@effect-auth/core 0.1.0-alpha.0 → 0.1.0-alpha.10

package/dist/SecurityTimeline.d.ts

@@ -0,0 +1,72 @@
+import { Brand, Context, Effect, Layer } from "effect";
+import type * as OptionTypes from "effect/Option";
+import { AuditLog } from "./AuditLog.js";
+import type { AuditActor, AuditLogService, AuditRequest, AuthAuditEvent } from "./AuditLog.js";
+import type { UnixMillis, UserId } from "./Identifiers.js";
+export type SecurityTimelineEventId = Brand.Branded<string, "auth/SecurityTimelineEventId">;
+export declare const SecurityTimelineEventId: Brand.Constructor<SecurityTimelineEventId>;
+export type SecurityTimelineEventType = AuthAuditEvent["type"];
+export type SecurityTimelineEventCategory = "api_key" | "auth" | "jwt" | "mfa" | "oauth" | "policy" | "refresh_token" | "session";
+export type SecurityTimelineEventSeverity = "info" | "warning" | "critical";
+export interface SecurityTimelineEvent {
+    readonly id: SecurityTimelineEventId;
+    readonly userId: UserId;
+    readonly type: SecurityTimelineEventType;
+    readonly category: SecurityTimelineEventCategory;
+    readonly severity: SecurityTimelineEventSeverity;
+    readonly occurredAt: UnixMillis;
+    readonly summary: string;
+    readonly actor?: AuditActor;
+    readonly request?: AuditRequest;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface SecurityTimelineListByUserInput {
+    readonly userId: UserId;
+    readonly limit?: number;
+    readonly beforeOccurredAt?: UnixMillis;
+    readonly types?: readonly SecurityTimelineEventType[];
+    readonly categories?: readonly SecurityTimelineEventCategory[];
+}
+export type SecurityTimelineStoreOperation = "insert" | "list";
+declare const SecurityTimelineStoreError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "SecurityTimelineStoreError";
+} & Readonly<A>;
+export declare class SecurityTimelineStoreError extends SecurityTimelineStoreError_base<{
+    readonly operation: SecurityTimelineStoreOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface SecurityTimelineStoreService {
+    readonly insert: (event: SecurityTimelineEvent) => Effect.Effect<void, SecurityTimelineStoreError>;
+    readonly listByUser: (input: SecurityTimelineListByUserInput) => Effect.Effect<readonly SecurityTimelineEvent[], SecurityTimelineStoreError>;
+}
+declare const SecurityTimelineStore_base: Context.ServiceClass<SecurityTimelineStore, "auth/SecurityTimelineStore", SecurityTimelineStoreService>;
+export declare class SecurityTimelineStore extends SecurityTimelineStore_base {
+}
+export declare namespace SecurityTimelineStore {
+    const make: (service: SecurityTimelineStoreService) => SecurityTimelineStoreService;
+}
+export interface SecurityTimelineAuditProjectionOptions {
+    readonly id?: SecurityTimelineEventId;
+}
+export type SecurityTimelineAuditProjectionFailure = "ignore" | "fail";
+export interface SecurityTimelineAuditLogOptions {
+    readonly timelineEventId?: (event: AuthAuditEvent) => SecurityTimelineEventId | undefined;
+    readonly projectionFailure?: SecurityTimelineAuditProjectionFailure;
+}
+export declare const securityTimelineEventFromAuditEvent: (event: AuthAuditEvent, options?: SecurityTimelineAuditProjectionOptions) => OptionTypes.Option<SecurityTimelineEvent>;
+export declare const insert: (event: SecurityTimelineEvent) => Effect.Effect<void, SecurityTimelineStoreError, SecurityTimelineStore>;
+export declare const listByUser: (input: SecurityTimelineListByUserInput) => Effect.Effect<readonly SecurityTimelineEvent[], SecurityTimelineStoreError, SecurityTimelineStore>;
+export declare const recordAuditEvent: (event: AuthAuditEvent, options?: SecurityTimelineAuditProjectionOptions) => Effect.Effect<OptionTypes.Option<SecurityTimelineEvent>, SecurityTimelineStoreError, SecurityTimelineStore>;
+export declare const makeSecurityTimelineAuditLog: (dependencies: {
+    readonly auditLog: AuditLogService;
+    readonly securityTimeline: SecurityTimelineStoreService;
+    readonly options?: SecurityTimelineAuditLogOptions;
+}) => AuditLogService;
