@effect-auth/core 0.1.0-alpha.0 → 0.1.0-alpha.10

package/dist/Totp.js

@@ -0,0 +1,477 @@
+import { Brand, Context, Data, Effect, Layer, Option, Redacted } from "effect";
+import { Crypto } from "./Crypto.js";
+import { CredentialId } from "./Identifiers.js";
+import { currentUnixMillis } from "./Internal.js";
+export const TotpSecret = Brand.nominal();
+export const defaultTotpAlgorithm = "SHA1";
+export const defaultTotpDigits = 6;
+export const defaultTotpPeriod = 30;
+export const defaultTotpSecretBytes = 20;
+export const defaultTotpWindow = 1;
+export class TotpError extends Data.TaggedError("TotpError") {
+}
+export class Totp extends Context.Service()("auth/Totp") {
+}
+(function (Totp) {
+    Totp.make = (service) => Totp.of(service);
+})(Totp || (Totp = {}));
+const textEncoder = new TextEncoder();
+const base32Alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
+const totpError = (operation, message, cause) => new TotpError({
+    operation,
+    message,
+    ...(cause === undefined ? {} : { cause }),
+});
+const validateSecretBytes = (bytes, operation) => Number.isInteger(bytes) && bytes >= 10 && bytes <= 128
+    ? Effect.succeed(bytes)
+    : Effect.fail(totpError(operation, "TOTP secret bytes must be an integer between 10 and 128"));
+const validateDigits = (digits, operation) => Number.isInteger(digits) && digits >= 6 && digits <= 10
+    ? Effect.succeed(digits)
+    : Effect.fail(totpError(operation, "TOTP digits must be an integer between 6 and 10"));
+const validatePeriod = (period, operation) => Number.isInteger(period) && period >= 5 && period <= 600
+    ? Effect.succeed(period)
+    : Effect.fail(totpError(operation, "TOTP period must be an integer between 5 and 600 seconds"));
+const validateWindow = (window) => Number.isInteger(window) && window >= 0 && window <= 10
+    ? Effect.succeed(window)
+    : Effect.fail(totpError("verify", "TOTP window must be an integer between 0 and 10"));
+const validateIssuerOrAccount = (value, field) => {
+    const trimmed = value.trim();
+    return trimmed.length > 0
+        ? Effect.succeed(trimmed)
+        : Effect.fail(totpError("otpauth-uri", `TOTP ${field} must not be empty`));
+};
+const hashName = (algorithm) => {
+    switch (algorithm) {
+        case "SHA1": {
+            return "SHA-1";
+        }
+        case "SHA256": {
+            return "SHA-256";
+        }
+        case "SHA512": {
+            return "SHA-512";
+        }
+    }
+};
+const base32Encode = (bytes) => {
+    let bits = 0;
+    let value = 0;
+    let output = "";
+    for (const byte of bytes) {
+        value = (value << 8) | byte;
+        bits += 8;
+        while (bits >= 5) {
+            output += base32Alphabet[(value >>> (bits - 5)) & 31];
+            bits -= 5;
+        }
+    }
+    if (bits > 0) {
+        output += base32Alphabet[(value << (5 - bits)) & 31];
+    }
+    return TotpSecret(output);
+};
+const normalizeSecretValue = (secret, operation) => {
+    const withoutGroups = secret.trim().toUpperCase().replaceAll(/[\s-]/g, "");
+    const normalized = withoutGroups.replace(/=+$/, "");
+    if (normalized.length === 0) {
+        return Effect.fail(totpError(operation, "TOTP secret must not be empty"));
+    }
+    if (normalized.includes("=") || !/^[A-Z2-7]+$/.test(normalized)) {
+        return Effect.fail(totpError(operation, "TOTP secret must be base32"));
+    }
+    return Effect.succeed(TotpSecret(normalized));
+};
+const base32Decode = (secret, operation) => Effect.gen(function* () {
+    const normalized = yield* normalizeSecretValue(secret, operation);
+    let bits = 0;
+    let value = 0;
+    const output = [];
+    for (const character of normalized) {
+        const index = base32Alphabet.indexOf(character);
+        if (index === -1) {
+            return yield* totpError(operation, "TOTP secret must be base32");
+        }
+        value = (value << 5) | index;
+        bits += 5;
+        if (bits >= 8) {
+            output.push((value >>> (bits - 8)) & 255);
+            bits -= 8;
+        }
+    }
+    return Uint8Array.from(output);
+});
+const counterBytes = (counter) => {
+    const bytes = new Uint8Array(8);
+    let value = BigInt(counter);
+    for (let index = 7; index >= 0; index -= 1) {
+        bytes[index] = Number(value & 0xffn);
+        value >>= 8n;
+    }
+    return bytes;
+};
+const getSubtleCrypto = (dependencies, operation) => Effect.try({
+    try: () => {
+        const webCrypto = dependencies.webCrypto ?? globalThis.crypto;
+        if (webCrypto?.subtle === undefined) {
+            throw new Error("Web Crypto subtle API is not available");
+        }
+        return webCrypto.subtle;
+    },
+    catch: (cause) => totpError(operation, "Failed to access Web Crypto subtle API", cause),
+});
+const generateHotpCode = (dependencies, input, operation) => Effect.gen(function* () {
+    const subtle = yield* getSubtleCrypto(dependencies, operation);
+    const secretBytes = yield* base32Decode(input.secret, operation);
+    const signature = yield* Effect.tryPromise({
+        try: async () => {
+            const key = await subtle.importKey("raw", secretBytes, { name: "HMAC", hash: hashName(input.algorithm) }, false, ["sign"]);
+            return new Uint8Array(await subtle.sign("HMAC", key, counterBytes(input.counter)));
+        },
+        catch: (cause) => totpError(operation, "Failed to calculate TOTP HMAC", cause),
+    });
+    const offset = signature.at(-1) & 0x0f;
+    const binary = (signature[offset] & 0x7f) * 2 ** 24 +
+        signature[offset + 1] * 2 ** 16 +
+        signature[offset + 2] * 2 ** 8 +
+        signature[offset + 3];
+    const modulo = 10 ** input.digits;
+    return String(binary % modulo).padStart(input.digits, "0");
+});
+const timeCounter = (now, period) => Math.floor(Number(now) / 1000 / period);
+const normalizeCode = (code) => Redacted.value(code).replaceAll(/\s/g, "");
+export const makeTotp = (dependencies) => Totp.make({
+    generateSecret: Effect.fn("auth.totp.generate_secret")(function* (input) {
