@tellescope/sdk 1.256.14 → 1.256.16

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (293) hide show
  1. package/lib/cjs/sdk.d.ts +2 -2
  2. package/lib/cjs/tests/api_tests/auto_merge_form_submission.test.js +1 -1
  3. package/lib/cjs/tests/api_tests/auto_merge_form_submission.test.js.map +1 -1
  4. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.d.ts +5 -0
  5. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.d.ts.map +1 -0
  6. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.js +388 -0
  7. package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.js.map +1 -0
  8. package/lib/cjs/tests/api_tests/integrations_redacted.test.js +3 -3
  9. package/lib/cjs/tests/api_tests/integrations_redacted.test.js.map +1 -1
  10. package/lib/cjs/tests/api_tests/organization_signup.test.d.ts +1 -1
  11. package/lib/cjs/tests/api_tests/organization_signup.test.js +1 -1
  12. package/lib/cjs/tests/api_tests/purchase_made_trigger.test.d.ts.map +1 -1
  13. package/lib/cjs/tests/api_tests/purchase_made_trigger.test.js +103 -162
  14. package/lib/cjs/tests/api_tests/purchase_made_trigger.test.js.map +1 -1
  15. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts +33 -0
  16. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts.map +1 -0
  17. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.js +249 -0
  18. package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.js.map +1 -0
  19. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts +42 -0
  20. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts.map +1 -0
  21. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js +281 -0
  22. package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js.map +1 -0
  23. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.d.ts +38 -0
  24. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.d.ts.map +1 -0
  25. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.js +390 -0
  26. package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.js.map +1 -0
  27. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.d.ts +6 -0
  28. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.d.ts.map +1 -0
  29. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.js +1003 -0
  30. package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.js.map +1 -0
  31. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.d.ts +42 -0
  32. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.d.ts.map +1 -0
  33. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.js +323 -0
  34. package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.js.map +1 -0
  35. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts +29 -0
  36. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts.map +1 -0
  37. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.js +335 -0
  38. package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.js.map +1 -0
  39. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts +32 -0
  40. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts.map +1 -0
  41. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js +237 -0
  42. package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js.map +1 -0
  43. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts +28 -0
  44. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts.map +1 -0
  45. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.js +349 -0
  46. package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.js.map +1 -0
  47. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts +30 -0
  48. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts.map +1 -0
  49. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js +314 -0
  50. package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js.map +1 -0
  51. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.d.ts +21 -0
  52. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.d.ts.map +1 -0
  53. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.js +362 -0
  54. package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.js.map +1 -0
  55. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.d.ts +21 -0
  56. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.d.ts.map +1 -0
  57. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.js +366 -0
  58. package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.js.map +1 -0
  59. package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.d.ts +5 -0
  60. package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.d.ts.map +1 -0
  61. package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.js +357 -0
  62. package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.js.map +1 -0
  63. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.d.ts +32 -0
  64. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.d.ts.map +1 -0
  65. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.js +248 -0
  66. package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.js.map +1 -0
  67. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts +19 -0
  68. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts.map +1 -0
  69. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.js +138 -0
  70. package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.js.map +1 -0
  71. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts +24 -0
  72. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts.map +1 -0
  73. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js +201 -0
  74. package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js.map +1 -0
  75. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.d.ts +29 -0
  76. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.d.ts.map +1 -0
  77. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.js +278 -0
  78. package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.js.map +1 -0
  79. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.d.ts +17 -0
  80. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.d.ts.map +1 -0
  81. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.js +155 -0
  82. package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.js.map +1 -0
  83. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.d.ts +2 -0
  84. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.d.ts.map +1 -0
  85. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.js +88 -0
  86. package/lib/cjs/tests/api_tests/security/prototype-pollution.test.js.map +1 -0
  87. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts +34 -0
  88. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts.map +1 -0
  89. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.js +230 -0
  90. package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.js.map +1 -0
  91. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts +2 -0
  92. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts.map +1 -0
  93. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.js +242 -0
  94. package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.js.map +1 -0
  95. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.d.ts +2 -0
  96. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.d.ts.map +1 -0
  97. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.js +148 -0
  98. package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.js.map +1 -0
  99. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts +45 -0
  100. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts.map +1 -0
  101. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.js +388 -0
  102. package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.js.map +1 -0
  103. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.d.ts +38 -0
  104. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.d.ts.map +1 -0
  105. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.js +222 -0
  106. package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.js.map +1 -0
  107. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts +6 -0
  108. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts.map +1 -0
  109. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js +354 -0
  110. package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js.map +1 -0
  111. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts +28 -0
  112. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts.map +1 -0
  113. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.js +442 -0
  114. package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.js.map +1 -0
  115. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.d.ts +19 -0
  116. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.d.ts.map +1 -0
  117. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.js +156 -0
  118. package/lib/cjs/tests/api_tests/security/webhook-timeout.test.js.map +1 -0
  119. package/lib/cjs/tests/api_tests/webhook_error_handling.test.js +2 -2
  120. package/lib/cjs/tests/api_tests/webhook_error_handling.test.js.map +1 -1
  121. package/lib/cjs/tests/tests.d.ts.map +1 -1
  122. package/lib/cjs/tests/tests.js +60 -46
  123. package/lib/cjs/tests/tests.js.map +1 -1
  124. package/lib/cjs/tests/unit_tests/openapi_spec_freshness.test.d.ts +1 -1
  125. package/lib/cjs/tests/unit_tests/openapi_spec_freshness.test.js +1 -1
  126. package/lib/cjs/tsconfig.cjs.tsbuildinfo +1 -0
  127. package/lib/esm/enduser.d.ts +0 -1
  128. package/lib/esm/enduser.d.ts.map +1 -1
