@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.10

package/dist/ApiKey.d.ts

@@ -0,0 +1,207 @@
+import { Brand, Context, Effect, Layer, Redacted } from "effect";
+import type * as OptionTypes from "effect/Option";
+import { Crypto } from "./Crypto.js";
+import type { CryptoService } from "./Crypto.js";
+import type { UnixMillis, UserId } from "./Identifiers.js";
+export type ApiKeyId = Brand.Branded<string, "auth/ApiKeyId">;
+export declare const ApiKeyId: Brand.Constructor<ApiKeyId>;
+export type ApiKeyPrefix = Brand.Branded<string, "auth/ApiKeyPrefix">;
+export declare const ApiKeyPrefix: Brand.Constructor<ApiKeyPrefix>;
+export type ApiKeySecret = Brand.Branded<string, "auth/ApiKeySecret">;
+export declare const ApiKeySecret: Brand.Constructor<ApiKeySecret>;
+export type ApiKeySecretHash = Brand.Branded<string, "auth/ApiKeySecretHash">;
+export declare const ApiKeySecretHash: Brand.Constructor<ApiKeySecretHash>;
+export declare const defaultApiKeyPrefixBytes = 8;
+export declare const defaultApiKeySecretBytes = 32;
+export declare const defaultApiKeyIdBytes = 16;
+export type ApiKeyOperation = "generate" | "parse" | "hash" | "verify";
+declare const ApiKeyError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ApiKeyError";
+} & Readonly<A>;
+export declare class ApiKeyError extends ApiKeyError_base<{
+    readonly operation: ApiKeyOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface ApiKeyGenerateInput {
+    readonly prefixBytes?: number;
+    readonly secretBytes?: number;
+}
+export interface GeneratedApiKeySecret {
+    readonly prefix: ApiKeyPrefix;
+    readonly secret: Redacted.Redacted<ApiKeySecret>;
+}
+export interface ApiKeyHashInput {
+    readonly secret: Redacted.Redacted<string>;
+}
+export interface ApiKeyVerifyInput extends ApiKeyHashInput {
+    readonly hash: ApiKeySecretHash;
+}
+export interface ApiKeysService {
+    readonly generate: (input?: ApiKeyGenerateInput) => Effect.Effect<GeneratedApiKeySecret, ApiKeyError>;
+    readonly parse: (secret: Redacted.Redacted<string>) => Effect.Effect<ApiKeyPrefix, ApiKeyError>;
+    readonly hash: (input: ApiKeyHashInput) => Effect.Effect<ApiKeySecretHash, ApiKeyError>;
+    readonly verify: (input: ApiKeyVerifyInput) => Effect.Effect<boolean, ApiKeyError>;
+}
+declare const ApiKeys_base: Context.ServiceClass<ApiKeys, "auth/ApiKeys", ApiKeysService>;
+export declare class ApiKeys extends ApiKeys_base {
+}
+export declare namespace ApiKeys {
+    const make: (service: ApiKeysService) => ApiKeysService;
+}
+export interface ApiKeysDependencies {
+    readonly crypto: CryptoService;
+}
+export declare const makeApiKeys: (dependencies: ApiKeysDependencies) => ApiKeysService;
+export declare const ApiKeysLive: Layer.Layer<ApiKeys, never, Crypto>;
+export interface ApiKeyRecord {
+    readonly id: ApiKeyId;
+    readonly userId: UserId;
+    readonly prefix: ApiKeyPrefix;
+    readonly secretHash: ApiKeySecretHash;
+    readonly scopes: readonly string[];
+    readonly createdAt: UnixMillis;
+    readonly expiresAt?: UnixMillis;
+    readonly lastUsedAt?: UnixMillis;
+    readonly revokedAt?: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ApiKeyListByUserInput {
+    readonly userId: UserId;
+    readonly includeRevoked?: boolean;
+}
+export interface ApiKeyMarkUsedInput {
+    readonly id: ApiKeyId;
+    readonly lastUsedAt: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ApiKeyRevokeInput {
+    readonly id: ApiKeyId;
+    readonly revokedAt: UnixMillis;
+    readonly reason?: string;
+}
+export type ApiKeyStoreOperation = "insert" | "find" | "list" | "mark-used" | "revoke";
+declare const ApiKeyStoreError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ApiKeyStoreError";
+} & Readonly<A>;
+export declare class ApiKeyStoreError extends ApiKeyStoreError_base<{
+    readonly operation: ApiKeyStoreOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface ApiKeyStoreService {
+    readonly insert: (row: ApiKeyRecord) => Effect.Effect<void, ApiKeyStoreError>;
+    readonly findById: (id: ApiKeyId) => Effect.Effect<OptionTypes.Option<ApiKeyRecord>, ApiKeyStoreError>;
+    readonly findByPrefix: (prefix: ApiKeyPrefix) => Effect.Effect<OptionTypes.Option<ApiKeyRecord>, ApiKeyStoreError>;
+    readonly listByUser: (input: ApiKeyListByUserInput) => Effect.Effect<readonly ApiKeyRecord[], ApiKeyStoreError>;
+    readonly markUsed: (input: ApiKeyMarkUsedInput) => Effect.Effect<OptionTypes.Option<ApiKeyRecord>, ApiKeyStoreError>;
+    readonly revoke: (input: ApiKeyRevokeInput) => Effect.Effect<void, ApiKeyStoreError>;
+}
+declare const ApiKeyStore_base: Context.ServiceClass<ApiKeyStore, "auth/ApiKeyStore", ApiKeyStoreService>;
+export declare class ApiKeyStore extends ApiKeyStore_base {
