@velajs/storage 0.3.1 → 0.3.2

package/dist/s3-DrE9NrnD.js

@@ -0,0 +1,557 @@
+import { t as byteLengthOf } from "./body-BMUcBeQ0.js";
+import { t as StorageError } from "./storage.error-DVCOkJhc.js";
+import { t as createStoredFile } from "./stored-file-2Yl07eRc.js";
+import { AwsClient } from "aws4fetch";
+//#region src/base64.ts
+const CHUNK = 32768;
+/** Encode bytes to standard base64. */
+function bytesToBase64(bytes) {
+	let binary = "";
+	for (let i = 0; i < bytes.length; i += CHUNK) binary += String.fromCharCode(...bytes.subarray(i, i + CHUNK));
+	return btoa(binary);
+}
+/** Encode a UTF-8 string to base64 (unicode-safe, unlike raw `btoa`). */
+function utf8ToBase64(text) {
+	return bytesToBase64(new TextEncoder().encode(text));
+}
+//#endregion
+//#region src/drivers/s3/s3-client.ts
+const encoder$1 = new TextEncoder();
+async function hmac(key, data) {
+	const cryptoKey = await crypto.subtle.importKey("raw", key, {
+		name: "HMAC",
+		hash: "SHA-256"
+	}, false, ["sign"]);
+	const sig = await crypto.subtle.sign("HMAC", cryptoKey, encoder$1.encode(data));
+	return new Uint8Array(sig);
+}
+function hex(bytes) {
+	let out = "";
+	for (const b of bytes) out += b.toString(16).padStart(2, "0");
+	return out;
+}
+async function sigV4SigningKey(secret, dateStamp, region, service = "s3") {
+	return hmac(await hmac(await hmac(await hmac(encoder$1.encode(`AWS4${secret}`), dateStamp), region), service), "aws4_request");
+}
+function amzDates() {
+	const amzDate = (/* @__PURE__ */ new Date()).toISOString().replace(/[:-]|\.\d{3}/g, "");
+	return {
+		amzDate,
+		dateStamp: amzDate.slice(0, 8)
+	};
+}
+/**
+* Thin wrapper over aws4fetch: builds addressed URLs, sends SigV4-signed
+* requests, and mints presigned GET/PUT URLs + presigned-POST policies.
+* The single place S3 signing happens.
+*/
+var S3Client = class {
+	#aws;
+	#cfg;
+	#fetch;
+	constructor(cfg) {
+		this.#cfg = cfg;
+		this.#fetch = cfg.fetch ?? fetch;
+		this.#aws = new AwsClient({
+			accessKeyId: cfg.credentials.accessKeyId,
+			secretAccessKey: cfg.credentials.secretAccessKey,
+			sessionToken: cfg.credentials.sessionToken,
+			region: cfg.region,
+			service: "s3"
+		});
+	}
+	get bucket() {
+		return this.#cfg.bucket;
+	}
+	/** Encode each key segment but keep `/` separators. */
+	#encodeKey(key) {
+		return key.split("/").map(encodeURIComponent).join("/");
+	}
+	objectUrl(key, query) {
+		const enc = this.#encodeKey(key);
+		const u = new URL(this.#cfg.endpoint);
+		if (this.#cfg.forcePathStyle) u.pathname = `/${this.#cfg.bucket}${enc ? `/${enc}` : ""}`;
+		else {
+			u.hostname = `${this.#cfg.bucket}.${u.hostname}`;
+			u.pathname = `/${enc}`;
+		}
+		if (query) for (const [k, v] of Object.entries(query)) u.searchParams.set(k, v);
+		return u;
+	}
+	/** The bucket-root URL used as the presigned-POST target. */
+	postUrl() {
+		const u = new URL(this.#cfg.endpoint);
+		if (this.#cfg.forcePathStyle) u.pathname = `/${this.#cfg.bucket}`;
+		else u.hostname = `${this.#cfg.bucket}.${u.hostname}`;
+		return u.toString();
+	}
+	/** Send a SigV4-signed request. */
+	async send(url, init) {
+		const signed = await this.#aws.sign(url.toString(), init);
+		return this.#fetch(signed);
+	}
+	/** Presign a GET or PUT URL via query signing (unsigned payload). */
+	async presign(key, method, expiresIn, query) {
+		const url = this.objectUrl(key, {
+			...query,
+			"X-Amz-Expires": String(expiresIn)
+		});
+		return (await this.#aws.sign(url.toString(), {
+			method,
+			aws: { signQuery: true }
+		})).url;
+	}
+	/**
+	* Presigned POST policy — enforces `content-length-range` server-side.
+	* aws4fetch only signs requests, so the policy HMAC chain is hand-rolled
+	* on Web Crypto (edge-safe).
+	*/
+	async signPostPolicy(key, opts) {
+		const { amzDate, dateStamp } = amzDates();
+		const { accessKeyId, secretAccessKey, sessionToken } = this.#cfg.credentials;
+		const credential = `${accessKeyId}/${dateStamp}/${this.#cfg.region}/s3/aws4_request`;
+		const expiration = new Date(Date.now() + opts.expiresIn * 1e3).toISOString();
+		const conditions = [
+			{ bucket: this.#cfg.bucket },
+			{ key },
+			{ "x-amz-algorithm": "AWS4-HMAC-SHA256" },
+			{ "x-amz-credential": credential },
+			{ "x-amz-date": amzDate }
+		];
+		if (sessionToken) conditions.push({ "x-amz-security-token": sessionToken });
+		if (opts.contentType) conditions.push({ "content-type": opts.contentType });
+		if (opts.maxSize != null || opts.minSize != null) conditions.push([
+			"content-length-range",
+			opts.minSize ?? 0,
+			opts.maxSize ?? opts.minSize ?? 0
+		]);
+		const policyB64 = utf8ToBase64(JSON.stringify({
+			expiration,
+			conditions
+		}));
+		const fields = {
+			key,
+			"x-amz-algorithm": "AWS4-HMAC-SHA256",
+			"x-amz-credential": credential,
+			"x-amz-date": amzDate,
+			policy: policyB64,
+			"x-amz-signature": hex(await hmac(await sigV4SigningKey(secretAccessKey, dateStamp, this.#cfg.region), policyB64))
+		};
+		if (sessionToken) fields["x-amz-security-token"] = sessionToken;
+		if (opts.contentType) fields["content-type"] = opts.contentType;
+		return {
+			url: this.postUrl(),
+			fields
+		};
+	}
+};
+//#endregion
+//#region src/drivers/s3/xml.ts
+const ENTITIES = {
+	amp: "&",
+	lt: "<",
+	gt: ">",
+	quot: "\"",
+	apos: "'"
+};
+function unescapeXml(s) {
+	return s.replace(/&(#x?[0-9a-fA-F]+|amp|lt|gt|quot|apos);/g, (_m, e) => {
+		if (e[0] === "#") {
+			const code = e[1] === "x" ? Number.parseInt(e.slice(2), 16) : Number.parseInt(e.slice(1), 10);
+			return Number.isFinite(code) ? String.fromCodePoint(code) : _m;
+		}
+		return ENTITIES[e] ?? _m;
+	});
+}
+function escapeXml(s) {
+	return s.replace(/[&<>"']/g, (c) => {
+		switch (c) {
+			case "&": return "&amp;";
+			case "<": return "&lt;";
+			case ">": return "&gt;";
+			case "\"": return "&quot;";
+			default: return "&apos;";
+		}
+	});
+}
+function tagPattern(tag) {
+	return `<${tag}(?:\\s[^>]*)?>([\\s\\S]*?)</${tag}>`;
+}
+/** First `<tag>…</tag>` inner text (entity-decoded), or `undefined`. */
+function tagText(xml, tag) {
+	const m = new RegExp(tagPattern(tag)).exec(xml);
+	return m ? unescapeXml(m[1]) : void 0;
+}
+/** All `<tag>…</tag>` inner blocks (raw, not decoded — for nested extraction). */
+function tagBlocks(xml, tag) {
+	const re = new RegExp(tagPattern(tag), "g");
+	const out = [];
+	let m;
+	while ((m = re.exec(xml)) !== null) out.push(m[1]);
+	return out;
+}
+//#endregion
+//#region src/drivers/s3/s3.driver.ts
+const encoder = new TextEncoder();
+const DEFAULT_EXPIRES = 3600;
+const DEFAULT_PART_SIZE = 5 * 1024 * 1024;
+function stripQuotes(s) {
+	return s ? s.replace(/^"|"$/g, "") : void 0;
+}
+function parseDate(s) {
+	if (!s) return void 0;
+	const t = Date.parse(s);
+	return Number.isFinite(t) ? t : void 0;
+}
+function formatRange(range) {
+	return `bytes=${range.start}-${range.end ?? ""}`;
+}
+function metaFromHeaders(headers) {
+	const meta = {};
+	headers.forEach((value, key) => {
+		if (key.startsWith("x-amz-meta-")) meta[key.slice(11)] = value;
+	});
+	return Object.keys(meta).length ? meta : void 0;
+}
+function joinPublic(base, key) {
+	const enc = key.split("/").map(encodeURIComponent).join("/");
+	return `${base.replace(/\/$/, "")}/${enc}`;
+}
+/** Map an S3 `<Code>` (and/or HTTP status) to our error taxonomy. */