  129. package/lib/esm/sdk.d.ts +4 -5
  130. package/lib/esm/sdk.d.ts.map +1 -1
  131. package/lib/esm/session.d.ts +0 -1
  132. package/lib/esm/session.d.ts.map +1 -1
  133. package/lib/esm/tests/api_tests/auto_merge_form_submission.test.js +1 -1
  134. package/lib/esm/tests/api_tests/auto_merge_form_submission.test.js.map +1 -1
  135. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.d.ts +5 -0
  136. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.d.ts.map +1 -0
  137. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.js +383 -0
  138. package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.js.map +1 -0
  139. package/lib/esm/tests/api_tests/integrations_redacted.test.js +3 -3
  140. package/lib/esm/tests/api_tests/integrations_redacted.test.js.map +1 -1
  141. package/lib/esm/tests/api_tests/organization_signup.test.d.ts +1 -1
  142. package/lib/esm/tests/api_tests/organization_signup.test.js +1 -1
  143. package/lib/esm/tests/api_tests/purchase_made_trigger.test.d.ts.map +1 -1
  144. package/lib/esm/tests/api_tests/purchase_made_trigger.test.js +104 -163
  145. package/lib/esm/tests/api_tests/purchase_made_trigger.test.js.map +1 -1
  146. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts +33 -0
  147. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts.map +1 -0
  148. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.js +244 -0
  149. package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.js.map +1 -0
  150. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts +42 -0
  151. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts.map +1 -0
  152. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js +276 -0
  153. package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js.map +1 -0
  154. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.d.ts +38 -0
  155. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.d.ts.map +1 -0
  156. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.js +386 -0
  157. package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.js.map +1 -0
  158. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.d.ts +6 -0
  159. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.d.ts.map +1 -0
  160. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.js +996 -0
  161. package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.js.map +1 -0
  162. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.d.ts +42 -0
  163. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.d.ts.map +1 -0
  164. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.js +316 -0
  165. package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.js.map +1 -0
  166. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts +29 -0
  167. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts.map +1 -0
  168. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.js +331 -0
  169. package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.js.map +1 -0
  170. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts +32 -0
  171. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts.map +1 -0
  172. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js +233 -0
  173. package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js.map +1 -0
  174. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts +28 -0
  175. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts.map +1 -0
  176. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.js +345 -0
  177. package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.js.map +1 -0
  178. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts +30 -0
  179. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts.map +1 -0
  180. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js +310 -0
  181. package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js.map +1 -0
  182. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.d.ts +21 -0
  183. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.d.ts.map +1 -0
  184. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.js +358 -0
  185. package/lib/esm/tests/api_tests/security/enduser-cross-create.test.js.map +1 -0
  186. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.d.ts +21 -0
  187. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.d.ts.map +1 -0
  188. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.js +362 -0
  189. package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.js.map +1 -0
  190. package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.d.ts +5 -0
  191. package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.d.ts.map +1 -0
  192. package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.js +349 -0
  193. package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.js.map +1 -0
  194. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.d.ts +32 -0
  195. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.d.ts.map +1 -0
  196. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.js +243 -0
  197. package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.js.map +1 -0
  198. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts +19 -0
  199. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts.map +1 -0
  200. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.js +134 -0
  201. package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.js.map +1 -0
  202. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts +24 -0
  203. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts.map +1 -0
  204. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js +194 -0
  205. package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js.map +1 -0
  206. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.d.ts +29 -0
  207. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.d.ts.map +1 -0
  208. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.js +271 -0
  209. package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.js.map +1 -0
  210. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.d.ts +17 -0
  211. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.d.ts.map +1 -0
  212. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.js +151 -0
  213. package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.js.map +1 -0
  214. package/lib/esm/tests/api_tests/security/prototype-pollution.test.d.ts +2 -0
  215. package/lib/esm/tests/api_tests/security/prototype-pollution.test.d.ts.map +1 -0
  216. package/lib/esm/tests/api_tests/security/prototype-pollution.test.js +84 -0
  217. package/lib/esm/tests/api_tests/security/prototype-pollution.test.js.map +1 -0
  218. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts +34 -0
  219. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts.map +1 -0
  220. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.js +223 -0
  221. package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.js.map +1 -0
  222. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts +2 -0
  223. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts.map +1 -0
  224. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.js +238 -0
  225. package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.js.map +1 -0
  226. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.d.ts +2 -0
  227. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.d.ts.map +1 -0
  228. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.js +144 -0
  229. package/lib/esm/tests/api_tests/security/sanitize-user-html.test.js.map +1 -0
  230. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts +45 -0
  231. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts.map +1 -0
  232. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.js +381 -0
  233. package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.js.map +1 -0
  234. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.d.ts +38 -0
  235. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.d.ts.map +1 -0
  236. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.js +218 -0
  237. package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.js.map +1 -0
  238. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts +6 -0
  239. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts.map +1 -0
  240. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js +350 -0
  241. package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js.map +1 -0
  242. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts +28 -0
  243. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts.map +1 -0
  244. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.js +435 -0
  245. package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.js.map +1 -0
  246. package/lib/esm/tests/api_tests/security/webhook-timeout.test.d.ts +19 -0
  247. package/lib/esm/tests/api_tests/security/webhook-timeout.test.d.ts.map +1 -0
  248. package/lib/esm/tests/api_tests/security/webhook-timeout.test.js +149 -0
  249. package/lib/esm/tests/api_tests/security/webhook-timeout.test.js.map +1 -0
  250. package/lib/esm/tests/api_tests/webhook_error_handling.test.js +2 -2
  251. package/lib/esm/tests/api_tests/webhook_error_handling.test.js.map +1 -1
  252. package/lib/esm/tests/tests.d.ts.map +1 -1
  253. package/lib/esm/tests/tests.js +38 -24
  254. package/lib/esm/tests/tests.js.map +1 -1
  255. package/lib/esm/tests/unit_tests/openapi_spec_freshness.test.d.ts +1 -1
