@teleporthq/teleport-plugin-next-workflows 0.43.1

package/dist/cjs/sql-query-validator.js

@@ -0,0 +1,618 @@
+"use strict";
+/**
+ * SQL Query Validator
+ *
+ * Detects forbidden SQL operations in raw queries. Only data-manipulation
+ * statements (SELECT, INSERT, UPDATE, DELETE) are allowed. Any operation that
+ * alters database structure, permissions, configuration, or system state is
+ * rejected.
+ *
+ * The validator is designed to be reusable:
+ *  - At design-time: validating user-entered queries in the workflow editor
+ *  - At publish-time: blocking project generation when dangerous queries exist
+ *  - At runtime: as a guard in the generated Next.js API routes
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getDangerousFunctions = exports.getForbiddenPatterns = exports.isHighRiskSourceNode = exports.validateSQLQuery = exports.containsMultipleStatements = exports.stripCommentsAndStrings = void 0;
+const DDL_OBJECTS = [
+    'TABLE',
+    'INDEX',
+    'VIEW',
+    'MATERIALIZED\\s+VIEW',
+    'DATABASE',
+    'SCHEMA',
+    'SEQUENCE',
+    'TYPE',
+    'FUNCTION',
+    'PROCEDURE',
+    'TRIGGER',
+    'EXTENSION',
+    'ROLE',
+    'USER',
+    'POLICY',
+    'PUBLICATION',
+    'SUBSCRIPTION',
+    'TABLESPACE',
+    'DOMAIN',
+    'AGGREGATE',
+    'COLLATION',
+    'CONVERSION',
+    'OPERATOR',
+    'RULE',
+    'STATISTICS',
+    'TEXT\\s+SEARCH',
+    'SERVER',
+    'FOREIGN\\s+DATA\\s+WRAPPER',
+    'FOREIGN\\s+TABLE',
+    'EVENT\\s+TRIGGER',
+    'ACCESS\\s+METHOD',
+].join('|');
+const buildDDLPatterns = () => {
+    const actions = [
+        {
+            verb: 'CREATE',
+            message: (obj) => `CREATE ${obj} modifies the database schema. Raw queries must only read or manipulate data (SELECT / INSERT / UPDATE / DELETE).`,
+        },
+        {
+            verb: 'ALTER',
+            message: (obj) => `ALTER ${obj} modifies the database schema. Raw queries must only read or manipulate data (SELECT / INSERT / UPDATE / DELETE).`,
+        },
+        {
+            verb: 'DROP',
+            message: (obj) => `DROP ${obj} permanently removes database objects. Raw queries must only read or manipulate data (SELECT / INSERT / UPDATE / DELETE).`,
+        },
+    ];
+    const patterns = [];
+    for (const action of actions) {
+        patterns.push({
+            category: 'DDL',
+            label: `${action.verb} <object>`,
+            pattern: new RegExp(`\\b${action.verb}\\s+(?:OR\\s+REPLACE\\s+)?(?:TEMP(?:ORARY)?\\s+)?(?:IF\\s+(?:NOT\\s+)?EXISTS\\s+)?(?:UNIQUE\\s+)?(?:CONCURRENTLY\\s+)?(${DDL_OBJECTS})\\b`, 'i'),
+            message: action.message('<detected object>'),
+        });
+    }
+    return patterns;
+};
+const FORBIDDEN_PATTERNS = [
+    // DDL - generated dynamically above
+    ...buildDDLPatterns(),
+    // TRUNCATE
+    {
+        category: 'DDL',
+        label: 'TRUNCATE',
+        pattern: /\bTRUNCATE\b/i,
+        message: 'TRUNCATE removes all rows from a table and cannot be rolled back. Use DELETE with appropriate filters instead if you need to remove data.',
+    },
+    // RENAME
+    {
+        category: 'DDL',
+        label: 'RENAME',
+        pattern: /\bALTER\s+\w+\s+.*?\bRENAME\b/i,
+        message: 'Renaming database objects modifies the schema. Raw queries must only read or manipulate data.',
+    },
+    // DCL
+    {
+        category: 'DCL',
+        label: 'GRANT',
+        pattern: /\bGRANT\b/i,
+        message: 'GRANT changes database permissions, which could compromise security. Permission management is not allowed through raw queries.',
+    },
+    {
+        category: 'DCL',
+        label: 'REVOKE',
+        pattern: /\bREVOKE\b/i,
+        message: 'REVOKE changes database permissions, which could compromise security. Permission management is not allowed through raw queries.',
+    },
+    // Administrative
+    {
+        category: 'ADMINISTRATIVE',
+        label: 'VACUUM',
+        pattern: /\bVACUUM\b/i,
+        message: 'VACUUM is a database maintenance command that affects performance and locks. Administrative operations are not allowed through raw queries.',
+    },
+    {
+        category: 'ADMINISTRATIVE',
+        label: 'ANALYZE (standalone)',
+        pattern: /(?<!\bEXPLAIN\s+)\bANALYZE\b/i,
+        message: 'ANALYZE collects statistics about table contents. Administrative operations are not allowed through raw queries.',
+    },
+    {
+        category: 'ADMINISTRATIVE',
+        label: 'CLUSTER',
+        pattern: /\bCLUSTER\b/i,
+        message: 'CLUSTER physically reorders table data. Administrative operations are not allowed through raw queries.',
+    },
+    {
+        category: 'ADMINISTRATIVE',
+        label: 'REINDEX',
+        pattern: /\bREINDEX\b/i,
+        message: 'REINDEX rebuilds database indexes. Administrative operations are not allowed through raw queries.',
+    },
+    {
+        category: 'ADMINISTRATIVE',
+        label: 'COMMENT ON',
+        pattern: /\bCOMMENT\s+ON\b/i,
+        message: 'COMMENT ON modifies database object metadata. Administrative operations are not allowed through raw queries.',