+function mapS3Code(code, status) {
+	switch (code) {
+		case "NoSuchKey":
+		case "NoSuchUpload":
+		case "NoSuchBucket": return "NotFound";
+		case "AccessDenied":
+		case "InvalidAccessKeyId":
+		case "SignatureDoesNotMatch":
+		case "AllAccessDisabled": return "AccessDenied";
+		case "SlowDown":
+		case "RequestTimeout": return "RateLimited";
+		default: break;
+	}
+	if (status === 404) return "NotFound";
+	if (status === 403 || status === 401) return "AccessDenied";
+	if (status === 409) return "Conflict";
+	if (status === 429) return "RateLimited";
+	if (status >= 500) return "Provider";
+	if (status >= 400) return "InvalidRequest";
+	return "Provider";
+}
+function toError(status, code, message, key) {
+	const mapped = mapS3Code(code, status);
+	const retryable = mapped === "Provider" || mapped === "RateLimited" || mapped === "Timeout" || mapped === "Network";
+	return new StorageError(mapped, message ?? code ?? `S3 error${key ? ` (${key})` : ""}`, {
+		status: status >= 400 ? status : void 0,
+		retryable,
+		internal: true
+	});
+}
+async function s3Error(res, key) {
+	let code;
+	let message;
+	try {
+		const body = await res.text();
+		code = tagText(body, "Code");
+		message = tagText(body, "Message");
+	} catch {}
+	return toError(res.status, code, message, key);
+}
+function parseErrorBody(status, body, key) {
+	return toError(status, tagText(body, "Code"), tagText(body, "Message"), key);
+}
+/** Add `duplex: 'half'` when streaming a request body (required by fetch). */
+function withDuplex(init, body) {
+	if (body instanceof ReadableStream) return {
+		...init,
+		duplex: "half"
+	};
+	return init;
+}
+/** S3 / S3-compatible driver signed with aws4fetch (edge-safe). */
+function s3Driver(options) {
+	const client = new S3Client(options);
+	const expires = options.defaultUrlExpiresIn ?? DEFAULT_EXPIRES;
+	function uploadHeaders(opts, unsignedPayload) {
+		const h = new Headers();
+		if (unsignedPayload) h.set("x-amz-content-sha256", "UNSIGNED-PAYLOAD");
+		if (opts?.contentType) h.set("content-type", opts.contentType);
+		if (opts?.cacheControl) h.set("cache-control", opts.cacheControl);
+		if (opts?.metadata) for (const [k, v] of Object.entries(opts.metadata)) h.set(`x-amz-meta-${k}`, v);
+		return h;
+	}
+	function multipartHandle(key, uploadId, createOpts) {
+		return {
+			key,
+			uploadId,
+			async uploadPart(partNumber, part, o) {
+				const url = client.objectUrl(key, {
+					partNumber: String(partNumber),
+					uploadId
+				});
+				const res = await client.send(url, withDuplex({
+					method: "PUT",
+					headers: new Headers({ "x-amz-content-sha256": "UNSIGNED-PAYLOAD" }),
+					body: part,
+					signal: o?.signal
+				}, part));
+				if (!res.ok) throw await s3Error(res, key);
+				const etag = res.headers.get("etag");
+				if (!etag) throw new StorageError("Provider", `missing ETag for part ${partNumber}`);
+				return {
+					partNumber,
+					etag
+				};
+			},
+			async complete(parts, o) {
+				const xml = "<?xml version=\"1.0\" encoding=\"UTF-8\"?><CompleteMultipartUpload>" + [...parts].sort((a, b) => a.partNumber - b.partNumber).map((p) => `<Part><PartNumber>${p.partNumber}</PartNumber><ETag>${escapeXml(p.etag)}</ETag></Part>`).join("") + "</CompleteMultipartUpload>";
+				const res = await client.send(client.objectUrl(key, { uploadId }), {
+					method: "POST",
+					headers: new Headers({ "content-type": "application/xml" }),
+					body: encoder.encode(xml),
+					signal: o?.signal
+				});
+				const body = await res.text();
+				if (!res.ok || body.includes("<Error")) throw parseErrorBody(res.status, body, key);
+				return {
+					key,
+					size: 0,
+					contentType: createOpts?.contentType ?? "application/octet-stream",
+					etag: stripQuotes(tagText(body, "ETag"))
+				};
+			},
+			async abort(o) {
+				const res = await client.send(client.objectUrl(key, { uploadId }), {
+					method: "DELETE",
+					signal: o?.signal
+				});
+				if (!res.ok && res.status !== 404) throw await s3Error(res, key);
+			},
+			async listParts(o) {
+				const res = await client.send(client.objectUrl(key, { uploadId }), {
+					method: "GET",
+					signal: o?.signal
+				});
+				const xml = await res.text();
+				if (!res.ok) throw parseErrorBody(res.status, xml, key);
+				return tagBlocks(xml, "Part").map((b) => ({
+					partNumber: Number(tagText(b, "PartNumber") ?? 0),
+					etag: stripQuotes(tagText(b, "ETag")) ?? "",
+					size: Number(tagText(b, "Size") ?? 0)
+				}));
+			}
+		};
+	}
+	return {
+		name: options.name ?? "s3",
+		raw: client,
+		supportsRange: true,
+		supportsDelimiter: true,
+		supportsMetadata: true,
+		supportsCacheControl: true,
+		supportsServerSideCopy: true,
+		reportsUploadProgress: false,
+		signedUrl: {
+			supported: true,
+			upload: true
+		},
+		async upload(key, body, opts) {
+			const size = byteLengthOf(body) ?? 0;
+			const res = await client.send(client.objectUrl(key), withDuplex({
+				method: "PUT",
+				headers: uploadHeaders(opts, true),
+				body,
+				signal: opts?.signal
+			}, body));
+			if (!res.ok) throw await s3Error(res, key);
+			return {
+				key,
+				size,
+				contentType: opts?.contentType ?? "application/octet-stream",
+				etag: stripQuotes(res.headers.get("etag")),
+				lastModified: parseDate(res.headers.get("last-modified"))
+			};
+		},
+		async download(key, opts) {
+			const headers = new Headers();
+			if (opts?.range) headers.set("Range", formatRange(opts.range));
+			const res = await client.send(client.objectUrl(key), {
+				method: "GET",
+				headers,
+				signal: opts?.signal
+			});
+			if (!res.ok || !res.body) {
+				if (res.status === 404) throw new StorageError("NotFound", `not found: ${key}`, { status: 404 });
+				throw await s3Error(res, key);
+			}
+			return createStoredFile({
+				key,
+				size: Number(res.headers.get("content-length") ?? 0),
+				type: res.headers.get("content-type") ?? "application/octet-stream",
+				etag: stripQuotes(res.headers.get("etag")),
+				lastModified: parseDate(res.headers.get("last-modified")),
+				metadata: metaFromHeaders(res.headers)
+			}, {
+				kind: "stream",
+				stream: res.body
+			});
+		},
+		async head(key, opts) {
+			const res = await client.send(client.objectUrl(key), {
+				method: "HEAD",
+				signal: opts?.signal
+			});
+			if (!res.ok) {
+				if (res.status === 404) throw new StorageError("NotFound", `not found: ${key}`, { status: 404 });
+				throw await s3Error(res, key);
+			}
+			return createStoredFile({
+				key,
+				size: Number(res.headers.get("content-length") ?? 0),
+				type: res.headers.get("content-type") ?? "application/octet-stream",
+				etag: stripQuotes(res.headers.get("etag")),
+				lastModified: parseDate(res.headers.get("last-modified")),
+				metadata: metaFromHeaders(res.headers)
+			}, {
+				kind: "lazy",
+				fetch: () => client.send(client.objectUrl(key), { method: "GET" })
+			});
+		},
+		async exists(key, opts) {
+			const res = await client.send(client.objectUrl(key), {
+				method: "HEAD",
+				signal: opts?.signal
+			});
+			if (res.status === 404) return false;
+			if (!res.ok) throw await s3Error(res, key);
+			return true;
+		},
+		async delete(key, opts) {
+			const res = await client.send(client.objectUrl(key), {
+				method: "DELETE",
