langsmith 0.10.9 → 0.10.10

package/lib/sandbox/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/lib/sandbox/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,+BAA+B;AAE/D;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,SAAS;IACxB;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,4BAA4B;IAC5B,MAAM,EAAE,OAAO,CAAC;IAChB,qBAAqB;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,QAAQ,EAAE,CAAC;IACpB;;;OAGG;IACH,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,gCAAgC;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,SAAS,EAAE,CAAC;IACrB,2DAA2D;IAC3D,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8CAA8C;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,0DAA0D;IAC1D,OAAO,EAAE,UAAU,CAAC;IACpB;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,0CAA0C;IAC1C,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,gBAAgB;IAC/B,4DAA4D;IAC5D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,SAAS,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,gBAAgB,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mCAAmC;IACnC,MAAM,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC5B,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;IACzD,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IAMjB,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,+CAA+C;IAC/C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,+CAA+C;IAC/C,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,2DAA2D;IAC3D,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,gFAAgF;IAChF,IAAI,EAAE,kBAAkB,GAAG,QAAQ,CAAC;IACpC,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;CACf;AAED,2DAA2D;AAC3D,UAAU,mBAAmB;IAC3B,aAAa,EAAE,kBAAkB,CAAC;IAClC,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,EAAE,EAAE,CAAC;CACf;AAED,sEAAsE;AACtE,UAAU,iBAAiB;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,KAAK,CAAC;IACtB,iBAAiB,CAAC,EAAE,KAAK,CAAC;CAC3B;AAED,qDAAqD;AACrD,MAAM,WAAW,kBAAkB,CACjC,IAAI,SAAS,mBAAmB,GAAG,iBAAiB,GAChD,mBAAmB,GACnB,iBAAiB;IAErB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,IAAI,EAAE,KAAK,CAAC;IACZ,mCAAmC;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,2DAA2D;IAC3D,GAAG,EAAE,IAAI,CAAC;CACX;AAED,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,IAAI,EAAE,KAAK,CAAC;IACZ,mCAAmC;IACnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,uDAAuD;IACvD,GAAG,EAAE;QACH,oBAAoB,EAAE,kBAAkB,CAAC;QACzC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;KACnB,CAAC;CACH;AAED,uDAAuD;AACvD,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,kBAAkB,GAClB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5B;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,qDAAqD;IACrD,cAAc,CAAC,EAAE,oBAAoB,CAAC;CACvC;AAED,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,uCAAuC;IACvC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,UAAU,sBAAsB;IAC9B,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,kDAAkD;IAClD,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,6CAA6C;AAC7C,MAAM,WAAW,WAAY,SAAQ,sBAAsB;IACzD,kBAAkB;IAClB,IAAI,EAAE,IAAI,CAAC;IACX,8BAA8B;IAC9B,EAAE,EAAE,aAAa,CAAC;CACnB;AAED,6CAA6C;AAC7C,MAAM,WAAW,cAAc;IAC7B,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,8CAA8C;AAC9C,MAAM,WAAW,YAAa,SAAQ,sBAAsB;IAC1D,kBAAkB;IAClB,IAAI,EAAE,KAAK,CAAC;IACZ,+BAA+B;IAC/B,GAAG,EAAE,cAAc,CAAC;CACrB;AAED,4CAA4C;AAC5C,MAAM,WAAW,eAAe;IAC9B,oBAAoB;IACpB,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;IACvB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAC;CACd;AAED,6CAA6C;AAC7C,MAAM,WAAW,cAAc;IAC7B,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,wDAAwD;IACxD,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,8CAA8C;AAC9C,MAAM,WAAW,YAAY;IAC3B,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB;IAClB,IAAI,EAAE,KAAK,CAAC;IACZ,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,+BAA+B;IAC/B,GAAG,EAAE,cAAc,CAAC;CACrB;AAED,qDAAqD;AACrD,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,gEAAgE;AAChE,MAAM,WAAW,mBAAmB;IAClC,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB;IAClB,IAAI,EAAE,YAAY,CAAC;IACnB,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,UAAU,EAAE,qBAAqB,CAAC;CACnC;AAED,mCAAmC;AACnC,MAAM,MAAM,YAAY,GACpB,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,mBAAmB,CAAC;AAExB,qEAAqE;AACrE,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,kBAAkB,CAAC;IAClC,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,EAAE,EAAE,CAAC;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,yBAAyB;IACxC,oBAAoB,EAAE,kBAAkB,CAAC;CAC1C;AAED,+CAA+C;AAC/C,MAAM,WAAW,sBAAsB;IACrC,uEAAuE;IACvE,GAAG,CAAC,EAAE,yBAAyB,GAAG,iBAAiB,CAAC;IACpD,GAAG,CAAC,EAAE,yBAAyB,CAAC;CACjC;AAED,2DAA2D;AAC3D,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,kBAAkB,CAAC;AAEvE,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IACjC,qDAAqD;IACrD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,sCAAsC;IACtC,MAAM,EAAE,YAAY,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;OAIG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACrC;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,2BAA2B;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,gFAAgF;IAChF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,0BAA0B,GAAG,YAAY,GAAG,QAAQ,CAAC;AAEjE;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,kBAAkB,CAAC,EAAE,0BAA0B,CAAC;IAChD,oCAAoC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,wBAAwB;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB"}

package/lib/sandbox/types.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * TypeScript interfaces for the sandbox module.