+    },
+    {
+        category: 'ADMINISTRATIVE',
+        label: 'SECURITY LABEL',
+        pattern: /\bSECURITY\s+LABEL\b/i,
+        message: 'SECURITY LABEL modifies security policies. Administrative operations are not allowed through raw queries.',
+    },
+    {
+        category: 'ADMINISTRATIVE',
+        label: 'REASSIGN OWNED',
+        pattern: /\bREASSIGN\s+OWNED\b/i,
+        message: 'REASSIGN OWNED transfers ownership of database objects. Administrative operations are not allowed through raw queries.',
+    },
+    {
+        category: 'ADMINISTRATIVE',
+        label: 'DROP OWNED',
+        pattern: /\bDROP\s+OWNED\b/i,
+        message: 'DROP OWNED removes all objects owned by a role. Administrative operations are not allowed through raw queries.',
+    },
+    {
+        category: 'ADMINISTRATIVE',
+        label: 'REFRESH MATERIALIZED VIEW',
+        pattern: /\bREFRESH\s+MATERIALIZED\s+VIEW\b/i,
+        message: 'REFRESH MATERIALIZED VIEW rebuilds a materialized view. Administrative operations are not allowed through raw queries.',
+    },
+    // Transaction control
+    {
+        category: 'TRANSACTION_CONTROL',
+        label: 'BEGIN / START TRANSACTION',
+        pattern: /\b(?:BEGIN|START\s+TRANSACTION)\b/i,
+        message: 'Transaction control statements could be used to manipulate execution flow or keep connections open. They are not allowed in raw queries.',
+    },
+    {
+        category: 'TRANSACTION_CONTROL',
+        label: 'COMMIT',
+        pattern: /\bCOMMIT\b/i,
+        message: 'Transaction control statements could be used to manipulate execution flow. They are not allowed in raw queries.',
+    },
+    {
+        category: 'TRANSACTION_CONTROL',
+        label: 'ROLLBACK',
+        pattern: /\bROLLBACK\b/i,
+        message: 'Transaction control statements could be used to manipulate execution flow. They are not allowed in raw queries.',
+    },
+    {
+        category: 'TRANSACTION_CONTROL',
+        label: 'SAVEPOINT',
+        pattern: /\bSAVEPOINT\b/i,
+        message: 'Transaction control statements are not allowed in raw queries.',
+    },
+    {
+        category: 'TRANSACTION_CONTROL',
+        label: 'RELEASE SAVEPOINT',
+        pattern: /\bRELEASE\s+SAVEPOINT\b/i,
+        message: 'Transaction control statements are not allowed in raw queries.',
+    },
+    // COPY operations (file system access)
+    {
+        category: 'COPY_OPERATION',
+        label: 'COPY',
+        pattern: /\bCOPY\b/i,
+        message: 'COPY can read from or write to the server file system, which is a critical security risk. It is not allowed in raw queries.',
+    },
+    // Server configuration
+    {
+        category: 'SERVER_CONFIGURATION',
+        label: 'SET (session variable)',
+        pattern: /\bSET\s+(?:SESSION\s+|LOCAL\s+)?(?!CONSTRAINTS)\w/i,
+        message: 'SET modifies server session configuration, which could affect security settings or resource limits. It is not allowed in raw queries.',
+    },
+    {
+        category: 'SERVER_CONFIGURATION',
+        label: 'RESET',
+        pattern: /\bRESET\s+\w/i,
+        message: 'RESET modifies server configuration. It is not allowed in raw queries.',
+    },
+    {
+        category: 'SERVER_CONFIGURATION',
+        label: 'LOAD',
+        pattern: /\bLOAD\s+'/i,
+        message: 'LOAD loads a shared library into the server, which is a critical security risk. It is not allowed in raw queries.',
+    },
+    {
+        category: 'SERVER_CONFIGURATION',
+        label: 'DISCARD',
+        pattern: /\bDISCARD\b/i,
+        message: 'DISCARD releases server-side resources. It is not allowed in raw queries.',
+    },
+    // PREPARE / EXECUTE / DEALLOCATE (prepared statement manipulation)
+    {
+        category: 'SERVER_CONFIGURATION',
+        label: 'PREPARE',
+        pattern: /\bPREPARE\s+\w+/i,
+        message: 'PREPARE creates server-side prepared statements which could be used to execute arbitrary queries later. It is not allowed in raw queries.',
+    },
+    {
+        category: 'SERVER_CONFIGURATION',
+        label: 'EXECUTE (prepared)',
+        pattern: /\bEXECUTE\s+\w+/i,
+        message: 'EXECUTE runs a previously prepared statement. It is not allowed in raw queries.',
+    },
+    {
+        category: 'SERVER_CONFIGURATION',
+        label: 'DEALLOCATE',
+        pattern: /\bDEALLOCATE\b/i,
+        message: 'DEALLOCATE releases prepared statements. It is not allowed in raw queries.',
+    },
+    // LISTEN / NOTIFY (asynchronous communication)
+    {
+        category: 'SERVER_CONFIGURATION',
+        label: 'LISTEN',
+        pattern: /\bLISTEN\b/i,
+        message: 'LISTEN registers for asynchronous notifications, which could keep connections open. It is not allowed in raw queries.',
+    },
+    {
+        category: 'SERVER_CONFIGURATION',
+        label: 'NOTIFY',
+        pattern: /\bNOTIFY\b/i,
+        message: 'NOTIFY sends asynchronous notifications. It is not allowed in raw queries.',
+    },
+    {
+        category: 'SERVER_CONFIGURATION',
