@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.10

package/dist/EmailOtp.js

@@ -0,0 +1,286 @@
+import { Context, Data, Duration, Effect, Layer, Option, Redacted, } from "effect";
+import { AuthFlow, AuthResult } from "./AuthFlow.js";
+import { Challenge } from "./Challenge.js";
+import { Crypto } from "./Crypto.js";
+import { Email, UserId } from "./Identifiers.js";
+import { currentUnixMillis } from "./Internal.js";
+import { AuthMailer } from "./Mailer.js";
+import { UserStore } from "./Storage.js";
+export class EmailOtpStartError extends Data.TaggedError("EmailOtpStartError") {
+}
+export class EmailOtpVerifyError extends Data.TaggedError("EmailOtpVerifyError") {
+}
+export class EmailOtpSecretGeneratorError extends Data.TaggedError("EmailOtpSecretGeneratorError") {
+}
+export class EmailOtpLogin extends Context.Service()("auth/login/EmailOtp") {
+}
+(function (EmailOtpLogin) {
+    EmailOtpLogin.make = (service) => EmailOtpLogin.of(service);
+})(EmailOtpLogin || (EmailOtpLogin = {}));
+export class EmailOtpSecretGenerator extends Context.Service()("auth/email-otp/SecretGenerator") {
+}
+(function (EmailOtpSecretGenerator) {
+    EmailOtpSecretGenerator.make = (service) => EmailOtpSecretGenerator.of(service);
+})(EmailOtpSecretGenerator || (EmailOtpSecretGenerator = {}));
+export const defaultEmailOtpTtl = Duration.minutes(10);
+export const defaultEmailOtpAlphabet = "0123456789";
+export const defaultEmailOtpLength = 6;
+const validateSecretLength = (length) => Number.isInteger(length) && length >= 4 && length <= 128
+    ? Effect.succeed(length)
+    : Effect.fail(new EmailOtpSecretGeneratorError({
+        operation: "generate",
+        message: "Email OTP secret length must be an integer between 4 and 128",
+    }));
+const validateSecretAlphabet = (alphabet) => {
+    const characters = [...alphabet];
+    if (characters.length < 2 || characters.length > 256) {
+        return Effect.fail(new EmailOtpSecretGeneratorError({
+            operation: "generate",
+            message: "Email OTP secret alphabet must contain between 2 and 256 characters",
+        }));
+    }
+    if (new Set(characters).size !== characters.length) {
+        return Effect.fail(new EmailOtpSecretGeneratorError({
+            operation: "generate",
+            message: "Email OTP secret alphabet must not contain duplicate characters",
+        }));
+    }
+    return Effect.succeed(characters);
+};
+const randomAlphabetSecret = (crypto, alphabet, length) => Effect.gen(function* () {
+    const unbiasedLimit = Math.floor(256 / alphabet.length) * alphabet.length;
+    const secret = [];
+    while (secret.length < length) {
+        const bytes = yield* crypto.randomBytes(length).pipe(Effect.mapError((cause) => new EmailOtpSecretGeneratorError({
+            operation: "generate",
+            message: "Failed to generate email OTP secret",
+            cause,
+        })));
+        for (const byte of bytes) {
+            if (byte >= unbiasedLimit) {
+                continue;
+            }
+            secret.push(alphabet[byte % alphabet.length]);
+            if (secret.length === length) {
+                break;
+            }
+        }
+    }
+    return Redacted.make(secret.join(""));
+});
+export const makeAlphabetEmailOtpSecretGenerator = (dependencies) => {
+    const alphabet = dependencies.alphabet ?? defaultEmailOtpAlphabet;
+    const length = dependencies.length ?? defaultEmailOtpLength;
+    return EmailOtpSecretGenerator.make({
+        generate: Effect.fn("auth.email_otp.secret_generator.alphabet.generate")(function* () {
+            const characters = yield* validateSecretAlphabet(alphabet);
+            const secretLength = yield* validateSecretLength(length);
+            const secret = yield* randomAlphabetSecret(dependencies.crypto, characters, secretLength);
+            return { secret };
+        }),
+        normalize: Effect.fn("auth.email_otp.secret_generator.alphabet.normalize")(function* (input) {
+            return Redacted.make(Redacted.value(input.secret).trim());
+        }),
+    });
+};
+export const EmailOtpSecretGeneratorLive = (options) => Layer.effect(EmailOtpSecretGenerator)(Effect.gen(function* () {
+    const crypto = yield* Crypto;
+    const config = options ?? {};
+    return makeAlphabetEmailOtpSecretGenerator({
+        crypto,
+        alphabet: config.alphabet,
+        length: config.length,
+    });
+}));
+const verifiedExistingUser = (users, user) => Effect.gen(function* () {
+    if (user.disabledAt !== undefined) {
+        return AuthResult.AccountDisabled();
+    }
+    if (user.emailVerified) {
+        return { _tag: "User", user };
+    }
+    const updatedAt = yield* currentUnixMillis;
+    const updated = yield* users
+        .markEmailVerified({ userId: user.id, updatedAt })
+        .pipe(Effect.mapError((cause) => new EmailOtpVerifyError({
+        message: "Failed to mark email verified",
+        cause,
+    })));
+    if (Option.isNone(updated)) {
+        return yield* new EmailOtpVerifyError({
+            message: "User not found",
+        });
+    }
+    return { _tag: "User", user: updated.value };
+});
+const findByEmail = (users, email) => users.findByEmail(email).pipe(Effect.mapError((cause) => new EmailOtpVerifyError({
+    message: "Failed to load user by email",
+    cause,
+})));
+const createVerifiedUser = (dependencies, email) => Effect.gen(function* () {
+    const now = yield* currentUnixMillis;
+    const userId = UserId(yield* dependencies.crypto
+        .randomToken(dependencies.userIdBytes ?? 16)
+        .pipe(Effect.mapError((cause) => new EmailOtpVerifyError({
+        message: "Failed to generate user id",