+ *
+ * Field names use snake_case to match API response format.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/lib/sandbox/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/lib/sandbox/types.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/lib/sandbox/types.mjs

@@ -0,0 +1,7 @@
+/**
+ * TypeScript interfaces for the sandbox module.
+ *
+ * Field names use snake_case to match API response format.
+ */
+export {};
+//# sourceMappingURL=types.mjs.map

package/lib/sandbox/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.mjs","sourceRoot":"","sources":["../../src/lib/sandbox/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/lib/sandbox/verify.d.mts

@@ -0,0 +1,123 @@
+/** Header carrying the signed identity of a LangSmith-login service URL request. */
+export declare const USER_TOKEN_HEADER = "X-Langsmith-User-Token";
+/** Header carrying the signature of a proxy callback request. */
+export declare const CALLBACK_SIGNATURE_HEADER = "X-LangSmith-Signature-JWT";
+/** The LangSmith user a service URL request was made by. */
+export interface SandboxUser {
+    subject: string;
+    email?: string;
+    name?: string;
+    expiresAt: Date;
+}
+/** The sandbox whose outbound request triggered a proxy callback. */
+export interface SandboxCallbackIdentity {
+    tenant_id: string;
+    sandbox_id: string;
+    organization_id?: string;
+    ls_user_id?: string;
+}
+/** Snapshot of the outbound request, sent for `full_request` callbacks. */
+export interface SandboxCallbackRequest {
+    method: string;
+    url: string;
+    scheme: string;
+    host: string;
+    path: string;
+    query?: string;
+    headers: Record<string, string[]>;
+    body_base64: string;
+    body_truncated: boolean;
+}
+/** A verified proxy callback payload. */
+export interface SandboxCallback {
+    host: string;
+    port: number;
+    identity: SandboxCallbackIdentity;
+    request?: SandboxCallbackRequest;
+}
+export interface SandboxTokenVerifierConfig {
+    /** LangSmith API URL whose origin serves the JWKS. Defaults to LANGSMITH_ENDPOINT. */
+    apiUrl?: string;
+    /** Full JWKS URL; overrides `apiUrl`. */
+    jwksUrl?: string;
+    /** Timeout in milliseconds for fetching the JWKS. */
+    timeoutMs?: number;
+    /**
+     * Allow fetching the JWKS over plain HTTP from a non-loopback host. Anyone
+     * who can tamper with that traffic can forge tokens this verifier accepts.
+     */
+    allowInsecureJwks?: boolean;
+}
+export interface VerifyUserTokenOptions {
+    /**
+     * The service URL host the request was sent to, such as the request's
+     * `Host` header. A full service URL is also accepted.
+     */
+    audience: string;
+    /** If set, the LangSmith app URL the token must be issued by. */
+    issuer?: string;
+}
+export interface VerifyCallbackOptions {
+    /** The raw request body, exactly as received. */
+    body: string | Uint8Array | ArrayBuffer;
+    /** The `X-LangSmith-Signature-JWT` header value. */
+    signature: string;
+    /**
+     * If set, checks the signature's audience, which is the callback URL as
+     * configured in the proxy config. A string must match exactly; a predicate
+     * is called with each audience and must return true for at least one.
