@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +790 -73
- package/dist/ApiKey.d.ts +207 -0
- package/dist/ApiKey.d.ts.map +1 -0
- package/dist/ApiKey.js +275 -0
- package/dist/ApiKey.js.map +1 -0
- package/dist/AuditLog.d.ts +335 -1
- package/dist/AuditLog.d.ts.map +1 -1
- package/dist/AuditLog.js +318 -1
- package/dist/AuditLog.js.map +1 -1
- package/dist/AuthConfig.d.ts +42 -0
- package/dist/AuthConfig.d.ts.map +1 -0
- package/dist/AuthConfig.js +43 -0
- package/dist/AuthConfig.js.map +1 -0
- package/dist/AuthFlow.d.ts +462 -36
- package/dist/AuthFlow.d.ts.map +1 -1
- package/dist/AuthFlow.js +657 -5
- package/dist/AuthFlow.js.map +1 -1
- package/dist/AuthKernel.d.ts +3 -0
- package/dist/AuthKernel.d.ts.map +1 -0
- package/dist/AuthKernel.js +9 -0
- package/dist/AuthKernel.js.map +1 -0
- package/dist/Challenge.d.ts +24 -4
- package/dist/Challenge.d.ts.map +1 -1
- package/dist/Challenge.js +167 -1
- package/dist/Challenge.js.map +1 -1
- package/dist/Client.d.ts +449 -0
- package/dist/Client.d.ts.map +1 -0
- package/dist/Client.js +985 -0
- package/dist/Client.js.map +1 -0
- package/dist/Crypto.d.ts +6 -1
- package/dist/Crypto.d.ts.map +1 -1
- package/dist/Crypto.js +62 -1
- package/dist/Crypto.js.map +1 -1
- package/dist/DomainVerification.d.ts +200 -0
- package/dist/DomainVerification.d.ts.map +1 -0
- package/dist/DomainVerification.js +304 -0
- package/dist/DomainVerification.js.map +1 -0
- package/dist/EffectQbSqliteStorage.d.ts +985 -0
- package/dist/EffectQbSqliteStorage.d.ts.map +1 -0
- package/dist/EffectQbSqliteStorage.js +2824 -0
- package/dist/EffectQbSqliteStorage.js.map +1 -0
- package/dist/EmailOtp.d.ts +120 -0
- package/dist/EmailOtp.d.ts.map +1 -0
- package/dist/EmailOtp.js +286 -0
- package/dist/EmailOtp.js.map +1 -0
- package/dist/EmailVerification.d.ts +121 -0
- package/dist/EmailVerification.d.ts.map +1 -0
- package/dist/EmailVerification.js +200 -0
- package/dist/EmailVerification.js.map +1 -0
- package/dist/HttpApi/Api.d.ts +2410 -0
- package/dist/HttpApi/Api.d.ts.map +1 -0
- package/dist/HttpApi/Api.js +3026 -0
- package/dist/HttpApi/Api.js.map +1 -0
- package/dist/HttpApi/Endpoints.d.ts +1073 -0
- package/dist/HttpApi/Endpoints.d.ts.map +1 -0
- package/dist/HttpApi/Endpoints.js +428 -0
- package/dist/HttpApi/Endpoints.js.map +1 -0
- package/dist/HttpApi/Errors.d.ts +114 -0
- package/dist/HttpApi/Errors.d.ts.map +1 -0
- package/dist/HttpApi/Errors.js +230 -0
- package/dist/HttpApi/Errors.js.map +1 -0
- package/dist/HttpApi/Schemas.d.ts +1254 -0
- package/dist/HttpApi/Schemas.d.ts.map +1 -0
- package/dist/HttpApi/Schemas.js +862 -0
- package/dist/HttpApi/Schemas.js.map +1 -0
- package/dist/HttpApi/Security.d.ts +159 -0
- package/dist/HttpApi/Security.d.ts.map +1 -0
- package/dist/HttpApi/Security.js +530 -0
- package/dist/HttpApi/Security.js.map +1 -0
- package/dist/HttpApi/Transport.d.ts +65 -0
- package/dist/HttpApi/Transport.d.ts.map +1 -0
