@marinoscar/platform-api 0.1.0-next.3 → 0.1.0-next.5

package/dist/storage/drivers/s3/s3-connection-test.d.ts

@@ -0,0 +1,28 @@
+import type { StorageDriverContext, StorageDriverTestResult } from '../storage-driver';
+import { type S3FamilySettings, type S3FlavourSpec } from './s3-config';
+/**
+ * Where the connection test writes its probe object (`storage-config-test/`, a registered prefix).
+ *
+ * A PREFIX RATHER THAN A BARE UUID so an operator (or a lifecycle rule) reading
+ * a bucket listing can see at a glance what these are and that they are safe to
+ * delete. Every probe object is deleted by the same request that created it;
+ * the prefix exists for the case where the delete step itself is the one that
+ * was denied. It is derived from the shared list, so the purge knows it too.
+ *
+ * @stability experimental
+ */
+export declare const STORAGE_PROBE_KEY_PREFIX = "storage-config-test/";
+/**
+ * Runs the four checks of an S3-family configuration.
+ *
+ * NEVER THROWS for a configuration or connectivity problem: every such outcome
+ * is a check with `status: 'failed'`.
+ *
+ * @param ctx - the driver context (settings, secret resolver).
+ * @param flavour - the built-in flavour's rules.
+ * @returns the result, `checks` always holding all four.
+ *
+ * @stability experimental
+ */
+export declare function testS3Connection(ctx: StorageDriverContext<S3FamilySettings>, flavour: S3FlavourSpec): Promise<StorageDriverTestResult>;
+//# sourceMappingURL=s3-connection-test.d.ts.map

package/dist/storage/drivers/s3/s3-connection-test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-connection-test.d.ts","sourceRoot":"","sources":["../../../../src/storage/drivers/s3/s3-connection-test.ts"],"names":[],"mappings":"AAqCA,OAAO,KAAK,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EAA0C,KAAK,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAahH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,yBAA0B,CAAC;AAwBhE;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,oBAAoB,CAAC,gBAAgB,CAAC,EAC3C,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,uBAAuB,CAAC,CA2ClC"}

package/dist/storage/drivers/s3/s3-connection-test.js

@@ -0,0 +1,424 @@
+"use strict";
+// =============================================================================
+// The built-in S3 drivers' connection test (issue #375, epic #372; PP-14.7)
+// =============================================================================
+//
+// "Does this configuration actually work?" for `s3`, `r2` and `s3compatible`:
+// four checks, reported separately, never collapsed into one boolean and never
+// thrown (a refused request is a successful diagnosis). Moved here from
+// `StorageConnectionTestService` with its comments when the S3 SDK became a
+// concern of the drivers alone; the service now calls
+// `StorageDriver.testConnection` and only assembles the wire result and the
+// audit row. Behaviour is unchanged.
+//
+// It tests the configuration it is GIVEN (the submitted one, resolved by the
+// service), writes one throwaway object under `storage-config-test/` and
+// deletes it, and obeys `CredentialsService.getSecret`'s contract: the secret
+// is read at the moment of use, held in a local, never logged and never
+// returned. Every string that leaves here as an `error` goes through
+// `redactStorageSecret` first, at a single exit point, because most of these
+// messages are authored by the AWS SDK rather than by this repository.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STORAGE_PROBE_KEY_PREFIX = void 0;
+exports.testS3Connection = testS3Connection;
+const node_crypto_1 = require("node:crypto");
+const common_1 = require("@nestjs/common");
+const client_s3_1 = require("@aws-sdk/client-s3");
+const s3_request_presigner_1 = require("@aws-sdk/s3-request-presigner");
+const s3_storage_provider_1 = require("../../providers/s3/s3-storage.provider");
+const storage_key_prefixes_1 = require("../../storage-key-prefixes");
+const s3_config_1 = require("./s3-config");
+const s3_probe_support_1 = require("./s3-probe.support");
+const logger = new common_1.Logger('S3ConnectionTest');
+/**
+ * Where the connection test writes its probe object (`storage-config-test/`, a registered prefix).
+ *
+ * A PREFIX RATHER THAN A BARE UUID so an operator (or a lifecycle rule) reading
+ * a bucket listing can see at a glance what these are and that they are safe to
+ * delete. Every probe object is deleted by the same request that created it;
+ * the prefix exists for the case where the delete step itself is the one that
+ * was denied. It is derived from the shared list, so the purge knows it too.
+ *
+ * @stability experimental
+ */
+exports.STORAGE_PROBE_KEY_PREFIX = storage_key_prefixes_1.STORAGE_TEST_KEY_PREFIX;
+/** How long the probe's presigned URL is valid. Seconds. */
+const PRESIGNED_PROBE_TTL_SECONDS = 60;
+/**
+ * How long to wait for the presigned URL to answer.
