@effect/sql-pg 4.0.0-rc.111 → 4.0.0-rc.112

package/ai-docs/package.json

@@ -27,7 +27,7 @@
     "@effect/sql-sqlite-wasm": "workspace:*",
     "@effect/vitest": "workspace:*",
     "effect": "workspace:*",
-    "hono": "^4.13.2",
+    "hono": "^4.13.3",
     "nodemailer": "^9.0.5"
   },
   "devDependencies": {

package/dist/PgAuth.d.ts

@@ -0,0 +1,69 @@
+import * as Result from "effect/Result";
+declare const AuthError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "PgAuthError";
+} & Readonly<A>;
+/**
+ * Failure returned when an authentication exchange cannot be completed.
+ *
+ * @category errors
+ * @since 4.0.0
+ */
+export declare class AuthError extends AuthError_base<{
+    readonly message: string;
+}> {
+}
+export declare const md5Password: (options: {
+    readonly user: string;
+    readonly password: string;
+    readonly salt: Uint8Array;
+}) => Result.Result<string, AuthError>;
+/**
+ * The only SASL mechanism this module implements.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
+export declare const SCRAM_SHA_256 = "SCRAM-SHA-256";
+/**
+ * State after the client's first message, awaiting the server's challenge.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
+export interface ScramFirst {
+    readonly _tag: "ScramFirst";
+    readonly password: string;
+    readonly clientNonce: string;
+    readonly clientFirstMessageBare: string;
+}
+/**
+ * State after the client's final message, awaiting the server signature.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
+export interface ScramFinal {
+    readonly _tag: "ScramFinal";
+    readonly serverSignature: Uint8Array;
+}
+/**
+ * The SCRAM exchange state.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
+export type ScramState = ScramFirst | ScramFinal;
+export declare const scramInit: (options: {
+    readonly password: string;
+    readonly nonce: string;
+}) => Result.Result<{
+    readonly state: ScramFirst;
+    readonly response: Uint8Array;
+}, AuthError>;
+export declare const scramContinue: (state: ScramFirst, challenge: Uint8Array) => Result.Result<{
+    readonly state: ScramFinal;
+    readonly response: Uint8Array;
+}, AuthError>;
+export declare const scramFinish: (state: ScramFinal, challenge: Uint8Array) => Result.Result<void, AuthError>;
+export {};
+//# sourceMappingURL=PgAuth.d.ts.map

package/dist/PgAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PgAuth.d.ts","sourceRoot":"","sources":["../src/PgAuth.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;;;;AAGvC;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,eAAgC;IAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB,CAAC;CAAG;AAwEL,eAAO,MAAM,WAAW,YAAa;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAC1B,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAA6C,CAAA;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAA;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAA;CACrC;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;AAuDhD,eAAO,MAAM,SAAS,YAAa;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,KAAG,MAAM,CAAC,MAAM,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,EAAE,SAAS,CAClD,CAAA;AAqDxC,eAAO,MAAM,aAAa,UACjB,UAAU,aACN,UAAU,KACpB,MAAM,CAAC,MAAM,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,EAAE,SAAS,CACpC,CAAA;AAsBrD,eAAO,MAAM,WAAW,UACf,UAAU,aACN,UAAU,KACpB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAsD,CAAA"}