+        const bytes = yield* validateSecretBytes(input?.bytes ?? defaultTotpSecretBytes, "generate-secret");
+        const secretBytes = yield* dependencies.crypto.randomBytes(bytes).pipe(Effect.mapError((cause) => totpError("generate-secret", "Failed to generate TOTP secret", cause)));
+        return Redacted.make(base32Encode(secretBytes));
+    }),
+    normalizeSecret: Effect.fn("auth.totp.normalize_secret")(function* (secret) {
+        const normalized = yield* normalizeSecretValue(Redacted.value(secret), "normalize-secret");
+        return Redacted.make(normalized);
+    }),
+    otpauthUri: Effect.fn("auth.totp.otpauth_uri")(function* (input) {
+        const issuer = yield* validateIssuerOrAccount(input.issuer, "issuer");
+        const accountName = yield* validateIssuerOrAccount(input.accountName, "accountName");
+        const digits = yield* validateDigits(input.digits ?? defaultTotpDigits, "otpauth-uri");
+        const period = yield* validatePeriod(input.period ?? defaultTotpPeriod, "otpauth-uri");
+        const algorithm = input.algorithm ?? defaultTotpAlgorithm;
+        const secret = yield* normalizeSecretValue(Redacted.value(input.secret), "otpauth-uri");
+        const params = new URLSearchParams({
+            secret,
+            issuer,
+            algorithm,
+            digits: String(digits),
+            period: String(period),
+        });
+        return Redacted.make(`otpauth://totp/${encodeURIComponent(issuer)}:${encodeURIComponent(accountName)}?${params}`);
+    }),
+    generateCode: Effect.fn("auth.totp.generate_code")(function* (input) {
+        const now = input.now ?? (yield* currentUnixMillis);
+        const digits = yield* validateDigits(input.digits ?? defaultTotpDigits, "generate-code");
+        const period = yield* validatePeriod(input.period ?? defaultTotpPeriod, "generate-code");
+        const secret = yield* normalizeSecretValue(Redacted.value(input.secret), "generate-code");
+        const code = yield* generateHotpCode(dependencies, {
+            secret,
+            counter: timeCounter(now, period),
+            algorithm: input.algorithm ?? defaultTotpAlgorithm,
+            digits,
+        }, "generate-code");
+        return Redacted.make(code);
+    }),
+    verify: Effect.fn("auth.totp.verify")(function* (input) {
+        const now = input.now ?? (yield* currentUnixMillis);
+        const digits = yield* validateDigits(input.digits ?? defaultTotpDigits, "verify");
+        const period = yield* validatePeriod(input.period ?? defaultTotpPeriod, "verify");
+        const window = yield* validateWindow(input.window ?? defaultTotpWindow);
+        const secret = yield* normalizeSecretValue(Redacted.value(input.secret), "verify");
+        const code = normalizeCode(input.code);
+        if (!new RegExp(`^\\d{${digits}}$`).test(code)) {
+            return { valid: false };
+        }
+        const counter = timeCounter(now, period);
+        const codeBytes = textEncoder.encode(code);
+        for (let delta = -window; delta <= window; delta += 1) {
+            const candidateCounter = counter + delta;
+            if (candidateCounter < 0) {
+                continue;
+            }
+            const expected = yield* generateHotpCode(dependencies, {
+                secret,
+                counter: candidateCounter,
+                algorithm: input.algorithm ?? defaultTotpAlgorithm,
+                digits,
+            }, "verify");
+            const valid = yield* dependencies.crypto
+                .timingSafeEqual({
+                left: codeBytes,
+                right: textEncoder.encode(expected),
+            })
+                .pipe(Effect.mapError((cause) => totpError("verify", "Failed to compare TOTP codes", cause)));
+            if (valid) {
+                return {
+                    valid: true,
+                    delta: Object.is(delta, -0) ? 0 : delta,
+                };
+            }
+        }
+        return { valid: false };
+    }),
+});
+export const TotpLive = Layer.effect(Totp)(Effect.gen(function* () {
+    const crypto = yield* Crypto;
+    return makeTotp({ crypto });
+}));
+export class TotpFactorStoreError extends Data.TaggedError("TotpFactorStoreError") {
+}
+export class TotpFactorStore extends Context.Service()("auth/TotpFactorStore") {
+}
+(function (TotpFactorStore) {
+    TotpFactorStore.make = (service) => TotpFactorStore.of(service);
+})(TotpFactorStore || (TotpFactorStore = {}));
+const cloneMetadata = (metadata) => metadata === undefined ? undefined : structuredClone(metadata);
+const cloneTotpFactor = (record) => ({
+    ...record,
+    secret: Redacted.make(Redacted.value(record.secret)),
+    ...(record.metadata === undefined
+        ? {}
+        : { metadata: cloneMetadata(record.metadata) }),
+});
+export const makeTotpFactorStoreMemory = () => {
+    const factors = new Map();
+    return TotpFactorStore.make({
+        insert: (row) => Effect.sync(() => {
+            factors.set(row.id, cloneTotpFactor(row));
+        }),
+        findById: (id) => Effect.sync(() => {
+            const row = factors.get(id);
+            return row === undefined ? Option.none() : Option.some(cloneTotpFactor(row));
+        }),
+        listByUser: (input) => Effect.sync(() => [...factors.values()]
+            .filter((row) => row.userId === input.userId &&
+            (input.includeRevoked === true || row.revokedAt === undefined) &&
+            (input.includeUnconfirmed === true || row.confirmedAt !== undefined))
+            .map(cloneTotpFactor)),
+        confirm: (input) => Effect.sync(() => {
+            const row = factors.get(input.id);
+            if (row === undefined || row.revokedAt !== undefined) {
+                return Option.none();
+            }
+            const updated = {
+                ...row,
+                confirmedAt: input.confirmedAt,
+                metadata: input.metadata ?? row.metadata,
+            };
+            factors.set(input.id, updated);
