pecunia-root 0.1.1 → 0.1.2

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/client-side-encryption/state_machine.mjs

@@ -1,362 +0,0 @@
-import { __commonJSMin, __require } from "../../../../../../../_virtual/rolldown_runtime.mjs";
-import { require_bson } from "../bson.mjs";
-import { require_error } from "../error.mjs";
-import { require_utils } from "../utils.mjs";
-import { require_timeout } from "../timeout.mjs";
-import { require_deps } from "../deps.mjs";
-import { require_errors } from "./errors.mjs";
-import { require_client_encryption } from "./client_encryption.mjs";
-import { require_abstract_cursor } from "../cursor/abstract_cursor.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/client-side-encryption/state_machine.js
-var require_state_machine = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.StateMachine = void 0;
-	const fs = __require("fs/promises");
-	const net = __require("net");
-	const tls = __require("tls");
-	const bson_1 = require_bson();
-	const abstract_cursor_1 = require_abstract_cursor();
-	const deps_1 = require_deps();
-	const error_1 = require_error();
-	const timeout_1 = require_timeout();
-	const utils_1 = require_utils();
-	const client_encryption_1 = require_client_encryption();
-	const errors_1 = require_errors();
-	let socks = null;
-	function loadSocks() {
-		if (socks == null) {
-			const socksImport = (0, deps_1.getSocks)();
-			if ("kModuleError" in socksImport) throw socksImport.kModuleError;
-			socks = socksImport;
-		}
-		return socks;
-	}
-	const MONGOCRYPT_CTX_ERROR = 0;
-	const MONGOCRYPT_CTX_NEED_MONGO_COLLINFO = 1;
-	const MONGOCRYPT_CTX_NEED_MONGO_MARKINGS = 2;
-	const MONGOCRYPT_CTX_NEED_MONGO_KEYS = 3;
-	const MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS = 7;
-	const MONGOCRYPT_CTX_NEED_KMS = 4;
-	const MONGOCRYPT_CTX_READY = 5;
-	const MONGOCRYPT_CTX_DONE = 6;
-	const HTTPS_PORT = 443;
-	const stateToString = new Map([
-		[MONGOCRYPT_CTX_ERROR, "MONGOCRYPT_CTX_ERROR"],
-		[MONGOCRYPT_CTX_NEED_MONGO_COLLINFO, "MONGOCRYPT_CTX_NEED_MONGO_COLLINFO"],
-		[MONGOCRYPT_CTX_NEED_MONGO_MARKINGS, "MONGOCRYPT_CTX_NEED_MONGO_MARKINGS"],
-		[MONGOCRYPT_CTX_NEED_MONGO_KEYS, "MONGOCRYPT_CTX_NEED_MONGO_KEYS"],
-		[MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS, "MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS"],
-		[MONGOCRYPT_CTX_NEED_KMS, "MONGOCRYPT_CTX_NEED_KMS"],
-		[MONGOCRYPT_CTX_READY, "MONGOCRYPT_CTX_READY"],
-		[MONGOCRYPT_CTX_DONE, "MONGOCRYPT_CTX_DONE"]
-	]);
-	const INSECURE_TLS_OPTIONS = [
-		"tlsInsecure",
-		"tlsAllowInvalidCertificates",
-		"tlsAllowInvalidHostnames"
-	];
-	/**
-	* Helper function for logging. Enabled by setting the environment flag MONGODB_CRYPT_DEBUG.
-	* @param msg - Anything you want to be logged.
-	*/
-	function debug(msg) {
-		if (process.env.MONGODB_CRYPT_DEBUG) console.error(msg);
-	}
-	/**
-	* This is kind of a hack.  For `rewrapManyDataKey`, we have tests that
-	* guarantee that when there are no matching keys, `rewrapManyDataKey` returns
-	* nothing.  We also have tests for auto encryption that guarantee for `encrypt`
-	* we return an error when there are no matching keys.  This error is generated in
-	* subsequent iterations of the state machine.
-	* Some apis (`encrypt`) throw if there are no filter matches and others (`rewrapManyDataKey`)
-	* do not.  We set the result manually here, and let the state machine continue.  `libmongocrypt`
-	* will inform us if we need to error by setting the state to `MONGOCRYPT_CTX_ERROR` but
-	* otherwise we'll return `{ v: [] }`.
-	*/
-	let EMPTY_V;
-	/**
-	* @internal
-	* An internal class that executes across a MongoCryptContext until either
-	* a finishing state or an error is reached. Do not instantiate directly.
-	*/
-	var StateMachine = class {
-		constructor(options, bsonOptions = (0, bson_1.pluckBSONSerializeOptions)(options)) {
-			this.options = options;
-			this.bsonOptions = bsonOptions;
-		}
-		/**
-		* Executes the state machine according to the specification
-		*/
-		async execute(executor, context, options) {
-			const keyVaultNamespace = executor._keyVaultNamespace;
-			const keyVaultClient = executor._keyVaultClient;
-			const metaDataClient = executor._metaDataClient;
-			const mongocryptdClient = executor._mongocryptdClient;
-			const mongocryptdManager = executor._mongocryptdManager;
-			let result = null;
-			const getStatus = () => context.status;
-			const getState = () => context.state;
-			while (getState() !== MONGOCRYPT_CTX_DONE && getState() !== MONGOCRYPT_CTX_ERROR) {
-				options.signal?.throwIfAborted();
-				debug(`[context#${context.id}] ${stateToString.get(getState()) || getState()}`);
-				switch (getState()) {
-					case MONGOCRYPT_CTX_NEED_MONGO_COLLINFO: {
-						const filter = (0, bson_1.deserialize)(context.nextMongoOperation());
-						if (!metaDataClient) throw new errors_1.MongoCryptError("unreachable state machine state: entered MONGOCRYPT_CTX_NEED_MONGO_COLLINFO but metadata client is undefined");
-						const collInfoCursor = this.fetchCollectionInfo(metaDataClient, context.ns, filter, options);
-						for await (const collInfo of collInfoCursor) {
-							context.addMongoOperationResponse((0, bson_1.serialize)(collInfo));
-							if (getState() === MONGOCRYPT_CTX_ERROR) break;
-						}
-						if (getState() === MONGOCRYPT_CTX_ERROR) break;
-						context.finishMongoOperation();
-						break;
-					}
-					case MONGOCRYPT_CTX_NEED_MONGO_MARKINGS: {
-						const command = context.nextMongoOperation();
-						if (getState() === MONGOCRYPT_CTX_ERROR) break;
-						if (!mongocryptdClient) throw new errors_1.MongoCryptError("unreachable state machine state: entered MONGOCRYPT_CTX_NEED_MONGO_MARKINGS but mongocryptdClient is undefined");
-						const markedCommand = mongocryptdManager ? await mongocryptdManager.withRespawn(this.markCommand.bind(this, mongocryptdClient, context.ns, command, options)) : await this.markCommand(mongocryptdClient, context.ns, command, options);
-						context.addMongoOperationResponse(markedCommand);
-						context.finishMongoOperation();
-						break;
-					}
-					case MONGOCRYPT_CTX_NEED_MONGO_KEYS: {
-						const filter = context.nextMongoOperation();
-						const keys = await this.fetchKeys(keyVaultClient, keyVaultNamespace, filter, options);
-						if (keys.length === 0) result = EMPTY_V ??= (0, bson_1.serialize)({ v: [] });
-						for (const key of keys) context.addMongoOperationResponse((0, bson_1.serialize)(key));
-						context.finishMongoOperation();
-						break;
-					}
-					case MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS: {
-						const kmsProviders = await executor.askForKMSCredentials();
-						context.provideKMSProviders((0, bson_1.serialize)(kmsProviders));
-						break;
-					}
-					case MONGOCRYPT_CTX_NEED_KMS:
-						await Promise.all(this.requests(context, options));
-						context.finishKMSRequests();
-						break;
-					case MONGOCRYPT_CTX_READY: {
-						const finalizedContext = context.finalize();
-						if (getState() === MONGOCRYPT_CTX_ERROR) {
-							const message = getStatus().message || "Finalization error";
-							throw new errors_1.MongoCryptError(message);
-						}
-						result = finalizedContext;
-						break;
-					}
-					default: throw new errors_1.MongoCryptError(`Unknown state: ${getState()}`);
-				}
-			}
-			if (getState() === MONGOCRYPT_CTX_ERROR || result == null) {
-				const message = getStatus().message;
-				if (!message) debug(`unidentifiable error in MongoCrypt - received an error status from \`libmongocrypt\` but received no error message.`);
-				throw new errors_1.MongoCryptError(message ?? "unidentifiable error in MongoCrypt - received an error status from `libmongocrypt` but received no error message.");
-			}
-			return result;
-		}
-		/**
-		* Handles the request to the KMS service. Exposed for testing purposes. Do not directly invoke.