package/dist/PgAuth.js

@@ -0,0 +1,202 @@
+/**
+ * Password authentication for the PostgreSQL protocol: MD5 and
+ * SCRAM-SHA-256.
+ *
+ * Message framing lives in `PgProtocol` - SASL payloads travel as opaque
+ * bytes - so this module only computes what goes inside them. Cleartext
+ * authentication needs nothing from here; send the password as a
+ * `PasswordMessage`.
+ *
+ * `SCRAM-SHA-256-PLUS` is not implemented: channel binding needs the TLS
+ * socket, which this codec does not own. Passwords are used as UTF-8 without
+ * SASLprep normalisation, so non-ASCII passwords that require normalisation
+ * are not supported.
+ *
+ * @since 4.0.0
+ */
+import * as Data from "effect/Data";
+import * as Encoding from "effect/Encoding";
+import * as Result from "effect/Result";
+import { createHash, createHmac, pbkdf2Sync } from "node:crypto";
+/**
+ * Failure returned when an authentication exchange cannot be completed.
+ *
+ * @category errors
+ * @since 4.0.0
+ */
+export class AuthError extends /*#__PURE__*/Data.TaggedError("PgAuthError") {}
+const fail = message => {
+  throw new AuthError({
+    message
+  });
+};
+const result = evaluate => {
+  try {
+    return Result.succeed(evaluate());
+  } catch (error) {
+    if (error instanceof AuthError) return Result.fail(error);
+    throw error;
+  }
+};
+const textEncoder = /*#__PURE__*/new TextEncoder();
+const textDecoder = /*#__PURE__*/new TextDecoder("utf-8", {
+  fatal: true
+});
+const bytesOf = value => Uint8Array.from(value);
+const sha256 = data => bytesOf(createHash("sha256").update(data).digest());
+const hmacSha256 = (key, data) => bytesOf(createHmac("sha256", key).update(data).digest());
+const xor = (left, right) => {
+  const result = new Uint8Array(left.length);
+  for (let i = 0; i < left.length; i++) {
+    result[i] = left[i] ^ right[i];
+  }
+  return result;
+};
+const toBase64 = bytes => Encoding.encodeBase64(bytes);
+const fromBase64 = (text, field) => {
+  const decoded = Encoding.decodeBase64(text);
+  if (Result.isFailure(decoded)) {
+    return fail(`Invalid base64 in SCRAM attribute "${field}"`);
+  }
+  return decoded.success;
+};
+const decodeUtf8 = (bytes, what) => {
+  try {
+    return textDecoder.decode(bytes);
+  } catch {
+    return fail(`Invalid UTF-8 in ${what}`);
+  }
+};
+/**
+ * Computes the password string for an `AuthenticationMD5Password` challenge:
+ * `"md5" + md5(md5(password + user) + salt)`. Send the result verbatim as a
+ * `PasswordMessage`.
+ *
+ * @category MD5
+ * @since 4.0.0
+ */
+const md5PasswordUnsafe = options => {
+  if (options.salt.length !== 4) {
+    return fail(`PostgreSQL MD5 salt must be exactly 4 bytes, received ${options.salt.length}`);
+  }
+  const inner = createHash("md5").update(textEncoder.encode(options.password + options.user)).digest("hex");
+  const outer = createHash("md5").update(textEncoder.encode(inner)).update(options.salt).digest("hex");
+  return `md5${outer}`;
+};
+export const md5Password = options => result(() => md5PasswordUnsafe(options));
+/**
+ * The only SASL mechanism this module implements.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
+export const SCRAM_SHA_256 = "SCRAM-SHA-256";
+const GS2_HEADER = "n,,";
+/** Base64 of the GS2 header, the `c=` attribute value without channel binding. */
+const CHANNEL_BINDING = "biws";
+const parseAttributes = message => {
+  const attributes = new Map();
+  for (const part of message.split(",")) {
+    const separator = part.indexOf("=");
+    if (separator < 1) {
+      return fail(`Malformed SCRAM attribute: "${part}"`);
+    }
+    const key = part.slice(0, separator);
+    if (attributes.has(key)) {
+      return fail(`Duplicate SCRAM attribute "${key}"`);
+    }
+    attributes.set(key, part.slice(separator + 1));
+  }
+  return attributes;
+};
