@schema-weaver/pg-connector 0.0.0-stage → 2.0.1

package/dist/esm/audit/redact.js

@@ -0,0 +1,506 @@
+import * as crypto from 'crypto';
+const DIGIT = /[0-9]/;
+/** Postgres duplicate-key detail: Key (email)=(alice@corp.com). */
+const PG_KEY_VALUE_DETAIL = /=\(([^)]*)\)/g;
+/**
+ * Sentinel returned when a statement cannot be fully accounted for — an
+ * unterminated literal, comment or dollar quote, or input larger than
+ * {@link MAX_SQL_SCAN_BYTES}. Callers must treat it as "no redacted text
+ * available" and emit this marker instead of any part of the statement.
+ */
+export const UNREDACTABLE = '/* unredactable */';
+/** Character cap on a statement preview. */
+export const PREVIEW_MAX_LENGTH = 200;
+/** Alias for {@link PREVIEW_MAX_LENGTH}. */
+export const PREVIEW_MAX_CHARS = PREVIEW_MAX_LENGTH;
+/**
+ * Byte cap on a statement preview. Character counting alone is not a size
+ * bound — 200 characters can be 800 bytes of multi-byte UTF-8 — and preview
+ * text is written to the local audit log *and* shipped to the cloud.
+ */
+export const PREVIEW_MAX_BYTES = 512;
+/**
+ * Hard ceiling on how much SQL a single redaction pass will lex. A statement
+ * larger than this is reported unredactable rather than passed through.
+ */
+export const MAX_SQL_SCAN_BYTES = 1_048_576;
+function isTagStart(ch) {
+    return ch !== undefined && /[A-Za-z_]/.test(ch);
+}
+function isTagChar(ch) {
+    return ch !== undefined && /[A-Za-z0-9_]/.test(ch);
+}
+/**
+ * Scans a PostgreSQL statement far enough to guarantee that every character
+ * which could carry data is either SQL syntax or has been replaced.
+ *
+ * Every literal form is tracked: single quotes with doubled-quote escapes,
+ * `E'...'` escape strings with backslash escapes, `U&'...'` unicode strings
+ * with `\XXXX` / `\+XXXXXX` escapes, untagged and tagged dollar quotes, and
+ * double-quoted identifiers including the `U&"..."` form. Both comment forms
+ * are tracked too: line comments, which run to end of line and are never
+ * continued by a backslash, and nestable block comments. `#` is not a comment
+ * in PostgreSQL and is not treated as one here.
+ *
+ * The `E'…'` and `U&'…'` introducers count only when they are not glued to a
+ * preceding identifier character, which is what PostgreSQL's scanner does: in
+ * `xE'a\'b'` the identifier is `xE` and the quote opens an ordinary string whose
+ * body is `a\`, and this lexer closes it at the same quote the server would.
+ * The two quote characters are also kept apart: a `"` inside `'…'` is data, and
+ * ending the literal on it would print the remainder of the statement as text.
+ * Text outside a literal is left as it is — it is syntax and identifiers, and an
+ * unquoted identifier can contain neither `@` nor `.`, so nothing the server
+ * would accept as row data can reach the output through it. Quoted identifiers
+ * *are* tokens, because PostgreSQL prints row values between double quotes.
+ *
+ * Anything the scan cannot account for reports `safe: false`, and the caller
+ * must emit {@link UNREDACTABLE} rather than any part of the statement.
+ */
+export function lexSql(sql) {
+    const tokens = [];
+    let text = '';
+    const n = sql.length;
+    let i = 0;
+    const flush = () => {
+        if (text.length > 0) {
+            tokens.push({ kind: 'text', value: text });
+            text = '';
+        }
+    };
+    while (i < n) {
+        const ch = sql[i];
+        // Line comment: runs to end of line.
+        if (ch === '-' && sql[i + 1] === '-') {
+            const nl = sql.indexOf('\n', i + 2);
+            i = nl === -1 ? n : nl;
+            continue;
+        }
+        // Block comment: PostgreSQL nests these.