+            return Option.some(cloneTotpFactor(updated));
+        }),
+        markUsed: (input) => Effect.sync(() => {
+            const row = factors.get(input.id);
+            if (row === undefined ||
+                row.revokedAt !== undefined ||
+                row.confirmedAt === undefined) {
+                return Option.none();
+            }
+            const updated = {
+                ...row,
+                lastUsedAt: input.lastUsedAt,
+                metadata: input.metadata ?? row.metadata,
+            };
+            factors.set(input.id, updated);
+            return Option.some(cloneTotpFactor(updated));
+        }),
+        revoke: (input) => Effect.sync(() => {
+            const row = factors.get(input.id);
+            if (row !== undefined) {
+                factors.set(input.id, {
+                    ...row,
+                    revokedAt: input.revokedAt,
+                    metadata: input.reason === undefined
+                        ? row.metadata
+                        : { ...row.metadata, revokeReason: input.reason },
+                });
+            }
+        }),
+    });
+};
+export const TotpFactorStoreMemoryLive = Layer.sync(TotpFactorStore)(makeTotpFactorStoreMemory);
+export class TotpFactorManagementError extends Data.TaggedError("TotpFactorManagementError") {
+}
+export class TotpFactorManagement extends Context.Service()("auth/TotpFactorManagement") {
+}
+(function (TotpFactorManagement) {
+    TotpFactorManagement.make = (service) => TotpFactorManagement.of(service);
+})(TotpFactorManagement || (TotpFactorManagement = {}));
+const totpFactorInfo = (factor) => ({
+    id: factor.id,
+    algorithm: factor.algorithm,
+    digits: factor.digits,
+    period: factor.period,
+    createdAt: factor.createdAt,
+    ...(factor.confirmedAt === undefined
+        ? {}
+        : { confirmedAt: factor.confirmedAt }),
+    ...(factor.lastUsedAt === undefined
+        ? {}
+        : { lastUsedAt: factor.lastUsedAt }),
+    ...(factor.revokedAt === undefined ? {} : { revokedAt: factor.revokedAt }),
+    ...(factor.metadata === undefined ? {} : { metadata: factor.metadata }),
+});
+const totpFactorManagementError = (operation, message, cause) => new TotpFactorManagementError({
+    operation,
+    message,
+    ...(cause === undefined ? {} : { cause }),
+});
+const makeTotpFactorId = (dependencies, operation) => dependencies.crypto.randomToken(dependencies.factorIdBytes ?? 16).pipe(Effect.map(CredentialId), Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to generate TOTP factor id", cause)));
+const loadOwnedTotpFactor = (dependencies, operation, input) => Effect.gen(function* () {
+    const factor = yield* dependencies.factorStore.findById(input.factorId).pipe(Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to load TOTP factor", cause)));
+    if (Option.isNone(factor) || factor.value.userId !== input.userId) {
+        return yield* totpFactorManagementError(operation, "TOTP factor not found");
+    }
+    return factor.value;
+});
+const totpVerifyInput = (factor, input) => ({
+    secret: factor.secret,
+    code: input.code,
+    now: input.now,
+    algorithm: factor.algorithm,
+    digits: factor.digits,
+    period: factor.period,
+    ...(input.window === undefined ? {} : { window: input.window }),
+});
+export const makeTotpFactorManagement = (dependencies) => TotpFactorManagement.make({
+    startEnrollment: Effect.fn("auth.totp.factor_management.start_enrollment")(function* (input) {
+        const operation = "start-enrollment";
+        const now = input.now ?? (yield* currentUnixMillis);
+        const algorithm = input.algorithm ?? defaultTotpAlgorithm;
+        const digits = input.digits ?? defaultTotpDigits;
+        const period = input.period ?? defaultTotpPeriod;
+        const secret = yield* (input.secretBytes === undefined
+            ? dependencies.totp.generateSecret()
+            : dependencies.totp.generateSecret({ bytes: input.secretBytes })).pipe(Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to generate TOTP secret", cause)));
+        const uri = yield* dependencies.totp
+            .otpauthUri({
+            secret,
+            issuer: input.issuer,
+            accountName: input.accountName,
+            algorithm,
+            digits,
+            period,
+        })
+            .pipe(Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to build TOTP enrollment URI", cause)));
+        const factor = {
+            id: input.factorId ?? (yield* makeTotpFactorId(dependencies, operation)),
+            userId: input.userId,
+            secret,
+            algorithm,
+            digits,
+            period,
+            createdAt: now,
+            ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+        };
+        yield* dependencies.factorStore.insert(factor).pipe(Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to store TOTP factor", cause)));
+        return {
+            factor: totpFactorInfo(factor),
+            secret,
+            uri,
+        };
+    }),
+    confirmEnrollment: Effect.fn("auth.totp.factor_management.confirm_enrollment")(function* (input) {
+        const operation = "confirm-enrollment";
+        const now = input.now ?? (yield* currentUnixMillis);
+        const factor = yield* loadOwnedTotpFactor(dependencies, operation, input);
+        if (factor.revokedAt !== undefined) {
+            return yield* totpFactorManagementError(operation, "TOTP factor not found");
+        }
+        if (factor.confirmedAt !== undefined) {
+            return yield* totpFactorManagementError(operation, "TOTP factor already confirmed");
+        }
+        const verified = yield* dependencies.totp
+            .verify(totpVerifyInput(factor, { code: input.code, now, window: input.window }))
+            .pipe(Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to verify TOTP enrollment code", cause)));
+        if (!verified.valid) {
+            return yield* totpFactorManagementError(operation, "Invalid TOTP code");