+export declare const SecurityTimelineAuditLogLive: (options?: SecurityTimelineAuditLogOptions) => Layer.Layer<AuditLog, never, AuditLog | SecurityTimelineStore>;
+export declare const filterSecurityTimelineEvents: (events: Iterable<SecurityTimelineEvent>, input: SecurityTimelineListByUserInput) => readonly SecurityTimelineEvent[];
+export declare const makeSecurityTimelineStoreMemory: () => SecurityTimelineStoreService;
+export declare const SecurityTimelineStoreMemoryLive: Layer.Layer<SecurityTimelineStore, never, never>;
+export {};
+//# sourceMappingURL=SecurityTimeline.d.ts.map

package/dist/SecurityTimeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityTimeline.d.ts","sourceRoot":"","sources":["../src/SecurityTimeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAU,MAAM,QAAQ,CAAC;AACrE,OAAO,KAAK,KAAK,WAAW,MAAM,eAAe,CAAC;AAGlD,OAAO,EAAE,QAAQ,EAAiB,MAAM,eAAe,CAAC;AACxD,OAAO,KAAK,EACV,UAAU,EACV,eAAe,EACf,YAAY,EAEZ,cAAc,EACf,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAOV,UAAU,EACV,MAAM,EACP,MAAM,kBAAkB,CAAC;AAI1B,MAAM,MAAM,uBAAuB,GAAG,KAAK,CAAC,OAAO,CACjD,MAAM,EACN,8BAA8B,CAC/B,CAAC;AACF,eAAO,MAAM,uBAAuB,4CACM,CAAC;AAE3C,MAAM,MAAM,yBAAyB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;AAE/D,MAAM,MAAM,6BAA6B,GACrC,SAAS,GACT,MAAM,GACN,KAAK,GACL,KAAK,GACL,OAAO,GACP,QAAQ,GACR,eAAe,GACf,SAAS,CAAC;AAEd,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAE5E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,uBAAuB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,UAAU,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACtD,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,6BAA6B,EAAE,CAAC;CAChE;AAED,MAAM,MAAM,8BAA8B,GAAG,QAAQ,GAAG,MAAM,CAAC;;;;AAE/D,qBAAa,0BAA2B,SAAQ,gCAE9C;IACA,QAAQ,CAAC,SAAS,EAAE,8BAA8B,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,qBAAqB,KACzB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,0BAA0B,CAAC,CAAC;IACrD,QAAQ,CAAC,UAAU,EAAE,CACnB,KAAK,EAAE,+BAA+B,KACnC,MAAM,CAAC,MAAM,CAAC,SAAS,qBAAqB,EAAE,EAAE,0BAA0B,CAAC,CAAC;CAClF;;AAED,qBAAa,qBAAsB,SAAQ,0BAGV;CAAG;AAEpC,yBAAiB,qBAAqB,CAAC;IAC9B,MAAM,IAAI,GACf,SAAS,4BAA4B,KACpC,4BAAiE,CAAC;CACtE;AAED,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,EAAE,CAAC,EAAE,uBAAuB,CAAC;CACvC;AAED,MAAM,MAAM,sCAAsC,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEvE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,eAAe,CAAC,EAAE,CACzB,KAAK,EAAE,cAAc,KAClB,uBAAuB,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,sCAAsC,CAAC;CACrE;AA+qBD,eAAO,MAAM,mCAAmC,GAC9C,OAAO,cAAc,EACrB,UAAS,sCAA2C,KACnD,WAAW,CAAC,MAAM,CAAC,qBAAqB,CA0B1C,CAAC;AAEF,eAAO,MAAM,MAAM,GACjB,OAAO,qBAAqB,KAC3B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,0BAA0B,EAAE,qBAAqB,CACb,CAAC;AAE5D,eAAO,MAAM,UAAU,GACrB,OAAO,+BAA+B,KACrC,MAAM,CAAC,MAAM,CACd,SAAS,qBAAqB,EAAE,EAChC,0BAA0B,EAC1B,qBAAqB,CAC2C,CAAC;AAEnE,eAAO,MAAM,gBAAgB,GAC3B,OAAO,cAAc,EACrB,UAAS,sCAA2C,KACnD,MAAM,CAAC,MAAM,CACd,WAAW,CAAC,MAAM,CAAC,qBAAqB,CAAC,EACzC,0BAA0B,EAC1B,qBAAqB,CAOtB,CAAC;AAqCF,eAAO,MAAM,4BAA4B,GAAI,cAAc;IACzD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,+BAA+B,CAAC;CACpD,KAAG,eAuBH,CAAC;AAEF,eAAO,MAAM,4BAA4B,GACvC,UAAS,+BAAoC,mEAa5C,CAAC;AAsCJ,eAAO,MAAM,4BAA4B,GACvC,QAAQ,QAAQ,CAAC,qBAAqB,CAAC,EACvC,OAAO,+BAA+B,KACrC,SAAS,qBAAqB,EAqBhC,CAAC;AAEF,eAAO,MAAM,+BAA+B,QACtC,4BAWH,CAAC;AAEJ,eAAO,MAAM,+BAA+B,kDAE3C,CAAC"}

package/dist/SecurityTimeline.js

@@ -0,0 +1,386 @@
+import { Brand, Context, Data, Effect, Layer, Option } from "effect";
+import { AuditLog, AuditLogError } from "./AuditLog.js";
+export const SecurityTimelineEventId = Brand.nominal();
+export class SecurityTimelineStoreError extends Data.TaggedError("SecurityTimelineStoreError") {
+}
+export class SecurityTimelineStore extends Context.Service()("auth/SecurityTimelineStore") {
+}
+(function (SecurityTimelineStore) {
+    SecurityTimelineStore.make = (service) => SecurityTimelineStore.of(service);
+})(SecurityTimelineStore || (SecurityTimelineStore = {}));
+const clone = (value) => structuredClone(value);
+const omitUndefined = (record) => Object.fromEntries(Object.entries(record).filter(([, value]) => value !== undefined));
+const eventIdFromAudit = (event, options) => options.id ??
