.user();
-        let answer = true;
-        eval(condition);
-        return answer;
+        const strictDeny = process.env.SECURITY_RULE_STRICT_DENY === 'true';
+        const initialAnswer = !strictDeny;
+        const result = this.executor.execute(condition, {
+            timeoutMs: 1000,
+            context: {
+                data: this.data,
+                user: auth_1.Auth.user(),
+                answer: initialAnswer,
+            },
+        });
+        if (!result.ok) {
+            global.console.error(`SecurityRuleEvaluator: condition eval failed (fail-closed): ${result.error}`);
+            return false;
+        }
+        const answer = result.context.answer;
+        return typeof answer === 'boolean' ? answer : initialAnswer;
     }
 }
 exports.SecurityRuleEvaluator = SecurityRuleEvaluator;

package/dist/system/libraries/security.rule.evaluator.js.map

@@ -1 +1 @@
-{"version":3,"file":"security.rule.evaluator.js","sourceRoot":"","sources":["../../../src/system/libraries/security.rule.evaluator.ts"],"names":[],"mappings":";;;AAAA,sDAAmD;AAQnD,MAAa,qBAAqB;IAY9B,YAAY,IAAS;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;IAQD,KAAK,CAAC,OAAO,CAAC,IAAS;QACnB,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClF,IAAI,qBAAqB;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtE,OAAO,IAAI,CAAC;IAChB,CAAC;IAOD,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,IAAI,GAAG,WAAI,CAAC,IAAI,EAAE,CAAC;QAGzB,IAAI,MAAM,GAAG,IAAI,CAAC;QAGlB,IAAI,CAAC,SAAS,CAAC,CAAC;QAEhB,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ;AAhDD,sDAgDC"}
+{"version":3,"file":"security.rule.evaluator.js","sourceRoot":"","sources":["../../../src/system/libraries/security.rule.evaluator.ts"],"names":[],"mappings":";;;AAAA,sDAAmD;AACnD,2EAAsE;AActE,MAAa,qBAAqB;IAI9B,YAAY,IAAS;QAFJ,aAAQ,GAAG,IAAI,mDAAuB,EAAE,CAAC;QAGtD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;IAMD,KAAK,CAAC,OAAO,CAAC,IAAS;QACnB,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAClF,IAAI,qBAAqB;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtE,OAAO,IAAI,CAAC;IAChB,CAAC;IAMD,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACrC,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAK5B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,MAAM,CAAC;QACpE,MAAM,aAAa,GAAG,CAAC,UAAU,CAAC;QAElC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE;YAC5C,SAAS,EAAE,IAAI;YACf,OAAO,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,IAAI,EAAE,WAAI,CAAC,IAAI,EAAE;gBACjB,MAAM,EAAE,aAAa;aACxB;SACJ,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAGb,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,+DAA+D,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACpG,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,MAAM,GAAI,MAAM,CAAC,OAAe,CAAC,MAAM,CAAC;QAC9C,OAAO,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;IAChE,CAAC;CACJ;AAnDD,sDAmDC"}