+        cause,
+    }))));
+    const user = {
+        id: userId,
+        email,
+        emailVerified: true,
+        createdAt: now,
+        updatedAt: now,
+    };
+    return yield* dependencies.users.insert(user).pipe(Effect.as({ _tag: "User", user }), Effect.catchTag("StorageError", (cause) => findByEmail(dependencies.users, email).pipe(Effect.flatMap((existing) => Option.isSome(existing)
+        ? verifiedExistingUser(dependencies.users, existing.value)
+        : Effect.fail(new EmailOtpVerifyError({
+            message: "Failed to create user",
+            cause,
+        }))))));
+});
+const findOrCreateVerifiedUser = (dependencies, email) => Effect.gen(function* () {
+    const existing = yield* findByEmail(dependencies.users, email);
+    if (Option.isSome(existing)) {
+        return yield* verifiedExistingUser(dependencies.users, existing.value);
+    }
+    return yield* createVerifiedUser(dependencies, email);
+});
+const invalidateChallenge = (challenge, id) => challenge
+    .consume(id)
+    .pipe(Effect.catchTag("ChallengeConsumeError", () => Effect.void));
+const startSecret = (secretGenerator, input) => Effect.gen(function* () {
+    const rawSecret = input.secret;
+    if (rawSecret !== undefined) {
+        return yield* secretGenerator.normalize({ secret: rawSecret }).pipe(Effect.mapError((cause) => new EmailOtpStartError({
+            message: "Failed to normalize email OTP secret",
+            cause,
+        })));
+    }
+    const generated = yield* secretGenerator
+        .generate({
+        email: input.email,
+        locale: input.locale,
+        metadata: input.metadata,
+    })
+        .pipe(Effect.mapError((cause) => new EmailOtpStartError({
+        message: "Failed to generate email OTP secret",
+        cause,
+    })));
+    return yield* secretGenerator.normalize({ secret: generated.secret }).pipe(Effect.mapError((cause) => new EmailOtpStartError({
+        message: "Failed to normalize email OTP secret",
+        cause,
+    })));
+});
+const verifySecret = (secretGenerator, secret) => secretGenerator.normalize({ secret }).pipe(Effect.mapError((cause) => new EmailOtpVerifyError({
+    message: "Failed to normalize email OTP secret",
+    cause,
+})));
+export const makeEmailOtpLogin = (dependencies) => {
+    const ttl = dependencies.ttl ?? defaultEmailOtpTtl;
+    return EmailOtpLogin.make({
+        start: Effect.fn("auth.email_otp.start")(function* (input) {
+            yield* Effect.annotateCurrentSpan("auth.method", "email-otp");
+            const secret = yield* startSecret(dependencies.secretGenerator, input);
+            const issued = yield* dependencies.challenge
+                .issue({
+                type: "email-otp",
+                subject: input.email,
+                ttl: input.ttl ?? ttl,
+                secret,
+                metadata: input.metadata,
+            })
+                .pipe(Effect.mapError((cause) => new EmailOtpStartError({
+                message: "Failed to issue email OTP challenge",
+                cause,
+            })));
+            yield* dependencies.authMailer
+                .send({
+                _tag: "EmailOtp",
+                to: input.email,
+                challengeId: issued.id,
+                secret,
+                expiresAt: issued.expiresAt,
+                locale: input.locale,
+                metadata: input.metadata,
+            })
+                .pipe(Effect.matchEffect({
+                onSuccess: () => Effect.void,
+                onFailure: (cause) => invalidateChallenge(dependencies.challenge, issued.id).pipe(Effect.flatMap(() => Effect.fail(new EmailOtpStartError({
+                    message: "Failed to send email OTP",
+                    cause,
+                })))),
+            }));
+            return {
+                challengeId: issued.id,
+                email: input.email,
+                expiresAt: issued.expiresAt,
+            };
+        }),
+        verify: Effect.fn("auth.email_otp.verify")(function* (input) {
+            yield* Effect.annotateCurrentSpan("auth.method", "email-otp");
+            const secret = yield* verifySecret(dependencies.secretGenerator, input.secret);
+            const verifiedOption = yield* dependencies.challenge
+                .verify({
+                challengeId: input.challengeId,
+                type: "email-otp",
+                secret,
+            })
+                .pipe(Effect.match({
+                onSuccess: Option.some,
+                onFailure: () => Option.none(),
+            }));
+            if (Option.isNone(verifiedOption)) {
+                yield* Effect.annotateCurrentSpan("auth.result", "InvalidCredentials");
+                return AuthResult.InvalidCredentials();
+            }
+            const email = Email(verifiedOption.value.subject);
+            const userResult = yield* findOrCreateVerifiedUser(dependencies, email);
+            if (userResult._tag === "AccountDisabled") {
+                yield* Effect.annotateCurrentSpan("auth.result", "AccountDisabled");
+                return userResult;
+            }
+            return yield* dependencies.authFlow
+                .completePrimaryFactor({
+                userId: userResult.user.id,
+                email: userResult.user.email,
+                intent: "sign-in",
+                method: "email-otp",
+                amr: ["email", "otp"],
+                aal: "aal1",
+                claims: { emailVerified: true },
+                ...(input.trustedDeviceToken === undefined
+                    ? {}
+                    : { trustedDeviceToken: input.trustedDeviceToken }),
