@tellescope/sdk 1.256.14 → 1.256.16
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/lib/cjs/sdk.d.ts +2 -2
- package/lib/cjs/tests/api_tests/auto_merge_form_submission.test.js +1 -1
- package/lib/cjs/tests/api_tests/auto_merge_form_submission.test.js.map +1 -1
- package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.d.ts +5 -0
- package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.js +388 -0
- package/lib/cjs/tests/api_tests/enduser_observations_auto_review.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/integrations_redacted.test.js +3 -3
- package/lib/cjs/tests/api_tests/integrations_redacted.test.js.map +1 -1
- package/lib/cjs/tests/api_tests/organization_signup.test.d.ts +1 -1
- package/lib/cjs/tests/api_tests/organization_signup.test.js +1 -1
- package/lib/cjs/tests/api_tests/purchase_made_trigger.test.d.ts.map +1 -1
- package/lib/cjs/tests/api_tests/purchase_made_trigger.test.js +103 -162
- package/lib/cjs/tests/api_tests/purchase_made_trigger.test.js.map +1 -1
- package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts +33 -0
- package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.js +249 -0
- package/lib/cjs/tests/api_tests/security/F-0200-form-logic-js-execution.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts +42 -0
- package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js +281 -0
- package/lib/cjs/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.d.ts +38 -0
- package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.js +390 -0
- package/lib/cjs/tests/api_tests/security/ai-conversations-rbac.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.d.ts +6 -0
- package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.js +1003 -0
- package/lib/cjs/tests/api_tests/security/allowed-paths-confinement.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.d.ts +42 -0
- package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.js +323 -0
- package/lib/cjs/tests/api_tests/security/automated-actions-process-gate.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts +29 -0
- package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.js +335 -0
- package/lib/cjs/tests/api_tests/security/booking-info-idor-token-mint.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts +32 -0
- package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js +237 -0
- package/lib/cjs/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts +28 -0
- package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.js +349 -0
- package/lib/cjs/tests/api_tests/security/data-sync-redaction-bypass.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts +30 -0
- package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js +314 -0
- package/lib/cjs/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.d.ts +21 -0
- package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.js +362 -0
- package/lib/cjs/tests/api_tests/security/enduser-cross-create.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.d.ts +21 -0
- package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.js +366 -0
- package/lib/cjs/tests/api_tests/security/enduser-write-restrictions.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.d.ts +5 -0
- package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.js +357 -0
- package/lib/cjs/tests/api_tests/security/file-link-session-confinement.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.d.ts +32 -0
- package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.js +248 -0
- package/lib/cjs/tests/api_tests/security/form-logic-js-execution.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts +19 -0
- package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.js +138 -0
- package/lib/cjs/tests/api_tests/security/globalunique-conflict-redaction.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts +24 -0
- package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js +201 -0
- package/lib/cjs/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.d.ts +29 -0
- package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.js +278 -0
- package/lib/cjs/tests/api_tests/security/invite-user-enumeration.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.d.ts +17 -0
- package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.js +155 -0
- package/lib/cjs/tests/api_tests/security/load-inbox-redaction.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/prototype-pollution.test.d.ts +2 -0
- package/lib/cjs/tests/api_tests/security/prototype-pollution.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/prototype-pollution.test.js +88 -0
- package/lib/cjs/tests/api_tests/security/prototype-pollution.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts +34 -0
- package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.js +230 -0
- package/lib/cjs/tests/api_tests/security/proxy-image-unauth-ssrf.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts +2 -0
- package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.js +242 -0
- package/lib/cjs/tests/api_tests/security/sanitize-user-html-with-iframes.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.d.ts +2 -0
- package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.js +148 -0
- package/lib/cjs/tests/api_tests/security/sanitize-user-html.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts +45 -0
- package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.js +388 -0
- package/lib/cjs/tests/api_tests/security/schema-adminonly-enforcement.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.d.ts +38 -0
- package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.js +222 -0
- package/lib/cjs/tests/api_tests/security/self-admin-role-assignment.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts +6 -0
- package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js +354 -0
- package/lib/cjs/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts +28 -0
- package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.js +442 -0
- package/lib/cjs/tests/api_tests/security/webhook-outbound-ssrf.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/security/webhook-timeout.test.d.ts +19 -0
- package/lib/cjs/tests/api_tests/security/webhook-timeout.test.d.ts.map +1 -0
- package/lib/cjs/tests/api_tests/security/webhook-timeout.test.js +156 -0
- package/lib/cjs/tests/api_tests/security/webhook-timeout.test.js.map +1 -0
- package/lib/cjs/tests/api_tests/webhook_error_handling.test.js +2 -2
- package/lib/cjs/tests/api_tests/webhook_error_handling.test.js.map +1 -1
- package/lib/cjs/tests/tests.d.ts.map +1 -1
- package/lib/cjs/tests/tests.js +60 -46
- package/lib/cjs/tests/tests.js.map +1 -1
- package/lib/cjs/tests/unit_tests/openapi_spec_freshness.test.d.ts +1 -1
- package/lib/cjs/tests/unit_tests/openapi_spec_freshness.test.js +1 -1
- package/lib/cjs/tsconfig.cjs.tsbuildinfo +1 -0
- package/lib/esm/enduser.d.ts +0 -1
- package/lib/esm/enduser.d.ts.map +1 -1
- package/lib/esm/sdk.d.ts +4 -5
- package/lib/esm/sdk.d.ts.map +1 -1
- package/lib/esm/session.d.ts +0 -1
- package/lib/esm/session.d.ts.map +1 -1
- package/lib/esm/tests/api_tests/auto_merge_form_submission.test.js +1 -1
- package/lib/esm/tests/api_tests/auto_merge_form_submission.test.js.map +1 -1
- package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.d.ts +5 -0
- package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.js +383 -0
- package/lib/esm/tests/api_tests/enduser_observations_auto_review.test.js.map +1 -0
- package/lib/esm/tests/api_tests/integrations_redacted.test.js +3 -3
- package/lib/esm/tests/api_tests/integrations_redacted.test.js.map +1 -1
- package/lib/esm/tests/api_tests/organization_signup.test.d.ts +1 -1
- package/lib/esm/tests/api_tests/organization_signup.test.js +1 -1
- package/lib/esm/tests/api_tests/purchase_made_trigger.test.d.ts.map +1 -1
- package/lib/esm/tests/api_tests/purchase_made_trigger.test.js +104 -163
- package/lib/esm/tests/api_tests/purchase_made_trigger.test.js.map +1 -1
- package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts +33 -0
- package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.js +244 -0
- package/lib/esm/tests/api_tests/security/F-0200-form-logic-js-execution.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts +42 -0
- package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js +276 -0
- package/lib/esm/tests/api_tests/security/add-to-journey-foreign-enduserid.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.d.ts +38 -0
- package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.js +386 -0
- package/lib/esm/tests/api_tests/security/ai-conversations-rbac.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.d.ts +6 -0
- package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.js +996 -0
- package/lib/esm/tests/api_tests/security/allowed-paths-confinement.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.d.ts +42 -0
- package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.js +316 -0
- package/lib/esm/tests/api_tests/security/automated-actions-process-gate.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts +29 -0
- package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.js +331 -0
- package/lib/esm/tests/api_tests/security/booking-info-idor-token-mint.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts +32 -0
- package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js +233 -0
- package/lib/esm/tests/api_tests/security/cascade-role-rename-cross-tenant.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts +28 -0
- package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.js +345 -0
- package/lib/esm/tests/api_tests/security/data-sync-redaction-bypass.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts +30 -0
- package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js +310 -0
