@effect/sql-pg 4.0.0-rc.112 → 4.0.0-rc.113

package/AGENTS.md

@@ -11,9 +11,11 @@ purposes. In practice, you would not include these comments in your code.
 
 ## Writing `Effect` code
 
-Prefer writing Effect code with `Effect.gen` & `Effect.fn("name")`. Then attach
-additional behaviour with combinators. This style is more readable and easier to
-maintain than using combinators alone.
+Prefer `Effect.gen` for inline Effect code. For reusable functions, prefer
+`Effect.fn("name")` when tracing is useful and `Effect.fnUntraced` when it is not,
+particularly in library implementations and hot paths. Avoid functions that only
+wrap and return `Effect.gen`. Attach additional behaviour with combinators; this
+style is more readable and easier to maintain than using combinators alone.
 
 ### Using Effect.gen
 
@@ -46,13 +48,16 @@ export class FileProcessingError extends Schema.TaggedError<FileProcessingError>
 }) {}
 ```
 
-### Using Effect.fn
+### Using Effect.fn and Effect.fnUntraced
 
-When writing functions that return an Effect, use `Effect.fn` to use the
-generator syntax.
+When writing reusable functions that return an Effect, use `Effect.fn` or
+`Effect.fnUntraced` to use the generator syntax.
 
-**Avoid creating functions that return an Effect.gen**, use `Effect.fn`
-instead.
+Use `Effect.fn("name")` when the function should create a tracing span. Prefer
+`Effect.fnUntraced` when tracing is not needed, particularly for library
+implementations and hot paths.
+
+**Avoid creating functions that only wrap and return an `Effect.gen`**.
 
 ```ts
 import { Effect, Schema } from "effect"
@@ -80,6 +85,16 @@ export const effectFunction = Effect.fn("effectFunction")(
   })
 )
 
+// Effect.fnUntraced avoids tracing and stack-frame capture while still reusing
+// the generator body. This is preferred for library functions that do not
+// represent a useful tracing boundary.
+export const validateBatchSize = Effect.fnUntraced(function*(size: number): Effect.fn.Return<number, SomeError> {
+  if (!Number.isInteger(size) || size <= 0) {
+    return yield* new SomeError({ message: "Batch size must be a positive integer" })
+  }
+  return size
+})
+
 // Use Schema.TaggedError to define a custom error
 export class SomeError extends Schema.TaggedError<SomeError>()("SomeError", {
   message: Schema.String
@@ -247,7 +262,7 @@ They let you model finite or infinite data sources.
   - `NodeStream.fromReadable` for Node.js readable streams
 - **[Consuming and transforming streams](./ai-docs/src/03_stream/20_consuming-streams.ts)**: How to transform and consume streams using operators like `map`, `flatMap`, `filter`, `mapEffect`, and various `run*` methods.
 - **[Decoding and encoding streams](./ai-docs/src/03_stream/30_encoding.ts)**:
-  Use `Stream.pipeThroughChannel` with the `Ndjson` & `Msgpack` modules to
+  Use `Stream.pipeThroughChannel` with the `Ndjson` and `SchemaBinary` modules to
   decode and encode streams of structured data.
 
 ## Integrating Effect into existing applications

package/CLAUDE.md

@@ -11,9 +11,11 @@ purposes. In practice, you would not include these comments in your code.
 
 ## Writing `Effect` code
 
-Prefer writing Effect code with `Effect.gen` & `Effect.fn("name")`. Then attach
-additional behaviour with combinators. This style is more readable and easier to
-maintain than using combinators alone.
+Prefer `Effect.gen` for inline Effect code. For reusable functions, prefer
+`Effect.fn("name")` when tracing is useful and `Effect.fnUntraced` when it is not,
+particularly in library implementations and hot paths. Avoid functions that only
+wrap and return `Effect.gen`. Attach additional behaviour with combinators; this
+style is more readable and easier to maintain than using combinators alone.
 
 ### Using Effect.gen
 
@@ -46,13 +48,16 @@ export class FileProcessingError extends Schema.TaggedError<FileProcessingError>
 }) {}
 ```
 
-### Using Effect.fn
+### Using Effect.fn and Effect.fnUntraced
 
-When writing functions that return an Effect, use `Effect.fn` to use the
-generator syntax.
+When writing reusable functions that return an Effect, use `Effect.fn` or
+`Effect.fnUntraced` to use the generator syntax.
 
-**Avoid creating functions that return an Effect.gen**, use `Effect.fn`
-instead.
+Use `Effect.fn("name")` when the function should create a tracing span. Prefer
+`Effect.fnUntraced` when tracing is not needed, particularly for library
+implementations and hot paths.
+
+**Avoid creating functions that only wrap and return an `Effect.gen`**.
 