+ *
+ * Short on purpose: this runs inside an HTTP request an administrator is
+ * watching, and "the endpoint is not answering" is itself the diagnosis. A long
+ * timeout would turn an unreachable host into a hung settings page.
+ */
+const PRESIGNED_PROBE_TIMEOUT_MS = 10_000;
+/** Human labels for the four checks. Sent in the response so a client need not carry them. */
+const CHECK_LABELS = {
+    credentials: 'Credentials accepted',
+    bucket: 'Bucket exists and is reachable',
+    roundTrip: 'Write, read back and delete',
+    presignedUrl: 'Presigned URL is valid and serves the object',
+};
+const CHECK_IDS = ['credentials', 'bucket', 'roundTrip', 'presignedUrl'];
+/**
+ * Runs the four checks of an S3-family configuration.
+ *
+ * NEVER THROWS for a configuration or connectivity problem: every such outcome
+ * is a check with `status: 'failed'`.
+ *
+ * @param ctx - the driver context (settings, secret resolver).
+ * @param flavour - the built-in flavour's rules.
+ * @returns the result, `checks` always holding all four.
+ *
+ * @stability experimental
+ */
+async function testS3Connection(ctx, flavour) {
+    const secret = await ctx.secret('secretAccessKey');
+    const resolution = (0, s3_config_1.resolveS3Config)(flavour, ctx.settings, secret);
+    if (!resolution.configured) {
+        // ALL FOUR ARE `skipped`, NOT `failed`. Nothing was attempted, so this run
+        // knows nothing about any of them - reporting four failures for a form
+        // that is simply not finished would send an operator looking for four
+        // problems they do not have. `ok` is still false.
+        const detail = `Nothing was attempted: ${resolution.missing.join(', ')} ` +
+            `${resolution.missing.length === 1 ? 'is' : 'are'} not set.`;
+        const endpoint = (0, s3_probe_support_1.displayEndpoint)({ provider: flavour.id, ...ctx.settings });
+        return {
+            ok: false,
+            message: detail,
+            details: { region: ctx.settings.region, ...(endpoint ? { effectiveEndpoint: endpoint } : {}) },
+            checks: CHECK_IDS.map((id) => check(id, 'skipped', 'not_configured', detail)),
+        };
+    }
+    const config = resolution.config;
+    const client = new client_s3_1.S3Client((0, s3_storage_provider_1.buildS3ClientConfig)(config));
+    try {
+        const checks = await runChecks(client, config, secret);
+        const failed = checks.filter((entry) => entry.status !== 'passed');
+        return {
+            ok: failed.length === 0,
+            message: failed.length === 0
+                ? `Bucket "${config.bucket}" accepted the credential and served a test object.`
+                : failed.map((entry) => `${entry.label}: ${entry.code}`).join('; '),
+            details: { region: config.region, ...(config.endpoint ? { effectiveEndpoint: config.endpoint } : {}) },
+            checks,
+        };
+    }
+    finally {
+        // Always. One `S3Client` per test means one connection pool per test, and
+        // a settings page an admin clicks six times would otherwise leak six.
+        client.destroy();
+    }
+}
+// ---------------------------------------------------------------------------
+// The checks
+// ---------------------------------------------------------------------------
+async function runChecks(client, config, secret) {
+    const { credentials, bucket } = await checkCredentialsAndBucket(client, config, secret);
+    if (credentials.status !== 'passed' || bucket.status !== 'passed') {
+        return [
+            credentials,
+            bucket,
+            notAttempted('roundTrip'),
+            notAttempted('presignedUrl'),
+        ];
+    }
+    const { roundTrip, presignedUrl } = await checkRoundTrip(client, config, secret);
+    return [credentials, bucket, roundTrip, presignedUrl];
+}
+/**
+ * One `HeadBucket` answers both of the first two checks — and a second call,
+ * on exactly one branch, answers the question `HeadBucket` structurally
+ * cannot.
+ *
+ * ⚠ THE 403 PROBLEM, WHICH IS THE WHOLE REASON THIS METHOD IS NOT FOUR LINES.
+ * `HeadBucket` is an HTTP `HEAD`, so its error responses HAVE NO BODY and
+ * therefore no S3 error code — the SDK can only surface the bare status as
+ * `NotFound` or `Forbidden`. A `404` is unambiguous: the request was
+ * authenticated and there is no such bucket. A `403` is not, because it is the
+ * status for BOTH "this key is real and not permitted on that bucket" and
+ * "this endpoint does not recognise this key at all", and those have opposite
+ * fixes.
+ *
+ * So on the `403` branch — and ONLY on that branch, so an ordinary healthy
+ * configuration costs exactly one round trip — a `ListBuckets` is sent purely
+ * as a CREDENTIAL PROBE. `ListBuckets` is a `GET` and its errors do carry a
+ * code, so `InvalidAccessKeyId`/`SignatureDoesNotMatch` (the key is wrong)
+ * separates cleanly from `AccessDenied` (the key is real and the policy does
+ * not allow listing, which is what a well-scoped key looks like).