+    (event.id === undefined ? undefined : SecurityTimelineEventId(event.id));
+const actorUserId = (actor) => actor.type === "user" ? actor.userId : undefined;
+const subjectUserId = (subject) => subject.type === "user" ? subject.userId : undefined;
+const challengeId = (id) => id;
+const credentialId = (id) => id;
+const sessionId = (id) => id;
+const oauthAccountId = (id) => id;
+const oauthProviderId = (id) => id;
+const passkeyCredentialId = (id) => id;
+const policyId = (id) => id;
+const apiKeyId = (id) => id;
+const refreshTokenId = (id) => id;
+const refreshTokenFamilyId = (id) => id;
+const baseEvent = (event, options, userId, category, severity, summary, metadata, actor, request) => {
+    const id = eventIdFromAudit(event, options);
+    if (id === undefined) {
+        return Option.none();
+    }
+    return Option.some(omitUndefined({
+        id,
+        userId,
+        type: event.type,
+        category,
+        severity,
+        occurredAt: event.occurredAt,
+        summary,
+        actor,
+        request,
+        metadata,
+    }));
+};
+const authTimelineAuditEventTypes = new Set([
+    "auth.login.failed",
+    "auth.login.succeeded",
+    "auth.policy.denied",
+    "auth.session.revoked",
+]);
+const oauthTimelineAuditEventTypes = new Set([
+    "auth.oauth.account.linked",
+    "auth.oauth.account.unlinked",
+    "auth.oauth.link_confirmation.confirmed",
+    "auth.oauth.link_confirmation.started",
+    "auth.oauth.provider_token.refreshed",
+    "auth.oauth.provider_token.revoked",
+]);
+const mfaTimelineAuditEventTypes = new Set([
+    "auth.passkey.credential.revoked",
+    "auth.recovery_code.generated",
+    "auth.recovery_code.revoked",
+    "auth.recovery_code.verified",
+    "auth.totp.enrollment.started",
+    "auth.totp.factor.confirmed",
+    "auth.totp.factor.revoked",
+    "auth.totp.factor.verified",
+]);
+const apiKeyTimelineAuditEventTypes = new Set([
+    "auth.api_key.created",
+    "auth.api_key.revoked",
+    "auth.api_key.verification_failed",
+    "auth.api_key.verified",
+]);
+const refreshTokenTimelineAuditEventTypes = new Set([
+    "auth.refresh_token.issued",
+    "auth.refresh_token.reuse_detected",
+    "auth.refresh_token.revoked",
+    "auth.refresh_token.rotated",
+]);
+const jwtTimelineAuditEventTypes = new Set([
+    "auth.jwt.introspected",
+    "auth.jwt.revoked",
+]);
+const isAuthTimelineAuditEvent = (event) => authTimelineAuditEventTypes.has(event.type);
+const isOAuthTimelineAuditEvent = (event) => oauthTimelineAuditEventTypes.has(event.type);
+const isMfaTimelineAuditEvent = (event) => mfaTimelineAuditEventTypes.has(event.type);
+const isApiKeyTimelineAuditEvent = (event) => apiKeyTimelineAuditEventTypes.has(event.type);
+const isRefreshTokenTimelineAuditEvent = (event) => refreshTokenTimelineAuditEventTypes.has(event.type);
+const isJwtTimelineAuditEvent = (event) => jwtTimelineAuditEventTypes.has(event.type);
+const authTimelineEventFromAuditEvent = (event, options) => {
+    switch (event.type) {
+        case "auth.login.succeeded": {
+            const userId = actorUserId(event.actor);
+            return userId === undefined
+                ? Option.none()
+                : baseEvent(event, options, userId, "auth", "info", "Login succeeded", { method: event.method }, event.actor, event.request);
+        }
+        case "auth.login.failed": {
+            const userId = subjectUserId(event.subject);
+            return userId === undefined
+                ? Option.none()
+                : baseEvent(event, options, userId, "auth", "warning", "Login failed", { method: event.method, reason: event.reason }, undefined, event.request);
+        }
+        case "auth.session.revoked": {
+            const userId = actorUserId(event.actor);
+            return userId === undefined
+                ? Option.none()
+                : baseEvent(event, options, userId, "session", "info", "Session revoked", { sessionId: sessionId(event.sessionId), reason: event.reason }, event.actor, event.request);
+        }
+        case "auth.policy.denied": {
+            const userId = actorUserId(event.actor);
+            return userId === undefined
+                ? Option.none()
+                : baseEvent(event, options, userId, "policy", "warning", "Security policy denied", { policyId: policyId(event.policyId), reason: event.reason }, event.actor, event.request);
+        }
+    }
+};
+const oauthTimelineEventFromAuditEvent = (event, options) => {
+    switch (event.type) {
+        case "auth.oauth.account.linked": {
+            return baseEvent(event, options, event.userId, "oauth", "info", "OAuth account linked", {
+                accountId: oauthAccountId(event.accountId),
+                providerId: oauthProviderId(event.providerId),
+                providerAccountId: event.providerAccountId,
+                reason: event.reason,
+            }, event.actor, event.request);
+        }
+        case "auth.oauth.account.unlinked": {