- package/dist/HttpApi/Transport.js +311 -0
- package/dist/HttpApi/Transport.js.map +1 -0
- package/dist/HttpApi/index.d.ts +8 -0
- package/dist/HttpApi/index.d.ts.map +1 -0
- package/dist/HttpApi/index.js +7 -0
- package/dist/HttpApi/index.js.map +1 -0
- package/dist/HttpApi.d.ts +2 -0
- package/dist/HttpApi.d.ts.map +1 -0
- package/dist/HttpApi.js +2 -0
- package/dist/HttpApi.js.map +1 -0
- package/dist/Identifiers.d.ts +3 -0
- package/dist/Identifiers.d.ts.map +1 -1
- package/dist/Identifiers.js +2 -0
- package/dist/Identifiers.js.map +1 -1
- package/dist/IncidentAction.d.ts +80 -0
- package/dist/IncidentAction.d.ts.map +1 -0
- package/dist/IncidentAction.js +158 -0
- package/dist/IncidentAction.js.map +1 -0
- package/dist/Internal.d.ts +7 -0
- package/dist/Internal.d.ts.map +1 -0
- package/dist/Internal.js +12 -0
- package/dist/Internal.js.map +1 -0
- package/dist/Jwt.d.ts +281 -0
- package/dist/Jwt.d.ts.map +1 -0
- package/dist/Jwt.js +721 -0
- package/dist/Jwt.js.map +1 -0
- package/dist/LoginApproval.d.ts +314 -0
- package/dist/LoginApproval.d.ts.map +1 -0
- package/dist/LoginApproval.js +551 -0
- package/dist/LoginApproval.js.map +1 -0
- package/dist/LoginNotification.d.ts +183 -0
- package/dist/LoginNotification.d.ts.map +1 -0
- package/dist/LoginNotification.js +329 -0
- package/dist/LoginNotification.js.map +1 -0
- package/dist/LoginRisk.d.ts +344 -0
- package/dist/LoginRisk.d.ts.map +1 -0
- package/dist/LoginRisk.js +484 -0
- package/dist/LoginRisk.js.map +1 -0
- package/dist/MachineAuth.d.ts +73 -0
- package/dist/MachineAuth.d.ts.map +1 -0
- package/dist/MachineAuth.js +147 -0
- package/dist/MachineAuth.js.map +1 -0
- package/dist/MagicLink.d.ts +85 -0
- package/dist/MagicLink.d.ts.map +1 -0
- package/dist/MagicLink.js +206 -0
- package/dist/MagicLink.js.map +1 -0
- package/dist/Mailer.d.ts +147 -0
- package/dist/Mailer.d.ts.map +1 -0
- package/dist/Mailer.js +208 -0
- package/dist/Mailer.js.map +1 -0
- package/dist/OAuth.d.ts +1890 -0
- package/dist/OAuth.d.ts.map +1 -0
- package/dist/OAuth.js +3063 -0
- package/dist/OAuth.js.map +1 -0
- package/dist/Passkey.d.ts +334 -0
- package/dist/Passkey.d.ts.map +1 -0
- package/dist/Passkey.js +422 -0
- package/dist/Passkey.js.map +1 -0
- package/dist/PasskeySimpleWebAuthn.d.ts +11 -0
- package/dist/PasskeySimpleWebAuthn.d.ts.map +1 -0
- package/dist/PasskeySimpleWebAuthn.js +181 -0
- package/dist/PasskeySimpleWebAuthn.js.map +1 -0
- package/dist/Password.d.ts +237 -0
- package/dist/Password.d.ts.map +1 -0
- package/dist/Password.js +641 -0
- package/dist/Password.js.map +1 -0
- package/dist/Policy.d.ts +7 -4
- package/dist/Policy.d.ts.map +1 -1
- package/dist/Policy.js +28 -5
- package/dist/Policy.js.map +1 -1
- package/dist/Privacy.d.ts +15 -0
- package/dist/Privacy.d.ts.map +1 -1
- package/dist/Privacy.js +58 -1
- package/dist/Privacy.js.map +1 -1
- package/dist/RateLimiter.d.ts +104 -0
- package/dist/RateLimiter.d.ts.map +1 -0