+        label: 'UNLISTEN',
+        pattern: /\bUNLISTEN\b/i,
+        message: 'UNLISTEN deregisters from asynchronous notifications. It is not allowed in raw queries.',
+    },
+];
+const DANGEROUS_FUNCTIONS = [
+    // File system access
+    {
+        name: 'pg_read_file',
+        message: 'pg_read_file reads files from the server filesystem. This is a critical security risk and is not allowed.',
+    },
+    {
+        name: 'pg_read_binary_file',
+        message: 'pg_read_binary_file reads binary files from the server filesystem. This is a critical security risk and is not allowed.',
+    },
+    {
+        name: 'pg_stat_file',
+        message: 'pg_stat_file exposes server filesystem metadata. This is a security risk and is not allowed.',
+    },
+    {
+        name: 'pg_ls_dir',
+        message: 'pg_ls_dir lists server directory contents. This is a critical security risk and is not allowed.',
+    },
+    {
+        name: 'pg_ls_logdir',
+        message: 'pg_ls_logdir lists the log directory. This is a security risk and is not allowed.',
+    },
+    {
+        name: 'pg_ls_waldir',
+        message: 'pg_ls_waldir lists the WAL directory. This is a security risk and is not allowed.',
+    },
+    // Large object operations (file I/O)
+    {
+        name: 'lo_import',
+        message: 'lo_import loads a file from the server filesystem into a large object. This is a security risk and is not allowed.',
+    },
+    {
+        name: 'lo_export',
+        message: 'lo_export writes a large object to the server filesystem. This is a critical security risk and is not allowed.',
+    },
+    {
+        name: 'lo_create',
+        message: 'lo_create creates large objects which can be used to stage data for file I/O. This is not allowed.',
+    },
+    {
+        name: 'lo_unlink',
+        message: 'lo_unlink deletes large objects. This is not allowed.',
+    },
+    // Process/backend control
+    {
+        name: 'pg_terminate_backend',
+        message: 'pg_terminate_backend kills other database connections. This could cause denial of service and is not allowed.',
+    },
+    {
+        name: 'pg_cancel_backend',
+        message: 'pg_cancel_backend cancels queries on other connections. This could cause denial of service and is not allowed.',
+    },
+    {
+        name: 'pg_reload_conf',
+        message: 'pg_reload_conf reloads the server configuration. This is an administrative action and is not allowed.',
+    },
+    {
+        name: 'pg_rotate_logfile',
+        message: 'pg_rotate_logfile rotates the server log file. This is an administrative action and is not allowed.',
+    },
+    // Configuration manipulation
+    {
+        name: 'set_config',
+        message: 'set_config modifies server runtime configuration, which could alter security settings. This is not allowed.',
+    },
+    // Resource exhaustion
+    {
+        name: 'pg_sleep',
+        message: 'pg_sleep pauses execution for a specified duration. This could be used for denial-of-service attacks and is not allowed.',
+    },
+    {
+        name: 'pg_sleep_for',
+        message: 'pg_sleep_for pauses execution. This could be used for denial-of-service attacks and is not allowed.',
+    },
+    {
+        name: 'pg_sleep_until',
+        message: 'pg_sleep_until pauses execution. This could be used for denial-of-service attacks and is not allowed.',
+    },
+    // External connections
+    {
+        name: 'dblink',
+        message: 'dblink opens connections to external databases. This could be used to exfiltrate data or pivot to other systems and is not allowed.',
+    },
+    {
+        name: 'dblink_connect',
+        message: 'dblink_connect opens connections to external databases. This is not allowed.',
+    },
+    {
+        name: 'dblink_exec',
+        message: 'dblink_exec executes commands on external databases. This is not allowed.',
+    },
+    // Advisory locks (can cause deadlocks/resource exhaustion)
+    {
+        name: 'pg_advisory_lock',
+        message: 'pg_advisory_lock acquires advisory locks that persist for the session. This could cause resource exhaustion and is not allowed.',
+    },
+    {
+        name: 'pg_advisory_xact_lock',
+        message: 'pg_advisory_xact_lock acquires advisory locks. This could cause resource exhaustion and is not allowed.',
+    },
+    {
+        name: 'pg_try_advisory_lock',
+        message: 'pg_try_advisory_lock attempts to acquire advisory locks. This is not allowed.',
+    },
+    // Query plan manipulation
+    {
+        name: 'pg_catalog\\.set_config',
+        message: 'pg_catalog.set_config modifies system configuration via the catalog. This is not allowed.',
+    },
+];
+// ---------------------------------------------------------------------------
+// SQL stripping (comments and string literals)
+// ---------------------------------------------------------------------------
+/**
+ * Strips SQL comments and string literal *contents* from the input so that
+ * pattern matching only operates on actual SQL keywords.
