@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.10

package/dist/Sessions.js

@@ -1,4 +1,15 @@
-import { Context, Data, Effect } from "effect";
+import { Context, Data, Duration, Effect, Layer, Option } from "effect";
+import { AuthSecrets, AuthSessionCookieConfig, AuthSessionsConfig, } from "./AuthConfig.js";
+import { Crypto } from "./Crypto.js";
+import { SessionId, SessionToken, UnixMillis } from "./Identifiers.js";
+import { addMillis, currentUnixMillis, timingSafeEqualString, } from "./Internal.js";
+import { SessionStore } from "./Storage.js";
+export const sessionRequestMetadataKey = "__effectAuthRequest";
+export const defaultSessionTtlPolicy = {
+    idleTtl: Duration.days(30),
+    absoluteTtl: Duration.days(90),
+    refreshAfter: Duration.days(1),
+};
 export class SessionCreateError extends Data.TaggedError("SessionCreateError") {
 }
 export class SessionValidateError extends Data.TaggedError("SessionValidateError") {
@@ -7,6 +18,10 @@ export class SessionRefreshError extends Data.TaggedError("SessionRefreshError")
 }
 export class SessionRotateError extends Data.TaggedError("SessionRotateError") {
 }
+export class SessionUpdateClaimsError extends Data.TaggedError("SessionUpdateClaimsError") {
+}
+export class SessionListError extends Data.TaggedError("SessionListError") {
+}
 export class SessionRevokeError extends Data.TaggedError("SessionRevokeError") {
 }
 export class Sessions extends Context.Service()("auth/Sessions") {
@@ -14,11 +29,529 @@ export class Sessions extends Context.Service()("auth/Sessions") {
 (function (Sessions) {
     Sessions.make = (service) => Sessions.of(service);
 })(Sessions || (Sessions = {}));
+const resolveTtl = (ttl) => ttl ?? defaultSessionTtlPolicy;
+const ttlMillis = (ttl) => Duration.toMillis(ttl);
+const sessionExpiresAt = (now, authTime, ttl) => UnixMillis(Math.min(Number(addMillis(now, ttlMillis(ttl.idleTtl))), Number(addMillis(authTime, ttlMillis(ttl.absoluteTtl)))));
+const parseSessionToken = (token) => {
+    const raw = String(token);
+    const separator = raw.indexOf(".");
+    if (separator <= 0 || separator === raw.length - 1) {
+        return undefined;
+    }
+    return {
+        sessionId: raw.slice(0, separator),
+        secret: raw.slice(separator + 1),
+    };
+};
+const makeSessionToken = (sessionId, secret) => `${sessionId}.${secret}`;
+const hashSessionSecret = (crypto, key, secret) => crypto.hmacSha256({ key, data: secret });
+const isExpired = (row, now, ttl) => row.revokedAt !== undefined ||
+    Number(row.expiresAt) <= Number(now) ||
+    Number(addMillis(row.authTime, ttlMillis(ttl.absoluteTtl))) <= Number(now);
+const shouldRefresh = (row, now, ttl) => row.lastSeenAt === undefined ||
+    Number(now) - Number(row.lastSeenAt) >= ttlMillis(ttl.refreshAfter) ||
+    Number(row.expiresAt) - Number(now) <= ttlMillis(ttl.refreshAfter);
+const issuedFromRow = (row, token) => ({
+    sessionId: row.id,
+    userId: row.userId,
+    token,
+    authTime: row.authTime,
+    expiresAt: row.expiresAt,
+    aal: row.aal,
+    amr: row.amr,
+    ...(row.mfaVerifiedAt === undefined ? {} : { mfaVerifiedAt: row.mfaVerifiedAt }),
+    claims: row.claims,
+});
+const currentFromRow = (row) => ({
+    sessionId: row.id,
+    userId: row.userId,
+    authTime: row.authTime,
+    expiresAt: row.expiresAt,
+    aal: row.aal,
+    amr: row.amr,
+    ...(row.mfaVerifiedAt === undefined ? {} : { mfaVerifiedAt: row.mfaVerifiedAt }),
+    claims: row.claims,
+});
+const infoFromRow = (row) => ({
+    sessionId: row.id,
+    userId: row.userId,
+    createdAt: row.createdAt,
+    authTime: row.authTime,
+    ...(row.lastSeenAt === undefined ? {} : { lastSeenAt: row.lastSeenAt }),
+    expiresAt: row.expiresAt,
+    aal: row.aal,
+    amr: row.amr,
+    ...(row.mfaVerifiedAt === undefined ? {} : { mfaVerifiedAt: row.mfaVerifiedAt }),
+    claims: row.claims,
+    ...(row.metadata === undefined ? {} : { metadata: row.metadata }),
+});
+const aalRank = {
+    aal1: 1,
+    aal2: 2,
+    aal3: 3,
+};
+const strongerAal = (left, right) => (aalRank[left] >= aalRank[right] ? left : right);
+const asMethods = (method) => typeof method === "string" ? [method] : method;
+const appendMethods = (current, methods) => {
+    const next = [...current];
+    for (const method of methods) {
+        if (!next.includes(method)) {
+            next.push(method);
+        }
+    }
+    return next;
+};
+const sessionActivityTime = (row) => Number(row.lastSeenAt ?? row.createdAt);
+const activeSessionsForUser = (rows, now, ttl) => {
+    const sorted = [];
+    for (const row of rows) {
+        if (isExpired(row, now, ttl)) {
+            continue;
+        }
+        const index = sorted.findIndex((item) => sessionActivityTime(row) > sessionActivityTime(item));
+        if (index === -1) {
+            sorted.push(row);
+        }
+        else {
+            sorted.splice(index, 0, row);
+        }
+    }
+    return sorted.map(infoFromRow);
+};
+const validatedFromRow = (row, token) => ({
+    issued: issuedFromRow(row, token),
+    currentSession: currentFromRow(row),
+    actor: {
+        userId: row.userId,
+        sessionId: row.id,
+    },
+});
+export const makeSessions = (dependencies) => {
+    const ttl = resolveTtl(dependencies.ttl);
+    const sessionIdBytes = dependencies.sessionIdBytes ?? 16;
+    const sessionSecretBytes = dependencies.sessionSecretBytes ?? 32;
+    return Sessions.make({
+        create: Effect.fn("auth.session.create")(function* (input) {
+            yield* Effect.annotateCurrentSpan({
+                "auth.method": input.method,
+                "auth.aal": input.aal,
+                "auth.amr_count": input.amr.length,
+            });
+            const now = input.now ?? (yield* currentUnixMillis);
+            const inputTtl = resolveTtl(input.ttl ?? ttl);
+            const sessionId = SessionId(yield* dependencies.crypto.randomToken(sessionIdBytes).pipe(Effect.mapError((cause) => new SessionCreateError({
+                message: "Failed to generate session id",
+                cause,
+            }))));
+            const secret = yield* dependencies.crypto
+                .randomToken(sessionSecretBytes)
+                .pipe(Effect.mapError((cause) => new SessionCreateError({
+                message: "Failed to generate session secret",
+                cause,
+            })));
+            const token = makeSessionToken(sessionId, secret);