 ```ts
 import { Effect, Schema } from "effect"
@@ -80,6 +85,16 @@ export const effectFunction = Effect.fn("effectFunction")(
   })
 )
 
+// Effect.fnUntraced avoids tracing and stack-frame capture while still reusing
+// the generator body. This is preferred for library functions that do not
+// represent a useful tracing boundary.
+export const validateBatchSize = Effect.fnUntraced(function*(size: number): Effect.fn.Return<number, SomeError> {
+  if (!Number.isInteger(size) || size <= 0) {
+    return yield* new SomeError({ message: "Batch size must be a positive integer" })
+  }
+  return size
+})
+
 // Use Schema.TaggedError to define a custom error
 export class SomeError extends Schema.TaggedError<SomeError>()("SomeError", {
   message: Schema.String
@@ -247,7 +262,7 @@ They let you model finite or infinite data sources.
   - `NodeStream.fromReadable` for Node.js readable streams
 - **[Consuming and transforming streams](./ai-docs/src/03_stream/20_consuming-streams.ts)**: How to transform and consume streams using operators like `map`, `flatMap`, `filter`, `mapEffect`, and various `run*` methods.
 - **[Decoding and encoding streams](./ai-docs/src/03_stream/30_encoding.ts)**:
-  Use `Stream.pipeThroughChannel` with the `Ndjson` & `Msgpack` modules to
+  Use `Stream.pipeThroughChannel` with the `Ndjson` and `SchemaBinary` modules to
   decode and encode streams of structured data.
 
 ## Integrating Effect into existing applications

package/ai-docs/package.json

@@ -27,8 +27,8 @@
     "@effect/sql-sqlite-wasm": "workspace:*",
     "@effect/vitest": "workspace:*",
     "effect": "workspace:*",
-    "hono": "^4.13.3",
-    "nodemailer": "^9.0.5"
+    "hono": "^4.13.7",
+    "nodemailer": "^10.0.0"
   },
   "devDependencies": {
     "@types/nodemailer": "^8.0.1"

package/ai-docs/src/01_effect/01_basics/02_effect-fn.ts

@@ -1,11 +1,14 @@
 /**
- * @title Using Effect.fn
+ * @title Using Effect.fn and Effect.fnUntraced
  *
- * When writing functions that return an Effect, use `Effect.fn` to use the
- * generator syntax.
+ * When writing reusable functions that return an Effect, use `Effect.fn` or
+ * `Effect.fnUntraced` to use the generator syntax.
  *
- * **Avoid creating functions that return an Effect.gen**, use `Effect.fn`
- * instead.
+ * Use `Effect.fn("name")` when the function should create a tracing span. Prefer
+ * `Effect.fnUntraced` when tracing is not needed, particularly for library
+ * implementations and hot paths.
+ *
+ * **Avoid creating functions that only wrap and return an `Effect.gen`**.
  */
 
 import { Effect, Schema } from "effect"
@@ -33,6 +36,16 @@ export const effectFunction = Effect.fn("effectFunction")(
   })
 )
 
+// Effect.fnUntraced avoids tracing and stack-frame capture while still reusing
+// the generator body. This is preferred for library functions that do not
+// represent a useful tracing boundary.
+export const validateBatchSize = Effect.fnUntraced(function*(size: number): Effect.fn.Return<number, SomeError> {
+  if (!Number.isInteger(size) || size <= 0) {
+    return yield* new SomeError({ message: "Batch size must be a positive integer" })
+  }
+  return size
+})
+
 // Use Schema.TaggedError to define a custom error
 export class SomeError extends Schema.TaggedError<SomeError>()("SomeError", {
   message: Schema.String

package/ai-docs/src/01_effect/01_basics/index.md

@@ -1,5 +1,7 @@
 ## Writing `Effect` code
 
-Prefer writing Effect code with `Effect.gen` & `Effect.fn("name")`. Then attach
-additional behaviour with combinators. This style is more readable and easier to
-maintain than using combinators alone.
+Prefer `Effect.gen` for inline Effect code. For reusable functions, prefer
+`Effect.fn("name")` when tracing is useful and `Effect.fnUntraced` when it is not,
+particularly in library implementations and hot paths. Avoid functions that only
+wrap and return `Effect.gen`. Attach additional behaviour with combinators; this
+style is more readable and easier to maintain than using combinators alone.

package/ai-docs/src/01_effect/03_services/20_layer-composition.ts

@@ -14,7 +14,7 @@ export const SqlClientLayer: Layer.Layer<
   PgClient.PgClient | SqlClient.SqlClient,
   Config.ConfigError | SqlError.SqlError
 > = PgClient.layerConfig({
-  url: Config.redacted("DATABASE_URL")
+  url: Config.Redacted("DATABASE_URL")
 })
 
 export class UserRespositoryError extends Schema.TaggedError<UserRespositoryError>()("UserRespositoryError", {

package/ai-docs/src/01_effect/03_services/20_layer-unwrap.ts

@@ -51,7 +51,7 @@ export class MessageStore extends Context.Service<MessageStore, {
   static readonly layer = Layer.unwrap(
     Effect.gen(function*() {
       // Read config inside an Effect, then choose which concrete layer to use.
-      const useInMemory = yield* Config.boolean("MESSAGE_STORE_IN_MEMORY").pipe(
+      const useInMemory = yield* Config.Boolean("MESSAGE_STORE_IN_MEMORY").pipe(
         Config.withDefault(false)
       )
 