+const attribute = (attributes, key) => attributes.get(key) ?? fail(`Missing SCRAM attribute "${key}"`);
+/**
+ * Starts a SCRAM-SHA-256 exchange. The `nonce` must be a fresh, random,
+ * printable ASCII string chosen by the caller; this module never generates
+ * randomness.
+ *
+ * The successful result contains the `initialResponse` bytes for a
+ * `SASLInitialResponse` message with mechanism `SCRAM_SHA_256`.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
+const scramInitUnsafe = options => {
+  if (!/^[\x21-\x2b\x2d-\x7e]+$/.test(options.nonce)) {
+    return fail("SCRAM nonce must contain only printable ASCII characters other than comma");
+  }
+  const clientFirstMessageBare = `n=,r=${options.nonce}`;
+  return {
+    state: {
+      _tag: "ScramFirst",
+      password: options.password,
+      clientNonce: options.nonce,
+      clientFirstMessageBare
+    },
+    response: textEncoder.encode(GS2_HEADER + clientFirstMessageBare)
+  };
+};
+export const scramInit = options => result(() => scramInitUnsafe(options));
+/**
+ * Answers an `AuthenticationSASLContinue` challenge.
+ *
+ * The successful result contains the payload bytes for a `SASLResponse`
+ * message.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
+const scramContinueUnsafe = (state, challenge) => {
+  const serverFirstMessage = decodeUtf8(challenge, "the SCRAM server-first-message");
+  const attributes = parseAttributes(serverFirstMessage);
+  const nonce = attribute(attributes, "r");
+  if (!nonce.startsWith(state.clientNonce) || nonce.length === state.clientNonce.length) {
+    return fail("SCRAM server nonce does not extend the client nonce");
+  }
+  const saltText = attribute(attributes, "s");
+  if (saltText.length === 0) {
+    return fail("SCRAM salt must not be empty");
+  }
+  const salt = fromBase64(saltText, "s");
+  const iterationText = attribute(attributes, "i");
+  const iterations = Number(iterationText);
+  if (!/^[1-9]\d*$/.test(iterationText) || !Number.isSafeInteger(iterations) || iterations > 0x7fffffff) {
+    return fail(`Invalid SCRAM iteration count: ${iterationText}`);
+  }
+  const saltedPassword = bytesOf(pbkdf2Sync(textEncoder.encode(state.password), salt, iterations, 32, "sha256"));
+  const clientKey = hmacSha256(saltedPassword, textEncoder.encode("Client Key"));
+  const storedKey = sha256(clientKey);
+  const clientFinalMessageWithoutProof = `c=${CHANNEL_BINDING},r=${nonce}`;
+  const authMessage = textEncoder.encode(`${state.clientFirstMessageBare},${serverFirstMessage},${clientFinalMessageWithoutProof}`);
+  const clientProof = xor(clientKey, hmacSha256(storedKey, authMessage));
+  const serverKey = hmacSha256(saltedPassword, textEncoder.encode("Server Key"));
+  return {
+    state: {
+      _tag: "ScramFinal",
+      serverSignature: hmacSha256(serverKey, authMessage)
+    },
+    response: textEncoder.encode(`${clientFinalMessageWithoutProof},p=${toBase64(clientProof)}`)
+  };
+};
+export const scramContinue = (state, challenge) => result(() => scramContinueUnsafe(state, challenge));
+/**
+ * Verifies the server signature carried by `AuthenticationSASLFinal`. Returns
+ * `Result.void` on success and an `AuthError` failure when the server could
+ * not prove that it knows the stored key.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
+const scramFinishUnsafe = (state, challenge) => {
+  const attributes = parseAttributes(decodeUtf8(challenge, "the SCRAM server-final-message"));
+  const error = attributes.get("e");
+  if (error !== undefined) {
+    fail(`SCRAM authentication failed: ${error}`);
+  }
+  const signature = fromBase64(attribute(attributes, "v"), "v");
+  if (toBase64(state.serverSignature) !== toBase64(signature)) {
+    fail("SCRAM server signature mismatch");
+  }
+};
+export const scramFinish = (state, challenge) => result(() => scramFinishUnsafe(state, challenge));
+//# sourceMappingURL=PgAuth.js.map