+            const secretHash = yield* hashSessionSecret(dependencies.crypto, dependencies.secret, secret).pipe(Effect.mapError((cause) => new SessionCreateError({
+                message: "Failed to hash session secret",
+                cause,
+            })));
+            const expiresAt = sessionExpiresAt(now, now, inputTtl);
+            yield* dependencies.sessionStore
+                .insert({
+                id: sessionId,
+                userId: input.userId,
+                secretHash,
+                createdAt: now,
+                expiresAt,
+                authTime: now,
+                aal: input.aal,
+                amr: input.amr,
+                mfaVerifiedAt: input.mfaVerifiedAt,
+                claims: input.claims,
+                metadata: input.metadata,
+            })
+                .pipe(Effect.mapError((cause) => new SessionCreateError({
+                message: "Failed to store session",
+                cause,
+            })));
+            return {
+                sessionId,
+                userId: input.userId,
+                token,
+                authTime: now,
+                expiresAt,
+                aal: input.aal,
+                amr: input.amr,
+                ...(input.mfaVerifiedAt === undefined
+                    ? {}
+                    : { mfaVerifiedAt: input.mfaVerifiedAt }),
+                claims: input.claims,
+            };
+        }),
+        validate: Effect.fn("auth.session.validate")(function* (token) {
+            const parsed = parseSessionToken(token);
+            if (parsed === undefined) {
+                yield* Effect.annotateCurrentSpan("auth.session.token_format", "invalid");
+                return yield* new SessionValidateError({
+                    message: "Invalid session token",
+                });
+            }
+            yield* Effect.annotateCurrentSpan("auth.session.token_format", "opaque");
+            const now = yield* currentUnixMillis;
+            const rowOption = yield* dependencies.sessionStore
+                .findById(parsed.sessionId)
+                .pipe(Effect.mapError((cause) => new SessionValidateError({
+                message: "Failed to load session",
+                cause,
+            })));
+            if (Option.isNone(rowOption)) {
+                return yield* new SessionValidateError({
+                    message: "Session not found",
+                });
+            }
+            const row = rowOption.value;
+            if (isExpired(row, now, ttl)) {
+                return yield* new SessionValidateError({ message: "Session expired" });
+            }
+            const secretHash = yield* hashSessionSecret(dependencies.crypto, dependencies.secret, parsed.secret).pipe(Effect.mapError((cause) => new SessionValidateError({
+                message: "Failed to hash session secret",
+                cause,
+            })));
+            const secretMatches = yield* timingSafeEqualString(dependencies.crypto, secretHash, row.secretHash).pipe(Effect.mapError((cause) => new SessionValidateError({
+                message: "Failed to compare session secret",
+                cause,
+            })));
+            if (!secretMatches) {
+                return yield* new SessionValidateError({
+                    message: "Invalid session token",
+                });
+            }
+            return validatedFromRow(row, token);
+        }),
+        refresh: Effect.fn("auth.session.refresh")(function* (token) {
+            const parsed = parseSessionToken(token);
+            if (parsed === undefined) {
+                yield* Effect.annotateCurrentSpan("auth.session.token_format", "invalid");
+                return yield* new SessionRefreshError({
+                    message: "Invalid session token",
+                });
+            }
+            yield* Effect.annotateCurrentSpan("auth.session.token_format", "opaque");
+            const now = yield* currentUnixMillis;
+            const rowOption = yield* dependencies.sessionStore
+                .findById(parsed.sessionId)
+                .pipe(Effect.mapError((cause) => new SessionRefreshError({
+                message: "Failed to load session",
+                cause,
+            })));
+            if (Option.isNone(rowOption)) {
+                return yield* new SessionRefreshError({ message: "Session not found" });
+            }
+            const row = rowOption.value;
+            if (isExpired(row, now, ttl)) {
+                return yield* new SessionRefreshError({ message: "Session expired" });
+            }
+            const secretHash = yield* hashSessionSecret(dependencies.crypto, dependencies.secret, parsed.secret).pipe(Effect.mapError((cause) => new SessionRefreshError({
+                message: "Failed to hash session secret",
+                cause,
+            })));
+            const secretMatches = yield* timingSafeEqualString(dependencies.crypto, secretHash, row.secretHash).pipe(Effect.mapError((cause) => new SessionRefreshError({
+                message: "Failed to compare session secret",
+                cause,
+            })));
+            if (!secretMatches) {
+                return yield* new SessionRefreshError({
+                    message: "Invalid session token",
+                });
+            }
+            if (!shouldRefresh(row, now, ttl)) {
+                yield* Effect.annotateCurrentSpan("auth.session.refreshed", false);
+                return issuedFromRow(row, token);
+            }
+            const refreshed = yield* dependencies.sessionStore
+                .refresh({
+                sessionId: row.id,
+                expiresAt: sessionExpiresAt(now, row.authTime, ttl),
+                lastSeenAt: now,
+            })
+                .pipe(Effect.mapError((cause) => new SessionRefreshError({
+                message: "Failed to refresh session",
+                cause,
+            })));
+            if (Option.isNone(refreshed)) {
+                return yield* new SessionRefreshError({ message: "Session not found" });
+            }
+            yield* Effect.annotateCurrentSpan("auth.session.refreshed", true);
+            return issuedFromRow(refreshed.value, token);
+        }),
+        rotate: Effect.fn("auth.session.rotate")(function* (input) {
+            const now = yield* currentUnixMillis;
+            const secret = yield* dependencies.crypto
+                .randomToken(sessionSecretBytes)
+                .pipe(Effect.mapError((cause) => new SessionRotateError({