- package/lib/esm/tests/api_tests/security/develop-health-benefit-verification-rbac.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/enduser-cross-create.test.d.ts +21 -0
- package/lib/esm/tests/api_tests/security/enduser-cross-create.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/enduser-cross-create.test.js +358 -0
- package/lib/esm/tests/api_tests/security/enduser-cross-create.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.d.ts +21 -0
- package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.js +362 -0
- package/lib/esm/tests/api_tests/security/enduser-write-restrictions.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.d.ts +5 -0
- package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.js +349 -0
- package/lib/esm/tests/api_tests/security/file-link-session-confinement.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.d.ts +32 -0
- package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.js +243 -0
- package/lib/esm/tests/api_tests/security/form-logic-js-execution.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts +19 -0
- package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.js +134 -0
- package/lib/esm/tests/api_tests/security/globalunique-conflict-redaction.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts +24 -0
- package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js +194 -0
- package/lib/esm/tests/api_tests/security/handle-incoming-communication-cross-tenant.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.d.ts +29 -0
- package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.js +271 -0
- package/lib/esm/tests/api_tests/security/invite-user-enumeration.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.d.ts +17 -0
- package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.js +151 -0
- package/lib/esm/tests/api_tests/security/load-inbox-redaction.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/prototype-pollution.test.d.ts +2 -0
- package/lib/esm/tests/api_tests/security/prototype-pollution.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/prototype-pollution.test.js +84 -0
- package/lib/esm/tests/api_tests/security/prototype-pollution.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts +34 -0
- package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.js +223 -0
- package/lib/esm/tests/api_tests/security/proxy-image-unauth-ssrf.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts +2 -0
- package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.js +238 -0
- package/lib/esm/tests/api_tests/security/sanitize-user-html-with-iframes.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/sanitize-user-html.test.d.ts +2 -0
- package/lib/esm/tests/api_tests/security/sanitize-user-html.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/sanitize-user-html.test.js +144 -0
- package/lib/esm/tests/api_tests/security/sanitize-user-html.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts +45 -0
- package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.js +381 -0
- package/lib/esm/tests/api_tests/security/schema-adminonly-enforcement.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.d.ts +38 -0
- package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.js +218 -0
- package/lib/esm/tests/api_tests/security/self-admin-role-assignment.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts +6 -0
- package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js +350 -0
- package/lib/esm/tests/api_tests/security/startlinktoken-enduser-staff-escalation.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts +28 -0
- package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.js +435 -0
- package/lib/esm/tests/api_tests/security/webhook-outbound-ssrf.test.js.map +1 -0
- package/lib/esm/tests/api_tests/security/webhook-timeout.test.d.ts +19 -0
- package/lib/esm/tests/api_tests/security/webhook-timeout.test.d.ts.map +1 -0
- package/lib/esm/tests/api_tests/security/webhook-timeout.test.js +149 -0
- package/lib/esm/tests/api_tests/security/webhook-timeout.test.js.map +1 -0
- package/lib/esm/tests/api_tests/webhook_error_handling.test.js +2 -2
- package/lib/esm/tests/api_tests/webhook_error_handling.test.js.map +1 -1
- package/lib/esm/tests/tests.d.ts.map +1 -1
- package/lib/esm/tests/tests.js +38 -24
- package/lib/esm/tests/tests.js.map +1 -1
- package/lib/esm/tests/unit_tests/openapi_spec_freshness.test.d.ts +1 -1
- package/lib/esm/tests/unit_tests/openapi_spec_freshness.test.js +1 -1
- package/lib/tsconfig.tsbuildinfo +1 -1
- package/package.json +10 -10
- package/src/tests/api_tests/auto_merge_form_submission.test.ts +1 -1
- package/src/tests/api_tests/enduser_observations_auto_review.test.ts +358 -0
- package/src/tests/api_tests/integrations_redacted.test.ts +1 -1
- package/src/tests/api_tests/organization_signup.test.ts +2 -2
- package/src/tests/api_tests/purchase_made_trigger.test.ts +29 -41
- package/src/tests/api_tests/security/{F-0196-add-to-journey-foreign-enduserid.test.ts → add-to-journey-foreign-enduserid.test.ts} +6 -7
- package/src/tests/api_tests/security/{F-0005-ai-conversations-rbac.test.ts → ai-conversations-rbac.test.ts} +14 -14
- package/src/tests/api_tests/security/{F-0166-allowed-paths-wildcard-bypass.test.ts → allowed-paths-confinement.test.ts} +11 -11
- package/src/tests/api_tests/security/{F-0192-automated-actions-process-gate.test.ts → automated-actions-process-gate.test.ts} +6 -7
- package/src/tests/api_tests/security/{F-0179-booking-info-idor-token-mint.test.ts → booking-info-idor-token-mint.test.ts} +5 -6
- package/src/tests/api_tests/security/{F-0053-cascade-role-rename-cross-tenant.test.ts → cascade-role-rename-cross-tenant.test.ts} +10 -10
- package/src/tests/api_tests/security/{F-0001-data-sync-redaction-bypass.test.ts → data-sync-redaction-bypass.test.ts} +9 -9
- package/src/tests/api_tests/security/{F-0006-develop-health-benefit-verification-rbac.test.ts → develop-health-benefit-verification-rbac.test.ts} +7 -8
- package/src/tests/api_tests/security/{F-0116-F-0119-enduser-cross-create.test.ts → enduser-cross-create.test.ts} +25 -25
- package/src/tests/api_tests/security/{F-0106-F-0110-enduser-write-restrictions.test.ts → enduser-write-restrictions.test.ts} +12 -14
- package/src/tests/api_tests/security/file-link-session-confinement.test.ts +291 -0
- package/src/tests/api_tests/security/form-logic-js-execution.test.ts +183 -0
- package/src/tests/api_tests/security/{F-0145-globalunique-leak.test.ts → globalunique-conflict-redaction.test.ts} +5 -6
- package/src/tests/api_tests/security/{F-0008-handle-incoming-communication-cross-tenant.test.ts → handle-incoming-communication-cross-tenant.test.ts} +8 -8
- package/src/tests/api_tests/security/{F-0007-invite-user-enumeration.test.ts → invite-user-enumeration.test.ts} +8 -8
- package/src/tests/api_tests/security/{F-0151-load-inbox-redaction.test.ts → load-inbox-redaction.test.ts} +5 -6
- package/src/tests/api_tests/security/{F-0016-prototype-pollution.test.ts → prototype-pollution.test.ts} +4 -4
- package/src/tests/api_tests/security/{F-0025-proxy-image-unauth-ssrf.test.ts → proxy-image-unauth-ssrf.test.ts} +11 -12
- package/src/tests/api_tests/security/{F-0013-sanitize-user-html-with-iframes.test.ts → sanitize-user-html-with-iframes.test.ts} +5 -5
- package/src/tests/api_tests/security/{F-0013-sanitize-user-html.test.ts → sanitize-user-html.test.ts} +4 -4
- package/src/tests/api_tests/security/{F-0191-schema-adminonly-enforcement.test.ts → schema-adminonly-enforcement.test.ts} +6 -7
- package/src/tests/api_tests/security/{F-0076-self-admin-role-assignment.test.ts → self-admin-role-assignment.test.ts} +13 -13
- package/src/tests/api_tests/security/{F-0185-startlinktoken-enduser-staff-escalation.test.ts → startlinktoken-enduser-staff-escalation.test.ts} +6 -6
- package/src/tests/api_tests/security/{F-0015-webhook-outbound-ssrf.test.ts → webhook-outbound-ssrf.test.ts} +13 -14
- package/src/tests/api_tests/security/{F-0155-webhook-timeout.test.ts → webhook-timeout.test.ts} +6 -7
- package/src/tests/api_tests/webhook_error_handling.test.ts +1 -1
- package/src/tests/tests.ts +43 -24
- package/src/tests/unit_tests/openapi_spec_freshness.test.ts +1 -1
- package/test_generated.pdf +0 -0
- package/src/tests/api_tests/security/readonly-enduser-preview.test.ts +0 -301
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"purchase_made_trigger.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/purchase_made_trigger.