+            return baseEvent(event, options, event.userId, "oauth", "info", "OAuth account unlinked", {
+                accountId: oauthAccountId(event.accountId),
+                providerId: oauthProviderId(event.providerId),
+                providerAccountId: event.providerAccountId,
+                reason: event.reason,
+            }, event.actor, event.request);
+        }
+        case "auth.oauth.link_confirmation.started": {
+            return baseEvent(event, options, event.userId, "oauth", "info", "OAuth link confirmation started", {
+                challengeId: challengeId(event.challengeId),
+                providerId: oauthProviderId(event.providerId),
+                providerAccountId: event.providerAccountId,
+                reason: event.reason,
+            }, event.actor, event.request);
+        }
+        case "auth.oauth.link_confirmation.confirmed": {
+            return baseEvent(event, options, event.userId, "oauth", "info", "OAuth link confirmation confirmed", {
+                challengeId: challengeId(event.challengeId),
+                providerId: oauthProviderId(event.providerId),
+                providerAccountId: event.providerAccountId,
+                reason: event.reason,
+            }, event.actor, event.request);
+        }
+        case "auth.oauth.provider_token.refreshed": {
+            return baseEvent(event, options, event.userId, "oauth", "info", "OAuth provider token refreshed", {
+                accountId: oauthAccountId(event.accountId),
+                providerId: oauthProviderId(event.providerId),
+                providerAccountId: event.providerAccountId,
+            }, event.actor, event.request);
+        }
+        case "auth.oauth.provider_token.revoked": {
+            return baseEvent(event, options, event.userId, "oauth", "info", "OAuth provider token revoked", {
+                accountId: oauthAccountId(event.accountId),
+                providerId: oauthProviderId(event.providerId),
+                providerAccountId: event.providerAccountId,
+                reason: event.reason,
+            }, event.actor, event.request);
+        }
+    }
+};
+const mfaTimelineEventFromAuditEvent = (event, options) => {
+    switch (event.type) {
+        case "auth.passkey.credential.revoked": {
+            return baseEvent(event, options, event.userId, "mfa", "info", "Passkey revoked", {
+                credentialId: passkeyCredentialId(event.credentialId),
+                reason: event.reason,
+            }, event.actor, event.request);
+        }
+        case "auth.totp.enrollment.started": {
+            return baseEvent(event, options, event.userId, "mfa", "info", "TOTP enrollment started", { factorId: credentialId(event.factorId) }, event.actor, event.request);
+        }
+        case "auth.totp.factor.confirmed": {
+            return baseEvent(event, options, event.userId, "mfa", "info", "TOTP factor confirmed", { factorId: credentialId(event.factorId) }, event.actor, event.request);
+        }
+        case "auth.totp.factor.verified": {
+            return baseEvent(event, options, event.userId, "mfa", "info", "TOTP factor verified", { factorId: credentialId(event.factorId) }, event.actor, event.request);
+        }
+        case "auth.totp.factor.revoked": {
+            return baseEvent(event, options, event.userId, "mfa", "info", "TOTP factor revoked", { factorId: credentialId(event.factorId), reason: event.reason }, event.actor, event.request);
+        }
+        case "auth.recovery_code.generated": {
+            return baseEvent(event, options, event.userId, "mfa", "info", "Recovery codes generated", { count: event.count }, event.actor, event.request);
+        }
+        case "auth.recovery_code.verified": {
+            return baseEvent(event, options, event.userId, "mfa", "warning", "Recovery code used", { codeId: credentialId(event.codeId) }, event.actor, event.request);
+        }
+        case "auth.recovery_code.revoked": {
+            return baseEvent(event, options, event.userId, "mfa", "info", "Recovery code revoked", { codeId: credentialId(event.codeId), reason: event.reason }, event.actor, event.request);
+        }
+    }
+};
+const apiKeyTimelineEventFromAuditEvent = (event, options) => {
+    switch (event.type) {
+        case "auth.api_key.created": {
+            return baseEvent(event, options, event.userId, "api_key", "info", "API key created", { keyId: apiKeyId(event.keyId), scopes: event.scopes }, event.actor, event.request);
+        }
+        case "auth.api_key.verified": {
+            return baseEvent(event, options, event.userId, "api_key", "info", "API key used", { keyId: apiKeyId(event.keyId), scopes: event.scopes }, event.actor, event.request);
+        }
+        case "auth.api_key.revoked": {
+            return baseEvent(event, options, event.userId, "api_key", "info", "API key revoked", { keyId: apiKeyId(event.keyId), reason: event.reason }, event.actor, event.request);
+        }
+        case "auth.api_key.verification_failed": {