+     */
+    aud?: AudienceMatcher;
+    /** If set, the LangSmith OAuth issuer the signature must be issued by. */
+    issuer?: string;
+}
+/** An exact audience, or a predicate called with each audience in the token. */
+export type AudienceMatcher = string | ((aud: string) => boolean);
+/**
+ * Verifies tokens LangSmith signs for code running in or behind a sandbox.
+ *
+ * Keys are fetched from LangSmith's JWKS endpoint and cached. Requires Web
+ * Crypto Ed25519 support (Node.js 20+, Deno, Bun, Cloudflare Workers).
+ *
+ * @example
+ * ```typescript
+ * const verifier = new SandboxTokenVerifier();
+ *
+ * // In an app served from a LangSmith-login service URL:
+ * const user = await verifier.verifyUserToken(
+ *   req.headers.get(USER_TOKEN_HEADER)!,
+ *   { audience: req.headers.get("host")! }
+ * );
+ *
+ * // In a proxy callback endpoint:
+ * const callback = await verifier.verifyCallback({
+ *   body: await req.text(),
+ *   signature: req.headers.get(CALLBACK_SIGNATURE_HEADER)!,
+ *   aud: "https://example.com/sandbox-callback",
+ * });
+ * ```
+ */
+export declare class SandboxTokenVerifier {
+    private readonly jwksUrl;
+    private readonly timeoutMs;
+    private keys;
+    private fetchedAt;
+    private inflight?;
+    constructor(config?: SandboxTokenVerifierConfig);
+    /**
+     * Verify the `X-Langsmith-User-Token` header of a service URL request.
+     *
+     * LangSmith sets this header only for service URLs that use LangSmith login.
+     * Code that knows it is running in a sandbox can instead trust the unsigned
+     * `X-Langsmith-User-Id` and `X-Langsmith-User-Email` headers, which the
+     * sandbox runtime strips from inbound requests and sets itself; verify this
+     * token when that is not guaranteed.
+     */
+    verifyUserToken(token: string, options: VerifyUserTokenOptions): Promise<SandboxUser>;
+    /** Verify a proxy callback request and return its parsed payload. */
+    verifyCallback(options: VerifyCallbackOptions): Promise<SandboxCallback>;
+    private verify;
+    private key;
+    private refresh;
+}
+//# sourceMappingURL=verify.d.mts.map

package/lib/sandbox/verify.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.mts","sourceRoot":"","sources":["../../src/lib/sandbox/verify.ts"],"names":[],"mappings":"AAGA,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAE1D,iEAAiE;AACjE,eAAO,MAAM,yBAAyB,8BAA8B,CAAC;AASrE,4DAA4D;AAC5D,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,yCAAyC;AACzC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,uBAAuB,CAAC;IAClC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC;AAED,MAAM,WAAW,0BAA0B;IACzC,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IACxC,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,gFAAgF;AAChF,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;AAkFlE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,IAAI,CAAyC;IACrD,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,CAAgB;gBAErB,MAAM,GAAE,0BAA+B;IAYnD;;;;;;;;OAQG;IACG,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC;IAwBvB,qEAAqE;IAC/D,cAAc,CAClB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;YAkCb,MAAM;YAwDN,GAAG;YAsBH,OAAO;CAmCtB"}

package/lib/sandbox/verify.d.ts

@@ -0,0 +1,123 @@
+/** Header carrying the signed identity of a LangSmith-login service URL request. */
+export declare const USER_TOKEN_HEADER = "X-Langsmith-User-Token";
+/** Header carrying the signature of a proxy callback request. */
+export declare const CALLBACK_SIGNATURE_HEADER = "X-LangSmith-Signature-JWT";
+/** The LangSmith user a service URL request was made by. */
+export interface SandboxUser {
+    subject: string;
+    email?: string;
+    name?: string;
+    expiresAt: Date;
+}
+/** The sandbox whose outbound request triggered a proxy callback. */
+export interface SandboxCallbackIdentity {
+    tenant_id: string;
+    sandbox_id: string;
+    organization_id?: string;
+    ls_user_id?: string;
+}
+/** Snapshot of the outbound request, sent for `full_request` callbacks. */
+export interface SandboxCallbackRequest {
+    method: string;
+    url: string;
+    scheme: string;
+    host: string;
+    path: string;
+    query?: string;
+    headers: Record<string, string[]>;
+    body_base64: string;
+    body_truncated: boolean;
+}
+/** A verified proxy callback payload. */
+export interface SandboxCallback {
+    host: string;
+    port: number;
+    identity: SandboxCallbackIdentity;
+    request?: SandboxCallbackRequest;
+}
+export interface SandboxTokenVerifierConfig {
+    /** LangSmith API URL whose origin serves the JWKS. Defaults to LANGSMITH_ENDPOINT. */
+    apiUrl?: string;
+    /** Full JWKS URL; overrides `apiUrl`. */
+    jwksUrl?: string;
+    /** Timeout in milliseconds for fetching the JWKS. */
+    timeoutMs?: number;
+    /**
+     * Allow fetching the JWKS over plain HTTP from a non-loopback host. Anyone
+     * who can tamper with that traffic can forge tokens this verifier accepts.