+                ...(input.request === undefined ? {} : { request: input.request }),
+                ...(verifiedOption.value.metadata === undefined
+                    ? {}
+                    : { metadata: verifiedOption.value.metadata }),
+            })
+                .pipe(Effect.mapError((cause) => new EmailOtpVerifyError({
+                message: "Failed to complete email OTP authentication",
+                cause,
+            })));
+        }),
+    });
+};
+export const EmailOtpLoginLive = (options) => Layer.effect(EmailOtpLogin)(Effect.gen(function* () {
+    const challenge = yield* Challenge;
+    const users = yield* UserStore;
+    const crypto = yield* Crypto;
+    const authFlow = yield* AuthFlow;
+    const authMailer = yield* AuthMailer;
+    const secretGenerator = yield* EmailOtpSecretGenerator;
+    const resolvedOptions = options ?? {};
+    return makeEmailOtpLogin({
+        ...resolvedOptions,
+        challenge,
+        users,
+        crypto,
+        authFlow,
+        authMailer,
+        secretGenerator,
+    });
+}));
+export const EmailOtpFeatureLive = (options) => EmailOtpLoginLive(options).pipe(Layer.provideMerge(EmailOtpSecretGeneratorLive(options)));
+//# sourceMappingURL=EmailOtp.js.map

package/dist/EmailOtp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailOtp.js","sourceRoot":"","sources":["../src/EmailOtp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,KAAK,EACL,MAAM,EACN,QAAQ,GACT,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAMrD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAwBzC,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CACtD,oBAAoB,CAIpB;CAAG;AAEL,MAAM,OAAO,mBAAoB,SAAQ,IAAI,CAAC,WAAW,CACvD,qBAAqB,CAIrB;CAAG;AAIL,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,8BAA8B,CAK9B;CAAG;AAiBL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,qBAAqB,CAAC;CAAG;AAE7B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AAyBD,MAAM,OAAO,uBAAwB,SAAQ,OAAO,CAAC,OAAO,EAGzD,CAAC,gCAAgC,CAAC;CAAG;AAExC,WAAiB,uBAAuB;IACzB,4BAAI,GAAG,CAClB,OAAuC,EACP,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC,EAJgB,uBAAuB,KAAvB,uBAAuB,QAIvC;AAyBD,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AACvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,YAAY,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC,MAAM,oBAAoB,GAAG,CAC3B,MAAc,EACuC,EAAE,CACvD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,GAAG;IACtD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,4BAA4B,CAAC;QAC/B,SAAS,EAAE,UAAU;QACrB,OAAO,EACL,8DAA8D;KACjE,CAAC,CACH,CAAC;AAER,MAAM,sBAAsB,GAAG,CAC7B,QAAgB,EACgD,EAAE;IAClE,MAAM,UAAU,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC;IAEjC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACrD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,4BAA4B,CAAC;YAC/B,SAAS,EAAE,UAAU;YACrB,OAAO,EACL,qEAAqE;SACxE,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,4BAA4B,CAAC;YAC/B,SAAS,EAAE,UAAU;YACrB,OAAO,EACL,iEAAiE;SACpE,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,MAAqB,EACrB,QAA2B,EAC3B,MAAc,EAC0D,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC1E,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,OAAO,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,CAClD,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;YAC/B,SAAS,EAAE,UAAU;YACrB,OAAO,EAAE,qCAAqC;YAC9C,KAAK;SACN,CAAC,CACL,CACF,CAAC;QAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,IAAI,aAAa,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAE9C,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC,CAAC;AAOL,MAAM,CAAC,MAAM,mCAAmC,GAAG,CACjD,YAAyD,EACzB,EAAE;IAClC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,IAAI,uBAAuB,CAAC;IAClE,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,IAAI,qBAAqB,CAAC;IAE5D,OAAO,uBAAuB,CAAC,IAAI,CAAC;QAClC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,mDAAmD,CAAC,CACtE,QAAQ,CAAC;YACP,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;YAC3D,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,oBAAoB,CACxC,YAAY,CAAC,MAAM,EACnB,UAAU,EACV,YAAY,CACb,CAAC;YAEF,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC,CACF;QACD,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,oDAAoD,CAAC,CACxE,QAAQ,CAAC,EAAE,KAAmC;YAC5C,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC,CACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,OAAwC,EACxC,EAAE,CACF,KAAK,CAAC,MAAM,CAAC,uBAAuB,CAAC,CACnC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,MAAM,GAAG,OAAO,IAAI,EAAE,CAAC;IAE7B,OAAO,mCAAmC,CAAC;QACzC,MAAM;QACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,oBAAoB,GAAG,CAC3B,KAAuB,EACvB,IAAa,EAC6C,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,UAAU,CAAC,eAAe,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,KAAK;SACzB,iBAAiB,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC;SACjD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;QACtB,OAAO,EAAE,+BAA+B;QACxC,KAAK;KACN,CAAC,CACL,CACF,CAAC;IAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC;YACpC,OAAO,EAAE,gBAAgB;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;AACxD,CAAC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,KAAuB,EAAE,KAAY,EAAE,EAAE,CAC5D,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAC3B,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;IACtB,OAAO,EAAE,8BAA8B;IACvC,KAAK;CACN,CAAC,CACL,CACF,CAAC;AAEJ,MAAM,kBAAkB,GAAG,CACzB,YAA4E,EAC5E,KAAY,EAC8C,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CACnB,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM;SACvB,WAAW,CAAC,YAAY,CAAC,WAAW,IAAI,EAAE,CAAC;SAC3C,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;QACtB,OAAO,EAAE,4BAA4B;QACrC,KAAK;KACN,CAAC,CACL,CACF,CACJ,CAAC;IACF,MAAM,IAAI,GAAY;QACpB,EAAE,EAAE,MAAM;QACV,KAAK;QACL,aAAa,EAAE