- package/dist/RateLimiter.js +118 -0
- package/dist/RateLimiter.js.map +1 -0
- package/dist/RecoveryCode.d.ts +169 -0
- package/dist/RecoveryCode.d.ts.map +1 -0
- package/dist/RecoveryCode.js +299 -0
- package/dist/RecoveryCode.js.map +1 -0
- package/dist/RefreshToken.d.ts +222 -0
- package/dist/RefreshToken.d.ts.map +1 -0
- package/dist/RefreshToken.js +342 -0
- package/dist/RefreshToken.js.map +1 -0
- package/dist/Retention.d.ts +98 -0
- package/dist/Retention.d.ts.map +1 -0
- package/dist/Retention.js +204 -0
- package/dist/Retention.js.map +1 -0
- package/dist/SecurityTimeline.d.ts +78 -0
- package/dist/SecurityTimeline.d.ts.map +1 -0
- package/dist/SecurityTimeline.js +461 -0
- package/dist/SecurityTimeline.js.map +1 -0
- package/dist/Sessions.d.ts +123 -11
- package/dist/Sessions.d.ts.map +1 -1
- package/dist/Sessions.js +534 -1
- package/dist/Sessions.js.map +1 -1
- package/dist/StepUp.d.ts +44 -0
- package/dist/StepUp.d.ts.map +1 -0
- package/dist/StepUp.js +82 -0
- package/dist/StepUp.js.map +1 -0
- package/dist/Storage.d.ts +73 -5
- package/dist/Storage.d.ts.map +1 -1
- package/dist/Storage.js +11 -1
- package/dist/Storage.js.map +1 -1
- package/dist/StorageMigrations.d.ts +23 -1
- package/dist/StorageMigrations.d.ts.map +1 -1
- package/dist/StorageMigrations.js +462 -2
- package/dist/StorageMigrations.js.map +1 -1
- package/dist/Testing.d.ts +9 -1
- package/dist/Testing.d.ts.map +1 -1
- package/dist/Testing.js +30 -2
- package/dist/Testing.js.map +1 -1
- package/dist/Totp.d.ts +220 -0
- package/dist/Totp.d.ts.map +1 -0
- package/dist/Totp.js +477 -0
- package/dist/Totp.js.map +1 -0
- package/dist/TrustedDevice.d.ts +127 -0
- package/dist/TrustedDevice.d.ts.map +1 -0
- package/dist/TrustedDevice.js +252 -0
- package/dist/TrustedDevice.js.map +1 -0
- package/dist/WaitUntil.d.ts.map +1 -1
- package/dist/WaitUntil.js +1 -1
- package/dist/WaitUntil.js.map +1 -1
- package/dist/Webhook.d.ts +380 -0
- package/dist/Webhook.d.ts.map +1 -0
- package/dist/Webhook.js +592 -0
- package/dist/Webhook.js.map +1 -0
- package/dist/alchemy/cloudflare/Email.d.ts +25 -0
- package/dist/alchemy/cloudflare/Email.d.ts.map +1 -0
- package/dist/alchemy/cloudflare/Email.js +117 -0
- package/dist/alchemy/cloudflare/Email.js.map +1 -0
- package/dist/alchemy/cloudflare/RateLimitDurableObject.d.ts +34 -0
- package/dist/alchemy/cloudflare/RateLimitDurableObject.d.ts.map +1 -0
- package/dist/alchemy/cloudflare/RateLimitDurableObject.js +30 -0
- package/dist/alchemy/cloudflare/RateLimitDurableObject.js.map +1 -0
- package/dist/cloudflare/Email.d.ts +25 -0
- package/dist/cloudflare/Email.d.ts.map +1 -0
- package/dist/cloudflare/Email.js +153 -0
- package/dist/cloudflare/Email.js.map +1 -0
- package/dist/cloudflare/RateLimitDurableObject.d.ts +50 -0
- package/dist/cloudflare/RateLimitDurableObject.d.ts.map +1 -0
- package/dist/cloudflare/RateLimitDurableObject.js +51 -0
- package/dist/cloudflare/RateLimitDurableObject.js.map +1 -0
