@depup/mongodb 7.1.0-depup.0

package/lib/client-side-encryption/auto_encrypter.js

@@ -0,0 +1,272 @@
+"use strict";
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AutoEncrypter = exports.AutoEncryptionLoggerLevel = void 0;
+const net = require("net");
+const bson_1 = require("../bson");
+const constants_1 = require("../constants");
+const deps_1 = require("../deps");
+const error_1 = require("../error");
+const mongo_client_1 = require("../mongo_client");
+const utils_1 = require("../utils");
+const client_encryption_1 = require("./client_encryption");
+const errors_1 = require("./errors");
+const mongocryptd_manager_1 = require("./mongocryptd_manager");
+const providers_1 = require("./providers");
+const state_machine_1 = require("./state_machine");
+/** @public */
+exports.AutoEncryptionLoggerLevel = Object.freeze({
+    FatalError: 0,
+    Error: 1,
+    Warning: 2,
+    Info: 3,
+    Trace: 4
+});
+/**
+ * @internal An internal class to be used by the driver for auto encryption
+ * **NOTE**: Not meant to be instantiated directly, this is for internal use only.
+ */
+class AutoEncrypter {
+    static { _a = constants_1.kDecorateResult; }
+    /** @internal */
+    static getMongoCrypt() {
+        const encryption = (0, deps_1.getMongoDBClientEncryption)();
+        if ('kModuleError' in encryption) {
+            throw encryption.kModuleError;
+        }
+        return encryption.MongoCrypt;
+    }
+    /**
+     * Create an AutoEncrypter
+     *
+     * **Note**: Do not instantiate this class directly. Rather, supply the relevant options to a MongoClient
+     *
+     * **Note**: Supplying `options.schemaMap` provides more security than relying on JSON Schemas obtained from the server.
+     * It protects against a malicious server advertising a false JSON Schema, which could trick the client into sending unencrypted data that should be encrypted.
+     * Schemas supplied in the schemaMap only apply to configuring automatic encryption for Client-Side Field Level Encryption.
+     * Other validation rules in the JSON schema will not be enforced by the driver and will result in an error.
+     *
+     * @example <caption>Create an AutoEncrypter that makes use of mongocryptd</caption>
+     * ```ts
+     * // Enabling autoEncryption via a MongoClient using mongocryptd
+     * const { MongoClient } = require('mongodb');
+     * const client = new MongoClient(URL, {
+     *   autoEncryption: {
+     *     kmsProviders: {
+     *       aws: {
+     *         accessKeyId: AWS_ACCESS_KEY,
+     *         secretAccessKey: AWS_SECRET_KEY
+     *       }
+     *     }
+     *   }
+     * });
+     * ```
+     *
+     * await client.connect();
+     * // From here on, the client will be encrypting / decrypting automatically
+     * @example <caption>Create an AutoEncrypter that makes use of libmongocrypt's CSFLE shared library</caption>
+     * ```ts
+     * // Enabling autoEncryption via a MongoClient using CSFLE shared library
+     * const { MongoClient } = require('mongodb');
+     * const client = new MongoClient(URL, {
+     *   autoEncryption: {
+     *     kmsProviders: {
+     *       aws: {}
+     *     },
+     *     extraOptions: {
+     *       cryptSharedLibPath: '/path/to/local/crypt/shared/lib',
+     *       cryptSharedLibRequired: true
+     *     }
+     *   }
+     * });
+     * ```
+     *
+     * await client.connect();
+     * // From here on, the client will be encrypting / decrypting automatically
+     */
+    constructor(client, options) {
+        /**
+         * Used by devtools to enable decorating decryption results.
+         *
+         * When set and enabled, `decrypt` will automatically recursively
+         * traverse a decrypted document and if a field has been decrypted,
+         * it will mark it as decrypted.  Compass uses this to determine which
+         * fields were decrypted.