+        if (ch === '/' && sql[i + 1] === '*') {
+            let depth = 0;
+            let j = i;
+            while (j < n) {
+                if (sql[j] === '/' && sql[j + 1] === '*') {
+                    depth++;
+                    j += 2;
+                    continue;
+                }
+                if (sql[j] === '*' && sql[j + 1] === '/') {
+                    depth--;
+                    j += 2;
+                    if (depth === 0)
+                        break;
+                    continue;
+                }
+                j++;
+            }
+            if (depth !== 0)
+                return { safe: false, reason: 'unterminated block comment', tokens: [] };
+            i = j;
+            continue;
+        }
+        // `U&'...'` unicode string and `U&"..."` unicode identifier. These are
+        // lexed before the single-character cases because the introducer spans
+        // three characters.
+        if ((ch === 'U' || ch === 'u') && sql[i + 1] === '&' && !isIdentPart(sql[i - 1] ?? '')) {
+            const quote = sql[i + 2];
+            if (quote === "'" || quote === '"') {
+                const r = lexSingleQuoted(sql, i + 2, true, quote);
+                if (r.malformed)
+                    return { safe: false, reason: r.reason, tokens: [] };
+                flush();
+                tokens.push({
+                    kind: 'literal',
+                    value: sql.slice(i, r.end),
+                    form: quote === "'" ? 'unicode_string' : 'identifier',
+                    open: 3,
+                });
+                i = r.end;
+                continue;
+            }
+        }
+        // Escape-string literal: E'...' with backslash escapes. The introducer must
+        // not be the tail of a longer identifier (`fooE'x'` is `foo` then a string).
+        if ((ch === 'E' || ch === 'e') && sql[i + 1] === "'" && !isIdentPart(sql[i - 1] ?? '')) {
+            const r = lexSingleQuoted(sql, i + 1, true, "'");
+            if (r.malformed)
+                return { safe: false, reason: r.reason, tokens: [] };
+            flush();
+            tokens.push({ kind: 'literal', value: sql.slice(i, r.end), form: 'estring', open: 2 });
+            i = r.end;
+            continue;
+        }
+        // Plain string literal: '...' with doubled-quote escapes.
+        if (ch === "'") {
+            const r = lexSingleQuoted(sql, i, false, "'");
+            if (r.malformed)
+                return { safe: false, reason: r.reason, tokens: [] };
+            flush();
+            tokens.push({ kind: 'literal', value: sql.slice(i, r.end), form: 'string', open: 1 });
+            i = r.end;
+            continue;
+        }
+        // Dollar quote: $$...$$ and $tag$...$tag$.
+        if (ch === '$') {
+            const r = lexDollarQuote(sql, i);
+            if (r.malformed)
+                return { safe: false, reason: r.reason, tokens: [] };
+            if (r.end > i) {
+                flush();
+                tokens.push({ kind: 'literal', value: sql.slice(i, r.end), form: 'dollar', open: r.open });
+                i = r.end;
+                continue;
+            }
+            text += ch;
+            i++;
+            continue;
+        }
+        // Quoted identifier: "..." with doubled-quote escapes.