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAElE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;AAE3D,MAAM,CAAC,IAAM,2BAA2B,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;oBAClE,UAAU,CAAC,0CAA0C,CAAC,CAAA;oBAGrC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBAJI,QAAQ,GAAG,SAIf;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBAJI,QAAQ,GAAG,SAIf;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC;wBAEF,qDAAqD;sBAFnD;;oBAJI,QAAQ,GAAG,SAIf;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAG,EAAE;4BAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,EAAC;4BAC7D,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,gBAAgB;yBACxB,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE;4BAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAC;4BACrE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,wBAAwB;yBAChC,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE;4BACrE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAC;4BACpE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,uBAAuB;yBAC/B,CAAC;wBAEF,iDAAiD;sBAF/C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;4BAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,yBAAyB,CAAC,EAAE,EAAC;4BACxE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,iCAAiC;yBACzC,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE;4BAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAC;4BAC3E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,uDAAuD;yBAC/D,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE;4BAC/F,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,EAAE,EAAC;4BAC1E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,qCAAqC;yBAC7C,CAAC;wBAEF,gDAAgD;sBAF9C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE;4BAC5F,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,oBAAoB,CAAC,EAAE,EAAC;4BACnE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,kDAAkD;yBAC1D,CAAC;wBAEF,+CAA+C;sBAF7C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE;4BACnE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAC;4BACrE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,iDAAiD;yBACzD,CAAC;wBAEF,wBAAwB;sBAFtB;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE;4BACpF,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAC;4BACvE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,0BAA0B;yBAClC,CAAC;wBAEF,0FAA0F;sBAFxF;;oBALI,EAAE,GAAG,SAKT;oBAGe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACnC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAEtD,8BAA8B;sBAFwB;;oBAAhD,SAAS,GAAG,SAAoC;oBAG1C,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;4BACrE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAC;4BACzE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,4BAA4B;yBACpC,CAAC;wBAEF,uDAAuD;sBAFrD;;oBALI,GAAG,GAAG,SAKV;oBAGU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE;4BAC3D,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAC;4BACtE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,oCAAoC;yBAC5C,CAAC;wBAEF,oDAAoD;sBAFlD;;oBALI,GAAG,GAAG,SAKV;oBAGU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;4BACzG,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,EAAE,EAAC;4BAC1E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,6BAA6B;yBACrC,CAAC,EAAA;;oBALI,GAAG,GAAG,SAKV;oBAEgB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAEtD,iFAAiF;sBAF3B;;oBAAhD,SAAS,GAAG,SAAoC;oBAGpC,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,oCAAoC;;oBAA/D,SAA0B,CAAA,CAAC,oCAAoC;oBAC/D,qBAAM,UAAU,CACd,8BAA8B,EAC9B,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,CAAA,EAAA,EAAE,CACjE;wBAED,0CAA0C;sBAFzC;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,mCAAmC,EACnC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,CAAA,EAAA,EAAE,CACzE;wBAED,yCAAyC;sBAFxC;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,kCAAkC,EAClC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAA,CAAA,EAAA,EAAE,CACxE;wBAED,wEAAwE;sBAFvE;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,iEAAiE,EACjE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5E;wBAED,uFAAuF;sBAFtF;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,oEAAoE,EACpE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC/E;wBAED,wDAAwD;sBAFvD;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,wCAAwC,EACxC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,oBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAA,CAAA,EAAA,EAAE,CACpK;wBAED,iDAAiD;sBAFhD;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,4BAA4B;4BACnC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,gDAAgD,EAChD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5E;wBAED,0EAA0E;sBAFzE;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,8DAA8D,EAC9D,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,2EAA2E;sBAF1E;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,+DAA+D,EAC/D,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAApC,CAAoC,EAC1C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,kGAAkG;sBAFjG;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,+BAA+B;4BACtC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,6EAA6E,EAC7E,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,6FAA6F;sBAF5F;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,gCAAgC;4BACvC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,6EAA6E,EAC7E,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,8FAA8F;sBAF7F;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,iCAAiC;4BACxC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,8EAA8E,EAC9E,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,0EAA0E;sBAFzE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,gBAAgB;4BACvB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,oFAAoF,EACpF,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,CAAA,EAAA,EAAE,CAC/G;wBAED,gFAAgF;sBAF/E;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,EAAE;4BACT,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,wEAAwE,EACxE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,wBAAwB,CAAC,CAAA,CAAA,EAAA,EAAE,CAChH;wBAED,mEAAmE;sBAFlE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,2CAA2C,EAC3C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5H;wBAED,0FAA0F;wBAC1F,6EAA6E;sBAH5E;;oBAJD,SAIC,CAAA;oBAIkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,sFAAsF,EACtF,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CAClH;wBAED,2EAA2E;sBAF1E;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,0CAA0C,EAC1C,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CAClH;wBAED,qFAAqF;wBACrF,wEAAwE;sBAHvE;;oBAJD,SAIC,CAAA;oBAIkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBALI,UAAU,GAAG,SAKjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,kDAAkD,EAClD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,oBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CACjK;wBAED,sEAAsE;sBAFrE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,wCAAwC,EACxC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,wFAAwF;sBAFvF;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBALI,UAAU,GAAG,SAKjB;oBACF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,kEAAkE,EAClE,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAArC,CAAqC,EAC3C,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC3H;wBAED,yEAAyE;sBAFxE;;oBAJD,SAIC,CAAA;oBAED,yEAAyE;oBACzE,qBAAM,UAAU,CACd,yDAAyD,EACzD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAA1C,CAA0C,EAChD,EAAE,QAAQ,EAAE,UAAA,CAAC,gBAAI,OAAA,IAAI,CAAC,SAAS,CAAC,MAAA,MAAC,CAAC,CAAC,KAAa,0CAAE,IAAI,0CAAE,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA,EAAA,EAAE,CACxG,EAAA;;oBALD,yEAAyE;oBACzE,SAIC,CAAA;;;;oBAGC,sCAAsC;oBACtC,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBADlD,sCAAsC;oBACtC,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAA;;oBAAnD,SAAmD,CAAA;oBACnD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAA;;oBAAnD,SAAmD,CAAA;oBACnD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBAEnD,oBAAoB;sBAF+B;;oBAAnD,SAAmD,CAAA;oBAEnD,oBAAoB;oBACpB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAD7C,oBAAoB;oBACpB,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAE7C,6DAA6D;sBAFhB;;oBAA7C,SAA6C,CAAA;oBAE7C,6DAA6D;oBAC7D,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAD7C,6DAA6D;oBAC7D,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;;;;;;;CAEjD,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,2BAA2B,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAvD,SAAuD,CAAA;;;;SACxD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAA;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
|
|
1
|
+
{"version":3,"file":"purchase_made_trigger.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/purchase_made_trigger.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAE9E,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAuB,CAAA;AAE3D,MAAM,CAAC,IAAM,2BAA2B,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;oBAClE,UAAU,CAAC,0CAA0C,CAAC,CAAA;oBAKhD,iBAAiB,GAAG,UAAC,SAAiB,EAAE,IAAc,IAAK,OAAA,gBAAgB,CAC/E,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAlC,CAAkC,EACxC,UAAA,CAAC,IAAI,OAAA,IAAI,CAAC,KAAK,CAAC,UAAA,CAAC,YAAI,OAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,CAAC,CAAC,CAAA,EAAA,CAAC,EAApC,CAAoC,CAC1C,EAHgE,CAGhE,CAAA;oBAGgB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBAJI,QAAQ,GAAG,SAIf;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBAJI,QAAQ,GAAG,SAIf;oBAEe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;4BAChD,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC;wBAEF,qDAAqD;sBAFnD;;oBAJI,QAAQ,GAAG,SAIf;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAG,EAAE;4BAC3C,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,cAAc,CAAC,EAAE,EAAC;4BAC7D,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,gBAAgB;yBACxB,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAE;4BAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAC;4BACrE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,wBAAwB;yBAChC,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE;4BACrE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,qBAAqB,CAAC,EAAE,EAAC;4BACpE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,uBAAuB;yBAC/B,CAAC;wBAEF,iDAAiD;sBAF/C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;4BAC3E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,yBAAyB,CAAC,EAAE,EAAC;4BACxE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,iCAAiC;yBACzC,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE;4BAC9E,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,4BAA4B,CAAC,EAAE,EAAC;4BAC3E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,uDAAuD;yBAC/D,CAAC,EAAA;;oBALI,EAAE,GAAG,SAKT;oBAES,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE;4BAC/F,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,EAAE,EAAC;4BAC1E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,qCAAqC;yBAC7C,CAAC;wBAEF,gDAAgD;sBAF9C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,EAAE;4BAC5F,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,oBAAoB,CAAC,EAAE,EAAC;4BACnE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,kDAAkD;yBAC1D,CAAC;wBAEF,+CAA+C;sBAF7C;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE;4BACnE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAC;4BACrE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,iDAAiD;yBACzD,CAAC;wBAEF,wBAAwB;sBAFtB;;oBALI,EAAE,GAAG,SAKT;oBAGS,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACrD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,EAAE;4BACpF,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,wBAAwB,CAAC,EAAE,EAAC;4BACvE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,0BAA0B;yBAClC,CAAC;wBAEF,0FAA0F;sBAFxF;;oBALI,EAAE,GAAG,SAKT;oBAGe,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA/C,QAAQ,GAAG,SAAoC;oBACnC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAEtD,8BAA8B;sBAFwB;;oBAAhD,SAAS,GAAG,SAAoC;oBAG1C,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;4BACrE,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAC;4BACzE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,4BAA4B;yBACpC,CAAC;wBAEF,uDAAuD;sBAFrD;;oBALI,GAAG,GAAG,SAKV;oBAGU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE;4BAC3D,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,uBAAuB,CAAC,EAAE,EAAC;4BACtE,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,oCAAoC;yBAC5C,CAAC;wBAEF,oDAAoD;sBAFlD;;oBALI,GAAG,GAAG,SAKV;oBAGU,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC;4BACtD,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE;4BACzG,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,2BAA2B,CAAC,EAAE,EAAC;4BAC1E,MAAM,EAAE,QAAQ;4BAChB,KAAK,EAAE,6BAA6B;yBACrC,CAAC,EAAA;;oBALI,GAAG,GAAG,SAKV;oBAEgB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAAhD,SAAS,GAAG,SAAoC;oBACpC,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;wBAEtD,iFAAiF;sBAF3B;;oBAAhD,SAAS,GAAG,SAAoC;oBAGpC,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,8BAA8B,EAC9B,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAhD,CAAgD,EACtD,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,CAAA,EAAA,EAAE,CACjE;wBAED,0CAA0C;sBAFzC;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,mCAAmC,EACnC,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAxD,CAAwD,EAC9D,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,CAAA,EAAA,EAAE,CACzE;wBAED,yCAAyC;sBAFxC;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,kCAAkC,EAClC,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,EAAvD,CAAuD,EAC7D,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAA,CAAA,EAAA,EAAE,CACxE;wBAED,wEAAwE;sBAFvE;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,iEAAiE,EACjE,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,EAA3D,CAA2D,EACjE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5E;wBAED,uFAAuF;sBAFtF;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,oEAAoE,EACpE,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC,CAAC,EAA9D,CAA8D,EACpE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC/E;wBAED,wDAAwD;sBAFvD;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,uBAAuB;4BAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,wCAAwC,EACxC,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAhD,CAAgD,EACtD,EAAE,QAAQ,EAAE,UAAC,CAAU,oBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAA,CAAA,EAAA,EAAE,CACpK;wBAED,iDAAiD;sBAFhD;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,4BAA4B;4BACnC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,gDAAgD,EAChD,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,yBAAyB,CAAC,CAAC,EAA3D,CAA2D,EACjE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,yBAAyB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5E;wBAED,0EAA0E;sBAFzE;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,8DAA8D,EAC9D,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAA7D,CAA6D,EACnE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,2EAA2E;sBAF1E;;oBAJD,SAIC,CAAA;oBAGiB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BAClD,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,0BAA0B;4BACjC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,SAAS,GAAG,SAMhB;oBACF,qBAAM,UAAU,CACd,+DAA+D,EAC/D,cAAM,OAAA,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAA7D,CAA6D,EACnE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,kGAAkG;sBAFjG;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,+BAA+B;4BACtC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,6EAA6E,EAC7E,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAvD,CAAuD,EAC7D,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,6FAA6F;sBAF5F;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,gCAAgC;4BACvC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,6EAA6E,EAC7E,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAvD,CAAuD,EAC7D,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,8FAA8F;sBAF7F;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,iCAAiC;4BACxC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACxC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,8EAA8E,EAC9E,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAvD,CAAuD,EAC7D,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,oBAAoB,CAAC,CAAA,CAAA,EAAA,EAAE,CACvE;wBAED,0EAA0E;sBAFzE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,gBAAgB;4BACvB,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,oFAAoF,EACpF,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,sBAAsB,EAAE,cAAc,CAAC,CAAC,EAAzE,CAAyE,EAC/E,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,CAAA,EAAA,EAAE,CAC/G;wBAED,gFAAgF;sBAF/E;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,SAAS,EAAE,QAAQ,CAAC,EAAE;4BACtB,KAAK,EAAE,EAAE;4BACT,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,wEAAwE,EACxE,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAjD,CAAiD,EACvD,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,wBAAwB,CAAC,CAAA,CAAA,EAAA,EAAE,CAChH;wBAED,mEAAmE;sBAFlE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,2CAA2C,EAC3C,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,0BAA0B,EAAE,uBAAuB,CAAC,CAAC,EAAtF,CAAsF,EAC5F,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAA,CAAA,EAAA,EAAE,CAC5H;wBAED,0FAA0F;wBAC1F,6EAA6E;sBAH5E;;oBAJD,SAIC,CAAA;oBAIkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,sFAAsF,EACtF,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAjD,CAAiD,EACvD,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CAClH;wBAED,2EAA2E;sBAF1E;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,0CAA0C,EAC1C,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAjD,CAAiD,EACvD,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CAClH;wBAED,qFAAqF;wBACrF,wEAAwE;sBAHvE;;oBAJD,SAIC,CAAA;oBAIkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,sBAAsB;4BAC7B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBALI,UAAU,GAAG,SAKjB;oBACF,qBAAM,UAAU,CACd,kDAAkD,EAClD,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC,EAA1E,CAA0E,EAChF,EAAE,QAAQ,EAAE,UAAC,CAAU,oBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,cAAc,CAAC,CAAA,IAAI,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,uBAAuB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,0BAA0B,CAAC,CAAA,CAAA,EAAA,EAAE,CACjK;wBAED,sEAAsE;sBAFrE;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;4BACnB,WAAW,EAAE,CAAC,UAAU,CAAC;yBAC1B,CAAC,EAAA;;oBANI,UAAU,GAAG,SAMjB;oBACF,qBAAM,UAAU,CACd,wCAAwC,EACxC,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,CAAC,EAA9D,CAA8D,EACpE,EAAE,QAAQ,EAAE,UAAC,CAAU,YAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC9E;wBAED,wFAAwF;sBAFvF;;oBAJD,SAIC,CAAA;oBAGkB,qBAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC;4BACnD,SAAS,EAAE,SAAS,CAAC,EAAE;4BACvB,KAAK,EAAE,wBAAwB;4BAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;4BACvC,SAAS,EAAE,QAAQ;yBACpB,CAAC,EAAA;;oBALI,UAAU,GAAG,SAKjB;oBACF,qBAAM,UAAU,CACd,kEAAkE,EAClE,cAAM,OAAA,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAC,EAAzD,CAAyD,EAC/D,EAAE,QAAQ,EAAE,UAAC,CAAU,gBAAK,OAAA,CAAC,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,sBAAsB,CAAC,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,QAAQ,CAAC,2BAA2B,CAAC,CAAA,CAAA,EAAA,EAAE,CAC3H;wBAED,yEAAyE;sBAFxE;;oBAJD,SAIC,CAAA;oBAED,yEAAyE;oBACzE,qBAAM,UAAU,CACd,yDAAyD,EACzD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAA1C,CAA0C,EAChD,EAAE,QAAQ,EAAE,UAAA,CAAC,gBAAI,OAAA,IAAI,CAAC,SAAS,CAAC,MAAA,MAAC,CAAC,CAAC,KAAa,0CAAE,IAAI,0CAAE,WAAW,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA,EAAA,EAAE,CACxG,EAAA;;oBALD,yEAAyE;oBACzE,SAIC,CAAA;;;;oBAGC,sCAAsC;oBACtC,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBADlD,sCAAsC;oBACtC,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAA;;oBAAlD,SAAkD,CAAA;oBAClD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAA;;oBAAnD,SAAmD,CAAA;oBACnD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAA;;oBAAnD,SAAmD,CAAA;oBACnD,qBAAM,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;wBAEnD,oBAAoB;sBAF+B;;oBAAnD,SAAmD,CAAA;oBAEnD,oBAAoB;oBACpB,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAD7C,oBAAoB;oBACpB,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;wBAE7C,6DAA6D;sBAFhB;;oBAA7C,SAA6C,CAAA;oBAE7C,6DAA6D;oBAC7D,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAD7C,6DAA6D;oBAC7D,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAA;;oBAA7C,SAA6C,CAAA;oBAC7C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;oBAC9C,qBAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,EAAA;;oBAA9C,SAA8C,CAAA;;;;;;;CAEjD,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,2BAA2B,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAAvD,SAAuD,CAAA;;;;SACxD,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAA;QACnE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAA;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
|
|
@@ -0,0 +1,33 @@
|
|
|
1
|
+
import { Check } from "../../setup_isolated";
|
|
2
|
+
/**
|
|
3
|
+
* Regression test for F-0200
|
|
4
|
+
* (security-audit/findings/F-0200-form-logic-js-dynamic-code-execution.md).