+            const userId = actorUserId(event.actor);
+            return userId === undefined
+                ? Option.none()
+                : baseEvent(event, options, userId, "api_key", "warning", "API key verification failed", { reason: event.reason }, event.actor, event.request);
+        }
+    }
+};
+const refreshTokenTimelineEventFromAuditEvent = (event, options) => {
+    switch (event.type) {
+        case "auth.refresh_token.issued": {
+            return baseEvent(event, options, event.userId, "refresh_token", "info", "Refresh token issued", {
+                tokenId: refreshTokenId(event.tokenId),
+                familyId: refreshTokenFamilyId(event.familyId),
+                expiresAt: event.expiresAt,
+            }, event.actor, event.request);
+        }
+        case "auth.refresh_token.rotated": {
+            return baseEvent(event, options, event.userId, "refresh_token", "info", "Refresh token rotated", {
+                previousTokenId: refreshTokenId(event.previousTokenId),
+                tokenId: refreshTokenId(event.tokenId),
+                familyId: refreshTokenFamilyId(event.familyId),
+                expiresAt: event.expiresAt,
+            }, event.actor, event.request);
+        }
+        case "auth.refresh_token.reuse_detected": {
+            return baseEvent(event, options, event.userId, "refresh_token", "critical", "Refresh token reuse detected", {
+                tokenId: refreshTokenId(event.tokenId),
+                familyId: refreshTokenFamilyId(event.familyId),
+            }, event.actor, event.request);
+        }
+        case "auth.refresh_token.revoked": {
+            return baseEvent(event, options, event.userId, "refresh_token", "info", "Refresh token revoked", {
+                tokenId: refreshTokenId(event.tokenId),
+                familyId: refreshTokenFamilyId(event.familyId),
+                reason: event.reason,
+            }, event.actor, event.request);
+        }
+    }
+};
+const jwtTimelineEventFromAuditEvent = (event, options) => {
+    const userId = actorUserId(event.actor);
+    if (userId === undefined) {
+        return Option.none();
+    }
+    switch (event.type) {
+        case "auth.jwt.introspected": {
+            return baseEvent(event, options, userId, "jwt", event.active ? "info" : "warning", event.active ? "JWT introspected" : "JWT introspection failed", {
+                active: event.active,
+                jwtId: event.jwtId,
+                expiresAt: event.expiresAt,
+                reason: event.reason,
+            }, event.actor, event.request);
+        }
+        case "auth.jwt.revoked": {
+            return baseEvent(event, options, userId, "jwt", "info", "JWT revoked", {
+                jwtId: event.jwtId,
+                expiresAt: event.expiresAt,
+                reason: event.reason,
+            }, event.actor, event.request);
+        }
+    }
+};
+export const securityTimelineEventFromAuditEvent = (event, options = {}) => {
+    if (isAuthTimelineAuditEvent(event)) {
+        return authTimelineEventFromAuditEvent(event, options);
+    }
+    if (isOAuthTimelineAuditEvent(event)) {
+        return oauthTimelineEventFromAuditEvent(event, options);
+    }
+    if (isMfaTimelineAuditEvent(event)) {
+        return mfaTimelineEventFromAuditEvent(event, options);
+    }
+    if (isApiKeyTimelineAuditEvent(event)) {
+        return apiKeyTimelineEventFromAuditEvent(event, options);
+    }
+    if (isRefreshTokenTimelineAuditEvent(event)) {
+        return refreshTokenTimelineEventFromAuditEvent(event, options);
+    }
+    if (isJwtTimelineAuditEvent(event)) {
+        return jwtTimelineEventFromAuditEvent(event, options);
+    }
+    return Option.none();
+};
+export const insert = (event) => SecurityTimelineStore.use((store) => store.insert(event));
+export const listByUser = (input) => SecurityTimelineStore.use((store) => store.listByUser(input));
+export const recordAuditEvent = (event, options = {}) => {
+    const timelineEvent = securityTimelineEventFromAuditEvent(event, options);
+    return Option.isNone(timelineEvent)
+        ? Effect.succeed(Option.none())
+        : insert(timelineEvent.value).pipe(Effect.as(timelineEvent));
+};
+const securityTimelineProjectionOptions = (event, options) => {
+    const id = event.id === undefined && options.timelineEventId !== undefined
+        ? options.timelineEventId(event)
+        : undefined;
+    return id === undefined ? {} : { id };
+};
+const projectAuditEventToSecurityTimeline = (dependencies, event, options) => {
+    const timelineEvent = securityTimelineEventFromAuditEvent(event, securityTimelineProjectionOptions(event, options));
+    return Option.isNone(timelineEvent)
+        ? Effect.void
+        : dependencies.securityTimeline.insert(timelineEvent.value);
+};
+const securityTimelineProjectionError = (cause) => new AuditLogError({
+    message: "Failed to project audit event to security timeline",
+    cause,
+});