+ *
+ * Region mismatch is tested BEFORE missing and forbidden: S3 reports a signed
+ * request sent to the wrong regional host as `AuthorizationHeaderMalformed` or
+ * a `301 PermanentRedirect`, and both would otherwise be misread — the first
+ * as a bad credential, the second as a missing bucket.
+ */
+async function checkCredentialsAndBucket(client, config, secret) {
+    try {
+        await client.send(new client_s3_1.HeadBucketCommand({ Bucket: config.bucket }));
+        return {
+            credentials: check('credentials', 'passed', 'ok', `The endpoint accepted the signature for access key ${config.accessKeyId}.`),
+            bucket: check('bucket', 'passed', 'ok', `Bucket "${config.bucket}" exists and this credential can inspect it.`),
+        };
+    }
+    catch (error) {
+        const described = (0, s3_probe_support_1.describeStorageError)(error, secret);
+        if (described.unreachable) {
+            return {
+                credentials: check('credentials', 'failed', 'endpoint_unreachable', `No response from ${config.endpoint ?? 'the AWS regional endpoint'}. ` +
+                    `Check the endpoint, DNS, TLS and any firewall between this server and the ` +
+                    `object store — the credential was never evaluated.`, described.message),
+                bucket: notAttempted('bucket'),
+            };
+        }
+        if (s3_probe_support_1.CREDENTIAL_REJECTION_CODES.has(described.code)) {
+            return {
+                credentials: check('credentials', 'failed', 'credentials_rejected', `The endpoint refused access key ${config.accessKeyId}. Re-check the key id and ` +
+                    `paste the secret access key again — this is not a permissions problem, the ` +
+                    `credential itself was not accepted.`, described.message),
+                bucket: notAttempted('bucket'),
+            };
+        }
+        const credentialsAccepted = check('credentials', 'passed', 'ok', `The endpoint evaluated the signature for access key ${config.accessKeyId}, so the ` +
+            `credential itself is recognised.`);
+        if (s3_probe_support_1.BUCKET_REGION_CODES.has(described.code) || described.status === 301) {
+            return {
+                credentials: credentialsAccepted,
+                bucket: check('bucket', 'failed', 'bucket_region_mismatch', `Bucket "${config.bucket}" exists, but not in region "${config.region}". ` +
+                    `Correct the region — the provider's message below usually names the right one.`, described.message),
+            };
+        }
+        if (s3_probe_support_1.BUCKET_MISSING_CODES.has(described.code) || described.status === 404) {
+            return {
+                credentials: credentialsAccepted,
+                bucket: check('bucket', 'failed', 'bucket_missing', `There is no bucket named "${config.bucket}" at this endpoint. Create it (the ` +
+                    `"Create bucket" action does this, or your provider's console will) or correct ` +
+                    `the name.`, described.message),
+            };
+        }
+        if (s3_probe_support_1.BUCKET_FORBIDDEN_CODES.has(described.code) || described.status === 403) {
+            // ⚠ The disambiguating second call. See this method's header.
+            const credentialProbe = await probeCredentialValidity(client, secret);
+            if (credentialProbe === 'rejected') {
+                return {
+                    credentials: check('credentials', 'failed', 'credentials_rejected', `The endpoint answered 403, and a follow-up request confirmed the credential ` +
+                        `itself is not recognised. Re-check the key id and paste the secret access ` +
+                        `key again.`, described.message),
+                    bucket: notAttempted('bucket'),
+                };
+            }
+            return {
+                credentials: credentialsAccepted,
+                bucket: check('bucket', 'failed', 'bucket_forbidden', `A bucket named "${config.bucket}" exists, and this credential may not inspect ` +
+                    `it — it is either owned by another account or the key's policy does not cover ` +
+                    `it. ⚠ Do NOT create a new bucket: widen the key's policy, or check the name ` +
+                    `for a typo that landed on somebody else's bucket.`, described.message),
+            };
+        }
+        return {
+            credentials: credentialsAccepted,
+            bucket: check('bucket', 'failed', 'unknown_error', `The endpoint refused the bucket check with an error this page does not recognise. ` +
+                `The provider's own message is below.`, described.message),
+        };
+    }
+}
+/**
+ * Is the credential itself valid, independently of any one bucket?
+ *
+ * `ListBuckets` is chosen because it is account-scoped rather than
+ * bucket-scoped and because it is a `GET`, so its error response carries an S3
+ * error code — which is the thing `HeadBucket` cannot provide and the only
+ * reason this call exists. A SUCCESS and an `AccessDenied` are the SAME answer
+ * here: both prove the signature was verified against a real key. Only an
+ * explicit credential-rejection code is `'rejected'`.