+        }
+        const confirmed = yield* dependencies.factorStore
+            .confirm({
+            id: input.factorId,
+            confirmedAt: now,
+            ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+        })
+            .pipe(Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to confirm TOTP factor", cause)));
+        if (Option.isNone(confirmed)) {
+            return yield* totpFactorManagementError(operation, "TOTP factor not found");
+        }
+        return totpFactorInfo(confirmed.value);
+    }),
+    verifyForUser: Effect.fn("auth.totp.factor_management.verify")(function* (input) {
+        const operation = "verify";
+        const now = input.now ?? (yield* currentUnixMillis);
+        const factors = yield* dependencies.factorStore
+            .listByUser({ userId: input.userId })
+            .pipe(Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to list TOTP factors", cause)));
+        for (const factor of factors) {
+            const verified = yield* dependencies.totp
+                .verify(totpVerifyInput(factor, {
+                code: input.code,
+                now,
+                window: input.window,
+            }))
+                .pipe(Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to verify TOTP code", cause)));
+            if (!verified.valid) {
+                continue;
+            }
+            const updated = yield* dependencies.factorStore
+                .markUsed({
+                id: factor.id,
+                lastUsedAt: now,
+                ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+            })
+                .pipe(Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to mark TOTP factor as used", cause)));
+            if (Option.isNone(updated)) {
+                return yield* totpFactorManagementError(operation, "TOTP factor not found");
+            }
+            return {
+                valid: true,
+                factor: totpFactorInfo(updated.value),
+                ...(verified.delta === undefined ? {} : { delta: verified.delta }),
+            };
+        }
+        return { valid: false };
+    }),
+    listForUser: Effect.fn("auth.totp.factor_management.list")(function* (input) {
+        const factors = yield* dependencies.factorStore
+            .listByUser({
+            userId: input.userId,
+            ...(input.includeRevoked === undefined
+                ? {}
+                : { includeRevoked: input.includeRevoked }),
+            ...(input.includeUnconfirmed === undefined
+                ? {}
+                : { includeUnconfirmed: input.includeUnconfirmed }),
+        })
+            .pipe(Effect.mapError((cause) => totpFactorManagementError("list", "Failed to list TOTP factors", cause)));
+        return factors.map(totpFactorInfo);
+    }),
+    revokeForUser: Effect.fn("auth.totp.factor_management.revoke")(function* (input) {
+        const operation = "revoke";
+        const factor = yield* loadOwnedTotpFactor(dependencies, operation, input);
+        if (factor.revokedAt !== undefined) {
+            return;
+        }
+        const revokedAt = input.revokedAt ?? (yield* currentUnixMillis);
+        yield* dependencies.factorStore
+            .revoke({
+            id: input.factorId,
+            revokedAt,
+            ...(input.reason === undefined ? {} : { reason: input.reason }),
+        })
+            .pipe(Effect.mapError((cause) => totpFactorManagementError(operation, "Failed to revoke TOTP factor", cause)));
+    }),
+});
+export const TotpFactorManagementLive = Layer.effect(TotpFactorManagement)(Effect.gen(function* () {
+    const totp = yield* Totp;
+    const crypto = yield* Crypto;
+    const factorStore = yield* TotpFactorStore;
+    return makeTotpFactorManagement({ totp, crypto, factorStore });
+}));
+//# sourceMappingURL=Totp.js.map

package/dist/Totp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Totp.js","sourceRoot":"","sources":["../src/Totp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAG/E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGlD,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAc,CAAC;AAItD,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAA8B,CAAC;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AACnC,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AASnC,MAAM,OAAO,SAAU,SAAQ,IAAI,CAAC,WAAW,CAAC,WAAW,CAIzD;CAAG;AAmDL,MAAM,OAAO,IAAK,SAAQ,OAAO,CAAC,OAAO,EAAqB,CAAC,WAAW,CAAC;CAAG;AAE9E,WAAiB,IAAI;IACN,SAAI,GAAG,CAAC,OAAoB,EAAe,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9E,CAAC,EAFgB,IAAI,KAAJ,IAAI,QAEpB;AAOD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,cAAc,GAAG,kCAAkC,CAAC;AAE1D,MAAM,SAAS,GAAG,CAChB,SAAwB,EACxB,OAAe,EACf,KAAe,EACJ,EAAE,CACb,IAAI,SAAS,CAAC;IACZ,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,CAC1B,KAAa,EACb,SAAwB,EACU,EAAE,CACpC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,GAAG;IACpD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;IACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,SAAS,EACT,yDAAyD,CAC1D,CACF,CAAC;AAER,MAAM,cAAc,GAAG,CACrB,MAAc,EACd,SAAwB,EACU,EAAE,CACpC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE;IACrD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,SAAS,EACT,iDAAiD,CAClD,CACF,CAAC;AAER,MAAM,cAAc,GAAG,CACrB,MAAc,EACd,SAAwB,EACU,EAAE,CACpC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,GAAG;IACtD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,SAAS,CACP,SAAS,EACT,0DAA0D,CAC3D,CACF,CAAC;AAER,MAAM,cAAc,GAAG,CAAC,MAAc,EAAoC,EAAE,CAC1E,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE;IACrD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,SAAS,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CACvE,CAAC;AAER,MAAM,uBAAuB,GAAG,CAC9B,KAAa,EACb,KAA+B,EACG,EAAE;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,QAAQ,KAAK,oBAAoB,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,SAAwB,EAAuB,EAAE;IACjE,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAc,EAAE;IACrD