+				signal: opts?.signal
+			});
+			if (!res.ok && res.status !== 404) throw await s3Error(res, key);
+		},
+		async copy(from, to, opts) {
+			const source = `/${client.bucket}/${from.split("/").map(encodeURIComponent).join("/")}`;
+			const res = await client.send(client.objectUrl(to), {
+				method: "PUT",
+				headers: new Headers({ "x-amz-copy-source": source }),
+				signal: opts?.signal
+			});
+			const body = await res.text();
+			if (!res.ok || body.includes("<Error")) throw parseErrorBody(res.status, body, to);
+		},
+		async list(opts) {
+			const query = { "list-type": "2" };
+			if (opts?.prefix) query.prefix = opts.prefix;
+			if (opts?.delimiter) query.delimiter = opts.delimiter;
+			if (opts?.cursor) query["continuation-token"] = opts.cursor;
+			if (opts?.limit) query["max-keys"] = String(opts.limit);
+			const res = await client.send(client.objectUrl("", query), {
+				method: "GET",
+				signal: opts?.signal
+			});
+			const xml = await res.text();
+			if (!res.ok) throw parseErrorBody(res.status, xml);
+			const items = tagBlocks(xml, "Contents").map((b) => {
+				const k = tagText(b, "Key") ?? "";
+				return createStoredFile({
+					key: k,
+					size: Number(tagText(b, "Size") ?? 0),
+					type: "application/octet-stream",
+					etag: stripQuotes(tagText(b, "ETag")),
+					lastModified: parseDate(tagText(b, "LastModified"))
+				}, {
+					kind: "lazy",
+					fetch: () => client.send(client.objectUrl(k), { method: "GET" })
+				});
+			});
+			const prefixes = tagBlocks(xml, "CommonPrefixes").map((b) => tagText(b, "Prefix")).filter((p) => !!p);
+			const cursor = tagText(xml, "IsTruncated") === "true" ? tagText(xml, "NextContinuationToken") : void 0;
+			return {
+				items,
+				prefixes: prefixes.length ? prefixes : void 0,
+				cursor
+			};
+		},
+		async url(key, opts) {
+			const forceSign = !!opts?.responseContentDisposition;
+			if (options.publicBaseUrl && !forceSign) return joinPublic(options.publicBaseUrl, key);
+			const query = opts?.responseContentDisposition ? { "response-content-disposition": opts.responseContentDisposition } : void 0;
+			return client.presign(key, "GET", opts?.expiresIn ?? expires, query);
+		},
+		async signedUploadUrl(key, opts) {
+			if (opts.maxSize != null || opts.minSize != null) {
+				const { url, fields } = await client.signPostPolicy(key, {
+					expiresIn: opts.expiresIn,
+					contentType: opts.contentType,
+					maxSize: opts.maxSize,
+					minSize: opts.minSize
+				});
+				return {
+					method: "POST",
+					url,
+					fields
+				};
+			}
+			return {
+				method: "PUT",
+				url: await client.presign(key, "PUT", opts.expiresIn),
+				headers: opts.contentType ? { "content-type": opts.contentType } : void 0
+			};
+		},
+		async createMultipartUpload(key, opts) {
+			const res = await client.send(client.objectUrl(key, { uploads: "" }), {
+				method: "POST",
+				headers: uploadHeaders(opts, false),
+				signal: opts?.signal
+			});
+			const xml = await res.text();
+			if (!res.ok) throw parseErrorBody(res.status, xml, key);
+			const uploadId = tagText(xml, "UploadId");
+			if (!uploadId) throw new StorageError("Parse", "missing UploadId");
+			return multipartHandle(key, uploadId, opts);
+		},
+		resumeMultipartUpload(key, uploadId) {
+			return multipartHandle(key, uploadId);
+		},
+		signedMultipart: {
+			async create(key, o) {
+				const res = await client.send(client.objectUrl(key, { uploads: "" }), {
+					method: "POST",
+					headers: uploadHeaders({
+						contentType: o.contentType,
+						metadata: o.metadata
+					}, false)
+				});
+				const xml = await res.text();
+				if (!res.ok) throw parseErrorBody(res.status, xml, key);
+				const uploadId = tagText(xml, "UploadId");
+				if (!uploadId) throw new StorageError("Parse", "missing UploadId");
+				return {
+					uploadId,
+					partSize: o.partSize ?? DEFAULT_PART_SIZE
+				};
+			},
+			async signPart(key, uploadId, partNumber, o) {
+				return { url: await client.presign(key, "PUT", o?.expiresIn ?? expires, {
+					partNumber: String(partNumber),
+					uploadId
+				}) };
+			},
+			complete(key, uploadId, parts) {
+				return multipartHandle(key, uploadId).complete(parts);
+			},
+			abort(key, uploadId) {
+				return multipartHandle(key, uploadId).abort();
+			}
+		}
+	};
+}
+//#endregion
+export { unescapeXml as a, tagText as i, escapeXml as n, S3Client as o, tagBlocks as r, s3Driver as t };
+
+//# sourceMappingURL=s3-DrE9NrnD.js.map

package/dist/s3-DrE9NrnD.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-DrE9NrnD.js","names":["encoder","#aws","#cfg","#fetch","#encodeKey"],"sources":["../src/base64.ts","../src/drivers/s3/s3-client.ts","../src/drivers/s3/xml.ts","../src/drivers/s3/s3.driver.ts"],"sourcesContent":["// Edge-safe base64 — NO `Buffer` (banned by the edge-runtime audit).\n// Uses `btoa`/`atob` over chunked `String.fromCharCode`, present on every\n// target runtime (Workers, Deno, Bun, Node 20+, browsers).\n\n// Chunk stays <= 0x8000 so the spread into String.fromCharCode never exceeds\n// the engine argument limit.\nconst CHUNK = 0x8000;\n\n/** Encode bytes to standard base64. */\nexport function bytesToBase64(bytes: Uint8Array): string {\n  let binary = '';\n  for (let i = 0; i < bytes.length; i += CHUNK) {\n    binary += String.fromCharCode(...bytes.subarray(i, i + CHUNK));\n  }\n  return btoa(binary);\n}\n\n/** Decode standard base64 to bytes. */\nexport function base64ToBytes(b64: string): Uint8Array {\n  const binary = atob(b64);\n  const out = new Uint8Array(binary.length);\n  for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n  return out;\n}\n\n/** Encode a UTF-8 string to base64 (unicode-safe, unlike raw `btoa`). */\nexport function utf8ToBase64(text: string): string {\n  return bytesToBase64(new TextEncoder().encode(text));\n}\n\n/** URL-safe base64 (base64url) without padding — used by SigV4 / policies. */\nexport function bytesToBase64Url(bytes: Uint8Array): string {\n  return bytesToBase64(bytes).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n}\n","import { AwsClient } from 'aws4fetch';\nimport { utf8ToBase64 } from '../../base64';\nimport type { S3DriverOptions } from './s3.types';\n\n// --- Web-Crypto SigV4 helpers (used only for the POST-policy path; the\n// request-signing path is aws4fetch). No node:crypto, no Buffer. ---\n\nconst encoder = new TextEncoder();\n\nasync function hmac(key: Uint8Array, data: string): Promise<Uint8Array> {\n  const cryptoKey = await crypto.subtle.importKey(\n    'raw',\n    key as unknown as ArrayBuffer,\n    { name: 'HMAC', hash: 'SHA-256' },\n    false,\n    ['sign'],\n  );\n  const sig = await crypto.subtle.sign('HMAC', cryptoKey, encoder.encode(data));\n  return new Uint8Array(sig);\n}\n\nfunction hex(bytes: Uint8Array): string {\n  let out = '';\n  for (const b of bytes) out += b.toString(16).padStart(2, '0');\n  return out;\n}\n\nasync function sigV4SigningKey(\n  secret: string,\n  dateStamp: string,\n  region: string,\n  service = 's3',\n): Promise<Uint8Array> {\n  const kDate = await hmac(encoder.encode(`AWS4${secret}`), dateStamp);\n  const kRegion = await hmac(kDate, region);\n  const kService = await hmac(kRegion, service);\n  return hmac(kService, 'aws4_request');\n}\n\nfunction amzDates(): { amzDate: string; dateStamp: string } {\n  const amzDate = new Date().toISOString().replace(/[:-]|\\.