+}
+export declare namespace ApiKeyStore {
+    const make: (service: ApiKeyStoreService) => ApiKeyStoreService;
+}
+export declare const makeApiKeyStoreMemory: () => ApiKeyStoreService;
+export declare const ApiKeyStoreMemoryLive: Layer.Layer<ApiKeyStore, never, never>;
+export interface ApiKeyInfo {
+    readonly id: ApiKeyId;
+    readonly userId: UserId;
+    readonly prefix: ApiKeyPrefix;
+    readonly scopes: readonly string[];
+    readonly createdAt: UnixMillis;
+    readonly expiresAt?: UnixMillis;
+    readonly lastUsedAt?: UnixMillis;
+    readonly revokedAt?: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ApiKeyCreateForUserInput {
+    readonly userId: UserId;
+    readonly keyId?: ApiKeyId;
+    readonly scopes?: readonly string[];
+    readonly now?: UnixMillis;
+    readonly expiresAt?: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface CreatedApiKey {
+    readonly secret: Redacted.Redacted<ApiKeySecret>;
+    readonly key: ApiKeyInfo;
+}
+export interface ApiKeyManagementListInput {
+    readonly userId: UserId;
+    readonly includeRevoked?: boolean;
+}
+export interface ApiKeyManagementRevokeInput {
+    readonly userId: UserId;
+    readonly keyId: ApiKeyId;
+    readonly revokedAt?: UnixMillis;
+    readonly reason?: string;
+}
+export type ApiKeyManagementOperation = "create" | "list" | "revoke";
+declare const ApiKeyManagementError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ApiKeyManagementError";
+} & Readonly<A>;
+export declare class ApiKeyManagementError extends ApiKeyManagementError_base<{
+    readonly operation: ApiKeyManagementOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface ApiKeyManagementService {
+    readonly createForUser: (input: ApiKeyCreateForUserInput) => Effect.Effect<CreatedApiKey, ApiKeyManagementError>;
+    readonly listForUser: (input: ApiKeyManagementListInput) => Effect.Effect<readonly ApiKeyInfo[], ApiKeyManagementError>;
+    readonly revokeForUser: (input: ApiKeyManagementRevokeInput) => Effect.Effect<void, ApiKeyManagementError>;
+}
+declare const ApiKeyManagement_base: Context.ServiceClass<ApiKeyManagement, "auth/ApiKeyManagement", ApiKeyManagementService>;
+export declare class ApiKeyManagement extends ApiKeyManagement_base {
+}
+export declare namespace ApiKeyManagement {
+    const make: (service: ApiKeyManagementService) => ApiKeyManagementService;
+}
+export interface ApiKeyManagementDependencies {
+    readonly apiKeys: ApiKeysService;
+    readonly crypto: CryptoService;
+    readonly keyStore: ApiKeyStoreService;
+    readonly keyIdBytes?: number;
+}
+export declare const makeApiKeyManagement: (dependencies: ApiKeyManagementDependencies) => ApiKeyManagementService;
+export declare const ApiKeyManagementLive: Layer.Layer<ApiKeyManagement, never, Crypto | ApiKeys | ApiKeyStore>;
+export interface ApiKeyVerificationInput {
+    readonly secret: Redacted.Redacted<string>;
+    readonly now?: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface ApiKeyVerificationResult {
+    readonly valid: boolean;
+    readonly key?: ApiKeyInfo;
+}
+export type ApiKeyVerificationOperation = "verify";
+declare const ApiKeyVerificationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "ApiKeyVerificationError";
+} & Readonly<A>;
+export declare class ApiKeyVerificationError extends ApiKeyVerificationError_base<{
+    readonly operation: ApiKeyVerificationOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface ApiKeyVerificationService {
+    readonly verify: (input: ApiKeyVerificationInput) => Effect.Effect<ApiKeyVerificationResult, ApiKeyVerificationError>;
+}
+declare const ApiKeyVerification_base: Context.ServiceClass<ApiKeyVerification, "auth/ApiKeyVerification", ApiKeyVerificationService>;
+export declare class ApiKeyVerification extends ApiKeyVerification_base {
+}
+export declare namespace ApiKeyVerification {
+    const make: (service: ApiKeyVerificationService) => ApiKeyVerificationService;
+}
+export interface ApiKeyVerificationDependencies {
+    readonly apiKeys: ApiKeysService;
+    readonly keyStore: ApiKeyStoreService;
+}
+export declare const makeApiKeyVerification: (dependencies: ApiKeyVerificationDependencies) => ApiKeyVerificationService;
+export declare const ApiKeyVerificationLive: Layer.Layer<ApiKeyVerification, never, ApiKeys | ApiKeyStore>;
+export {};
+//# sourceMappingURL=ApiKey.d.ts.map