+export const makeSecurityTimelineAuditLog = (dependencies) => {
+    const options = dependencies.options ?? {};
+    const projectionFailure = options.projectionFailure ?? "ignore";
+    return AuditLog.make({
+        emit: (event) => {
+            const projection = projectAuditEventToSecurityTimeline(dependencies, event, options);
+            const handledProjection = projectionFailure === "fail"
+                ? projection.pipe(Effect.mapError(securityTimelineProjectionError))
+                : projection.pipe(Effect.catchTag("SecurityTimelineStoreError", () => Effect.void));
+            return dependencies.auditLog.emit(event).pipe(Effect.flatMap(() => handledProjection));
+        },
+    });
+};
+export const SecurityTimelineAuditLogLive = (options = {}) => Layer.effect(AuditLog)(Effect.gen(function* () {
+    const auditLog = yield* AuditLog;
+    const securityTimeline = yield* SecurityTimelineStore;
+    return makeSecurityTimelineAuditLog({
+        auditLog,
+        securityTimeline,
+        options,
+    });
+}));
+const compareTimelineEvents = (left, right) => {
+    const occurredAt = Number(right.occurredAt) - Number(left.occurredAt);
+    return occurredAt === 0
+        ? String(right.id).localeCompare(String(left.id))
+        : occurredAt;
+};
+const insertSortedTimelineEvent = (events, event) => {
+    const index = events.findIndex((existing) => compareTimelineEvents(event, existing) < 0);
+    return index === -1
+        ? [...events, event]
+        : [...events.slice(0, index), event, ...events.slice(index)];
+};
+const sortTimelineEvents = (events) => {
+    let sorted = [];
+    for (const event of events) {
+        sorted = insertSortedTimelineEvent(sorted, event);
+    }
+    return sorted;
+};
+export const filterSecurityTimelineEvents = (events, input) => {
+    const types = input.types === undefined ? undefined : new Set(input.types);
+    const categories = input.categories === undefined ? undefined : new Set(input.categories);
+    const beforeOccurredAt = input.beforeOccurredAt === undefined
+        ? undefined
+        : Number(input.beforeOccurredAt);
+    const limit = input.limit === undefined ? undefined : Math.max(0, Math.floor(input.limit));
+    const filtered = [...events]
+        .filter((event) => event.userId === input.userId)
+        .filter((event) => beforeOccurredAt === undefined || Number(event.occurredAt) < beforeOccurredAt)
+        .filter((event) => types === undefined || types.has(event.type))
+        .filter((event) => categories === undefined || categories.has(event.category));
+    const sorted = sortTimelineEvents(filtered).map(clone);
+    return limit === undefined ? sorted : sorted.slice(0, limit);
+};
+export const makeSecurityTimelineStoreMemory = () => {
+    const eventsById = new Map();
+    return SecurityTimelineStore.make({
+        insert: (event) => Effect.sync(() => {
+            eventsById.set(event.id, clone(event));
+        }),
+        listByUser: (input) => Effect.sync(() => filterSecurityTimelineEvents(eventsById.values(), input)),
+    });
+};
+export const SecurityTimelineStoreMemoryLive = Layer.sync(SecurityTimelineStore)(makeSecurityTimelineStoreMemory);
+//# sourceMappingURL=SecurityTimeline.js.map

package/dist/SecurityTimeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SecurityTimeline.js","sourceRoot":"","sources":["../src/SecurityTimeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIrE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAyBxD,MAAM,CAAC,MAAM,uBAAuB,GAClC,KAAK,CAAC,OAAO,EAA2B,CAAC;AAuC3C,MAAM,OAAO,0BAA2B,SAAQ,IAAI,CAAC,WAAW,CAC9D,4BAA4B,CAK5B;CAAG;AAWL,MAAM,OAAO,qBAAsB,SAAQ,OAAO,CAAC,OAAO,EAGvD,CAAC,4BAA4B,CAAC;CAAG;AAEpC,WAAiB,qBAAqB;IACvB,0BAAI,GAAG,CAClB,OAAqC,EACP,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC,EAJgB,qBAAqB,KAArB,qBAAqB,QAIrC;AAeD,MAAM,KAAK,GAAG,CAAI,KAAQ,EAAK,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAEzD,MAAM,aAAa,GAAG,CAA8C,MAAS,EAAK,EAAE,CAClF,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC7D,CAAC;AAET,MAAM,gBAAgB,GAAG,CACvB,KAAqB,EACrB,OAA+C,EACV,EAAE,CACvC,OAAO,CAAC,EAAE;IACV,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAE3E,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAsB,EAAE,CAC5D,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAEnD,MAAM,aAAa,GAAG,CAAC,OAAqB,EAAsB,EAAE,CAClE,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAEvD,MAAM,WAAW,GAAG,CAAC,EAAe,EAAe,EAAE,CAAC,EAAE,CAAC;AACzD,MAAM,YAAY,GAAG,CAAC,EAAgB,EAAgB,EAAE,CAAC,EAAE,CAAC;AAC5D,MAAM,SAAS,GAAG,CAAC,EAAyB,EAAyB,EAAE,CAAC,EAAE,CAAC;AAC3E,MAAM,cAAc,GAAG,CAAC,EAAkB,EAAkB,EAAE,CAAC,EAAE,CAAC;AAClE,MAAM,eAAe,GAAG,CAAC,EAAmB,EAAmB,EAAE,CAAC,EAAE,CAAC;AACrE,MAAM,mBAAmB,GAAG,CAAC,EAAuB,EAAuB,EAAE,CAAC,EAAE,CAAC;AACjF,MAAM,QAAQ,GAAG,CAAC,EAAY,EAAY,EAAE,CAAC,EAAE,CAAC;AAChD,MAAM,QAAQ,GAAG,CAAC,EAAY,EAAY,EAAE,CAAC,EAAE,CAAC;AAChD,MAAM,cAAc,GAAG,CAAC,EAA8B,EAA8B,EAAE,CACpF,EAAE,CAAC;AACL,MAAM,oBAAoB,GAAG,CAC3B,EAAwB,EACF,EAAE,CAAC,EAAE,CAAC;AAE9B,MAAM,SAAS,GAAG,CAChB,KAAqB,EACrB,OAA+C,EAC/C,MAAc,EACd,QAAuC,EACvC,QAAuC,EACvC,OAAe,EACf,QAA4C,EAC5C,KAAkB,EAClB,OAAsB,EACqB,EAAE;IAC7C,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE5C,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAChB,aAAa,CAAC;QACZ,EAAE;QACF,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ;QACR,QAAQ;QACR,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO;QACP,KAAK;QACL,OAAO;QACP,QAAQ;KACT,CAAiC,CACnC,CAAC;AACJ,CAAC,CAAC;AAoDF,MAAM,2BAA2B,GAAwC,IAAI,GAAG,CAAC;IAC/E,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAwC,IAAI,GAAG,CAAC;IAChF,2BAA2B;IAC3B,6BAA6B;IAC7B,wCAAwC;IACxC,sCAAsC;IACtC,qCAAqC;IACrC,mCAAmC;CACpC,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAwC,IAAI,GAAG,CAAC;IAC9E,iCAAiC;IACjC,8BAA8B;IAC9B,4BAA4B;IAC5B,6BAA6B;IAC7B,8BAA8B;IAC9B,4BAA4B;IAC5B,0BAA0B;IAC1B,2BAA2B;CAC5B,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAwC,IAAI,GAAG,CAAC;IACjF,sBAAsB;IACtB,sBAAsB;IACtB,kCAAkC;IAClC,uBAAuB;CACxB,CAAC,CAAC;AAEH,MAAM,mCAAmC,GACvC,IAAI,GAAG,CAAC;IACN,2BAA2B;IAC3B,mCAAmC;IACnC,4BAA4B;IAC5B,4BAA4B;CAC7B,CAAC,CAAC;AAEL,MAAM,0BAA0B,GAAwC,IAAI,GAAG,CAAC;IAC9E,uBAAuB;IACvB,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAC/B,KAAqB,EACY,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAElF,MAAM,yBAAyB,GAAG,CAChC,KAAqB,EACa,EAAE,CAAC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEpF,MAAM,uBAAuB,GAAG,CAC9B,KAAqB,EACW,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEhF,MAAM,0BAA0B,GAAG,CACjC,KAAqB,EACc,EAAE,CACrC,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEhD,MAAM,gCAAgC,GAAG,CACvC,KAAqB,EACoB,EAAE,CAC3C,mCAAmC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEtD,MAAM,uBAAuB,GAAG,CAC9B,KAAqB,EACW,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEhF,MAAM,+BAA+B,GAAG,CACtC,KAA6B,EAC7B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,MAAM,EACN,MAAM,EACN,iBAAiB,EACjB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACxB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5C,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,EACT,cAAc,EACd,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC9C,SAAS,EACT,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;QACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC/D,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;QACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,QAAQ,EACR,SAAS,EACT,wBAAwB,EACxB,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC5D,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gCAAgC,GAAG,CACvC,KAA8B,EAC9B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,sBAAsB,EACtB;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,6BAA6B,CAAC,CAAC,CAAC;YACnC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,wBAAwB,EACxB;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,sCAAsC,CAAC,CAAC,CAAC;YAC5C,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,iCAAiC,EACjC;gBACE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC3C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,wCAAwC,CAAC,CAAC,CAAC;YAC9C,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,mCAAmC,EACnC;gBACE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC3C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,qCAAqC,CAAC,CAAC,CAAC;YAC3C,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,gCAAgC,EAChC;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;aAC3C,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,mCAAmC,CAAC,CAAC,CAAC;YACzC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,8BAA8B,EAC9B;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,CACrC,KAA4B,EAC5B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iCAAiC,CAAC,CAAC,CAAC;YACvC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,iBAAiB,EACjB;gBACE,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC;gBACrD,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,8BAA8B,CAAC,CAAC,CAAC;YACpC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,yBAAyB,EACzB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAC1C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAC1C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,sBAAsB,EACtB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAC1C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,0BAA0B,CAAC,CAAC,CAAC;YAChC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,qBAAqB,EACrB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAChE,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,8BAA8B,CAAC,CAAC,CAAC;YACpC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,0BAA0B,EAC1B,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EACtB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,6BAA6B,CAAC,CAAC,CAAC;YACnC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,SAAS,EACT,oBAAoB,EACpB,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACtC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC5D,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CACxC,KAA+B,EAC/B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACtD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,SAAS,EACT