\\d{3}/g, '');\n  return { amzDate, dateStamp: amzDate.slice(0, 8) };\n}\n\nexport interface PostPolicyOptions {\n  expiresIn: number;\n  contentType?: string;\n  maxSize?: number;\n  minSize?: number;\n}\n\n/**\n * Thin wrapper over aws4fetch: builds addressed URLs, sends SigV4-signed\n * requests, and mints presigned GET/PUT URLs + presigned-POST policies.\n * The single place S3 signing happens.\n */\nexport class S3Client {\n  readonly #aws: AwsClient;\n  readonly #cfg: S3DriverOptions;\n  readonly #fetch: typeof fetch;\n\n  constructor(cfg: S3DriverOptions) {\n    this.#cfg = cfg;\n    this.#fetch = cfg.fetch ?? fetch;\n    this.#aws = new AwsClient({\n      accessKeyId: cfg.credentials.accessKeyId,\n      secretAccessKey: cfg.credentials.secretAccessKey,\n      sessionToken: cfg.credentials.sessionToken,\n      region: cfg.region,\n      service: 's3',\n    });\n  }\n\n  get bucket(): string {\n    return this.#cfg.bucket;\n  }\n\n  /** Encode each key segment but keep `/` separators. */\n  #encodeKey(key: string): string {\n    return key.split('/').map(encodeURIComponent).join('/');\n  }\n\n  objectUrl(key: string, query?: Record<string, string>): URL {\n    const enc = this.#encodeKey(key);\n    const u = new URL(this.#cfg.endpoint);\n    if (this.#cfg.forcePathStyle) {\n      u.pathname = `/${this.#cfg.bucket}${enc ? `/${enc}` : ''}`;\n    } else {\n      u.hostname = `${this.#cfg.bucket}.${u.hostname}`;\n      u.pathname = `/${enc}`;\n    }\n    if (query) for (const [k, v] of Object.entries(query)) u.searchParams.set(k, v);\n    return u;\n  }\n\n  /** The bucket-root URL used as the presigned-POST target. */\n  postUrl(): string {\n    const u = new URL(this.#cfg.endpoint);\n    if (this.#cfg.forcePathStyle) u.pathname = `/${this.#cfg.bucket}`;\n    else u.hostname = `${this.#cfg.bucket}.${u.hostname}`;\n    return u.toString();\n  }\n\n  /** Send a SigV4-signed request. */\n  async send(url: URL, init: RequestInit): Promise<Response> {\n    const signed = await this.#aws.sign(url.toString(), init);\n    return this.#fetch(signed);\n  }\n\n  /** Presign a GET or PUT URL via query signing (unsigned payload). */\n  async presign(\n    key: string,\n    method: 'GET' | 'PUT',\n    expiresIn: number,\n    query?: Record<string, string>,\n  ): Promise<string> {\n    const url = this.objectUrl(key, { ...query, 'X-Amz-Expires': String(expiresIn) });\n    const signed = await this.#aws.sign(url.toString(), {\n      method,\n      aws: { signQuery: true },\n    });\n    return signed.url;\n  }\n\n  /**\n   * Presigned POST policy — enforces `content-length-range` server-side.\n   * aws4fetch only signs requests, so the policy HMAC chain is hand-rolled\n   * on Web Crypto (edge-safe).\n   */\n  async signPostPolicy(\n    key: string,\n    opts: PostPolicyOptions,\n  ): Promise<{ url: string; fields: Record<string, string> }> {\n    const { amzDate, dateStamp } = amzDates();\n    const { accessKeyId, secretAccessKey, sessionToken } = this.#cfg.credentials;\n    const credential = `${accessKeyId}/${dateStamp}/${this.#cfg.region}/s3/aws4_request`;\n    const expiration = new Date(Date.now() + opts.expiresIn * 1000).toISOString();\n\n    const conditions: Array<Record<string, string> | [string, string | number, number]> = [\n      { bucket: this.#cfg.bucket },\n      { key },\n      { 'x-amz-algorithm': 'AWS4-HMAC-SHA256' },\n      { 'x-amz-credential': credential },\n      { 'x-amz-date': amzDate },\n    ];\n    if (sessionToken) conditions.push({ 'x-amz-security-token': sessionToken });\n    if (opts.contentType) conditions.push({ 'content-type': opts.contentType });\n    if (opts.maxSize != null || opts.minSize != null) {\n      conditions.push([\n        'content-length-range',\n        opts.minSize ?? 0,\n        opts.maxSize ?? opts.minSize ?? 0,\n      ]);\n    }\n\n    const policyB64 = utf8ToBase64(JSON.stringify({ expiration, conditions }));\n    const signingKey = await sigV4SigningKey(secretAccessKey, dateStamp, this.#cfg.region);\n    const signature = hex(await hmac(signingKey, policyB64));\n\n    const fields: Record<string, string> = {\n      key,\n      'x-amz-algorithm': 'AWS4-HMAC-SHA256',\n      'x-amz-credential': credential,\n      'x-amz-date': amzDate,\n      policy: policyB64,\n      'x-amz-signature': signature,\n    };\n    if (sessionToken) fields['x-amz-security-token'] = sessionToken;\n    if (opts.contentType) fields['content-type'] = opts.contentType;\n\n    return { url: this.postUrl(), fields };\n  }\n}\n","// Dependency-free, edge-safe S3 XML helpers. Workers has no `DOMParser` and\n// the AWS XML parser is banned, so we extract from S3's fixed, shallow,\n// documented response shapes (ListBucketResult, Initiate/CompleteMultipartUpload,\n// Error, ...) with anchored, ReDoS-free regexes. We never parse untrusted XML.\n\nconst ENTITIES: Record<string, string> = {\n  amp: '&',\n  lt: '<',\n  gt: '>',\n  quot: '\"',\n  apos: \"'\",\n};\n\nexport function unescapeXml(s: string): string {\n  return s.replace(/&(#x?[0-9a-fA-F]+|amp|lt|gt|quot|apos);/g, (_m, e: string) => {\n    if (e[0] === '#') {\n      const code = e[1] === 'x' ? Number.parseInt(e.slice(2), 16) : Number.parseInt(e.slice(1), 10);\n      return Number.isFinite(code) ? String.fromCodePoint(code) : _m;\n    }\n    return ENTITIES[e] ?? _m;\n  });\n}\n\nexport function escapeXml(s: string): string {\n  return s.replace(/[&<>\"']/g, (c) => {\n    switch (c) {\n      case '&':\n        return '&amp;';\n      case '<':\n        return '&lt;';\n      case '>':\n        return '&gt;';\n      case '\"':\n        return '&quot;';\n      default:\n        return '&apos;';\n    }\n  });\n}\n\n// Each pattern uses a single non-greedy `[\\s\\S]*?` bounded by a literal close\n// tag → linear time, no nested quantifiers, no catastrophic backtracking.\nfunction tagPattern(tag: string): string {\n  return `<${tag}(?:\\\\s[^>]*)?>([\\\\s\\\\S]*?)</${tag}>`;\n}\n\n/** First `<tag>…</tag>` inner text (entity-decoded), or `undefined`. */\nexport function tagText(xml: string, tag: string): string | undefined {\n  const m = new RegExp(tagPattern(tag)).exec(xml);\n  return m ? unescapeXml(m[1]!) : undefined;\n}\n\n/** All `<tag>…</tag>` inner blocks (raw, not decoded — for nested extraction). */\nexport function tagBlocks(xml: string, tag: string): string[] {\n  const re = new RegExp(tagPattern(tag), 'g');\n  const out: string[] = [];\n  let m: RegExpExecArray | null;\n  while ((m = re.exec(xml)) !