  256. package/lib/esm/tests/unit_tests/openapi_spec_freshness.test.js +1 -1
  257. package/lib/tsconfig.tsbuildinfo +1 -1
  258. package/package.json +10 -10
  259. package/src/tests/api_tests/auto_merge_form_submission.test.ts +1 -1
  260. package/src/tests/api_tests/enduser_observations_auto_review.test.ts +358 -0
  261. package/src/tests/api_tests/integrations_redacted.test.ts +1 -1
  262. package/src/tests/api_tests/organization_signup.test.ts +2 -2
  263. package/src/tests/api_tests/purchase_made_trigger.test.ts +29 -41
  264. package/src/tests/api_tests/security/{F-0196-add-to-journey-foreign-enduserid.test.ts → add-to-journey-foreign-enduserid.test.ts} +6 -7
  265. package/src/tests/api_tests/security/{F-0005-ai-conversations-rbac.test.ts → ai-conversations-rbac.test.ts} +14 -14
  266. package/src/tests/api_tests/security/{F-0166-allowed-paths-wildcard-bypass.test.ts → allowed-paths-confinement.test.ts} +11 -11
  267. package/src/tests/api_tests/security/{F-0192-automated-actions-process-gate.test.ts → automated-actions-process-gate.test.ts} +6 -7
  268. package/src/tests/api_tests/security/{F-0179-booking-info-idor-token-mint.test.ts → booking-info-idor-token-mint.test.ts} +5 -6
  269. package/src/tests/api_tests/security/{F-0053-cascade-role-rename-cross-tenant.test.ts → cascade-role-rename-cross-tenant.test.ts} +10 -10
  270. package/src/tests/api_tests/security/{F-0001-data-sync-redaction-bypass.test.ts → data-sync-redaction-bypass.test.ts} +9 -9
  271. package/src/tests/api_tests/security/{F-0006-develop-health-benefit-verification-rbac.test.ts → develop-health-benefit-verification-rbac.test.ts} +7 -8
  272. package/src/tests/api_tests/security/{F-0116-F-0119-enduser-cross-create.test.ts → enduser-cross-create.test.ts} +25 -25
  273. package/src/tests/api_tests/security/{F-0106-F-0110-enduser-write-restrictions.test.ts → enduser-write-restrictions.test.ts} +12 -14
  274. package/src/tests/api_tests/security/file-link-session-confinement.test.ts +291 -0
  275. package/src/tests/api_tests/security/form-logic-js-execution.test.ts +183 -0
  276. package/src/tests/api_tests/security/{F-0145-globalunique-leak.test.ts → globalunique-conflict-redaction.test.ts} +5 -6
  277. package/src/tests/api_tests/security/{F-0008-handle-incoming-communication-cross-tenant.test.ts → handle-incoming-communication-cross-tenant.test.ts} +8 -8
  278. package/src/tests/api_tests/security/{F-0007-invite-user-enumeration.test.ts → invite-user-enumeration.test.ts} +8 -8
  279. package/src/tests/api_tests/security/{F-0151-load-inbox-redaction.test.ts → load-inbox-redaction.test.ts} +5 -6
  280. package/src/tests/api_tests/security/{F-0016-prototype-pollution.test.ts → prototype-pollution.test.ts} +4 -4
  281. package/src/tests/api_tests/security/{F-0025-proxy-image-unauth-ssrf.test.ts → proxy-image-unauth-ssrf.test.ts} +11 -12
  282. package/src/tests/api_tests/security/{F-0013-sanitize-user-html-with-iframes.test.ts → sanitize-user-html-with-iframes.test.ts} +5 -5
  283. package/src/tests/api_tests/security/{F-0013-sanitize-user-html.test.ts → sanitize-user-html.test.ts} +4 -4
  284. package/src/tests/api_tests/security/{F-0191-schema-adminonly-enforcement.test.ts → schema-adminonly-enforcement.test.ts} +6 -7
  285. package/src/tests/api_tests/security/{F-0076-self-admin-role-assignment.test.ts → self-admin-role-assignment.test.ts} +13 -13
  286. package/src/tests/api_tests/security/{F-0185-startlinktoken-enduser-staff-escalation.test.ts → startlinktoken-enduser-staff-escalation.test.ts} +6 -6
  287. package/src/tests/api_tests/security/{F-0015-webhook-outbound-ssrf.test.ts → webhook-outbound-ssrf.test.ts} +13 -14
  288. package/src/tests/api_tests/security/{F-0155-webhook-timeout.test.ts → webhook-timeout.test.ts} +6 -7
  289. package/src/tests/api_tests/webhook_error_handling.test.ts +1 -1
  290. package/src/tests/tests.ts +43 -24
  291. package/src/tests/unit_tests/openapi_spec_freshness.test.ts +1 -1
  292. package/test_generated.pdf +0 -0
  293. package/src/tests/api_tests/security/readonly-enduser-preview.test.ts +0 -301
@@ -1 +1 @@
1
- {"version":3,"file":"purchase_made_trigger.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/purchase_made_trigger.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAElE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;AAE3D,MAAM,CAAC,IAAM,2BAA2B,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;oBAClE,UAAU,CAAC,0CAA0C,CAAC,CAAA;oBAGrC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBAJI,QAAQ,GAAG,SAIf;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBAJI,QAAQ,GAAG,SAIf;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC;wBAEF,qDAAqD;sBAFnD;;oBAJI,QAAQ,GAAG,SAIf;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAG,EAAE;4BAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,EAAC;4BAC7D,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,gBAAgB;yBACxB,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE;4BAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAC;4BACrE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,wBAAwB;yBAChC,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE;4BACrE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAC;4BACpE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,uBAAuB;yBAC/B,CAAC;wBAEF,iDAAiD;sBAF/C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;4BAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,yBAAyB,CAAC,EAAE,EAAC;4BACxE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,iCAAiC;yBACzC,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE;4BAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAC;4BAC3E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,uDAAuD;yBAC/D,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE;4BAC/F,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,EAAE,EAAC;4BAC1E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,qCAAqC;yBAC7C,CAAC;wBAEF,gDAAgD;sBAF9C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE;4BAC5F,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,oBAAoB,CAAC,EAAE,EAAC;4BACnE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,kDAAkD;yBAC1D,CAAC;wBAEF,+CAA+C;sBAF7C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE;4BACnE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAC;4BACrE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,iDAAiD;yBACzD,CAAC;wBAEF,wBAAwB;sBAFtB;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE;4BACpF,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAC;4BACvE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,0BAA0B;yBAClC,CAAC;wBAEF,0FAA0F;sBAFxF;;oBALI,EAAE,GAAG,SAKT;oBAGe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACnC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAEtD,8BAA8B;sBAFwB;;oBAAhD,SAAS,GAAG,SAAoC;oBAG1C,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;4BACrE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAC;4BACzE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,4BAA4B;yBACpC,CAAC;wBAEF,uDAAuD;sBAFrD;;oBALI,GAAG,GAAG,SAKV;oBAGU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE;4BAC3D,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAC;4BACtE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,oCAAoC;yBAC5C,CAAC;wBAEF,oDAAoD;sBAFlD;;oBALI,GAAG,GAAG,SAKV;oBAGU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;4BACzG,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,EAAE,EAAC;4BAC1E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,6BAA6B;yBACrC,CAAC,EAAA;;oBALI,GAAG,GAAG,SAKV;oBAEgB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAEtD,iFAAiF;sBAF3B;;oBAAhD,SAAS,GAAG,SAAoC;oBAGpC,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,oCAAoC;;oBAA/D,SAA0B,CAAA,CAAC,oCAAoC;oBAC/D,qBAAM,UAAU,CACd,8BAA8B,EAC9B,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,CAAA,EAAA,EAAE,CACjE;wBAED,0CAA0C;sBAFzC;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,mCAAmC,EACnC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,CAAA,EAAA,EAAE,CACzE;wBAED,yCAAyC;sBAFxC;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,kCAAkC,EAClC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAA,CAAA,EAAA,EAAE,CACxE;wBAED,wEAAwE;sBAFvE;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,iEAAiE,EACjE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5E;wBAED,uFAAuF;sBAFtF;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,oEAAoE,EACpE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC/E;wBAED,wDAAwD;sBAFvD;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,wCAAwC,EACxC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,oBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAA,CAAA,EAAA,EAAE,CACpK;wBAED,iDAAiD;sBAFhD;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,4BAA4B;4BACnC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,gDAAgD,EAChD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5E;wBAED,0EAA0E;sBAFzE;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,8DAA8D,EAC9D,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,2EAA2E;sBAF1E;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,+DAA+D,EAC/D,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,kGAAkG;sBAFjG;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,+BAA+B;4BACtC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,6EAA6E,EAC7E,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,6FAA6F;sBAF5F;