+ *
+ * Handles:
+ *  - Single-line comments: `-- ... \n`
+ *  - Block comments: `/* ... * /` (including nesting)
+ *  - Single-quoted strings: `'...'` with `''` escape
+ *  - Dollar-quoted strings: `$$...$$` and `$tag$...$tag$`
+ *  - Double-quoted identifiers: `"..."` are preserved (they are identifiers)
+ *
+ * Returns the SQL with all comment content removed and string literal contents
+ * replaced with empty strings (the quotes are preserved).
+ */
+const stripCommentsAndStrings = (sql) => {
+    const result = [];
+    let i = 0;
+    const len = sql.length;
+    while (i < len) {
+        // Single-line comment
+        if (sql[i] === '-' && i + 1 < len && sql[i + 1] === '-') {
+            const newlineIdx = sql.indexOf('\n', i + 2);
+            if (newlineIdx === -1) {
+                // Comment extends to end of string
+                break;
+            }
+            result.push(' ');
+            i = newlineIdx + 1;
+            continue;
+        }
+        // Block comment (supports nesting)
+        if (sql[i] === '/' && i + 1 < len && sql[i + 1] === '*') {
+            let depth = 1;
+            let j = i + 2;
+            while (j < len && depth > 0) {
+                if (sql[j] === '/' && j + 1 < len && sql[j + 1] === '*') {
+                    depth++;
+                    j += 2;
+                }
+                else if (sql[j] === '*' && j + 1 < len && sql[j + 1] === '/') {
+                    depth--;
+                    j += 2;
+                }
+                else {
+                    j++;
+                }
+            }
+            result.push(' ');
+            i = j;
+            continue;
+        }
+        // Dollar-quoted string: $tag$...$tag$ or $$...$$
+        if (sql[i] === '$') {
+            const tagMatch = sql.slice(i).match(/^\$([A-Za-z_][A-Za-z0-9_]*)?\$/);
+            if (tagMatch) {
+                const openTag = tagMatch[0];
+                const closeIdx = sql.indexOf(openTag, i + openTag.length);
+                if (closeIdx !== -1) {
+                    // Replace content with empty but keep the structure recognizable as a string
+                    result.push("''");
+                    i = closeIdx + openTag.length;
+                    continue;
+                }
+            }
+        }
+        // Single-quoted string
+        if (sql[i] === "'") {
+            let j = i + 1;
+            while (j < len) {
+                if (sql[j] === "'") {
+                    if (j + 1 < len && sql[j + 1] === "'") {
+                        // Escaped quote
+                        j += 2;
+                    }
+                    else {
+                        break;
+                    }
+                }
+                else {
+                    j++;
+                }
+            }
+            // Replace string content with empty
+            result.push("''");
+            i = j + 1;
+            continue;
+        }
+        // Double-quoted identifier (preserve as-is since these are identifiers, not values)
+        if (sql[i] === '"') {
+            let j = i + 1;
+            while (j < len) {
+                if (sql[j] === '"') {
+                    if (j + 1 < len && sql[j + 1] === '"') {
+                        j += 2;
+                    }
+                    else {
+                        break;
+                    }
+                }
+                else {
+                    j++;
+                }
+            }
+            // Replace identifier content with empty but keep quotes
+            result.push('""');
+            i = j + 1;
+            continue;
+        }
+        result.push(sql[i]);
+        i++;
+    }
+    return result.join('');
+};
+exports.stripCommentsAndStrings = stripCommentsAndStrings;
+// ---------------------------------------------------------------------------
+// Multi-statement detection
+// ---------------------------------------------------------------------------
+/**
+ * Detects multiple SQL statements separated by semicolons.
