effect 4.0.7 → 4.1.0

package/dist/crypto/Kdf.d.ts

@@ -0,0 +1,220 @@
+/**
+ * Key derivation: HKDF, PBKDF2, and Argon2id.
+ *
+ * The {@link Kdf} service derives bytes from a secret with an algorithm value
+ * such as {@link hkdfSha256}, {@link pbkdf2Sha256}, or `argon2id()`. The
+ * output is plain bytes: turn it into a typed key with the target family's raw
+ * constructor, such as `Mac.key`.
+ *
+ * **Gotchas**
+ *
+ * - The secret is bytes, with no string overload. Encode passwords yourself,
+ *   and normalize their Unicode form first if users type them on different
+ *   platforms.
+ * - `layerWebCrypto` does not provide Argon2id, because WebCrypto has no
+ *   Argon2. Deriving with it fails with an `Unsupported` reason, so programs
+ *   can fall back to PBKDF2. `NodeCrypto.layerKdf` provides Argon2id on
+ *   Node.js 24.7 or later and Bun 1.4.
+ *
+ * @stability unstable
+ * @since 4.0.0
+ */
+import * as Context from "../Context.ts";
+import * as Effect from "../Effect.ts";
+import * as Layer from "../Layer.ts";
+import * as CryptoError from "./CryptoError.ts";
+import * as Digest from "./Digest.ts";
+/**
+ * HKDF (RFC 5869) with a hash, from {@link hkdf}.
+ *
+ * @stability unstable
+ * @category models
+ * @since 4.0.0
+ */
+export interface Hkdf {
+    readonly _tag: "Hkdf";
+    readonly name: string;
+    readonly hash: Digest.Algorithm;
+}
+/**
+ * PBKDF2 (RFC 8018) with a hash and an iteration count, from {@link pbkdf2}.
+ *
+ * @stability unstable
+ * @category models
+ * @since 4.0.0
+ */
+export interface Pbkdf2 {
+    readonly _tag: "Pbkdf2";
+    readonly name: string;
+    readonly hash: Digest.Algorithm;
+    readonly iterations: number;
+}
+/**
+ * Argon2id (RFC 9106) with its cost parameters, from {@link argon2id}.
+ *
+ * **Details**
+ *
+ * `memory` is in KiB, `passes` is the number of passes over the memory, and
+ * `parallelism` is the number of lanes.
+ *
+ * @stability unstable
+ * @category models
+ * @since 4.0.0
+ */
+export interface Argon2id {
+    readonly _tag: "Argon2id";
+    readonly name: string;
+    readonly memory: number;
+    readonly passes: number;
+    readonly parallelism: number;
+}
+/**
+ * A key derivation algorithm.
+ *
+ * @stability unstable
+ * @category models
+ * @since 4.0.0
+ */
+export type Algorithm = Hkdf | Pbkdf2 | Argon2id;
+/**
+ * Builds the HKDF algorithm for a hash.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export declare const hkdf: (hash: Digest.Algorithm) => Hkdf;
+/**
+ * Builds a PBKDF2 algorithm for a hash and an iteration count.
+ *
+ * **Details**
+ *
+ * Deriving with an iteration count outside 1 to 2^31 - 1 fails with an
+ * `InvalidArgument` reason.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export declare const pbkdf2: (options: {
+    readonly hash: Digest.Algorithm;
+    readonly iterations: number;
+}) => Pbkdf2;
+/**
+ * HKDF with SHA-1.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export declare const hkdfSha1: Hkdf;
+/**
+ * HKDF with SHA-256.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export declare const hkdfSha256: Hkdf;
+/**
+ * HKDF with SHA-384.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export declare const hkdfSha384: Hkdf;
+/**
+ * HKDF with SHA-512.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export declare const hkdfSha512: Hkdf;
+/**
+ * PBKDF2 with SHA-256 at 600,000 iterations, OWASP's current figure.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export declare const pbkdf2Sha256: Pbkdf2;
+/**
+ * Builds an Argon2id algorithm, with `memory` in KiB.
+ *
+ * **Details**
+ *
+ * Omitted costs default to RFC 9106's second recommended setting: 64 MiB of
+ * memory (`65_536`), 3 passes, and 4 lanes.