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,gCAAgC;4BACvC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,6EAA6E,EAC7E,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,8FAA8F;sBAF7F;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,iCAAiC;4BACxC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,8EAA8E,EAC9E,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,0EAA0E;sBAFzE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,gBAAgB;4BACvB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,oFAAoF,EACpF,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,CAAA,EAAA,EAAE,CAC/G;wBAED,gFAAgF;sBAF/E;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,EAAE;4BACT,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,wEAAwE,EACxE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,wBAAwB,CAAC,CAAA,CAAA,EAAA,EAAE,CAChH;wBAED,mEAAmE;sBAFlE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,2CAA2C,EAC3C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5H;wBAED,0FAA0F;wBAC1F,6EAA6E;sBAH5E;;oBAJD,SAIC,CAAA;oBAIkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,sFAAsF,EACtF,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CAClH;wBAED,2EAA2E;sBAF1E;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,0CAA0C,EAC1C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CAClH;wBAED,qFAAqF;wBACrF,wEAAwE;sBAHvE;;oBAJD,SAIC,CAAA;oBAIkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBALI,UAAU,GAAG,SAKjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,kDAAkD,EAClD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,oBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CACjK;wBAED,sEAAsE;sBAFrE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,wCAAwC,EACxC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,wFAAwF;sBAFvF;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBALI,UAAU,GAAG,SAKjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,kEAAkE,EAClE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC3H;wBAED,yEAAyE;sBAFxE;;oBAJD,SAIC,CAAA;oBAED,yEAAyE;oBACzE,qBAAM,UAAU,CACd,yDAAyD,EACzD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAA1C,CAA0C,EAChD,EAAE,QAAQ,EAAE,UAAA,CAAC,gBAAI,OAAA,IAAI,CAAC,SAAS,CAAC,MAAA,MAAC,CAAC,CAAC,KAAa,0CAAE,IAAI,0CAAE,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA,EAAA,EAAE,CACxG,EAAA;;oBALD,yEAAyE;oBACzE,SAIC,CAAA;;;;oBAGC,sCAAsC;oBACtC,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBADlD,sCAAsC;oBACtC,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAA;;oBAAnD,SAAmD,CAAA;oBACnD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAA;;oBAAnD,SAAmD,CAAA;oBACnD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBAEnD,oBAAoB;sBAF+B;;oBAAnD,SAAmD,CAAA;oBAEnD,oBAAoB;oBACpB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAD7C,oBAAoB;oBACpB,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAE7C,6DAA6D;sBAFhB;;oBAA7C,SAA6C,CAAA;oBAE7C,6DAA6D;oBAC7D,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAD7C,6DAA6D;oBAC7D,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;;;;;;;CAEjD,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,2BAA2B,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAvD,SAAuD,CAAA;;;;SACxD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAA;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
1
+ {"version":3,"file":"purchase_made_trigger.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/purchase_made_trigger.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;AAE3D,MAAM,CAAC,IAAM,2BAA2B,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;oBAClE,UAAU,CAAC,0CAA0C,CAAC,CAAA;oBAKhD,iBAAiB,GAAG,UAAC,SAAiB,EAAE,IAAc,IAAK,OAAA,gBAAgB,CAC/E,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAlC,CAAkC,EACxC,UAAA,CAAC,IAAI,OAAA,IAAI,CAAC,KAAK,CAAC,UAAA,CAAC,YAAI,OAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,CAAC,CAAC,CAAA,EAAA,CAAC,EAApC,CAAoC,CAC1C,EAHgE,CAGhE,CAAA;oBAGgB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBAJI,QAAQ,GAAG,SAIf;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBAJI,QAAQ,GAAG,SAIf;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC;wBAEF,qDAAqD;sBAFnD;;oBAJI,QAAQ,GAAG,SAIf;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAG,EAAE;4BAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,EAAC;4BAC7D,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,gBAAgB;yBACxB,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE;4BAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAC;4BACrE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,wBAAwB;yBAChC,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE;4BACrE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAC;4BACpE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,uBAAuB;yBAC/B,CAAC;wBAEF,iDAAiD;sBAF/C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;4BAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,yBAAyB,CAAC,EAAE,EAAC;4BACxE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,iCAAiC;yBACzC,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE;4BAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAC;4BAC3E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,uDAAuD;yBAC/D,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE;4BAC/F,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,EAAE,EAAC;4BAC1E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,qCAAqC;yBAC7C,CAAC;wBAEF,gDAAgD;sBAF9C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE;4BAC5F,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,oBAAoB,CAAC,EAAE,EAAC;4BACnE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,kDAAkD;yBAC1D,CAAC;wBAEF,+CAA+C;sBAF7C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE;4BACnE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAC;4BACrE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,iDAAiD;yBACzD,CAAC;wBAEF,wBAAwB;sBAFtB;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE;4BACpF,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAC;4BACvE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,0BAA0B;yBAClC,CAAC;wBAEF,0FAA0F;sBAFxF;;oBALI,EAAE,GAAG,SAKT;oBAGe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACnC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAEtD,8BAA8B;sBAFwB;;oBAAhD,SAAS,GAAG,SAAoC;oBAG1C,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;4BACrE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAC;4BACzE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,4BAA4B;yBACpC,CAAC;wBAEF,uDAAuD;sBAFrD;;oBALI,GAAG,GAAG,SAKV;oBAGU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE;4BAC3D,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAC;4BACtE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,oCAAoC;yBAC5C,CAAC;wBAEF,oDAAoD;sBAFlD;;oBALI,GAAG,GAAG,SAKV;oBAGU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;4BACzG,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,EAAE,EAAC;4BAC1E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,6BAA6B;yBACrC,CAAC,EAAA;;oBALI,GAAG,GAAG,SAKV;oBAEgB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAEtD,iFAAiF;sBAF3B;;oBAAhD,SAAS,GAAG,SAAoC;oBAGpC,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,8BAA8B,EAC9B,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAhD,CAAgD,EACtD,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,CAAA,EAAA,EAAE,CACjE;wBAED,0CAA0C;sBAFzC;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,mCAAmC,EACnC,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAxD,CAAwD,EAC9D,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,CAAA,EAAA,EAAE,CACzE;wBAED,yCAAyC;sBAFxC;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,kCAAkC,EAClC,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAvD,CAAuD,EAC7D,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAA,CAAA,EAAA,EAAE,CACxE;wBAED,wEAAwE;sBAFvE;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,iEAAiE,EACjE,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,EAA3D,CAA2D,EACjE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5E;wBAED,uFAAuF;sBAFtF;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,oEAAoE,EACpE,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,CAAC,EAA9D,CAA8D,EACpE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC/E;wBAED,wDAAwD;sBAFvD;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,wCAAwC,EACxC,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAhD,CAAgD,EACtD,EAAE,QAAQ,EAAE,UAAC,CAAU,oBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAA,CAAA,EAAA,EAAE,CACpK;wBAED,iDAAiD;sBAFhD;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,4BAA4B;4BACnC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,gDAAgD,EAChD,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,EAA3D,CAA2D,EACjE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5E;wBAED,0EAA0E;sBAFzE;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,8DAA8D,EAC9D,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAA7D,CAA6D,EACnE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,2EAA2E;sBAF1E;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,+DAA+D,EAC/D,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAA7D,CAA6D,EACnE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,kGAAkG;sBAFjG;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,+BAA+B;4BACtC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,6EAA6E,EAC7E,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAvD,CAAuD,EAC7D,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