@@ -59,7 +59,7 @@ export class MessageStore extends Context.Service<MessageStore, {
         return MessageStore.layerInMemory
       }
 
-      const remoteUrl = yield* Config.url("MESSAGE_STORE_URL")
+      const remoteUrl = yield* Config.URL("MESSAGE_STORE_URL")
       return MessageStore.layerRemote(remoteUrl)
     })
   )

package/ai-docs/src/01_effect/05_resources/10_acquire-release.ts

@@ -22,8 +22,8 @@ export class Smtp extends Context.Service<Smtp, {
   static readonly layer = Layer.effect(
     Smtp,
     Effect.gen(function*() {
-      const user = yield* Config.string("SMTP_USER")
-      const pass = yield* Config.redacted("SMTP_PASS")
+      const user = yield* Config.String("SMTP_USER")
+      const pass = yield* Config.Redacted("SMTP_PASS")
 
       // Use `Effect.acquireRelease` to manage the lifecycle of the SMTP
       // transporter.

package/ai-docs/src/03_stream/30_encoding.ts

@@ -1,19 +1,17 @@
 /**
  * @title Decoding and encoding streams
  *
- * Use `Stream.pipeThroughChannel` with the `Ndjson` & `Msgpack` modules to
+ * Use `Stream.pipeThroughChannel` with the `Ndjson` and `SchemaBinary` modules to
  * decode and encode streams of structured data.
  */
 import { DateTime, Schema, Stream } from "effect"
-import { Msgpack, Ndjson } from "effect/unstable/encoding"
+import { Ndjson, SchemaBinary } from "effect/unstable/encoding"
 
-// All of the examples below can also be done with Msgpack by replacing `Ndjson`
-// with `Msgpack` and using the appropriate channels (`Msgpack.decode()`,
-// `Msgpack.encode()`, etc.).
-export const msgpackDecoder = Msgpack.decodeSchema(Schema.Struct({
+// SchemaBinary derives a framed binary decoder directly from a schema.
+export const schemaBinaryDecoder = SchemaBinary.decode(Schema.Struct({
   id: Schema.Int,
   name: Schema.String
-}))
+}))()
 
 // ---------------------------------------------------------------------------
 // Domain

package/ai-docs/src/08_observability/10_logging.ts

@@ -41,7 +41,7 @@ export const AppLoggerLayer = Logger.layer([appLogger]).pipe(
 // Create a logger layer that uses the default logger for development, and the
 // custom logger for production
 export const LoggerLayer = Layer.unwrap(Effect.gen(function*() {
-  const env = yield* Config.string("NODE_ENV").pipe(Config.withDefault("development"))
+  const env = yield* Config.String("NODE_ENV").pipe(Config.withDefault("development"))
   if (env === "production") {
     return AppLoggerLayer
   }

package/ai-docs/src/70_cli/10_basics.ts

@@ -10,7 +10,7 @@ import { Argument, Command, Flag } from "effect/unstable/cli"
 
 // You can define flags outside of commands and reuse them across multiple
 // commands.
-const workspace = Flag.string("workspace").pipe(
+const workspace = Flag.String("workspace").pipe(
   Flag.withAlias("w"),
   Flag.withDescription("Workspace to operate on"),
   Flag.withDefault("personal")
@@ -21,7 +21,7 @@ const workspace = Flag.string("workspace").pipe(
 const tasks = Command.make("tasks").pipe(
   Command.withSharedFlags({
     workspace,
-    verbose: Flag.boolean("verbose").pipe(
+    verbose: Flag.Boolean("verbose").pipe(
       Flag.withAlias("v"),
       Flag.withDescription("Print diagnostic output"),
       Flag.withDefault(false)
@@ -41,17 +41,17 @@ const Email = Schema.String.pipe(
 const create = Command.make(
   "create",
   {
-    title: Argument.string("title").pipe(
+    title: Argument.String("title").pipe(
       Argument.withDescription("Task title"),
       // Reject empty titles at parse time, so the handler only ever sees
       // valid input
       Argument.withSchema(Schema.NonEmptyString)
     ),
-    priority: Flag.choice("priority", ["low", "normal", "high"]).pipe(
+    priority: Flag.Literals("priority", ["low", "normal", "high"]).pipe(
       Flag.withDescription("Priority for the new task"),
       Flag.withDefault("normal")
     ),
-    assignee: Flag.string("assignee").pipe(
+    assignee: Flag.String("assignee").pipe(
       Flag.withDescription("Email address of the person to assign"),
       Flag.withSchema(Email),
       Flag.optional
@@ -88,11 +88,11 @@ const create = Command.make(
 const list = Command.make(
   "list",
   {
-    status: Flag.choice("status", ["open", "done", "all"]).pipe(
+    status: Flag.Literals("status", ["open", "done", "all"]).pipe(
       Flag.withDescription("Filter tasks by status"),
       Flag.withDefault("open")
     ),
-    json: Flag.boolean("json").pipe(
+    json: Flag.Boolean("json").pipe(
       Flag.withDescription("Print machine-readable output"),
       Flag.withDefault(false)
     )

