@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.13

package/dist/DomainVerification.js

@@ -0,0 +1,304 @@
+import { Brand, Context, Data, Duration, Effect, Layer, Option } from "effect";
+import { Crypto } from "./Crypto.js";
+import { addMillis, currentUnixMillis } from "./Internal.js";
+export const DomainVerificationId = Brand.nominal();
+export const DomainName = Brand.nominal();
+export const DomainVerificationProofToken = Brand.nominal();
+export const defaultDomainVerificationIdBytes = 16;
+export const defaultDomainVerificationTokenBytes = 32;
+export const defaultDomainVerificationTtl = Duration.days(7);
+export const domainVerificationDnsTxtLabel = "_effect-auth-domain-verification";
+export const domainVerificationDnsTxtValuePrefix = "effect-auth-domain-verification=";
+export const domainVerificationHttpPath = "/.well-known/effect-auth/domain-verification.txt";
+export const domainVerificationMetaName = "effect-auth-domain-verification";
+export class DomainVerificationError extends Data.TaggedError("DomainVerificationError") {
+}
+export class DomainVerificationProofCheckError extends Data.TaggedError("DomainVerificationProofCheckError") {
+}
+export class DomainVerificationProofChecker extends Context.Service()("auth/DomainVerificationProofChecker") {
+}
+(function (DomainVerificationProofChecker) {
+    DomainVerificationProofChecker.make = (service) => DomainVerificationProofChecker.of(service);
+})(DomainVerificationProofChecker || (DomainVerificationProofChecker = {}));
+export class DomainVerificationStoreError extends Data.TaggedError("DomainVerificationStoreError") {
+}
+export class DomainVerificationStore extends Context.Service()("auth/DomainVerificationStore") {
+}
+(function (DomainVerificationStore) {
+    DomainVerificationStore.make = (service) => DomainVerificationStore.of(service);
+})(DomainVerificationStore || (DomainVerificationStore = {}));
+export class DomainVerification extends Context.Service()("auth/DomainVerification") {
+}
+(function (DomainVerification) {
+    DomainVerification.make = (service) => DomainVerification.of(service);
+})(DomainVerification || (DomainVerification = {}));
+const cloneMetadata = (metadata) => metadata === undefined ? undefined : structuredClone(metadata);
+const cloneRecord = (record) => ({
+    ...record,
+    ...(record.metadata === undefined
+        ? {}
+        : { metadata: cloneMetadata(record.metadata) }),
+});
+const ownerDomainKey = (ownerId, domain) => `${ownerId}\u0000${domain}`;
+const isValidDomainLabel = (label) => label.length > 0 &&
+    label.length <= 63 &&
+    /^[a-z0-9-]+$/.test(label) &&
+    !label.startsWith("-") &&
+    !label.endsWith("-");
+export const normalizeDomainName = (value) => {
+    const normalized = value.trim().toLowerCase().replace(/\.+$/, "");
+    if (normalized.length === 0 || normalized.length > 253) {
+        return Option.none();
+    }
+    const labels = normalized.split(".");
+    if (labels.length < 2 || !labels.every(isValidDomainLabel)) {
+        return Option.none();
+    }
+    return Option.some(DomainName(normalized));
+};
+export const domainVerificationDnsTxtName = (domain) => `${domainVerificationDnsTxtLabel}.${domain}`;
+export const domainVerificationDnsTxtValue = (token) => `${domainVerificationDnsTxtValuePrefix}${token}`;
+export const makeDomainVerificationProof = (record) => {
+    switch (record.proofMethod) {
+        case "dns-txt": {
+            return {
+                method: "dns-txt",
+                token: record.proofToken,
+                name: domainVerificationDnsTxtName(record.domain),
+                value: domainVerificationDnsTxtValue(record.proofToken),
+            };
+        }
+        case "http-file": {
+            return {
+                method: "http-file",
+                token: record.proofToken,
+                path: domainVerificationHttpPath,
+                body: record.proofToken,
+            };
+        }
+        case "meta-tag": {
+            return {
+                method: "meta-tag",
+                token: record.proofToken,
+                name: domainVerificationMetaName,
+                content: record.proofToken,
+            };
+        }
+    }
+};
+const domainVerificationError = (operation, message, cause) => new DomainVerificationError({