-		* @param kmsContext - A C++ KMS context returned from the bindings
-		* @returns A promise that resolves when the KMS reply has be fully parsed
-		*/
-		async kmsRequest(request, options) {
-			const parsedUrl = request.endpoint.split(":");
-			const port = parsedUrl[1] != null ? Number.parseInt(parsedUrl[1], 10) : HTTPS_PORT;
-			const socketOptions = {
-				host: parsedUrl[0],
-				servername: parsedUrl[0],
-				port,
-				...(0, client_encryption_1.autoSelectSocketOptions)(this.options.socketOptions || {})
-			};
-			const message = request.message;
-			const buffer = new utils_1.BufferPool();
-			let netSocket;
-			let socket;
-			function destroySockets() {
-				for (const sock of [socket, netSocket]) if (sock) sock.destroy();
-			}
-			function onerror(cause) {
-				return new errors_1.MongoCryptError("KMS request failed", { cause });
-			}
-			function onclose() {
-				return new errors_1.MongoCryptError("KMS request closed");
-			}
-			const tlsOptions = this.options.tlsOptions;
-			if (tlsOptions) {
-				const kmsProvider = request.kmsProvider;
-				const providerTlsOptions = tlsOptions[kmsProvider];
-				if (providerTlsOptions) {
-					const error = this.validateTlsOptions(kmsProvider, providerTlsOptions);
-					if (error) throw error;
-					try {
-						await this.setTlsOptions(providerTlsOptions, socketOptions);
-					} catch (err) {
-						throw onerror(err);
-					}
-				}
-			}
-			let abortListener;
-			try {
-				if (this.options.proxyOptions && this.options.proxyOptions.proxyHost) {
-					netSocket = new net.Socket();
-					const { promise: willConnect, reject: rejectOnNetSocketError, resolve: resolveOnNetSocketConnect } = (0, utils_1.promiseWithResolvers)();
-					netSocket.once("error", (err) => rejectOnNetSocketError(onerror(err))).once("close", () => rejectOnNetSocketError(onclose())).once("connect", () => resolveOnNetSocketConnect());
-					const netSocketOptions = {
-						...socketOptions,
-						host: this.options.proxyOptions.proxyHost,
-						port: this.options.proxyOptions.proxyPort || 1080
-					};
-					netSocket.connect(netSocketOptions);
-					await willConnect;
-					try {
-						socks ??= loadSocks();
-						socketOptions.socket = (await socks.SocksClient.createConnection({
-							existing_socket: netSocket,
-							command: "connect",
-							destination: {
-								host: socketOptions.host,
-								port: socketOptions.port
-							},
-							proxy: {
-								host: "iLoveJavaScript",
-								port: 0,
-								type: 5,
-								userId: this.options.proxyOptions.proxyUsername,
-								password: this.options.proxyOptions.proxyPassword
-							}
-						})).socket;
-					} catch (err) {
-						throw onerror(err);
-					}
-				}
-				socket = tls.connect(socketOptions, () => {
-					socket.write(message);
-				});
-				const { promise: willResolveKmsRequest, reject: rejectOnTlsSocketError, resolve } = (0, utils_1.promiseWithResolvers)();
-				abortListener = (0, utils_1.addAbortListener)(options?.signal, function() {
-					destroySockets();
-					rejectOnTlsSocketError(this.reason);
-				});
-				socket.once("error", (err) => rejectOnTlsSocketError(onerror(err))).once("close", () => rejectOnTlsSocketError(onclose())).on("data", (data) => {
-					buffer.append(data);
-					while (request.bytesNeeded > 0 && buffer.length) {
-						const bytesNeeded = Math.min(request.bytesNeeded, buffer.length);
-						request.addResponse(buffer.read(bytesNeeded));
-					}
-					if (request.bytesNeeded <= 0) resolve();
-				});
-				await (options?.timeoutContext?.csotEnabled() ? Promise.all([willResolveKmsRequest, timeout_1.Timeout.expires(options.timeoutContext?.remainingTimeMS)]) : willResolveKmsRequest);
-			} catch (error) {
-				if (error instanceof timeout_1.TimeoutError) throw new error_1.MongoOperationTimeoutError("KMS request timed out");
-				throw error;
-			} finally {
-				destroySockets();
-				abortListener?.[utils_1.kDispose]();
-			}
-		}
-		*requests(context, options) {
-			for (let request = context.nextKMSRequest(); request != null; request = context.nextKMSRequest()) yield this.kmsRequest(request, options);
-		}
-		/**
-		* Validates the provided TLS options are secure.
-		*
-		* @param kmsProvider - The KMS provider name.
-		* @param tlsOptions - The client TLS options for the provider.
-		*
-		* @returns An error if any option is invalid.
-		*/
-		validateTlsOptions(kmsProvider, tlsOptions) {
-			const tlsOptionNames = Object.keys(tlsOptions);
-			for (const option of INSECURE_TLS_OPTIONS) if (tlsOptionNames.includes(option)) return new errors_1.MongoCryptError(`Insecure TLS options prohibited for ${kmsProvider}: ${option}`);
-		}
-		/**
-		* Sets only the valid secure TLS options.
-		*
-		* @param tlsOptions - The client TLS options for the provider.
-		* @param options - The existing connection options.
-		*/
-		async setTlsOptions(tlsOptions, options) {
-			if (tlsOptions.secureContext) options.secureContext = tlsOptions.secureContext;
-			if (tlsOptions.tlsCertificateKeyFile) options.cert = options.key = await fs.readFile(tlsOptions.tlsCertificateKeyFile);
-			if (tlsOptions.tlsCAFile) options.ca = await fs.readFile(tlsOptions.tlsCAFile);
-			if (tlsOptions.tlsCertificateKeyFilePassword) options.passphrase = tlsOptions.tlsCertificateKeyFilePassword;
-		}
-		/**
-		* Fetches collection info for a provided namespace, when libmongocrypt
-		* enters the `MONGOCRYPT_CTX_NEED_MONGO_COLLINFO` state. The result is
-		* used to inform libmongocrypt of the schema associated with this
-		* namespace. Exposed for testing purposes. Do not directly invoke.
-		*
-		* @param client - A MongoClient connected to the topology
-		* @param ns - The namespace to list collections from
-		* @param filter - A filter for the listCollections command
-		* @param callback - Invoked with the info of the requested collection, or with an error
-		*/
-		fetchCollectionInfo(client, ns, filter, options) {
-			const { db } = utils_1.MongoDBCollectionNamespace.fromString(ns);
-			return client.db(db).listCollections(filter, {
-				promoteLongs: false,
-				promoteValues: false,
-				timeoutContext: options?.timeoutContext && new abstract_cursor_1.CursorTimeoutContext(options?.timeoutContext, Symbol()),
-				signal: options?.signal,
-				nameOnly: false
-			});
-		}
-		/**
-		* Calls to the mongocryptd to provide markings for a command.
-		* Exposed for testing purposes. Do not directly invoke.
-		* @param client - A MongoClient connected to a mongocryptd
-		* @param ns - The namespace (database.collection) the command is being executed on
-		* @param command - The command to execute.
-		* @param callback - Invoked with the serialized and marked bson command, or with an error
-		*/
-		async markCommand(client, ns, command, options) {
-			const { db } = utils_1.MongoDBCollectionNamespace.fromString(ns);
-			const bsonOptions = {
-				promoteLongs: false,
-				promoteValues: false
-			};
-			const rawCommand = (0, bson_1.deserialize)(command, bsonOptions);
-			const commandOptions = {
-				timeoutMS: void 0,
-				signal: void 0
-			};
-			if (options?.timeoutContext?.csotEnabled()) commandOptions.timeoutMS = options.timeoutContext.remainingTimeMS;
-			if (options?.signal) commandOptions.signal = options.signal;
-			const response = await client.db(db).command(rawCommand, {
-				...bsonOptions,
-				...commandOptions
-			});
-			return (0, bson_1.serialize)(response, this.bsonOptions);
-		}
-		/**
-		* Requests keys from the keyVault collection on the topology.
-		* Exposed for testing purposes. Do not directly invoke.