,IAAI;QACnB,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG;KACf,CAAC;IAEF,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,CAAC,EAC1C,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CACxC,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,IAAI,CACzC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACrB,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;QAC1D,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,mBAAmB,CAAC;YACtB,OAAO,EAAE,uBAAuB;YAChC,KAAK;SACN,CAAC,CACH,CACN,CACF,CACF,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,wBAAwB,GAAG,CAC/B,YAA4E,EAC5E,KAAY,EAC8C,EAAE,CAC5D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAE/D,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,CAC1B,SAA2B,EAC3B,EAAe,EACM,EAAE,CACvB,SAAS;KACN,OAAO,CAAC,EAAE,CAAC;KACX,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAEvE,MAAM,WAAW,GAAG,CAClB,eAA+C,EAC/C,KAAyB,EACqC,EAAE,CAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;IAE/B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;YACrB,OAAO,EAAE,sCAAsC;YAC/C,KAAK;SACN,CAAC,CACL,CACF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe;SACrC,QAAQ,CAAC;QACR,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;SACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;QACrB,OAAO,EAAE,qCAAqC;QAC9C,KAAK;KACN,CAAC,CACL,CACF,CAAC;IAEJ,OAAO,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACxE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;QACrB,OAAO,EAAE,sCAAsC;QAC/C,KAAK;KACN,CAAC,CACL,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CACnB,eAA+C,EAC/C,MAAiC,EAC8B,EAAE,CACjE,eAAe,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CACxC,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;IACtB,OAAO,EAAE,sCAAsC;IAC/C,KAAK;CACN,CAAC,CACL,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,YAAkC,EACZ,EAAE;IACxB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,kBAAkB,CAAC;IAEnD,OAAO,aAAa,CAAC,IAAI,CAAC;QACxB,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAChD,KAAyB;YAEzB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YAE9D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,YAAY,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBACzC,KAAK,CAAC;gBACL,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,KAAK,CAAC,KAAK;gBACpB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG;gBACrB,MAAM;gBACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,qCAAqC;gBAC9C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;iBAC3B,IAAI,CAAC;gBACJ,IAAI,EAAE,UAAU;gBAChB,EAAE,EAAE,KAAK,CAAC,KAAK;gBACf,WAAW,EAAE,MAAM,CAAC,EAAE;gBACtB,MAAM;gBACN,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,WAAW,CAAC;gBACjB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;gBAC5B,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,mBAAmB,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CACzD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAClB,MAAM,CAAC,IAAI,CACT,IAAI,kBAAkB,CAAC;oBACrB,OAAO,EAAE,0BAA0B;oBACnC,KAAK;iBACN,CAAC,CACH,CACF,CACF;aACJ,CAAC,CACH,CAAC;YAEJ,OAAO;gBACL,WAAW,EAAE,MAAM,CAAC,EAAE;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAClD,KAA0B;YAE1B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;YAE9D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAChC,YAAY,CAAC,eAAe,EAC5B,KAAK,CAAC,MAAM,CACb,CAAC;YACF,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBACjD,MAAM,CAAC;gBACN,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,WAAW;gBACjB,MAAM;aACP,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,KAAK,CAAC;gBACX,SAAS,EAAE,MAAM,CAAC,IAAI;gBACtB,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE;aAC/B,CAAC,CACH,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;gBACvE,OAAO,UAAU,CAAC,kBAAkB,EAAE,CAAC;YACzC,CAAC;YAED,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YAExE,IAAI,UAAU,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC1C,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAC;gBACpE,OAAO,UAAU,CAAC;YACpB,CAAC;YAED,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ;iBAChC,qBAAqB,CAAC;gBACrB,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE;gBAC1B,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK;gBAC5B,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,WAAW;gBACnB,GAAG,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC;gBACrB,GAAG,EAAE,MAAM;gBACX,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;gBAC/B,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;oBACxC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC;gBACrD,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClE,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAC7C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;aACjD,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;gBACtB,OAAO,EAAE,6CAA6C;gBACtD,KAAK;aACN,CAAC,CACL,CACF,CAAC;QACN,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAyB,EAAE,EAAE,CAC7D,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CACzB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACrC,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC;IACvD,MAAM,eAAe,GAAG,OAAO,IAAI,EAAE,CAAC;IAEtC,OAAO,iBAAiB,CAAC;QACvB,GAAG,eAAe;QAClB,SAAS;QACT,KAAK;QACL,MAAM;QACN,QAAQ;QACR,UAAU;QACV,eAAe;KAChB,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAyB,EAAE,EAAE,CAC/D,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAC7B,KAAK,CAAC,YAAY,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC,CACzD,CAAC"}

package/dist/EmailVerification.d.ts

@@ -0,0 +1,121 @@
+import type { Redacted } from "effect";
+import { Context, Duration, Effect, Layer } from "effect";
+import { Challenge, type ChallengeService } from "./Challenge.js";
+import { type ChallengeId, Email, type UnixMillis, UserId } from "./Identifiers.js";