+                message: "Failed to generate session secret",
+                cause,
+            })));
+            const secretHash = yield* hashSessionSecret(dependencies.crypto, dependencies.secret, secret).pipe(Effect.mapError((cause) => new SessionRotateError({
+                message: "Failed to hash session secret",
+                cause,
+            })));
+            const rotated = yield* dependencies.sessionStore
+                .rotate({
+                sessionId: input.sessionId,
+                secretHash,
+                rotatedAt: now,
+            })
+                .pipe(Effect.mapError((cause) => new SessionRotateError({
+                message: "Failed to rotate session",
+                cause,
+            })));
+            if (Option.isNone(rotated)) {
+                return yield* new SessionRotateError({ message: "Session not found" });
+            }
+            return issuedFromRow(rotated.value, makeSessionToken(input.sessionId, secret));
+        }),
+        updateClaims: Effect.fn("auth.session.update_claims")(function* (input) {
+            yield* Effect.annotateCurrentSpan("auth.session.claims_updated", true);
+            const now = yield* currentUnixMillis;
+            const rowOption = yield* dependencies.sessionStore
+                .findById(input.sessionId)
+                .pipe(Effect.mapError((cause) => new SessionUpdateClaimsError({
+                message: "Failed to load session",
+                cause,
+            })));
+            if (Option.isNone(rowOption)) {
+                return yield* new SessionUpdateClaimsError({
+                    message: "Session not found",
+                });
+            }
+            if (isExpired(rowOption.value, now, ttl)) {
+                return yield* new SessionUpdateClaimsError({
+                    message: "Session expired",
+                });
+            }
+            const updated = yield* dependencies.sessionStore
+                .updateClaims({
+                sessionId: input.sessionId,
+                ...(input.claims === undefined ? {} : { claims: input.claims }),
+                ...(input.aal === undefined ? {} : { aal: input.aal }),
+                ...(input.amr === undefined ? {} : { amr: input.amr }),
+                ...(input.mfaVerifiedAt === undefined
+                    ? {}
+                    : { mfaVerifiedAt: input.mfaVerifiedAt }),
+            })
+                .pipe(Effect.mapError((cause) => new SessionUpdateClaimsError({
+                message: "Failed to update session claims",
+                cause,
+            })));
+            if (Option.isNone(updated)) {
+                return yield* new SessionUpdateClaimsError({
+                    message: "Session not found",
+                });
+            }
+            return currentFromRow(updated.value);
+        }),
+        listForUser: Effect.fn("auth.session.list_for_user")(function* (input) {
+            const now = yield* currentUnixMillis;
+            const rows = yield* dependencies.sessionStore.listByUser(input).pipe(Effect.mapError((cause) => new SessionListError({
+                message: "Failed to list user sessions",
+                cause,
+            })));
+            return activeSessionsForUser(rows, now, ttl);
+        }),
+        revoke: Effect.fn("auth.session.revoke")(function* (input) {
+            const now = yield* currentUnixMillis;
+            yield* dependencies.sessionStore
+                .revoke({
+                sessionId: input.sessionId,
+                revokedAt: now,
+                reason: input.reason,
+            })
+                .pipe(Effect.mapError((cause) => new SessionRevokeError({
+                message: "Failed to revoke session",
+                cause,
+            })));
+        }),
+        revokeForUser: Effect.fn("auth.session.revoke_for_user")(function* (input) {
+            const rowOption = yield* dependencies.sessionStore
+                .findById(input.sessionId)
+                .pipe(Effect.mapError((cause) => new SessionRevokeError({
+                message: "Failed to load session for revoke",
+                cause,
+            })));
+            if (Option.isNone(rowOption) || rowOption.value.userId !== input.userId) {
+                return;
+            }
+            const now = yield* currentUnixMillis;
+            yield* dependencies.sessionStore
+                .revoke({
+                sessionId: input.sessionId,
+                revokedAt: now,
+                reason: input.reason,
+            })
+                .pipe(Effect.mapError((cause) => new SessionRevokeError({
+                message: "Failed to revoke session",
+                cause,
+            })));
+        }),
+        revokeAllForUser: Effect.fn("auth.session.revoke_all_for_user")(function* (userId) {
+            const now = yield* currentUnixMillis;
+            yield* dependencies.sessionStore
+                .revokeAllForUser({
+                userId,
+                revokedAt: now,
+            })
+                .pipe(Effect.mapError((cause) => new SessionRevokeError({
+                message: "Failed to revoke user sessions",
+                cause,
+            })));
+        }),
+        revokeAllForUserExcept: Effect.fn("auth.session.revoke_all_for_user_except")(function* (input) {
+            const now = yield* currentUnixMillis;
+            const rows = yield* dependencies.sessionStore
+                .listByUser({ userId: input.userId })
+                .pipe(Effect.mapError((cause) => new SessionRevokeError({
+                message: "Failed to list sessions for revoke",
+                cause,
+            })));
+            yield* Effect.forEach(rows, (row) => row.id === input.exceptSessionId || row.revokedAt !== undefined
+                ? Effect.void
+                : dependencies.sessionStore.revoke({
+                    sessionId: row.id,
+                    revokedAt: now,
+                    reason: input.reason,
+                }), { discard: true }).pipe(Effect.mapError((cause) => new SessionRevokeError({
+                message: "Failed to revoke user sessions",
+                cause,
+            })));
+        }),
+    });
+};
+export function SessionsLive(options) {
+    return Layer.effect(Sessions)(Effect.gen(function* () {
+        const crypto = yield* Crypto;
+        const sessionStore = yield* SessionStore;
+        const resolvedOptions = options ??