+ *
+ * **Gotchas**
+ *
+ * `Kdf.layerWebCrypto` does not provide Argon2id. Use `NodeCrypto.layerKdf`,
+ * or fall back to PBKDF2 on the `Unsupported` reason.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export declare const argon2id: (options?: {
+    readonly memory?: number | undefined;
+    readonly passes?: number | undefined;
+    readonly parallelism?: number | undefined;
+}) => Argon2id;
+declare const Kdf_base: Context.ServiceClass<Kdf, "effect/crypto/Kdf", {
+    /**
+     * Derives `length` bytes from `secret`.
+     *
+     * `info` only applies to HKDF; passing it with PBKDF2 or Argon2id fails
+     * with an `InvalidArgument` reason.
+     */
+    readonly derive: (algorithm: Algorithm, secret: Uint8Array, options: {
+        readonly salt: Uint8Array;
+        readonly length: number;
+        readonly info?: Uint8Array | undefined;
+    }) => Effect.Effect<Uint8Array, CryptoError.CryptoError>;
+}>;
+/**
+ * Service that derives bytes from a secret.
+ *
+ * **Example** (Deriving a key with HKDF)
+ *
+ * ```ts import.meta.vitest
+ * import { Effect } from "effect"
+ * import { Kdf } from "effect/crypto"
+ *
+ * const program = Effect.gen(function*() {
+ *   const kdf = yield* Kdf.Kdf
+ *   return yield* kdf.derive(Kdf.hkdfSha256, new Uint8Array(32), {
+ *     salt: new Uint8Array(16),
+ *     info: new TextEncoder().encode("encryption"),
+ *     length: 32
+ *   })
+ * })
+ *
+ * const bytes = await Effect.runPromise(program.pipe(Effect.provide(Kdf.layerWebCrypto)))
+ * bytes.length // => 32
+ * ```
+ *
+ * @stability unstable
+ * @category services
+ * @since 4.0.0
+ */
+export declare class Kdf extends Kdf_base {
+}
+/**
+ * Layer that provides `Kdf` on the `WebCrypto` reference.
+ *
+ * **Details**
+ *
+ * HKDF and PBKDF2 run on `crypto.subtle`, off the event loop where the runtime
+ * supports it. Argon2id fails with an `Unsupported` reason.
+ *
+ * @stability unstable
+ * @category layers
+ * @since 4.0.0
+ */
+export declare const layerWebCrypto: Layer.Layer<Kdf>;
+export {};
+//# sourceMappingURL=Kdf.d.ts.map

package/dist/crypto/Kdf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Kdf.d.ts","sourceRoot":"","sources":["../../src/crypto/Kdf.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,OAAO,MAAM,eAAe,CAAA;AACxC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAA;AACtC,OAAO,KAAK,KAAK,MAAM,aAAa,CAAA;AACpC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAA;AAC/C,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAIrC;;;;;;GAMG;AACH,MAAM,WAAW,IAAI;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAA;CAChC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAC5B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAC7B;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,QAAQ,CAAA;AAEhD;;;;;;GAMG;AACH,eAAO,MAAM,IAAI,SAAU,MAAM,CAAC,SAAS,KAAG,IAAwE,CAAA;AAEtH;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,MAAM,YAAa;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,KAAG,MAKjG,CAAA;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,QAAQ,EAAE,IAAwB,CAAA;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,EAAE,IAA0B,CAAA;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,EAAE,IAA0B,CAAA;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,UAAU,EAAE,IAA0B,CAAA;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,EAAE,MAA6D,CAAA;AAExF;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,QAAQ,aAAc;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAC1C,KAAG,QAMF,CAAA;;IA6BA;;;;;OAKG;qBACc,CACf,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,UAAU,EAClB,OAAO,EAAE;QACP,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;KACvC,KACE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,WAAW,CAAC;;AAzCzD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,qBAAa,GAAI,SAAQ,QAgBA;CAAG;AAgD5B;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,cAAc,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAyB3C,CAAA"}

package/dist/crypto/Kdf.js

@@ -0,0 +1,212 @@
+/**
+ * Key derivation: HKDF, PBKDF2, and Argon2id.
+ *
+ * The {@link Kdf} service derives bytes from a secret with an algorithm value
+ * such as {@link hkdfSha256}, {@link pbkdf2Sha256}, or `argon2id()`. The
+ * output is plain bytes: turn it into a typed key with the target family's raw
+ * constructor, such as `Mac.key`.