package/dist/ApiKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKey.d.ts","sourceRoot":"","sources":["../src/ApiKey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAU,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,KAAK,KAAK,WAAW,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG3D,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;AAC9D,eAAO,MAAM,QAAQ,6BAA4B,CAAC;AAElD,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AACtE,eAAO,MAAM,YAAY,iCAAgC,CAAC;AAE1D,MAAM,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AACtE,eAAO,MAAM,YAAY,iCAAgC,CAAC;AAE1D,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;AAC9E,eAAO,MAAM,gBAAgB,qCAAoC,CAAC;AAElE,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAC3C,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;;;;AAEvE,qBAAa,WAAY,SAAQ,iBAAgC;IAC/D,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACxD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,CAAC,EAAE,mBAAmB,KACxB,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;IACvD,QAAQ,CAAC,KAAK,EAAE,CACd,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAC9B,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE,CACb,KAAK,EAAE,eAAe,KACnB,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,iBAAiB,KACrB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;CAC1C;;AAED,qBAAa,OAAQ,SAAQ,YAE5B;CAAG;AAEJ,yBAAiB,OAAO,CAAC;IAChB,MAAM,IAAI,GAAI,SAAS,cAAc,KAAG,cAC1B,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAsDD,eAAO,MAAM,WAAW,GAAI,cAAc,mBAAmB,KAAG,cAoE5D,CAAC;AAEL,eAAO,MAAM,WAAW,qCAMvB,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,GACR,MAAM,GACN,MAAM,GACN,WAAW,GACX,QAAQ,CAAC;;;;AAEb,qBAAa,gBAAiB,SAAQ,sBAAqC;IACzE,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,YAAY,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9E,QAAQ,CAAC,QAAQ,EAAE,CACjB,EAAE,EAAE,QAAQ,KACT,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvE,QAAQ,CAAC,YAAY,EAAE,CACrB,MAAM,EAAE,YAAY,KACjB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvE,QAAQ,CAAC,UAAU,EAAE,CACnB,KAAK,EAAE,qBAAqB,KACzB,MAAM,CAAC,MAAM,CAAC,SAAS,YAAY,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC9D,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,EAAE,mBAAmB,KACvB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACvE,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;CACtF;;AAED,qBAAa,WAAY,SAAQ,gBAGV;CAAG;AAE1B,yBAAiB,WAAW,CAAC;IACpB,MAAM,IAAI,GAAI,SAAS,kBAAkB,KAAG,kBAC1B,CAAC;CAC3B;AAaD,eAAO,MAAM,qBAAqB,QAAO,kBAmExC,CAAC;AAEF,eAAO,MAAM,qBAAqB,wCAEjC,CAAC;AAEF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACjD,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,CAAC;;;;AAErE,qBAAa,qBAAsB,SAAQ,2BAEzC;IACA,QAAQ,CAAC,SAAS,EAAE,yBAAyB,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,aAAa,EAAE,CACtB,KAAK,EAAE,wBAAwB,KAC5B,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IACzD,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,yBAAyB,KAC7B,MAAM,CAAC,MAAM,CAAC,SAAS,UAAU,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACjE,QAAQ,CAAC,aAAa,EAAE,CACtB,KAAK,EAAE,2BAA2B,KAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;CACjD;;AAED,qBAAa,gBAAiB,SAAQ,qBAGV;CAAG;AAE/B,yBAAiB,gBAAgB,CAAC;IACzB,MAAM,IAAI,GACf,SAAS,uBAAuB,KAC/B,uBAAuD,CAAC;CAC5D;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAsDD,eAAO,MAAM,oBAAoB,GAC/B,cAAc,4BAA4B,KACzC,uBA2EC,CAAC;AAEL,eAAO,MAAM,oBAAoB,sEAQhC,CAAC;AAEF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC3B;AAED,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;;;;AAEnD,qBAAa,uBAAwB,SAAQ,6BAE3C;IACA,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,uBAAuB,KAC3B,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,uBAAuB,CAAC,CAAC;CACvE;;AAED,qBAAa,kBAAmB,SAAQ,uBAGV;CAAG;AAEjC,yBAAiB,kBAAkB,CAAC;IAC3B,MAAM,IAAI,GACf,SAAS,yBAAyB,KACjC,yBAA2D,CAAC;CAChE;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;CACvC;AAYD,eAAO,MAAM,sBAAsB,GACjC,cAAc,8BAA8B,KAC3C,yBA4DC,CAAC;AAEL,eAAO,MAAM,sBAAsB,+DAOlC,CAAC"}

package/dist/ApiKey.js

@@ -0,0 +1,275 @@
+import { Brand, Context, Data, Effect, Layer, Option, Redacted } from "effect";
+import { Crypto } from "./Crypto.js";
+import { currentUnixMillis } from "./Internal.js";
+export const ApiKeyId = Brand.nominal();
+export const ApiKeyPrefix = Brand.nominal();
+export const ApiKeySecret = Brand.nominal();
+export const ApiKeySecretHash = Brand.nominal();
+export const defaultApiKeyPrefixBytes = 8;
+export const defaultApiKeySecretBytes = 32;
+export const defaultApiKeyIdBytes = 16;
+export class ApiKeyError extends Data.TaggedError("ApiKeyError") {
+}
+export class ApiKeys extends Context.Service()("auth/ApiKeys") {
+}
+(function (ApiKeys) {
+    ApiKeys.make = (service) => ApiKeys.of(service);
+})(ApiKeys || (ApiKeys = {}));
+const textEncoder = new TextEncoder();
+const apiKeyError = (operation, message, cause) => new ApiKeyError({
+    operation,
+    message,
+    ...(cause === undefined ? {} : { cause }),
+});
+const validateByteLength = (byteLength, operation, label) => Number.isInteger(byteLength) && byteLength >= 4 && byteLength <= 128
+    ? Effect.succeed(byteLength)