+        if (ch === '"') {
+            let j = i + 1;
+            while (j < n) {
+                if (sql[j] === '"') {
+                    if (sql[j + 1] === '"') {
+                        j += 2;
+                        continue;
+                    }
+                    break;
+                }
+                j++;
+            }
+            if (j >= n)
+                return { safe: false, reason: 'unterminated quoted identifier', tokens: [] };
+            flush();
+            tokens.push({ kind: 'literal', value: sql.slice(i, j + 1), form: 'identifier', open: 1 });
+            i = j + 1;
+            continue;
+        }
+        text += ch;
+        i++;
+    }
+    flush();
+    return { safe: true, tokens };
+}
+function isIdentPart(ch) {
+    return ch !== undefined && /[A-Za-z0-9_$]/.test(ch);
+}
+/** Matches untagged and tagged dollar-quote openers; `end === start` for `$1`-style placeholders. */
+function lexDollarQuote(sql, start) {
+    const n = sql.length;
+    let i = start + 1;
+    if (sql[i] !== '$' && isTagStart(sql[i])) {
+        while (i < n && isTagChar(sql[i]))
+            i++;
+    }
+    if (sql[i] !== '$') {
+        return { end: start, open: 0, malformed: false };
+    }
+    const tag = sql.slice(start, i + 1);
+    const close = sql.indexOf(tag, i + 1);
+    if (close === -1) {
+        return { end: start, open: 0, malformed: true, reason: 'unterminated dollar quote' };
+    }
+    return { end: close + tag.length, open: tag.length, malformed: false };
+}
+/**
+ * Scan a quoted run starting at the opening quote. `escape` enables backslash
+ * handling for `E'...'` and `U&'...'`. `delim` is the character that closes the
+ * run: the other quote character is ordinary data inside it (`'say "hi"'` is one
+ * string), and treating it as a terminator would end the literal early and print
+ * the rest of the statement as text.
+ *
+ * Returns the index just past the closing quote, or `start` with `malformed: true`
+ * when unterminated.
+ */
+function lexSingleQuoted(sql, start, escape, delim) {
+    const n = sql.length;
+    let i = start + 1;
+    while (i < n) {
+        const ch = sql[i];
+        if (escape && ch === '\\') {
+            // E'..': \x escapes any x. U&'..': \XXXX, \+XXXXXX or \\.
+            if (sql[i + 1] === '+' && /^[0-9A-Fa-f]{6}/.test(sql.slice(i + 2, i + 8))) {
+                i += 8;
+                continue;
+            }
+            if (/^[0-9A-Fa-f]{4}/.test(sql.slice(i + 1, i + 5))) {
+                i += 5;
+                continue;
+            }
+            if (i + 1 >= n)
+                return { end: start, malformed: true, reason: 'unterminated string literal' };
+            i += 2;
+            continue;
+        }
+        if (ch === delim) {
+            if (sql[i + 1] === delim) {
+                i += 2; // doubled-quote escape
+                continue;
+            }
+            return { end: i + 1, malformed: false };
+        }
+        i++;
+    }
+    return { end: start, malformed: true, reason: 'unterminated string literal' };
+}
+/**
+ * The default for {@link RedactOptions.redactIdentifiers}, and the default every
+ * exported entry point uses.
+ *
+ * **On.** A double-quoted run is a schema name only when the statement really is
+ * trusted SQL. It is also how PostgreSQL reports a rejected row value
+ * (`invalid input syntax for type integer: "alice@corp.com"`), how a careless
+ * developer labels a column (`SELECT 1 AS "alice@corp.com"`) and how a path is
+ * smuggled (`COPY t TO '/tmp/"secret"'`). Previews exist for auditing and
+ * fingerprinting, not for round-tripping or replay, so keeping an identifier
+ * buys a readable schema name at the cost of an egress channel. Callers that
+ * genuinely need identifiers pass `redactIdentifiers: false` explicitly.
+ */
+export const REDACT_IDENTIFIERS_BY_DEFAULT = true;
+/**
+ * Replaces the body of every literal token, keeping the delimiters intact.
+ * Quoted identifiers are redacted unless `redactIdentifiers` is explicitly false.
+ */
+export function redactTokens(tokens, redactIdentifiers = true) {
+    let out = '';
+    for (const t of tokens) {
+        if (t.kind === 'text') {
+            out += t.value;
+            continue;
+        }
+        if (t.form === 'identifier' && !redactIdentifiers) {
+            out += t.value;
+            continue;
+        }
+        const close = t.form === 'dollar' ? t.value.slice(t.value.length - t.open) : t.value[t.value.length - 1];
+        out += t.value.slice(0, t.open) + '?' + close;
+    }
+    return out;
+}
+/**
+ * Characters that put the next token in an *operand* position, i.e. where a
+ * column value is expected rather than a structural constant.