|
|
5
|
+
*
|
|
6
|
+
* `responses_satisfy_conditions` (utilities/src/utils.ts) compiled a stored condition value of the
|
|
7
|
+
* form `$JS(...)` with `new Function()` and executed it — in every form-filler's browser, including
|
|
8
|
+
* anonymous visitors on public intake pages, AND inside the API process (automation_triggers.ts
|
|
9
|
+
* trigger matching on every form submission, ai_agent/form_filling.ts voice-agent navigation). The
|
|
10
|
+
* API process holds every tenant's database handle, so a condition authored by staff in one tenant
|
|
11
|
+
* reached all of them. Any staff user or API key with form_fields write access could plant one by
|
|
12
|
+
* typing into the free-text $gt/$lt box — no API call required.
|
|
13
|
+
*
|
|
14
|
+
* The sink is removed. This asserts the second half of the fix: `compoundFilterValidator` rejects the
|
|
15
|
+
* syntax at write time on every field that feeds that evaluator, so it cannot be reintroduced through
|
|
16
|
+
* stored configuration. The runtime half — that a `$JS` value is never evaluated — is covered by the
|
|
17
|
+
* pure-function cases in `form_conditional_logic_tests` in tests.ts.
|
|
18
|
+
*
|
|
19
|
+
* The five condition locations were established by enumerating every `responses_satisfy_conditions`
|
|
20
|
+
* call site, and all five are covered here. That completeness matters: the first run of this test
|
|
21
|
+
* caught a half fix. `event.conditions` is wrapped in an `orValidator`, which returns the first arm
|
|
22
|
+
* that does not throw, and its permissive `optional: optionalAnyObjectValidator` arm was declared
|
|
23
|
+
* before the guarded one — so the payload was accepted and stored even though the validator had been
|
|
24
|
+
* swapped. Pointing a field at the guard is not the same as the guard being reachable, which is why
|
|
25
|
+
* every location gets an assertion rather than an argument.
|
|
26
|
+
*
|
|
27
|
+
* Each rejection is paired with a positive control using the same shape without `$JS(`, so a passing
|
|
28
|
+
* test cannot be explained by the write failing for an unrelated reason.
|
|
29
|
+
*/
|
|
30
|
+
export declare const form_logic_js_execution_checks: () => Promise<Check[]>;
|
|
31
|
+
/** Asserting wrapper, for standalone runs and for sequential use in the suite. */
|
|
32
|
+
export declare const form_logic_js_execution_tests: () => Promise<void>;
|
|
33
|
+
//# sourceMappingURL=F-0200-form-logic-js-execution.test.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"F-0200-form-logic-js-execution.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/F-0200-form-logic-js-execution.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,EAEN,MAAM,sBAAsB,CAAA;AAM7B;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,eAAO,MAAM,8BAA8B,QAAa,QAAQ,KAAK,EAAE,CA4HtE,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,6BAA6B,qBAEzC,CAAA"}
|
|
@@ -0,0 +1,244 @@
|
|
|
1
|
+
var __assign = (this && this.__assign) || function () {
|
|
2
|
+
__assign = Object.assign || function(t) {
|
|
3
|
+
for (var s, i = 1, n = arguments.length; i < n; i++) {
|
|
4
|
+
s = arguments[i];
|
|
5
|
+
for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
|
|
6
|
+
t[p] = s[p];
|
|
7
|
+
}
|
|
8
|
+
return t;
|
|
9
|
+
};
|
|
10
|
+
return __assign.apply(this, arguments);
|
|
11
|
+
};
|
|
12
|
+
var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
|
|
13
|
+
function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
|
|
14
|
+
return new (P || (P = Promise))(function (resolve, reject) {
|
|
15
|
+
function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
|
|
16
|
+
function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
|
|
17
|
+
function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
|
|
18
|
+
step((generator = generator.apply(thisArg, _arguments || [])).next());
|
|
19
|
+
});
|
|
20
|
+
};
|
|
21
|
+
var __generator = (this && this.__generator) || function (thisArg, body) {
|
|
22
|
+
var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
|
|
23
|
+
return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
|
|
24
|
+
function verb(n) { return function (v) { return step([n, v]); }; }
|
|
25
|
+
function step(op) {
|
|
26
|
+
if (f) throw new TypeError("Generator is already executing.");
|
|
27
|
+
while (g && (g = 0, op[0] && (_ = 0)), _) try {
|
|
28
|
+
if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
|
|
29
|
+
if (y = 0, t) op = [op[0] & 2, t.value];
|
|
30
|
+
switch (op[0]) {
|
|
31
|
+
case 0: case 1: t = op; break;
|
|
32
|
+
case 4: _.label++; return { value: op[1], done: false };
|
|
33
|
+
case 5: _.label++; y = op[1]; op = [0]; continue;
|
|
34
|
+
case 7: op = _.ops.pop(); _.trys.pop(); continue;
|
|
35
|
+
default:
|
|
36
|
+
if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
|
|
37
|
+
if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
|
|
38
|
+
if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
|
|
39
|
+
if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
|
|
40
|
+
if (t[2]) _.ops.pop();
|
|
41
|
+
_.trys.pop(); continue;
|
|
42
|
+
}
|
|
43
|
+
op = body.call(thisArg, _);
|
|
44
|
+
} catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
|
|
45
|
+
if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
|
|
46
|
+
}
|
|
47
|
+
};
|
|
48
|
+
require('source-map-support').install();
|
|
49
|
+
import { assert_checks, setup_isolated_tenant, } from "../../setup_isolated";
|
|
50
|
+
var host = process.env.API_URL || 'http://localhost:8080';
|
|
51
|
+
var RAND = function () { return Math.random().toString(36).slice(2, 10); };
|
|
52
|
+
/**
|
|
53
|
+
* Regression test for F-0200
|
|
54
|
+
* (security-audit/findings/F-0200-form-logic-js-dynamic-code-execution.md).
|
|
55
|
+
*
|
|
56
|
+
* `responses_satisfy_conditions` (utilities/src/utils.ts) compiled a stored condition value of the
|
|
57
|
+
* form `$JS(...)` with `new Function()` and executed it — in every form-filler's browser, including
|
|
58
|
+
* anonymous visitors on public intake pages, AND inside the API process (automation_triggers.ts
|
|
59
|
+
* trigger matching on every form submission, ai_agent/form_filling.ts voice-agent navigation). The
|
|
60
|
+
* API process holds every tenant's database handle, so a condition authored by staff in one tenant
|
|
61
|
+
* reached all of them. Any staff user or API key with form_fields write access could plant one by
|
|
62
|
+
* typing into the free-text $gt/$lt box — no API call required.
|
|
63
|
+
*
|
|
64
|
+
* The sink is removed. This asserts the second half of the fix: `compoundFilterValidator` rejects the
|
|
65
|
+
* syntax at write time on every field that feeds that evaluator, so it cannot be reintroduced through
|
|
66
|
+
* stored configuration. The runtime half — that a `$JS` value is never evaluated — is covered by the
|
|
67
|
+
* pure-function cases in `form_conditional_logic_tests` in tests.ts.
|
|
68
|
+
*
|
|
69
|
+
* The five condition locations were established by enumerating every `responses_satisfy_conditions`
|
|
70
|
+
* call site, and all five are covered here. That completeness matters: the first run of this test
|
|
71
|
+
* caught a half fix. `event.conditions` is wrapped in an `orValidator`, which returns the first arm
|
|
72
|
+
* that does not throw, and its permissive `optional: optionalAnyObjectValidator` arm was declared
|
|
73
|
+
* before the guarded one — so the payload was accepted and stored even though the validator had been
|
|
74
|
+
* swapped. Pointing a field at the guard is not the same as the guard being reachable, which is why
|
|
75
|
+
* every location gets an assertion rather than an argument.