+ * Ignores semicolons inside comments and string literals (already stripped).
+ * Also ignores a trailing semicolon after the last statement.
+ */
+const containsMultipleStatements = (strippedSQL) => {
+    const trimmed = strippedSQL.trim().replace(/;\s*$/, '');
+    return trimmed.includes(';');
+};
+exports.containsMultipleStatements = containsMultipleStatements;
+// ---------------------------------------------------------------------------
+// Core validation
+// ---------------------------------------------------------------------------
+/**
+ * Validates a SQL query string and returns all violations found.
+ *
+ * @param query - The raw SQL query to validate
+ * @returns Validation result with all detected violations
+ */
+const validateSQLQuery = (query) => {
+    if (!query || typeof query !== 'string') {
+        return { isValid: true, violations: [] };
+    }
+    const stripped = (0, exports.stripCommentsAndStrings)(query);
+    const violations = [];
+    // Check for multiple statements (semicolon-separated)
+    if ((0, exports.containsMultipleStatements)(stripped)) {
+        violations.push({
+            category: 'MULTIPLE_STATEMENTS',
+            matched: ';',
+            message: 'Multiple SQL statements separated by semicolons are not allowed. Each raw query node should contain exactly one statement. Multiple statements could be used to inject harmful operations alongside a legitimate query.',
+        });
+    }
+    // Check forbidden patterns
+    for (const fp of FORBIDDEN_PATTERNS) {
+        const match = stripped.match(fp.pattern);
+        if (match) {
+            violations.push({
+                category: fp.category,
+                matched: match[0].trim(),
+                message: fp.message,
+            });
+        }
+    }
+    // Check dangerous functions
+    for (const df of DANGEROUS_FUNCTIONS) {
+        const escapedName = df.name.replace(/\./g, '\\.');
+        const funcPattern = new RegExp(`\\b${escapedName}\\s*\\(`, 'i');
+        const match = stripped.match(funcPattern);
+        if (match) {
+            violations.push({
+                category: 'DANGEROUS_FUNCTION',
+                matched: match[0].trim(),
+                message: df.message,
+            });
+        }
+    }
+    return {
+        isValid: violations.length === 0,
+        violations,
+    };
+};
+exports.validateSQLQuery = validateSQLQuery;
+// ---------------------------------------------------------------------------
+// Context value risk assessment
+// ---------------------------------------------------------------------------
+/**
+ * Node types whose output is directly derived from external or
+ * user-controlled input. When the output of these nodes is used
+ * inside a raw SQL query, we cannot guarantee the query is safe
+ * at design-time.
+ */
+const HIGH_RISK_SOURCE_NODES = new Set([
+    // Direct user input
+    'general-extract-form-data',
+    'browser-clipboard-read',
+    'url-get-query-parameter',
+    'url-get-current-url',
+    'element-get-input-value',
+    // External / network input
+    'general-http-request',
+    'general-custom-js',
+    // AI-generated content (unpredictable)
+    'ai-custom-prompt',
+    'ai-detect-language',
+    'ai-generate-embedding',
+    'ai-sentiment',
+    'ai-summarization',
+    'ai-text-classifier',
+    'ai-text-transform',
+    // Realtime messages from other users
+    'realtime-on-channel-message',
+    'realtime-on-channel-event',
+    // Data that could originate from user input stored in DB
+    'data-select',
+    'data-raw-query',
+    // Browser storage (can be manipulated via devtools)
+    'storage-local-get',
+    'storage-session-get',
+]);
+/**
+ * Returns true if the node type produces output that is potentially
+ * user-controlled and therefore unsafe to embed in raw SQL without
+ * validation.