+ */
+const OPERAND_INTRODUCER = /[=<>!~@|&?*+\-/%^:,.([;]/;
+/**
+ * Replaces bare numeric literals that are not part of a word, identifier or
+ * placeholder.
+ *
+ * A numeric literal is data unless it is a lone single digit standing in a
+ * structural position — the `1` of `SELECT 1`, which cannot identify a row and
+ * is noise rather than evidence. Everything else goes: any literal of two or
+ * more characters (`12345`, `1.5e3`), and any single digit in an operand
+ * position, which is where a compared value actually lives (`x = 1`,
+ * `VALUES (1, 2)`, `IN (1, 2)`).
+ */
+export function redactNumbers(sql) {
+    let out = '';
+    let i = 0;
+    const n = sql.length;
+    while (i < n) {
+        const ch = sql[i];
+        if (!DIGIT.test(ch)) {
+            out += ch;
+            i++;
+            continue;
+        }
+        const prev = i > 0 ? sql[i - 1] : '';
+        // Inside an identifier (`t1`), a positional parameter (`$1`) or a qualified
+        // name (`schema.1`) the digits are part of a name, not a number.
+        if (prev !== '' && /[A-Za-z0-9_$]/.test(prev)) {
+            out += ch;
+            i++;
+            continue;
+        }
+        let j = i;
+        while (j < n && DIGIT.test(sql[j]))
+            j++;
+        if (sql[j] === '.') {
+            j++;
+            while (j < n && DIGIT.test(sql[j]))
+                j++;
+        }
+        if (sql[j] === 'e' || sql[j] === 'E') {
+            let k = j + 1;
+            if (sql[k] === '+' || sql[k] === '-')
+                k++;
+            if (k < n && DIGIT.test(sql[k])) {
+                j = k;
+                while (j < n && DIGIT.test(sql[j]))
+                    j++;
+            }
+        }
+        const next = sql[j] ?? '';
+        if (/[A-Za-z0-9_$]/.test(next)) {
+            out += ch;
+            i++;
+            continue;
+        }
+        if (j === i + 1 && !operandPosition(out)) {
+            // A bare single digit in a structural position: `SELECT 1`, `LIMIT 1`.
+            out += ch;
+            i = j;
+            continue;
+        }
+        out += '?';
+        i = j;
+    }
+    return out;
+}
+/**
+ * True when the last non-blank character already emitted puts what follows in an
+ * operand position. Blank characters are skipped so `x = 1` is an operand even
+ * though the digit is separated from `=`.
+ */
+function operandPosition(emitted) {
+    for (let k = emitted.length - 1; k >= 0; k--) {
+        const c = emitted[k];
+        if (c === ' ' || c === '\t' || c === '\n' || c === '\r')
+            continue;
+        return OPERAND_INTRODUCER.test(c);
+    }
+    return false;
+}
+/**
+ * Replace data-bearing literals with placeholders.
+ *
+ * Preview text is shipped to the cloud audit store, so this is a zero-retention
+ * boundary, not truncation. Dollar-quoted bodies, escape-string literals,
+ * unicode strings, numeric literals, quoted identifiers and both comment forms
+ * all have their contents removed unless `redactIdentifiers: false` is passed
+ * explicitly. A statement that cannot be fully accounted for — an unterminated
+ * construct, or more than {@link MAX_SQL_SCAN_BYTES} — returns
+ * {@link UNREDACTABLE} and no part of the statement text.
+ */
+export function redactSqlLiterals(sql, opts = {}) {
+    if (typeof sql !== 'string')
+        return UNREDACTABLE;
+    if (Buffer.byteLength(sql, 'utf8') > MAX_SQL_SCAN_BYTES)
+        return UNREDACTABLE;
+    const lexed = lexSql(sql);
+    if (!lexed.safe)
+        return UNREDACTABLE;
+    const out = redactNumbers(redactTokens(lexed.tokens, opts.redactIdentifiers !== false));
+    return opts.redactKeyValues === false ? out : out.replace(PG_KEY_VALUE_DETAIL, '= (?)');
+}
+/**
+ * True when the value is {@link UNREDACTABLE} — no redacted text is available —
+ * or empty. Both must be treated as "emit nothing": an empty preview is not
+ * distinguishable from a dropped one in an audit record.