|
|
76
|
+
*
|
|
77
|
+
* Each rejection is paired with a positive control using the same shape without `$JS(`, so a passing
|
|
78
|
+
* test cannot be explained by the write failing for an unrelated reason.
|
|
79
|
+
*/
|
|
80
|
+
export var form_logic_js_execution_checks = function () { return __awaiter(void 0, void 0, void 0, function () {
|
|
81
|
+
var checks, record, JS_PAYLOAD, SAFE_VALUE, condition, previousFields, attempt, tenant, sdk_1, form_1, field_1, controlCreate, payloadCreate, payloadUpdate, groupControl, groupPayload, optionControl, optionPayload, productControl, productPayload, trigger_1, triggerControl, triggerPayload, byFormIdPayload, e_1;
|
|
82
|
+
return __generator(this, function (_a) {
|
|
83
|
+
switch (_a.label) {
|
|
84
|
+
case 0:
|
|
85
|
+
checks = [];
|
|
86
|
+
record = function (label, pass, detail) { return checks.push({ label: label, pass: pass, detail: detail }); };
|
|
87
|
+
JS_PAYLOAD = '$JS(return 0)';
|
|
88
|
+
SAFE_VALUE = '18';
|
|
89
|
+
condition = function (value) { return ({ $and: [{ condition: { 'someFieldId': { $gt: value } } }] }); };
|
|
90
|
+
previousFields = function (value) { return ([{
|
|
91
|
+
type: 'compoundLogic',
|
|
92
|
+
info: { fieldId: '000000000000000000000000', priority: 5, label: '', condition: condition(value) },
|
|
93
|
+
}]); };
|
|
94
|
+
attempt = function (fn) { return __awaiter(void 0, void 0, void 0, function () {
|
|
95
|
+
return __generator(this, function (_a) {
|
|
96
|
+
return [2 /*return*/, (fn().then(function () { return ({ accepted: true, detail: 'accepted' }); })
|
|
97
|
+
.catch(function (e) { return ({ accepted: false, detail: "rejected: ".concat((e === null || e === void 0 ? void 0 : e.message) || e) }); }))];
|
|
98
|
+
});
|
|
99
|
+
}); };
|
|
100
|
+
_a.label = 1;
|
|
101
|
+
case 1:
|
|
102
|
+
_a.trys.push([1, , 17, 22]);
|
|
103
|
+
return [4 /*yield*/, setup_isolated_tenant({ name: "F0200 ".concat(RAND()), users: [{ isAdmin: true }], apiKeys: 0 })];
|
|
104
|
+
case 2:
|
|
105
|
+
tenant = _a.sent();
|
|
106
|
+
sdk_1 = tenant.sdk;
|
|
107
|
+
return [4 /*yield*/, sdk_1.api.forms.createOne({ title: "F-0200 ".concat(RAND()) })];
|
|
108
|
+
case 3:
|
|
109
|
+
form_1 = _a.sent();
|
|
110
|
+
return [4 /*yield*/, sdk_1.api.form_fields.createOne({
|
|
111
|
+
formId: form_1.id, title: 'F-0200 anchor', type: 'string', previousFields: [{ type: 'root', info: {} }],
|
|
112
|
+
})
|
|
113
|
+
/* ===== 1. previousFields[].info.condition — the field the finding was reported against ===== */
|
|
114
|
+
];
|
|
115
|
+
case 4:
|
|
116
|
+
field_1 = _a.sent();
|
|
117
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.createOne({
|
|
118
|
+
formId: form_1.id, title: 'F-0200 control', type: 'string',
|
|
119
|
+
previousFields: previousFields(SAFE_VALUE),
|
|
120
|
+
}); })];
|
|
121
|
+
case 5:
|
|
122
|
+
controlCreate = _a.sent();
|
|
123
|
+
record('control: form_fields.createOne accepts a normal $gt condition', controlCreate.accepted, controlCreate.detail);
|
|
124
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.createOne({
|
|
125
|
+
formId: form_1.id, title: 'F-0200 payload', type: 'string',
|
|
126
|
+
previousFields: previousFields(JS_PAYLOAD),
|
|
127
|
+
}); })];
|
|
128
|
+
case 6:
|
|
129
|
+
payloadCreate = _a.sent();
|
|
130
|
+
record('1a: form_fields.createOne rejects $JS( in previousFields condition', !payloadCreate.accepted, payloadCreate.detail);
|
|
131
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
|
|
132
|
+
previousFields: previousFields(JS_PAYLOAD),
|
|
133
|
+
}); })];
|
|
134
|
+
case 7:
|
|
135
|
+
payloadUpdate = _a.sent();
|
|
136
|
+
record('1b: form_fields.updateOne rejects $JS( in previousFields condition', !payloadUpdate.accepted, payloadUpdate.detail);
|
|
137
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
|
|
138
|
+
groupShowCondition: condition(SAFE_VALUE),
|
|
139
|
+
}); })];
|
|
140
|
+
case 8:
|
|
141
|
+
groupControl = _a.sent();
|
|
142
|
+
record('control: groupShowCondition accepts a normal condition', groupControl.accepted, groupControl.detail);
|
|
143
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
|
|
144
|
+
groupShowCondition: condition(JS_PAYLOAD),
|
|
145
|
+
}); })];
|
|
146
|
+
case 9:
|
|
147
|
+
groupPayload = _a.sent();
|
|
148
|
+
record('2: form_fields.updateOne rejects $JS( in groupShowCondition', !groupPayload.accepted, groupPayload.detail);
|
|
149
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
|
|
150
|
+
options: { optionDetails: [{ option: 'A', showCondition: condition(SAFE_VALUE) }] },
|
|
151
|
+
}); })];
|
|
152
|
+
case 10:
|
|
153
|
+
optionControl = _a.sent();
|
|
154
|
+
record('control: optionDetails showCondition accepts a normal condition', optionControl.accepted, optionControl.detail);
|
|
155
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
|
|
156
|
+
options: { optionDetails: [{ option: 'A', showCondition: condition(JS_PAYLOAD) }] },
|
|
157
|
+
}); })];
|
|
158
|
+
case 11:
|
|
159
|
+
optionPayload = _a.sent();
|
|
160
|
+
record('3: form_fields.updateOne rejects $JS( in optionDetails showCondition', !optionPayload.accepted, optionPayload.detail);
|
|
161
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
|
|
162
|
+
options: { productConditions: [{ productId: '000000000000000000000000', showCondition: condition(SAFE_VALUE) }] },
|
|
163
|
+
}); })];
|
|
164
|
+
case 12:
|
|
165
|
+
productControl = _a.sent();
|
|
166
|
+
record('control: productConditions showCondition accepts a normal condition', productControl.accepted, productControl.detail);
|
|
167
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.form_fields.updateOne(field_1.id, {
|
|
168
|
+
options: { productConditions: [{ productId: '000000000000000000000000', showCondition: condition(JS_PAYLOAD) }] },
|
|
169
|
+
}); })];
|
|
170
|
+
case 13:
|
|
171
|
+
productPayload = _a.sent();
|
|
172
|
+
record('4: form_fields.updateOne rejects $JS( in productConditions showCondition', !productPayload.accepted, productPayload.detail);
|
|
173
|
+
trigger_1 = function (conditions, extraInfo) {
|
|
174
|
+
if (extraInfo === void 0) { extraInfo = {}; }
|
|
175
|
+
return ({
|
|
176
|
+
title: "F-0200 ".concat(RAND()),
|
|
177
|
+
status: 'Inactive',
|
|
178
|
+
event: __assign({ type: 'Form Submitted', info: __assign({ formId: form_1.id }, extraInfo) }, conditions),
|
|
179
|
+
action: { type: 'Add Tags', info: { tags: ['F-0200'] } },
|
|
180
|
+
});
|
|
181
|
+
};
|
|
182