+    operation,
+    message,
+    ...(cause === undefined ? {} : { cause }),
+});
+const parseDomain = (operation, value) => {
+    const normalized = normalizeDomainName(value);
+    return Option.isNone(normalized)
+        ? Effect.fail(domainVerificationError(operation, "Domain must be a valid lower-case DNS name; pass IDNs in punycode form"))
+        : Effect.succeed(normalized.value);
+};
+const activePending = (record, now) => record.status === "pending" && Number(record.expiresAt) > Number(now);
+const generateId = (dependencies) => dependencies.crypto
+    .randomToken(dependencies.idBytes ?? defaultDomainVerificationIdBytes)
+    .pipe(Effect.map(DomainVerificationId), Effect.mapError((cause) => domainVerificationError("start", "Failed to generate domain verification id", cause)));
+const generateToken = (dependencies) => dependencies.crypto
+    .randomToken(dependencies.tokenBytes ?? defaultDomainVerificationTokenBytes)
+    .pipe(Effect.map(DomainVerificationProofToken), Effect.mapError((cause) => domainVerificationError("start", "Failed to generate domain verification proof token", cause)));
+export const makeDomainVerificationStoreMemory = () => {
+    const recordsById = new Map();
+    const idsByOwnerDomain = new Map();
+    return DomainVerificationStore.make({
+        upsert: (record) => Effect.sync(() => {
+            const key = ownerDomainKey(record.ownerId, record.domain);
+            const existingId = idsByOwnerDomain.get(key);
+            if (existingId !== undefined && existingId !== record.id) {
+                recordsById.delete(existingId);
+            }
+            recordsById.set(record.id, cloneRecord(record));
+            idsByOwnerDomain.set(key, record.id);
+        }),
+        findById: (id) => Effect.sync(() => {
+            const record = recordsById.get(id);
+            return record === undefined ? Option.none() : Option.some(cloneRecord(record));
+        }),
+        findByOwnerAndDomain: (input) => Effect.sync(() => {
+            const id = idsByOwnerDomain.get(ownerDomainKey(input.ownerId, input.domain));
+            const record = id === undefined ? undefined : recordsById.get(id);
+            return record === undefined ? Option.none() : Option.some(cloneRecord(record));
+        }),
+        listByOwner: (input) => Effect.sync(() => [...recordsById.values()]
+            .filter((record) => record.ownerId === input.ownerId &&
+            (input.includeRevoked === true || record.status !== "revoked"))
+            .map(cloneRecord)),
+        markVerified: (input) => Effect.sync(() => {
+            const record = recordsById.get(input.id);
+            if (record === undefined || record.status === "revoked") {
+                return Option.none();
+            }
+            const updated = {
+                ...record,
+                status: "verified",
+                verifiedAt: input.verifiedAt,
+                lastCheckedAt: input.verifiedAt,
+                metadata: input.metadata ?? record.metadata,
+            };
+            recordsById.set(input.id, updated);
+            return Option.some(cloneRecord(updated));
+        }),
+        revoke: (input) => Effect.sync(() => {
+            const record = recordsById.get(input.id);
+            if (record !== undefined) {
+                recordsById.set(input.id, {
+                    ...record,
+                    status: "revoked",
+                    revokedAt: input.revokedAt,
+                    metadata: input.reason === undefined
+                        ? record.metadata
+                        : { ...record.metadata, revokeReason: input.reason },
+                });
+            }
+        }),
+    });
+};
+export const DomainVerificationStoreMemoryLive = Layer.sync(DomainVerificationStore)(makeDomainVerificationStoreMemory);
+export const makeDomainVerification = (dependencies) => DomainVerification.make({
+    start: Effect.fn("auth.domain_verification.start")(function* (input) {
+        const ownerId = input.ownerId.trim();
+        if (ownerId === "") {
+            return yield* domainVerificationError("start", "Owner id is required");
+        }
+        const domain = yield* parseDomain("start", input.domain);
+        const now = input.now ?? (yield* currentUnixMillis);