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC;QAEV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACtD,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,MAAc,EACd,SAAwB,EACc,EAAE;IACxC,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,MAAkB,EAClB,SAAwB,EACc,EAAE,CACxC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClE,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEhD,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;QACnE,CAAC;QAED,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QAC7B,IAAI,IAAI,CAAC,CAAC;QAEV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CAAC,OAAe,EAAc,EAAE;IACnD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAE5B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;QACrC,KAAK,KAAK,EAAE,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,YAA8B,EAC9B,SAAwB,EACgB,EAAE,CAC1C,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC;QAE9D,IAAI,SAAS,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QAED,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,SAAS,CAAC,SAAS,EAAE,wCAAwC,EAAE,KAAK,CAAC;CACxE,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,CACvB,YAA8B,EAC9B,KAKC,EACD,SAAwB,EACU,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACzC,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAChC,KAAK,EACL,WAAW,EACX,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EACjD,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;YAEF,OAAO,IAAI,UAAU,CACnB,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAC5D,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,SAAS,CAAC,SAAS,EAAE,+BAA+B,EAAE,KAAK,CAAC;KAC/D,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC;IACxC,MAAM,MAAM,GACV,CAAC,SAAS,CAAC,MAAM,CAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QACrC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,CAAC,IAAI,EAAE;QAChC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC;QAC/B,SAAS,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IACzB,MAAM,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC;IAElC,OAAO,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,GAAe,EAAE,MAAc,EAAU,EAAE,CAC9D,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC;AAE1C,MAAM,aAAa,GAAG,CAAC,IAA+B,EAAU,EAAE,CAChE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAE7C,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,YAA8B,EAAe,EAAE,CACtE,IAAI,CAAC,IAAI,CAAC;IACR,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACtC,KAAK,EAAE,KAAK,IAAI,sBAAsB,EACtC,iBAAiB,CAClB,CAAC;QACF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,SAAS,CAAC,iBAAiB,EAAE,gCAAgC,EAAE,KAAK,CAAC,CACtE,CACF,CAAC;QAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC;IACF,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM;QACxE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAC5C,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EACtB,kBAAkB,CACnB,CAAC;QAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAChD,KAAK,CAAC,WAAW,EACjB,aAAa,CACd,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAClC,KAAK,CAAC,MAAM,IAAI,iBAAiB,EACjC,aAAa,CACd,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAClC,KAAK,CAAC,MAAM,IAAI,iBAAiB,EACjC,aAAa,CACd,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,oBAAoB,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,oBAAoB,CACxC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAC5B,aAAa,CACd,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,MAAM;YACN,MAAM;YACN,SAAS;YACT,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;YACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;SACvB,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,IAAI,CAClB,kBAAkB,kBAAkB,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAChE,WAAW,CACZ,IAAI,MAAM,EAAE,CACd,CAAC;IACJ,CAAC,CAAC;IACF,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACjE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAClC,KAAK,CAAC,MAAM,IAAI,iBAAiB,EACjC,eAAe,CAChB,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAClC,KAAK,CAAC,MAAM,IAAI,iBAAiB,EACjC,eAAe,CAChB,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,oBAAoB,CACxC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAC5B,eAAe,CAChB,CAAC;QACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAClC,YAAY,EACZ;YACE,MAAM;YACN,OAAO,EAAE,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC;YACjC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,oBAAoB;YAClD,MAAM;SACP,EACD,eAAe,CAChB,CAAC;QAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACpD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAClC,KAAK,CAAC,MAAM,IAAI,iBAAiB,EACjC,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAClC,KAAK,CAAC,MAAM,IAAI,iBAAiB,EACjC,QAAQ,CACT,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,MAAM,IAAI,iBAAiB,CAAC,CAAC;QACxE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,oBAAoB,CACxC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,EAC5B,QAAQ,CACT,CAAC;QACF,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEvC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,KAAK,EAA6B,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE3C,KAAK,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;YAEzC,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,gBAAgB,CACtC,YAAY,EACZ;gBACE,MAAM;gBACN,OAAO,EAAE,gBAAgB;gBACzB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,oBAAoB;gBAClD,MAAM;aACP,EACD,QAAQ,CACT,CAAC;YACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM;iBACrC,eAAe,CAAC;gBACf,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC;aACpC,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,SAAS,CAAC,QAAQ,EAAE,8BAA8B,EAAE,KAAK,CAAC,CAC3D,CACF,CAAC;YAEJ,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;iBACb,CAAC;YAC/B,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAA6B,CAAC;IACrD,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CACxC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAE7B,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC,CAAC,CACH,CAAC;AAgDF,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CACxD,sBAAsB,CAKtB;CAAG;AAuBL,MAAM,OAAO,eAAgB,SAAQ,OAAO,CAAC,OAAO,EAGjD,CAAC,sBAAsB,CAAC;CAAG;AAE9B,WAAiB,eAAe;IACjB,oBAAI,GAAG,CAClB,OAA+B,EACP,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC,EAJgB,eAAe,KAAf,eAAe,QAI/B;AAED,MAAM,aAAa,GAAG,CACpB,QAAuB,EACR,EAAE,CACjB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,eAAe,CAAC,QAAQ,CAAO,CAAC;AAExE,MAAM,eAAe,GAAG,CAAC,MAAwB,EAAoB,EAAE,CAAC,CAAC;IACvE,GAAG,MAAM;IACT,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAA2B,EAAE;IACpE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAE1D,OAAO,eAAe,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC;QACJ,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/E,CAAC,CAAC;QACJ,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACf,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;aAClB,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC3B,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC;YAC9D,CAAC,KAAK,CAAC,kBAAkB,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CACvE;aACA,GAAG,CAAC,eAAe,CAAC,CACxB;QACH,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAElC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;YAED,MAAM,OAAO,GAAG;gBACd,GAAG,GAAG;gBACN,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;aACd,CAAC;YAE7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAE/B,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC;QACJ,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAClB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAElC,IACE,GAAG,KAAK,SAAS;gBACjB,GAAG,CAAC,SAAS,KAAK,SAAS;gBAC3B,GAAG,CAAC,WAAW,KAAK,SAAS,EAC7B,CAAC;gBACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;YAED,MAAM,OAAO,GAAG;gBACd,GAAG,GAAG;gBACN,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;aACd,CAAC;YAE7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAE/B,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAElC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE;oBACpB,GAAG,GAAG;oBACN,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,QAAQ,EACN,KAAK,CAAC,MAAM,KAAK,SAAS;wBACxB,CAAC,CAAC,GAAG,CAAC,QAAQ;wBACd,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAClE,yBAAyB,CAC1B,CAAC;AA4EF,MAAM,OAAO,yBAA0B,SAAQ,IAAI,CAAC,WAAW,CAC7D,2BAA2B,CAK3B;CAAG;AAoBL,MAAM,OAAO,oBAAqB,SAAQ,OAAO,CAAC,OAAO,EAGtD,CAAC,2BAA2B,CAAC;CAAG;AAEnC,WAAiB,oBAAoB;IACtB,yBAAI,GAAG,CAClB,OAAoC,EACP,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACrE,CAAC,EAJgB,oBAAoB,KAApB,oBAAoB,QAIpC;AASD,MAAM,cAAc,GAAG,CAAC,MAAwB,EAAkB,EAAE,CAAC,CAAC;IACpE,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS;QAClC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;IACxC,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;QACjC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IACtC,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1E,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;CACxE,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,CAChC,SAAwC,EACxC,OAAe,EACf,KAAe,EACY,EAAE,CAC7B,IAAI,yBAAyB,CAAC;IAC5B,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,gBAAgB,GAAG,CACvB,YAA8C,EAC9C,SAAwC,EACgB,EAAE,CAC1D,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EACxB,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CACvB,SAAS,EACT,mCAAmC,EACnC,KAAK,CACN,CACF,CACF,CAAC;AAEJ,MAAM,mBAAmB,GAAG,CAC1B,YAA8C,EAC9C,SAAwC,EACxC,KAAmE,EACP,EAAE,CAC9D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAC1E,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CAAC,SAAS,EAAE,4BAA4B,EAAE,KAAK,CAAC,CAC1E,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC,CAAC,yBAAyB,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC,CAAC,CAAC;AAEL,MAAM,eAAe,GAAG,CACtB,MAAwB,EACxB,KAIC,EACgB,EAAE,CAAC,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,GAAG,EAAE,KAAK,CAAC,GAAG;IACd,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;CAChE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,YAA8C,EACjB,EAAE,CAC/B,oBAAoB,CAAC,IAAI,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,8CAA8C,CAAC,CACxE,QAAQ,CAAC,EAAE,KAAK;QACd,MAAM,SAAS,GAAG,kBAA2B,CAAC;QAC9C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,oBAAoB,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,iBAAiB,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,iBAAiB,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YACpD,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE;YACpC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CACjE,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CACvB,SAAS,EACT,gCAAgC,EAChC,KAAK,CACN,CACF,CACF,CAAC;QACF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI;aACjC,UAAU,CAAC;YACV,MAAM;YACN,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,SAAS;YACT,MAAM;YACN,MAAM;SACP,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CACvB,SAAS,EACT,qCAAqC,EACrC,KAAK,CACN,CACF,CACF,CAAC;QACJ,MAAM,MAAM,GAAG;YACb,EAAE,EAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,gBAAgB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YACxE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM;YACN,SAAS;YACT,MAAM;YACN,MAAM;YACN,SAAS,EAAE,GAAG;YACd,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SAC3C,CAAC;QAE7B,KAAK,CAAC,CAAC,YAAY,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACjD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CAAC,SAAS,EAAE,6BAA6B,EAAE,KAAK,CAAC,CAC3E,CACF,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC;YAC9B,MAAM;YACN,GAAG;SAC4B,CAAC;IACpC,CAAC,CACF;IACD,iBAAiB,EAAE,MAAM,CAAC,EAAE,CAC1B,gDAAgD,CACjD,CAAC,QAAQ,CAAC,EAAE,KAAK;QAChB,MAAM,SAAS,GAAG,oBAA6B,CAAC;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAE1E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,CAAC,yBAAyB,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,KAAK,CAAC,CAAC,yBAAyB,CACrC,SAAS,EACT,+BAA+B,CAChC,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI;aACtC,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;aAChF,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CACvB,SAAS,EACT,uCAAuC,EACvC,KAAK,CACN,CACF,CACF,CAAC;QAEJ,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,OAAO,KAAK,CAAC,CAAC,yBAAyB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