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.automation_triggers.createOne(trigger_1({ conditions: condition(SAFE_VALUE) })); })];
|
|
183
|
+
case 14:
|
|
184
|
+
triggerControl = _a.sent();
|
|
185
|
+
record('control: automation_triggers accepts normal event conditions', triggerControl.accepted, triggerControl.detail);
|
|
186
|
+
return [4 /*yield*/, attempt(function () { return sdk_1.api.automation_triggers.createOne(trigger_1({ conditions: condition(JS_PAYLOAD) })); })];
|
|
187
|
+
case 15:
|
|
188
|
+
triggerPayload = _a.sent();
|
|
189
|
+
record('5a: automation_triggers rejects $JS( in event.conditions', !triggerPayload.accepted, triggerPayload.detail);
|
|
190
|
+
return [4 /*yield*/, attempt(function () {
|
|
191
|
+
var _a;
|
|
192
|
+
return sdk_1.api.automation_triggers.createOne(trigger_1({}, { conditionsByFormId: (_a = {}, _a[form_1.id] = condition(JS_PAYLOAD), _a) }));
|
|
193
|
+
})];
|
|
194
|
+
case 16:
|
|
195
|
+
byFormIdPayload = _a.sent();
|
|
196
|
+
record('5b: automation_triggers rejects $JS( in event.info.conditionsByFormId', !byFormIdPayload.accepted, byFormIdPayload.detail);
|
|
197
|
+
return [3 /*break*/, 22];
|
|
198
|
+
case 17:
|
|
199
|
+
if (!tenant) return [3 /*break*/, 21];
|
|
200
|
+
_a.label = 18;
|
|
201
|
+
case 18:
|
|
202
|
+
_a.trys.push([18, 20, , 21]);
|
|
203
|
+
return [4 /*yield*/, tenant.teardown()];
|
|
204
|
+
case 19:
|
|
205
|
+
_a.sent();
|
|
206
|
+
return [3 /*break*/, 21];
|
|
207
|
+
case 20:
|
|
208
|
+
e_1 = _a.sent();
|
|
209
|
+
console.error('teardown failed', e_1);
|
|
210
|
+
return [3 /*break*/, 21];
|
|
211
|
+
case 21: return [7 /*endfinally*/];
|
|
212
|
+
case 22: return [2 /*return*/, checks];
|
|
213
|
+
}
|
|
214
|
+
});
|
|
215
|
+
}); };
|
|
216
|
+
/** Asserting wrapper, for standalone runs and for sequential use in the suite. */
|
|
217
|
+
export var form_logic_js_execution_tests = function () { return __awaiter(void 0, void 0, void 0, function () {
|
|
218
|
+
var _a, _b;
|
|
219
|
+
return __generator(this, function (_c) {
|
|
220
|
+
switch (_c.label) {
|
|
221
|
+
case 0:
|
|
222
|
+
_a = assert_checks;
|
|
223
|
+
_b = ['F-0200 $JS in stored conditional logic'];
|
|
224
|
+
return [4 /*yield*/, form_logic_js_execution_checks()];
|
|
225
|
+
case 1:
|
|
226
|
+
_a.apply(void 0, _b.concat([_c.sent()]));
|
|
227
|
+
return [2 /*return*/];
|
|
228
|
+
}
|
|
229
|
+
});
|
|
230
|
+
}); };
|
|
231
|
+
// Allow running this test file independently
|
|
232
|
+
if (require.main === module) {
|
|
233
|
+
console.log("\uD83C\uDF10 Using API URL: ".concat(host));
|
|
234
|
+
form_logic_js_execution_tests()
|
|
235
|
+
.then(function () {
|
|
236
|
+
console.log("✅ F-0200 form logic JS execution test suite completed successfully");
|
|
237
|
+
process.exit(0);
|
|
238
|
+
})
|
|
239
|
+
.catch(function (error) {
|
|
240
|
+
console.error("❌ F-0200 form logic JS execution test suite failed:", error);
|
|
241
|
+
process.exit(1);
|
|
242
|
+
});
|
|
243
|
+
}
|
|
244
|
+
//# sourceMappingURL=F-0200-form-logic-js-execution.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"F-0200-form-logic-js-execution.test.js","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/F-0200-form-logic-js-execution.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,EACL,aAAa,EAEb,qBAAqB,GACtB,MAAM,sBAAsB,CAAA;AAE7B,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,IAAI,GAAG,cAAM,OAAA,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAvC,CAAuC,CAAA;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,CAAC,IAAM,8BAA8B,GAAG;;;;;gBACtC,MAAM,GAAY,EAAE,CAAA;gBACpB,MAAM,GAAG,UAAC,KAAa,EAAE,IAAa,EAAE,MAAc,IAAK,OAAA,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,OAAA,EAAE,IAAI,MAAA,EAAE,MAAM,QAAA,EAAE,CAAC,EAApC,CAAoC,CAAA;gBAE/F,UAAU,GAAG,eAAe,CAAA;gBAC5B,UAAU,GAAG,IAAI,CAAA;gBAEjB,SAAS,GAAG,UAAC,KAAa,IAAK,OAAA,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAA9D,CAA8D,CAAA;gBAC7F,cAAc,GAAG,UAAC,KAAa,IAAK,OAAA,CAAC,CAAC;wBAC1C,IAAI,EAAE,eAAe;wBACrB,IAAI,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE;qBACnG,CAAC,CAAC,EAHuC,CAGvC,CAAA;gBAEG,OAAO,GAAG,UAAO,EAAsB;;wBAAK,sBAAA,CAChD,EAAE,EAAE,CAAC,IAAI,CAAC,cAAM,OAAA,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAG,MAAM,EAAE,UAAU,EAAE,CAAC,EAAzC,CAAyC,CAAC;iCACrD,KAAK,CAAC,UAAC,CAAM,IAAK,OAAA,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAa,CAAA,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,OAAO,KAAI,CAAC,CAAE,EAAE,CAAC,EAA7D,CAA6D,CAAC,CACtF,EAAA;;qBAAA,CAAA;;;;gBAKU,qBAAM,qBAAqB,CAAC,EAAE,IAAI,EAAE,gBAAS,IAAI,EAAE,CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAA;;gBAAzG,MAAM,GAAG,SAAgG,CAAA;gBACnG,QAAM,MAAM,CAAC,GAAG,CAAA;gBAET,qBAAM,KAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iBAAU,IAAI,EAAE,CAAE,EAAE,CAAC,EAAA;;gBAAnE,SAAO,SAA4D;gBAC3D,qBAAM,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC;wBAChD,MAAM,EAAE,MAAI,CAAC,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;qBACtG,CAAC;oBAEF,iGAAiG;kBAF/F;;gBAFI,UAAQ,SAEZ;gBAIoB,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC;wBACtE,MAAM,EAAE,MAAI,CAAC,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ;wBACxD,cAAc,EAAE,cAAc,CAAC,UAAU,CAAQ;qBAClD,CAAC,EAHwC,CAGxC,CAAC,EAAA;;gBAHG,aAAa,GAAG,SAGnB;gBACH,MAAM,CACJ,+DAA+D,EAC/D,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAC7C,CAAA;gBAEqB,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC;wBACtE,MAAM,EAAE,MAAI,CAAC,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ;wBACxD,cAAc,EAAE,cAAc,CAAC,UAAU,CAAQ;qBAClD,CAAC,EAHwC,CAGxC,CAAC,EAAA;;gBAHG,aAAa,GAAG,SAGnB;gBACH,MAAM,CACJ,oEAAoE,EACpE,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAC9C,CAAA;gBAEqB,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBAChF,cAAc,EAAE,cAAc,CAAC,UAAU,CAAQ;qBAClD,CAAC,EAFwC,CAExC,CAAC,EAAA;;gBAFG,aAAa,GAAG,SAEnB;gBACH,MAAM,CACJ,oEAAoE,EACpE,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAC9C,CAAA;gBAIoB,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBAC/E,kBAAkB,EAAE,SAAS,CAAC,UAAU,CAAQ;qBACjD,CAAC,EAFuC,CAEvC,CAAC,EAAA;;gBAFG,YAAY,GAAG,SAElB;gBACH,MAAM,CAAC,wDAAwD,EAAE,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;gBAEvF,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBAC/E,kBAAkB,EAAE,SAAS,CAAC,UAAU,CAAQ;qBACjD,CAAC,EAFuC,CAEvC,CAAC,EAAA;;gBAFG,YAAY,GAAG,SAElB;gBACH,MAAM,CAAC,6DAA6D,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC,CAAA;gBAI5F,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBAChF,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,EAAS;qBAC3F,CAAC,EAFwC,CAExC,CAAC,EAAA;;