,6FAA6F;sBAF5F;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,gCAAgC;4BACvC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,6EAA6E,EAC7E,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAvD,CAAuD,EAC7D,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,8FAA8F;sBAF7F;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,iCAAiC;4BACxC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,8EAA8E,EAC9E,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAvD,CAAuD,EAC7D,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,0EAA0E;sBAFzE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,gBAAgB;4BACvB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,oFAAoF,EACpF,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC,EAAzE,CAAyE,EAC/E,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,CAAA,EAAA,EAAE,CAC/G;wBAED,gFAAgF;sBAF/E;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,EAAE;4BACT,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,wEAAwE,EACxE,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAjD,CAAiD,EACvD,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,wBAAwB,CAAC,CAAA,CAAA,EAAA,EAAE,CAChH;wBAED,mEAAmE;sBAFlE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,2CAA2C,EAC3C,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,0BAA0B,EAAE,uBAAuB,CAAC,CAAC,EAAtF,CAAsF,EAC5F,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5H;wBAED,0FAA0F;wBAC1F,6EAA6E;sBAH5E;;oBAJD,SAIC,CAAA;oBAIkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,sFAAsF,EACtF,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAjD,CAAiD,EACvD,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CAClH;wBAED,2EAA2E;sBAF1E;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,0CAA0C,EAC1C,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAjD,CAAiD,EACvD,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CAClH;wBAED,qFAAqF;wBACrF,wEAAwE;sBAHvE;;oBAJD,SAIC,CAAA;oBAIkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBALI,UAAU,GAAG,SAKjB;oBACF,qBAAM,UAAU,CACd,kDAAkD,EAClD,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC,EAA1E,CAA0E,EAChF,EAAE,QAAQ,EAAE,UAAC,CAAU,oBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CACjK;wBAED,sEAAsE;sBAFrE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,wCAAwC,EACxC,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAA9D,CAA8D,EACpE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,wFAAwF;sBAFvF;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBALI,UAAU,GAAG,SAKjB;oBACF,qBAAM,UAAU,CACd,kEAAkE,EAClE,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAzD,CAAyD,EAC/D,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC3H;wBAED,yEAAyE;sBAFxE;;oBAJD,SAIC,CAAA;oBAED,yEAAyE;oBACzE,qBAAM,UAAU,CACd,yDAAyD,EACzD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAA1C,CAA0C,EAChD,EAAE,QAAQ,EAAE,UAAA,CAAC,gBAAI,OAAA,IAAI,CAAC,SAAS,CAAC,MAAA,MAAC,CAAC,CAAC,KAAa,0CAAE,IAAI,0CAAE,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA,EAAA,EAAE,CACxG,EAAA;;oBALD,yEAAyE;oBACzE,SAIC,CAAA;;;;oBAGC,sCAAsC;oBACtC,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBADlD,sCAAsC;oBACtC,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAA;;oBAAnD,SAAmD,CAAA;oBACnD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAA;;oBAAnD,SAAmD,CAAA;oBACnD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBAEnD,oBAAoB;sBAF+B;;oBAAnD,SAAmD,CAAA;oBAEnD,oBAAoB;oBACpB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAD7C,oBAAoB;oBACpB,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAE7C,6DAA6D;sBAFhB;;oBAA7C,SAA6C,CAAA;oBAE7C,6DAA6D;oBAC7D,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAD7C,6DAA6D;oBAC7D,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;;;;;;;CAEjD,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,2BAA2B,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAvD,SAAuD,CAAA;;;;SACxD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAA;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
@@ -0,0 +1,33 @@
1
+ import { Check } from "../../setup_isolated";
2
+ /**
3
+ * Regression test for F-0200
4
+ * (security-audit/findings/F-0200-form-logic-js-dynamic-code-execution.md).
5
+ *
6
+ * `responses_satisfy_conditions` (utilities/src/utils.ts) compiled a stored condition value of the
7
+ * form `$JS(...)` with `new Function()` and executed it — in every form-filler's browser, including
8
+ * anonymous visitors on public intake pages, AND inside the API process (automation_triggers.ts
9
+ * trigger matching on every form submission, ai_agent/form_filling.ts voice-agent navigation). The
10
+ * API process holds every tenant's database handle, so a condition authored by staff in one tenant
11
+ * reached all of them. Any staff user or API key with form_fields write access could plant one by
12
+ * typing into the free-text $gt/$lt box — no API call required.
13
+ *
14
+ * The sink is removed. This asserts the second half of the fix: `compoundFilterValidator` rejects the
15
+ * syntax at write time on every field that feeds that evaluator, so it cannot be reintroduced through
16
+ * stored configuration. The runtime half — that a `$JS` value is never evaluated — is covered by the
17
+ * pure-function cases in `form_conditional_logic_tests` in tests.ts.
18
+ *
19
+ * The five condition locations were established by enumerating every `responses_satisfy_conditions`
20
+ * call site, and all five are covered here. That completeness matters: the first run of this test
21
+ * caught a half fix. `event.conditions` is wrapped in an `orValidator`, which returns the first arm
22
+ * that does not throw, and its permissive `optional: optionalAnyObjectValidator` arm was declared
23
+ * before the guarded one — so the payload was accepted and stored even though the validator had been
24
+ * swapped. Pointing a field at the guard is not the same as the guard being reachable, which is why
25
+ * every location gets an assertion rather than an argument.
26
+ *
27
+ * Each rejection is paired with a positive control using the same shape without `$JS(`, so a passing
28
+ * test cannot be explained by the write failing for an unrelated reason.
29
+ */
30
+ export declare const form_logic_js_execution_checks: () => Promise<Check[]>;
31
+ /** Asserting wrapper, for standalone runs and for sequential use in the suite. */
32
+ export declare const form_logic_js_execution_tests: () => Promise<void>;
33
+ //# sourceMappingURL=F-0200-form-logic-js-execution.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"F-0200-form-logic-js-execution.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/F-0200-form-logic-js-execution.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,EAEN,MAAM,sBAAsB,CAAA;AAM7B;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,8BAA8B,QAAa,QAAQ,KAAK,EAAE,CA4HtE,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,qBAEzC,CAAA"}
@@ -0,0 +1,244 @@
1
+ var __assign = (this && this.__assign) || function () {
2
+ __assign = Object.assign || function(t) {
3
+ for (var s, i = 1, n = arguments.length; i < n; i++) {
4
+ s = arguments[i];
5
+ for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
6
+ t[p] = s[p];
7
+ }
8
+ return t;
9
+ };
10
+ return __assign.apply(this, arguments);
11
+ };
12
+ var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
13
+ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
14
+ return new (P || (P = Promise))(function (resolve, reject) {
15
+ function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
16
+ function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
17
+ function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
18
+ step((generator = generator.apply(thisArg, _arguments || [])).next());
19
+ });
20
+ };
21
+ var __generator = (this && this.__generator) || function (thisArg, body) {
22
+ var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
23
+ return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
24
+ function verb(n) { return function (v) { return step([n, v]); }; }
25
+ function step(op) {
26
+ if (f) throw new TypeError("Generator is already executing.");
27
+ while (g && (g = 0, op[0] && (_ = 0)), _) try {
28
+ if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
29
+ if (y = 0, t) op = [op[0] & 2, t.value];
30
+ switch (op[0]) {
31
+ case 0: case 1: t = op; break;
32
+ case 4: _.label++; return { value: op[1], done: false };
33
+ case 5: _.label++; y = op[1]; op = [0]; continue;
34
+ case 7: op = _.ops.pop(); _.trys.pop(); continue;
35
+ default:
36
+ if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
37
+ if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
38
+ if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
39
+ if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
40
+ if (t[2]) _.ops.pop();
41
+ _.trys.pop(); continue;
42
+ }
43
+ op = body.call(thisArg, _);
44
+ } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
45
+ if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
46
+ }
47
+ };
48
+ require('source-map-support').install();
49
+ import { assert_checks, setup_isolated_tenant, } from "../../setup_isolated";
50
+ var host = process.env.API_URL || 'http://localhost:8080';
51
+ var RAND = function () { return Math.random().toString(36).slice(2, 10); };
52
+ /**
53
+ * Regression test for F-0200
54
+ * (security-audit/findings/F-0200-form-logic-js-dynamic-code-execution.md).