+    : Effect.fail(apiKeyError(operation, `${label} byte length must be an integer between 4 and 128`));
+const parseApiKeySecretValue = (secret) => {
+    const value = secret.trim();
+    const parts = value.split(".");
+    if (parts.length !== 2 || parts[0] === "" || parts[1] === "") {
+        return Effect.fail(apiKeyError("parse", "API key secret must use '<prefix>.<secret>' format"));
+    }
+    return Effect.succeed(ApiKeyPrefix(parts[0]));
+};
+const hashApiKeySecretValue = (dependencies, secret, operation) => dependencies.crypto.digestSha256({ data: `api-key:${secret}` }).pipe(Effect.map((hash) => ApiKeySecretHash(`sha256:${hash}`)), Effect.mapError((cause) => apiKeyError(operation, "Failed to hash API key secret", cause)));
+export const makeApiKeys = (dependencies) => ApiKeys.make({
+    generate: Effect.fn("auth.api_key.generate")(function* (input) {
+        const prefixBytes = yield* validateByteLength(input?.prefixBytes ?? defaultApiKeyPrefixBytes, "generate", "API key prefix");
+        const secretBytes = yield* validateByteLength(input?.secretBytes ?? defaultApiKeySecretBytes, "generate", "API key secret");
+        const prefix = yield* dependencies.crypto.randomToken(prefixBytes).pipe(Effect.map(ApiKeyPrefix), Effect.mapError((cause) => apiKeyError("generate", "Failed to generate API key prefix", cause)));
+        const secret = yield* dependencies.crypto.randomToken(secretBytes).pipe(Effect.map((value) => ApiKeySecret(`${prefix}.${value}`)), Effect.mapError((cause) => apiKeyError("generate", "Failed to generate API key secret", cause)));
+        return {
+            prefix,
+            secret: Redacted.make(secret),
+        };
+    }),
+    parse: Effect.fn("auth.api_key.parse")(function* (secret) {
+        return yield* parseApiKeySecretValue(Redacted.value(secret));
+    }),
+    hash: Effect.fn("auth.api_key.hash")(function* (input) {
+        const secret = Redacted.value(input.secret).trim();
+        yield* parseApiKeySecretValue(secret).pipe(Effect.mapError((cause) => apiKeyError("hash", "Cannot hash malformed API key secret", cause)));
+        return yield* hashApiKeySecretValue(dependencies, secret, "hash");
+    }),
+    verify: Effect.fn("auth.api_key.verify")(function* (input) {
+        const secret = Redacted.value(input.secret).trim();
+        const prefix = yield* parseApiKeySecretValue(secret).pipe(Effect.catchTag("ApiKeyError", () => Effect.succeed(undefined)));
+        if (prefix === undefined) {
+            return false;
+        }
+        const hash = yield* hashApiKeySecretValue(dependencies, secret, "verify");
+        return yield* dependencies.crypto
+            .timingSafeEqual({
+            left: textEncoder.encode(hash),
+            right: textEncoder.encode(input.hash),
+        })
+            .pipe(Effect.mapError((cause) => apiKeyError("verify", "Failed to compare API key hashes", cause)));
+    }),
+});
+export const ApiKeysLive = Layer.effect(ApiKeys)(Effect.gen(function* () {
+    const crypto = yield* Crypto;
+    return makeApiKeys({ crypto });
+}));
+export class ApiKeyStoreError extends Data.TaggedError("ApiKeyStoreError") {
+}
+export class ApiKeyStore extends Context.Service()("auth/ApiKeyStore") {
+}
+(function (ApiKeyStore) {
+    ApiKeyStore.make = (service) => ApiKeyStore.of(service);
+})(ApiKeyStore || (ApiKeyStore = {}));
+const cloneMetadata = (metadata) => metadata === undefined ? undefined : structuredClone(metadata);
+const cloneApiKeyRecord = (record) => ({
+    ...record,
+    scopes: [...record.scopes],
+    ...(record.metadata === undefined ? {} : { metadata: cloneMetadata(record.metadata) }),
+});
+export const makeApiKeyStoreMemory = () => {
+    const keysById = new Map();
+    const idByPrefix = new Map();
+    return ApiKeyStore.make({
+        insert: (row) => Effect.sync(() => {
+            keysById.set(row.id, cloneApiKeyRecord(row));
+            idByPrefix.set(row.prefix, row.id);
+        }),
+        findById: (id) => Effect.sync(() => {
+            const row = keysById.get(id);
+            return row === undefined ? Option.none() : Option.some(cloneApiKeyRecord(row));
+        }),
+        findByPrefix: (prefix) => Effect.sync(() => {
+            const id = idByPrefix.get(prefix);
+            const row = id === undefined ? undefined : keysById.get(id);
+            return row === undefined ? Option.none() : Option.some(cloneApiKeyRecord(row));
+        }),
+        listByUser: (input) => Effect.sync(() => [...keysById.values()]
+            .filter((row) => row.userId === input.userId &&
+            (input.includeRevoked === true || row.revokedAt === undefined))
+            .map(cloneApiKeyRecord)),
+        markUsed: (input) => Effect.sync(() => {
+            const row = keysById.get(input.id);