+            {
+                ...(yield* AuthSessionsConfig),
+                secret: (yield* AuthSecrets).session,
+            };
+        return makeSessions({
+            ...resolvedOptions,
+            crypto,
+            sessionStore,
+        });
+    }));
+}
+export const upgradeCurrentSession = (input) => Effect.gen(function* () {
+    const current = yield* CurrentSession;
+    const sessions = yield* Sessions;
+    const now = input.now ?? (yield* currentUnixMillis);
+    return yield* sessions.updateClaims({
+        sessionId: current.sessionId,
+        aal: strongerAal(current.aal, input.aal ?? "aal2"),
+        amr: appendMethods(current.amr, asMethods(input.method)),
+        mfaVerifiedAt: now,
+        ...(input.claims === undefined ? {} : { claims: input.claims }),
+        reason: input.reason ?? "mfa_verified",
+    });
+});
 export class SessionCookie extends Context.Service()("auth/SessionCookie") {
 }
 (function (SessionCookie) {
     SessionCookie.make = (service) => SessionCookie.of(service);
 })(SessionCookie || (SessionCookie = {}));
+export const defaultSessionCookieOptions = {
+    name: "__Host-session",
+    secure: true,
+    httpOnly: true,
+    sameSite: "lax",
+    path: "/",
+};
+const resolveSessionCookieOptions = (options = {}) => {
+    const resolved = {
+        ...defaultSessionCookieOptions,
+        ...options,
+    };
+    if (resolved.name.startsWith("__Host-")) {
+        return {
+            ...resolved,
+            secure: true,
+            path: "/",
+            domain: undefined,
+        };
+    }
+    return resolved;
+};
+const sameSiteHeaderValue = (sameSite) => {
+    switch (sameSite) {
+        case "strict": {
+            return "Strict";
+        }
+        case "none": {
+            return "None";
+        }
+        case "lax": {
+            return "Lax";
+        }
+    }
+};
+const appendCookieAttributes = (parts, options) => {
+    if (options.httpOnly) {
+        parts.push("HttpOnly");
+    }
+    if (options.secure) {
+        parts.push("Secure");
+    }
+    parts.push(`SameSite=${sameSiteHeaderValue(options.sameSite)}`);
+    parts.push(`Path=${options.path}`);
+    if (options.domain !== undefined) {
+        parts.push(`Domain=${options.domain}`);
+    }
+    return parts;
+};
+const serializeSessionCookie = (options, value, expiresAt) => {
+    const parts = [`${options.name}=${encodeURIComponent(value)}`];
+    if (expiresAt !== undefined) {
+        parts.push(`Expires=${new Date(Number(expiresAt)).toUTCString()}`);
+    }
+    return appendCookieAttributes(parts, options).join("; ");
+};
+const serializeClearSessionCookie = (options) => appendCookieAttributes([`${options.name}=`, "Max-Age=0", "Expires=Thu, 01 Jan 1970 00:00:00 GMT"], options).join("; ");
+const parseCookieHeader = (header, name) => {
+    if (header === null) {
+        return Option.none();
+    }
+    for (const part of header.split(";")) {
+        const trimmed = part.trim();
+        const separator = trimmed.indexOf("=");
+        if (separator <= 0) {
+            continue;
+        }
+        if (trimmed.slice(0, separator) !== name) {
+            continue;
+        }
+        try {
+            // decodeURIComponent throws URIError for malformed percent-encoding; treat that cookie as absent.