+ */
+const isHighRiskSourceNode = (nodeType) => {
+    if (HIGH_RISK_SOURCE_NODES.has(nodeType)) {
+        return true;
+    }
+    // All integration nodes return external data
+    if (nodeType.startsWith('integration-')) {
+        return true;
+    }
+    return false;
+};
+exports.isHighRiskSourceNode = isHighRiskSourceNode;
+// ---------------------------------------------------------------------------
+// Exports for documentation / downstream consumers
+// ---------------------------------------------------------------------------
+/** All forbidden pattern definitions (for documentation generation) */
+const getForbiddenPatterns = () => FORBIDDEN_PATTERNS;
+exports.getForbiddenPatterns = getForbiddenPatterns;
+/** All dangerous function definitions (for documentation generation) */
+const getDangerousFunctions = () => DANGEROUS_FUNCTIONS;
+exports.getDangerousFunctions = getDangerousFunctions;
+//# sourceMappingURL=sql-query-validator.js.map

package/dist/cjs/sql-query-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-query-validator.js","sourceRoot":"","sources":["../../src/sql-query-validator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAoDH,MAAM,WAAW,GAAG;IAClB,OAAO;IACP,OAAO;IACP,MAAM;IACN,sBAAsB;IACtB,UAAU;IACV,QAAQ;IACR,UAAU;IACV,MAAM;IACN,UAAU;IACV,WAAW;IACX,SAAS;IACT,WAAW;IACX,MAAM;IACN,MAAM;IACN,QAAQ;IACR,aAAa;IACb,cAAc;IACd,YAAY;IACZ,QAAQ;IACR,WAAW;IACX,WAAW;IACX,YAAY;IACZ,UAAU;IACV,MAAM;IACN,YAAY;IACZ,gBAAgB;IAChB,QAAQ;IACR,4BAA4B;IAC5B,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;CACnB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAEX,MAAM,gBAAgB,GAAG,GAAuB,EAAE;IAChD,MAAM,OAAO,GAGR;QACH;YACE,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CACf,UAAU,GAAG,mHAAmH;SACnI;QACD;YACE,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CACf,SAAS,GAAG,mHAAmH;SAClI;QACD;YACE,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CACf,QAAQ,GAAG,2HAA2H;SACzI;KACF,CAAA;IAED,MAAM,QAAQ,GAAuB,EAAE,CAAA;IAEvC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE;QAC5B,QAAQ,CAAC,IAAI,CAAC;YACZ,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,WAAW;YAChC,OAAO,EAAE,IAAI,MAAM,CACjB,MAAM,MAAM,CAAC,IAAI,0HAA0H,WAAW,MAAM,EAC5J,GAAG,CACJ;YACD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC;SAC7C,CAAC,CAAA;KACH;IAED,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED,MAAM,kBAAkB,GAAuB;IAC7C,oCAAoC;IACpC,GAAG,gBAAgB,EAAE;IAErB,WAAW;IACX;QACE,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,eAAe;QACxB,OAAO,EACL,2IAA2I;KAC9I;IAED,SAAS;IACT;QACE,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,gCAAgC;QACzC,OAAO,EACL,+FAA+F;KAClG;IAED,MAAM;IACN;QACE,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,YAAY;QACrB,OAAO,EACL,gIAAgI;KACnI;IACD;QACE,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,aAAa;QACtB,OAAO,EACL,iIAAiI;KACpI;IAED,iBAAiB;IACjB;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,aAAa;QACtB,OAAO,EACL,6IAA6I;KAChJ;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,sBAAsB;QAC7B,OAAO,EAAE,+BAA+B;QACxC,OAAO,EACL,kHAAkH;KACrH;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,cAAc;QACvB,OAAO,EACL,wGAAwG;KAC3G;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,cAAc;QACvB,OAAO,EACL,mGAAmG;KACtG;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EACL,8GAA8G;KACjH;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,uBAAuB;QAChC,OAAO,EACL,2GAA2G;KAC9G;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,uBAAuB;QAChC,OAAO,EACL,wHAAwH;KAC3H;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EACL,gHAAgH;KACnH;IACD;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,2BAA2B;QAClC,OAAO,EAAE,oCAAoC;QAC7C,OAAO,EACL,wHAAwH;KAC3H;IAED,sBAAsB;IACtB;QACE,QAAQ,EAAE,qBAAqB;QAC/B,KAAK,EAAE,2BAA2B;QAClC,OAAO,EAAE,oCAAoC;QAC7C,OAAO,EACL,0IAA0I;KAC7I;IACD;QACE,QAAQ,EAAE,qBAAqB;QAC/B,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,aAAa;QACtB,OAAO,EACL,iHAAiH;KACpH;IACD;QACE,QAAQ,EAAE,qBAAqB;QAC/B,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,eAAe;QACxB,OAAO,EACL,iHAAiH;KACpH;IACD;QACE,QAAQ,EAAE,qBAAqB;QAC/B,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,gBAAgB;QACzB,OAAO,EAAE,gEAAgE;KAC1E;IACD;QACE,QAAQ,EAAE,qBAAqB;QAC/B,KAAK,EAAE,mBAAmB;QAC1B,OAAO,EAAE,0BAA0B;QACnC,OAAO,EAAE,gEAAgE;KAC1E;IAED,uCAAuC;IACvC;QACE,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,WAAW;QACpB,OAAO,EACL,6HAA6H;KAChI;IAED,uBAAuB;IACvB;QACE,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,wBAAwB;QAC/B,OAAO,EAAE,oDAAoD;QAC7D,OAAO,EACL,uIAAuI;KAC1I;IACD;QACE,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,eAAe;QACxB,OAAO,EAAE,wEAAwE;KAClF;IACD;QACE,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,aAAa;QACtB,OAAO,EACL,mHAAmH;KACtH;IACD;QACE,