-		* @param client - A MongoClient connected to the topology
-		* @param keyVaultNamespace - The namespace (database.collection) of the keyVault Collection
-		* @param filter - The filter for the find query against the keyVault Collection
-		* @param callback - Invoked with the found keys, or with an error
-		*/
-		fetchKeys(client, keyVaultNamespace, filter, options) {
-			const { db: dbName, collection: collectionName } = utils_1.MongoDBCollectionNamespace.fromString(keyVaultNamespace);
-			const commandOptions = {
-				timeoutContext: void 0,
-				signal: void 0
-			};
-			if (options?.timeoutContext != null) commandOptions.timeoutContext = new abstract_cursor_1.CursorTimeoutContext(options.timeoutContext, Symbol());
-			if (options?.signal != null) commandOptions.signal = options.signal;
-			return client.db(dbName).collection(collectionName, { readConcern: { level: "majority" } }).find((0, bson_1.deserialize)(filter), commandOptions).toArray();
-		}
-	};
-	exports.StateMachine = StateMachine;
-}));
-
-//#endregion
-export default require_state_machine();
-
-export { require_state_machine };
-//# sourceMappingURL=state_machine.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/client-side-encryption/state_machine.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"state_machine.mjs","names":[],"sources":["../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/client-side-encryption/state_machine.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.StateMachine = void 0;\nconst fs = require(\"fs/promises\");\nconst net = require(\"net\");\nconst tls = require(\"tls\");\nconst bson_1 = require(\"../bson\");\nconst abstract_cursor_1 = require(\"../cursor/abstract_cursor\");\nconst deps_1 = require(\"../deps\");\nconst error_1 = require(\"../error\");\nconst timeout_1 = require(\"../timeout\");\nconst utils_1 = require(\"../utils\");\nconst client_encryption_1 = require(\"./client_encryption\");\nconst errors_1 = require(\"./errors\");\nlet socks = null;\nfunction loadSocks() {\n    if (socks == null) {\n        const socksImport = (0, deps_1.getSocks)();\n        if ('kModuleError' in socksImport) {\n            throw socksImport.kModuleError;\n        }\n        socks = socksImport;\n    }\n    return socks;\n}\n// libmongocrypt states\nconst MONGOCRYPT_CTX_ERROR = 0;\nconst MONGOCRYPT_CTX_NEED_MONGO_COLLINFO = 1;\nconst MONGOCRYPT_CTX_NEED_MONGO_MARKINGS = 2;\nconst MONGOCRYPT_CTX_NEED_MONGO_KEYS = 3;\nconst MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS = 7;\nconst MONGOCRYPT_CTX_NEED_KMS = 4;\nconst MONGOCRYPT_CTX_READY = 5;\nconst MONGOCRYPT_CTX_DONE = 6;\nconst HTTPS_PORT = 443;\nconst stateToString = new Map([\n    [MONGOCRYPT_CTX_ERROR, 'MONGOCRYPT_CTX_ERROR'],\n    [MONGOCRYPT_CTX_NEED_MONGO_COLLINFO, 'MONGOCRYPT_CTX_NEED_MONGO_COLLINFO'],\n    [MONGOCRYPT_CTX_NEED_MONGO_MARKINGS, 'MONGOCRYPT_CTX_NEED_MONGO_MARKINGS'],\n    [MONGOCRYPT_CTX_NEED_MONGO_KEYS, 'MONGOCRYPT_CTX_NEED_MONGO_KEYS'],\n    [MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS, 'MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS'],\n    [MONGOCRYPT_CTX_NEED_KMS, 'MONGOCRYPT_CTX_NEED_KMS'],\n    [MONGOCRYPT_CTX_READY, 'MONGOCRYPT_CTX_READY'],\n    [MONGOCRYPT_CTX_DONE, 'MONGOCRYPT_CTX_DONE']\n]);\nconst INSECURE_TLS_OPTIONS = [\n    'tlsInsecure',\n    'tlsAllowInvalidCertificates',\n    'tlsAllowInvalidHostnames'\n];\n/**\n * Helper function for logging. Enabled by setting the environment flag MONGODB_CRYPT_DEBUG.\n * @param msg - Anything you want to be logged.\n */\nfunction debug(msg) {\n    if (process.env.MONGODB_CRYPT_DEBUG) {\n        // eslint-disable-next-line no-console\n        console.error(msg);\n    }\n}\n/**\n * This is kind of a hack.  For `rewrapManyDataKey`, we have tests that\n * guarantee that when there are no matching keys, `rewrapManyDataKey` returns\n * nothing.  We also have tests for auto encryption that guarantee for `encrypt`\n * we return an error when there are no matching keys.  This error is generated in\n * subsequent iterations of the state machine.\n * Some apis (`encrypt`) throw if there are no filter matches and others (`rewrapManyDataKey`)\n * do not.  We set the result manually here, and let the state machine continue.  `libmongocrypt`\n * will inform us if we need to error by setting the state to `MONGOCRYPT_CTX_ERROR` but\n * otherwise we'll return `{ v: [] }`.\n */\nlet EMPTY_V;\n/**\n * @internal\n * An internal class that executes across a MongoCryptContext until either\n * a finishing state or an error is reached. Do not instantiate directly.\n */\n// TODO(DRIVERS-2671): clarify CSOT behavior for FLE APIs\nclass StateMachine {\n    constructor(options, bsonOptions = (0, bson_1.pluckBSONSerializeOptions)(options)) {\n        this.options = options;\n        this.bsonOptions = bsonOptions;\n    }\n    /**\n     * Executes the state machine according to the specification\n     */\n    async execute(executor, context, options) {\n        const keyVaultNamespace = executor._keyVaultNamespace;\n        const keyVaultClient = executor._keyVaultClient;\n        const metaDataClient = executor._metaDataClient;\n        const mongocryptdClient = executor._mongocryptdClient;\n        const mongocryptdManager = executor._mongocryptdManager;\n        let result = null;\n        // Typescript treats getters just like properties: Once you've tested it for equality\n        // it cannot change. Which is exactly the opposite of what we use state and status for.\n        // Every call to at least `addMongoOperationResponse` and `finalize` can change the state.\n        // These wrappers let us write code more naturally and not add compiler exceptions\n        // to conditions checks inside the state machine.\n        const getStatus = () => context.status;\n        const getState = () => context.state;\n        while (getState() !== MONGOCRYPT_CTX_DONE && getState() !== MONGOCRYPT_CTX_ERROR) {\n            options.signal?.throwIfAborted();\n            debug(`[context#${context.id}] ${stateToString.get(getState()) || getState()}`);\n            switch (getState()) {\n                case MONGOCRYPT_CTX_NEED_MONGO_COLLINFO: {\n                    const filter = (0, bson_1.deserialize)(context.nextMongoOperation());\n                    if (!metaDataClient) {\n                        throw new errors_1.MongoCryptError('unreachable state machine state: entered MONGOCRYPT_CTX_NEED_MONGO_COLLINFO but metadata client is undefined');\n                    }\n                    const collInfoCursor = this.fetchCollectionInfo(metaDataClient, context.ns, filter, options);\n                    for await (const collInfo of collInfoCursor) {\n                        context.addMongoOperationResponse((0, bson_1.serialize)(collInfo));\n                        if (getState() === MONGOCRYPT_CTX_ERROR)\n                            break;\n                    }\n                    if (getState() === MONGOCRYPT_CTX_ERROR)\n                        break;\n                    context.finishMongoOperation();\n                    break;\n                }\n                case MONGOCRYPT_CTX_NEED_MONGO_MARKINGS: {\n                    const command = context.nextMongoOperation();\n                    if (getState() === MONGOCRYPT_CTX_ERROR)\n                        break;\n                    if (!mongocryptdClient) {\n                        throw new errors_1.MongoCryptError('unreachable state machine state: entered MONGOCRYPT_CTX_NEED_MONGO_MARKINGS but mongocryptdClient is undefined');\n                    }\n                    // When we are using the shared library, we don't have a mongocryptd manager.