+        const existing = yield* dependencies.store
+            .findByOwnerAndDomain({ ownerId, domain })
+            .pipe(Effect.mapError((cause) => domainVerificationError("start", "Failed to load existing domain verification", cause)));
+        if (Option.isSome(existing)) {
+            if (existing.value.status === "verified") {
+                return yield* domainVerificationError("start", "Domain is already verified");
+            }
+            if (activePending(existing.value, now)) {
+                return {
+                    record: existing.value,
+                    proof: makeDomainVerificationProof(existing.value),
+                };
+            }
+        }
+        const ttl = input.ttl ?? dependencies.ttl ?? defaultDomainVerificationTtl;
+        const record = {
+            id: input.id ?? (yield* generateId(dependencies)),
+            ownerId,
+            domain,
+            proofMethod: input.method ?? "dns-txt",
+            proofToken: input.proofToken ?? (yield* generateToken(dependencies)),
+            status: "pending",
+            createdAt: now,
+            expiresAt: input.expiresAt ?? addMillis(now, Duration.toMillis(ttl)),
+            ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+        };
+        yield* dependencies.store.upsert(record).pipe(Effect.mapError((cause) => domainVerificationError("start", "Failed to store domain verification", cause)));
+        return {
+            record,
+            proof: makeDomainVerificationProof(record),
+        };
+    }),
+    verify: Effect.fn("auth.domain_verification.verify")(function* (input) {
+        const recordOption = yield* dependencies.store.findById(input.id).pipe(Effect.mapError((cause) => domainVerificationError("verify", "Failed to load domain verification", cause)));
+        if (Option.isNone(recordOption)) {
+            return yield* domainVerificationError("verify", "Domain verification not found");
+        }
+        const record = recordOption.value;
+        const proof = makeDomainVerificationProof(record);
+        const checkedAt = input.now ?? (yield* currentUnixMillis);
+        if (record.status === "verified") {
+            return {
+                verified: true,
+                record,
+                proof,
+                checkedAt,
+            };
+        }
+        if (record.status === "revoked") {
+            return yield* domainVerificationError("verify", "Domain verification is revoked");
+        }
+        if (Number(record.expiresAt) <= Number(checkedAt)) {
+            return yield* domainVerificationError("verify", "Domain verification has expired");
+        }
+        const check = yield* dependencies.proofChecker
+            .check({
+            domain: record.domain,
+            method: record.proofMethod,
+            proof,
+            ...(record.metadata === undefined ? {} : { metadata: record.metadata }),
+        })
+            .pipe(Effect.mapError((cause) => domainVerificationError("verify", "Failed to check domain proof", cause)));
+        if (!check.matched) {
+            return {
+                verified: false,
+                record,
+                proof,
+                checkedAt,
+                check,
+            };
+        }
+        const verified = yield* dependencies.store
+            .markVerified({
+            id: record.id,
+            verifiedAt: checkedAt,
+            ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+        })
+            .pipe(Effect.mapError((cause) => domainVerificationError("verify", "Failed to mark domain as verified", cause)));
+        if (Option.isNone(verified)) {
+            return yield* domainVerificationError("verify", "Domain verification not found");
+        }
+        return {
+            verified: true,
+            record: verified.value,
+            proof,
+            checkedAt,
+            check,
+        };
+    }),
+    listByOwner: Effect.fn("auth.domain_verification.list")(function* (input) {
+        return yield* dependencies.store.listByOwner(input).pipe(Effect.mapError((cause) => domainVerificationError("list", "Failed to list domain verifications", cause)));
+    }),
+    revoke: Effect.fn("auth.domain_verification.revoke")(function* (input) {