+     */
+    allowInsecureJwks?: boolean;
+}
+export interface VerifyUserTokenOptions {
+    /**
+     * The service URL host the request was sent to, such as the request's
+     * `Host` header. A full service URL is also accepted.
+     */
+    audience: string;
+    /** If set, the LangSmith app URL the token must be issued by. */
+    issuer?: string;
+}
+export interface VerifyCallbackOptions {
+    /** The raw request body, exactly as received. */
+    body: string | Uint8Array | ArrayBuffer;
+    /** The `X-LangSmith-Signature-JWT` header value. */
+    signature: string;
+    /**
+     * If set, checks the signature's audience, which is the callback URL as
+     * configured in the proxy config. A string must match exactly; a predicate
+     * is called with each audience and must return true for at least one.
+     */
+    aud?: AudienceMatcher;
+    /** If set, the LangSmith OAuth issuer the signature must be issued by. */
+    issuer?: string;
+}
+/** An exact audience, or a predicate called with each audience in the token. */
+export type AudienceMatcher = string | ((aud: string) => boolean);
+/**
+ * Verifies tokens LangSmith signs for code running in or behind a sandbox.
+ *
+ * Keys are fetched from LangSmith's JWKS endpoint and cached. Requires Web
+ * Crypto Ed25519 support (Node.js 20+, Deno, Bun, Cloudflare Workers).
+ *
+ * @example
+ * ```typescript
+ * const verifier = new SandboxTokenVerifier();
+ *
+ * // In an app served from a LangSmith-login service URL:
+ * const user = await verifier.verifyUserToken(
+ *   req.headers.get(USER_TOKEN_HEADER)!,
+ *   { audience: req.headers.get("host")! }
+ * );
+ *
+ * // In a proxy callback endpoint:
+ * const callback = await verifier.verifyCallback({
+ *   body: await req.text(),
+ *   signature: req.headers.get(CALLBACK_SIGNATURE_HEADER)!,
+ *   aud: "https://example.com/sandbox-callback",
+ * });
+ * ```
+ */
+export declare class SandboxTokenVerifier {
+    private readonly jwksUrl;
+    private readonly timeoutMs;
+    private keys;
+    private fetchedAt;
+    private inflight?;
+    constructor(config?: SandboxTokenVerifierConfig);
+    /**
+     * Verify the `X-Langsmith-User-Token` header of a service URL request.
+     *
+     * LangSmith sets this header only for service URLs that use LangSmith login.
+     * Code that knows it is running in a sandbox can instead trust the unsigned
+     * `X-Langsmith-User-Id` and `X-Langsmith-User-Email` headers, which the
+     * sandbox runtime strips from inbound requests and sets itself; verify this
+     * token when that is not guaranteed.