\n                    const markedCommand = mongocryptdManager\n                        ? await mongocryptdManager.withRespawn(this.markCommand.bind(this, mongocryptdClient, context.ns, command, options))\n                        : await this.markCommand(mongocryptdClient, context.ns, command, options);\n                    context.addMongoOperationResponse(markedCommand);\n                    context.finishMongoOperation();\n                    break;\n                }\n                case MONGOCRYPT_CTX_NEED_MONGO_KEYS: {\n                    const filter = context.nextMongoOperation();\n                    const keys = await this.fetchKeys(keyVaultClient, keyVaultNamespace, filter, options);\n                    if (keys.length === 0) {\n                        // See docs on EMPTY_V\n                        result = EMPTY_V ??= (0, bson_1.serialize)({ v: [] });\n                    }\n                    for (const key of keys) {\n                        context.addMongoOperationResponse((0, bson_1.serialize)(key));\n                    }\n                    context.finishMongoOperation();\n                    break;\n                }\n                case MONGOCRYPT_CTX_NEED_KMS_CREDENTIALS: {\n                    const kmsProviders = await executor.askForKMSCredentials();\n                    context.provideKMSProviders((0, bson_1.serialize)(kmsProviders));\n                    break;\n                }\n                case MONGOCRYPT_CTX_NEED_KMS: {\n                    await Promise.all(this.requests(context, options));\n                    context.finishKMSRequests();\n                    break;\n                }\n                case MONGOCRYPT_CTX_READY: {\n                    const finalizedContext = context.finalize();\n                    if (getState() === MONGOCRYPT_CTX_ERROR) {\n                        const message = getStatus().message || 'Finalization error';\n                        throw new errors_1.MongoCryptError(message);\n                    }\n                    result = finalizedContext;\n                    break;\n                }\n                default:\n                    throw new errors_1.MongoCryptError(`Unknown state: ${getState()}`);\n            }\n        }\n        if (getState() === MONGOCRYPT_CTX_ERROR || result == null) {\n            const message = getStatus().message;\n            if (!message) {\n                debug(`unidentifiable error in MongoCrypt - received an error status from \\`libmongocrypt\\` but received no error message.`);\n            }\n            throw new errors_1.MongoCryptError(message ??\n                'unidentifiable error in MongoCrypt - received an error status from `libmongocrypt` but received no error message.');\n        }\n        return result;\n    }\n    /**\n     * Handles the request to the KMS service. Exposed for testing purposes. Do not directly invoke.\n     * @param kmsContext - A C++ KMS context returned from the bindings\n     * @returns A promise that resolves when the KMS reply has be fully parsed\n     */\n    async kmsRequest(request, options) {\n        const parsedUrl = request.endpoint.split(':');\n        const port = parsedUrl[1] != null ? Number.parseInt(parsedUrl[1], 10) : HTTPS_PORT;\n        const socketOptions = {\n            host: parsedUrl[0],\n            servername: parsedUrl[0],\n            port,\n            ...(0, client_encryption_1.autoSelectSocketOptions)(this.options.socketOptions || {})\n        };\n        const message = request.message;\n        const buffer = new utils_1.BufferPool();\n        let netSocket;\n        let socket;\n        function destroySockets() {\n            for (const sock of [socket, netSocket]) {\n                if (sock) {\n                    sock.destroy();\n                }\n            }\n        }\n        function onerror(cause) {\n            return new errors_1.MongoCryptError('KMS request failed', { cause });\n        }\n        function onclose() {\n            return new errors_1.MongoCryptError('KMS request closed');\n        }\n        const tlsOptions = this.options.tlsOptions;\n        if (tlsOptions) {\n            const kmsProvider = request.kmsProvider;\n            const providerTlsOptions = tlsOptions[kmsProvider];\n            if (providerTlsOptions) {\n                const error = this.validateTlsOptions(kmsProvider, providerTlsOptions);\n                if (error) {\n                    throw error;\n                }\n                try {\n                    await this.setTlsOptions(providerTlsOptions, socketOptions);\n                }\n                catch (err) {\n                    throw onerror(err);\n                }\n            }\n        }\n        let abortListener;\n        try {\n            if (this.options.proxyOptions && this.options.proxyOptions.proxyHost) {\n                netSocket = new net.Socket();\n                const { promise: willConnect, reject: rejectOnNetSocketError, resolve: resolveOnNetSocketConnect } = (0, utils_1.promiseWithResolvers)();\n                netSocket\n                    .once('error', err => rejectOnNetSocketError(onerror(err)))\n                    .once('close', () => rejectOnNetSocketError(onclose()))\n                    .once('connect', () => resolveOnNetSocketConnect());\n                const netSocketOptions = {\n                    ...socketOptions,\n                    host: this.options.proxyOptions.proxyHost,\n                    port: this.options.proxyOptions.proxyPort || 1080\n                };\n                netSocket.connect(netSocketOptions);\n                await willConnect;\n                try {\n                    socks ??= loadSocks();\n                    socketOptions.socket = (await socks.SocksClient.createConnection({\n                        existing_socket: netSocket,\n                        command: 'connect',\n                        destination: { host: socketOptions.host, port: socketOptions.port },\n                        proxy: {\n                            // host and port are ignored because we pass existing_socket\n                            host: 'iLoveJavaScript',\n                            port: 0,\n                            type: 5,\n                            userId: this.options.proxyOptions.proxyUsername,\n                            password: this.options.proxyOptions.proxyPassword\n                        }\n                    })).socket;\n                }\n                catch (err) {\n                    throw onerror(err);\n                }\n            }\n            socket = tls.connect(socketOptions, () => {\n                socket.write(message);\n            });\n            const { promise: willResolveKmsRequest, reject: rejectOnTlsSocketError, resolve } = (0, utils_1.promiseWithResolvers)();\n            abortListener = (0, utils_1.addAbortListener)(options?.signal, function () {\n                destroySockets();\n                rejectOnTlsSocketError(this.reason);\n            });\n            