package/ai-docs/src/71_ai/10_language-model.ts

@@ -13,7 +13,7 @@ import { LaunchPlan } from "./fixtures/domain/LaunchPlan.ts"
 
 // You can use Config to create ai clients
 const AnthropicClientLayer = AnthropicClient.layerConfig({
-  apiKey: Config.redacted("ANTHROPIC_API_KEY")
+  apiKey: Config.Redacted("ANTHROPIC_API_KEY")
 }).pipe(
   // Providers typically require an HttpClient, but you can choose which one to
   // use.
@@ -21,7 +21,7 @@ const AnthropicClientLayer = AnthropicClient.layerConfig({
 )
 
 const OpenAiClientLayer = OpenAiClient.layerConfig({
-  apiKey: Config.redacted("OPENAI_API_KEY")
+  apiKey: Config.Redacted("OPENAI_API_KEY")
 }).pipe(
   Layer.provide(FetchHttpClient.layer)
 )

package/ai-docs/src/71_ai/20_tools.ts

@@ -101,7 +101,7 @@ const ProductToolkitLayer = ProductToolkit.toLayer(Effect.gen(function*() {
 
 // Provider setup (same pattern as the language-model example).
 const OpenAiClientLayer = OpenAiClient.layerConfig({
-  apiKey: Config.redacted("OPENAI_API_KEY")
+  apiKey: Config.Redacted("OPENAI_API_KEY")
 }).pipe(Layer.provide(FetchHttpClient.layer))
 
 export class ProductAssistantError extends Schema.TaggedError<ProductAssistantError>()(

package/ai-docs/src/71_ai/30_chat.ts

@@ -14,7 +14,7 @@ import { FetchHttpClient } from "effect/unstable/http"
 // ---------------------------------------------------------------------------
 
 const OpenAiClientLayer = OpenAiClient.layerConfig({
-  apiKey: Config.redacted("OPENAI_API_KEY")
+  apiKey: Config.Redacted("OPENAI_API_KEY")
 }).pipe(Layer.provide(FetchHttpClient.layer))
 
 // ---------------------------------------------------------------------------

package/dist/PgAuth.d.ts

@@ -12,6 +12,12 @@ export declare class AuthError extends AuthError_base<{
     readonly message: string;
 }> {
 }
+/**
+ * Computes the legacy PostgreSQL MD5 password response.
+ *
+ * @category authentication
+ * @since 4.0.0
+ */
 export declare const md5Password: (options: {
     readonly user: string;
     readonly password: string;
@@ -53,6 +59,12 @@ export interface ScramFinal {
  * @since 4.0.0
  */
 export type ScramState = ScramFirst | ScramFinal;
+/**
+ * Creates the first SCRAM-SHA-256 client message.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
 export declare const scramInit: (options: {
     readonly password: string;
     readonly nonce: string;
@@ -60,10 +72,22 @@ export declare const scramInit: (options: {
     readonly state: ScramFirst;
     readonly response: Uint8Array;
 }, AuthError>;
+/**
+ * Processes the server's SCRAM challenge and creates the client proof.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
 export declare const scramContinue: (state: ScramFirst, challenge: Uint8Array) => Result.Result<{
     readonly state: ScramFinal;
     readonly response: Uint8Array;
 }, AuthError>;
+/**
+ * Verifies the server's final SCRAM message.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
 export declare const scramFinish: (state: ScramFinal, challenge: Uint8Array) => Result.Result<void, AuthError>;
 export {};
 //# sourceMappingURL=PgAuth.d.ts.map