+import { AuthMailer, type AuthMailerService } from "./Mailer.js";
+import { UserStore, type UserRow, type UserStoreService } from "./Storage.js";
+export interface EmailVerificationIssueInput {
+    readonly userId: UserId;
+    readonly email: Email;
+    readonly ttl?: Duration.Duration;
+    readonly secret?: Redacted.Redacted<string>;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface IssuedEmailVerification {
+    readonly challengeId: ChallengeId;
+    readonly userId: UserId;
+    readonly email: Email;
+    readonly secret?: Redacted.Redacted<string>;
+    readonly expiresAt: UnixMillis;
+}
+export interface EmailVerificationVerifyInput {
+    readonly challengeId: ChallengeId;
+    readonly secret?: Redacted.Redacted<string>;
+}
+export interface VerifiedEmail {
+    readonly challengeId: ChallengeId;
+    readonly user: UserRow;
+}
+declare const EmailVerificationIssueError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "EmailVerificationIssueError";
+} & Readonly<A>;
+export declare class EmailVerificationIssueError extends EmailVerificationIssueError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+declare const EmailVerificationVerifyError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "EmailVerificationVerifyError";
+} & Readonly<A>;
+export declare class EmailVerificationVerifyError extends EmailVerificationVerifyError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export type EmailVerificationError = EmailVerificationIssueError | EmailVerificationVerifyError;
+export interface EmailVerificationDeliveryInput {
+    readonly userId: UserId;
+    readonly email: Email;
+    readonly challengeId: ChallengeId;
+    readonly secret?: Redacted.Redacted<string>;
+    readonly expiresAt: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+declare const EmailDeliveryError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "EmailDeliveryError";
+} & Readonly<A>;
+export declare class EmailDeliveryError extends EmailDeliveryError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface EmailDeliveryService {
+    readonly sendEmailVerification: (input: EmailVerificationDeliveryInput) => Effect.Effect<void, EmailDeliveryError>;
+}
+declare const EmailDelivery_base: Context.ServiceClass<EmailDelivery, "auth/EmailDelivery", EmailDeliveryService>;
+export declare class EmailDelivery extends EmailDelivery_base {
+}
+export declare namespace EmailDelivery {
+    const make: (service: EmailDeliveryService) => EmailDeliveryService;
+}
+declare const EmailVerificationFlowStartError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "EmailVerificationFlowStartError";
+} & Readonly<A>;
+export declare class EmailVerificationFlowStartError extends EmailVerificationFlowStartError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface EmailVerificationFlowService {
+    readonly start: (input: EmailVerificationIssueInput) => Effect.Effect<IssuedEmailVerification, EmailVerificationFlowStartError>;
+}
+declare const EmailVerificationFlow_base: Context.ServiceClass<EmailVerificationFlow, "auth/EmailVerificationFlow", EmailVerificationFlowService>;
+export declare class EmailVerificationFlow extends EmailVerificationFlow_base {
+}
+export declare namespace EmailVerificationFlow {
+    const make: (service: EmailVerificationFlowService) => EmailVerificationFlowService;
+}
+export interface EmailVerificationService {
+    readonly issue: (input: EmailVerificationIssueInput) => Effect.Effect<IssuedEmailVerification, EmailVerificationIssueError>;
+    readonly verify: (input: EmailVerificationVerifyInput) => Effect.Effect<VerifiedEmail, EmailVerificationVerifyError>;
+}
+declare const EmailVerification_base: Context.ServiceClass<EmailVerification, "auth/EmailVerification", EmailVerificationService>;
+export declare class EmailVerification extends EmailVerification_base {
+}
+export declare namespace EmailVerification {
+    const make: (service: EmailVerificationService) => EmailVerificationService;
+}
+export interface EmailVerificationOptions {
+    readonly ttl?: Duration.Duration;
+}
+export interface EmailVerificationDependencies extends EmailVerificationOptions {
+    readonly challenge: ChallengeService;
+    readonly users: UserStoreService;
+}
+export interface EmailVerificationFlowDependencies {
+    readonly emailVerification: EmailVerificationService;
+    readonly emailDelivery: EmailDeliveryService;
+}
+export interface EmailDeliveryFromAuthMailerDependencies {
+    readonly authMailer: AuthMailerService;
+}
+export declare const defaultEmailVerificationTtl: Duration.Duration;
+export declare const makeEmailVerification: (dependencies: EmailVerificationDependencies) => EmailVerificationService;
+export declare const EmailVerificationLive: (options?: EmailVerificationOptions) => Layer.Layer<EmailVerification, never, UserStore | Challenge>;
+export declare const makeEmailDeliveryFromAuthMailer: (dependencies: EmailDeliveryFromAuthMailerDependencies) => EmailDeliveryService;
+export declare const EmailDeliveryFromAuthMailerLive: Layer.Layer<EmailDelivery, never, AuthMailer>;
+export declare const makeEmailVerificationFlow: (dependencies: EmailVerificationFlowDependencies) => EmailVerificationFlowService;
+export declare const EmailVerificationFlowLive: Layer.Layer<EmailVerificationFlow, never, EmailDelivery | EmailVerification>;
+export declare const EmailVerificationFeatureLive: (options?: EmailVerificationOptions) => Layer.Layer<EmailVerificationFlow | EmailVerification, never, UserStore | Challenge | EmailDelivery>;
+export {};
+//# sourceMappingURL=EmailVerification.d.ts.map