+     */
+    verifyUserToken(token: string, options: VerifyUserTokenOptions): Promise<SandboxUser>;
+    /** Verify a proxy callback request and return its parsed payload. */
+    verifyCallback(options: VerifyCallbackOptions): Promise<SandboxCallback>;
+    private verify;
+    private key;
+    private refresh;
+}
+//# sourceMappingURL=verify.d.ts.map

package/lib/sandbox/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/lib/sandbox/verify.ts"],"names":[],"mappings":"AAGA,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,2BAA2B,CAAC;AAE1D,iEAAiE;AACjE,eAAO,MAAM,yBAAyB,8BAA8B,CAAC;AASrE,4DAA4D;AAC5D,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,yCAAyC;AACzC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,uBAAuB,CAAC;IAClC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC;AAED,MAAM,WAAW,0BAA0B;IACzC,sFAAsF;IACtF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IACxC,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,gFAAgF;AAChF,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;AAkFlE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,IAAI,CAAyC;IACrD,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,CAAgB;gBAErB,MAAM,GAAE,0BAA+B;IAYnD;;;;;;;;OAQG;IACG,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,WAAW,CAAC;IAwBvB,qEAAqE;IAC/D,cAAc,CAClB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,eAAe,CAAC;YAkCb,MAAM;YAwDN,GAAG;YAsBH,OAAO;CAmCtB"}

package/lib/sandbox/verify.js

@@ -0,0 +1,301 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SandboxTokenVerifier = exports.CALLBACK_SIGNATURE_HEADER = exports.USER_TOKEN_HEADER = void 0;
+const env_js_1 = require("../utils/env.js");
+const errors_js_1 = require("./errors.js");
+/** Header carrying the signed identity of a LangSmith-login service URL request. */
+exports.USER_TOKEN_HEADER = "X-Langsmith-User-Token";
+/** Header carrying the signature of a proxy callback request. */
+exports.CALLBACK_SIGNATURE_HEADER = "X-LangSmith-Signature-JWT";
+const CALLBACK_SUBJECT = "langsmith-sandbox-callback";
+const JWKS_PATH = "/.well-known/jwks.json";
+const JWKS_TTL_MS = 300000;
+// Bounds refetches when a token names a kid the cached set lacks.
+const JWKS_MIN_REFRESH_MS = 30000;
+const LEEWAY_SECONDS = 30;
+function fail(message) {
+    throw new errors_js_1.LangSmithSandboxTokenVerificationError(message);
+}
+function subtle() {
+    const s = globalThis.crypto?.subtle;
+    if (!s)
+        fail("Web Crypto is not available in this runtime");
+    return s;
+}
+function base64UrlDecode(value) {
+    const b64 = value.replace(/-/g, "+").replace(/_/g, "/");
+    const bin = atob(b64 + "=".repeat((4 - (b64.length % 4)) % 4));
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+function decodeJson(segment) {
+    const value = JSON.parse(new TextDecoder().decode(base64UrlDecode(segment)));
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        throw new Error("not a JSON object");
+    }
+    return value;
+}
+function isLoopback(hostname) {
+    return (hostname === "localhost" ||
+        hostname === "[::1]" ||
+        /^127(\.\d{1,3}){3}$/.test(hostname));
+}
+function checkJwksUrl(url, allowInsecure) {
+    const { protocol, hostname } = new URL(url);
+    if (protocol === "https:" || allowInsecure)
+        return;
+    if (protocol === "http:" && isLoopback(hostname))
+        return;
+    throw new Error(`JWKS URL must use https, got ${JSON.stringify(url)}; pass ` +
+        "allowInsecureJwks: true only if the network path to LangSmith is trusted");
+}
+function jwksUrlFrom(apiUrl) {
+    return new URL(JWKS_PATH, new URL(apiUrl).origin).toString();
+}
+function serviceHost(audience) {
+    return audience.includes("://") ? new URL(audience).host : audience;
+}
+function toBytes(body) {
+    if (typeof body === "string")
+        return new TextEncoder().encode(body);
+    if (body instanceof ArrayBuffer)
+        return new Uint8Array(body);
+    return new Uint8Array(body);
+}
+function hex(buf) {
+    return Array.from(new Uint8Array(buf), (b) => b.toString(16).padStart(2, "0")).join("");
+}
+function timingSafeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++)
+        diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    return diff === 0;
+}
+/**
+ * Verifies tokens LangSmith signs for code running in or behind a sandbox.
+ *
+ * Keys are fetched from LangSmith's JWKS endpoint and cached. Requires Web
+ * Crypto Ed25519 support (Node.js 20+, Deno, Bun, Cloudflare Workers).