,WAAW;aAC9C,OAAO,CAAC;YACP,EAAE,EAAE,KAAK,CAAC,QAAQ;YAClB,WAAW,EAAE,GAAG;YAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACtE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CACvB,SAAS,EACT,+BAA+B,EAC/B,KAAK,CACN,CACF,CACF,CAAC;QAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,OAAO,KAAK,CAAC,CAAC,yBAAyB,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EACtE,KAAK;QAEL,MAAM,SAAS,GAAG,QAAiB,CAAC;QACpC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,WAAW;aAC5C,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;aACpC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CAAC,SAAS,EAAE,6BAA6B,EAAE,KAAK,CAAC,CAC3E,CACF,CAAC;QAEJ,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI;iBACtC,MAAM,CACL,eAAe,CAAC,MAAM,EAAE;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG;gBACH,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC,CACH;iBACA,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CACvB,SAAS,EACT,4BAA4B,EAC5B,KAAK,CACN,CACF,CACF,CAAC;YAEJ,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACpB,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,WAAW;iBAC5C,QAAQ,CAAC;gBACR,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,UAAU,EAAE,GAAG;gBACf,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;aACtE,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CACvB,SAAS,EACT,oCAAoC,EACpC,KAAK,CACN,CACF,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,yBAAyB,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;YAC9E,CAAC;YAED,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;gBACrC,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;aACjC,CAAC;QACtC,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAoC,CAAC;IAC5D,CAAC,CAAC;IACF,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACzE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,WAAW;aAC5C,UAAU,CAAC;YACV,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;YAC7C,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC;SACtD,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CAAC,MAAM,EAAE,6BAA6B,EAAE,KAAK,CAAC,CACxE,CACF,CAAC;QAEJ,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EACtE,KAAK;QAEL,MAAM,SAAS,GAAG,QAAiB,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAE1E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEhE,KAAK,CAAC,CAAC,YAAY,CAAC,WAAW;aAC5B,MAAM,CAAC;YACN,EAAE,EAAE,KAAK,CAAC,QAAQ;YAClB,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAChE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,yBAAyB,CAAC,SAAS,EAAE,8BAA8B,EAAE,KAAK,CAAC,CAC5E,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC,MAAM,CAAC,oBAAoB,CAAC,CACxE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC;IACzB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;IAE3C,OAAO,wBAAwB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;AACjE,CAAC,CAAC,CACH,CAAC"}

package/dist/TrustedDevice.d.ts

@@ -0,0 +1,127 @@
+import { Context, Duration, Effect, Layer, Redacted } from "effect";
+import type * as OptionTypes from "effect/Option";
+import { AuthSecrets } from "./AuthConfig.js";
+import { Crypto } from "./Crypto.js";
+import type { CryptoKey, CryptoService } from "./Crypto.js";
+import type { UnixMillis, UserId } from "./Identifiers.js";
+import type { LoginDeviceContext } from "./LoginApproval.js";
+import type { SessionCookieSameSite } from "./Sessions.js";
+export interface TrustedDeviceStatusInput {
+    readonly userId: UserId;
+    readonly token?: Redacted.Redacted<string>;
+}
+export interface TrustedDeviceTrustInput {
+    readonly userId: UserId;
+    readonly token?: Redacted.Redacted<string>;
+    readonly ttl?: Duration.Duration;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface TrustedDeviceToken {
+    readonly userId: UserId;
+    readonly token: Redacted.Redacted<string>;
+    readonly expiresAt: UnixMillis;
+}
+export interface TrustedDeviceRecord {
+    readonly userId: UserId;
+    readonly tokenHash: string;
+    readonly createdAt: UnixMillis;
+    readonly lastSeenAt: UnixMillis;
+    readonly expiresAt: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface TrustedDeviceStoreFindInput {
+    readonly userId: UserId;
+    readonly tokenHash: string;
+    readonly now: UnixMillis;
+}
+export interface TrustedDeviceStoreUpsertInput {
+    readonly userId: UserId;
+    readonly tokenHash: string;
+    readonly now: UnixMillis;
+    readonly expiresAt: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface TrustedDeviceStoreListForUserInput {
+    readonly userId: UserId;
+    readonly now: UnixMillis;
+    readonly limit?: number;
+}
+export interface TrustedDeviceStoreRevokeForUserInput {
+    readonly userId: UserId;
+    readonly tokenHash: string;
+}
+export type TrustedDeviceErrorOperation = "status" | "trust" | "cookie" | "list" | "revoke";
+declare const TrustedDeviceError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "TrustedDeviceError";
+} & Readonly<A>;
+export declare class TrustedDeviceError extends TrustedDeviceError_base<{
+    readonly operation: TrustedDeviceErrorOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface TrustedDeviceStoreService {
+    readonly find: (input: TrustedDeviceStoreFindInput) => Effect.Effect<OptionTypes.Option<TrustedDeviceRecord>, TrustedDeviceError>;
+    readonly upsert: (input: TrustedDeviceStoreUpsertInput) => Effect.Effect<TrustedDeviceRecord, TrustedDeviceError>;
+    readonly listForUser: (input: TrustedDeviceStoreListForUserInput) => Effect.Effect<readonly TrustedDeviceRecord[], TrustedDeviceError>;
+    readonly revokeForUser: (input: TrustedDeviceStoreRevokeForUserInput) => Effect.Effect<void, TrustedDeviceError>;
+}
+declare const TrustedDeviceStore_base: Context.ServiceClass<TrustedDeviceStore, "auth/TrustedDeviceStore", TrustedDeviceStoreService>;
+export declare class TrustedDeviceStore extends TrustedDeviceStore_base {
+}
+export declare namespace TrustedDeviceStore {
+    const make: (service: TrustedDeviceStoreService) => TrustedDeviceStoreService;
+}
+export interface TrustedDeviceService {