- package/dist/index.d.ts +25 -0
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +25 -0
- package/dist/index.js.map +1 -1
- package/dist/internal/RateLimitDurableObject.d.ts +32 -0
- package/dist/internal/RateLimitDurableObject.d.ts.map +1 -0
- package/dist/internal/RateLimitDurableObject.js +80 -0
- package/dist/internal/RateLimitDurableObject.js.map +1 -0
- package/migrations/0002_auth_password.sql +25 -0
- package/migrations/0003_auth_login_approval_review.sql +22 -0
- package/migrations/0004_auth_trusted_device.sql +12 -0
- package/migrations/0005_auth_passkey.sql +17 -0
- package/migrations/0006_auth_totp_factor.sql +17 -0
- package/migrations/0007_auth_recovery_code.sql +13 -0
- package/migrations/0008_auth_api_key.sql +17 -0
- package/migrations/0009_auth_refresh_token.sql +21 -0
- package/migrations/0010_auth_jwt_revocation.sql +8 -0
- package/migrations/0011_auth_oauth_account.sql +16 -0
- package/migrations/0012_auth_oauth_provider_token_vault.sql +20 -0
- package/migrations/0013_auth_security_timeline.sql +16 -0
- package/migrations/0014_auth_webhook_outbox.sql +16 -0
- package/migrations/0015_auth_webhook_replay.sql +7 -0
- package/migrations/0016_auth_login_risk_history.sql +23 -0
- package/migrations/0017_auth_audit_log.sql +17 -0
- package/migrations/0018_auth_domain_verification.sql +18 -0
- package/migrations/0019_auth_oauth_authorization_code.sql +17 -0
- package/migrations/0020_auth_oauth_provider_mode_token.sql +24 -0
- package/migrations/0021_auth_oauth_client_secret.sql +14 -0
- package/migrations/0022_auth_oauth_client.sql +15 -0
- package/migrations/0023_auth_oauth_consent.sql +15 -0
- package/package.json +162 -26
- package/dist/D1Kysely.d.ts +0 -40
- package/dist/D1Kysely.d.ts.map +0 -1
- package/dist/D1Kysely.js +0 -75
- package/dist/D1Kysely.js.map +0 -1
- package/dist/KyselyStorage.d.ts +0 -41
- package/dist/KyselyStorage.d.ts.map +0 -1
- package/dist/KyselyStorage.js +0 -176
- package/dist/KyselyStorage.js.map +0 -1
|
@@ -0,0 +1,461 @@
|
|
|
1
|
+
import { Brand, Context, Data, Effect, Layer, Option } from "effect";
|
|
2
|
+
import { AuditLog, AuditLogError } from "./AuditLog.js";
|
|
3
|
+
export const SecurityTimelineEventId = Brand.nominal();
|
|
4
|
+
export class SecurityTimelineStoreError extends Data.TaggedError("SecurityTimelineStoreError") {
|
|
5
|
+
}
|
|
6
|
+
export class SecurityTimelineStore extends Context.Service()("auth/SecurityTimelineStore") {
|
|
7
|
+
}
|
|
8
|
+
(function (SecurityTimelineStore) {
|
|
9
|
+
SecurityTimelineStore.make = (service) => SecurityTimelineStore.of(service);
|
|
10
|
+
})(SecurityTimelineStore || (SecurityTimelineStore = {}));
|
|
11
|
+
const clone = (value) => structuredClone(value);
|
|
12
|
+
const omitUndefined = (record) => Object.fromEntries(Object.entries(record).filter(([, value]) => value !== undefined));
|
|
13
|
+
const eventIdFromAudit = (event, options) => options.id ??