55
+ *
56
+ * `responses_satisfy_conditions` (utilities/src/utils.ts) compiled a stored condition value of the
57
+ * form `$JS(...)` with `new Function()` and executed it — in every form-filler's browser, including
58
+ * anonymous visitors on public intake pages, AND inside the API process (automation_triggers.ts
59
+ * trigger matching on every form submission, ai_agent/form_filling.ts voice-agent navigation). The
60
+ * API process holds every tenant's database handle, so a condition authored by staff in one tenant
61
+ * reached all of them. Any staff user or API key with form_fields write access could plant one by
62
+ * typing into the free-text $gt/$lt box — no API call required.
63
+ *
64
+ * The sink is removed. This asserts the second half of the fix: `compoundFilterValidator` rejects the
65
+ * syntax at write time on every field that feeds that evaluator, so it cannot be reintroduced through
66
+ * stored configuration. The runtime half — that a `$JS` value is never evaluated — is covered by the
67
+ * pure-function cases in `form_conditional_logic_tests` in tests.ts.
68
+ *
69
+ * The five condition locations were established by enumerating every `responses_satisfy_conditions`
70
+ * call site, and all five are covered here. That completeness matters: the first run of this test
71
+ * caught a half fix. `event.conditions` is wrapped in an `orValidator`, which returns the first arm
72
+ * that does not throw, and its permissive `optional: optionalAnyObjectValidator` arm was declared
73
+ * before the guarded one — so the payload was accepted and stored even though the validator had been
74
+ * swapped. Pointing a field at the guard is not the same as the guard being reachable, which is why
75
+ * every location gets an assertion rather than an argument.
76
+ *
77
+ * Each rejection is paired with a positive control using the same shape without `$JS(`, so a passing
78
+ * test cannot be explained by the write failing for an unrelated reason.
79
+ */
80
+ export var form_logic_js_execution_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
81
+ var checks, record, JS_PAYLOAD, SAFE_VALUE, condition, previousFields, attempt, tenant, sdk_1, form_1, field_1, controlCreate, payloadCreate, payloadUpdate, groupControl, groupPayload, optionControl, optionPayload, productControl, productPayload, trigger_1, triggerControl, triggerPayload, byFormIdPayload, e_1;
82
+ return __generator(this, function (_a) {
83
+ switch (_a.label) {
84
+ case 0:
85
+ checks = [];
86
+ record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
87
+ JS_PAYLOAD = '$JS(return 0)';
88
+ SAFE_VALUE = '18';
89
+ condition = function (value) { return ({ $and: [{ condition: { 'someFieldId': { $gt: value } } }] }); };
90
+ previousFields = function (value) { return ([{
91
+ type: 'compoundLogic',
92
+ info: { fieldId: '000000000000000000000000', priority: 5, label: '', condition: condition(value) },
93
+ }]); };
94
+ attempt = function (fn) { return __awaiter(void 0, void 0, void 0, function () {
95
+ return __generator(this, function (_a) {
96
+ return [2 /*return*/, (fn().then(function () { return ({ accepted: true, detail: 'accepted' }); })
97
+ .catch(function (e) { return ({ accepted: false, detail: "rejected: ".concat((e === null || e === void 0 ? void 0 : e.message) || e) }); }))];
98
+ });
99
+ }); };
100
+ _a.label = 1;
101
+ case 1:
102
+ _a.trys.push([1, , 17, 22]);
103
+ return [4 /*yield*/, setup_isolated_tenant({ name: "F0200 ".concat(RAND()), users: [{ isAdmin: true }], apiKeys: 0 })];
104
+ case 2:
105
+ tenant = _a.sent();
106
+ sdk_1 = tenant.sdk;
107
+ return [4 /*yield*/, sdk_1.api.forms.createOne({ title: "F-0200 ".concat(RAND()) })];
108
+ case 3:
109
+ form_1 = _a.sent();
110
+ return [4 /*yield*/, sdk_1.api.form_fields.createOne({
111
+ formId: form_1.id, title: 'F-0200 anchor', type: 'string', previousFields: [{ type: 'root', info: {} }],
112
+ })
113
+ /* ===== 1. previousFields[].info.condition — the field the finding was reported against ===== */
114
+ ];
115
+ case 4:
116
+ field_1 = _a.sent();
117
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.createOne({
118
+ formId: form_1.id, title: 'F-0200 control', type: 'string',
119
+ previousFields: previousFields(SAFE_VALUE),
120
+ }); })];
121
+ case 5:
122
+ controlCreate = _a.sent();
123
+ record('control: form_fields.createOne accepts a normal $gt condition', controlCreate.accepted, controlCreate.detail);
124
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.createOne({
125
+ formId: form_1.id, title: 'F-0200 payload', type: 'string',
126
+ previousFields: previousFields(JS_PAYLOAD),
127
+ }); })];
128
+ case 6:
129
+ payloadCreate = _a.sent();
130
+ record('1a: form_fields.createOne rejects $JS( in previousFields condition', !payloadCreate.accepted, payloadCreate.detail);
131
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
132
+ previousFields: previousFields(JS_PAYLOAD),
133
+ }); })];
134
+ case 7:
135
+ payloadUpdate = _a.sent();
136
+ record('1b: form_fields.updateOne rejects $JS( in previousFields condition', !payloadUpdate.accepted, payloadUpdate.detail);
137
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
138
+ groupShowCondition: condition(SAFE_VALUE),
139
+ }); })];
140
+ case 8:
141
+ groupControl = _a.sent();
142
+ record('control: groupShowCondition accepts a normal condition', groupControl.accepted, groupControl.detail);
143
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
144
+ groupShowCondition: condition(JS_PAYLOAD),
145
+ }); })];
146
+ case 9:
147
+ groupPayload = _a.sent();
148
+ record('2: form_fields.updateOne rejects $JS( in groupShowCondition', !groupPayload.accepted, groupPayload.detail);
149
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
150
+ options: { optionDetails: [{ option: 'A', showCondition: condition(SAFE_VALUE) }] },
151
+ }); })];
152
+ case 10:
153
+ optionControl = _a.sent();
154
+ record('control: optionDetails showCondition accepts a normal condition', optionControl.accepted, optionControl.detail);
155
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
156
+ options: { optionDetails: [{ option: 'A', showCondition: condition(JS_PAYLOAD) }] },
157
+ }); })];
158
+ case 11:
159
+ optionPayload = _a.sent();
160
+ record('3: form_fields.updateOne rejects $JS( in optionDetails showCondition', !optionPayload.accepted, optionPayload.detail);
161
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
162