package/dist/EmailVerification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailVerification.d.ts","sourceRoot":"","sources":["../src/EmailVerification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,OAAO,EAAQ,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAU,MAAM,QAAQ,CAAC;AAExE,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,EACL,KAAK,UAAU,EACf,MAAM,EACP,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,KAAK,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE9E,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;;;;AAED,qBAAa,2BAA4B,SAAQ,iCAE/C;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;;;;AAEL,qBAAa,4BAA6B,SAAQ,kCAEhD;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,MAAM,sBAAsB,GAC9B,2BAA2B,GAC3B,4BAA4B,CAAC;AAEjC,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;;;;AAED,qBAAa,kBAAmB,SAAQ,wBAAuC;IAC7E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,qBAAqB,EAAE,CAC9B,KAAK,EAAE,8BAA8B,KAClC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;CAC9C;;AAED,qBAAa,aAAc,SAAQ,kBAGV;CAAG;AAE5B,yBAAiB,aAAa,CAAC;IACtB,MAAM,IAAI,GAAI,SAAS,oBAAoB,KAAG,oBAC1B,CAAC;CAC7B;;;;AAED,qBAAa,+BAAgC,SAAQ,qCAEnD;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,CACd,KAAK,EAAE,2BAA2B,KAC/B,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,+BAA+B,CAAC,CAAC;CAC9E;;AAED,qBAAa,qBAAsB,SAAQ,0BAGV;CAAG;AAEpC,yBAAiB,qBAAqB,CAAC;IAC9B,MAAM,IAAI,GACf,SAAS,4BAA4B,KACpC,4BAAiE,CAAC;CACtE;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,CACd,KAAK,EAAE,2BAA2B,KAC/B,MAAM,CAAC,MAAM,CAAC,uBAAuB,EAAE,2BAA2B,CAAC,CAAC;IACzE,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,4BAA4B,KAChC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;CACjE;;AAED,qBAAa,iBAAkB,SAAQ,sBAGV;CAAG;AAEhC,yBAAiB,iBAAiB,CAAC;IAC1B,MAAM,IAAI,GACf,SAAS,wBAAwB,KAChC,wBAAyD,CAAC;CAC9D;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;CAClC;AAED,MAAM,WAAW,6BAA8B,SAAQ,wBAAwB;IAC7E,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,iBAAiB,EAAE,wBAAwB,CAAC;IACrD,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;CAC9C;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;CACxC;AAED,eAAO,MAAM,2BAA2B,mBAAuB,CAAC;AAYhE,eAAO,MAAM,qBAAqB,GAChC,cAAc,6BAA6B,KAC1C,wBAqJF,CAAC;AAEF,eAAO,MAAM,qBAAqB,GAAI,UAAU,wBAAwB,iEAarE,CAAC;AAEJ,eAAO,MAAM,+BAA+B,GAC1C,cAAc,uCAAuC,KACpD,oBAyBC,CAAC;AAEL,eAAO,MAAM,+BAA+B,+CAM3C,CAAC;AAEF,eAAO,MAAM,yBAAyB,GACpC,cAAc,iCAAiC,KAC9C,4BAyCC,CAAC;AAEL,eAAO,MAAM,yBAAyB,8EAUrC,CAAC;AAEF,eAAO,MAAM,4BAA4B,GACvC,UAAU,wBAAwB,yGAIjC,CAAC"}

package/dist/EmailVerification.js

@@ -0,0 +1,200 @@
+import { Context, Data, Duration, Effect, Layer, Option } from "effect";
+import { Challenge } from "./Challenge.js";
+import { Email, UserId, } from "./Identifiers.js";
+import { currentUnixMillis } from "./Internal.js";
+import { AuthMailer } from "./Mailer.js";
+import { UserStore } from "./Storage.js";
+export class EmailVerificationIssueError extends Data.TaggedError("EmailVerificationIssueError") {
+}
+export class EmailVerificationVerifyError extends Data.TaggedError("EmailVerificationVerifyError") {
+}
+export class EmailDeliveryError extends Data.TaggedError("EmailDeliveryError") {
+}
+export class EmailDelivery extends Context.Service()("auth/EmailDelivery") {
+}
+(function (EmailDelivery) {
+    EmailDelivery.make = (service) => EmailDelivery.of(service);
+})(EmailDelivery || (EmailDelivery = {}));
+export class EmailVerificationFlowStartError extends Data.TaggedError("EmailVerificationFlowStartError") {
+}
+export class EmailVerificationFlow extends Context.Service()("auth/EmailVerificationFlow") {
+}
+(function (EmailVerificationFlow) {
+    EmailVerificationFlow.make = (service) => EmailVerificationFlow.of(service);
+})(EmailVerificationFlow || (EmailVerificationFlow = {}));
+export class EmailVerification extends Context.Service()("auth/EmailVerification") {
+}
+(function (EmailVerification) {
+    EmailVerification.make = (service) => EmailVerification.of(service);
+})(EmailVerification || (EmailVerification = {}));
+export const defaultEmailVerificationTtl = Duration.minutes(30);
+const userIdFromMetadata = (metadata) => {
+    const userId = metadata?.userId;
+    return typeof userId === "string" && userId.length > 0
+        ? UserId(userId)
+        : undefined;
+};
+export const makeEmailVerification = (dependencies) => {
+    const ttl = dependencies.ttl ?? defaultEmailVerificationTtl;
+    return EmailVerification.make({
+        issue: Effect.fn("auth.email_verification.issue")(function* (input) {
+            yield* Effect.annotateCurrentSpan("auth.email_verification.operation", "issue");
+            const userOption = yield* dependencies.users.findById(input.userId).pipe(Effect.mapError((cause) => new EmailVerificationIssueError({
+                message: "Failed to load user for email verification",
+                cause,
+            })));
+            if (Option.isNone(userOption)) {
+                return yield* new EmailVerificationIssueError({
+                    message: "User not found",
+                });
+            }
+            const user = userOption.value;
+            if (user.email !== input.email) {
+                return yield* new EmailVerificationIssueError({
+                    message: "Email does not match user",
+                });
+            }
+            if (user.emailVerified) {
+                return yield* new EmailVerificationIssueError({
+                    message: "Email is already verified",
+                });
+            }
+            const issued = yield* dependencies.challenge
+                .issue({
+                type: "email-verification",
+                subject: input.email,
+                ttl: input.ttl ?? ttl,
+                secret: input.secret,
+                metadata: {
+                    ...input.metadata,