package/dist/PgAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PgAuth.d.ts","sourceRoot":"","sources":["../src/PgAuth.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;;;;AAGvC;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,eAAgC;IAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB,CAAC;CAAG;AAwEL,eAAO,MAAM,WAAW,YAAa;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAC1B,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAA6C,CAAA;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAA;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAA;CACrC;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;AAuDhD,eAAO,MAAM,SAAS,YAAa;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,KAAG,MAAM,CAAC,MAAM,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,EAAE,SAAS,CAClD,CAAA;AAqDxC,eAAO,MAAM,aAAa,UACjB,UAAU,aACN,UAAU,KACpB,MAAM,CAAC,MAAM,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,EAAE,SAAS,CACpC,CAAA;AAsBrD,eAAO,MAAM,WAAW,UACf,UAAU,aACN,UAAU,KACpB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAsD,CAAA"}
+{"version":3,"file":"PgAuth.d.ts","sourceRoot":"","sources":["../src/PgAuth.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;;;;AAGvC;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,eAAgC;IAC7D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB,CAAC;CAAG;AA0EL;;;;;GAKG;AACH,eAAO,MAAM,WAAW,YAAa;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAC1B,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAA6C,CAAA;AAEhF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,kBAAkB,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAA;CACxC;AAED;;;;;GAKG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAA;CACrC;AAED;;;;;GAKG;AACH,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,UAAU,CAAA;AAuDhD;;;;;GAKG;AACH,eAAO,MAAM,SAAS,YAAa;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB,KAAG,MAAM,CAAC,MAAM,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,EAAE,SAAS,CAClD,CAAA;AAyDxC;;;;;GAKG;AACH,eAAO,MAAM,aAAa,UACjB,UAAU,aACN,UAAU,KACpB,MAAM,CAAC,MAAM,CAAC;IAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,EAAE,SAAS,CACpC,CAAA;AAsBrD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,UACf,UAAU,aACN,UAAU,KACpB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAsD,CAAA"}

package/dist/PgAuth.js

@@ -10,7 +10,8 @@
  * `SCRAM-SHA-256-PLUS` is not implemented: channel binding needs the TLS
  * socket, which this codec does not own. Passwords are used as UTF-8 without
  * SASLprep normalisation, so non-ASCII passwords that require normalisation
- * are not supported.
+ * are not supported. Server iteration counts above 1,000,000 are rejected
+ * before password derivation.
  *
  * @since 4.0.0
  */
@@ -42,6 +43,8 @@ const textEncoder = /*#__PURE__*/new TextEncoder();
 const textDecoder = /*#__PURE__*/new TextDecoder("utf-8", {
   fatal: true
 });
+/** Bounds synchronous PBKDF2 work requested by an untrusted server. */
+const maxScramIterations = 1_000_000;
 const bytesOf = value => Uint8Array.from(value);
 const sha256 = data => bytesOf(createHash("sha256").update(data).digest());
 const hmacSha256 = (key, data) => bytesOf(createHmac("sha256", key).update(data).digest());
@@ -83,6 +86,12 @@ const md5PasswordUnsafe = options => {
   const outer = createHash("md5").update(textEncoder.encode(inner)).update(options.salt).digest("hex");
   return `md5${outer}`;
 };
+/**
+ * Computes the legacy PostgreSQL MD5 password response.
+ *
+ * @category authentication
+ * @since 4.0.0
+ */
 export const md5Password = options => result(() => md5PasswordUnsafe(options));
 /**
  * The only SASL mechanism this module implements.
@@ -136,6 +145,12 @@ const scramInitUnsafe = options => {
     response: textEncoder.encode(GS2_HEADER + clientFirstMessageBare)
   };
 };
+/**
+ * Creates the first SCRAM-SHA-256 client message.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
 export const scramInit = options => result(() => scramInitUnsafe(options));
 /**
  * Answers an `AuthenticationSASLContinue` challenge.
@@ -160,7 +175,7 @@ const scramContinueUnsafe = (state, challenge) => {
   const salt = fromBase64(saltText, "s");
   const iterationText = attribute(attributes, "i");
   const iterations = Number(iterationText);
-  if (!/^[1-9]\d*$/.test(iterationText) || !Number.isSafeInteger(iterations) || iterations > 0x7fffffff) {
+  if (!/^[1-9]\d*$/.test(iterationText) || !Number.isSafeInteger(iterations) || iterations > maxScramIterations) {
     return fail(`Invalid SCRAM iteration count: ${iterationText}`);
   }
   const saltedPassword = bytesOf(pbkdf2Sync(textEncoder.encode(state.password), salt, iterations, 32, "sha256"));
@@ -178,6 +193,12 @@ const scramContinueUnsafe = (state, challenge) => {
     response: textEncoder.encode(`${clientFinalMessageWithoutProof},p=${toBase64(clientProof)}`)
   };
 };
+/**
+ * Processes the server's SCRAM challenge and creates the client proof.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
 export const scramContinue = (state, challenge) => result(() => scramContinueUnsafe(state, challenge));
 /**
  * Verifies the server signature carried by `AuthenticationSASLFinal`. Returns
@@ -198,5 +219,11 @@ const scramFinishUnsafe = (state, challenge) => {
     fail("SCRAM server signature mismatch");
   }
 };
+/**
+ * Verifies the server's final SCRAM message.
+ *
+ * @category SCRAM
+ * @since 4.0.0
+ */
 export const scramFinish = (state, challenge) => result(() => scramFinishUnsafe(state, challenge));
 //# sourceMappingURL=PgAuth.js.map