+    readonly status: (input: TrustedDeviceStatusInput) => Effect.Effect<LoginDeviceContext, TrustedDeviceError>;
+    readonly trust: (input: TrustedDeviceTrustInput) => Effect.Effect<TrustedDeviceToken, TrustedDeviceError>;
+}
+declare const TrustedDevice_base: Context.ServiceClass<TrustedDevice, "auth/TrustedDevice", TrustedDeviceService>;
+export declare class TrustedDevice extends TrustedDevice_base {
+}
+export declare namespace TrustedDevice {
+    const make: (service: TrustedDeviceService) => TrustedDeviceService;
+}
+export interface TrustedDeviceCookieCommitInput {
+    readonly token: TrustedDeviceToken;
+}
+export interface TrustedDeviceCookieService {
+    readonly read: (request: Request) => Effect.Effect<OptionTypes.Option<Redacted.Redacted<string>>, TrustedDeviceError>;
+    readonly commit: (input: TrustedDeviceCookieCommitInput) => Effect.Effect<string, TrustedDeviceError>;
+    readonly clear: Effect.Effect<string, TrustedDeviceError>;
+}
+declare const TrustedDeviceCookie_base: Context.ServiceClass<TrustedDeviceCookie, "auth/TrustedDeviceCookie", TrustedDeviceCookieService>;
+export declare class TrustedDeviceCookie extends TrustedDeviceCookie_base {
+}
+export declare namespace TrustedDeviceCookie {
+    const make: (service: TrustedDeviceCookieService) => TrustedDeviceCookieService;
+}
+export interface TrustedDeviceOptions {
+    readonly secret: CryptoKey;
+    readonly ttl?: Duration.Duration;
+    readonly tokenBytes?: number;
+}
+export interface TrustedDeviceDependencies extends TrustedDeviceOptions {
+    readonly crypto: CryptoService;
+    readonly store: TrustedDeviceStoreService;
+}
+export interface TrustedDeviceCookieOptions {
+    readonly name?: string;
+    readonly secure?: boolean;
+    readonly httpOnly?: boolean;
+    readonly sameSite?: SessionCookieSameSite;
+    readonly path?: string;
+    readonly domain?: string;
+}
+export declare const defaultTrustedDeviceTtl: Duration.Duration;
+export declare const defaultTrustedDeviceTokenBytes = 32;
+export declare const filterTrustedDevicesForUser: (devices: Iterable<TrustedDeviceRecord>, input: TrustedDeviceStoreListForUserInput) => readonly TrustedDeviceRecord[];
+export declare const makeTrustedDeviceStoreMemory: () => TrustedDeviceStoreService;
+export declare const TrustedDeviceStoreMemoryLive: Layer.Layer<TrustedDeviceStore, never, never>;
+export declare const makeTrustedDevice: (dependencies: TrustedDeviceDependencies) => TrustedDeviceService;
+export declare function TrustedDeviceLive(options: TrustedDeviceOptions): Layer.Layer<TrustedDevice, never, Crypto | TrustedDeviceStore>;
+export declare function TrustedDeviceLive(): Layer.Layer<TrustedDevice, never, Crypto | TrustedDeviceStore | AuthSecrets>;
+export declare const makeTrustedDeviceCookie: (options?: TrustedDeviceCookieOptions) => TrustedDeviceCookieService;
+export declare const TrustedDeviceCookieLive: (options?: TrustedDeviceCookieOptions) => Layer.Layer<TrustedDeviceCookie, never, never>;
+export {};
+//# sourceMappingURL=TrustedDevice.d.ts.map

package/dist/TrustedDevice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TrustedDevice.d.ts","sourceRoot":"","sources":["../src/TrustedDevice.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EAEP,QAAQ,EACR,MAAM,EACN,KAAK,EAEL,QAAQ,EACT,MAAM,QAAQ,CAAC;AAChB,OAAO,KAAK,KAAK,WAAW,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,KAAK,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAChF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAE3D,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,2BAA2B,GACnC,QAAQ,GACR,OAAO,GACP,QAAQ,GACR,MAAM,GACN,QAAQ,CAAC;;;;AAEb,qBAAa,kBAAmB,SAAQ,wBAAuC;IAC7E,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,CACb,KAAK,EAAE,2BAA2B,KAC/B,MAAM,CAAC,MAAM,CAChB,WAAW,CAAC,MAAM,CAAC,mBAAmB,CAAC,EACvC,kBAAkB,CACnB,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,6BAA6B,KACjC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC;IAC5D,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,kCAAkC,KACtC,MAAM,CAAC,MAAM,CAAC,SAAS,mBAAmB,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACvE,QAAQ,CAAC,aAAa,EAAE,CACtB,KAAK,EAAE,oCAAoC,KACxC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;CAC9C;;AAED,qBAAa,kBAAmB,SAAQ,uBAGV;CAAG;AAEjC,yBAAiB,kBAAkB,CAAC;IAC3B,MAAM,IAAI,GACf,SAAS,yBAAyB,KACjC,yBAA2D,CAAC;CAChE;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,wBAAwB,KAC5B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;IAC3D,QAAQ,CAAC,KAAK,EAAE,CACd,KAAK,EAAE,uBAAuB,KAC3B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;CAC5D;;AAED,qBAAa,aAAc,SAAQ,kBAGV;CAAG;AAE5B,yBAAiB,aAAa,CAAC;IACtB,MAAM,IAAI,GAAI,SAAS,oBAAoB,KAAG,oBAC1B,CAAC;CAC7B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;CACpC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,CACb,OAAO,EAAE,OAAO,KACb,MAAM,CAAC,MAAM,CAChB,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAC7C,kBAAkB,CACnB,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,8BAA8B,KAClC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC3D;;AAED,qBAAa,mBAAoB,SAAQ,wBAGV;CAAG;AAElC,yBAAiB,mBAAmB,CAAC;IAC5B,MAAM,IAAI,GACf,SAAS,0BAA0B,KAClC,0BAA6D,CAAC;CAClE;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,yBAA0B,SAAQ,oBAAoB;IACrE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;CAC3C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAWD,eAAO,MAAM,uBAAuB,mBAAoB,CAAC;AACzD,eAAO,MAAM,8BAA8B,KAAK,CAAC;AAoFjD,eAAO,MAAM,2BAA2B,GACtC,SAAS,QAAQ,CAAC,mBAAmB,CAAC,EACtC,OAAO,kCAAkC,KACxC,SAAS,mBAAmB,EAU9B,CAAC;AAEF,eAAO,MAAM,4BAA4B,QAAO,yBAwC/C,CAAC;AAEF,eAAO,MAAM,4BAA4B,+CAExC,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC5B,cAAc,yBAAyB,KACtC,oBAgEF,CAAC;AAEF,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,oBAAoB,GAC5B,KAAK,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,CAAC,CAAC;AAClE,wBAAgB,iBAAiB,IAAI,KAAK,CAAC,KAAK,CAC9C,aAAa,EACb,KAAK,EACL,MAAM,GAAG,kBAAkB,GAAG,WAAW,CAC1C,CAAC;AAiIF,eAAO,MAAM,uBAAuB,GAClC,UAAU,0BAA0B,KACnC,0BA2BF,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAAI,UAAU,0BAA0B,mDACN,CAAC"}