+ *
+ * @example
+ * ```typescript
+ * const verifier = new SandboxTokenVerifier();
+ *
+ * // In an app served from a LangSmith-login service URL:
+ * const user = await verifier.verifyUserToken(
+ *   req.headers.get(USER_TOKEN_HEADER)!,
+ *   { audience: req.headers.get("host")! }
+ * );
+ *
+ * // In a proxy callback endpoint:
+ * const callback = await verifier.verifyCallback({
+ *   body: await req.text(),
+ *   signature: req.headers.get(CALLBACK_SIGNATURE_HEADER)!,
+ *   aud: "https://example.com/sandbox-callback",
+ * });
+ * ```
+ */
+class SandboxTokenVerifier {
+    constructor(config = {}) {
+        Object.defineProperty(this, "jwksUrl", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "timeoutMs", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        Object.defineProperty(this, "keys", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: new Map()
+        });
+        Object.defineProperty(this, "fetchedAt", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: 0
+        });
+        Object.defineProperty(this, "inflight", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: void 0
+        });
+        this.jwksUrl =
+            config.jwksUrl ??
+                jwksUrlFrom(config.apiUrl ??
+                    (0, env_js_1.getLangSmithEnvironmentVariable)("ENDPOINT") ??
+                    "https://api.smith.langchain.com");
+        checkJwksUrl(this.jwksUrl, config.allowInsecureJwks ?? false);
+        this.timeoutMs = config.timeoutMs ?? 10000;
+    }
+    /**
+     * Verify the `X-Langsmith-User-Token` header of a service URL request.
+     *
+     * LangSmith sets this header only for service URLs that use LangSmith login.
+     * Code that knows it is running in a sandbox can instead trust the unsigned
+     * `X-Langsmith-User-Id` and `X-Langsmith-User-Email` headers, which the
+     * sandbox runtime strips from inbound requests and sets itself; verify this
+     * token when that is not guaranteed.
+     */
+    async verifyUserToken(token, options) {
+        const claims = await this.verify(token, serviceHost(options.audience), options.issuer);
+        const sub = claims.sub;
+        if (typeof sub !== "string" || !sub || sub === CALLBACK_SUBJECT) {
+            fail("token is not a user token");
+        }
+        return {
+            subject: sub,
+            email: typeof claims.email === "string" && claims.email
+                ? claims.email
+                : undefined,
+            name: typeof claims.name === "string" && claims.name
+                ? claims.name
+                : undefined,
+            expiresAt: new Date(claims.exp * 1000),
+        };
+    }
+    /** Verify a proxy callback request and return its parsed payload. */
+    async verifyCallback(options) {
+        const claims = await this.verify(options.signature, options.aud, options.issuer);
+        if (claims.sub !== CALLBACK_SUBJECT) {
+            fail("signature is not a callback signature");
+        }
+        const expected = claims.body_sha256;
+        if (typeof expected !== "string")
+            fail("signature has no body hash");
+        const raw = toBytes(options.body);
+        const digest = hex(await subtle().digest("SHA-256", raw));
+        if (!timingSafeEqual(expected, digest))
+            fail("body does not match signature");
+        let payload;
+        try {
+            payload = JSON.parse(new TextDecoder().decode(raw));
+        }
+        catch (e) {
+            fail(`malformed callback body: ${e.message}`);
+        }
+        const id = payload?.identity;
+        if (typeof payload?.host !== "string" ||
+            typeof payload.port !== "number" ||
+            typeof id?.tenant_id !== "string" ||
+            typeof id.sandbox_id !== "string") {
+            fail("malformed callback body");
+        }
+        return payload;
+    }
+    async verify(token, audience, issuer) {
+        const parts = token ? token.split(".") : [];
+        if (parts.length !== 3)
+            fail("malformed token");
+        let header;
+        let claims;
+        let signature;
+        try {
+            header = decodeJson(parts[0]);
+            claims = decodeJson(parts[1]);
+            signature = base64UrlDecode(parts[2]);
+        }
+        catch (e) {
+            fail(`malformed token: ${e.message}`);
+        }
+        if (header.alg !== "EdDSA") {
+            fail(`unexpected signing algorithm: ${JSON.stringify(header.alg)}`);
+        }
+        if (typeof header.kid !== "string" || !header.kid)
+            fail("token has no kid");
+        const key = await this.key(header.kid);
+        const signed = new TextEncoder().encode(`${parts[0]}.${parts[1]}`);