package/dist/PgAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PgAuth.js","names":[],"sources":["../src/PgAuth.ts"],"sourcesContent":[null],"mappings":"AAAA;;;;;;;;;;;;;;;;AAgBA,OAAO,KAAK,IAAI,MAAM,aAAa;AACnC,OAAO,KAAK,QAAQ,MAAM,iBAAiB;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe;AACvC,SAAS,UAAU,EAAE,UAAU,EAAE,UAAU,QAAQ,aAAa;AAEhE;;;;;;AAMA,OAAM,MAAO,SAAU,sBAAQ,IAAI,CAAC,WAAW,CAAC,aAAa,CAE3D;AAEF,MAAM,IAAI,GAAI,OAAe,IAAW;EACtC,MAAM,IAAI,SAAS,CAAC;IAAE;EAAO,CAAE,CAAC;AAClC,CAAC;AAED,MAAM,MAAM,GAAO,QAAiB,IAAiC;EACnE,IAAI;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;EACnC,CAAC,CAAC,OAAO,KAAK,EAAE;IACd,IAAI,KAAK,YAAY,SAAS,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;IACzD,MAAM,KAAK;EACb;AACF,CAAC;AAED,MAAM,WAAW,gBAAG,IAAI,WAAW,EAAE;AACrC,MAAM,WAAW,gBAAG,IAAI,WAAW,CAAC,OAAO,EAAE;EAAE,KAAK,EAAE;AAAI,CAAE,CAAC;AAE7D,MAAM,OAAO,GAAI,KAAiB,IAAiB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;AAEzE,MAAM,MAAM,GAAI,IAAgB,IAAiB,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAEpG,MAAM,UAAU,GAAG,CAAC,GAAe,EAAE,IAAgB,KACnD,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAE1D,MAAM,GAAG,GAAG,CAAC,IAAgB,EAAE,KAAiB,KAAgB;EAC9D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;EAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;IACpC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;EAChC;EACA,OAAO,MAAM;AACf,CAAC;AAED,MAAM,QAAQ,GAAI,KAAiB,IAAa,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC;AAE5E,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAa,KAAgB;EAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;EAC3C,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;IAC7B,OAAO,IAAI,CAAC,sCAAsC,KAAK,GAAG,CAAC;EAC7D;EACA,OAAO,OAAO,CAAC,OAAO;AACxB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAE,IAAY,KAAY;EAC7D,IAAI;IACF,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;EAClC,CAAC,CAAC,MAAM;IACN,OAAO,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC;EACzC;AACF,CAAC;AAED;;;;;;;;AAQA,MAAM,iBAAiB,GAAI,OAI1B,IAAY;EACX,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;IAC7B,OAAO,IAAI,CAAC,yDAAyD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;EAC7F;EACA,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;EACzG,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;EACpG,OAAO,MAAM,KAAK,EAAE;AACtB,CAAC;AAED,OAAO,MAAM,WAAW,GAAI,OAI3B,IAAuC,MAAM,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAEhF;;;;;;AAMA,OAAO,MAAM,aAAa,GAAG,eAAe;AAkC5C,MAAM,UAAU,GAAG,KAAK;AACxB;AACA,MAAM,eAAe,GAAG,MAAM;AAE9B,MAAM,eAAe,GAAI,OAAe,IAAyB;EAC/D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB;EAC5C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,EAAE;MACjB,OAAO,IAAI,CAAC,+BAA+B,IAAI,GAAG,CAAC;IACrD;IACA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;IACpC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;MACvB,OAAO,IAAI,CAAC,8BAA8B,GAAG,GAAG,CAAC;IACnD;IACA,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;EAChD;EACA,OAAO,UAAU;AACnB,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,UAA+B,EAAE,GAAW,KAC7D,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,4BAA4B,GAAG,GAAG,CAAC;AAEjE;;;;;;;;;;;AAWA,MAAM,eAAe,GAAI,OAGxB,IAAmE;EAClE,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;IAClD,OAAO,IAAI,CAAC,2EAA2E,CAAC;EAC1F;EACA,MAAM,sBAAsB,GAAG,QAAQ,OAAO,CAAC,KAAK,EAAE;EACtD,OAAO;IACL,KAAK,EAAE;MACL,IAAI,EAAE,YAAY;MAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;MAC1B,WAAW,EAAE,OAAO,CAAC,KAAK;MAC1B;KACD;IACD,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,GAAG,sBAAsB;GACjE;AACH,CAAC;AAED,OAAO,MAAM,SAAS,GAAI,OAGzB,IACC,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;AAExC;;;;;;;;;AASA,MAAM,mBAAmB,GAAG,CAC1B,KAAiB,EACjB,SAAqB,KAC4C;EACjE,MAAM,kBAAkB,GAAG,UAAU,CAAC,SAAS,EAAE,gCAAgC,CAAC;EAClF,MAAM,UAAU,GAAG,eAAe,CAAC,kBAAkB,CAAC;EACtD,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC;EACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE;IACrF,OAAO,IAAI,CAAC,qDAAqD,CAAC;EACpE;EACA,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC;EAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;IACzB,OAAO,IAAI,CAAC,8BAA8B,CAAC;EAC7C;EACA,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;EACtC,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC;EAChD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC;EACxC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,UAAU,EAAE;IACrG,OAAO,IAAI,CAAC,kCAAkC,aAAa,EAAE,CAAC;EAChE;EAEA,MAAM,cAAc,GAAG,OAAO,CAC5B,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,CAC/E;EACD,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;EAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;EACnC,MAAM,8BAA8B,GAAG,KAAK,eAAe,MAAM,KAAK,EAAE;EACxE,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CACpC,GAAG,KAAK,CAAC,sBAAsB,IAAI,kBAAkB,IAAI,8BAA8B,EAAE,CAC1F;EACD,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;EACtE,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;EAE9E,OAAO;IACL,KAAK,EAAE;MACL,IAAI,EAAE,YAAY;MAClB,eAAe,EAAE,UAAU,CAAC,SAAS,EAAE,WAAW;KACnD;IACD,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,8BAA8B,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE;GAC5F;AACH,CAAC;AAED,OAAO,MAAM,aAAa,GAAG,CAC3B,KAAiB,EACjB,SAAqB,KAErB,MAAM,CAAC,MAAM,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAErD;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,CAAC,KAAiB,EAAE,SAAqB,KAAU;EAC3E,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;EAC3F,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;EACjC,IAAI,KAAK,KAAK,SAAS,EAAE;IACvB,IAAI,CAAC,gCAAgC,KAAK,EAAE,CAAC;EAC/C;EACA,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC;EAC7D,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,EAAE;IAC3D,IAAI,CAAC,iCAAiC,CAAC;EACzC;AACF,CAAC;AAED,OAAO,MAAM,WAAW,GAAG,CACzB,KAAiB,EACjB,SAAqB,KACc,MAAM,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC","ignoreList":[]}