== null) out.push(m[1]!);\n  return out;\n}\n","import { byteLengthOf } from '../../internal/body';\nimport { createStoredFile } from '../../internal/stored-file';\nimport { StorageError, type StorageErrorCode } from '../../storage.error';\nimport type {\n  Body,\n  CreateMultipartOptions,\n  DownloadOptions,\n  ListOptions,\n  ListResult,\n  MultipartUpload,\n  OperationOptions,\n  PartBody,\n  SignedMultipartCapability,\n  SignedUpload,\n  SignUploadOptions,\n  StorageDriver,\n  StoredFile,\n  UploadedPart,\n  UploadOptions,\n  UploadResult,\n  UrlOptions,\n  ByteRange,\n} from '../../storage.types';\nimport { S3Client } from './s3-client';\nimport type { S3DriverOptions } from './s3.types';\nimport { escapeXml, tagBlocks, tagText } from './xml';\n\nconst encoder = new TextEncoder();\nconst DEFAULT_EXPIRES = 3600;\nconst DEFAULT_PART_SIZE = 5 * 1024 * 1024;\n\nfunction stripQuotes(s: string | null | undefined): string | undefined {\n  return s ? s.replace(/^\"|\"$/g, '') : undefined;\n}\n\nfunction parseDate(s: string | null | undefined): number | undefined {\n  if (!s) return undefined;\n  const t = Date.parse(s);\n  return Number.isFinite(t) ? t : undefined;\n}\n\nfunction formatRange(range: ByteRange): string {\n  return `bytes=${range.start}-${range.end ?? ''}`;\n}\n\nfunction metaFromHeaders(headers: Headers): Record<string, string> | undefined {\n  const meta: Record<string, string> = {};\n  headers.forEach((value, key) => {\n    if (key.startsWith('x-amz-meta-')) meta[key.slice('x-amz-meta-'.length)] = value;\n  });\n  return Object.keys(meta).length ? meta : undefined;\n}\n\nfunction joinPublic(base: string, key: string): string {\n  const enc = key.split('/').map(encodeURIComponent).join('/');\n  return `${base.replace(/\\/$/, '')}/${enc}`;\n}\n\n/** Map an S3 `<Code>` (and/or HTTP status) to our error taxonomy. */\nfunction mapS3Code(code: string | undefined, status: number): StorageErrorCode {\n  switch (code) {\n    case 'NoSuchKey':\n    case 'NoSuchUpload':\n    case 'NoSuchBucket':\n      return 'NotFound';\n    case 'AccessDenied':\n    case 'InvalidAccessKeyId':\n    case 'SignatureDoesNotMatch':\n    case 'AllAccessDisabled':\n      return 'AccessDenied';\n    case 'SlowDown':\n    case 'RequestTimeout':\n      return 'RateLimited';\n    default:\n      break;\n  }\n  if (status === 404) return 'NotFound';\n  if (status === 403 || status === 401) return 'AccessDenied';\n  if (status === 409) return 'Conflict';\n  if (status === 429) return 'RateLimited';\n  if (status >= 500) return 'Provider';\n  if (status >= 400) return 'InvalidRequest';\n  return 'Provider'; // e.g. a 200 response carrying an <Error> body\n}\n\nfunction toError(\n  status: number,\n  code: string | undefined,\n  message: string | undefined,\n  key?: string,\n): StorageError {\n  const mapped = mapS3Code(code, status);\n  const retryable =\n    mapped === 'Provider' ||\n    mapped === 'RateLimited' ||\n    mapped === 'Timeout' ||\n    mapped === 'Network';\n  return new StorageError(mapped, message ?? code ?? `S3 error${key ? ` (${key})` : ''}`, {\n    status: status >= 400 ? status : undefined,\n    retryable,\n    // `message`/`code` are the provider's own <Message>/<Code> — never client-safe,\n    // even on a 4xx status (e.g. AccessDenied/NoSuchKey text can carry internal detail).\n    internal: true,\n  });\n}\n\nasync function s3Error(res: Response, key?: string): Promise<StorageError> {\n  let code: string | undefined;\n  let message: string | undefined;\n  try {\n    const body = await res.text();\n    code = tagText(body, 'Code');\n    message = tagText(body, 'Message');\n  } catch {\n    /* ignore body read errors */\n  }\n  return toError(res.status, code, message, key);\n}\n\nfunction parseErrorBody(status: number, body: string, key?: string): StorageError {\n  return toError(status, tagText(body, 'Code'), tagText(body, 'Message'), key);\n}\n\n/** Add `duplex: 'half'` when streaming a request body (required by fetch). */\nfunction withDuplex(init: RequestInit, body: Body | PartBody): RequestInit {\n  if (body instanceof ReadableStream) {\n    return { ...init, duplex: 'half' } as RequestInit & { duplex: 'half' };\n  }\n  return init;\n}\n\n/** S3 / S3-compatible driver signed with aws4fetch (edge-safe). */\nexport function s3Driver(options: S3DriverOptions): StorageDriver {\n  const client = new S3Client(options);\n  const expires = options.defaultUrlExpiresIn ?? DEFAULT_EXPIRES;\n\n  function uploadHeaders(\n    opts:\n      | { contentType?: string; cacheControl?: string; metadata?: Record<string, string> }\n      | undefined,\n    unsignedPayload: boolean,\n  ): Headers {\n    const h = new Headers();\n    if (unsignedPayload) h.set('x-amz-content-sha256', 'UNSIGNED-PAYLOAD');\n    if (opts?.contentType) h.set('content-type', opts.contentType);\n    if (opts?.cacheControl) h.set('cache-control', opts.cacheControl);\n    if (opts?.metadata)\n      for (const [k, v] of Object.entries(opts.metadata)) h.set(`x-amz-meta-${k}`, v);\n    return h;\n  }\n\n  function multipartHandle(\n    key: string,\n    uploadId: string,\n    createOpts?: CreateMultipartOptions,\n  ): MultipartUpload {\n    return {\n      key,\n      uploadId,\n      async uploadPart(partNumber: number, part: PartBody, o?: OperationOptions) {\n        const url = client.objectUrl(key, { partNumber: String(partNumber), uploadId });\n        const res = await client.send(\n          url,\n          withDuplex(\n            {\n              method: 'PUT',\n              headers: new Headers({ 'x-amz-content-sha256': 'UNSIGNED-PAYLOAD' }),\n              body: part as BodyInit,\n              signal: o?.signal,\n            },\n            part,\n          ),\n        );\n        if (!res.ok) throw await s3Error(res, key);\n        const etag = res.headers.get('etag');\n        if (!etag) throw new StorageError('Provider', `missing ETag for part ${partNumber}`);\n        return { partNumber, etag };\n      },\n      async complete(parts: UploadedPart[], o?: OperationOptions) {\n        const xml =\n          '<?xml version=\"1.0\" encoding=\"UTF-8\"?><CompleteMultipartUpload>' +\n          [...parts]\n            .sort((a, b) => a.partNumber - b.partNumber)\n            .map(\n              (p) =>\n                `<Part><PartNumber>${p.partNumber}</PartNumber><ETag>${escapeXml(p.etag)}</ETag></Part>`,\n            )\n            .join('') +\n          '</CompleteMultipartUpload>';\n        const res = await client.send(client.objectUrl(key, { uploadId }), {\n          method: 'POST',\n          headers: new Headers({ 'content-type': 'application/xml' }),\n          body: encoder.encode(xml),\n          signal: o?.signal,\n        });\n        const body = await res.text();\n        if (!res.ok || body.includes('<Error')) throw parseErrorBody(res.status, body, key);\n        return {\n          key,\n          size: 0,\n          contentType: createOpts?.contentType ?? 'application/octet-stream',\n          etag: stripQuotes(tagText(body, 'ETag')),\n        };\n      },\n      async abort(o?: OperationOptions) {\n        const res = await client.send(client.objectUrl(key, { uploadId }), {\n          method: 'DELETE',\n          signal: o?.signal,\n        });\n        if (!res.ok && res.status !== 404) throw await s3Error(res, key);\n      },\n      async listParts(o?: OperationOptions) {\n        const res = await client.send(client.objectUrl(key, { uploadId }), {\n          method: 'GET',\n          signal: o?.signal,\n        });\n        const xml = await res.text();\n        if (!res.ok) throw parseErrorBody(res.status, xml, key);\n        return tagBlocks(xml, 'Part').map((b) => ({\n          partNumber: Number(tagText(b, 'PartNumber') ?? 0),\n          etag: stripQuotes(tagText(b, 'ETag')) ?? '',\n          size: Number(tagText(b, 'Size') ?? 