+ */
+export function isUnredactable(value) {
+    return typeof value !== 'string' || value === UNREDACTABLE || value.length === 0;
+}
+/**
+ * Key for the identifier digest embedded in a statement fingerprint.
+ *
+ * Generated per process and never leaves it. An *unkeyed* digest would be a
+ * confirmation oracle: an attacker holding the audit log could hash a
+ * dictionary of guessed addresses and learn whether a statement used one, which
+ * is exactly the leak {@link REDACT_IDENTIFIERS_BY_DEFAULT} exists to stop.
+ *
+ * The key is process-local, so fingerprints are stable within a run and differ
+ * across restarts. That is the correct trade: the audit *chain* is what has to
+ * survive a restart (it is anchored in `head.json`), while a fingerprint is a
+ * grouping aid for one log file.
+ */
+const IDENTIFIER_DIGEST_KEY = crypto.randomBytes(32);
+/**
+ * Delimiters for the digest placeholder inside the fingerprint input. NUL
+ * cannot occur in PostgreSQL text, so the placeholder can never be forged by
+ * the input; the leading `x` keeps {@link redactNumbers} from reading the hex
+ * digits of the digest as a numeric literal.
+ */
+const DIGEST_OPEN = '\u0000x';
+const DIGEST_CLOSE = '\u0000';
+function identifierDigest(body) {
+    return crypto
+        .createHmac('sha256', IDENTIFIER_DIGEST_KEY)
+        .update(body, 'utf8')
+        .digest('hex')
+        .slice(0, 16);
+}
+/**
+ * The fingerprint input for a lexed statement: literal bodies become `?`,
+ * because a value is not part of a statement's identity, while quoted
+ * identifiers become a keyed digest.
+ *
+ * Identifiers must be distinguished even though they are redacted in the
+ * preview: `SELECT * FROM "alpha"` and `SELECT * FROM "beta"` are different
+ * statements, and collapsing them onto one fingerprint would hide a table
+ * change behind a shared id. The digest is non-invertible and process-keyed, so
+ * distinguishing them costs nothing.
+ */
+function fingerprintTokens(tokens) {
+    let out = '';
+    for (const t of tokens) {
+        if (t.kind === 'text') {
+            out += t.value;
+            continue;
+        }
+        if (t.form === 'identifier') {
+            out += `"${DIGEST_OPEN}${identifierDigest(t.value.slice(t.open, -1))}${DIGEST_CLOSE}"`;
+            continue;
+        }
+        const close = t.form === 'dollar' ? t.value.slice(t.value.length - t.open) : t.value[t.value.length - 1];
+        out += t.value.slice(0, t.open) + '?' + close;
+    }
+    return out;
+}
+/**
+ * Stable id for "the same statement, whatever values were passed".
+ *
+ * Whitespace, letter case, comments and literal values are not part of a
+ * statement's identity, so they are normalised away. Quoted identifiers are
+ * *not* — they are structure, and see {@link fingerprintTokens}.
+ *
+ * A statement that cannot be redacted shares one fingerprint with every other
+ * unredactable statement. That is deliberate: deriving the id from raw text
+ * would put attacker-chosen bytes into a value that leaves the process.
+ */
+export function fingerprintStatement(sql) {
+    const lexed = typeof sql === 'string' && Buffer.byteLength(sql, 'utf8') <= MAX_SQL_SCAN_BYTES
+        ? lexSql(sql)
+        : { safe: false, tokens: [] };
+    const normalized = (lexed.safe ? redactNumbers(fingerprintTokens(lexed.tokens)) : UNREDACTABLE)
+        .toLowerCase()
+        .replace(/\s+/g, ' ')
+        .replace(/;\s*$/, '')
+        .trim();
+    return crypto.createHash('sha256').update(normalized, 'utf8').digest('hex').slice(0, 16);
+}
+/**
+ * Redacted, character- and byte-capped preview for the audit record. Capping
+ * happens after redaction so the cap can never split a redaction marker, and an
+ * unredactable statement collapses to a fixed placeholder rather than any of its
+ * text.