package/dist/PgAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"PgAuth.js","names":[],"sources":["../src/PgAuth.ts"],"sourcesContent":[null],"mappings":"AAAA;;;;;;;;;;;;;;;;AAgBA,OAAO,KAAK,IAAI,MAAM,aAAa;AACnC,OAAO,KAAK,QAAQ,MAAM,iBAAiB;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe;AACvC,SAAS,UAAU,EAAE,UAAU,EAAE,UAAU,QAAQ,aAAa;AAEhE;;;;;;AAMA,OAAM,MAAO,SAAU,sBAAQ,IAAI,CAAC,WAAW,CAAC,aAAa,CAE3D;AAEF,MAAM,IAAI,GAAI,OAAe,IAAW;EACtC,MAAM,IAAI,SAAS,CAAC;IAAE;EAAO,CAAE,CAAC;AAClC,CAAC;AAED,MAAM,MAAM,GAAO,QAAiB,IAAiC;EACnE,IAAI;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;EACnC,CAAC,CAAC,OAAO,KAAK,EAAE;IACd,IAAI,KAAK,YAAY,SAAS,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;IACzD,MAAM,KAAK;EACb;AACF,CAAC;AAED,MAAM,WAAW,gBAAG,IAAI,WAAW,EAAE;AACrC,MAAM,WAAW,gBAAG,IAAI,WAAW,CAAC,OAAO,EAAE;EAAE,KAAK,EAAE;AAAI,CAAE,CAAC;AAE7D,MAAM,OAAO,GAAI,KAAiB,IAAiB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;AAEzE,MAAM,MAAM,GAAI,IAAgB,IAAiB,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAEpG,MAAM,UAAU,GAAG,CAAC,GAAe,EAAE,IAAgB,KACnD,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAE1D,MAAM,GAAG,GAAG,CAAC,IAAgB,EAAE,KAAiB,KAAgB;EAC9D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;EAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;IACpC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;EAChC;EACA,OAAO,MAAM;AACf,CAAC;AAED,MAAM,QAAQ,GAAI,KAAiB,IAAa,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC;AAE5E,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAa,KAAgB;EAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;EAC3C,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;IAC7B,OAAO,IAAI,CAAC,sCAAsC,KAAK,GAAG,CAAC;EAC7D;EACA,OAAO,OAAO,CAAC,OAAO;AACxB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAE,IAAY,KAAY;EAC7D,IAAI;IACF,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;EAClC,CAAC,CAAC,MAAM;IACN,OAAO,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC;EACzC;AACF,CAAC;AAED;;;;;;;;AAQA,MAAM,iBAAiB,GAAI,OAI1B,IAAY;EACX,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;IAC7B,OAAO,IAAI,CAAC,yDAAyD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;EAC7F;EACA,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;EACzG,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;EACpG,OAAO,MAAM,KAAK,EAAE;AACtB,CAAC;AAED,OAAO,MAAM,WAAW,GAAI,OAI3B,IAAuC,MAAM,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAEhF;;;;;;AAMA,OAAO,MAAM,aAAa,GAAG,eAAe;AAkC5C,MAAM,UAAU,GAAG,KAAK;AACxB;AACA,MAAM,eAAe,GAAG,MAAM;AAE9B,MAAM,eAAe,GAAI,OAAe,IAAyB;EAC/D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB;EAC5C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,EAAE;MACjB,OAAO,IAAI,CAAC,+BAA+B,IAAI,GAAG,CAAC;IACrD;IACA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;IACpC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;MACvB,OAAO,IAAI,CAAC,8BAA8B,GAAG,GAAG,CAAC;IACnD;IACA,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;EAChD;EACA,OAAO,UAAU;AACnB,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,UAA+B,EAAE,GAAW,KAC7D,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,4BAA4B,GAAG,GAAG,CAAC;AAEjE;;;;;;;;;;;AAWA,MAAM,eAAe,GAAI,OAGxB,IAAmE;EAClE,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;IAClD,OAAO,IAAI,CAAC,2EAA2E,CAAC;EAC1F;EACA,MAAM,sBAAsB,GAAG,QAAQ,OAAO,CAAC,KAAK,EAAE;EACtD,OAAO;IACL,KAAK,EAAE;MACL,IAAI,EAAE,YAAY;MAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;MAC1B,WAAW,EAAE,OAAO,CAAC,KAAK;MAC1B;KACD;IACD,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,GAAG,sBAAsB;GACjE;AACH,CAAC;AAED,OAAO,MAAM,SAAS,GAAI,OAGzB,IACC,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;AAExC;;;;;;;;;AASA,MAAM,mBAAmB,GAAG,CAC1B,KAAiB,EACjB,SAAqB,KAC4C;EACjE,MAAM,kBAAkB,GAAG,UAAU,CAAC,SAAS,EAAE,gCAAgC,CAAC;EAClF,MAAM,UAAU,GAAG,eAAe,CAAC,kBAAkB,CAAC;EACtD,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC;EACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE;IACrF,OAAO,IAAI,CAAC,qDAAqD,CAAC;EACpE;EACA,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC;EAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;IACzB,OAAO,IAAI,CAAC,8BAA8B,CAAC;EAC7C;EACA,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;EACtC,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC;EAChD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC;EACxC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,UAAU,EAAE;IACrG,OAAO,IAAI,CAAC,kCAAkC,aAAa,EAAE,CAAC;EAChE;EAEA,MAAM,cAAc,GAAG,OAAO,CAC5B,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,CAC/E;EACD,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;EAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;EACnC,MAAM,8BAA8B,GAAG,KAAK,eAAe,MAAM,KAAK,EAAE;EACxE,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CACpC,GAAG,KAAK,CAAC,sBAAsB,IAAI,kBAAkB,IAAI,8BAA8B,EAAE,CAC1F;EACD,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;EACtE,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;EAE9E,OAAO;IACL,KAAK,EAAE;MACL,IAAI,EAAE,YAAY;MAClB,eAAe,EAAE,UAAU,CAAC,SAAS,EAAE,WAAW;KACnD;IACD,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,8BAA8B,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE;GAC5F;AACH,CAAC;AAED,OAAO,MAAM,aAAa,GAAG,CAC3B,KAAiB,EACjB,SAAqB,KAErB,MAAM,CAAC,MAAM,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAErD;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,CAAC,KAAiB,EAAE,SAAqB,KAAU;EAC3E,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;EAC3F,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;EACjC,IAAI,KAAK,KAAK,SAAS,EAAE;IACvB,IAAI,CAAC,gCAAgC,KAAK,EAAE,CAAC;EAC/C;EACA,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC;EAC7D,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,EAAE;IAC3D,IAAI,CAAC,iCAAiC,CAAC;EACzC;AACF,CAAC;AAED,OAAO,MAAM,WAAW,GAAG,CACzB,KAAiB,EACjB,SAAqB,KACc,MAAM,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC","ignoreList":[]}
+{"version":3,"file":"PgAuth.js","names":[],"sources":["../src/PgAuth.ts"],"sourcesContent":[null],"mappings":"AAAA;;;;;;;;;;;;;;;;;AAiBA,OAAO,KAAK,IAAI,MAAM,aAAa;AACnC,OAAO,KAAK,QAAQ,MAAM,iBAAiB;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe;AACvC,SAAS,UAAU,EAAE,UAAU,EAAE,UAAU,QAAQ,aAAa;AAEhE;;;;;;AAMA,OAAM,MAAO,SAAU,sBAAQ,IAAI,CAAC,WAAW,CAAC,aAAa,CAE3D;AAEF,MAAM,IAAI,GAAI,OAAe,IAAW;EACtC,MAAM,IAAI,SAAS,CAAC;IAAE;EAAO,CAAE,CAAC;AAClC,CAAC;AAED,MAAM,MAAM,GAAO,QAAiB,IAAiC;EACnE,IAAI;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;EACnC,CAAC,CAAC,OAAO,KAAK,EAAE;IACd,IAAI,KAAK,YAAY,SAAS,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;IACzD,MAAM,KAAK;EACb;AACF,CAAC;AAED,MAAM,WAAW,gBAAG,IAAI,WAAW,EAAE;AACrC,MAAM,WAAW,gBAAG,IAAI,WAAW,CAAC,OAAO,EAAE;EAAE,KAAK,EAAE;AAAI,CAAE,CAAC;AAC7D;AACA,MAAM,kBAAkB,GAAG,SAAS;AAEpC,MAAM,OAAO,GAAI,KAAiB,IAAiB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;AAEzE,MAAM,MAAM,GAAI,IAAgB,IAAiB,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAEpG,MAAM,UAAU,GAAG,CAAC,GAAe,EAAE,IAAgB,KACnD,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;AAE1D,MAAM,GAAG,GAAG,CAAC,IAAgB,EAAE,KAAiB,KAAgB;EAC9D,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;EAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;IACpC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;EAChC;EACA,OAAO,MAAM;AACf,CAAC;AAED,MAAM,QAAQ,GAAI,KAAiB,IAAa,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC;AAE5E,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,KAAa,KAAgB;EAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC;EAC3C,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;IAC7B,OAAO,IAAI,CAAC,sCAAsC,KAAK,GAAG,CAAC;EAC7D;EACA,OAAO,OAAO,CAAC,OAAO;AACxB,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAE,IAAY,KAAY;EAC7D,IAAI;IACF,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;EAClC,CAAC,CAAC,MAAM;IACN,OAAO,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC;EACzC;AACF,CAAC;AAED;;;;;;;;AAQA,MAAM,iBAAiB,GAAI,OAI1B,IAAY;EACX,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