0),\n        }));\n      },\n    };\n  }\n\n  const signedMultipart: SignedMultipartCapability = {\n    async create(key, o) {\n      const res = await client.send(client.objectUrl(key, { uploads: '' }), {\n        method: 'POST',\n        headers: uploadHeaders({ contentType: o.contentType, metadata: o.metadata }, false),\n      });\n      const xml = await res.text();\n      if (!res.ok) throw parseErrorBody(res.status, xml, key);\n      const uploadId = tagText(xml, 'UploadId');\n      if (!uploadId) throw new StorageError('Parse', 'missing UploadId');\n      return { uploadId, partSize: o.partSize ?? DEFAULT_PART_SIZE };\n    },\n    async signPart(key, uploadId, partNumber, o) {\n      const url = await client.presign(key, 'PUT', o?.expiresIn ?? expires, {\n        partNumber: String(partNumber),\n        uploadId,\n      });\n      return { url };\n    },\n    complete(key, uploadId, parts) {\n      return multipartHandle(key, uploadId).complete(parts);\n    },\n    abort(key, uploadId) {\n      return multipartHandle(key, uploadId).abort();\n    },\n  };\n\n  return {\n    name: options.name ?? 's3',\n    raw: client,\n    supportsRange: true,\n    supportsDelimiter: true,\n    supportsMetadata: true,\n    supportsCacheControl: true,\n    supportsServerSideCopy: true,\n    reportsUploadProgress: false,\n    signedUrl: { supported: true, upload: true },\n\n    async upload(key: string, body: Body, opts?: UploadOptions): Promise<UploadResult> {\n      const size = byteLengthOf(body) ?? 0;\n      const res = await client.send(\n        client.objectUrl(key),\n        withDuplex(\n          {\n            method: 'PUT',\n            headers: uploadHeaders(opts, true),\n            body: body as BodyInit,\n            signal: opts?.signal,\n          },\n          body,\n        ),\n      );\n      if (!res.ok) throw await s3Error(res, key);\n      return {\n        key,\n        size,\n        contentType: opts?.contentType ?? 'application/octet-stream',\n        etag: stripQuotes(res.headers.get('etag')),\n        lastModified: parseDate(res.headers.get('last-modified')),\n      };\n    },\n\n    async download(key: string, opts?: DownloadOptions): Promise<StoredFile> {\n      const headers = new Headers();\n      if (opts?.range) headers.set('Range', formatRange(opts.range));\n      const res = await client.send(client.objectUrl(key), {\n        method: 'GET',\n        headers,\n        signal: opts?.signal,\n      });\n      if (!res.ok || !res.body) {\n        if (res.status === 404)\n          throw new StorageError('NotFound', `not found: ${key}`, { status: 404 });\n        throw await s3Error(res, key);\n      }\n      return createStoredFile(\n        {\n          key,\n          size: Number(res.headers.get('content-length') ?? 0),\n          type: res.headers.get('content-type') ?? 'application/octet-stream',\n          etag: stripQuotes(res.headers.get('etag')),\n          lastModified: parseDate(res.headers.get('last-modified')),\n          metadata: metaFromHeaders(res.headers),\n        },\n        { kind: 'stream', stream: res.body },\n      );\n    },\n\n    async head(key: string, opts?: OperationOptions): Promise<StoredFile> {\n      const res = await client.send(client.objectUrl(key), {\n        method: 'HEAD',\n        signal: opts?.signal,\n      });\n      if (!res.ok) {\n        if (res.status === 404)\n          throw new StorageError('NotFound', `not found: ${key}`, { status: 404 });\n        throw await s3Error(res, key);\n      }\n      return createStoredFile(\n        {\n          key,\n          size: Number(res.headers.get('content-length') ?? 0),\n          type: res.headers.get('content-type') ?? 'application/octet-stream',\n          etag: stripQuotes(res.headers.get('etag')),\n          lastModified: parseDate(res.headers.get('last-modified')),\n          metadata: metaFromHeaders(res.headers),\n        },\n        { kind: 'lazy', fetch: () => client.send(client.objectUrl(key), { method: 'GET' }) },\n      );\n    },\n\n    async exists(key: string, opts?: OperationOptions): Promise<boolean> {\n      const res = await client.send(client.objectUrl(key), {\n        method: 'HEAD',\n        signal: opts?.signal,\n      });\n      if (res.status === 404) return false;\n      if (!res.ok) throw await s3Error(res, key);\n      return true;\n    },\n\n    async delete(key: string, opts?: OperationOptions): Promise<void> {\n      const res = await client.send(client.objectUrl(key), {\n        method: 'DELETE',\n        signal: opts?.signal,\n      });\n      if (!res.ok && res.status !== 404) throw await s3Error(res, key);\n    },\n\n    async copy(from: string, to: string, opts?: OperationOptions): Promise<void> {\n      const source = `/${client.bucket}/${from.split('/').map(encodeURIComponent).join('/')}`;\n      const res = await client.send(client.objectUrl(to), {\n        method: 'PUT',\n        headers: new Headers({ 'x-amz-copy-source': source }),\n        signal: opts?.signal,\n      });\n      const body = await res.text();\n      if (!res.ok || body.includes('<Error')) throw parseErrorBody(res.status, body, to);\n    },\n\n    async list(opts?: ListOptions): Promise<ListResult> {\n      const query: Record<string, string> = { 'list-type': '2' };\n      if (opts?.prefix) query.prefix = opts.prefix;\n      if (opts?.delimiter) query.delimiter = opts.delimiter;\n      if (opts?.cursor) query['continuation-token'] = opts.cursor;\n      if (opts?.limit) query['max-keys'] = String(opts.limit);\n      const res = await client.send(client.objectUrl('', query), {\n        method: 'GET',\n        signal: opts?.signal,\n      });\n      const xml = await res.text();\n      if (!res.ok) throw parseErrorBody(res.status, xml);\n\n      const items = tagBlocks(xml, 'Contents').map((b) => {\n        const k = tagText(b, 'Key') ?? '';\n        return createStoredFile(\n          {\n            key: k,\n            size: Number(tagText(b, 'Size') ?? 0),\n            type: 'application/octet-stream',\n            etag: stripQuotes(tagText(b, 'ETag')),\n            lastModified: parseDate(tagText(b, 'LastModified')),\n          },\n          { kind: 'lazy', fetch: () => client.send(client.objectUrl(k), { method: 'GET' }) },\n        );\n      });\n      const prefixes = tagBlocks(xml, 'CommonPrefixes')\n        .map((b) => tagText(b, 'Prefix'))\n        .filter((p): p is string => !!p);\n      const cursor =\n        tagText(xml, 'IsTruncated') === 'true' ? tagText(xml, 'NextContinuationToken') : undefined;\n      return { items, prefixes: prefixes.length ? prefixes : undefined, cursor };\n    },\n\n    async url(key: string, opts?: UrlOptions): Promise<string> {\n      const forceSign = !!opts?.responseContentDisposition;\n      if (options.publicBaseUrl && !forceSign) return joinPublic(options.publicBaseUrl, key);\n      const query = opts?.responseContentDisposition\n        ? { 'response-content-disposition': opts.responseContentDisposition }\n        : undefined;\n      return client.presign(key, 'GET', opts?.expiresIn ?? expires, query);\n    },\n\n    async signedUploadUrl(key: string, opts: SignUploadOptions): Promise<SignedUpload> {\n      if (opts.maxSize != null || opts.minSize != null) {\n        const { url, fields } = await client.signPostPolicy(key, {\n          expiresIn: opts.expiresIn,\n          contentType: opts.contentType,\n          