+            return Option.some(SessionToken(decodeURIComponent(trimmed.slice(separator + 1))));
+        }
+        catch {
+            return Option.none();
+        }
+    }
+    return Option.none();
+};
+export const makeSessionCookie = (options) => {
+    const resolved = resolveSessionCookieOptions(options);
+    return SessionCookie.make({
+        read: Effect.fn("auth.session_cookie.read")((request) => Effect.succeed(parseCookieHeader(request.headers.get("Cookie"), resolved.name))),
+        commit: Effect.fn("auth.session_cookie.commit")((issued) => Effect.succeed(serializeSessionCookie(resolved, issued.token, issued.expiresAt))),
+        clear: Effect.fn("auth.session_cookie.clear")(() => Effect.succeed(serializeClearSessionCookie(resolved)))(),
+    });
+};
+export const SessionCookieLive = (options) => Layer.effect(SessionCookie)(Effect.gen(function* () {
+    const resolvedOptions = options ?? (yield* AuthSessionCookieConfig);
+    return makeSessionCookie(resolvedOptions);
+}));
 export class CurrentSession extends Context.Service()("auth/CurrentSession") {
 }
 (function (CurrentSession) {

package/dist/Sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"Sessions.js","sourceRoot":"","sources":["../src/Sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AA0E9C,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAG3E;CAAG;AAEL,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAG/E;CAAG;AAEL,MAAM,OAAO,mBAAoB,SAAQ,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAG7E;CAAG;AAEL,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAG3E;CAAG;AAEL,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAG3E;CAAG;AAkBL,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAA6B,CAAC,eAAe,CAAC;CAAG;AAE9F,WAAiB,QAAQ;IACV,aAAI,GAAG,CAAC,OAAwB,EAAmB,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;AACzF,CAAC,EAFgB,QAAQ,KAAR,QAAQ,QAExB;AAQD,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAAuC,CAAC,oBAAoB,CAAC;CAAG;AAElH,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;AACxG,CAAC,EAFgB,aAAa,KAAb,aAAa,QAE7B;AAED,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,OAAO,EAAuC,CAAC,qBAAqB,CAAC;CAAG;AAEpH,WAAiB,cAAc;IAChB,mBAAI,GAAG,CAAC,OAA4B,EAAuB,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;AACvG,CAAC,EAFgB,cAAc,KAAd,cAAc,QAE9B;AAED,MAAM,OAAO,YAAa,SAAQ,OAAO,CAAC,OAAO,EAAmC,CAAC,mBAAmB,CAAC;CAAG;AAE5G,WAAiB,YAAY;IACd,iBAAI,GAAG,CAAC,OAA0B,EAAqB,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,CAAA;AACjG,CAAC,EAFgB,YAAY,KAAZ,YAAY,QAE5B"}
+{"version":3,"file":"Sessions.js","sourceRoot":"","sources":["../src/Sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGxE,OAAO,EACL,WAAW,EACX,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEvE,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAkB5C,MAAM,CAAC,MAAM,yBAAyB,GAAG,qBAA8B,CAAC;AAaxE,MAAM,CAAC,MAAM,uBAAuB,GAAqB;IACvD,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1B,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9B,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;CAC/B,CAAC;AAuGF,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAG3E;CAAG;AAEL,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CACxD,sBAAsB,CAItB;CAAG;AAEL,MAAM,OAAO,mBAAoB,SAAQ,IAAI,CAAC,WAAW,CACvD,qBAAqB,CAIrB;CAAG;AAEL,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAG3E;CAAG;AAEL,MAAM,OAAO,wBAAyB,SAAQ,IAAI,CAAC,WAAW,CAC5D,0BAA0B,CAI1B;CAAG;AAEL,MAAM,OAAO,gBAAiB,SAAQ,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAGvE;CAAG;AAEL,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAG3E;CAAG;AA4CL,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,OAAO,EAA6B,CACxE,eAAe,CAChB;CAAG;AAEJ,WAAiB,QAAQ;IACV,aAAI,GAAG,CAAC,OAAwB,EAAmB,EAAE,CAChE,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC,EAHgB,QAAQ,KAAR,QAAQ,QAGxB;AAmBD,MAAM,UAAU,GAAG,CAAC,GAAsB,EAAoB,EAAE,CAC9D,GAAG,IAAI,uBAAuB,CAAC;AAEjC,MAAM,SAAS,GAAG,CAAC,GAAsB,EAAU,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAE7E,MAAM,gBAAgB,GAAG,CACvB,GAAe,EACf,QAAoB,EACpB,GAAqB,EACT,EAAE,CACd,UAAU,CACR,IAAI,CAAC,GAAG,CACN,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAC9C,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CACxD,CACF,CAAC;AAEJ,MAAM,iBAAiB,GAAG,CACxB,KAAmB,EACa,EAAE;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEnC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAc;QAC/C,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,SAAoB,EAAE,MAAc,EAAgB,EAAE,CAC9E,GAAG,SAAS,IAAI,MAAM,EAAkB,CAAC;AAE3C,MAAM,iBAAiB,GAAG,CACxB,MAAqB,EACrB,GAAc,EACd,MAAc,EACd,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAE9C,MAAM,SAAS,GAAG,CAChB,GAAe,EACf,GAAe,EACf,GAAqB,EACZ,EAAE,CACX,GAAG,CAAC,SAAS,KAAK,SAAS;IAC3B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC;IACpC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AAE7E,MAAM,aAAa,GAAG,CACpB,GAAe,EACf,GAAe,EACf,GAAqB,EACZ,EAAE,CACX,GAAG,CAAC,UAAU,KAAK,SAAS;IAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC;IACnE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAErE,MAAM,aAAa,GAAG,CACpB,GAAe,EACf,KAAmB,EACJ,EAAE,CAAC,CAAC;IACnB,SAAS,EAAE,GAAG,CAAC,EAAE;IACjB,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,KAAK;IACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;IACtB,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;IAChF,MAAM,EAAE,GAAG,CAAC,MAAM;CACnB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,GAAe,EAAuB,EAAE,CAAC,CAAC;IAChE,SAAS,EAAE,GAAG,CAAC,EAAE;IACjB,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;IACtB,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;IAChF,MAAM,EAAE,GAAG,CAAC,MAAM;CACnB,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,GAAe,EAAoB,EAAE,CAAC,CAAC;IAC1D,SAAS,EAAE,GAAG,CAAC,EAAE;IACjB,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,QAAQ,EAAE,GAAG,CAAC,QAAQ;IACtB,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IACvE,SAAS,EAAE,GAAG,CAAC,SAAS;IACxB,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC;IAChF,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;CAClE,CAAC,CAAC;AAEH,MAAM,OAAO,GAAuC;IAClD,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