;IAC7B,OAAO,IAAI,CAAC,yDAAyD,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;EAC7F;EACA,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;EACzG,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;EACpG,OAAO,MAAM,KAAK,EAAE;AACtB,CAAC;AAED;;;;;;AAMA,OAAO,MAAM,WAAW,GAAI,OAI3B,IAAuC,MAAM,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAEhF;;;;;;AAMA,OAAO,MAAM,aAAa,GAAG,eAAe;AAkC5C,MAAM,UAAU,GAAG,KAAK;AACxB;AACA,MAAM,eAAe,GAAG,MAAM;AAE9B,MAAM,eAAe,GAAI,OAAe,IAAyB;EAC/D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB;EAC5C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IACnC,IAAI,SAAS,GAAG,CAAC,EAAE;MACjB,OAAO,IAAI,CAAC,+BAA+B,IAAI,GAAG,CAAC;IACrD;IACA,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;IACpC,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;MACvB,OAAO,IAAI,CAAC,8BAA8B,GAAG,GAAG,CAAC;IACnD;IACA,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;EAChD;EACA,OAAO,UAAU;AACnB,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,UAA+B,EAAE,GAAW,KAC7D,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,4BAA4B,GAAG,GAAG,CAAC;AAEjE;;;;;;;;;;;AAWA,MAAM,eAAe,GAAI,OAGxB,IAAmE;EAClE,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;IAClD,OAAO,IAAI,CAAC,2EAA2E,CAAC;EAC1F;EACA,MAAM,sBAAsB,GAAG,QAAQ,OAAO,CAAC,KAAK,EAAE;EACtD,OAAO;IACL,KAAK,EAAE;MACL,IAAI,EAAE,YAAY;MAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;MAC1B,WAAW,EAAE,OAAO,CAAC,KAAK;MAC1B;KACD;IACD,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,UAAU,GAAG,sBAAsB;GACjE;AACH,CAAC;AAED;;;;;;AAMA,OAAO,MAAM,SAAS,GAAI,OAGzB,IACC,MAAM,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;AAExC;;;;;;;;;AASA,MAAM,mBAAmB,GAAG,CAC1B,KAAiB,EACjB,SAAqB,KAC4C;EACjE,MAAM,kBAAkB,GAAG,UAAU,CAAC,SAAS,EAAE,gCAAgC,CAAC;EAClF,MAAM,UAAU,GAAG,eAAe,CAAC,kBAAkB,CAAC;EACtD,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC;EACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE;IACrF,OAAO,IAAI,CAAC,qDAAqD,CAAC;EACpE;EACA,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC;EAC3C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;IACzB,OAAO,IAAI,CAAC,8BAA8B,CAAC;EAC7C;EACA,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;EACtC,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC;EAChD,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAC;EACxC,IACE,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IACjC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IACjC,UAAU,GAAG,kBAAkB,EAC/B;IACA,OAAO,IAAI,CAAC,kCAAkC,aAAa,EAAE,CAAC;EAChE;EAEA,MAAM,cAAc,GAAG,OAAO,CAC5B,UAAU,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,CAC/E;EACD,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;EAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;EACnC,MAAM,8BAA8B,GAAG,KAAK,eAAe,MAAM,KAAK,EAAE;EACxE,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CACpC,GAAG,KAAK,CAAC,sBAAsB,IAAI,kBAAkB,IAAI,8BAA8B,EAAE,CAC1F;EACD,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;EACtE,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;EAE9E,OAAO;IACL,KAAK,EAAE;MACL,IAAI,EAAE,YAAY;MAClB,eAAe,EAAE,UAAU,CAAC,SAAS,EAAE,WAAW;KACnD;IACD,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,8BAA8B,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE;GAC5F;AACH,CAAC;AAED;;;;;;AAMA,OAAO,MAAM,aAAa,GAAG,CAC3B,KAAiB,EACjB,SAAqB,KAErB,MAAM,CAAC,MAAM,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAErD;;;;;;;;AAQA,MAAM,iBAAiB,GAAG,CAAC,KAAiB,EAAE,SAAqB,KAAU;EAC3E,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;EAC3F,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;EACjC,IAAI,KAAK,KAAK,SAAS,EAAE;IACvB,IAAI,CAAC,gCAAgC,KAAK,EAAE,CAAC;EAC/C;EACA,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC;EAC7D,IAAI,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,EAAE;IAC3D,IAAI,CAAC,iCAAiC,CAAC;EACzC;AACF,CAAC;AAED;;;;;;AAMA,OAAO,MAAM,WAAW,GAAG,CACzB,KAAiB,EACjB,SAAqB,KACc,MAAM,CAAC,MAAM,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC","ignoreList":[]}