gBAFG,aAAa,GAAG,SAEnB;gBACH,MAAM,CAAC,iEAAiE,EAAE,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;gBAEjG,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBAChF,OAAO,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,EAAS;qBAC3F,CAAC,EAFwC,CAExC,CAAC,EAAA;;gBAFG,aAAa,GAAG,SAEnB;gBACH,MAAM,CAAC,sEAAsE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;gBAItG,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBACjF,OAAO,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,EAAS;qBACzH,CAAC,EAFyC,CAEzC,CAAC,EAAA;;gBAFG,cAAc,GAAG,SAEpB;gBACH,MAAM,CAAC,qEAAqE,EAAE,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;gBAEtG,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAK,CAAC,EAAE,EAAE;wBACjF,OAAO,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,SAAS,EAAE,0BAA0B,EAAE,aAAa,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,EAAS;qBACzH,CAAC,EAFyC,CAEzC,CAAC,EAAA;;gBAFG,cAAc,GAAG,SAEpB;gBACH,MAAM,CAAC,0EAA0E,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;gBAI7H,YAAU,UAAC,UAAkB,EAAE,SAAsB;oBAAtB,0BAAA,EAAA,cAAsB;oBAAK,OAAA,CAAC;wBAC/D,KAAK,EAAE,iBAAU,IAAI,EAAE,CAAE;wBACzB,MAAM,EAAE,UAAU;wBAClB,KAAK,aAAI,IAAI,EAAE,gBAAgB,EAAE,IAAI,aAAI,MAAM,EAAE,MAAI,CAAC,EAAE,IAAK,SAAS,KAAO,UAAU,CAAE;wBACzF,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;qBACjD,CAAA;gBALuD,CAKvD,CAAA;gBAEc,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAC9E,SAAO,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAC/C,EAF0C,CAE1C,CAAC,EAAA;;gBAFI,cAAc,GAAG,SAErB;gBACF,MAAM,CAAC,8DAA8D,EAAE,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;gBAG/F,qBAAM,OAAO,CAAC,cAAM,OAAA,KAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAC9E,SAAO,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAC/C,EAF0C,CAE1C,CAAC,EAAA;;gBAFI,cAAc,GAAG,SAErB;gBACF,MAAM,CAAC,0DAA0D,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAA;gBAE3F,qBAAM,OAAO,CAAC;;wBAAM,OAAA,KAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,SAAS,CAC/E,SAAO,CAAC,EAAE,EAAE,EAAE,kBAAkB,YAAI,GAAC,MAAI,CAAC,EAAE,IAAG,SAAS,CAAC,UAAU,CAAC,KAAE,EAAE,CAAC,CAC1E;oBAF2C,CAE3C,CAAC,EAAA;;gBAFI,eAAe,GAAG,SAEtB;gBACF,MAAM,CAAC,uEAAuE,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,MAAM,CAAC,CAAA;;;qBAI9H,MAAM,EAAN,yBAAM;;;;gBAAU,qBAAM,MAAM,CAAC,QAAQ,EAAE,EAAA;;gBAAvB,SAAuB,CAAA;;;;gBAAe,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAC,CAAC,CAAA;;;qBAG/F,sBAAO,MAAM,EAAA;;;KACd,CAAA;AAED,kFAAkF;AAClF,MAAM,CAAC,IAAM,6BAA6B,GAAG;;;;;gBAC3C,KAAA,aAAa,CAAA;sBAAC,wCAAwC;gBAAE,qBAAM,8BAA8B,EAAE,EAAA;;gBAA9F,4BAAwD,SAAsC,GAAC,CAAA;;;;KAChG,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,OAAO,CAAC,GAAG,CAAC,sCAAqB,IAAI,CAAE,CAAC,CAAA;IACxC,6BAA6B,EAAE;SAC5B,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAA;QACjF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAAA;QAC3E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
import { Check } from "../../setup_isolated";
|
|
2
|
+
/**
|
|
3
|
+
* Regression test: `endusers.add_to_journey` must not enroll another tenant's enduser.
|
|
4
|
+
*
|
|
5
|
+
* `endusers.add_to_journey` inserted an `automated_actions` row for EACH caller-supplied `enduserId`
|
|
6
|
+
* with only mongoId-shape validation and no tenant-membership check. The preceding
|
|
7
|
+
* `DB.endusers.updateMany` is scoped but its result was discarded, and
|
|
8
|
+
* `DB.automated_actions.insertMany` is a direct write that bypasses the `ensureValidDependentKeys`
|
|
9
|
+
* foreign-key check the generic CRUD route gets. The resulting row is stamped
|
|
10
|
+
* `businessId: <caller's tenant>` while carrying `enduserId: <a victim in another tenant>`.
|
|
11
|
+
*
|
|
12
|
+
* The worker then dereferences that enduser with the raw driver and no `businessId`
|
|
13
|
+
* (worker/modules/automations.ts, the worker's unscoped raw-driver lookup family), so the victim's record loads
|
|
14
|
+
* under the attacker's automation: `pushFormsToPortal` copies the victim's PHI into the attacker's
|
|
15
|
+
* `form_responses` (readable by their staff) and `iterableCustomEvent` writes an attacker-authored
|
|
16
|
+
* note into the victim's chart. This plant is the reachability that made those three exploitable.
|
|
17
|
+
*
|
|
18
|
+
* There are TWO independent plant sites and a fix to only one is a half fix:
|
|
19
|
+
* - inline branch, taken when `automationStepId` is supplied (api.ts add_to_journey handler)
|
|
20
|
+
* - module branch, taken when it is not: `handle_automation_event`'s
|
|
21
|
+
* `validEnduserIds = conditionsQuery ? <scoped find> : event.enduserIds` passes caller ids
|
|
22
|
+
* straight through for a step with NO conditions.
|
|
23
|
+
* Both are covered below (A1/A2).
|
|
24
|
+
*
|
|
25
|
+
* Design notes:
|
|
26
|
+
* - Two provisioned tenants, so the victim is a real foreign enduser and we can also assert their
|
|
27
|
+
* record was not mutated. Both must come from provisioning: `add_to_journey` is
|
|
28
|
+
* `requiresSubscription: true`, and a `create_and_join` org is born with an expired subscription.
|
|
29
|
+
* - The steps use `setEnduserStatus` — no vendor, no Bedrock — and `startAt` is an hour out so a
|
|
30
|
+
* running worker cannot process the rows before we read them.
|
|
31
|
+
* - `throttle` is deliberately omitted: it is the only way add_to_journey's per-pair rate limit can
|
|
32
|
+
* throw.
|
|
33
|
+
* - Everything is observable through `automated_actions` reads, so the worker is never needed.
|
|
34
|
+
*
|
|
35
|
+
* RED (pre-fix): A1, A2 and B2 fail — the victim's id appears in the attacker tenant's
|
|
36
|
+
* automated_actions. GREEN (post-fix): the foreign id is silently dropped and the caller's own
|
|
37
|
+
* endusers still enroll normally.
|
|
38
|
+
*/
|
|
39
|
+
export declare const add_to_journey_foreign_enduserid_checks: () => Promise<Check[]>;
|
|
40
|
+
/** Asserting wrapper, for standalone runs and for sequential use in the suite. */
|
|
41
|
+
export declare const add_to_journey_foreign_enduserid_tests: () => Promise<void>;
|
|
42
|
+
//# sourceMappingURL=add-to-journey-foreign-enduserid.test.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"add-to-journey-foreign-enduserid.test.d.ts","sourceRoot":"","sources":["../../../../../src/tests/api_tests/security/add-to-journey-foreign-enduserid.test.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,EAEN,MAAM,sBAAsB,CAAA;AAS7B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,eAAO,MAAM,uCAAuC,QAAa,QAAQ,KAAK,EAAE,CAuI/E,CAAA;AAED,kFAAkF;AAClF,eAAO,MAAM,sCAAsC,qBAElD,CAAA"}
|