socket\n                .once('error', err => rejectOnTlsSocketError(onerror(err)))\n                .once('close', () => rejectOnTlsSocketError(onclose()))\n                .on('data', data => {\n                buffer.append(data);\n                while (request.bytesNeeded > 0 && buffer.length) {\n                    const bytesNeeded = Math.min(request.bytesNeeded, buffer.length);\n                    request.addResponse(buffer.read(bytesNeeded));\n                }\n                if (request.bytesNeeded <= 0) {\n                    resolve();\n                }\n            });\n            await (options?.timeoutContext?.csotEnabled()\n                ? Promise.all([\n                    willResolveKmsRequest,\n                    timeout_1.Timeout.expires(options.timeoutContext?.remainingTimeMS)\n                ])\n                : willResolveKmsRequest);\n        }\n        catch (error) {\n            if (error instanceof timeout_1.TimeoutError)\n                throw new error_1.MongoOperationTimeoutError('KMS request timed out');\n            throw error;\n        }\n        finally {\n            // There's no need for any more activity on this socket at this point.\n            destroySockets();\n            abortListener?.[utils_1.kDispose]();\n        }\n    }\n    *requests(context, options) {\n        for (let request = context.nextKMSRequest(); request != null; request = context.nextKMSRequest()) {\n            yield this.kmsRequest(request, options);\n        }\n    }\n    /**\n     * Validates the provided TLS options are secure.\n     *\n     * @param kmsProvider - The KMS provider name.\n     * @param tlsOptions - The client TLS options for the provider.\n     *\n     * @returns An error if any option is invalid.\n     */\n    validateTlsOptions(kmsProvider, tlsOptions) {\n        const tlsOptionNames = Object.keys(tlsOptions);\n        for (const option of INSECURE_TLS_OPTIONS) {\n            if (tlsOptionNames.includes(option)) {\n                return new errors_1.MongoCryptError(`Insecure TLS options prohibited for ${kmsProvider}: ${option}`);\n            }\n        }\n    }\n    /**\n     * Sets only the valid secure TLS options.\n     *\n     * @param tlsOptions - The client TLS options for the provider.\n     * @param options - The existing connection options.\n     */\n    async setTlsOptions(tlsOptions, options) {\n        // If a secureContext is provided, ensure it is set.\n        if (tlsOptions.secureContext) {\n            options.secureContext = tlsOptions.secureContext;\n        }\n        if (tlsOptions.tlsCertificateKeyFile) {\n            const cert = await fs.readFile(tlsOptions.tlsCertificateKeyFile);\n            options.cert = options.key = cert;\n        }\n        if (tlsOptions.tlsCAFile) {\n            options.ca = await fs.readFile(tlsOptions.tlsCAFile);\n        }\n        if (tlsOptions.tlsCertificateKeyFilePassword) {\n            options.passphrase = tlsOptions.tlsCertificateKeyFilePassword;\n        }\n    }\n    /**\n     * Fetches collection info for a provided namespace, when libmongocrypt\n     * enters the `MONGOCRYPT_CTX_NEED_MONGO_COLLINFO` state. The result is\n     * used to inform libmongocrypt of the schema associated with this\n     * namespace. Exposed for testing purposes. Do not directly invoke.\n     *\n     * @param client - A MongoClient connected to the topology\n     * @param ns - The namespace to list collections from\n     * @param filter - A filter for the listCollections command\n     * @param callback - Invoked with the info of the requested collection, or with an error\n     */\n    fetchCollectionInfo(client, ns, filter, options) {\n        const { db } = utils_1.MongoDBCollectionNamespace.fromString(ns);\n        const cursor = client.db(db).listCollections(filter, {\n            promoteLongs: false,\n            promoteValues: false,\n            timeoutContext: options?.timeoutContext && new abstract_cursor_1.CursorTimeoutContext(options?.timeoutContext, Symbol()),\n            signal: options?.signal,\n            nameOnly: false\n        });\n        return cursor;\n    }\n    /**\n     * Calls to the mongocryptd to provide markings for a command.\n     * Exposed for testing purposes. Do not directly invoke.\n     * @param client - A MongoClient connected to a mongocryptd\n     * @param ns - The namespace (database.collection) the command is being executed on\n     * @param command - The command to execute.\n     * @param callback - Invoked with the serialized and marked bson command, or with an error\n     */\n    async markCommand(client, ns, command, options) {\n        const { db } = utils_1.MongoDBCollectionNamespace.fromString(ns);\n        const bsonOptions = { promoteLongs: false, promoteValues: false };\n        const rawCommand = (0, bson_1.deserialize)(command, bsonOptions);\n        const commandOptions = {\n            timeoutMS: undefined,\n            signal: undefined\n        };\n        if (options?.timeoutContext?.csotEnabled()) {\n            commandOptions.timeoutMS = options.timeoutContext.remainingTimeMS;\n        }\n        if (options?.signal) {\n            commandOptions.signal = options.signal;\n        }\n        const response = await client.db(db).command(rawCommand, {\n            ...bsonOptions,\n            ...commandOptions\n        });\n        return (0, bson_1.serialize)(response, this.bsonOptions);\n    }\n    /**\n     * Requests keys from the keyVault collection on the topology.\n     * Exposed for testing purposes. Do not directly invoke.\n     * @param client - A MongoClient connected to the topology\n     * @param keyVaultNamespace - The namespace (database.collection) of the keyVault Collection\n     * @param filter - The filter for the find query against the keyVault Collection\n     * @param callback - Invoked with the found keys, or with an error\n     */\n    fetchKeys(client, keyVaultNamespace, filter, options) {\n        const { db: dbName, collection: collectionName } = utils_1.MongoDBCollectionNamespace.fromString(keyVaultNamespace);\n        const commandOptions = {\n            timeoutContext: undefined,\n            signal: undefined\n        };\n        if (options?.timeoutContext != null) {\n            commandOptions.timeoutContext = new abstract_cursor_1.CursorTimeoutContext(options.timeoutContext, Symbol());\n        }\n        if (options?.signal != null) {\n            commandOptions.signal = options.signal;\n        }\n        return client\n            .db(dbName)\n            .collection(collectionName, { readConcern: { level: 'majority' } })\n            .find((0, bson_1.deserialize)(filter), commandOptions)\n            .toArray();\n    }\n}\nexports.StateMachine = StateMachine;\n//# sourceMappingURL=state_machine.