+         */
+        this[_a] = false;
+        this._client = client;
+        this._bypassEncryption = options.bypassAutoEncryption === true;
+        this._keyVaultNamespace = options.keyVaultNamespace || 'admin.datakeys';
+        this._keyVaultClient = options.keyVaultClient || client;
+        this._metaDataClient = options.metadataClient || client;
+        this._proxyOptions = options.proxyOptions || {};
+        this._tlsOptions = options.tlsOptions || {};
+        this._kmsProviders = options.kmsProviders || {};
+        this._credentialProviders = options.credentialProviders;
+        if (options.credentialProviders?.aws && !(0, providers_1.isEmptyCredentials)('aws', this._kmsProviders)) {
+            throw new errors_1.MongoCryptInvalidArgumentError('Can only provide a custom AWS credential provider when the state machine is configured for automatic AWS credential fetching');
+        }
+        const mongoCryptOptions = {
+            errorWrapper: errors_1.defaultErrorWrapper
+        };
+        if (options.schemaMap) {
+            mongoCryptOptions.schemaMap = Buffer.isBuffer(options.schemaMap)
+                ? options.schemaMap
+                : (0, bson_1.serialize)(options.schemaMap);
+        }
+        if (options.encryptedFieldsMap) {
+            mongoCryptOptions.encryptedFieldsMap = Buffer.isBuffer(options.encryptedFieldsMap)
+                ? options.encryptedFieldsMap
+                : (0, bson_1.serialize)(options.encryptedFieldsMap);
+        }
+        mongoCryptOptions.kmsProviders = !Buffer.isBuffer(this._kmsProviders)
+            ? (0, bson_1.serialize)(this._kmsProviders)
+            : this._kmsProviders;
+        if (options.options?.logger) {
+            mongoCryptOptions.logger = options.options.logger;
+        }
+        if (options.extraOptions && options.extraOptions.cryptSharedLibPath) {
+            mongoCryptOptions.cryptSharedLibPath = options.extraOptions.cryptSharedLibPath;
+        }
+        if (options.bypassQueryAnalysis) {
+            mongoCryptOptions.bypassQueryAnalysis = options.bypassQueryAnalysis;
+        }
+        if (options.keyExpirationMS != null) {
+            mongoCryptOptions.keyExpirationMS = options.keyExpirationMS;
+        }
+        this._bypassMongocryptdAndCryptShared = this._bypassEncryption || !!options.bypassQueryAnalysis;
+        if (options.extraOptions && options.extraOptions.cryptSharedLibSearchPaths) {
+            // Only for driver testing
+            mongoCryptOptions.cryptSharedLibSearchPaths = options.extraOptions.cryptSharedLibSearchPaths;
+        }
+        else if (!this._bypassMongocryptdAndCryptShared) {
+            mongoCryptOptions.cryptSharedLibSearchPaths = ['$SYSTEM'];
+        }
+        const MongoCrypt = AutoEncrypter.getMongoCrypt();
+        this._mongocrypt = new MongoCrypt(mongoCryptOptions);
+        this._contextCounter = 0;
+        if (options.extraOptions &&
+            options.extraOptions.cryptSharedLibRequired &&
+            !this.cryptSharedLibVersionInfo) {
+            throw new errors_1.MongoCryptInvalidArgumentError('`cryptSharedLibRequired` set but no crypt_shared library loaded');
+        }
+        // Only instantiate mongocryptd manager/client once we know for sure
+        // that we are not using the CSFLE shared library.
+        if (!this._bypassMongocryptdAndCryptShared && !this.cryptSharedLibVersionInfo) {
+            this._mongocryptdManager = new mongocryptd_manager_1.MongocryptdManager(options.extraOptions);
+            const clientOptions = {
+                serverSelectionTimeoutMS: 10000
+            };
+            if ((options.extraOptions == null || typeof options.extraOptions.mongocryptdURI !== 'string') &&
+                !net.getDefaultAutoSelectFamily) {
+                // Only set family if autoSelectFamily options are not supported.
+                clientOptions.family = 4;
+            }
+            // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+            // @ts-ignore: TS complains as this always returns true on versions where it is present.