+ *
+ * **Gotchas**
+ *
+ * - The secret is bytes, with no string overload. Encode passwords yourself,
+ *   and normalize their Unicode form first if users type them on different
+ *   platforms.
+ * - `layerWebCrypto` does not provide Argon2id, because WebCrypto has no
+ *   Argon2. Deriving with it fails with an `Unsupported` reason, so programs
+ *   can fall back to PBKDF2. `NodeCrypto.layerKdf` provides Argon2id on
+ *   Node.js 24.7 or later and Bun 1.4.
+ *
+ * @stability unstable
+ * @since 4.0.0
+ */
+import * as Context from "../Context.js";
+import * as Effect from "../Effect.js";
+import * as Layer from "../Layer.js";
+import * as CryptoError from "./CryptoError.js";
+import * as Digest from "./Digest.js";
+import * as internal from "./internal/webCrypto.js";
+import { WebCrypto } from "./WebCrypto.js";
+/**
+ * Builds the HKDF algorithm for a hash.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const hkdf = hash => ({
+  _tag: "Hkdf",
+  name: `hkdf${Digest.nameSuffix(hash)}`,
+  hash
+});
+/**
+ * Builds a PBKDF2 algorithm for a hash and an iteration count.
+ *
+ * **Details**
+ *
+ * Deriving with an iteration count outside 1 to 2^31 - 1 fails with an
+ * `InvalidArgument` reason.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const pbkdf2 = options => ({
+  _tag: "Pbkdf2",
+  name: `pbkdf2${Digest.nameSuffix(options.hash)}`,
+  hash: options.hash,
+  iterations: options.iterations
+});
+/**
+ * HKDF with SHA-1.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const hkdfSha1 = /*#__PURE__*/hkdf(Digest.sha1);
+/**
+ * HKDF with SHA-256.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const hkdfSha256 = /*#__PURE__*/hkdf(Digest.sha256);
+/**
+ * HKDF with SHA-384.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const hkdfSha384 = /*#__PURE__*/hkdf(Digest.sha384);
+/**
+ * HKDF with SHA-512.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const hkdfSha512 = /*#__PURE__*/hkdf(Digest.sha512);
+/**
+ * PBKDF2 with SHA-256 at 600,000 iterations, OWASP's current figure.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const pbkdf2Sha256 = /*#__PURE__*/pbkdf2({
+  hash: Digest.sha256,
+  iterations: 600_000
+});
+/**
+ * Builds an Argon2id algorithm, with `memory` in KiB.
+ *
+ * **Details**
+ *
+ * Omitted costs default to RFC 9106's second recommended setting: 64 MiB of
+ * memory (`65_536`), 3 passes, and 4 lanes.
+ *
+ * **Gotchas**
+ *
+ * `Kdf.layerWebCrypto` does not provide Argon2id. Use `NodeCrypto.layerKdf`,
+ * or fall back to PBKDF2 on the `Unsupported` reason.
+ *
+ * @stability unstable
+ * @category algorithms
+ * @since 4.0.0
+ */
+export const argon2id = options => ({
+  _tag: "Argon2id",
+  name: "argon2id",
+  memory: options?.memory ?? 65_536,
+  passes: options?.passes ?? 3,
+  parallelism: options?.parallelism ?? 4
+});
+/**
+ * Service that derives bytes from a secret.
+ *
+ * **Example** (Deriving a key with HKDF)
+ *
+ * ```ts import.meta.vitest
+ * import { Effect } from "effect"
+ * import { Kdf } from "effect/crypto"
+ *
+ * const program = Effect.gen(function*() {
+ *   const kdf = yield* Kdf.Kdf
+ *   return yield* kdf.derive(Kdf.hkdfSha256, new Uint8Array(32), {
+ *     salt: new Uint8Array(16),
+ *     info: new TextEncoder().encode("encryption"),
+ *     length: 32
+ *   })
+ * })
+ *
+ * const bytes = await Effect.runPromise(program.pipe(Effect.provide(Kdf.layerWebCrypto)))
+ * bytes.length // => 32
+ * ```
+ *
+ * @stability unstable
+ * @category services
+ * @since 4.0.0
+ */
+export class Kdf extends /*#__PURE__*/Context.Service()("effect/crypto/Kdf") {}
+const invalidArgument = description => internal.fail("Kdf", "derive", new CryptoError.InvalidArgument({
+  description
+}));
+const isIntegerIn = (n, min, max) => Number.isSafeInteger(n) && n >= min && n <= max;
+// Checks the arguments before they reach Web Crypto, which takes a 32-bit bit
+// length that some backends wrap instead of rejecting. Node.js aborts the
+// process on PBKDF2 iteration counts above 2^31 - 1.