,WAAW,GAAG,CAClB,IAAwB,EACxB,KAAyB,EACL,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAE1E,MAAM,SAAS,GAAG,CAChB,MAA4D,EAC5B,EAAE,CAClC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAEjD,MAAM,aAAa,GAAG,CACpB,OAAuC,EACvC,OAAuC,EACP,EAAE;IAClC,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAE1B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,GAAe,EAAU,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;AAE1C,MAAM,qBAAqB,GAAG,CAC5B,IAA2B,EAC3B,GAAe,EACf,GAAqB,EACQ,EAAE;IAC/B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAEhC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAC7B,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAC5B,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAC/D,CAAC;QAEF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CACvB,GAAe,EACf,KAAmB,EACD,EAAE,CAAC,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC;IACjC,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC;IACnC,KAAK,EAAE;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,EAAE;KAClB;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,YAAkC,EACjB,EAAE;IACnB,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,cAAc,GAAG,YAAY,CAAC,cAAc,IAAI,EAAE,CAAC;IACzD,MAAM,kBAAkB,GAAG,YAAY,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAEjE,OAAO,QAAQ,CAAC,IAAI,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAChD,KAAyB;YAEzB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBAChC,aAAa,EAAE,KAAK,CAAC,MAAM;gBAC3B,UAAU,EAAE,KAAK,CAAC,GAAG;gBACrB,gBAAgB,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM;aACnC,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,SAAS,CACzB,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,IAAI,CACzD,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,+BAA+B;gBACxC,KAAK;aACN,CAAC,CACL,CACF,CACF,CAAC;YACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM;iBACtC,WAAW,CAAC,kBAAkB,CAAC;iBAC/B,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,mCAAmC;gBAC5C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YACJ,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACzC,YAAY,CAAC,MAAM,EACnB,YAAY,CAAC,MAAM,EACnB,MAAM,CACP,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,+BAA+B;gBACxC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YACF,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAEvD,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC7B,MAAM,CAAC;gBACN,EAAE,EAAE,SAAS;gBACb,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU;gBACV,SAAS,EAAE,GAAG;gBACd,SAAS;gBACT,QAAQ,EAAE,GAAG;gBACb,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,yBAAyB;gBAClC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,OAAO;gBACL,SAAS;gBACT,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK;gBACL,QAAQ,EAAE,GAAG;gBACb,SAAS;gBACT,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;oBACnC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;gBAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;QACJ,CAAC,CAAC;QACF,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EACpD,KAAmB;YAEnB,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAExC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,2BAA2B,EAC3B,SAAS,CACV,CAAC;gBACF,OAAO,KAAK,CAAC,CAAC,IAAI,oBAAoB,CAAC;oBACrC,OAAO,EAAE,uBAAuB;iBACjC,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;YAEzE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC/C,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;iBAC1B,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,oBAAoB,CAAC;gBACvB,OAAO,EAAE,wBAAwB;gBACjC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC,CAAC,IAAI,oBAAoB,CAAC;oBACrC,OAAO,EAAE,mBAAmB;iBAC7B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC;YAE5B,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC,CAAC,IAAI,oBAAoB,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACzC,YAAY,CAAC,MAAM,EACnB,YAAY,CAAC,MAAM,EACnB,MAAM,CAAC,MAAM,CACd,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,oBAAoB,CAAC;gBACvB,OAAO,EAAE,+BAA+B;gBACxC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YACF,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAChD,YAAY,CAAC,MAAM,EACnB,UAAU,EACV,GAAG,CAAC,UAAU,CACf,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,oBAAoB,CAAC;gBACvB,OAAO,EAAE,kCAAkC;gBAC3C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC,CAAC,IAAI,oBAAoB,CAAC;oBACrC,OAAO,EAAE,uBAAuB;iBACjC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC;QACF,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAmB;YACvE,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAExC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,2BAA2B,EAC3B,SAAS,CACV,CAAC;gBACF,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC;oBACpC,OAAO,EAAE,uBAAuB;iBACjC,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;YAEzE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC/C,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;iBAC1B,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;gBACtB,OAAO,EAAE,wBAAwB;gBACjC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC;YAE5B,IAAI,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACzC,YAAY,CAAC,MAAM,EACnB,YAAY,CAAC,MAAM,EACnB,MAAM,CAAC,MAAM,CACd,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;gBACtB,OAAO,EAAE,+BAA+B;gBACxC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YACF,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAChD,YAAY,CAAC,MAAM,EACnB,UAAU,EACV,GAAG,CAAC,UAAU,CACf,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;gBACtB,OAAO,EAAE,kCAAkC;gBAC3C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC;oBACpC,OAAO,EAAE,uBAAuB;iBACjC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBAClC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;gBACnE,OAAO,aAAa,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC/C,OAAO,CAAC;gBACP,SAAS,EAAE,GAAG,CAAC,EAAE;gBACjB,SAAS,EAAE,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC;gBACnD,UAAU,EAAE,GAAG;aAChB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;gBACtB,OAAO,EAAE,2BAA2B;gBACpC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC1E,CAAC;YAED,