maxSize: opts.maxSize,\n          minSize: opts.minSize,\n        });\n        return { method: 'POST', url, fields };\n      }\n      const url = await client.presign(key, 'PUT', opts.expiresIn);\n      return {\n        method: 'PUT',\n        url,\n        headers: opts.contentType ? { 'content-type': opts.contentType } : undefined,\n      };\n    },\n\n    async createMultipartUpload(\n      key: string,\n      opts?: CreateMultipartOptions,\n    ): Promise<MultipartUpload> {\n      const res = await client.send(client.objectUrl(key, { uploads: '' }), {\n        method: 'POST',\n        headers: uploadHeaders(opts, false),\n        signal: opts?.signal,\n      });\n      const xml = await res.text();\n      if (!res.ok) throw parseErrorBody(res.status, xml, key);\n      const uploadId = tagText(xml, 'UploadId');\n      if (!uploadId) throw new StorageError('Parse', 'missing UploadId');\n      return multipartHandle(key, uploadId, opts);\n    },\n\n    resumeMultipartUpload(key: string, uploadId: string): MultipartUpload {\n      return multipartHandle(key, uploadId);\n    },\n\n    signedMultipart,\n  };\n}\n"],"mappings":";;;;;AAMA,MAAM,QAAQ;;AAGd,SAAgB,cAAc,OAA2B;CACvD,IAAI,SAAS;CACb,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,OACrC,UAAU,OAAO,aAAa,GAAG,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC;CAE/D,OAAO,KAAK,MAAM;AACpB;;AAWA,SAAgB,aAAa,MAAsB;CACjD,OAAO,cAAc,IAAI,YAAY,CAAC,CAAC,OAAO,IAAI,CAAC;AACrD;;;ACrBA,MAAMA,YAAU,IAAI,YAAY;AAEhC,eAAe,KAAK,KAAiB,MAAmC;CACtE,MAAM,YAAY,MAAM,OAAO,OAAO,UACpC,OACA,KACA;EAAE,MAAM;EAAQ,MAAM;CAAU,GAChC,OACA,CAAC,MAAM,CACT;CACA,MAAM,MAAM,MAAM,OAAO,OAAO,KAAK,QAAQ,WAAWA,UAAQ,OAAO,IAAI,CAAC;CAC5E,OAAO,IAAI,WAAW,GAAG;AAC3B;AAEA,SAAS,IAAI,OAA2B;CACtC,IAAI,MAAM;CACV,KAAK,MAAM,KAAK,OAAO,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;CAC5D,OAAO;AACT;AAEA,eAAe,gBACb,QACA,WACA,QACA,UAAU,MACW;CAIrB,OAAO,KAAK,MADW,KAAK,MADN,KAAK,MADP,KAAKA,UAAQ,OAAO,OAAO,QAAQ,GAAG,SAAS,GACjC,MAAM,GACH,OAAO,GACtB,cAAc;AACtC;AAEA,SAAS,WAAmD;CAC1D,MAAM,2BAAU,IAAI,KAAK,EAAA,CAAE,YAAY,CAAC,CAAC,QAAQ,iBAAiB,EAAE;CACpE,OAAO;EAAE;EAAS,WAAW,QAAQ,MAAM,GAAG,CAAC;CAAE;AACnD;;;;;;AAcA,IAAa,WAAb,MAAsB;CACpB;CACA;CACA;CAEA,YAAY,KAAsB;EAChC,KAAKE,OAAO;EACZ,KAAKC,SAAS,IAAI,SAAS;EAC3B,KAAKF,OAAO,IAAI,UAAU;GACxB,aAAa,IAAI,YAAY;GAC7B,iBAAiB,IAAI,YAAY;GACjC,cAAc,IAAI,YAAY;GAC9B,QAAQ,IAAI;GACZ,SAAS;EACX,CAAC;CACH;CAEA,IAAI,SAAiB;EACnB,OAAO,KAAKC,KAAK;CACnB;;CAGA,WAAW,KAAqB;EAC9B,OAAO,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG;CACxD;CAEA,UAAU,KAAa,OAAqC;EAC1D,MAAM,MAAM,KAAKE,WAAW,GAAG;EAC/B,MAAM,IAAI,IAAI,IAAI,KAAKF,KAAK,QAAQ;EACpC,IAAI,KAAKA,KAAK,gBACZ,EAAE,WAAW,IAAI,KAAKA,KAAK,SAAS,MAAM,IAAI,QAAQ;OACjD;GACL,EAAE,WAAW,GAAG,KAAKA,KAAK,OAAO,GAAG,EAAE;GACtC,EAAE,WAAW,IAAI;EACnB;EACA,IAAI,OAAO,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,KAAK,GAAG,EAAE,aAAa,IAAI,GAAG,CAAC;EAC9E,OAAO;CACT;;CAGA,UAAkB;EAChB,MAAM,IAAI,IAAI,IAAI,KAAKA,KAAK,QAAQ;EACpC,IAAI,KAAKA,KAAK,gBAAgB,EAAE,WAAW,IAAI,KAAKA,KAAK;OACpD,EAAE,WAAW,GAAG,KAAKA,KAAK,OAAO,GAAG,EAAE;EAC3C,OAAO,EAAE,SAAS;CACpB;;CAGA,MAAM,KAAK,KAAU,MAAsC;EACzD,MAAM,SAAS,MAAM,KAAKD,KAAK,KAAK,IAAI,SAAS,GAAG,IAAI;EACxD,OAAO,KAAKE,OAAO,MAAM;CAC3B;;CAGA,MAAM,QACJ,KACA,QACA,WACA,OACiB;EACjB,MAAM,MAAM,KAAK,UAAU,KAAK;GAAE,GAAG;GAAO,iBAAiB,OAAO,SAAS;EAAE,CAAC;EAKhF,QAAO,MAJc,KAAKF,KAAK,KAAK,IAAI,SAAS,GAAG;GAClD;GACA,KAAK,EAAE,WAAW,KAAK;EACzB,CAAC,EAAA,CACa;CAChB;;;;;;CAOA,MAAM,eACJ,KACA,MAC0D;EAC1D,MAAM,EAAE,SAAS,cAAc,SAAS;EACxC,MAAM,EAAE,aAAa,iBAAiB,iBAAiB,KAAKC,KAAK;EACjE,MAAM,aAAa,GAAG,YAAY,GAAG,UAAU,GAAG,KAAKA,KAAK,OAAO;EACnE,MAAM,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,YAAY,GAAI,CAAC,CAAC,YAAY;EAE5E,MAAM,aAAgF;GACpF,EAAE,QAAQ,KAAKA,KAAK,OAAO;GAC3B,EAAE,IAAI;GACN,EAAE,mBAAmB,mBAAmB;GACxC,EAAE,oBAAoB,WAAW;GACjC,EAAE,cAAc,QAAQ;EAC1B;EACA,IAAI,cAAc,WAAW,KAAK,EAAE,wBAAwB,aAAa,CAAC;EAC1E,IAAI,KAAK,aAAa,WAAW,KAAK,EAAE,gBAAgB,KAAK,YAAY,CAAC;EAC1E,IAAI,KAAK,WAAW,QAAQ,KAAK,WAAW,MAC1C,WAAW,KAAK;GACd;GACA,KAAK,WAAW;GAChB,KAAK,WAAW,KAAK,WAAW;EAClC,CAAC;EAGH,MAAM,YAAY,aAAa,KAAK,UAAU;GAAE;GAAY;EAAW,CAAC,CAAC;EAIzE,MAAM,SAAiC;GACrC;GACA,mBAAmB;GACnB,oBAAoB;GACpB,cAAc;GACd,QAAQ;GACR,mBARgB,IAAI,MAAM,KAAK,MADR,gBAAgB,iBAAiB,WAAW,KAAKA,KAAK,MAAM,GACxC,SAAS,CAQzB;EAC7B;EACA,IAAI,cAAc,OAAO,0BAA0B;EACnD,IAAI,KAAK,aAAa,OAAO,kBAAkB,KAAK;EAEpD,OAAO;GAAE,KAAK,KAAK,QAAQ;GAAG;EAAO;CACvC;AACF;;;ACvKA,MAAM,WAAmC;CACvC,KAAK;CACL,IAAI;CACJ,IAAI;CACJ,MAAM;CACN,MAAM;AACR;AAEA,SAAgB,YAAY,GAAmB;CAC7C,OAAO,EAAE,QAAQ,6CAA6C,IAAI,MAAc;EAC9E,IAAI,EAAE,OAAO,KAAK;GAChB,MAAM,OAAO,EAAE,OAAO,MAAM,OAAO,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,OAAO,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE;GAC5F,OAAO,OAAO,SAAS,IAAI,IAAI,OAAO,cAAc,IAAI,IAAI;EAC9D;EACA,OAAO,SAAS,MAAM;CACxB,CAAC;AACH;AAEA,SAAgB,UAAU,GAAmB;CAC3C,OAAO,EAAE,QAAQ,aAAa,MAAM;EAClC,QAAQ,GAAR;GACE,KAAK,KACH,OAAO;GACT,KAAK,KACH,OAAO;GACT,KAAK,KACH,OAAO;GACT,KAAK,MACH,OAAO;GACT,SACE,OAAO;EACX;CACF,CAAC;AACH;AAIA,SAAS,WAAW,KAAqB;CACvC,OAAO,IAAI,IAAI,8BAA8B,IAAI;AACnD;;AAGA,SAAgB,QAAQ,KAAa,KAAiC;CACpE,MAAM,IAAI,IAAI,OAAO,WAAW,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;CAC9C,OAAO,IAAI,YAAY,EAAE,EAAG,IAAI,KAAA;AAClC;;AAGA,SAAgB,UAAU,KAAa,KAAuB;CAC5D,MAAM,KAAK,IAAI,OAAO,WAAW,GAAG,GAAG,GAAG;CAC1C,MAAM,MAAgB,CAAC;CACvB,IAAI;CACJ,QAAQ,IAAI,GAAG,KAAK,GAAG,OAAO,MAAM,IAAI,KAAK,EAAE,EAAG;CAClD,OAAO;AACT;;;AChCA,MAAM,UAAU,IAAI,YAAY;AAChC,MAAM,kBAAkB;AACxB,MAAM,oBAAoB,IAAI,OAAO;AAErC,SAAS,YAAY,GAAkD;CACrE,OAAO,IAAI,EAAE,QAAQ,UAAU,EAAE,IAAI,KAAA;AACvC;AAEA,SAAS,UAAU,GAAkD;CACnE,IAAI,CAAC,GAAG,OAAO,KAAA;CACf,MAAM,IAAI,KAAK,MAAM,CAAC;CACtB,OAAO,OAAO,SAAS,CAAC,IAAI,IAAI,KAAA;AAClC;AAEA,SAAS,YAAY,OAA0B;CAC7C,OAAO,SAAS,MAAM,MAAM,GAAG,MAAM,OAAO;AAC9C;AAEA,SAAS,gBAAgB,SAAsD;CAC7E,MAAM,OAA+B,CAAC;CACtC,QAAQ,SAAS,OAAO,QAAQ;EAC9B,IAAI,IAAI,WAAW,aAAa,GAAG,KAAK,IAAI,MAAM,EAAoB,KAAK;CAC7E,CAAC;CACD,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,SAAS,OAAO,KAAA;AAC3C;AAEA,SAAS,WAAW,MAAc,KAAqB;CACrD,MAAM,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG;CAC3D,OAAO,GAAG,KAAK,QAAQ,OAAO,EAAE,EAAE,GAAG;AACvC;;AAGA,SAAS,UAAU,MAA0B,QAAkC;CAC7E,QAAQ,MAAR;EACE,KAAK;EACL,KAAK;EACL,KAAK,gBACH,OAAO;EACT,KAAK;EACL,KAAK;EACL,KAAK;EACL,KAAK,qBACH,OAAO;EACT,KAAK;EACL,KAAK,kBACH,OAAO;EACT,SACE;CACJ;CACA,IAAI,WAAW,KAAK,OAAO;CAC3B,IAAI,WAAW,OAAO,WAAW,KAAK,OAAO;CAC7C,IAAI,WAAW,KAAK,OAAO;CAC3B,IAAI,WAAW,KAAK,OAAO;CAC3B,IAAI,UAAU,KAAK,OAAO;CAC1B,IAAI,UAAU,KAAK,OAAO;CAC1B,OAAO;AACT;AAEA,SAAS,QACP,QACA,MACA,SACA,KACc;CACd,MAAM,SAAS,UAAU,MAAM,MAAM;CACrC,MAAM,YACJ,WAAW,cACX,WAAW,iBACX,WAAW,aACX,WAAW;CACb,OAAO,IAAI,aAAa,QAAQ,WAAW,QAAQ,WAAW,MAAM,KAAK,IAAI,KAAK,MAAM;EACtF,QAAQ,UAAU,MAAM,SAAS,KAAA;EACjC;EAGA,UAAU;CACZ,CAAC;AACH;AAEA,eAAe,QAAQ,KAAe,KAAqC;CACzE,IAAI;CACJ,IAAI;CACJ,IAAI;EACF,MAAM,OAAO,MAAM,IAAI,KAAK;EAC5B,OAAO,QAAQ,MAAM,MAAM;EAC3B,UAAU,QAAQ,MAAM,SAAS;CACnC,QAAQ,CAER;CACA,OAAO,QAAQ,IAAI,QAAQ,MAAM,SAAS,GAAG;AAC/C;AAEA,SAAS,eAAe,QAAgB,MAAc,KAA4B;CAChF,OAAO,QAAQ,QAAQ,QAAQ,MAAM,MAAM,GAAG,QAAQ,MAAM,SAAS,GAAG,GAAG;AAC7E;;AAGA,SAAS,WAAW,MAAmB,MAAoC;CACzE,IAAI,gBAAgB,gBAClB,OAAO;EAAE,GAAG;EAAM,QAAQ;CAAO;CAEnC,OAAO;AACT;;AAGA,SAAgB,SAAS,SAAyC;CAChE,MAAM,SAAS,IAAI,SAAS,OAAO;CACnC,MAAM,UAAU,QAAQ,uBAAuB;CAE/C,SAAS,cACP,MAGA,iBACS;EACT,MAAM,IAAI,IAAI,QAAQ;EACtB,IAAI,iBAAiB,EAAE,IAAI,wBAAwB,kBAAkB;EACrE,IAAI,MAAM,aAAa,EAAE,IAAI,gBAAgB,KAAK,WAAW;EAC7D,IAAI,MAAM,cAAc,EAAE,IAAI,iBAAiB,KAAK,YAAY;EAChE,IAAI,MAAM,UACR,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,KAAK,QAAQ,GAAG,EAAE,IAAI,cAAc,KAAK,CAAC;EAChF,OAAO;CACT;CAEA,SAAS,gBACP,KACA,UACA,YACiB;EACjB,OAAO;GACL;GACA;GACA,MAAM,WAAW,YAAoB,MAAgB,GAAsB;IACzE,MAAM,MAAM,OAAO,UAAU,KAAK;KAAE,YAAY,OAAO,UAAU;KAAG;IAAS,CAAC;IAC9E,MAAM,MAAM,MAAM,OAAO,KACvB,KACA,WACE;KACE,QAAQ;KACR,SAAS,IAAI,QAAQ,EAAE,wBAAwB,mBAAmB,CAAC;KACnE,MAAM;KACN,QAAQ,GAAG;IACb,GACA,IACF,CACF;IACA,IAAI,CAAC,IAAI,IAAI,MAAM,MAAM,QAAQ,KAAK,GAAG;IACzC,MAAM,OAAO,IAAI,QAAQ,IAAI,MAAM;IACnC,IAAI,CAAC,MAAM,MAAM,IAAI,aAAa,YAAY,yBAAyB,YAAY;IACnF,OAAO;KAAE;KAAY;IAAK;GAC5B;GACA,MAAM,SAAS,OAAuB,GAAsB;IAC1D,MAAM,MACJ,wEACA,CAAC,GAAG,KAAK,CAAC,CACP,MAAM,GAAG,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,CAC3C,KACE,MACC,qBAAqB,EAAE,WAAW,qBAAqB,UAAU,EAAE,IAAI,EAAE,eAC7E,CAAC,CACA,KAAK,EAAE,IACV;IACF,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,KAAK,EAAE,SAAS,CAAC,GAAG;KACjE,QAAQ;KACR,SAAS,IAAI,QAAQ,EAAE,gBAAgB,kBAAkB,CAAC;KAC1D,MAAM,QAAQ,OAAO,GAAG;KACxB,QAAQ,GAAG;IACb,CAAC;IACD,MAAM,OAAO,MAAM,IAAI,KAAK;IAC5B,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS,QAAQ,GAAG,MAAM,eAAe,IAAI,QAAQ,MAAM,GAAG;IAClF,OAAO;KACL;KACA,MAAM;KACN,aAAa,YAAY,eAAe;KACxC,MAAM,YAAY,QAAQ,MAAM,MAAM,CAAC;IACzC;GACF;GACA,MAAM,MAAM,GAAsB;IAChC,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,KAAK,EAAE,SAAS,CAAC,GAAG;KACjE,QAAQ;KACR,QAAQ,GAAG;IACb,CAAC;IACD,IAAI,CAAC,IAAI,MAAM,IAAI,WAAW,KAAK,MAAM,MAAM,QAAQ,KAAK,GAAG;GACjE;GACA,MAAM,UAAU,GAAsB;IACpC,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,KAAK,EAAE,SAAS,CAAC,GAAG;KACjE,QAAQ;KACR,QAAQ,GAAG;IACb,CAAC;IACD,MAAM,MAAM,MAAM,IAAI,KAAK;IAC3B,IAAI,CAAC,IAAI,IAAI,MAAM,eAAe,IAAI,QAAQ,KAAK,GAAG;IACtD,OAAO,UAAU,KAAK,MAAM,CAAC,CAAC,KAAK,OAAO;KACxC,YAAY,OAAO,QAAQ,GAAG,YAAY,KAAK,CAAC;KAChD,MAAM,YAAY,QAAQ,GAAG,MAAM,CAAC,KAAK;KACzC,MAAM,OAAO,QAAQ,GAAG,MAAM,KAAK,CAAC;IACtC,EAAE;GACJ;EACF;CACF;CA6BA,OAAO;EACL,MAAM,QAAQ,QAAQ;EACtB,KAAK;EACL,eAAe;EACf,mBAAmB;EACnB,kBAAkB;EAClB,sBAAsB;EACtB,wBAAwB;EACxB,uBAAuB;EACvB,WAAW;GAAE,WAAW;GAAM,QAAQ;EAAK;EAE3C,MAAM,OAAO,KAAa,MAAY,MAA6C;GACjF,MAAM,OAAO,aAAa,IAAI,KAAK;GACnC,MAAM,MAAM,MAAM,OAAO,KACvB,OAAO,UAAU,GAAG,GACpB,WACE;IACE,QAAQ;IACR,SAAS,cAAc,MAAM,IAAI;IAC3B;IACN,QAAQ,MAAM;GAChB,GACA,IACF,CACF;GACA,IAAI,CAAC,IAAI,IAAI,MAAM,MAAM,QAAQ,KAAK,GAAG;GACzC,OAAO;IACL;IACA;IACA,aAAa,MAAM,eAAe;IAClC,MAAM,YAAY,IAAI,QAAQ,IAAI,MAAM,CAAC;IACzC,cAAc,UAAU,IAAI,QAAQ,IAAI,eAAe,CAAC;GAC1D;EACF;EAEA,MAAM,SAAS,KAAa,MAA6C;GACvE,MAAM,UAAU,IAAI,QAAQ;GAC5B,IAAI,MAAM,OAAO,QAAQ,IAAI,SAAS,YAAY,KAAK,KAAK,CAAC;GAC7D,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,GAAG,GAAG;IACnD,QAAQ;IACR;IACA,QAAQ,MAAM;GAChB,CAAC;GACD,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM;IACxB,IAAI,IAAI,WAAW,KACjB,MAAM,IAAI,aAAa,YAAY,cAAc,OAAO,EAAE,QAAQ,IAAI,CAAC;IACzE,MAAM,MAAM,QAAQ,KAAK,GAAG;GAC9B;GACA,OAAO,iBACL;IACE;IACA,MAAM,OAAO,IAAI,QAAQ,IAAI,gBAAgB,KAAK,CAAC;IACnD,MAAM,IAAI,QAAQ,IAAI,cAAc,KAAK;IACzC,MAAM,YAAY,IAAI,QAAQ,IAAI,MAAM,CAAC;IACzC,cAAc,UAAU,IAAI,QAAQ,IAAI,eAAe,CAAC;IACxD,UAAU,gBAAgB,IAAI,OAAO;GACvC,GACA;IAAE,MAAM;IAAU,QAAQ,IAAI;GAAK,CACrC;EACF;EAEA,MAAM,KAAK,KAAa,MAA8C;GACpE,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,GAAG,GAAG;IACnD,QAAQ;IACR,QAAQ,MAAM;GAChB,CAAC;GACD,IAAI,CAAC,IAAI,IAAI;IACX,IAAI,IAAI,WAAW,KACjB,MAAM,IAAI,aAAa,YAAY,cAAc,OAAO,EAAE,QAAQ,IAAI,CAAC;IACzE,MAAM,MAAM,QAAQ,KAAK,GAAG;GAC9B;GACA,OAAO,iBACL;IACE;IACA,MAAM,OAAO,IAAI,QAAQ,IAAI,gBAAgB,KAAK,CAAC;IACnD,MAAM,IAAI,QAAQ,IAAI,cAAc,KAAK;IACzC,MAAM,YAAY,IAAI,QAAQ,IAAI,MAAM,CAAC;IACzC,cAAc,UAAU,IAAI,QAAQ,IAAI,eAAe,CAAC;IACxD,UAAU,gBAAgB,IAAI,OAAO;GACvC,GACA;IAAE,MAAM;IAAQ,aAAa,OAAO,KAAK,OAAO,UAAU,GAAG,GAAG,EAAE,QAAQ,MAAM,CAAC;GAAE,CACrF;EACF;EAEA,MAAM,OAAO,KAAa,MAA2C;GACnE,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,GAAG,GAAG;IACnD,QAAQ;IACR,QAAQ,MAAM;GAChB,CAAC;GACD,IAAI,IAAI,WAAW,KAAK,OAAO;GAC/B,IAAI,CAAC,IAAI,IAAI,MAAM,MAAM,QAAQ,KAAK,GAAG;GACzC,OAAO;EACT;EAEA,MAAM,OAAO,KAAa,MAAwC;GAChE,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,GAAG,GAAG;IACnD,QAAQ;IACR,QAAQ,MAAM;GAChB,CAAC;GACD,IAAI,CAAC,IAAI,MAAM,IAAI,WAAW,KAAK,MAAM,MAAM,QAAQ,KAAK,GAAG;EACjE;EAEA,MAAM,KAAK,MAAc,IAAY,MAAwC;GAC3E,MAAM,SAAS,IAAI,OAAO,OAAO,GAAG,KAAK,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG;GACpF,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,EAAE,GAAG;IAClD,QAAQ;IACR,SAAS,IAAI,QAAQ,EAAE,qBAAqB,OAAO,CAAC;IACpD,QAAQ,MAAM;GAChB,CAAC;GACD,MAAM,OAAO,MAAM,IAAI,KAAK;GAC5B,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS,QAAQ,GAAG,MAAM,eAAe,IAAI,QAAQ,MAAM,EAAE;EACnF;EAEA,MAAM,KAAK,MAAyC;GAClD,MAAM,QAAgC,EAAE,aAAa,IAAI;GACzD,IAAI,MAAM,QAAQ,MAAM,SAAS,KAAK;GACtC,IAAI,MAAM,WAAW,MAAM,YAAY,KAAK;GAC5C,IAAI,MAAM,QAAQ,MAAM,wBAAwB,KAAK;GACrD,IAAI,MAAM,OAAO,MAAM,cAAc,OAAO,KAAK,KAAK;GACtD,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,IAAI,KAAK,GAAG;IACzD,QAAQ;IACR,QAAQ,MAAM;GAChB,CAAC;GACD,MAAM,MAAM,MAAM,IAAI,KAAK;GAC3B,IAAI,CAAC,IAAI,IAAI,MAAM,eAAe,IAAI,QAAQ,GAAG;GAEjD,MAAM,QAAQ,UAAU,KAAK,UAAU,CAAC,CAAC,KAAK,MAAM;IAClD,MAAM,IAAI,QAAQ,GAAG,KAAK,KAAK;IAC/B,OAAO,iBACL;KACE,KAAK;KACL,MAAM,OAAO,QAAQ,GAAG,MAAM,KAAK,CAAC;KACpC,MAAM;KACN,MAAM,YAAY,QAAQ,GAAG,MAAM,CAAC;KACpC,cAAc,UAAU,QAAQ,GAAG,cAAc,CAAC;IACpD,GACA;KAAE,MAAM;KAAQ,aAAa,OAAO,KAAK,OAAO,UAAU,CAAC,GAAG,EAAE,QAAQ,MAAM,CAAC;IAAE,CACnF;GACF,CAAC;GACD,MAAM,WAAW,UAAU,KAAK,gBAAgB,CAAC,CAC9C,KAAK,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAChC,QAAQ,MAAmB,CAAC,CAAC,CAAC;GACjC,MAAM,SACJ,QAAQ,KAAK,aAAa,MAAM,SAAS,QAAQ,KAAK,uBAAuB,IAAI,KAAA;GACnF,OAAO;IAAE;IAAO,UAAU,SAAS,SAAS,WAAW,KAAA;IAAW;GAAO;EAC3E;EAEA,MAAM,IAAI,KAAa,MAAoC;GACzD,MAAM,YAAY,CAAC,CAAC,MAAM;GAC1B,IAAI,QAAQ,iBAAiB,CAAC,WAAW,OAAO,WAAW,QAAQ,eAAe,GAAG;GACrF,MAAM,QAAQ,MAAM,6BAChB,EAAE,gCAAgC,KAAK,2BAA2B,IAClE,KAAA;GACJ,OAAO,OAAO,QAAQ,KAAK,OAAO,MAAM,aAAa,SAAS,KAAK;EACrE;EAEA,MAAM,gBAAgB,KAAa,MAAgD;GACjF,IAAI,KAAK,WAAW,QAAQ,KAAK,WAAW,MAAM;IAChD,MAAM,EAAE,KAAK,WAAW,MAAM,OAAO,eAAe,KAAK;KACvD,WAAW,KAAK;KAChB,aAAa,KAAK;KAClB,SAAS,KAAK;KACd,SAAS,KAAK;IAChB,CAAC;IACD,OAAO;KAAE,QAAQ;KAAQ;KAAK;IAAO;GACvC;GAEA,OAAO;IACL,QAAQ;IACR,KAAA,MAHgB,OAAO,QAAQ,KAAK,OAAO,KAAK,SAAS;IAIzD,SAAS,KAAK,cAAc,EAAE,gBAAgB,KAAK,YAAY,IAAI,KAAA;GACrE;EACF;EAEA,MAAM,sBACJ,KACA,MAC0B;GAC1B,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,KAAK,EAAE,SAAS,GAAG,CAAC,GAAG;IACpE,QAAQ;IACR,SAAS,cAAc,MAAM,KAAK;IAClC,QAAQ,MAAM;GAChB,CAAC;GACD,MAAM,MAAM,MAAM,IAAI,KAAK;GAC3B,IAAI,CAAC,IAAI,IAAI,MAAM,eAAe,IAAI,QAAQ,KAAK,GAAG;GACtD,MAAM,WAAW,QAAQ,KAAK,UAAU;GACxC,IAAI,CAAC,UAAU,MAAM,IAAI,aAAa,SAAS,kBAAkB;GACjE,OAAO,gBAAgB,KAAK,UAAU,IAAI;EAC5C;EAEA,sBAAsB,KAAa,UAAmC;GACpE,OAAO,gBAAgB,KAAK,QAAQ;EACtC;EAEA,iBAAA;GA5NA,MAAM,OAAO,KAAK,GAAG;IACnB,MAAM,MAAM,MAAM,OAAO,KAAK,OAAO,UAAU,KAAK,EAAE,SAAS,GAAG,CAAC,GAAG;KACpE,QAAQ;KACR,SAAS,cAAc;MAAE,aAAa,EAAE;MAAa,UAAU,EAAE;KAAS,GAAG,KAAK;IACpF,CAAC;IACD,MAAM,MAAM,MAAM,IAAI,KAAK;IAC3B,IAAI,CAAC,IAAI,IAAI,MAAM,eAAe,IAAI,QAAQ,KAAK,GAAG;IACtD,MAAM,WAAW,QAAQ,KAAK,UAAU;IACxC,IAAI,CAAC,UAAU,MAAM,IAAI,aAAa,SAAS,kBAAkB;IACjE,OAAO;KAAE;KAAU,UAAU,EAAE,YAAY;IAAkB;GAC/D;GACA,MAAM,SAAS,KAAK,UAAU,YAAY,GAAG;IAK3C,OAAO,EAAE,KAAA,MAJS,OAAO,QAAQ,KAAK,OAAO,GAAG,aAAa,SAAS;KACpE,YAAY,OAAO,UAAU;KAC7B;IACF,CAAC,EACY;GACf;GACA,SAAS,KAAK,UAAU,OAAO;IAC7B,OAAO,gBAAgB,KAAK,QAAQ,CAAC,CAAC,SAAS,KAAK;GACtD;GACA,MAAM,KAAK,UAAU;IACnB,OAAO,gBAAgB,KAAK,QAAQ,CAAC,CAAC,MAAM;GAC9C;EAqMc;CAChB;AACF"}