+const checkArguments = (algorithm, options) => {
+  if (algorithm._tag !== "Hkdf" && options.info !== undefined) return invalidArgument("info only applies to HKDF");
+  if (algorithm._tag === "Argon2id") return undefined;
+  if (algorithm.hash.name === "MD5") return invalidArgument(`${algorithm._tag} needs a SHA hash, not MD5`);
+  if (algorithm._tag === "Hkdf") {
+    const maxLength = 255 * algorithm.hash.outputLength;
+    return isIntegerIn(options.length, 1, maxLength) ? undefined : invalidArgument(`length must be between 1 and ${maxLength} bytes for ${algorithm.name}`);
+  }
+  if (!isIntegerIn(algorithm.iterations, 1, 0x7fff_ffff)) {
+    return invalidArgument("iterations must be between 1 and 2^31 - 1");
+  }
+  return isIntegerIn(options.length, 1, 0x1fff_ffff) ? undefined : invalidArgument("length must be between 1 and 2^29 - 1 bytes");
+};
+const webCryptoParams = (algorithm, options) => algorithm._tag === "Hkdf" ? {
+  name: "HKDF",
+  hash: algorithm.hash.name,
+  salt: options.salt,
+  info: options.info ?? new Uint8Array()
+} : {
+  name: "PBKDF2",
+  hash: algorithm.hash.name,
+  salt: options.salt,
+  iterations: algorithm.iterations
+};
+/**
+ * Layer that provides `Kdf` on the `WebCrypto` reference.
+ *
+ * **Details**
+ *
+ * HKDF and PBKDF2 run on `crypto.subtle`, off the event loop where the runtime
+ * supports it. Argon2id fails with an `Unsupported` reason.
+ *
+ * @stability unstable
+ * @category layers
+ * @since 4.0.0
+ */
+export const layerWebCrypto = /*#__PURE__*/Layer.effect(Kdf, /*#__PURE__*/WebCrypto.use(crypto => Effect.succeed(Kdf.of({
+  derive: (algorithm, secret, options) => Effect.suspend(() => {
+    const failure = checkArguments(algorithm, options);
+    if (failure !== undefined) return failure;
+    if (algorithm._tag === "Argon2id") {
+      return internal.fail("Kdf", "derive", new CryptoError.Unsupported({
+        description: "Kdf.layerWebCrypto does not provide argon2id"
+      }));
+    }
+    const name = algorithm._tag === "Hkdf" ? "HKDF" : "PBKDF2";
+    return internal.run("Kdf", "derive", algorithm.name, crypto, async subtle => {
+      const handle = await subtle.importKey("raw", secret, name, false, ["deriveBits"]);
+      return new Uint8Array(await subtle.deriveBits(webCryptoParams(algorithm, options), handle, options.length * 8));
+    });
+  })
+}))));
+//# sourceMappingURL=Kdf.js.map

package/dist/crypto/Kdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Kdf.js","names":[],"sources":["../../src/crypto/Kdf.ts"],"sourcesContent":[null],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;AAqBA,OAAO,KAAK,OAAO,MAAM,eAAe;AACxC,OAAO,KAAK,MAAM,MAAM,cAAc;AACtC,OAAO,KAAK,KAAK,MAAM,aAAa;AACpC,OAAO,KAAK,WAAW,MAAM,kBAAkB;AAC/C,OAAO,KAAK,MAAM,MAAM,aAAa;AACrC,OAAO,KAAK,QAAQ,MAAM,yBAAyB;AACnD,SAAS,SAAS,QAAQ,gBAAgB;AA0D1C;;;;;;;AAOA,OAAO,MAAM,IAAI,GAAI,IAAsB,KAAY;EAAE,IAAI,EAAE,MAAM;EAAE,IAAI,EAAE,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;EAAE;AAAI,CAAE,CAAC;AAEtH;;;;;;;;;;;;AAYA,OAAO,MAAM,MAAM,GAAI,OAAyE,KAAc;EAC5G,IAAI,EAAE,QAAQ;EACd,IAAI,EAAE,SAAS,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;EAChD,IAAI,EAAE,OAAO,CAAC,IAAI;EAClB,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF;;;;;;;AAOA,OAAO,MAAM,QAAQ,gBAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