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,eAAe,KAAK;CAC5B,MAAM,eAAa,cAAc;CACjC,MAAM,gBAAc,MAAM;CAC1B,MAAM,gBAAc,MAAM;CAC1B,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM;CACN,IAAI,QAAQ;CACZ,SAAS,YAAY;AACjB,MAAI,SAAS,MAAM;GACf,MAAM,eAAe,GAAG,OAAO,WAAW;AAC1C,OAAI,kBAAkB,YAClB,OAAM,YAAY;AAEtB,WAAQ;;AAEZ,SAAO;;CAGX,MAAM,uBAAuB;CAC7B,MAAM,qCAAqC;CAC3C,MAAM,qCAAqC;CAC3C,MAAM,iCAAiC;CACvC,MAAM,sCAAsC;CAC5C,MAAM,0BAA0B;CAChC,MAAM,uBAAuB;CAC7B,MAAM,sBAAsB;CAC5B,MAAM,aAAa;CACnB,MAAM,gBAAgB,IAAI,IAAI;EAC1B,CAAC,sBAAsB,uBAAuB;EAC9C,CAAC,oCAAoC,qCAAqC;EAC1E,CAAC,oCAAoC,qCAAqC;EAC1E,CAAC,gCAAgC,iCAAiC;EAClE,CAAC,qCAAqC,sCAAsC;EAC5E,CAAC,yBAAyB,0BAA0B;EACpD,CAAC,sBAAsB,uBAAuB;EAC9C,CAAC,qBAAqB,sBAAsB;EAC/C,CAAC;CACF,MAAM,uBAAuB;EACzB;EACA;EACA;EACH;;;;;CAKD,SAAS,MAAM,KAAK;AAChB,MAAI,QAAQ,IAAI,oBAEZ,SAAQ,MAAM,IAAI;;;;;;;;;;;;;CAc1B,IAAI;;;;;;CAOJ,IAAM,eAAN,MAAmB;EACf,YAAY,SAAS,eAAe,GAAG,OAAO,2BAA2B,QAAQ,EAAE;AAC/E,QAAK,UAAU;AACf,QAAK,cAAc;;;;;EAKvB,MAAM,QAAQ,UAAU,SAAS,SAAS;GACtC,MAAM,oBAAoB,SAAS;GACnC,MAAM,iBAAiB,SAAS;GAChC,MAAM,iBAAiB,SAAS;GAChC,MAAM,oBAAoB,SAAS;GACnC,MAAM,qBAAqB,SAAS;GACpC,IAAI,SAAS;GAMb,MAAM,kBAAkB,QAAQ;GAChC,MAAM,iBAAiB,QAAQ;AAC/B,UAAO,UAAU,KAAK,uBAAuB,UAAU,KAAK,sBAAsB;AAC9E,YAAQ,QAAQ,gBAAgB;AAChC,UAAM,YAAY,QAAQ,GAAG,IAAI,cAAc,IAAI,UAAU,CAAC,IAAI,UAAU,GAAG;AAC/E,YAAQ,UAAU,EAAlB;KACI,KAAK,oCAAoC;MACrC,MAAM,UAAU,GAAG,OAAO,aAAa,QAAQ,oBAAoB,CAAC;AACpE,UAAI,CAAC,eACD,OAAM,IAAI,SAAS,gBAAgB,+GAA+G;MAEtJ,MAAM,iBAAiB,KAAK,oBAAoB,gBAAgB,QAAQ,IAAI,QAAQ,QAAQ;AAC5F,iBAAW,MAAM,YAAY,gBAAgB;AACzC,eAAQ,2BAA2B,GAAG,OAAO,WAAW,SAAS,CAAC;AAClE,WAAI,UAAU,KAAK,qBACf;;AAER,UAAI,UAAU,KAAK,qBACf;AACJ,cAAQ,sBAAsB;AAC9B;;KAEJ,KAAK,oCAAoC;MACrC,MAAM,UAAU,QAAQ,oBAAoB;AAC5C,UAAI,UAAU,KAAK,qBACf;AACJ,UAAI,CAAC,kBACD,OAAM,IAAI,SAAS,gBAAgB,iHAAiH;MAGxJ,MAAM,gBAAgB,qBAChB,MAAM,mBAAmB,YAAY,KAAK,YAAY,KAAK,MAAM,mBAAmB,QAAQ,IAAI,SAAS,QAAQ,CAAC,GAClH,MAAM,KAAK,YAAY,mBAAmB,QAAQ,IAAI,SAAS,QAAQ;AAC7E,cAAQ,0BAA0B,cAAc;AAChD,cAAQ,sBAAsB;AAC9B;;KAEJ,KAAK,gCAAgC;MACjC,MAAM,SAAS,QAAQ,oBAAoB;MAC3C,MAAM,OAAO,MAAM,KAAK,UAAU,gBAAgB,mBAAmB,QAAQ,QAAQ;AACrF,UAAI,KAAK,WAAW,EAEhB,UAAS,aAAa,GAAG,OAAO,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC;AAEzD,WAAK,MAAM,OAAO,KACd,SAAQ,2BAA2B,GAAG,OAAO,WAAW,IAAI,CAAC;AAEjE,cAAQ,sBAAsB;AAC9B;;KAEJ,KAAK,qCAAqC;MACtC,MAAM,eAAe,MAAM,SAAS,sBAAsB;AAC1D,cAAQ,qBAAqB,GAAG,OAAO,WAAW,aAAa,CAAC;AAChE;;KAEJ,KAAK;AACD,YAAM,QAAQ,IAAI,KAAK,SAAS,SAAS,QAAQ,CAAC;AAClD,cAAQ,mBAAmB;AAC3B;KAEJ,KAAK,sBAAsB;MACvB,MAAM,mBAAmB,QAAQ,UAAU;AAC3C,UAAI,UAAU,KAAK,sBAAsB;OACrC,MAAM,UAAU,WAAW,CAAC,WAAW;AACvC,aAAM,IAAI,SAAS,gBAAgB,QAAQ;;AAE/C,eAAS;AACT;;KAEJ,QACI,OAAM,IAAI,SAAS,gBAAgB,kBAAkB,UAAU,GAAG;;;AAG9E,OAAI,UAAU,KAAK,wBAAwB,UAAU,MAAM;IACvD,MAAM,UAAU,WAAW,CAAC;AAC5B,QAAI,CAAC,QACD,OAAM,sHAAsH;AAEhI,UAAM,IAAI,SAAS,gBAAgB,WAC/B,oHAAoH;;AAE5H,UAAO;;;;;;;EAOX,MAAM,WAAW,SAAS,SAAS;GAC/B,MAAM,YAAY,QAAQ,SAAS,MAAM,IAAI;GAC7C,MAAM,OAAO,UAAU,MAAM,OAAO,OAAO,SAAS,UAAU,IAAI,GAAG,GAAG;GACxE,MAAM,gBAAgB;IAClB,MAAM,UAAU;IAChB,YAAY,UAAU;IACtB;IACA,IAAI,GAAG,oBAAoB,yBAAyB,KAAK,QAAQ,iBAAiB,EAAE,CAAC;IACxF;GACD,MAAM,UAAU,QAAQ;GACxB,MAAM,SAAS,IAAI,QAAQ,YAAY;GACvC,IAAI;GACJ,IAAI;GACJ,SAAS,iBAAiB;AACtB,SAAK,MAAM,QAAQ,CAAC,QAAQ,UAAU,CAClC,KAAI,KACA,MAAK,SAAS;;GAI1B,SAAS,QAAQ,OAAO;AACpB,WAAO,IAAI,SAAS,gBAAgB,sBAAsB,EAAE,OAAO,CAAC;;GAExE,SAAS,UAAU;AACf,WAAO,IAAI,SAAS,gBAAgB,qBAAqB;;GAE7D,MAAM,aAAa,KAAK,QAAQ;AAChC,OAAI,YAAY;IACZ,MAAM,cAAc,QAAQ;IAC5B,MAAM,qBAAqB,WAAW;AACtC,QAAI,oBAAoB;KACpB,MAAM,QAAQ,KAAK,mBAAmB,aAAa,mBAAmB;AACtE,SAAI,MACA,OAAM;AAEV,SAAI;AACA,YAAM,KAAK,cAAc,oBAAoB,cAAc;cAExD,KAAK;AACR,YAAM,QAAQ,IAAI;;;;GAI9B,IAAI;AACJ,OAAI;AACA,QAAI,KAAK,QAAQ,gBAAgB,KAAK,QAAQ,aAAa,WAAW;AAClE,iBAAY,IAAI,IAAI,QAAQ;KAC5B,MAAM,EAAE,SAAS,aAAa,QAAQ,wBAAwB,SAAS,+BAA+B,GAAG,QAAQ,uBAAuB;AACxI,eACK,KAAK,UAAS,QAAO,uBAAuB,QAAQ,IAAI,CAAC,CAAC,CAC1D,KAAK,eAAe,uBAAuB,SAAS,CAAC,CAAC,CACtD,KAAK,iBAAiB,2BAA2B,CAAC;KACvD,MAAM,mBAAmB;MACrB,GAAG;MACH,MAAM,KAAK,QAAQ,aAAa;MAChC,MAAM,KAAK,QAAQ,aAAa,aAAa;MAChD;AACD,eAAU,QAAQ,iBAAiB;AACnC,WAAM;AACN,SAAI;AACA,gBAAU,WAAW;AACrB,oBAAc,UAAU,MAAM,MAAM,YAAY,iBAAiB;OAC7D,iBAAiB;OACjB,SAAS;OACT,aAAa;QAAE,MAAM,cAAc;QAAM,MAAM,cAAc;QAAM;OACnE,OAAO;QAEH,MAAM;QACN,MAAM;QACN,MAAM;QACN,QAAQ,KAAK,QAAQ,aAAa;QAClC,UAAU,KAAK,QAAQ,aAAa;QACvC;OACJ,CAAC,EAAE;cAED,KAAK;AACR,YAAM,QAAQ,IAAI;;;AAG1B,aAAS,IAAI,QAAQ,qBAAqB;AACtC,YAAO,MAAM,QAAQ;MACvB;IACF,MAAM,EAAE,SAAS,uBAAuB,QAAQ,wBAAwB,aAAa,GAAG,QAAQ,uBAAuB;AACvH,qBAAiB,GAAG,QAAQ,kBAAkB,SAAS,QAAQ,WAAY;AACvE,qBAAgB;AAChB,4BAAuB,KAAK,OAAO;MACrC;AACF,WACK,KAAK,UAAS,QAAO,uBAAuB,QAAQ,IAAI,CAAC,CAAC,CAC1D,KAAK,eAAe,uBAAuB,SAAS,CAAC,CAAC,CACtD,GAAG,SAAQ,SAAQ;AACpB,YAAO,OAAO,KAAK;AACnB,YAAO,QAAQ,cAAc,KAAK,OAAO,QAAQ;MAC7C,MAAM,cAAc,KAAK,IAAI,QAAQ,aAAa,OAAO,OAAO;AAChE,cAAQ,YAAY,OAAO,KAAK,YAAY,CAAC;;AAEjD,SAAI,QAAQ,eAAe,EACvB,UAAS;MAEf;AACF,WAAO,SAAS,gBAAgB,aAAa,GACvC,QAAQ,IAAI,CACV,uBACA,UAAU,QAAQ,QAAQ,QAAQ,gBAAgB,gBAAgB,CACrE,CAAC,GACA;YAEH,OAAO;AACV,QAAI,iBAAiB,UAAU,aAC3B,OAAM,IAAI,QAAQ,2BAA2B,wBAAwB;AACzE,UAAM;aAEF;AAEJ,oBAAgB;AAChB,oBAAgB,QAAQ,WAAW;;;EAG3C,CAAC,SAAS,SAAS,SAAS;AACxB,QAAK,IAAI,UAAU,QAAQ,gBAAgB,EAAE,WAAW,MAAM,UAAU,QAAQ,gBAAgB,CAC5F,OAAM,KAAK,WAAW,SAAS,QAAQ;;;;;;;;;;EAW/C,mBAAmB,aAAa,YAAY;GACxC,MAAM,iBAAiB,OAAO,KAAK,WAAW;AAC9C,QAAK,MAAM,UAAU,qBACjB,KAAI,eAAe,SAAS,OAAO,CAC/B,QAAO,IAAI,SAAS,gBAAgB,uCAAuC,YAAY,IAAI,SAAS;;;;;;;;EAUhH,MAAM,cAAc,YAAY,SAAS;AAErC,OAAI,WAAW,cACX,SAAQ,gBAAgB,WAAW;AAEvC,OAAI,WAAW,sBAEX,SAAQ,OAAO,QAAQ,MADV,MAAM,GAAG,SAAS,WAAW,sBAAsB;AAGpE,OAAI,WAAW,UACX,SAAQ,KAAK,MAAM,GAAG,SAAS,WAAW,UAAU;AAExD,OAAI,WAAW,8BACX,SAAQ,aAAa,WAAW;;;;;;;;;;;;;EAcxC,oBAAoB,QAAQ,IAAI,QAAQ,SAAS;GAC7C,MAAM,EAAE,OAAO,QAAQ,2BAA2B,WAAW,GAAG;AAQhE,UAPe,OAAO,GAAG,GAAG,CAAC,gBAAgB,QAAQ;IACjD,cAAc;IACd,eAAe;IACf,gBAAgB,SAAS,kBAAkB,IAAI,kBAAkB,qBAAqB,SAAS,gBAAgB,QAAQ,CAAC;IACxH,QAAQ,SAAS;IACjB,UAAU;IACb,CAAC;;;;;;;;;;EAWN,MAAM,YAAY,QAAQ,IAAI,SAAS,SAAS;GAC5C,MAAM,EAAE,OAAO,QAAQ,2BAA2B,WAAW,GAAG;GAChE,MAAM,cAAc;IAAE,cAAc;IAAO,eAAe;IAAO;GACjE,MAAM,cAAc,GAAG,OAAO,aAAa,SAAS,YAAY;GAChE,MAAM,iBAAiB;IACnB,WAAW;IACX,QAAQ;IACX;AACD,OAAI,SAAS,gBAAgB,aAAa,CACtC,gBAAe,YAAY,QAAQ,eAAe;AAEtD,OAAI,SAAS,OACT,gBAAe,SAAS,QAAQ;GAEpC,MAAM,WAAW,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,YAAY;IACrD,GAAG;IACH,GAAG;IACN,CAAC;AACF,WAAQ,GAAG,OAAO,WAAW,UAAU,KAAK,YAAY;;;;;;;;;;EAU5D,UAAU,QAAQ,mBAAmB,QAAQ,SAAS;GAClD,MAAM,EAAE,IAAI,QAAQ,YAAY,mBAAmB,QAAQ,2BAA2B,WAAW,kBAAkB;GACnH,MAAM,iBAAiB;IACnB,gBAAgB;IAChB,QAAQ;IACX;AACD,OAAI,SAAS,kBAAkB,KAC3B,gBAAe,iBAAiB,IAAI,kBAAkB,qBAAqB,QAAQ,gBAAgB,QAAQ,CAAC;AAEhH,OAAI,SAAS,UAAU,KACnB,gBAAe,SAAS,QAAQ;AAEpC,UAAO,OACF,GAAG,OAAO,CACV,WAAW,gBAAgB,EAAE,aAAa,EAAE,OAAO,YAAY,EAAE,CAAC,CAClE,MAAM,GAAG,OAAO,aAAa,OAAO,EAAE,eAAe,CACrD,SAAS;;;AAGtB,SAAQ,eAAe"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/auth_provider.mjs

@@ -1,58 +0,0 @@
-import { __commonJSMin } from "../../../../../../../../_virtual/rolldown_runtime.mjs";
-import { require_error } from "../../error.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/auth_provider.js
-var require_auth_provider = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.AuthProvider = exports.AuthContext = void 0;
-	const error_1 = require_error();
-	/**
-	* Context used during authentication
-	* @internal
-	*/
-	var AuthContext = class {
-		constructor(connection, credentials, options) {
-			/** If the context is for reauthentication. */
-			this.reauthenticating = false;
-			this.connection = connection;
-			this.credentials = credentials;
-			this.options = options;
-		}
-	};
-	exports.AuthContext = AuthContext;
-	/**
-	* Provider used during authentication.
-	* @internal
-	*/
-	var AuthProvider = class {
-		/**
-		* Prepare the handshake document before the initial handshake.
-		*
-		* @param handshakeDoc - The document used for the initial handshake on a connection
-		* @param authContext - Context for authentication flow
-		*/
-		async prepare(handshakeDoc, _authContext) {
-			return handshakeDoc;
-		}
-		/**
-		* Reauthenticate.
-		* @param context - The shared auth context.