+ *
+ * Anything else — an unreachable endpoint on the second call, an S3-compatible
+ * server that does not implement `ListBuckets` at all — resolves to
+ * `'accepted'`, deliberately. This probe exists to DOWNGRADE a bucket verdict
+ * to a credential verdict when it can prove it should; when it cannot prove
+ * anything, the original `bucket_forbidden` verdict stands rather than being
+ * replaced by a guess.
+ */
+async function probeCredentialValidity(client, secret) {
+    try {
+        await client.send(new client_s3_1.ListBucketsCommand({}));
+        return 'accepted';
+    }
+    catch (error) {
+        const described = (0, s3_probe_support_1.describeStorageError)(error, secret);
+        return s3_probe_support_1.CREDENTIAL_REJECTION_CODES.has(described.code) ? 'rejected' : 'accepted';
+    }
+}
+/**
+ * Write a throwaway object, read it back, fetch it through a presigned URL,
+ * then delete it.
+ *
+ * ⚠ WHY THE DELETE HAPPENS LAST, AFTER THE PRESIGNED CHECK, AND IS STILL
+ * REPORTED UNDER `roundTrip`. The two checks share ONE probe object: creating a
+ * second one would double the writes into an administrator's bucket and prove
+ * nothing extra. So the ordering is put, get, presign, delete, while the
+ * delete's outcome belongs to the check it is part of. The alternative
+ * orderings are both worse: deleting before the presign leaves that check with
+ * nothing to fetch, and reporting the delete under `presignedUrl` would tell an
+ * operator whose key lacks `s3:DeleteObject` that their URLs are broken.
+ *
+ * ⚠ WHY THIS CHECK EXISTS WHEN `bucket` ALREADY PASSED. `HeadBucket` succeeding
+ * proves `s3:ListBucket`-ish visibility and NOTHING about `s3:PutObject`,
+ * `s3:GetObject` or `s3:DeleteObject`. A read-only key passes the first two
+ * checks and fails every upload in the product.
+ */
+async function checkRoundTrip(client, config, secret) {
+    const key = `${exports.STORAGE_PROBE_KEY_PREFIX}${(0, node_crypto_1.randomUUID)()}.txt`;
+    // Unique per run, so a stale object served from a cache (or from the wrong
+    // bucket entirely, on a misconfigured path-style endpoint) cannot be mistaken
+    // for this run's own bytes.
+    const body = `storage-config-test ${(0, node_crypto_1.randomUUID)()}`;
+    try {
+        await client.send(new client_s3_1.PutObjectCommand({
+            Bucket: config.bucket,
+            Key: key,
+            Body: body,
+            ContentType: 'text/plain',
+        }));
+    }
+    catch (error) {
+        const described = (0, s3_probe_support_1.describeStorageError)(error, secret);
+        return {
+            roundTrip: check('roundTrip', 'failed', described.unreachable ? 'endpoint_unreachable' : 'write_denied', `Could not write a test object to "${config.bucket}". The bucket is reachable, so ` +
+                `this is the credential's policy: it needs s3:PutObject on ${config.bucket}/*.`, described.message),
+            presignedUrl: notAttempted('presignedUrl'),
+        };
+    }
+    // From here on an object EXISTS in the administrator's bucket, and every exit
+    // path below is responsible for removing it.
+    try {
+        const readBack = await readObject(client, config.bucket, key);
+        if (readBack !== body) {
+            await deleteQuietly(client, config.bucket, key);
+            return {
+                roundTrip: check('roundTrip', 'failed', 'read_mismatch', `The object read back from "${config.bucket}" did not match the bytes written. ` +
+                    `That usually means requests are landing somewhere other than where you think ` +
+                    `— check the endpoint and the path-style setting.`),
+                presignedUrl: notAttempted('presignedUrl'),
+            };
+        }
+    }
+    catch (error) {
+        const described = (0, s3_probe_support_1.describeStorageError)(error, secret);
+        await deleteQuietly(client, config.bucket, key);
+        return {
+            roundTrip: check('roundTrip', 'failed', described.unreachable ? 'endpoint_unreachable' : 'read_denied', `Wrote a test object to "${config.bucket}" but could not read it back. The ` +
+                `credential needs s3:GetObject on ${config.bucket}/*.`, described.message),
+            presignedUrl: notAttempted('presignedUrl'),
+        };
+    }
+    const presignedUrl = await checkPresignedUrl(client, config, key, body, secret);
+    try {
+        await client.send(new client_s3_1.DeleteObjectCommand({ Bucket: config.bucket, Key: key }));
+    }
+    catch (error) {
+        const described = (0, s3_probe_support_1.describeStorageError)(error, secret);
+        return {
+            roundTrip: check('roundTrip', 'failed', 'delete_denied', `Wrote and read a test object successfully, but could not delete it. The ` +
+                `credential needs s3:DeleteObject on ${config.bucket}/*, and the test object ` +
+                `"${key}" has been left behind — remove it by hand.`, described.message),
+            presignedUrl,
+        };
+    }
+    return {
+        roundTrip: check('roundTrip', 'passed', 'ok', `Wrote, read back and deleted a test object in "${config.bucket}".`),
+        presignedUrl,
+    };
+}
+/**
+ * Presign a `GET` for the probe object and fetch it.