;AAE/C;;;;;;;AAOA,OAAO,MAAM,UAAU,gBAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;AAEnD;;;;;;;AAOA,OAAO,MAAM,UAAU,gBAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;AAEnD;;;;;;;AAOA,OAAO,MAAM,UAAU,gBAAS,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;AAEnD;;;;;;;AAOA,OAAO,MAAM,YAAY,gBAAW,MAAM,CAAC;EAAE,IAAI,EAAE,MAAM,CAAC,MAAM;EAAE,UAAU,EAAE;AAAO,CAAE,CAAC;AAExF;;;;;;;;;;;;;;;;;AAiBA,OAAO,MAAM,QAAQ,GAAI,OAIxB,KAAgB;EACf,IAAI,EAAE,UAAU;EAChB,IAAI,EAAE,UAAU;EAChB,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,MAAM;EACjC,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;EAC5B,WAAW,EAAE,OAAO,EAAE,WAAW,IAAI;CACtC,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,OAAM,MAAO,GAAI,sBAAQ,OAAO,CAAC,OAAO,EAgBpC,CAAC,mBAAmB,CAAC;AAIzB,MAAM,eAAe,GAAI,WAAmB,IAC1C,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,WAAW,CAAC,eAAe,CAAC;EAAE;AAAW,CAAE,CAAC,CAAC;AAElF,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,GAAW,EAAE,GAAW,KAAc,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG;AAErH;AACA;AACA;AACA,MAAM,cAAc,GAAG,CACrB,SAAoB,EACpB,OAAsB,KACuC;EAC7D,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,OAAO,eAAe,CAAC,2BAA2B,CAAC;EAChH,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE,OAAO,SAAS;EACnD,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,OAAO,eAAe,CAAC,GAAG,SAAS,CAAC,IAAI,4BAA4B,CAAC;EACxG,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,EAAE;IAC7B,MAAM,SAAS,GAAG,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,YAAY;IACnD,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,SAAS,CAAC,GAC5C,SAAS,GACT,eAAe,CAAC,gCAAgC,SAAS,cAAc,SAAS,CAAC,IAAI,EAAE,CAAC;EAC9F;EACA,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,EAAE,WAAW,CAAC,EAAE;IACtD,OAAO,eAAe,CAAC,2CAA2C,CAAC;EACrE;EACA,OAAO,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,WAAW,CAAC,GAC9C,SAAS,GACT,eAAe,CAAC,6CAA6C,CAAC;AACpE,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,SAAwB,EAAE,OAAsB,KACvE,SAAS,CAAC,IAAI,KAAK,MAAM,GACrB;EACA,IAAI,EAAE,MAAM;EACZ,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;EACzB,IAAI,EAAE,OAAO,CAAC,IAAoB;EAClC,IAAI,EAAG,OAAO,CAAC,IAAI,IAAI,IAAI,UAAU;CACtC,GACC;EACA,IAAI,EAAE,QAAQ;EACd,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI;EACzB,IAAI,EAAE,OAAO,CAAC,IAAoB;EAClC,UAAU,EAAE,SAAS,CAAC;CACvB;AAEL;;;;;;;;;;;;AAYA,OAAO,MAAM,cAAc,gBAAqB,KAAK,CAAC,MAAM,CAC1D,GAAG,eACH,SAAS,CAAC,GAAG,CAAE,MAAM,IACnB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;EACpB,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,KACjC,MAAM,CAAC,OAAO,CAAC,MAAK;IAClB,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS,EAAE,OAAO,OAAO;IACzC,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU,EAAE;MACjC,OAAO,QAAQ,CAAC,IAAI,CAClB,KAAK,EACL,QAAQ,EACR,IAAI,WAAW,CAAC,WAAW,CAAC;QAAE,WAAW,EAAE;MAA8C,CAAE,CAAC,CAC7F;IACH;IACA,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,KAAK,MAAM,GAAG,MAAM,GAAG,QAAQ;IAC1D,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAO,MAAM,IAAI;MAC5E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAsB,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC;MACjG,OAAO,IAAI,UAAU,CACnB,MAAM,MAAM,CAAC,UAAU,CAAC,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CACzF;IACH,CAAC,CAAC;EACJ,CAAC;CACJ,CAAC,CAAC,CACJ,CACF","ignoreList":[]}