-		*/
-		async reauth(context) {
-			if (context.reauthenticating) throw new error_1.MongoRuntimeError("Reauthentication already in progress.");
-			try {
-				context.reauthenticating = true;
-				await this.auth(context);
-			} finally {
-				context.reauthenticating = false;
-			}
-		}
-	};
-	exports.AuthProvider = AuthProvider;
-}));
-
-//#endregion
-export default require_auth_provider();
-
-export { require_auth_provider };
-//# sourceMappingURL=auth_provider.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/auth_provider.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth_provider.mjs","names":[],"sources":["../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/auth_provider.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.AuthProvider = exports.AuthContext = void 0;\nconst error_1 = require(\"../../error\");\n/**\n * Context used during authentication\n * @internal\n */\nclass AuthContext {\n    constructor(connection, credentials, options) {\n        /** If the context is for reauthentication. */\n        this.reauthenticating = false;\n        this.connection = connection;\n        this.credentials = credentials;\n        this.options = options;\n    }\n}\nexports.AuthContext = AuthContext;\n/**\n * Provider used during authentication.\n * @internal\n */\nclass AuthProvider {\n    /**\n     * Prepare the handshake document before the initial handshake.\n     *\n     * @param handshakeDoc - The document used for the initial handshake on a connection\n     * @param authContext - Context for authentication flow\n     */\n    async prepare(handshakeDoc, _authContext) {\n        return handshakeDoc;\n    }\n    /**\n     * Reauthenticate.\n     * @param context - The shared auth context.\n     */\n    async reauth(context) {\n        if (context.reauthenticating) {\n            throw new error_1.MongoRuntimeError('Reauthentication already in progress.');\n        }\n        try {\n            context.reauthenticating = true;\n            await this.auth(context);\n        }\n        finally {\n            context.reauthenticating = false;\n        }\n    }\n}\nexports.AuthProvider = AuthProvider;\n//# sourceMappingURL=auth_provider.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,eAAe,QAAQ,cAAc,KAAK;CAClD,MAAM;;;;;CAKN,IAAM,cAAN,MAAkB;EACd,YAAY,YAAY,aAAa,SAAS;;AAE1C,QAAK,mBAAmB;AACxB,QAAK,aAAa;AAClB,QAAK,cAAc;AACnB,QAAK,UAAU;;;AAGvB,SAAQ,cAAc;;;;;CAKtB,IAAM,eAAN,MAAmB;;;;;;;EAOf,MAAM,QAAQ,cAAc,cAAc;AACtC,UAAO;;;;;;EAMX,MAAM,OAAO,SAAS;AAClB,OAAI,QAAQ,iBACR,OAAM,IAAI,QAAQ,kBAAkB,wCAAwC;AAEhF,OAAI;AACA,YAAQ,mBAAmB;AAC3B,UAAM,KAAK,KAAK,QAAQ;aAEpB;AACJ,YAAQ,mBAAmB;;;;AAIvC,SAAQ,eAAe"}

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/aws_temporary_credentials.mjs

@@ -1,123 +0,0 @@
-import { __commonJSMin } from "../../../../../../../../_virtual/rolldown_runtime.mjs";
-import { require_error } from "../../error.mjs";
-import { require_utils } from "../../utils.mjs";
-import { require_deps } from "../../deps.mjs";
-
-//#region ../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/aws_temporary_credentials.js
-var require_aws_temporary_credentials = /* @__PURE__ */ __commonJSMin(((exports) => {
-	Object.defineProperty(exports, "__esModule", { value: true });
-	exports.LegacyAWSTemporaryCredentialProvider = exports.AWSSDKCredentialProvider = exports.AWSTemporaryCredentialProvider = void 0;
-	const deps_1 = require_deps();
-	const error_1 = require_error();
-	const utils_1 = require_utils();
-	const AWS_RELATIVE_URI = "http://169.254.170.2";
-	const AWS_EC2_URI = "http://169.254.169.254";
-	const AWS_EC2_PATH = "/latest/meta-data/iam/security-credentials";
-	/**
-	* @internal
-	*
-	* Fetches temporary AWS credentials.
-	*/
-	var AWSTemporaryCredentialProvider = class AWSTemporaryCredentialProvider {
-		static get awsSDK() {
-			AWSTemporaryCredentialProvider._awsSDK ??= (0, deps_1.getAwsCredentialProvider)();
-			return AWSTemporaryCredentialProvider._awsSDK;
-		}
-		static get isAWSSDKInstalled() {
-			return !("kModuleError" in AWSTemporaryCredentialProvider.awsSDK);
-		}
-	};
-	exports.AWSTemporaryCredentialProvider = AWSTemporaryCredentialProvider;
-	/** @internal */
-	var AWSSDKCredentialProvider = class extends AWSTemporaryCredentialProvider {
-		/**
-		* Create the SDK credentials provider.
-		* @param credentialsProvider - The credentials provider.
-		*/
-		constructor(credentialsProvider) {
-			super();
-			if (credentialsProvider) this._provider = credentialsProvider;
-		}
-		/**
-		* The AWS SDK caches credentials automatically and handles refresh when the credentials have expired.
-		* To ensure this occurs, we need to cache the `provider` returned by the AWS sdk and re-use it when fetching credentials.
-		*/
-		get provider() {
-			if ("kModuleError" in AWSTemporaryCredentialProvider.awsSDK) throw AWSTemporaryCredentialProvider.awsSDK.kModuleError;
-			if (this._provider) return this._provider;
-			let { AWS_STS_REGIONAL_ENDPOINTS = "", AWS_REGION = "" } = process.env;
-			AWS_STS_REGIONAL_ENDPOINTS = AWS_STS_REGIONAL_ENDPOINTS.toLowerCase();
-			AWS_REGION = AWS_REGION.toLowerCase();
-			/** The option setting should work only for users who have explicit settings in their environment, the driver should not encode "defaults" */
-			const awsRegionSettingsExist = AWS_REGION.length !== 0 && AWS_STS_REGIONAL_ENDPOINTS.length !== 0;
-			/**
-			* If AWS_STS_REGIONAL_ENDPOINTS is set to regional, users are opting into the new behavior of respecting the region settings
-			*
-			* If AWS_STS_REGIONAL_ENDPOINTS is set to legacy, then "old" regions need to keep using the global setting.
-			* Technically the SDK gets this wrong, it reaches out to 'sts.us-east-1.amazonaws.com' when it should be 'sts.amazonaws.com'.
-			* That is not our bug to fix here. We leave that up to the SDK.
-			*/
-			const useRegionalSts = AWS_STS_REGIONAL_ENDPOINTS === "regional" || AWS_STS_REGIONAL_ENDPOINTS === "legacy" && !new Set([
-				"ap-northeast-1",
-				"ap-south-1",
-				"ap-southeast-1",
-				"ap-southeast-2",
-				"aws-global",
-				"ca-central-1",
-				"eu-central-1",
-				"eu-north-1",
-				"eu-west-1",
-				"eu-west-2",
-				"eu-west-3",
-				"sa-east-1",
-				"us-east-1",
-				"us-east-2",
-				"us-west-1",
-				"us-west-2"
-			]).has(AWS_REGION);
-			this._provider = awsRegionSettingsExist && useRegionalSts ? AWSTemporaryCredentialProvider.awsSDK.fromNodeProviderChain({ clientConfig: { region: AWS_REGION } }) : AWSTemporaryCredentialProvider.awsSDK.fromNodeProviderChain();
-			return this._provider;
-		}
-		async getCredentials() {
-			try {
-				const creds = await this.provider();
-				return {
-					AccessKeyId: creds.accessKeyId,
-					SecretAccessKey: creds.secretAccessKey,
-					Token: creds.sessionToken,
-					Expiration: creds.expiration
-				};
-			} catch (error) {
-				throw new error_1.MongoAWSError(error.message, { cause: error });
-			}
-		}
-	};
-	exports.AWSSDKCredentialProvider = AWSSDKCredentialProvider;
-	/**
-	* @internal
-	* Fetches credentials manually (without the AWS SDK), as outlined in the [Obtaining Credentials](https://github.com/mongodb/specifications/blob/master/source/auth/auth.md#obtaining-credentials)
-	* section of the Auth spec.
-	*/
-	var LegacyAWSTemporaryCredentialProvider = class extends AWSTemporaryCredentialProvider {
-		async getCredentials() {
-			if (process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI) return await (0, utils_1.request)(`${AWS_RELATIVE_URI}${process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI}`);
-			const token = await (0, utils_1.request)(`${AWS_EC2_URI}/latest/api/token`, {
-				method: "PUT",
-				json: false,
-				headers: { "X-aws-ec2-metadata-token-ttl-seconds": 30 }
-			});
-			const roleName = await (0, utils_1.request)(`${AWS_EC2_URI}/${AWS_EC2_PATH}`, {
-				json: false,
-				headers: { "X-aws-ec2-metadata-token": token }
-			});
-			return await (0, utils_1.request)(`${AWS_EC2_URI}/${AWS_EC2_PATH}/${roleName}`, { headers: { "X-aws-ec2-metadata-token": token } });
-		}
-	};
-	exports.LegacyAWSTemporaryCredentialProvider = LegacyAWSTemporaryCredentialProvider;
-}));
-
-//#endregion
-export default require_aws_temporary_credentials();
-
-export { require_aws_temporary_credentials };
-//# sourceMappingURL=aws_temporary_credentials.mjs.map