+ *
+ * ⚠ IT IS FETCHED FROM THIS PROCESS, so it proves the URL is SIGNED CORRECTLY
+ * and that the object store serves it — it cannot prove the host is reachable
+ * from a user's browser, and no server-side check can. What it does catch is
+ * the failure class the three checks before it hide by construction:
+ * presigning is a different code path from a signed API call, so a wrong region
+ * or a wrong path-style setting can be tolerated on the direct call and still
+ * produce a `SignatureDoesNotMatch` or a 404 on the URL every download link in
+ * the product is built from.
+ */
+async function checkPresignedUrl(client, config, key, expected, secret) {
+    let url;
+    try {
+        url = await (0, s3_request_presigner_1.getSignedUrl)(client, new client_s3_1.GetObjectCommand({ Bucket: config.bucket, Key: key }), { expiresIn: PRESIGNED_PROBE_TTL_SECONDS });
+    }
+    catch (error) {
+        const described = (0, s3_probe_support_1.describeStorageError)(error, secret);
+        return check('presignedUrl', 'failed', 'unknown_error', 'The presigned URL could not be generated at all, which is a client configuration ' +
+            'problem rather than an object-store one.', described.message);
+    }
+    try {
+        const response = await fetch(url, {
+            signal: AbortSignal.timeout(PRESIGNED_PROBE_TIMEOUT_MS),
+        });
+        if (!response.ok) {
+            // ⚠ The body is read for the provider's XML error, then redacted like
+            // every other message. It is capped: an endpoint that answers an error
+            // with a whole HTML page must not put that page in a settings response.
+            const detail = (0, s3_probe_support_1.redactStorageSecret)((await response.text().catch(() => '')).slice(0, 500), secret);
+            return check('presignedUrl', 'failed', 'presign_rejected', `The presigned URL answered ${response.status}. A signature error here with ` +
+                `everything else passing points at the region or the path-style setting; a 404 ` +
+                `points at the endpoint addressing the wrong bucket.`, detail || `HTTP ${response.status}`);
+        }
+        const received = await response.text();
+        if (received !== expected) {
+            return check('presignedUrl', 'failed', 'presign_mismatch', 'The presigned URL answered successfully but served different bytes than were ' +
+                'written. Requests are reaching an object other than the one addressed.');
+        }
+        return check('presignedUrl', 'passed', 'ok', 'A presigned download URL was generated and served the test object correctly.');
+    }
+    catch (error) {
+        const described = (0, s3_probe_support_1.describeStorageError)(error, secret);
+        return check('presignedUrl', 'failed', 'presign_unreachable', `The presigned URL could not be fetched from this server. Note that browsers fetch ` +
+            `these URLs directly, so the host must also be reachable — and CORS-enabled — from ` +
+            `wherever this application is used.`, described.message);
+    }
+}
+// ---------------------------------------------------------------------------
+// Internals
+// ---------------------------------------------------------------------------
+/** `GetObject` into a string. The probe object is a few dozen bytes. */
+async function readObject(client, bucket, key) {
+    const response = await client.send(new client_s3_1.GetObjectCommand({ Bucket: bucket, Key: key }));
+    // `transformToString` is the SDK's own helper and handles every stream shape
+    // the runtime may hand back. Reaching into `Body` as a Node stream here would
+    // be a second, weaker copy of that.
+    return (await response.Body?.transformToString()) ?? '';
+}
+/**
+ * Best-effort cleanup on a failure path.
+ *
+ * SWALLOWS ITS OWN ERROR ON PURPOSE. The caller is already returning a verdict
+ * about a different, more important failure, and replacing "could not read the
+ * object back" with "could not delete the object" would report the consequence
+ * instead of the cause. A stray probe object is logged and named by its prefix.