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,2EAA2E;KACrF;IAED,mEAAmE;IACnE;QACE,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,SAAS;QAChB,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EACL,2IAA2I;KAC9I;IACD;QACE,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,kBAAkB;QAC3B,OAAO,EAAE,iFAAiF;KAC3F;IACD;QACE,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,iBAAiB;QAC1B,OAAO,EAAE,4EAA4E;KACtF;IAED,+CAA+C;IAC/C;QACE,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,aAAa;QACtB,OAAO,EACL,uHAAuH;KAC1H;IACD;QACE,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,aAAa;QACtB,OAAO,EAAE,4EAA4E;KACtF;IACD;QACE,QAAQ,EAAE,sBAAsB;QAChC,KAAK,EAAE,UAAU;QACjB,OAAO,EAAE,eAAe;QACxB,OAAO,EACL,yFAAyF;KAC5F;CACF,CAAA;AAWD,MAAM,mBAAmB,GAAwB;IAC/C,qBAAqB;IACrB;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EACL,2GAA2G;KAC9G;IACD;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EACL,yHAAyH;KAC5H;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EACL,8FAA8F;KACjG;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EACL,iGAAiG;KACpG;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,mFAAmF;KAC7F;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,mFAAmF;KAC7F;IAED,qCAAqC;IACrC;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EACL,oHAAoH;KACvH;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EACL,gHAAgH;KACnH;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EACL,oGAAoG;KACvG;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,uDAAuD;KACjE;IAED,0BAA0B;IAC1B;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EACL,+GAA+G;KAClH;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EACL,gHAAgH;KACnH;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EACL,uGAAuG;KAC1G;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EACL,qGAAqG;KACxG;IAED,6BAA6B;IAC7B;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EACL,6GAA6G;KAChH;IAED,sBAAsB;IACtB;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EACL,0HAA0H;KAC7H;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EACL,qGAAqG;KACxG;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EACL,uGAAuG;KAC1G;IAED,uBAAuB;IACvB;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EACL,qIAAqI;KACxI;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,8EAA8E;KACxF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,2EAA2E;KACrF;IAED,2DAA2D;IAC3D;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EACL,iIAAiI;KACpI;IACD;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EACL,yGAAyG;KAC5G;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,+EAA+E;KACzF;IAED,0BAA0B;IAC1B;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EACL,2FAA2F;KAC9F;CACF,CAAA;AAED,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAE9E;;;;;;;;;;;;;GAaG;AACI,MAAM,uBAAuB,GAAG,CAAC,GAAW,EAAU,EAAE;IAC7D,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAA;IAEtB,OAAO,CAAC,GAAG,GAAG,EAAE;QACd,sBAAsB;QACtB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;YACvD,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;YAC3C,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE;gBACrB,mCAAmC;gBACnC,MAAK;aACN;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChB,CAAC,GAAG,UAAU,GAAG,CAAC,CAAA;YAClB,SAAQ;SACT;QAED,mCAAmC;QACnC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;YACvD,IAAI,KAAK,GAAG,CAAC,CAAA;YACb,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACb,OAAO,CAAC,GAAG,GAAG,IAAI,KAAK,GAAG,CAAC,EAAE;gBAC3B,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;oBACvD,KAAK,EAAE,CAAA;oBACP,CAAC,IAAI,CAAC,CAAA;iBACP;qBAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;oBAC9D,KAAK,EAAE,CAAA;oBACP,CAAC,IAAI,CAAC,CAAA;iBACP;qBAAM;oBACL,CAAC,EAAE,CAAA;iBACJ;aACF;YACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAChB,CAAC,GAAG,CAAC,CAAA;YACL,SAAQ;SACT;QAED,iDAAiD;QACjD,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;YAClB,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAA;YACrE,IAAI,QAAQ,EAAE;gBACZ,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;gBAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;gBACzD,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE;oBACnB,6EAA6E;oBAC7E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;oBACjB,CAAC,GAAG,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAA;oBAC7B,SAAQ;iBACT;aACF;SACF;QAED,uBAAuB;QACvB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;YAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACb,OAAO,CAAC,GAAG,GAAG,EAAE;gBACd,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;oBAClB,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;wBACrC,gBAAgB;wBAChB,CAAC,IAAI,CAAC,CAAA;qBACP;yBAAM;wBACL,MAAK;qBACN;iBACF;qBAAM;oBACL,CAAC,EAAE,CAAA;iBACJ;aACF;YACD,oCAAoC;YACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACT,SAAQ;SACT;QAED,oFAAoF;QACpF,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;YAClB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACb,OAAO,CAAC,GAAG,GAAG,EAAE;gBACd,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;oBAClB,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;wBACrC,CAAC,IAAI,CAAC,CAAA;qBACP;yBAAM;wBACL,MAAK;qBACN;iBACF;qBAAM;oBACL,CAAC,EAAE,CAAA;iBACJ;aACF;YACD,wDAAwD;YACxD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACjB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;YACT,SAAQ;SACT;QAED,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACnB,CAAC,EAAE,CAAA;KACJ;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACxB,CAAC,CAAA;AAnGY,QAAA,uBAAuB,2BAmGnC;AAED,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E;;;;GAIG;AACI,MAAM,0BAA0B,GAAG,CAAC,WAAmB,EAAW,EAAE;IACzE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IACvD,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AAC9B,CAAC,CAAA;AAHY,QAAA,0BAA0B,8BAGtC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E;;;;;GAKG;AACI,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAuB,EAAE;IACrE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE;QACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;KACzC;IAED,MAAM,QAAQ,GAAG,IAAA,+BAAuB,EAAC,KAAK,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAmB,EAAE,CAAA;IAErC,sDAAsD;IACtD,IAAI,IAAA,kCAA0B,EAAC,QAAQ,CAAC,EAAE;QACxC,UAAU,CAAC,IAAI,CAAC;YACd,QAAQ,EAAE,qBAAqB;YAC/B,OAAO,EAAE,GAAG;YACZ,OAAO,EACL,yNAAyN;SAC5N,CAAC,CAAA;KACH;IAED,2BAA2B;IAC3B,KAAK,MAAM,EAAE,IAAI,kBAAkB,EAAE;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;QACxC,IAAI,KAAK,EAAE;YACT,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBACxB,OAAO,EAAE,EAAE,CAAC,OAAO;aACpB,CAAC,CAAA;SACH;KACF;IAED,4BAA4B;IAC5B,KAAK,MAAM,EAAE,IAAI,mBAAmB,EAAE;QACpC,MAAM,WAAW,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QACjD,MAAM,WAAW,GAAG,IAAI,MAAM,CAAC,MAAM,WAAW,SAAS,EAAE,GAAG,CAAC,CAAA;QAC/D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;QACzC,IAAI,KAAK,EAAE;YACT,UAAU,CAAC,IAAI,CAAC;gBACd,QAAQ,EAAE,oBAAoB;gBAC9B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;gBACxB,OAAO,EAAE,EAAE,CAAC,OAAO;aACpB,CAAC,CAAA;SACH;KACF;IAED,OAAO;QACL,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;QAChC,UAAU;KACX,CAAA;AACH,CAAC,CAAA;AAhDY,QAAA,gBAAgB,oBAgD5B;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,oBAAoB;IACpB,2BAA2B;IAC3B,wBAAwB;IACxB,yBAAyB;IACzB,qBAAqB;IACrB,yBAAyB;IAEzB,2BAA2B;IAC3B,sBAAsB;IACtB,mBAAmB;IAEnB,uCAAuC;IACvC,kBAAkB;IAClB,oBAAoB;IACpB,uBAAuB;IACvB,cAAc;IACd,kBAAkB;IAClB,oBAAoB;IACpB,mBAAmB;IAEnB,qCAAqC;IACrC,6BAA6B;IAC7B,2BAA2B;IAE3B,yDAAyD;IACzD,aAAa;IACb,gBAAgB;IAEhB,oDAAoD;IACpD,mBAAmB;IACnB,qBAAqB;CACtB,CAAC,CAAA;AAEF;;;;GAIG;AACI,MAAM,oBAAoB,GAAG,CAAC,QAAgB,EAAW,EAAE;IAChE,IAAI,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;QACxC,OAAO,IAAI,CAAA;KACZ;IACD,6CAA6C;IAC7C,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE;QACvC,OAAO,IAAI,CAAA;KACZ;IACD,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AATY,QAAA,oBAAoB,wBAShC;AAED,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E;AAE9E,uEAAuE;AAChE,MAAM,oBAAoB,GAAG,GAAoC,EAAE,CAAC,kBAAkB,CAAA;AAAhF,QAAA,oBAAoB,wBAA4D;AAE7F,wEAAwE;AACjE,MAAM,qBAAqB,GAAG,GAAqC,EAAE,CAAC,mBAAmB,CAAA;AAAnF,QAAA,qBAAqB,yBAA8D"}

package/dist/cjs/sql-validator.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Generates the runtime SQL validation code that is embedded in the
+ * Next.js data API route.  Every query – whether built from structured
+ * parameters or supplied as a raw string – is validated **before** it
+ * reaches the database.
+ *
+ * The generated code exposes two helpers:
+ *   • validateSqlQuery(sql)        – rejects forbidden DDL / DCL statements
+ *   • validateIdentifier(name)     – rejects identifiers that are not safe
+ *                                     to interpolate into SQL
+ */
+/**
+ * Returns a JS code string containing:
+ *   - stripSqlComments(sql)
+ *   - stripStringLiterals(sql)
+ *   - cleanSqlForValidation(sql)
+ *   - validateSqlQuery(sql)          → { valid, error?, matchedOperation? }
+ *   - validateIdentifier(name)       → { valid, error? }
+ *   - assertQuerySafe(sql)           → throws on forbidden ops
+ *   - assertIdentifierSafe(name, label) → throws on bad identifiers
+ */
+export declare function generateSqlValidatorCode(): string;
+//# sourceMappingURL=sql-validator.d.ts.map

package/dist/cjs/sql-validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sql-validator.d.ts","sourceRoot":"","sources":["../../src/sql-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2GH;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAkPjD"}