+        if (!(await subtle().verify({ name: "Ed25519" }, key, signature, signed))) {
+            fail("invalid signature");
+        }
+        const now = Date.now() / 1000;
+        const { exp, iat, nbf, iss, aud } = claims;
+        if (typeof exp !== "number")
+            fail("token has no exp");
+        if (now > exp + LEEWAY_SECONDS)
+            fail("token is expired");
+        if (typeof iat !== "number")
+            fail("token has no iat");
+        if (iat > now + LEEWAY_SECONDS)
+            fail("token is not yet valid");
+        if (nbf !== undefined &&
+            (typeof nbf !== "number" || nbf > now + LEEWAY_SECONDS)) {
+            fail("token is not yet valid");
+        }
+        if (typeof iss !== "string")
+            fail("token has no iss");
+        if (issuer !== undefined && iss !== issuer.replace(/\/+$/, "")) {
+            fail("token has the wrong issuer");
+        }
+        const audiences = typeof aud === "string" ? [aud] : Array.isArray(aud) ? aud : [];
+        const matches = typeof audience === "function"
+            ? audiences.some((a) => typeof a === "string" && audience(a))
+            : audiences.includes(audience);
+        if (audience !== undefined && !matches) {
+            fail("token has the wrong audience");
+        }
+        return claims;
+    }
+    async key(kid) {
+        const age = Date.now() - this.fetchedAt;
+        const fresh = this.keys.has(kid) && age < JWKS_TTL_MS;
+        if (!fresh && (this.fetchedAt === 0 || age >= JWKS_MIN_REFRESH_MS)) {
+            this.inflight ?? (this.inflight = this.refresh().finally(() => {
+                this.inflight = undefined;
+            }));
+            await this.inflight;
+        }
+        const key = this.keys.get(kid);
+        if (!key)
+            fail(`unknown signing key: ${kid}`);
+        try {
+            return await key;
+        }
+        catch (e) {
+            fail(`signing key ${kid} is not a usable Ed25519 key: ${e.message}`);
+        }
+    }
+    async refresh() {
+        let body;
+        try {
+            const resp = await fetch(this.jwksUrl, {
+                signal: AbortSignal.timeout(this.timeoutMs),
+            });
+            if (!resp.ok)
+                throw new Error(`HTTP ${resp.status}`);
+            body = await resp.json();
+        }
+        catch (e) {
+            fail(`failed to fetch JWKS from ${this.jwksUrl}: ${e.message}`);
+        }
+        const entries = body?.keys;
+        if (!Array.isArray(entries)) {
+            fail("invalid JWKS: expected an object with a keys array");
+        }
+        const keys = new Map();
+        for (const jwk of entries) {
+            if (typeof jwk !== "object" || jwk === null)
+                continue;
+            if (jwk.kty !== "OKP" || jwk.crv !== "Ed25519" || !jwk.kid || !jwk.x)
+                continue;
+            const imported = subtle().importKey("jwk", { kty: "OKP", crv: "Ed25519", x: jwk.x }, { name: "Ed25519" }, false, ["verify"]);
+            imported.catch(() => undefined);
+            keys.set(jwk.kid, imported);
+        }
+        this.keys = keys;
+        this.fetchedAt = Date.now();
+    }
+}
+exports.SandboxTokenVerifier = SandboxTokenVerifier;
+//# sourceMappingURL=verify.js.map

package/lib/sandbox/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../src/lib/sandbox/verify.ts"],"names":[],"mappings":";;;AAAA,4CAAkE;AAClE,2CAAqE;AAErE,oFAAoF;AACvE,QAAA,iBAAiB,GAAG,wBAAwB,CAAC;AAE1D,iEAAiE;AACpD,QAAA,yBAAyB,GAAG,2BAA2B,CAAC;AAErE,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AACtD,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAC3C,MAAM,WAAW,GAAG,MAAO,CAAC;AAC5B,kEAAkE;AAClE,MAAM,mBAAmB,GAAG,KAAM,CAAC;AACnC,MAAM,cAAc,GAAG,EAAE,CAAC;AA0F1B,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,kDAAsC,CAAC,OAAO,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,MAAM;IACb,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;IACpC,IAAI,CAAC,CAAC;QAAE,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,KAAe,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,OAAO,CACL,QAAQ,KAAK,WAAW;QACxB,QAAQ,KAAK,OAAO;QACpB,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CACrC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,aAAsB;IACvD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,QAAQ,IAAI,aAAa;QAAE,OAAO;IACnD,IAAI,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IACzD,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS;QAC1D,0EAA0E,CAC7E,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CACd,IAAuC;IAEvC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,IAAI,YAAY,WAAW;QAAE,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,GAAG,CAAC,GAAgB;IAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAC3C,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAChC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7E,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,oBAAoB;IAO/B,YAAY,SAAqC,EAAE;QANlC;;;;;WAAgB;QAChB;;;;;WAAkB;QAC3B;;;;mBAAO,IAAI,GAAG,EAA8B;WAAC;QAC7C;;;;mBAAY,CAAC;WAAC;QACd;;;;;WAAyB;QAG/B,IAAI,CAAC,OAAO;YACV,MAAM,CAAC,OAAO;gBACd,WAAW,CACT,MAAM,CAAC,MAAM;oBACX,IAAA,wCAA+B,EAAC,UAAU,CAAC;oBAC3C,iCAAiC,CACpC,CAAC;QACJ,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,KAAM,CAAC;IAC9C,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,eAAe,CACnB,KAAa,EACb,OAA+B;QAE/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAC9B,KAAK,EACL,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,EAC7B,OAAO,CAAC,MAAM,CACf,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,gBAAgB,EAAE,CAAC;YAChE,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACpC,CAAC;QACD,OAAO;YACL,OAAO,EAAE,GAAG;YACZ,KAAK,EACH,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK;gBAC9C,CAAC,CAAC,MAAM,CAAC,KAAK;gBACd,CAAC,CAAC,SAAS;YACf,IAAI,EACF,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI;gBAC5C,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,SAAS;YACf,SAAS,EAAE,IAAI,IAAI,CAAE,MAAM,CAAC,GAAc,GAAG,IAAI,CAAC;SACnD,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,cAAc,CAClB,OAA8B;QAE9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAC9B,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,MAAM,CACf,CAAC;QACF,IAAI,MAAM,CAAC,GAAG,KAAK,gBAAgB,EAAE,CAAC;YACpC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC;QACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC;YACpC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAExC,IAAI,OAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,4BAA6B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,EAAE,QAAQ,CAAC;QAC7B,IACE,OAAO,OAAO,EAAE,IAAI,KAAK,QAAQ;YACjC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAChC,OAAO,EAAE,EAAE,SAAS,KAAK,QAAQ;YACjC,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,EACjC,CAAC;YACD,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,KAAa,EACb,QAAqC,EACrC,MAA0B;QAE1B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChD,IAAI,MAAc,CAAC;QACnB,IAAI,MAAc,CAAC;QACnB,IAAI,SAAkC,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CAAC,oBAAqB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YAC3B,IAAI,CAAC,iCAAiC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAE5E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,MAAM,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YAC1E,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QAC9B,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;QAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,GAAG,GAAG,GAAG,GAAG,cAAc;YAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,GAAG,GAAG,GAAG,GAAG,cAAc;YAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC/D,IACE,GAAG,KAAK,SAAS;YACjB,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,GAAG,GAAG,GAAG,cAAc,CAAC,EACvD,CAAC;YACD,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,SAAS,GACb,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,OAAO,GACX,OAAO,QAAQ,KAAK,UAAU;YAC5B,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7D,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,GAAW;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,WAAW,CAAC;QACtD,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,GAAG,IAAI,mBAAmB,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,QAAQ,KAAb,IAAI,CAAC,QAAQ,GAAK,IAAI,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC5C,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC5B,CAAC,CAAC,EAAC;YACH,MAAM,IAAI,CAAC,QAAQ,CAAC;QACtB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC;QACnB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CACF,eAAe,GAAG,iCACf,CAAW,CAAC,OACf,EAAE,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;gBACrC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC5C,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACrD,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,CACF,6BAA6B,IAAI,CAAC,OAAO,KAAM,CAAW,CAAC,OAAO,EAAE,CACrE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAI,IAAkC,EAAE,IAAI,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8B,CAAC;QACnD,KAAK,MAAM,GAAG,IAAI,OAAyB,EAAE,CAAC;YAC5C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;gBAAE,SAAS;YACtD,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClE,SAAS;YACX,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,SAAS,CACjC,KAAK,EACL,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EACxC,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;YACF,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,CAAC;CACF;AA7MD,oDA6MC"}