+            if (row === undefined || row.revokedAt !== undefined) {
+                return Option.none();
+            }
+            const updated = {
+                ...row,
+                lastUsedAt: input.lastUsedAt,
+                metadata: input.metadata ?? row.metadata,
+            };
+            keysById.set(input.id, updated);
+            return Option.some(cloneApiKeyRecord(updated));
+        }),
+        revoke: (input) => Effect.sync(() => {
+            const row = keysById.get(input.id);
+            if (row !== undefined) {
+                keysById.set(input.id, {
+                    ...row,
+                    revokedAt: input.revokedAt,
+                    metadata: input.reason === undefined
+                        ? row.metadata
+                        : { ...row.metadata, revokeReason: input.reason },
+                });
+            }
+        }),
+    });
+};
+export const ApiKeyStoreMemoryLive = Layer.sync(ApiKeyStore)(makeApiKeyStoreMemory);
+export class ApiKeyManagementError extends Data.TaggedError("ApiKeyManagementError") {
+}
+export class ApiKeyManagement extends Context.Service()("auth/ApiKeyManagement") {
+}
+(function (ApiKeyManagement) {
+    ApiKeyManagement.make = (service) => ApiKeyManagement.of(service);
+})(ApiKeyManagement || (ApiKeyManagement = {}));
+const apiKeyInfo = (record) => ({
+    id: record.id,
+    userId: record.userId,
+    prefix: record.prefix,
+    scopes: [...record.scopes],
+    createdAt: record.createdAt,
+    ...(record.expiresAt === undefined ? {} : { expiresAt: record.expiresAt }),
+    ...(record.lastUsedAt === undefined ? {} : { lastUsedAt: record.lastUsedAt }),
+    ...(record.revokedAt === undefined ? {} : { revokedAt: record.revokedAt }),
+    ...(record.metadata === undefined ? {} : { metadata: record.metadata }),
+});
+const apiKeyManagementError = (operation, message, cause) => new ApiKeyManagementError({
+    operation,
+    message,
+    ...(cause === undefined ? {} : { cause }),
+});
+const makeApiKeyId = (dependencies) => dependencies.crypto.randomToken(dependencies.keyIdBytes ?? defaultApiKeyIdBytes).pipe(Effect.map(ApiKeyId), Effect.mapError((cause) => apiKeyManagementError("create", "Failed to generate API key id", cause)));
+const loadOwnedApiKey = (dependencies, operation, input) => Effect.gen(function* () {
+    const key = yield* dependencies.keyStore.findById(input.keyId).pipe(Effect.mapError((cause) => apiKeyManagementError(operation, "Failed to load API key", cause)));
+    if (Option.isNone(key) || key.value.userId !== input.userId) {
+        return yield* apiKeyManagementError(operation, "API key not found");
+    }
+    return key.value;
+});
+export const makeApiKeyManagement = (dependencies) => ApiKeyManagement.make({
+    createForUser: Effect.fn("auth.api_key.management.create")(function* (input) {
+        const now = input.now ?? (yield* currentUnixMillis);
+        const generated = yield* dependencies.apiKeys.generate().pipe(Effect.mapError((cause) => apiKeyManagementError("create", "Failed to generate API key secret", cause)));
+        const secretHash = yield* dependencies.apiKeys
+            .hash({ secret: Redacted.make(Redacted.value(generated.secret)) })
+            .pipe(Effect.mapError((cause) => apiKeyManagementError("create", "Failed to hash API key secret", cause)));
+        const row = {
+            id: input.keyId ?? (yield* makeApiKeyId(dependencies)),
+            userId: input.userId,
+            prefix: generated.prefix,
+            secretHash,
+            scopes: [...(input.scopes ?? [])],
+            createdAt: now,
+            ...(input.expiresAt === undefined ? {} : { expiresAt: input.expiresAt }),
+            ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+        };
+        yield* dependencies.keyStore.insert(row).pipe(Effect.mapError((cause) => apiKeyManagementError("create", "Failed to store API key", cause)));
+        return {
+            secret: generated.secret,
+            key: apiKeyInfo(row),
+        };
+    }),
+    listForUser: Effect.fn("auth.api_key.management.list")(function* (input) {
+        const keys = yield* dependencies.keyStore
+            .listByUser({
+            userId: input.userId,
+            ...(input.includeRevoked === undefined
+                ? {}
+                : { includeRevoked: input.includeRevoked }),
+        })
+            .pipe(Effect.mapError((cause) => apiKeyManagementError("list", "Failed to list API keys", cause)));
+        return keys.map(apiKeyInfo);
+    }),
+    revokeForUser: Effect.fn("auth.api_key.management.revoke")(function* (input) {
+        const key = yield* loadOwnedApiKey(dependencies, "revoke", input);
+        if (key.revokedAt !== undefined) {
+            return;
+        }
+        const revokedAt = input.revokedAt ?? (yield* currentUnixMillis);
+        yield* dependencies.keyStore
+            .revoke({
+            id: input.keyId,
+            revokedAt,
+            ...(input.reason === undefined ? {} : { reason: input.reason }),
+        })
+            .pipe(Effect.mapError((cause) => apiKeyManagementError("revoke", "Failed to revoke API key", cause)));
+    }),
+});
+export const ApiKeyManagementLive = Layer.effect(ApiKeyManagement)(Effect.gen(function* () {
+    const apiKeys = yield* ApiKeys;
+    const crypto = yield* Crypto;
+    const keyStore = yield* ApiKeyStore;
+    return makeApiKeyManagement({ apiKeys, crypto, keyStore });
+}));
+export class ApiKeyVerificationError extends Data.TaggedError("ApiKeyVerificationError") {
+}
+export class ApiKeyVerification extends Context.Service()("auth/ApiKeyVerification") {
+}
+(function (ApiKeyVerification) {
+    ApiKeyVerification.make = (service) => ApiKeyVerification.of(service);
+})(ApiKeyVerification || (ApiKeyVerification = {}));
+const apiKeyVerificationError = (message, cause) => new ApiKeyVerificationError({
+    operation: "verify",
+    message,
+    ...(cause === undefined ? {} : { cause }),
+});
+export const makeApiKeyVerification = (dependencies) => ApiKeyVerification.make({
+    verify: Effect.fn("auth.api_key.verification.verify")(function* (input) {
+        const prefix = yield* dependencies.apiKeys.parse(input.secret).pipe(Effect.catchTag("ApiKeyError", () => Effect.succeed(undefined)));
+        if (prefix === undefined) {
+            return { valid: false };
+        }
+        const key = yield* dependencies.keyStore.findByPrefix(prefix).pipe(Effect.mapError((cause) => apiKeyVerificationError("Failed to load API key", cause)));
+        if (Option.isNone(key) || key.value.revokedAt !== undefined) {
+            return { valid: false };
+        }
+        const now = input.now ?? (yield* currentUnixMillis);
+        if (key.value.expiresAt !== undefined && Number(key.value.expiresAt) <= Number(now)) {
+            return { valid: false };
+        }
+        const valid = yield* dependencies.apiKeys
+            .verify({ secret: input.secret, hash: key.value.secretHash })
+            .pipe(Effect.mapError((cause) => apiKeyVerificationError("Failed to verify API key", cause)));
+        if (!valid) {
+            return { valid: false };
+        }
+        const updated = yield* dependencies.keyStore
+            .markUsed({
+            id: key.value.id,
+            lastUsedAt: now,
+            ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+        })
+            .pipe(Effect.mapError((cause) => apiKeyVerificationError("Failed to mark API key as used", cause)));
+        if (Option.isNone(updated)) {
+            return { valid: false };
+        }
+        return {
+            valid: true,
+            key: apiKeyInfo(updated.value),
+        };
+    }),
+});
+export const ApiKeyVerificationLive = Layer.effect(ApiKeyVerification)(Effect.gen(function* () {
+    const apiKeys = yield* ApiKeys;
+    const keyStore = yield* ApiKeyStore;
+    return makeApiKeyVerification({ apiKeys, keyStore });
+}));
+//# sourceMappingURL=ApiKey.js.map

package/dist/ApiKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApiKey.js","sourceRoot":"","sources":["../src/ApiKey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAG/E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGlD,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAY,CAAC;AAGlD,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,EAAgB,CAAC;AAG1D,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,EAAgB,CAAC;AAG1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,EAAoB,CAAC;AAElE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAC1C,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAIvC,MAAM,OAAO,WAAY,SAAQ,IAAI,CAAC,WAAW,CAAC,aAAa,CAI7D;CAAG;AAmCL,MAAM,OAAO,OAAQ,SAAQ,OAAO,CAAC,OAAO,EAA2B,CACrE,cAAc,CACf;CAAG;AAEJ,WAAiB,OAAO;IACT,YAAI,GAAG,CAAC,OAAuB,EAAkB,EAAE,CAC9D,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC,EAHgB,OAAO,KAAP,OAAO,QAGvB;AAMD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,WAAW,GAAG,CAClB,SAA0B,EAC1B,OAAe,EACf,KAAe,EACF,EAAE,CACf,IAAI,WAAW,CAAC;IACd,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,UAAkB,EAClB,SAA0B,EAC1B,KAAa,EACuB,EAAE,CACtC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,IAAI,UAAU,IAAI,GAAG;IAClE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;IAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,WAAW,CACT,SAAS,EACT,GAAG,KAAK,mDAAmD,CAC5D,CACF,CAAC;AAER,MAAM,sBAAsB,GAAG,CAAC,MAAc,EAA4C,EAAE;IAC1F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAI,CAChB,WAAW,CAAC,OAAO,EAAE,oDAAoD,CAAC,CAC3E,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,YAAiC,EACjC,MAAc,EACd,SAA0B,EACoB,EAAE,CAChD,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,WAAW,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,EACxD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,WAAW,CAAC,SAAS,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAC/D,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,YAAiC,EAAkB,EAAE,CAC/E,OAAO,CAAC,IAAI,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC3D,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAC3C,KAAK,EAAE,WAAW,IAAI,wBAAwB,EAC9C,UAAU,EACV,gBAAgB,CACjB,CAAC;QACF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAC3C,KAAK,EAAE,WAAW,IAAI,wBAAwB,EAC9C,UAAU,EACV,gBAAgB,CACjB,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,CACrE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EACxB,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,WAAW,CAAC,UAAU,EAAE,mCAAmC,EAAE,KAAK,CAAC,CACpE,CACF,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,CACrE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,EACzD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,WAAW,CAAC,UAAU,EAAE,mCAAmC,EAAE,KAAK,CAAC,CACpE,CACF,CAAC;QAEF,OAAO;YACL,MAAM;YACN,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;SACE,CAAC;IACpC,CAAC,CAAC;IACF,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM;QACtD,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAEnD,KAAK,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,IAAI,CACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,WAAW,CAAC,MAAM,EAAE,sCAAsC,EAAE,KAAK,CAAC,CACnE,CACF,CAAC;QAEF,OAAO,KAAK,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAChE,CAAC;QAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE1E,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM;aAC9B,eAAe,CAAC;YACf,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SACtC,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,WAAW,CAAC,QAAQ,EAAE,kCAAkC,EAAE,KAAK,CAAC,CACjE,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAC9C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAE7B,OAAO,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC,CAAC,CACH,CAAC;AAuCF,MAAM,OAAO,gBAAiB,SAAQ,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAIvE;CAAG;AAmBL,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAG7C,CAAC,kBAAkB,CAAC;CAAG;AAE1B,WAAiB,WAAW;IACb,gBAAI,GAAG,CAAC,OAA2B,EAAsB,EAAE,CACtE,WAAW,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC,EAHgB,WAAW,KAAX,WAAW,QAG3B;AAED,MAAM,aAAa,GAAG,CACpB,QAAuB,EACR,EAAE,CACjB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,eAAe,CAAC,QAAQ,CAAO,CAAC;AAExE,MAAM,iBAAiB,GAAG,CAAC,MAAoB,EAAgB,EAAE,CAAC,CAAC;IACjE,GAAG,MAAM;IACT,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1B,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;CACvF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAuB,EAAE;IAC5D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;IAErD,OAAO,WAAW,CAAC,IAAI,CAAC;QACtB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7C,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,CAAC,CAAC;QACJ,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAE7B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC;QACJ,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CACvB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAE5D,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC;QACJ,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACf,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;aACnB,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC3B,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CACjE;aACA,GAAG,CAAC,iBAAiB,CAAC,CAC1B;QACH,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAClB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAEnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;YAED,MAAM,OAAO,GAAG;gBACd,GAAG,GAAG;gBACN,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;aAClB,CAAC;YAEzB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAEhC,OAAO,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAEnC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE;oBACrB,GAAG,GAAG;oBACN,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,QAAQ,EACN,KAAK,CAAC,MAAM,KAAK,SAAS;wBACxB,CAAC,CAAC,GAAG,CAAC,QAAQ;wBACd,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAC1D,qBAAqB,CACtB,CAAC;AA0CF,MAAM,OAAO,qBAAsB,SAAQ,IAAI,CAAC,WAAW,CACzD,uBAAuB,CAKvB;CAAG;AAcL,MAAM,OAAO,gBAAiB,SAAQ,OAAO,CAAC,OAAO,EAGlD,CAAC,uBAAuB,CAAC;CAAG;AAE/B,WAAiB,gBAAgB;IAClB,qBAAI,GAAG,CAClB,OAAgC,EACP,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC,EAJgB,gBAAgB,KAAhB,gBAAgB,QAIhC;AASD,MAAM,UAAU,GAAG,CAAC,MAAoB,EAAc,EAAE,CAAC,CAAC;IACxD,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