,MAAM,EACN,cAAc,EACd,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACtD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACtD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,kCAAkC,CAAC,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,SAAS,EACT,SAAS,EACT,6BAA6B,EAC7B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACxB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,uCAAuC,GAAG,CAC9C,KAAqC,EACrC,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,MAAM,EACN,sBAAsB,EACtB;gBACE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,MAAM,EACN,uBAAuB,EACvB;gBACE,eAAe,EAAE,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC;gBACtD,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,mCAAmC,CAAC,CAAC,CAAC;YACzC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,UAAU,EACV,8BAA8B,EAC9B;gBACE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;aAC/C,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,MAAM,EACN,uBAAuB,EACvB;gBACE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,CACrC,KAA4B,EAC5B,OAA+C,EACJ,EAAE;IAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAExC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,MAAM,EACN,KAAK,EACL,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EACjC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,0BAA0B,EAC9D;gBACE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,MAAM,EACN,KAAK,EACL,MAAM,EACN,aAAa,EACb;gBACE,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CACjD,KAAqB,EACrB,UAAkD,EAAE,EACT,EAAE;IAC7C,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,gCAAgC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,8BAA8B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,iCAAiC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,gCAAgC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,uCAAuC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,8BAA8B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,KAA4B,EAC4C,EAAE,CAC1E,qBAAqB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,KAAsC,EAKtC,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAqB,EACrB,UAAkD,EAAE,EAKpD,EAAE;IACF,MAAM,aAAa,GAAG,mCAAmC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE1E,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CACxC,KAAqB,EACrB,OAAwC,EACA,EAAE;IAC1C,MAAM,EAAE,GACN,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;QAC7D,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;QAChC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,mCAAmC,GAAG,CAC1C,YAEC,EACD,KAAqB,EACrB,OAAwC,EACxC,EAAE;IACF,MAAM,aAAa,GAAG,mCAAmC,CACvD,KAAK,EACL,iCAAiC,CAAC,KAAK,EAAE,OAAO,CAAC,CAClD,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,+BAA+B,GAAG,CAAC,KAAc,EAAE,EAAE,CACzD,IAAI,aAAa,CAAC;IAChB,OAAO,EAAE,oDAAoD;IAC7D,KAAK;CACN,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,YAI5C,EAAmB,EAAE;IACpB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3C,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC;IAEhE,OAAO,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YACd,MAAM,UAAU,GAAG,mCAAmC,CACpD,YAAY,EACZ,KAAK,EACL,OAAO,CACR,CAAC;YACF,MAAM,iBAAiB,GACrB,iBAAiB,KAAK,MAAM;gBAC1B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;gBACnE,CAAC,CAAC,UAAU,CAAC,IAAI,CACb,MAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CACjE,CAAC;YAER,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,CACxC,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,UAA2C,EAAE,EAC7C,EAAE,CACF,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;IAEtD,OAAO,4BAA4B,CAAC;QAClC,QAAQ;QACR,gBAAgB;QAChB,OAAO;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,qBAAqB,GAAG,CAC5B,IAA2B,EAC3B,KAA4B,EACpB,EAAE;IACV,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEtE,OAAO,UAAU,KAAK,CAAC;QACrB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,UAAU,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAChC,MAAwC,EACxC,KAA4B,EACM,EAAE;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAC5B,CAAC,QAAQ,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CACzD,CAAC;IAEF,OAAO,KAAK,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC;QACpB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,MAAuC,EACL,EAAE;IACpC,IAAI,MAAM,GAAqC,EAAE,CAAC;IAElD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,MAAuC,EACvC,KAAsC,EACJ,EAAE;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,gBAAgB,GACpB,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAClC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrC,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;SAChD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,gBAAgB,CAChF;SACA,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC/D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAC1C,GAAiC,EAAE;IACjC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkD,CAAC;IAE7E,OAAO,qBAAqB,CAAC,IAAI,CAAC;QAChC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC;QACJ,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;KAC9E,CAAC,CAAC;AACL,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAC9E,+BAA+B,CAChC,CAAC"}