+ options: { productConditions: [{ productId: '000000000000000000000000', showCondition: condition(SAFE_VALUE) }] },
163
+ }); })];
164
+ case 12:
165
+ productControl = _a.sent();
166
+ record('control: productConditions showCondition accepts a normal condition', productControl.accepted, productControl.detail);
167
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
168
+ options: { productConditions: [{ productId: '000000000000000000000000', showCondition: condition(JS_PAYLOAD) }] },
169
+ }); })];
170
+ case 13:
171
+ productPayload = _a.sent();
172
+ record('4: form_fields.updateOne rejects $JS( in productConditions showCondition', !productPayload.accepted, productPayload.detail);
173
+ trigger_1 = function (conditions, extraInfo) {
174
+ if (extraInfo === void 0) { extraInfo = {}; }
175
+ return ({
176
+ title: "F-0200 ".concat(RAND()),
177
+ status: 'Inactive',
178
+ event: __assign({ type: 'Form Submitted', info: __assign({ formId: form_1.id }, extraInfo) }, conditions),
179
+ action: { type: 'Add Tags', info: { tags: ['F-0200'] } },
180
+ });
181
+ };
182
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.automation_triggers.createOne(trigger_1({ conditions: condition(SAFE_VALUE) })); })];
183
+ case 14:
184
+ triggerControl = _a.sent();
185
+ record('control: automation_triggers accepts normal event conditions', triggerControl.accepted, triggerControl.detail);
186
+ return [4 /*yield*/, attempt(function () { return sdk_1.api.automation_triggers.createOne(trigger_1({ conditions: condition(JS_PAYLOAD) })); })];
187
+ case 15:
188
+ triggerPayload = _a.sent();
189
+ record('5a: automation_triggers rejects $JS( in event.conditions', !triggerPayload.accepted, triggerPayload.detail);
190
+ return [4 /*yield*/, attempt(function () {
191
+ var _a;
192
+ return sdk_1.api.automation_triggers.createOne(trigger_1({}, { conditionsByFormId: (_a = {}, _a[form_1.id] = condition(JS_PAYLOAD), _a) }));
193
+ })];
194
+ case 16:
195
+ byFormIdPayload = _a.sent();
196
+ record('5b: automation_triggers rejects $JS( in event.info.conditionsByFormId', !byFormIdPayload.accepted, byFormIdPayload.detail);
197
+ return [3 /*break*/, 22];
198
+ case 17:
199
+ if (!tenant) return [3 /*break*/, 21];
200
+ _a.label = 18;
201
+ case 18:
202
+ _a.trys.push([18, 20, , 21]);
203
+ return [4 /*yield*/, tenant.teardown()];
204
+ case 19:
205
+ _a.sent();
206
+ return [3 /*break*/, 21];
207
+ case 20:
208
+ e_1 = _a.sent();
209
+ console.error('teardown failed', e_1);
210
+ return [3 /*break*/, 21];
211
+ case 21: return [7 /*endfinally*/];
212
+ case 22: return [2 /*return*/, checks];
213
+ }
214
+ });
215
+ }); };
216
+ /** Asserting wrapper, for standalone runs and for sequential use in the suite. */
217
+ export var form_logic_js_execution_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
218
+ var _a, _b;
219
+ return __generator(this, function (_c) {
220
+ switch (_c.label) {
221
+ case 0:
222
+ _a = assert_checks;
223
+ _b = ['F-0200 $JS in stored conditional logic'];
224
+ return [4 /*yield*/, form_logic_js_execution_checks()];
225
+ case 1:
226
+ _a.apply(void 0, _b.concat([_c.sent()]));
227
+ return [2 /*return*/];
228
+ }
229
+ });
230
+ }); };
231
+ // Allow running this test file independently
232
+ if (require.main === module) {
233
+ console.log("\uD83C\uDF10 Using API URL: ".concat(host));
234
+ form_logic_js_execution_tests()
235
+ .then(function () {
236
+ console.log("✅ F-0200 form logic JS execution test suite completed successfully");
237
+ process.exit(0);
238
+ })
239
+ .catch(function (error) {
240
+ console.error("❌ F-0200 form logic JS execution test suite failed:", error);
241
+ process.exit(1);
242
+ });
243
+ }
244
+ //# sourceMappingURL=F-0200-form-logic-js-execution.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"F-0200-form-logic-js-execution.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/F-0200-form-logic-js-execution.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,EACL,aAAa,EAEb,qBAAqB,GACtB,MAAM,sBAAsB,CAAA;AAE7B,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,IAAM,8BAA8B,GAAG;;;;;gBACtC,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;gBAE/F,UAAU,GAAG,eAAe,CAAA;gBAC5B,UAAU,GAAG,IAAI,CAAA;gBAEjB,SAAS,GAAG,UAAC,KAAa,IAAK,OAAA,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAA9D,CAA8D,CAAA;gBAC7F,cAAc,GAAG,UAAC,KAAa,IAAK,OAAA,CAAC,CAAC;wBAC1C,IAAI,EAAE,eAAe;wBACrB,IAAI,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE;qBACnG,CAAC,CAAC,EAHuC,CAGvC,CAAA;gBAEG,OAAO,GAAG,UAAO,EAAsB;;wBAAK,sBAAA,CAChD,EAAE,EAAE,CAAC,IAAI,CAAC,cAAM,OAAA,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAG,MAAM,EAAE,UAAU,EAAE,CAAC,EAAzC,CAAyC,CAAC;iCACrD,KAAK,CAAC,UAAC,CAAM,IAAK,OAAA,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAa,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,KAAI,CAAC,CAAE,EAAE,CAAC,EAA7D,CAA6D,CAAC,CACtF,EAAA;;qBAAA,CAAA;;;;gBAKU,qBAAM,qBAAqB,CAAC,EAAE,IAAI,EAAE,gBAAS,IAAI,EAAE,CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAAzG,MAAM,GAAG,SAAgG,CAAA;gBACnG,QAAM,MAAM,CAAC,GAAG,CAAA;gBAET,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAU,IAAI,EAAE,CAAE,EAAE,CAAC,EAAA;;gBAAnE,SAAO,SAA4D;gBAC3D,qBAAM,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC;wBAChD,MAAM,EAAE,MAAI,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;qBACtG,CAAC;oBAEF,iGAAiG;kBAF/F;;gBAFI,UAAQ,SAEZ;gBAIoB,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC;wBACtE,MAAM,EAAE,MAAI,CAAC,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ;wBACxD,cAAc,EAAE,cAAc,CAAC,UAAU,CAAQ;qBAClD,CAAC,EAHwC,CAGxC,CAAC,EAAA;;gBAHG,aAAa,GAAG,SAGnB;gBACH,MAAM,CACJ,+DAA+D,EAC/D,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAC7C,CAAA;gBAEqB,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC;wBACtE,MAAM,EAAE,MAAI,CAAC,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ;wBACxD,cAAc,EAAE,cAAc,CAAC,UAAU,CAAQ;qBAClD,CAAC,EAHwC,CAGxC,CAAC,EAAA;;gBAHG,aAAa,GAAG,SAGnB;gBACH,MAAM,CACJ,oEAAoE,EACpE,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAC9C,CAAA;gBAEqB,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBAChF,cAAc,EAAE,cAAc,CAAC,UAAU,CAAQ;qBAClD,CAAC,EAFwC,CAExC,CAAC,EAAA;;gBAFG,aAAa,GAAG,SAEnB;gBACH,MAAM,CACJ,oEAAoE,EACpE,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAC9C,CAAA;gBAIoB,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBAC/E,kBAAkB,EAAE,SAAS,CAAC,UAAU,CAAQ;qBACjD,CAAC,EAFuC,CAEvC,CAAC,EAAA;;gBAFG,YAAY,GAAG,SAElB;gBACH,MAAM,CAAC,wDAAwD,EAAE,