1E,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7E,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1E,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;CACxE,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAC5B,SAAoC,EACpC,OAAe,EACf,KAAe,EACQ,EAAE,CACzB,IAAI,qBAAqB,CAAC;IACxB,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,YAAY,GAAG,CACnB,YAA0C,EACM,EAAE,CAClD,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,UAAU,IAAI,oBAAoB,CAAC,CAAC,IAAI,CACnF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EACpB,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,QAAQ,EAAE,+BAA+B,EAAE,KAAK,CAAC,CACxE,CACF,CAAC;AAEJ,MAAM,eAAe,GAAG,CACtB,YAA0C,EAC1C,SAAoC,EACpC,KAA4D,EACR,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,SAAS,EAAE,wBAAwB,EAAE,KAAK,CAAC,CAClE,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5D,OAAO,KAAK,CAAC,CAAC,qBAAqB,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,GAAG,CAAC,KAAK,CAAC;AACnB,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,YAA0C,EACjB,EAAE,CAC3B,gBAAgB,CAAC,IAAI,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACzE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,QAAQ,EAAE,mCAAmC,EAAE,KAAK,CAAC,CAC5E,CACF,CAAC;QACF,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO;aAC3C,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;aACjE,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,QAAQ,EAAE,+BAA+B,EAAE,KAAK,CAAC,CACxE,CACF,CAAC;QACJ,MAAM,GAAG,GAAG;YACV,EAAE,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,UAAU;YACV,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACjC,SAAS,EAAE,GAAG;YACd,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SAC/C,CAAC;QAEzB,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,QAAQ,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAClE,CACF,CAAC;QAEF,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC;SACG,CAAC;IAC5B,CAAC,CAAC;IACF,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACrE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ;aACtC,UAAU,CAAC;YACV,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;SAC9C,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,MAAM,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAChE,CACF,CAAC;QAEJ,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACzE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAElE,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEhE,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ;aACzB,MAAM,CAAC;YACN,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAChE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,QAAQ,EAAE,0BAA0B,EAAE,KAAK,CAAC,CACnE,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IAEpC,OAAO,oBAAoB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC7D,CAAC,CAAC,CACH,CAAC;AAeF,MAAM,OAAO,uBAAwB,SAAQ,IAAI,CAAC,WAAW,CAC3D,yBAAyB,CAKzB;CAAG;AAQL,MAAM,OAAO,kBAAmB,SAAQ,OAAO,CAAC,OAAO,EAGpD,CAAC,yBAAyB,CAAC;CAAG;AAEjC,WAAiB,kBAAkB;IACpB,uBAAI,GAAG,CAClB,OAAkC,EACP,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC,EAJgB,kBAAkB,KAAlB,kBAAkB,QAIlC;AAOD,MAAM,uBAAuB,GAAG,CAC9B,OAAe,EACf,KAAe,EACU,EAAE,CAC3B,IAAI,uBAAuB,CAAC;IAC1B,SAAS,EAAE,QAAQ;IACnB,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,YAA4C,EACjB,EAAE,CAC7B,kBAAkB,CAAC,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACpE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAChE,CAAC;QAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAqC,CAAC;QAC7D,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAChE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CAAC,wBAAwB,EAAE,KAAK,CAAC,CACzD,CACF,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAqC,CAAC;QAC7D,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEpD,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACpF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAqC,CAAC;QAC7D,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,OAAO;aACtC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;aAC5D,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAC3D,CACF,CAAC;QAEJ,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAqC,CAAC;QAC7D,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ;aACzC,QAAQ,CAAC;YACR,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE;YAChB,UAAU,EAAE,GAAG;YACf,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACtE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CAAC,gCAAgC,EAAE,KAAK,CAAC,CACjE,CACF,CAAC;QAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAqC,CAAC;QAC7D,CAAC;QAED,OAAO;YACL,KAAK,EAAE,IAAI;YACX,GAAG,EAAE,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;SACI,CAAC;IACvC,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IAEpC,OAAO,sBAAsB,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC,CACH,CAAC"}