+            if (net.getDefaultAutoSelectFamily) {
+                // AutoEncrypter is made inside of MongoClient constructor while options are being parsed,
+                // we do not have access to the options that are in progress.
+                // TODO(NODE-6449): AutoEncrypter does not use client options for autoSelectFamily
+                Object.assign(clientOptions, (0, client_encryption_1.autoSelectSocketOptions)(this._client.s?.options ?? {}));
+            }
+            this._mongocryptdClient = new mongo_client_1.MongoClient(this._mongocryptdManager.uri, clientOptions);
+        }
+    }
+    /**
+     * Initializes the auto encrypter by spawning a mongocryptd and connecting to it.
+     *
+     * This function is a no-op when bypassSpawn is set or the crypt shared library is used.
+     */
+    async init() {
+        if (this._bypassMongocryptdAndCryptShared || this.cryptSharedLibVersionInfo) {
+            return;
+        }
+        if (!this._mongocryptdManager) {
+            throw new error_1.MongoRuntimeError('Reached impossible state: mongocryptdManager is undefined when neither bypassSpawn nor the shared lib are specified.');
+        }
+        if (!this._mongocryptdClient) {
+            throw new error_1.MongoRuntimeError('Reached impossible state: mongocryptdClient is undefined when neither bypassSpawn nor the shared lib are specified.');
+        }
+        if (!this._mongocryptdManager.bypassSpawn) {
+            await this._mongocryptdManager.spawn();
+        }
+        try {
+            const client = await this._mongocryptdClient.connect();
+            return client;
+        }
+        catch (error) {
+            throw new error_1.MongoRuntimeError('Unable to connect to `mongocryptd`, please make sure it is running or in your PATH for auto-spawn', { cause: error });
+        }
+    }
+    /**
+     * Cleans up the `_mongocryptdClient`, if present.
+     */
+    async close() {
+        await this._mongocryptdClient?.close();
+    }
+    /**
+     * Encrypt a command for a given namespace.
+     */
+    async encrypt(ns, cmd, options = {}) {
+        options.signal?.throwIfAborted();
+        if (this._bypassEncryption) {
+            // If `bypassAutoEncryption` has been specified, don't encrypt
+            return cmd;
+        }
+        const commandBuffer = Buffer.isBuffer(cmd) ? cmd : (0, bson_1.serialize)(cmd, options);
+        const context = this._mongocrypt.makeEncryptionContext(utils_1.MongoDBCollectionNamespace.fromString(ns).db, commandBuffer);
+        context.id = this._contextCounter++;
+        context.ns = ns;
+        context.document = cmd;
+        const stateMachine = new state_machine_1.StateMachine({
+            promoteValues: false,
+            promoteLongs: false,
+            proxyOptions: this._proxyOptions,
+            tlsOptions: this._tlsOptions,
+            socketOptions: (0, client_encryption_1.autoSelectSocketOptions)(this._client.s.options)
+        });
+        return (0, bson_1.deserialize)(await stateMachine.execute(this, context, options), {
+            promoteValues: false,
+            promoteLongs: false
+        });
+    }
+    /**
+     * Decrypt a command response
+     */
+    async decrypt(response, options = {}) {
+        options.signal?.throwIfAborted();
+        const context = this._mongocrypt.makeDecryptionContext(response);
+        context.id = this._contextCounter++;
+        const stateMachine = new state_machine_1.StateMachine({
+            ...options,
+            proxyOptions: this._proxyOptions,
+            tlsOptions: this._tlsOptions,
+            socketOptions: (0, client_encryption_1.autoSelectSocketOptions)(this._client.s.options)
+        });
+        return await stateMachine.execute(this, context, options);
+    }
+    /**
+     * Ask the user for KMS credentials.
+     *
+     * This returns anything that looks like the kmsProviders original input
+     * option. It can be empty, and any provider specified here will override
+     * the original ones.