+                    userId: input.userId,
+                },
+            })
+                .pipe(Effect.mapError((cause) => new EmailVerificationIssueError({
+                message: "Failed to issue email verification challenge",
+                cause,
+            })));
+            return {
+                challengeId: issued.id,
+                userId: input.userId,
+                email: input.email,
+                secret: issued.secret,
+                expiresAt: issued.expiresAt,
+            };
+        }),
+        verify: Effect.fn("auth.email_verification.verify")(function* (input) {
+            yield* Effect.annotateCurrentSpan("auth.email_verification.operation", "verify");
+            const verified = yield* dependencies.challenge
+                .verify({
+                challengeId: input.challengeId,
+                type: "email-verification",
+                secret: input.secret,
+            })
+                .pipe(Effect.mapError((cause) => new EmailVerificationVerifyError({
+                message: "Invalid email verification challenge",
+                cause,
+            })));
+            const userId = userIdFromMetadata(verified.metadata);
+            if (userId === undefined) {
+                return yield* new EmailVerificationVerifyError({
+                    message: "Email verification challenge is missing user metadata",
+                });
+            }
+            const userOption = yield* dependencies.users.findById(userId).pipe(Effect.mapError((cause) => new EmailVerificationVerifyError({
+                message: "Failed to load user for email verification",
+                cause,
+            })));
+            if (Option.isNone(userOption)) {
+                return yield* new EmailVerificationVerifyError({
+                    message: "User not found",
+                });
+            }
+            if (userOption.value.email !== Email(verified.subject)) {
+                return yield* new EmailVerificationVerifyError({
+                    message: "Email verification challenge does not match user email",
+                });
+            }
+            const updatedAt = yield* currentUnixMillis;
+            const updatedUser = yield* dependencies.users
+                .markEmailVerified({ userId, updatedAt })
+                .pipe(Effect.mapError((cause) => new EmailVerificationVerifyError({
+                message: "Failed to mark email verified",
+                cause,
+            })));
+            if (Option.isNone(updatedUser)) {
+                return yield* new EmailVerificationVerifyError({
+                    message: "User not found",
+                });
+            }
+            return {
+                challengeId: verified.id,
+                user: updatedUser.value,
+            };
+        }),
+    });
+};
+export const EmailVerificationLive = (options) => Layer.effect(EmailVerification)(Effect.gen(function* () {
+    const challenge = yield* Challenge;
+    const users = yield* UserStore;
+    const resolvedOptions = options ?? {};
+    return makeEmailVerification({
+        ...resolvedOptions,
+        challenge,
+        users,
+    });
+}));
+export const makeEmailDeliveryFromAuthMailer = (dependencies) => EmailDelivery.make({
+    sendEmailVerification: Effect.fn("auth.email_verification.delivery.auth_mailer")(function* (input) {
+        yield* dependencies.authMailer
+            .send({
+            _tag: "EmailVerification",
+            to: input.email,
+            userId: input.userId,
+            challengeId: input.challengeId,
+            secret: input.secret,
+            expiresAt: input.expiresAt,
+            metadata: input.metadata,
+        })
+            .pipe(Effect.mapError((cause) => new EmailDeliveryError({
+            message: "Failed to send email verification",
+            cause,
+        })));
+    }),
+});
+export const EmailDeliveryFromAuthMailerLive = Layer.effect(EmailDelivery)(Effect.gen(function* () {
+    const authMailer = yield* AuthMailer;
+    return makeEmailDeliveryFromAuthMailer({ authMailer });
+}));
+export const makeEmailVerificationFlow = (dependencies) => EmailVerificationFlow.make({
+    start: Effect.fn("auth.email_verification_flow.start")(function* (input) {
+        yield* Effect.annotateCurrentSpan("auth.email_verification_flow.operation", "start");
+        const issued = yield* dependencies.emailVerification.issue(input).pipe(Effect.mapError((cause) => new EmailVerificationFlowStartError({
+            message: "Failed to issue email verification challenge",
+            cause,
+        })));
+        yield* dependencies.emailDelivery
+            .sendEmailVerification({
+            userId: issued.userId,
+            email: issued.email,
+            challengeId: issued.challengeId,
+            secret: issued.secret,
+            expiresAt: issued.expiresAt,
+            metadata: input.metadata,
+        })
+            .pipe(Effect.mapError((cause) => new EmailVerificationFlowStartError({
+            message: "Failed to send email verification",
+            cause,
+        })));
+        return issued;
+    }),
+});
+export const EmailVerificationFlowLive = Layer.effect(EmailVerificationFlow)(Effect.gen(function* () {
+    const emailVerification = yield* EmailVerification;
+    const emailDelivery = yield* EmailDelivery;
+    return makeEmailVerificationFlow({
+        emailVerification,
+        emailDelivery,
+    });
+}));
+export const EmailVerificationFeatureLive = (options) => EmailVerificationFlowLive.pipe(Layer.provideMerge(EmailVerificationLive(options)));
+//# sourceMappingURL=EmailVerification.js.map