+ */
+async function deleteQuietly(client, bucket, key) {
+    try {
+        await client.send(new client_s3_1.DeleteObjectCommand({ Bucket: bucket, Key: key }));
+    }
+    catch {
+        logger.warn(`Could not remove the storage test object "${key}" from bucket "${bucket}". ` +
+            `It can be deleted by hand; every such key begins with "${exports.STORAGE_PROBE_KEY_PREFIX}".`);
+    }
+}
+function check(id, status, code, detail, error) {
+    return {
+        id,
+        label: CHECK_LABELS[id],
+        status,
+        code,
+        detail,
+        error: error ?? null,
+    };
+}
+/** A check that was not run because an earlier one failed. Not a failure. */
+function notAttempted(id) {
+    return check(id, 'skipped', 'not_attempted', 'Not attempted: an earlier check failed, so this one would say nothing useful.');
+}
+//# sourceMappingURL=s3-connection-test.js.map

package/dist/storage/drivers/s3/s3-connection-test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-connection-test.js","sourceRoot":"","sources":["../../../../src/storage/drivers/s3/s3-connection-test.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,4EAA4E;AAC5E,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,wEAAwE;AACxE,4EAA4E;AAC5E,sDAAsD;AACtD,4EAA4E;AAC5E,qCAAqC;AACrC,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,8EAA8E;AAC9E,wEAAwE;AACxE,qEAAqE;AACrE,6EAA6E;AAC7E,uEAAuE;AACvE,gFAAgF;;;AA+EhF,4CA8CC;AA3HD,6CAAyC;AAEzC,2CAAwC;AACxC,kDAO4B;AAC5B,wEAA6D;AAG7D,gFAA6E;AAC7E,qEAAqE;AAErE,2CAAgH;AAChH,yDAQ4B;AAE5B,MAAM,MAAM,GAAG,IAAI,eAAM,CAAC,kBAAkB,CAAC,CAAC;AAE9C;;;;;;;;;;GAUG;AACU,QAAA,wBAAwB,GAAG,8CAAuB,CAAC;AAEhE,4DAA4D;AAC5D,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAE1C,8FAA8F;AAC9F,MAAM,YAAY,GAAuC;IACvD,WAAW,EAAE,sBAAsB;IACnC,MAAM,EAAE,gCAAgC;IACxC,SAAS,EAAE,6BAA6B;IACxC,YAAY,EAAE,8CAA8C;CAC7D,CAAC;AAEF,MAAM,SAAS,GAAkC,CAAC,aAAa,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;AAExG;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,gBAAgB,CACpC,GAA2C,EAC3C,OAAsB;IAEtB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAA,2BAAe,EAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAElE,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,uEAAuE;QACvE,sEAAsE;QACtE,kDAAkD;QAClD,MAAM,MAAM,GACV,0BAA0B,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YAC1D,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAA,kCAAe,EAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE5E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YAC9F,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;SAC9E,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,oBAAQ,CAAC,IAAA,yCAAmB,EAAC,MAAM,CAAC,CAAC,CAAC;IAEzD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAEnE,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;YACvB,OAAO,EACL,MAAM,CAAC,MAAM,KAAK,CAAC;gBACjB,CAAC,CAAC,WAAW,MAAM,CAAC,MAAM,qDAAqD;gBAC/E,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACvE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACtG,MAAM;SACP,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,KAAK,UAAU,SAAS,CACtB,MAAgB,EAChB,MAAwB,EACxB,MAAqB;IAErB,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,MAAM,yBAAyB,CAC7D,MAAM,EACN,MAAM,EACN,MAAM,CACP,CAAC;IAEF,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClE,OAAO;YACL,WAAW;YACX,MAAM;YACN,YAAY,CAAC,WAAW,CAAC;YACzB,YAAY,CAAC,cAAc,CAAC;SAC7B,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjF,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,KAAK,UAAU,yBAAyB,CACtC,MAAgB,EAChB,MAAwB,EACxB,MAAqB;IAErB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,6BAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAEpE,OAAO;YACL,WAAW,EAAE,KAAK,CAChB,aAAa,EACb,QAAQ,EACR,IAAI,EACJ,sDAAsD,MAAM,CAAC,WAAW,GAAG,CAC5E;YACD,MAAM,EAAE,KAAK,CACX,QAAQ,EACR,QAAQ,EACR,IAAI,EACJ,WAAW,MAAM,CAAC,MAAM,8CAA8C,CACvE;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAA,uCAAoB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEtD,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1B,OAAO;gBACL,WAAW,EAAE,KAAK