package/dist/node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/aws_temporary_credentials.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"aws_temporary_credentials.mjs","names":[],"sources":["../../../../../../../../../../../node_modules/.pnpm/mongodb@6.21.0/node_modules/mongodb/lib/cmap/auth/aws_temporary_credentials.js"],"sourcesContent":["\"use strict\";\nObject.defineProperty(exports, \"__esModule\", { value: true });\nexports.LegacyAWSTemporaryCredentialProvider = exports.AWSSDKCredentialProvider = exports.AWSTemporaryCredentialProvider = void 0;\nconst deps_1 = require(\"../../deps\");\nconst error_1 = require(\"../../error\");\nconst utils_1 = require(\"../../utils\");\nconst AWS_RELATIVE_URI = 'http://169.254.170.2';\nconst AWS_EC2_URI = 'http://169.254.169.254';\nconst AWS_EC2_PATH = '/latest/meta-data/iam/security-credentials';\n/**\n * @internal\n *\n * Fetches temporary AWS credentials.\n */\nclass AWSTemporaryCredentialProvider {\n    static get awsSDK() {\n        AWSTemporaryCredentialProvider._awsSDK ??= (0, deps_1.getAwsCredentialProvider)();\n        return AWSTemporaryCredentialProvider._awsSDK;\n    }\n    static get isAWSSDKInstalled() {\n        return !('kModuleError' in AWSTemporaryCredentialProvider.awsSDK);\n    }\n}\nexports.AWSTemporaryCredentialProvider = AWSTemporaryCredentialProvider;\n/** @internal */\nclass AWSSDKCredentialProvider extends AWSTemporaryCredentialProvider {\n    /**\n     * Create the SDK credentials provider.\n     * @param credentialsProvider - The credentials provider.\n     */\n    constructor(credentialsProvider) {\n        super();\n        if (credentialsProvider) {\n            this._provider = credentialsProvider;\n        }\n    }\n    /**\n     * The AWS SDK caches credentials automatically and handles refresh when the credentials have expired.\n     * To ensure this occurs, we need to cache the `provider` returned by the AWS sdk and re-use it when fetching credentials.\n     */\n    get provider() {\n        if ('kModuleError' in AWSTemporaryCredentialProvider.awsSDK) {\n            throw AWSTemporaryCredentialProvider.awsSDK.kModuleError;\n        }\n        if (this._provider) {\n            return this._provider;\n        }\n        let { AWS_STS_REGIONAL_ENDPOINTS = '', AWS_REGION = '' } = process.env;\n        AWS_STS_REGIONAL_ENDPOINTS = AWS_STS_REGIONAL_ENDPOINTS.toLowerCase();\n        AWS_REGION = AWS_REGION.toLowerCase();\n        /** The option setting should work only for users who have explicit settings in their environment, the driver should not encode \"defaults\" */\n        const awsRegionSettingsExist = AWS_REGION.length !== 0 && AWS_STS_REGIONAL_ENDPOINTS.length !== 0;\n        /**\n         * The following regions use the global AWS STS endpoint, sts.amazonaws.com, by default\n         * https://docs.aws.amazon.com/sdkref/latest/guide/feature-sts-regionalized-endpoints.html\n         */\n        const LEGACY_REGIONS = new Set([\n            'ap-northeast-1',\n            'ap-south-1',\n            'ap-southeast-1',\n            'ap-southeast-2',\n            'aws-global',\n            'ca-central-1',\n            'eu-central-1',\n            'eu-north-1',\n            'eu-west-1',\n            'eu-west-2',\n            'eu-west-3',\n            'sa-east-1',\n            'us-east-1',\n            'us-east-2',\n            'us-west-1',\n            'us-west-2'\n        ]);\n        /**\n         * If AWS_STS_REGIONAL_ENDPOINTS is set to regional, users are opting into the new behavior of respecting the region settings\n         *\n         * If AWS_STS_REGIONAL_ENDPOINTS is set to legacy, then \"old\" regions need to keep using the global setting.\n         * Technically the SDK gets this wrong, it reaches out to 'sts.us-east-1.amazonaws.com' when it should be 'sts.amazonaws.com'.\n         * That is not our bug to fix here. We leave that up to the SDK.\n         */\n        const useRegionalSts = AWS_STS_REGIONAL_ENDPOINTS === 'regional' ||\n            (AWS_STS_REGIONAL_ENDPOINTS === 'legacy' && !LEGACY_REGIONS.has(AWS_REGION));\n        this._provider =\n            awsRegionSettingsExist && useRegionalSts\n                ? AWSTemporaryCredentialProvider.awsSDK.fromNodeProviderChain({\n                    clientConfig: { region: AWS_REGION }\n                })\n                : AWSTemporaryCredentialProvider.awsSDK.fromNodeProviderChain();\n        return this._provider;\n    }\n    async getCredentials() {\n        /*\n         * Creates a credential provider that will attempt to find credentials from the\n         * following sources (listed in order of precedence):\n         *\n         * - Environment variables exposed via process.env\n         * - SSO credentials from token cache\n         * - Web identity token credentials\n         * - Shared credentials and config ini files\n         * - The EC2/ECS Instance Metadata Service\n         */\n        try {\n            const creds = await this.provider();\n            return {\n                AccessKeyId: creds.accessKeyId,\n                SecretAccessKey: creds.secretAccessKey,\n                Token: creds.sessionToken,\n                Expiration: creds.expiration\n            };\n        }\n        catch (error) {\n            throw new error_1.MongoAWSError(error.message, { cause: error });\n        }\n    }\n}\nexports.AWSSDKCredentialProvider = AWSSDKCredentialProvider;\n/**\n * @internal\n * Fetches credentials manually (without the AWS SDK), as outlined in the [Obtaining Credentials](https://github.com/mongodb/specifications/blob/master/source/auth/auth.md#obtaining-credentials)\n * section of the Auth spec.\n */\nclass LegacyAWSTemporaryCredentialProvider extends AWSTemporaryCredentialProvider {\n    async getCredentials() {\n        // If the environment variable AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\n        // is set then drivers MUST assume that it was set by an AWS ECS agent\n        if (process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI) {\n            return await (0, utils_1.request)(`${AWS_RELATIVE_URI}${process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI}`);\n        }\n        // Otherwise assume we are on an EC2 instance\n        // get a token\n        const token = await (0, utils_1.request)(`${AWS_EC2_URI}/latest/api/token`, {\n            method: 'PUT',\n            json: false,\n            headers: { 'X-aws-ec2-metadata-token-ttl-seconds': 30 }\n        });\n        // get role name\n        const roleName = await (0, utils_1.request)(`${AWS_EC2_URI}/${AWS_EC2_PATH}`, {\n            json: false,\n            headers: { 'X-aws-ec2-metadata-token': token }\n        });\n        // get temp credentials\n        const creds = await (0, utils_1.request)(`${AWS_EC2_URI}/${AWS_EC2_PATH}/${roleName}`, {\n            headers: { 'X-aws-ec2-metadata-token': token }\n        });\n        return creds;\n    }\n}\nexports.LegacyAWSTemporaryCredentialProvider = LegacyAWSTemporaryCredentialProvider;\n//# sourceMappingURL=aws_temporary_credentials.js.map"],"x_google_ignoreList":[0],"mappings":";;;;;;;AACA,QAAO,eAAe,SAAS,cAAc,EAAE,OAAO,MAAM,CAAC;AAC7D,SAAQ,uCAAuC,QAAQ,2BAA2B,QAAQ,iCAAiC,KAAK;CAChI,MAAM;CACN,MAAM;CACN,MAAM;CACN,MAAM,mBAAmB;CACzB,MAAM,cAAc;CACpB,MAAM,eAAe;;;;;;CAMrB,IAAM,iCAAN,MAAM,+BAA+B;EACjC,WAAW,SAAS;AAChB,kCAA+B,aAAa,GAAG,OAAO,2BAA2B;AACjF,UAAO,+BAA+B;;EAE1C,WAAW,oBAAoB;AAC3B,UAAO,EAAE,kBAAkB,+BAA+B;;;AAGlE,SAAQ,iCAAiC;;CAEzC,IAAM,2BAAN,cAAuC,+BAA+B;;;;;EAKlE,YAAY,qBAAqB;AAC7B,UAAO;AACP,OAAI,oBACA,MAAK,YAAY;;;;;;EAOzB,IAAI,WAAW;AACX,OAAI,kBAAkB,+BAA+B,OACjD,OAAM,+BAA+B,OAAO;AAEhD,OAAI,KAAK,UACL,QAAO,KAAK;GAEhB,IAAI,EAAE,6BAA6B,IAAI,aAAa,OAAO,QAAQ;AACnE,gCAA6B,2BAA2B,aAAa;AACrE,gBAAa,WAAW,aAAa;;GAErC,MAAM,yBAAyB,WAAW,WAAW,KAAK,2BAA2B,WAAW;;;;;;;;GA8BhG,MAAM,iBAAiB,+BAA+B,cACjD,+BAA+B,YAAY,CA1BzB,IAAI,IAAI;IAC3B;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACH,CAAC,CAS8D,IAAI,WAAW;AAC/E,QAAK,YACD,0BAA0B,iBACpB,+BAA+B,OAAO,sBAAsB,EAC1D,cAAc,EAAE,QAAQ,YAAY,EACvC,CAAC,GACA,+BAA+B,OAAO,uBAAuB;AACvE,UAAO,KAAK;;EAEhB,MAAM,iBAAiB;AAWnB,OAAI;IACA,MAAM,QAAQ,MAAM,KAAK,UAAU;AACnC,WAAO;KACH,aAAa,MAAM;KACnB,iBAAiB,MAAM;KACvB,OAAO,MAAM;KACb,YAAY,MAAM;KACrB;YAEE,OAAO;AACV,UAAM,IAAI,QAAQ,cAAc,MAAM,SAAS,EAAE,OAAO,OAAO,CAAC;;;;AAI5E,SAAQ,2BAA2B;;;;;;CAMnC,IAAM,uCAAN,cAAmD,+BAA+B;EAC9E,MAAM,iBAAiB;AAGnB,OAAI,QAAQ,IAAI,uCACZ,QAAO,OAAO,GAAG,QAAQ,SAAS,GAAG,mBAAmB,QAAQ,IAAI,yCAAyC;GAIjH,MAAM,QAAQ,OAAO,GAAG,QAAQ,SAAS,GAAG,YAAY,oBAAoB;IACxE,QAAQ;IACR,MAAM;IACN,SAAS,EAAE,wCAAwC,IAAI;IAC1D,CAAC;GAEF,MAAM,WAAW,OAAO,GAAG,QAAQ,SAAS,GAAG,YAAY,GAAG,gBAAgB;IAC1E,MAAM;IACN,SAAS,EAAE,4BAA4B,OAAO;IACjD,CAAC;AAKF,UAHc,OAAO,GAAG,QAAQ,SAAS,GAAG,YAAY,GAAG,aAAa,GAAG,YAAY,EACnF,SAAS,EAAE,4BAA4B,OAAO,EACjD,CAAC;;;AAIV,SAAQ,uCAAuC"}