+     */
+    async askForKMSCredentials() {
+        return await (0, providers_1.refreshKMSCredentials)(this._kmsProviders, this._credentialProviders);
+    }
+    /**
+     * Return the current libmongocrypt's CSFLE shared library version
+     * as `{ version: bigint, versionStr: string }`, or `null` if no CSFLE
+     * shared library was loaded.
+     */
+    get cryptSharedLibVersionInfo() {
+        return this._mongocrypt.cryptSharedLibVersionInfo;
+    }
+    static get libmongocryptVersion() {
+        return AutoEncrypter.getMongoCrypt().libmongocryptVersion;
+    }
+}
+exports.AutoEncrypter = AutoEncrypter;
+//# sourceMappingURL=auto_encrypter.js.map

package/lib/client-side-encryption/auto_encrypter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto_encrypter.js","sourceRoot":"","sources":["../../src/client-side-encryption/auto_encrypter.ts"],"names":[],"mappings":";;;;AACA,2BAA2B;AAE3B,kCAAgE;AAEhE,4CAA+C;AAC/C,kCAAqD;AACrD,oCAA6C;AAC7C,kDAAuE;AAEvE,oCAAsD;AACtD,2DAA8D;AAC9D,qCAA+E;AAC/E,+DAA2D;AAC3D,2CAKqB;AACrB,mDAAwE;AAsGxE,cAAc;AACD,QAAA,yBAAyB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrD,UAAU,EAAE,CAAC;IACb,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACA,CAAC,CAAC;AAiBZ;;;GAGG;AACH,MAAa,aAAa;kBA2BvB,2BAAe;IAEhB,gBAAgB;IAChB,MAAM,CAAC,aAAa;QAClB,MAAM,UAAU,GAAG,IAAA,iCAA0B,GAAE,CAAC;QAChD,IAAI,cAAc,IAAI,UAAU,EAAE,CAAC;YACjC,MAAM,UAAU,CAAC,YAAY,CAAC;QAChC,CAAC;QACD,OAAO,UAAU,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA+CG;IACH,YAAY,MAAmB,EAAE,OAA8B;QAnE/D;;;;;;;WAOG;QACH,QAAiB,GAAG,KAAK,CAAC;QA4DxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,KAAK,IAAI,CAAC;QAE/D,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,IAAI,gBAAgB,CAAC;QACxE,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC;QACxD,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,IAAI,MAAM,CAAC;QACxD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QAExD,IAAI,OAAO,CAAC,mBAAmB,EAAE,GAAG,IAAI,CAAC,IAAA,8BAAkB,EAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,uCAA8B,CACtC,8HAA8H,CAC/H,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,GAAsB;YAC3C,YAAY,EAAE,4BAAmB;SAClC,CAAC;QACF,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,iBAAiB,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC9D,CAAC,CAAC,OAAO,CAAC,SAAS;gBACnB,CAAC,CAAE,IAAA,gBAAS,EAAC,OAAO,CAAC,SAAS,CAAY,CAAC;QAC/C,CAAC;QAED,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;YAC/B,iBAAiB,CAAC,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,kBAAkB,CAAC;gBAChF,CAAC,CAAC,OAAO,CAAC,kBAAkB;gBAC5B,CAAC,CAAE,IAAA,gBAAS,EAAC,OAAO,CAAC,kBAAkB,CAAY,CAAC;QACxD,CAAC;QAED,iBAAiB,CAAC,YAAY,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;YACnE,CAAC,CAAE,IAAA,gBAAS,EAAC,IAAI,CAAC,aAAa,CAAY;YAC3C,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;QAEvB,IAAI,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;YAC5B,iBAAiB,CAAC,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACpD,CAAC;QAED,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,kBAAkB,EAAE,CAAC;YACpE,iBAAiB,CAAC,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,kBAAkB,CAAC;QACjF,CAAC;QAED,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;YAChC,iBAAiB,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC;QACtE,CAAC;QAED,IAAI,OAAO,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;YACpC,iBAAiB,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAEhG,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,yBAAyB,EAAE,CAAC;YAC3E,0BAA0B;YAC1B,iBAAiB,CAAC,yBAAyB,GAAG,OAAO,CAAC,YAAY,CAAC,yBAAyB,CAAC;QAC/F,CAAC;aAAM,IAAI,CAAC,IAAI,CAAC,gCAAgC,EAAE,CAAC;YAClD,iBAAiB,CAAC,yBAAyB,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,EAAE,CAAC;QACjD,IAAI,CAAC,WAAW,GAAG,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACrD,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QAEzB,IACE,OAAO,CAAC,YAAY;YACpB,OAAO,CAAC,YAAY,CAAC,sBAAsB;YAC3C,CAAC,IAAI,CAAC,yBAAyB,EAC/B,CAAC;YACD,MAAM,IAAI,uCAA8B,CACtC,iEAAiE,CAClE,CAAC;QACJ,CAAC;QAED,oEAAoE;QACpE,kDAAkD;QAClD,IAAI,CAAC,IAAI,CAAC,gCAAgC,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC9E,IAAI,CAAC,mBAAmB,GAAG,IAAI,wCAAkB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACxE,MAAM,aAAa,GAAuB;gBACxC,wBAAwB,EAAE,KAAK;aAChC,CAAC;YAEF,IACE,CAAC,OAAO,CAAC,YAAY,IAAI,IAAI,IAAI,OAAO,OAAO,CAAC,YAAY,CAAC,cAAc,KAAK,QAAQ,CAAC;gBACzF,CAAC,GAAG,CAAC,0BAA0B,EAC/B,CAAC;gBACD,iEAAiE;gBACjE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3B,CAAC;YAED,6DAA6D;YAC7D,wFAAwF;YACxF,IAAI,GAAG,CAAC,0BAA0B,EAAE,CAAC;gBACnC,0FAA0F;gBAC1F,6DAA6D;gBAC7D,kFAAkF;gBAClF,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,IAAA,2CAAuB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC;YAED,IAAI,CAAC,kBAAkB,GAAG,IAAI,0BAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,gCAAgC,IAAI,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC5E,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,MAAM,IAAI,yBAAiB,CACzB,sHAAsH,CACvH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,IAAI,yBAAiB,CACzB,qHAAqH,CACtH,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACzC,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,CAAC;YACvD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,yBAAiB,CACzB,mGAAmG,EACnG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,EAAU,EACV,GAAa,EACb,UAAsC,EAAE;QAExC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,8DAA8D;YAC9D,OAAO,GAAG,CAAC;QACb,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAA,gBAAS,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,qBAAqB,CACpD,kCAA0B,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,EAC5C,aAAa,CACd,CAAC;QAEF,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC;QAChB,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;QAEvB,MAAM,YAAY,GAAG,IAAI,4BAAY,CAAC;YACpC,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,aAAa,EAAE,IAAA,2CAAuB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;SAC/D,CAAC,CAAC;QAEH,OAAO,IAAA,kBAAW,EAAC,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE;YACrE,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,QAAoB,EACpB,UAAsC,EAAE;QAExC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAEjC,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAEjE,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAEpC,MAAM,YAAY,GAAG,IAAI,4BAAY,CAAC;YACpC,GAAG,OAAO;YACV,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,aAAa,EAAE,IAAA,2CAAuB,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;SAC/D,CAAC,CAAC;QAEH,OAAO,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,oBAAoB;QACxB,OAAO,MAAM,IAAA,iCAAqB,EAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpF,CAAC;IAED;;;;OAIG;IACH,IAAI,yBAAyB;QAC3B,OAAO,IAAI,CAAC,WAAW,CAAC,yBAAyB,CAAC;IACpD,CAAC;IAED,MAAM,KAAK,oBAAoB;QAC7B,OAAO,aAAa,CAAC,aAAa,EAAE,CAAC,oBAAoB,CAAC;IAC5D,CAAC;CACF;AA9TD,sCA8TC"}