package/dist/EmailVerification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"EmailVerification.js","sourceRoot":"","sources":["../src/EmailVerification.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExE,OAAO,EAAE,SAAS,EAAyB,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAEL,KAAK,EAEL,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,UAAU,EAA0B,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,SAAS,EAAuC,MAAM,cAAc,CAAC;AA4B9E,MAAM,OAAO,2BAA4B,SAAQ,IAAI,CAAC,WAAW,CAC/D,6BAA6B,CAI7B;CAAG;AAEL,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,8BAA8B,CAI9B;CAAG;AAeL,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAG3E;CAAG;AAQL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AAED,MAAM,OAAO,+BAAgC,SAAQ,IAAI,CAAC,WAAW,CACnE,iCAAiC,CAIjC;CAAG;AAQL,MAAM,OAAO,qBAAsB,SAAQ,OAAO,CAAC,OAAO,EAGvD,CAAC,4BAA4B,CAAC;CAAG;AAEpC,WAAiB,qBAAqB;IACvB,0BAAI,GAAG,CAClB,OAAqC,EACP,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC,EAJgB,qBAAqB,KAArB,qBAAqB,QAIrC;AAWD,MAAM,OAAO,iBAAkB,SAAQ,OAAO,CAAC,OAAO,EAGnD,CAAC,wBAAwB,CAAC;CAAG;AAEhC,WAAiB,iBAAiB;IACnB,sBAAI,GAAG,CAClB,OAAiC,EACP,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC,EAJgB,iBAAiB,KAAjB,iBAAiB,QAIjC;AAoBD,MAAM,CAAC,MAAM,2BAA2B,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAEhE,MAAM,kBAAkB,GAAG,CACzB,QAAuD,EACnC,EAAE;IACtB,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;IAEhC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QACpD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QAChB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,YAA2C,EACjB,EAAE;IAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,2BAA2B,CAAC;IAE5D,OAAO,iBAAiB,CAAC,IAAI,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EACzD,KAAkC;YAElC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,mCAAmC,EACnC,OAAO,CACR,CAAC;YAEF,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,2BAA2B,CAAC;gBAC9B,OAAO,EAAE,4CAA4C;gBACrD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEF,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,gBAAgB;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC;YAE9B,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,2BAA2B;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,2BAA2B;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBACzC,KAAK,CAAC;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,KAAK,CAAC,KAAK;gBACpB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG;gBACrB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE;oBACR,GAAG,KAAK,CAAC,QAAQ;oBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB;aACF,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,2BAA2B,CAAC;gBAC9B,OAAO,EAAE,8CAA8C;gBACvD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,OAAO;gBACL,WAAW,EAAE,MAAM,CAAC,EAAE;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAC3D,KAAmC;YAEnC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,mCAAmC,EACnC,QAAQ,CACT,CAAC;YAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBAC3C,MAAM,CAAC;gBACN,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;gBAC/B,OAAO,EAAE,sCAAsC;gBAC/C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YACJ,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAErD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,uDAAuD;iBACjE,CAAC,CAAC;YACL,CAAC;YAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAChE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;gBAC/B,OAAO,EAAE,4CAA4C;gBACrD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEF,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,gBAAgB;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,wDAAwD;iBAClE,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK;iBAC1C,iBAAiB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;iBACxC,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;gBAC/B,OAAO,EAAE,+BAA+B;gBACxC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,gBAAgB;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,IAAI,EAAE,WAAW,CAAC,KAAK;aACxB,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAkC,EAAE,EAAE,CAC1E,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC7B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IAC/B,MAAM,eAAe,GAAG,OAAO,IAAI,EAAE,CAAC;IAEtC,OAAO,qBAAqB,CAAC;QAC3B,GAAG,eAAe;QAClB,SAAS;QACT,KAAK;KACN,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,YAAqD,EAC/B,EAAE,CACxB,aAAa,CAAC,IAAI,CAAC;IACjB,qBAAqB,EAAE,MAAM,CAAC,EAAE,CAC9B,8CAA8C,CAC/C,CAAC,QAAQ,CAAC,EAAE,KAAqC;QAChD,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;aAC3B,IAAI,CAAC;YACJ,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;YACrB,OAAO,EAAE,mCAAmC;YAC5C,KAAK;SACN,CAAC,CACL,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CACxE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAErC,OAAO,+BAA+B,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;AACzD,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,YAA+C,EACjB,EAAE,CAChC,qBAAqB,CAAC,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAC9D,KAAkC;QAElC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,wCAAwC,EACxC,OAAO,CACR,CAAC;QAEF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,+BAA+B,CAAC;YAClC,OAAO,EAAE,8CAA8C;YACvD,KAAK;SACN,CAAC,CACL,CACF,CAAC;QAEF,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;aAC9B,qBAAqB,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,+BAA+B,CAAC;YAClC,OAAO,EAAE,mCAAmC;YAC5C,KAAK;SACN,CAAC,CACL,CACF,CAAC;QAEJ,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACnD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAE3C,OAAO,yBAAyB,CAAC;QAC/B,iBAAiB;QACjB,aAAa;KACd,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,OAAkC,EAClC,EAAE,CACF,yBAAyB,CAAC,IAAI,CAC5B,KAAK,CAAC,YAAY,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CACnD,CAAC"}