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;gBAEvF,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBAC/E,kBAAkB,EAAE,SAAS,CAAC,UAAU,CAAQ;qBACjD,CAAC,EAFuC,CAEvC,CAAC,EAAA;;gBAFG,YAAY,GAAG,SAElB;gBACH,MAAM,CAAC,6DAA6D,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;gBAI5F,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBAChF,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,EAAS;qBAC3F,CAAC,EAFwC,CAExC,CAAC,EAAA;;gBAFG,aAAa,GAAG,SAEnB;gBACH,MAAM,CAAC,iEAAiE,EAAE,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;gBAEjG,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBAChF,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,EAAS;qBAC3F,CAAC,EAFwC,CAExC,CAAC,EAAA;;gBAFG,aAAa,GAAG,SAEnB;gBACH,MAAM,CAAC,sEAAsE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;gBAItG,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBACjF,OAAO,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,EAAS;qBACzH,CAAC,EAFyC,CAEzC,CAAC,EAAA;;gBAFG,cAAc,GAAG,SAEpB;gBACH,MAAM,CAAC,qEAAqE,EAAE,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;gBAEtG,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBACjF,OAAO,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,EAAS;qBACzH,CAAC,EAFyC,CAEzC,CAAC,EAAA;;gBAFG,cAAc,GAAG,SAEpB;gBACH,MAAM,CAAC,0EAA0E,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;gBAI7H,YAAU,UAAC,UAAkB,EAAE,SAAsB;oBAAtB,0BAAA,EAAA,cAAsB;oBAAK,OAAA,CAAC;wBAC/D,KAAK,EAAE,iBAAU,IAAI,EAAE,CAAE;wBACzB,MAAM,EAAE,UAAU;wBAClB,KAAK,aAAI,IAAI,EAAE,gBAAgB,EAAE,IAAI,aAAI,MAAM,EAAE,MAAI,CAAC,EAAE,IAAK,SAAS,KAAO,UAAU,CAAE;wBACzF,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;qBACjD,CAAA;gBALuD,CAKvD,CAAA;gBAEc,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAC9E,SAAO,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAC/C,EAF0C,CAE1C,CAAC,EAAA;;gBAFI,cAAc,GAAG,SAErB;gBACF,MAAM,CAAC,8DAA8D,EAAE,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;gBAG/F,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAC9E,SAAO,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAC/C,EAF0C,CAE1C,CAAC,EAAA;;gBAFI,cAAc,GAAG,SAErB;gBACF,MAAM,CAAC,0DAA0D,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;gBAE3F,qBAAM,OAAO,CAAC;;wBAAM,OAAA,KAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAC/E,SAAO,CAAC,EAAE,EAAE,EAAE,kBAAkB,YAAI,GAAC,MAAI,CAAC,EAAE,IAAG,SAAS,CAAC,UAAU,CAAC,KAAE,EAAE,CAAC,CAC1E;oBAF2C,CAE3C,CAAC,EAAA;;gBAFI,eAAe,GAAG,SAEtB;gBACF,MAAM,CAAC,uEAAuE,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAA;;;qBAI9H,MAAM,EAAN,yBAAM;;;;gBAAU,qBAAM,MAAM,CAAC,QAAQ,EAAE,EAAA;;gBAAvB,SAAuB,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;qBAG/F,sBAAO,MAAM,EAAA;;;KACd,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,IAAM,6BAA6B,GAAG;;;;;gBAC3C,KAAA,aAAa,CAAA;sBAAC,wCAAwC;gBAAE,qBAAM,8BAA8B,EAAE,EAAA;;gBAA9F,4BAAwD,SAAsC,GAAC,CAAA;;;;KAChG,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,6BAA6B,EAAE;SAC5B,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAA;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAAA;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
@@ -0,0 +1,42 @@
1
+ import { Check } from "../../setup_isolated";
2
+ /**
3
+ * Regression test: `endusers.add_to_journey` must not enroll another tenant's enduser.
4
+ *
5
+ * `endusers.add_to_journey` inserted an `automated_actions` row for EACH caller-supplied `enduserId`
6
+ * with only mongoId-shape validation and no tenant-membership check. The preceding
7
+ * `DB.endusers.updateMany` is scoped but its result was discarded, and
8
+ * `DB.automated_actions.insertMany` is a direct write that bypasses the `ensureValidDependentKeys`
9
+ * foreign-key check the generic CRUD route gets. The resulting row is stamped
10
+ * `businessId: <caller's tenant>` while carrying `enduserId: <a victim in another tenant>`.
11
+ *
12
+ * The worker then dereferences that enduser with the raw driver and no `businessId`
13
+ * (worker/modules/automations.ts, the worker's unscoped raw-driver lookup family), so the victim's record loads
14
+ * under the attacker's automation: `pushFormsToPortal` copies the victim's PHI into the attacker's
15
+ * `form_responses` (readable by their staff) and `iterableCustomEvent` writes an attacker-authored
16
+ * note into the victim's chart. This plant is the reachability that made those three exploitable.
17
+ *
18
+ * There are TWO independent plant sites and a fix to only one is a half fix:
19
+ * - inline branch, taken when `automationStepId` is supplied (api.ts add_to_journey handler)
20
+ * - module branch, taken when it is not: `handle_automation_event`'s
21
+ * `validEnduserIds = conditionsQuery ? <scoped find> : event.enduserIds` passes caller ids
22
+ * straight through for a step with NO conditions.
23
+ * Both are covered below (A1/A2).
24
+ *
25
+ * Design notes:
26
+ * - Two provisioned tenants, so the victim is a real foreign enduser and we can also assert their
27
+ * record was not mutated. Both must come from provisioning: `add_to_journey` is
28
+ * `requiresSubscription: true`, and a `create_and_join` org is born with an expired subscription.
29
+ * - The steps use `setEnduserStatus` — no vendor, no Bedrock — and `startAt` is an hour out so a
30
+ * running worker cannot process the rows before we read them.
31
+ * - `throttle` is deliberately omitted: it is the only way add_to_journey's per-pair rate limit can
32
+ * throw.
33
+ * - Everything is observable through `automated_actions` reads, so the worker is never needed.
34
+ *
35
+ * RED (pre-fix): A1, A2 and B2 fail — the victim's id appears in the attacker tenant's
36
+ * automated_actions. GREEN (post-fix): the foreign id is silently dropped and the caller's own
37
+ * endusers still enroll normally.
38
+ */
39
+ export declare const add_to_journey_foreign_enduserid_checks: () => Promise<Check[]>;
40
+ /** Asserting wrapper, for standalone runs and for sequential use in the suite. */
41
+ export declare const add_to_journey_foreign_enduserid_tests: () => Promise<void>;
42
+ //# sourceMappingURL=add-to-journey-foreign-enduserid.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"add-to-journey-foreign-enduserid.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/add-to-journey-foreign-enduserid.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,EAEN,MAAM,sBAAsB,CAAA;AAS7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,eAAO,MAAM,uCAAuC,QAAa,QAAQ,KAAK,EAAE,CAuI/E,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,sCAAsC,qBAElD,CAAA"}