,CAChB,aAAa,EACb,QAAQ,EACR,sBAAsB,EACtB,oBAAoB,MAAM,CAAC,QAAQ,IAAI,2BAA2B,IAAI;oBACpE,4EAA4E;oBAC5E,oDAAoD,EACtD,SAAS,CAAC,OAAO,CAClB;gBACD,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC;aAC/B,CAAC;QACJ,CAAC;QAED,IAAI,6CAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO;gBACL,WAAW,EAAE,KAAK,CAChB,aAAa,EACb,QAAQ,EACR,sBAAsB,EACtB,mCAAmC,MAAM,CAAC,WAAW,4BAA4B;oBAC/E,6EAA6E;oBAC7E,qCAAqC,EACvC,SAAS,CAAC,OAAO,CAClB;gBACD,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,mBAAmB,GAAG,KAAK,CAC/B,aAAa,EACb,QAAQ,EACR,IAAI,EACJ,uDAAuD,MAAM,CAAC,WAAW,WAAW;YAClF,kCAAkC,CACrC,CAAC;QAEF,IAAI,sCAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxE,OAAO;gBACL,WAAW,EAAE,mBAAmB;gBAChC,MAAM,EAAE,KAAK,CACX,QAAQ,EACR,QAAQ,EACR,wBAAwB,EACxB,WAAW,MAAM,CAAC,MAAM,gCAAgC,MAAM,CAAC,MAAM,KAAK;oBACxE,gFAAgF,EAClF,SAAS,CAAC,OAAO,CAClB;aACF,CAAC;QACJ,CAAC;QAED,IAAI,uCAAoB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzE,OAAO;gBACL,WAAW,EAAE,mBAAmB;gBAChC,MAAM,EAAE,KAAK,CACX,QAAQ,EACR,QAAQ,EACR,gBAAgB,EAChB,6BAA6B,MAAM,CAAC,MAAM,qCAAqC;oBAC7E,gFAAgF;oBAChF,WAAW,EACb,SAAS,CAAC,OAAO,CAClB;aACF,CAAC;QACJ,CAAC;QAED,IAAI,yCAAsB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC3E,8DAA8D;YAC9D,MAAM,eAAe,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAEtE,IAAI,eAAe,KAAK,UAAU,EAAE,CAAC;gBACnC,OAAO;oBACL,WAAW,EAAE,KAAK,CAChB,aAAa,EACb,QAAQ,EACR,sBAAsB,EACtB,8EAA8E;wBAC5E,4EAA4E;wBAC5E,YAAY,EACd,SAAS,CAAC,OAAO,CAClB;oBACD,MAAM,EAAE,YAAY,CAAC,QAAQ,CAAC;iBAC/B,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,WAAW,EAAE,mBAAmB;gBAChC,MAAM,EAAE,KAAK,CACX,QAAQ,EACR,QAAQ,EACR,kBAAkB,EAClB,mBAAmB,MAAM,CAAC,MAAM,gDAAgD;oBAC9E,gFAAgF;oBAChF,8EAA8E;oBAC9E,mDAAmD,EACrD,SAAS,CAAC,OAAO,CAClB;aACF,CAAC;QACJ,CAAC;QAED,OAAO;YACL,WAAW,EAAE,mBAAmB;YAChC,MAAM,EAAE,KAAK,CACX,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,oFAAoF;gBAClF,sCAAsC,EACxC,SAAS,CAAC,OAAO,CAClB;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,uBAAuB,CACpC,MAAgB,EAChB,MAAqB;IAErB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,8BAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAA,uCAAoB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtD,OAAO,6CAA0B,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IAClF,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,KAAK,UAAU,cAAc,CAC3B,MAAgB,EAChB,MAAwB,EACxB,MAAqB;IAErB,MAAM,GAAG,GAAG,GAAG,gCAAwB,GAAG,IAAA,wBAAU,GAAE,MAAM,CAAC;IAC7D,2EAA2E;IAC3E,8EAA8E;IAC9E,4BAA4B;IAC5B,MAAM,IAAI,GAAG,uBAAuB,IAAA,wBAAU,GAAE,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,4BAAgB,CAAC;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,EAAE,GAAG;YACR,IAAI,EAAE,IAAI;YACV,WAAW,EAAE,YAAY;SAC1B,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAA,uCAAoB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEtD,OAAO;YACL,SAAS,EAAE,KAAK,CACd,WAAW,EACX,QAAQ,EACR,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,cAAc,EAC/D,qCAAqC,MAAM,CAAC,MAAM,iCAAiC;gBACjF,6DAA6D,MAAM,CAAC,MAAM,KAAK,EACjF,SAAS,CAAC,OAAO,CAClB;YACD,YAAY,EAAE,YAAY,CAAC,cAAc,CAAC;SAC3C,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,6CAA6C;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAE9D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAEhD,OAAO;gBACL,SAAS,EAAE,KAAK,CACd,WAAW,EACX,QAAQ,EACR,eAAe,EACf,8BAA8B,MAAM,CAAC,MAAM,qCAAqC;oBAC9E,+EAA+E;oBAC/E,kDAAkD,CACrD;gBACD,YAAY,EAAE,YAAY,CAAC,cAAc,CAAC;aAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAA,uCAAoB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAEhD,OAAO;YACL,SAAS,EAAE,KAAK,CACd,WAAW,EACX,QAAQ,EACR,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,aAAa,EAC9D,2BAA2B,MAAM,CAAC,MAAM,oCAAoC;gBAC1E,oCAAoC,MAAM,CAAC,MAAM,KAAK,EACxD,SAAS,CAAC,OAAO,CAClB;YACD,YAAY,EAAE,YAAY,CAAC,cAAc,CAAC;SAC3C,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAEhF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,+BAAmB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAC7D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAA,uCAAoB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEtD,OAAO;YACL,SAAS,EAAE,KAAK,CACd,WAAW,EACX,QAAQ,EACR,eAAe,EACf,0EAA0E;gBACxE,uCAAuC,MAAM,CAAC,MAAM,0BAA0B;gBAC9E,IAAI,GAAG,6CAA6C,EACtD,SAAS,CAAC,OAAO,CAClB;YACD,YAAY;SACb,CAAC;IACJ,CAAC;IAED,OAAO;QACL,SAAS,EAAE,KAAK,CACd,WAAW,EACX,QAAQ,EACR,IAAI,EACJ,kDAAkD,MAAM,CAAC,MAAM,IAAI,CACpE;QACD,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,KAAK,UAAU,iBAAiB,CAC9B,MAAgB,EAChB,MAAwB,EACxB,GAAW,EACX,QAAgB,EAChB,MAAqB;IAErB,IAAI,GAAW,CAAC;IAEhB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,IAAA,mCAAY,EACtB,MAAM,EACN,IAAI,4BAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EACzD,EAAE,SAAS,EAAE,2BAA2B,EAAE,CAC3C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAA,uCAAoB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEtD,OAAO,KAAK,CACV,cAAc,EACd,QAAQ,EACR,eAAe,EACf,mFAAmF;YACjF,0CAA0C,EAC5C,SAAS,CAAC,OAAO,CAClB,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,0BAA0B,CAAC;SACxD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,sEAAsE;YACtE,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,MAAM,GAAG,IAAA,sCAAmB,EAChC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EACrD,MAAM,CACP,CAAC;YAEF,OAAO,KAAK,CACV,cAAc,EACd,QAAQ,EACR,kBAAkB,EAClB,8BAA8B,QAAQ,CAAC,MAAM,gCAAgC;gBAC3E,gFAAgF;gBAChF,qDAAqD,EACvD,MAAM,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CACpC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEvC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,KAAK,CACV,cAAc,EACd,QAAQ,EACR,kBAAkB,EAClB,+EAA+E;gBAC7E,wEAAwE,CAC3E,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CACV,cAAc,EACd,QAAQ,EACR,IAAI,EACJ,8EAA8E,CAC/E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,SAAS,GAAG,IAAA,uCAAoB,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAEtD,OAAO,KAAK,CACV,cAAc,EACd,QAAQ,EACR,qBAAqB,EACrB,oFAAoF;YAClF,oFAAoF;YACpF,oCAAoC,EACtC,SAAS,CAAC,OAAO,CAClB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,wEAAwE;AACxE,KAAK,UAAU,UAAU,CACvB,MAAgB,EAChB,MAAc,EACd,GAAW;IAEX,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,4BAAgB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CACnD,CAAC;IAEF,6EAA6E;IAC7E,8EAA8E;IAC9E,oCAAoC;IACpC,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,iBAAiB,EAAE,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,aAAa,CAC1B,MAAgB,EAChB,MAAc,EACd,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,+BAAmB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CACT,6CAA6C,GAAG,kBAAkB,MAAM,KAAK;YAC3E,0DAA0D,gCAAwB,IAAI,CACzF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CACZ,EAAsB,EACtB,MAAwC,EACxC,IAAoC,EACpC,MAAc,EACd,KAAc;IAEd,OAAO;QACL,EAAE;QACF,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC;QACvB,MAAM;QACN,IAAI;QACJ,MAAM;QACN,KAAK,EAAE,KAAK,IAAI,IAAI;KACrB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,EAAsB;IAC1C,OAAO,KAAK,CACV,EAAE,EACF,SAAS,EACT,eAAe,EACf,+EAA+E,CAChF,CAAC;AACJ,CAAC"}

package/dist/storage/drivers/s3/s3-family.d.ts

@@ -0,0 +1,20 @@
+import type { StorageDriverDefinition } from '../storage-driver';
+/**
+ * The `s3` driver: Amazon S3.
+ *
+ * @stability experimental
+ */
+export declare const s3StorageDriver: StorageDriverDefinition<Record<string, unknown>>;
+/**
+ * The `r2` driver: Cloudflare R2.
+ *
+ * @stability experimental
+ */
+export declare const r2StorageDriver: StorageDriverDefinition<Record<string, unknown>>;
+/**
+ * The `s3compatible` driver: MinIO, Backblaze B2, Wasabi, Ceph RGW and anything else speaking S3 at an endpoint you supply.
+ *
+ * @stability experimental
+ */
+export declare const s3CompatibleStorageDriver: StorageDriverDefinition<Record<string, unknown>>;
+//# sourceMappingURL=s3-family.d.ts.map

package/dist/storage/drivers/s3/s3-family.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-family.d.ts","sourceRoot":"","sources":["../../../../src/storage/drivers/s3/s3-family.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAwB,uBAAuB,EAAyB,MAAM,mBAAmB,CAAC;AA0K9G;;;;GAIG;AACH,eAAO,MAAM,eAAe,kDAI1B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,eAAe,kDAI1B,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,kDAKpC,CAAC"}