+        const ownerId = input.ownerId.trim();
+        if (ownerId === "") {
+            return yield* domainVerificationError("revoke", "Owner id is required");
+        }
+        const domain = yield* parseDomain("revoke", input.domain);
+        const record = yield* dependencies.store
+            .findByOwnerAndDomain({ ownerId, domain })
+            .pipe(Effect.mapError((cause) => domainVerificationError("revoke", "Failed to load domain verification", cause)));
+        if (Option.isNone(record)) {
+            return yield* domainVerificationError("revoke", "Domain verification not found");
+        }
+        if (record.value.status === "revoked") {
+            return;
+        }
+        const revokedAt = input.revokedAt ?? (yield* currentUnixMillis);
+        yield* dependencies.store
+            .revoke({
+            id: record.value.id,
+            revokedAt,
+            ...(input.reason === undefined ? {} : { reason: input.reason }),
+        })
+            .pipe(Effect.mapError((cause) => domainVerificationError("revoke", "Failed to revoke domain verification", cause)));
+    }),
+});
+export const DomainVerificationLive = (options) => Layer.effect(DomainVerification)(Effect.gen(function* () {
+    const crypto = yield* Crypto;
+    const store = yield* DomainVerificationStore;
+    const proofChecker = yield* DomainVerificationProofChecker;
+    return makeDomainVerification({
+        crypto,
+        store,
+        proofChecker,
+        ...options,
+    });
+}));
+export const startDomainVerification = (input) => Effect.flatMap(DomainVerification, (service) => service.start(input));
+export const verifyDomainVerification = (input) => Effect.flatMap(DomainVerification, (service) => service.verify(input));
+export const listDomainVerificationsByOwner = (input) => Effect.flatMap(DomainVerification, (service) => service.listByOwner(input));
+export const revokeDomainVerification = (input) => Effect.flatMap(DomainVerification, (service) => service.revoke(input));
+//# sourceMappingURL=DomainVerification.js.map

package/dist/DomainVerification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DomainVerification.js","sourceRoot":"","sources":["../src/DomainVerification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAG/E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAM7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,EAAwB,CAAC;AAG1E,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,EAAc,CAAC;AAMtD,MAAM,CAAC,MAAM,4BAA4B,GACvC,KAAK,CAAC,OAAO,EAAgC,CAAC;AAMhD,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AACnD,MAAM,CAAC,MAAM,mCAAmC,GAAG,EAAE,CAAC;AACtD,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7D,MAAM,CAAC,MAAM,6BAA6B,GAAG,kCAAkC,CAAC;AAChF,MAAM,CAAC,MAAM,mCAAmC,GAC9C,kCAAkC,CAAC;AACrC,MAAM,CAAC,MAAM,0BAA0B,GACrC,kDAAkD,CAAC;AACrD,MAAM,CAAC,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AAkF5E,MAAM,OAAO,uBAAwB,SAAQ,IAAI,CAAC,WAAW,CAC3D,yBAAyB,CAKzB;CAAG;AAgBL,MAAM,OAAO,iCAAkC,SAAQ,IAAI,CAAC,WAAW,CACrE,mCAAmC,CAKnC;CAAG;AAWL,MAAM,OAAO,8BAA+B,SAAQ,OAAO,CAAC,OAAO,EAGhE,CAAC,qCAAqC,CAAC;CAAG;AAE7C,WAAiB,8BAA8B;IAChC,mCAAI,GAAG,CAClB,OAA8C,EACP,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACzF,CAAC,EAJgB,8BAA8B,KAA9B,8BAA8B,QAI9C;AA0BD,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,8BAA8B,CAK9B;CAAG;AAgCL,MAAM,OAAO,uBAAwB,SAAQ,OAAO,CAAC,OAAO,EAGzD,CAAC,8BAA8B,CAAC;CAAG;AAEtC,WAAiB,uBAAuB;IACzB,4BAAI,GAAG,CAClB,OAAuC,EACP,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC,EAJgB,uBAAuB,KAAvB,uBAAuB,QAIvC;AAiBD,MAAM,OAAO,kBAAmB,SAAQ,OAAO,CAAC,OAAO,EAGpD,CAAC,yBAAyB,CAAC;CAAG;AAEjC,WAAiB,kBAAkB;IACpB,uBAAI,GAAG,CAClB,OAAkC,EACP,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC,EAJgB,kBAAkB,KAAlB,kBAAkB,QAIlC;AAcD,MAAM,aAAa,GAAG,CACpB,QAAuB,EACR,EAAE,CACjB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,eAAe,CAAC,QAAQ,CAAO,CAAC;AAExE,MAAM,WAAW,GAAG,CAAC,MAAgC,EAA4B,EAAE,CAAC,CAAC;IACnF,GAAG,MAAM;IACT,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,MAAkB,EAAU,EAAE,CACrE,GAAG,OAAO,SAAS,MAAM,EAAE,CAAC;AAE9B,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAW,EAAE,CACpD,KAAK,CAAC,MAAM,GAAG,CAAC;IAChB,KAAK,CAAC,MAAM,IAAI,EAAE;IAClB,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;IAC1B,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;IACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAEvB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAa,EACmB,EAAE;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAElE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC3D,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,MAAkB,EAAU,EAAE,CACzE,GAAG,6BAA6B,IAAI,MAAM,EAAE,CAAC;AAE/C,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,KAAmC,EAC3B,EAAE,CAAC,GAAG,mCAAmC,GAAG,KAAK,EAAE,CAAC;AAE9D,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,MAA+E,EACtD,EAAE;IAC3B,QAAQ,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3B,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,OAAO;gBACL,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,MAAM,CAAC,UAAU;gBACxB,IAAI,EAAE,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC;gBACjD,KAAK,EAAE,6BAA6B,CAAC,MAAM,CAAC,UAAU,CAAC;aACxD,CAAC;QACJ,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,OAAO;gBACL,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,MAAM,CAAC,UAAU;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,IAAI,EAAE,MAAM,CAAC,UAAU;aACxB,CAAC;QACJ,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,MAAM,CAAC,UAAU;gBACxB,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,MAAM,CAAC,UAAU;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAC9B,SAAsC,EACtC,OAAe,EACf,KAAe,EACU,EAAE,CAC3B,IAAI,uBAAuB,CAAC;IAC1B,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAClB,SAAsC,EACtC,KAA0B,EAC0B,EAAE;IACtD,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAE9C,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,uBAAuB,CACrB,SAAS,EACT,wEAAwE,CACzE,CACF;QACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,MAAgC,EAChC,GAAe,EACN,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AAEpF,MAAM,UAAU,GAAG,CACjB,YAA4C,EACkB,EAAE,CAChE,YAAY,CAAC,MAAM;KAChB,WAAW,CAAC,YAAY,CAAC,OAAO,IAAI,gCAAgC,CAAC;KACrE,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CAAC,OAAO,EAAE,2CAA2C,EAAE,KAAK,CAAC,CACrF,CACF,CAAC;AAEN,MAAM,aAAa,GAAG,CACpB,YAA4C,EAC0B,EAAE,CACxE,YAAY,CAAC,MAAM;KAChB,WAAW,CAAC,YAAY,CAAC,UAAU,IAAI,mCAAmC,CAAC;KAC3E,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,EACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CACrB,OAAO,EACP,oDAAoD,EACpD,KAAK,CACN,CACF,CACF,CAAC;AAEN,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAmC,EAAE;IACpF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkD,CAAC;IAC9E,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAgC,CAAC;IAEjE,OAAO,uBAAuB,CAAC,IAAI,CAAC;QAClC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAE7C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC;gBACzD,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACjC,CAAC;YAED,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAChD,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC;QACJ,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEnC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC;QACJ,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAElE,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC;QACJ,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACf,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC;aACtB,MAAM,CACL,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAChC,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CACjE;aACA,GAAG,CAAC,WAAW,CAAC,CACpB;QACH,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CACtB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAEzC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACxD,OAAO,MAAM,CAAC,IAAI,EAA4B,CAAC;YACjD,CAAC;YAED,MAAM,OAAO,GAAG;gBACd,GAAG,MAAM;gBACT,MAAM,EAAE,UAAmB;gBAC3B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,aAAa,EAAE,KAAK,CAAC,UAAU;gBAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;aACT,CAAC;YAErC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAEnC,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAEzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE;oBACxB,GAAG,MAAM;oBACT,MAAM,EAAE,SAAS;oBACjB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,QAAQ,EACN,KAAK,CAAC,MAAM,KAAK,SAAS;wBACxB,CAAC,CAAC,MAAM,CAAC,QAAQ;wBACjB,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;iBACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,KAAK,CAAC,IAAI,CACzD,uBAAuB,CACxB,CAAC,iCAAiC,