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;YAElE,OAAO,aAAa,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAChD,KAAyB;YAEzB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM;iBACtC,WAAW,CAAC,kBAAkB,CAAC;iBAC/B,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,mCAAmC;gBAC5C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YACJ,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACzC,YAAY,CAAC,MAAM,EACnB,YAAY,CAAC,MAAM,EACnB,MAAM,CACP,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,+BAA+B;gBACxC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC7C,MAAM,CAAC;gBACN,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU;gBACV,SAAS,EAAE,GAAG;aACf,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,0BAA0B;gBACnC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,IAAI,kBAAkB,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,OAAO,aAAa,CAClB,OAAO,CAAC,KAAK,EACb,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAC1C,CAAC;QACJ,CAAC,CAAC;QACF,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC7D,KAA+B;YAE/B,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;YAEvE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC/C,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;iBACzB,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,wBAAwB,CAAC;gBAC3B,OAAO,EAAE,wBAAwB;gBACjC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC,CAAC,IAAI,wBAAwB,CAAC;oBACzC,OAAO,EAAE,mBAAmB;iBAC7B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC,CAAC,IAAI,wBAAwB,CAAC;oBACzC,OAAO,EAAE,iBAAiB;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC7C,YAAY,CAAC;gBACZ,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC/D,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBACtD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;gBACtD,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;oBACnC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;aAC5C,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,wBAAwB,CAAC;gBAC3B,OAAO,EAAE,iCAAiC;gBAC1C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,IAAI,wBAAwB,CAAC;oBACzC,OAAO,EAAE,mBAAmB;iBAC7B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC;QACF,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC5D,KAA8B;YAE9B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,gBAAgB,CAAC;gBACnB,OAAO,EAAE,8BAA8B;gBACvC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEF,OAAO,qBAAqB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/C,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAChD,KAAyB;YAEzB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YAErC,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC7B,MAAM,CAAC;gBACN,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,GAAG;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,0BAA0B;gBACnC,KAAK;aACN,CAAC,CACL,CACF,CAAC;QACN,CAAC,CAAC;QACF,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EAChE,KAAgC;YAEhC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC/C,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;iBACzB,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,mCAAmC;gBAC5C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxE,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YAErC,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC7B,MAAM,CAAC;gBACN,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,GAAG;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,0BAA0B;gBACnC,KAAK;aACN,CAAC,CACL,CACF,CAAC;QACN,CAAC,CAAC;QACF,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,kCAAkC,CAAC,CAAC,QAAQ,CAAC,EACvE,MAAc;YAEd,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YAErC,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC7B,gBAAgB,CAAC;gBAChB,MAAM;gBACN,SAAS,EAAE,GAAG;aACf,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,gCAAgC;gBACzC,KAAK;aACN,CAAC,CACL,CACF,CAAC;QACN,CAAC,CAAC;QACF,sBAAsB,EAAE,MAAM,CAAC,EAAE,CAC/B,yCAAyC,CAC1C,CAAC,QAAQ,CAAC,EAAE,KAAyC;YACpD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;iBAC1C,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBACpC,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,oCAAoC;gBAC7C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,IAAI,EACJ,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,eAAe,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;gBAC7D,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC;oBAC/B,SAAS,EAAE,GAAG,CAAC,EAAE;oBACjB,SAAS,EAAE,GAAG;oBACd,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC,EACR,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;gBACrB,OAAO,EAAE,gCAAgC;gBACzC,KAAK;aACN,CAAC,CACL,CACF,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAUF,MAAM,UAAU,YAAY,CAAC,OAAyB;IACpD,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAC3B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;QAC7B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;QACzC,MAAM,eAAe,GACnB,OAAO;YACN;gBACC,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC;gBAC9B,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO;aACV,CAAC;QAE/B,OAAO,YAAY,CAAC;YAClB,GAAG,eAAe;YAClB,MAAM;YACN,YAAY;SACb,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAA0B,EAK1B,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAEpD,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC;QAClD,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxD,aAAa,EAAE,GAAG;QAClB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/D,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,cAAc;KACvC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAYL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AAsBD,MAAM,CAAC,MAAM,2BAA2B,GAAiC;IACvE,IAAI,EAAE,gBAAgB;IACtB,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,KAAK;IACf,IAAI,EAAE,GAAG;CACV,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,UAAgC,EAAE,EACJ,EAAE;IAChC,MAAM,QAAQ,GAAG;QACf,GAAG,2BAA2B;QAC9B,GAAG,OAAO;KACX,CAAC;IAEF,IAAI,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,GAAG,QAAQ;YACX,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,QAA+B,EAAU,EAAE;IACtE,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,KAAe,EACf,OAAqC,EAC3B,EAAE;IACZ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,YAAY,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAEnC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,OAAqC,EACrC,KAAa,EACb,SAAsB,EACd,EAAE;IACV,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAE/D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,sBAAsB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,OAAqC,EAC7B,EAAE,CACV,sBAAsB,CACpB,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,EAAE,WAAW,EAAE,uCAAuC,CAAC,EAC1E,OAAO,CACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEf,MAAM,iBAAiB,GAAG,CACxB,MAAqB,EACrB,IAAY,EACsB,EAAE;IACpC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAEvC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;YACzC,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,kGAAkG;YAClG,OAAO,MAAM,CAAC,IAAI,CAChB,YAAY,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAC/D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAA8B,EACR,EAAE;IACxB,MAAM,QAAQ,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;IAEtD,OAAO,aAAa,CAAC,IAAI,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,CAAC,OAAgB,EAAE,EAAE,CAC/D,MAAM,CAAC,OAAO,CACZ,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,CAChE,CACF;QACD,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,CAAC,MAAqB,EAAE,EAAE,CACxE,MAAM,CAAC,OAAO,CACZ,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CACjE,CACF;QACD,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,GAAG,EAAE,CACjD,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CACtD,EAAE;KACJ,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAA8B,EAAE,EAAE,CAClE,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CACzB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,eAAe,GAAG,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,uBAAuB,CAAC,CAAC;IAEpE,OAAO,iBAAiB,CAAC,eAAe,CAAC,CAAC;AAC5C,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,OAAO,EAGhD,CAAC,qBAAqB,CAAC;CAAG;AAE7B,WAAiB,cAAc;IAChB,mBAAI,GAAG,CAAC,OAA4B,EAAuB,EAAE,CACxE,cAAc,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC,EAHgB,cAAc,KAAd,cAAc,QAG9B;AAED,MAAM,OAAO,YAAa,SAAQ,OAAO,CAAC,OAAO,EAG9C,CAAC,mBAAmB,CAAC;CAAG;AAE3B,WAAiB,YAAY;IACd,iBAAI,GAAG,CAAC,OAA0B,EAAqB,EAAE,CACpE,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,EAHgB,YAAY,KAAZ,YAAY,QAG5B"}

package/dist/StepUp.d.ts

@@ -0,0 +1,44 @@
+import { Duration, Effect } from "effect";
+import type { PolicyId } from "./Identifiers.js";
+import { AuthzError } from "./Policy.js";
+import { CurrentSession } from "./Sessions.js";
+import type { AuthAssuranceLevel, CurrentSessionShape, SessionRequirement } from "./Sessions.js";
+export type StepUpReason = "aal-too-low" | "auth-too-old" | "session-requirement-unsatisfied";
+export interface StepUpRequirement {
+    readonly aal?: AuthAssuranceLevel;
+    readonly maxAge?: Duration.Duration;
+    readonly noSessionRequirements?: readonly SessionRequirement[];
+}
+export interface StepUpFailureDetail {
+    readonly reason: StepUpReason;
+    readonly requiredAal?: AuthAssuranceLevel;
+    readonly currentAal?: AuthAssuranceLevel;
+    readonly maxAgeMillis?: number;
+    readonly authAgeMillis?: number;
+    readonly requirement?: SessionRequirement;
+}
+export type StepUpDecision = {
+    readonly _tag: "Satisfied";
+    readonly session: CurrentSessionShape;
+} | {
+    readonly _tag: "Required";
+    readonly session: CurrentSessionShape;
+    readonly failures: readonly StepUpFailureDetail[];
+};
+declare const StepUpRequired_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "StepUpRequired";
+} & Readonly<A>;
+export declare class StepUpRequired extends StepUpRequired_base<{
+    readonly failures: readonly StepUpFailureDetail[];
+    readonly session: CurrentSessionShape;
+}> {
+}
+export declare const aalAtLeast: (actual: AuthAssuranceLevel, minimum: AuthAssuranceLevel) => boolean;
+export declare const checkStepUp: (requirement: StepUpRequirement) => Effect.Effect<StepUpDecision, never, CurrentSession>;
+export declare const requireStepUp: (requirement: StepUpRequirement) => Effect.Effect<void, StepUpRequired, CurrentSession>;
+export declare const requireAal: (aal: AuthAssuranceLevel) => Effect.Effect<void, StepUpRequired, CurrentSession>;
+export declare const requireFresh: (maxAge: Duration.Duration) => Effect.Effect<void, StepUpRequired, CurrentSession>;
+export declare const requireNoSessionRequirements: (...requirements: readonly SessionRequirement[]) => Effect.Effect<void, StepUpRequired, CurrentSession>;
+export declare const toPolicy: (requirement: StepUpRequirement, policyId?: PolicyId) => Effect.Effect<void, AuthzError, CurrentSession>;
+export {};
+//# sourceMappingURL=StepUp.d.ts.map

package/dist/StepUp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StepUp.d.ts","sourceRoot":"","sources":["../src/StepUp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,YAAY,GACpB,aAAa,GACb,cAAc,GACd,iCAAiC,CAAC;AAEtC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;CAChE;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAC3C;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,GACrE;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACnD,CAAC;;;;AAEN,qBAAa,cAAe,SAAQ,oBAAmC;IACrE,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;CACvC,CAAC;CAAG;AAQL,eAAO,MAAM,UAAU,GACrB,QAAQ,kBAAkB,EAC1B,SAAS,kBAAkB,KAC1B,OAA8C,CAAC;AAgElD,eAAO,MAAM,WAAW,GACtB,aAAa,iBAAiB,KAC7B,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,cAAc,CA4BlD,CAAC;AAEL,eAAO,MAAM,aAAa,GACxB,aAAa,iBAAiB,KAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,cAAc,CAUlD,CAAC;AAEJ,eAAO,MAAM,UAAU,GACrB,KAAK,kBAAkB,KACtB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,cAAc,CAC7B,CAAC;AAEzB,eAAO,MAAM,YAAY,GACvB,QAAQ,QAAQ,CAAC,QAAQ,KACxB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,cAAc,CAC1B,CAAC;AAE5B,eAAO,MAAM,4BAA4B,GACvC,GAAG,cAAc,SAAS,kBAAkB,EAAE,KAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,cAAc,EAAE,cAAc,CACG,CAAC;AAEzD,eAAO,MAAM,QAAQ,GACnB,aAAa,iBAAiB,EAC9B,WAAW,QAAQ,KAClB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAU9C,CAAC"}