+ */
+export function previewStatement(sql) {
+    const redacted = redactSqlLiterals(typeof sql === 'string' ? sql.trim() : sql);
+    if (redacted === UNREDACTABLE)
+        return UNREDACTABLE;
+    let out = sliceCodeUnits(redacted, PREVIEW_MAX_LENGTH);
+    const buf = Buffer.from(out, 'utf8');
+    if (buf.length > PREVIEW_MAX_BYTES) {
+        let end = PREVIEW_MAX_BYTES;
+        // Never split a UTF-8 sequence.
+        while (end > 0 && (buf[end] & 0xc0) === 0x80)
+            end--;
+        out = sliceCodeUnits(buf.subarray(0, end).toString('utf8'), out.length);
+    }
+    return out === redacted ? out : out + '…';
+}
+/** Slice by UTF-16 code units without splitting a surrogate pair. */
+function sliceCodeUnits(text, max) {
+    if (text.length <= max)
+        return text;
+    let end = max;
+    if (end > 0) {
+        const code = text.charCodeAt(end - 1);
+        // A high surrogate at the cut means the pair is half-taken.
+        if (code >= 0xd800 && code <= 0xdbff)
+            end -= 1;
+    }
+    return text.slice(0, end);
+}
+//# sourceMappingURL=redact.js.map

package/dist/esm/audit/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../../src/audit/redact.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,MAAM,KAAK,GAAG,OAAO,CAAC;AAEtB,mEAAmE;AACnE,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAEjD,4CAA4C;AAC5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAEtC,4CAA4C;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAC;AAE5C,SAAS,UAAU,CAAC,EAAsB;IACxC,OAAO,EAAE,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,SAAS,CAAC,EAAsB;IACvC,OAAO,EAAE,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrD,CAAC;AAeD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,MAAM,KAAK,GAAG,GAAS,EAAE;QACvB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3C,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAElB,qCAAqC;QACrC,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrC,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,SAAS;QACX,CAAC;QAED,yCAAyC;QACzC,IAAI,EAAE,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrC,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACb,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACzC,KAAK,EAAE,CAAC;oBACR,CAAC,IAAI,CAAC,CAAC;oBACP,SAAS;gBACX,CAAC;gBACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACzC,KAAK,EAAE,CAAC;oBACR,CAAC,IAAI,CAAC,CAAC;oBACP,IAAI,KAAK,KAAK,CAAC;wBAAE,MAAM;oBACvB,SAAS;gBACX,CAAC;gBACD,CAAC,EAAE,CAAC;YACN,CAAC;YACD,IAAI,KAAK,KAAK,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YAC1F,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QAED,uEAAuE;QACvE,uEAAuE;QACvE,oBAAoB;QACpB,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACvF,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBACnC,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBACnD,IAAI,CAAC,CAAC,SAAS;oBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;gBACtE,KAAK,EAAE,CAAC;gBACR,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;oBAC1B,IAAI,EAAE,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,YAAY;oBACrD,IAAI,EAAE,CAAC;iBACR,CAAC,CAAC;gBACH,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;gBACV,SAAS;YACX,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,6EAA6E;QAC7E,IAAI,CAAC,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACvF,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,CAAC,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACtE,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACvF,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;YACV,SAAS;QACX,CAAC;QAED,0DAA0D;QAC1D,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACtE,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACtF,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;YACV,SAAS;QACX,CAAC;QAED,2CAA2C;QAC3C,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACtE,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;gBACd,KAAK,EAAE,CAAC;gBACR,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3F,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;gBACV,SAAS;YACX,CAAC;YACD,IAAI,IAAI,EAAE,CAAC;YACX,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QAED,uDAAuD;QACvD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACb,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACnB,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;wBACvB,CAAC,IAAI,CAAC,CAAC;wBACP,SAAS;oBACX,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,CAAC,EAAE,CAAC;YACN,CAAC;YACD,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;YACzF,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC1F,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACV,SAAS;QACX,CAAC;QAED,IAAI,IAAI,EAAE,CAAC;QACX,CAAC,EAAE,CAAC;IACN,CAAC;IAED,KAAK,EAAE,CAAC;IACR,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,EAAsB;IACzC,OAAO,EAAE,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,qGAAqG;AACrG,SAAS,cAAc,CACrB,GAAW,EACX,KAAa;IAEb,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAClB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,CAAC,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CACtB,GAAW,EACX,KAAa,EACb,MAAe,EACf,KAAgB;IAEhB,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,MAAM,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAC1B,0DAA0D;YAC1D,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpD,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;YAC9F,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,KAAK,EAAE,CAAC;YACjB,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBACzB,CAAC,IAAI,CAAC,CAAC,CAAC,uBAAuB;gBAC/B,SAAS;YACX,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QAC1C,CAAC;QACD,CAAC,EAAE,CAAC;IACN,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;AAChF,CAAC;AAmBD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAElD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAkB,EAAE,iBAAiB,GAAG,IAAI;IACvE,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAClD,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GACT,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7F,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACpB,GAAG,IAAI,EAAE,CAAC;YACV,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,4EAA4E;QAC5E,iEAAiE;QACjE,IAAI,IAAI,KAAK,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,GAAG,IAAI,EAAE,CAAC;YACV,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,CAAC,EAAE,CAAC;QACxC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACnB,CAAC,EAAE,CAAC;YACJ,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAAE,CAAC,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChC,CAAC,GAAG,CAAC,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBAAE,CAAC,EAAE,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,GAAG,IAAI,EAAE,CAAC;YACV,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,uEAAuE;YACvE,GAAG,IAAI,EAAE,CAAC;YACV,CAAC,GAAG,CAAC,CAAC;YACN,SAAS;QACX,CAAC;QACD,GAAG,IAAI,GAAG,CAAC;QACX,CAAC,GAAG,CAAC,CAAC;IACR,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,OAAe;IACtC,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QAClE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,OAAsB,EAAE;IACrE,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC;IACjD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,kBAAkB;QAAE,OAAO,YAAY,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,YAAY,CAAC;IACrC,MAAM,GAAG,GAAG,aAAa,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,eAAe,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAgC;IAC7D,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;AACnF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,qBAAqB,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;AAErD;;;;;GAKG;AACH,MAAM,WAAW,GAAG,SAAS,CAAC;AAC9B,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,EAAE,qBAAqB,CAAC;SAC3C,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;SACpB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,iBAAiB,CAAC,MAAkB;IAC3C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC5B,GAAG,IAAI,IAAI,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY,GAAG,CAAC;YACvF,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GACT,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC7F,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,KAAK,GACT,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,kBAAkB;QAC7E,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QACb,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAgB,EAAE,CAAC;IAChD,MAAM,UAAU,GAAG,CACjB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAC3E;SACE,WAAW,EAAE;SACb,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,IAAI,EAAE,CAAC;IACV,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/E,IAAI,QAAQ,KAAK,YAAY;QAAE,OAAO,YAAY,CAAC;IAEnD,IAAI,GAAG,GAAG,cAAc,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,GAAG,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,IAAI,GAAG,GAAG,iBAAiB,CAAC;QAC5B,gCAAgC;QAChC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI;YAAE,GAAG,EAAE,CAAC;QACpD,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC;AAC5C,CAAC;AAED,qEAAqE;AACrE,SAAS,cAAc,CAAC,IAAY,EAAE,GAAW;IAC/C,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QACtC,4DAA4D;QAC5D,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;YAAE,GAAG,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5B,CAAC"}

package/dist/esm/audit/sanitize.d.ts

@@ -0,0 +1,78 @@
+export interface SafeDbError {
+    code: string;
+    severity?: string;
+    /** Sanitised, operator-useful message. Never contains row data or topology. */
+    message: string;
+    /** Optional curated hint, only for codes on a safe allow-list. */
+    hint?: string;
+    retryable?: boolean;
+}
+/** Connection parameters whose values must never leave the process. */
+export interface SanitizeTopology {
+    host?: string;
+    port?: number;
+    user?: string;
+    database?: string;
+    project?: string;
+}
+export interface SanitizeOptions {
+    /** Literal/comment redactor. Defaults to `redactSqlLiterals`. */
+    redactSql?: (s: string) => string;
+    /** Exact connection strings to scrub, when the caller knows them. */
+    topology?: SanitizeTopology;
+}
+/**
+ * SQLSTATE codes for which operator-useful detail text is surfaced.