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,YAA4C,EACjB,EAAE,CAC7B,kBAAkB,CAAC,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACjE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAErC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK;aACvC,oBAAoB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;aACzC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CACrB,OAAO,EACP,6CAA6C,EAC7C,KAAK,CACN,CACF,CACF,CAAC;QAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;YAC/E,CAAC;YAED,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;gBACvC,OAAO;oBACL,MAAM,EAAE,QAAQ,CAAC,KAAK;oBACtB,KAAK,EAAE,2BAA2B,CAAC,QAAQ,CAAC,KAAK,CAAC;iBACf,CAAC;YACxC,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,IAAI,4BAA4B,CAAC;QAC1E,MAAM,MAAM,GAAG;YACb,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACjD,OAAO;YACP,MAAM;YACN,WAAW,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS;YACtC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;YACpE,MAAM,EAAE,SAAkB;YAC1B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACpE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACnC,CAAC;QAErC,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CAAC,OAAO,EAAE,qCAAqC,EAAE,KAAK,CAAC,CAC/E,CACF,CAAC;QAEF,OAAO;YACL,MAAM;YACN,KAAK,EAAE,2BAA2B,CAAC,MAAM,CAAC;SACP,CAAC;IACxC,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACnE,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CAAC,QAAQ,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAC/E,CACF,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC;QAClC,MAAM,KAAK,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAE1D,IAAI,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACjC,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,MAAM;gBACN,KAAK;gBACL,SAAS;aAC+B,CAAC;QAC7C,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY;aAC3C,KAAK,CAAC;YACL,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,MAAM,EAAE,MAAM,CAAC,WAAW;YAC1B,KAAK;YACL,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;SACxE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CAAC,QAAQ,EAAE,8BAA8B,EAAE,KAAK,CAAC,CACzE,CACF,CAAC;QAEJ,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM;gBACN,KAAK;gBACL,SAAS;gBACT,KAAK;aACmC,CAAC;QAC7C,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK;aACvC,YAAY,CAAC;YACZ,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,SAAS;YACrB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACtE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CACrB,QAAQ,EACR,mCAAmC,EACnC,KAAK,CACN,CACF,CACF,CAAC;QAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;QACnF,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,QAAQ,CAAC,KAAK;YACtB,KAAK;YACL,SAAS;YACT,KAAK;SACmC,CAAC;IAC7C,CAAC,CAAC;IACF,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACtE,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CAAC,MAAM,EAAE,qCAAqC,EAAE,KAAK,CAAC,CAC9E,CACF,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACnE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAErC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK;aACrC,oBAAoB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;aACzC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CAAC,QAAQ,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAC/E,CACF,CAAC;QAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC,CAAC,uBAAuB,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEhE,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK;aACtB,MAAM,CAAC;YACN,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;YACnB,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAChE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,uBAAuB,CAAC,QAAQ,EAAE,sCAAsC,EAAE,KAAK,CAAC,CACjF,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAmC,EAAE,EAAE,CAC5E,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAC9B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,8BAA8B,CAAC;IAE3D,OAAO,sBAAsB,CAAC;QAC5B,MAAM;QACN,KAAK;QACL,YAAY;QACZ,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,KAAmC,EAAE,EAAE,CAC7E,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAoC,EAAE,EAAE,CAC/E,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAEzE,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,KAAkC,EAClC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAoC,EAAE,EAAE,CAC/E,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC"}