+ *
+ * These are all class-22/23 (integrity), class-28 (auth), class-40 (transaction
+ * rollback), class-42 (syntax/access), class-53/55 (resource) and 57 (cancel)
+ * codes whose text is structural. Anything NOT listed here yields `code` +
+ * `severity` + a generic message only.
+ */
+export declare const PG_DETAIL_ALLOWLIST: ReadonlySet<string>;
+/**
+ * Our own one-line description for each SQLSTATE we recognise.
+ *
+ * These are strings written here, not derived from PostgreSQL output, so they
+ * cannot carry row data. Codes that are absent get a generic message that names
+ * only the SQLSTATE.
+ */
+export declare const PG_CURATED_MESSAGES: Readonly<Record<string, string>>;
+/**
+ * Our own hints. Never the server's `hint` field — that is attacker-influenced
+ * free text in the general case and is not on any allow-list.
+ */
+export declare const PG_CURATED_HINTS: Readonly<Record<string, string>>;
+/** Codes where retrying the identical request can succeed. */
+export declare const PG_RETRYABLE_CODES: ReadonlySet<string>;
+/**
+ * Replacement text for `PoolError` codes. The originals interpolate host, port,
+ * user and database name, so they are never forwarded verbatim.
+ */
+export declare const POOL_ERROR_MESSAGES: Readonly<Record<string, string>>;
+/**
+ * Remove hostnames, usernames, database names, URLs, absolute paths and email
+ * addresses from text that is about to leave the process.
+ */
+export declare function scrubTopology(text: string, topology?: SanitizeTopology): string;
+/** True when `code` may contribute detail text and a curated hint. */
+export declare function isDetailAllowed(code: string): boolean;
+/**
+ * Convert an arbitrary thrown value into a wire-safe error description.
+ *
+ * Never throws. Never returns row data, credentials, hostnames, usernames,
+ * database names or filesystem paths.
+ */
+export declare function sanitizePgError(err: unknown, opts?: SanitizeOptions): SafeDbError;
+/**
+ * Sanitise a free-text reason that came from our own permission layer. Those
+ * strings can embed a parser error, and a parser error embeds the SQL that
+ * failed to parse — so identifiers and literals are both redacted here.
+ */
+export declare function sanitizeReason(reason: string, opts?: SanitizeOptions): string;
+/**
+ * Sanitise a message that arrived as a bare string (e.g. a migration
+ * statement's recorded error) rather than as an error object.
+ */
+export declare function sanitizeErrorText(text: string | undefined | null, opts?: SanitizeOptions): string;
+//# sourceMappingURL=sanitize.d.ts.map

package/dist/esm/audit/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../../src/audit/sanitize.ts"],"names":[],"mappings":"AAyBA,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,uEAAuE;AACvE,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,iEAAiE;IACjE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAClC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,gBAAgB,CAAC;CAC7B;AAKD;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAkBlD,CAAC;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAuChE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAkB7D,CAAC;AAEF,8DAA8D;AAC9D,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAWjD,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQhE,CAAC;AAuCF;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAuB/E;AAUD,sEAAsE;AACtE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAgCD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,GAAE,eAAoB,GAAG,WAAW,CA4BrF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE,eAAoB,GAAG,MAAM,CAGjF;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAC/B,IAAI,GAAE,eAAoB,GACzB,MAAM,CAER"}