|
|
14
|
+
(event.id === undefined ? undefined : SecurityTimelineEventId(event.id));
|
|
15
|
+
const actorUserId = (actor) => actor.type === "user" ? actor.userId : undefined;
|
|
16
|
+
const subjectUserId = (subject) => subject.type === "user" ? subject.userId : undefined;
|
|
17
|
+
const challengeId = (id) => id;
|
|
18
|
+
const credentialId = (id) => id;
|
|
19
|
+
const sessionId = (id) => id;
|
|
20
|
+
const oauthAccountId = (id) => id;
|
|
21
|
+
const oauthProviderId = (id) => id;
|
|
22
|
+
const passkeyCredentialId = (id) => id;
|
|
23
|
+
const policyId = (id) => id;
|
|
24
|
+
const apiKeyId = (id) => id;
|
|
25
|
+
const refreshTokenId = (id) => id;
|
|
26
|
+
const refreshTokenFamilyId = (id) => id;
|
|
27
|
+
const baseEvent = (event, options, userId, category, severity, summary, metadata, actor, request) => {
|
|
28
|
+
const id = eventIdFromAudit(event, options);
|
|
29
|
+
if (id === undefined) {
|
|
30
|
+
return Option.none();
|
|
31
|
+
}
|
|
32
|
+
return Option.some(omitUndefined({
|
|
33
|
+
id,
|
|
34
|
+
userId,
|
|
35
|
+
type: event.type,
|
|
36
|
+
category,
|
|
37
|
+
severity,
|
|
38
|
+
occurredAt: event.occurredAt,
|
|
39
|
+
summary,
|
|
40
|
+
actor,
|
|
41
|
+
request,
|
|
42
|
+
metadata,
|
|
43
|
+
}));
|
|
44
|
+
};
|
|
45
|
+
const authTimelineAuditEventTypes = new Set([
|
|
46
|
+
"auth.login.failed",
|
|
47
|
+
"auth.login.succeeded",
|
|
48
|
+
"auth.policy.denied",
|
|
49
|
+
"auth.session.revoked",
|
|
50
|
+
]);
|
|
51
|
+
const riskTimelineAuditEventTypes = new Set([
|
|
52
|
+
"auth.risk.assessed",
|
|
53
|
+
]);
|
|
54
|
+
const oauthTimelineAuditEventTypes = new Set([
|
|
55
|
+
"auth.oauth.account.linked",
|
|
56
|
+
"auth.oauth.account.unlinked",
|
|
57
|
+
"auth.oauth.link_confirmation.confirmed",
|
|
58
|
+
"auth.oauth.link_confirmation.started",
|
|
59
|
+
"auth.oauth.provider_token.refreshed",
|
|
60
|
+
"auth.oauth.provider_token.revoked",
|
|
61
|
+
]);
|
|
62
|
+
const mfaTimelineAuditEventTypes = new Set([
|
|
63
|
+
"auth.passkey.credential.revoked",
|
|
64
|
+
"auth.recovery_code.generated",
|
|
65
|
+
"auth.recovery_code.revoked",
|
|
66
|
+
"auth.recovery_code.verified",
|
|
67
|
+
"auth.totp.enrollment.started",
|
|
68
|
+
"auth.totp.factor.confirmed",
|
|
69
|
+
"auth.totp.factor.revoked",
|
|
70
|
+
"auth.totp.factor.verified",
|
|
71
|
+
]);
|
|
72
|
+
const apiKeyTimelineAuditEventTypes = new Set([
|
|
73
|
+
"auth.api_key.created",
|
|
74
|
+
"auth.api_key.revoked",
|
|
75
|
+
"auth.api_key.verification_failed",
|
|
76
|
+
"auth.api_key.verified",
|
|
77
|
+
]);
|
|
78
|
+
const refreshTokenTimelineAuditEventTypes = new Set([
|
|
79
|
+
"auth.refresh_token.issued",
|
|
80
|
+
"auth.refresh_token.reuse_detected",
|
|
81
|
+
"auth.refresh_token.revoked",
|
|
82
|
+
"auth.refresh_token.rotated",
|
|
83
|
+
]);
|
|
84
|
+
const incidentTimelineAuditEventTypes = new Set(["auth.incident_action.executed"]);
|
|
85
|
+
const jwtTimelineAuditEventTypes = new Set([
|
|
86
|
+
"auth.jwt.introspected",
|
|
87
|
+
"auth.jwt.revoked",
|
|
88
|
+
]);
|
|
89
|
+
const isAuthTimelineAuditEvent = (event) => authTimelineAuditEventTypes.has(event.type);
|
|
90
|
+
const isRiskTimelineAuditEvent = (event) => riskTimelineAuditEventTypes.has(event.type);
|
|
91
|
+
const isOAuthTimelineAuditEvent = (event) => oauthTimelineAuditEventTypes.has(event.type);
|
|
92
|
+
const isMfaTimelineAuditEvent = (event) => mfaTimelineAuditEventTypes.has(event.type);
|
|
93
|
+
const isApiKeyTimelineAuditEvent = (event) => apiKeyTimelineAuditEventTypes.has(event.type);
|
|
94
|
+
const isRefreshTokenTimelineAuditEvent = (event) => refreshTokenTimelineAuditEventTypes.has(event.type);
|
|
95
|
+
const isIncidentTimelineAuditEvent = (event) => incidentTimelineAuditEventTypes.has(event.type);
|
|
96
|
+
const isJwtTimelineAuditEvent = (event) => jwtTimelineAuditEventTypes.has(event.type);
|
|
97
|
+
const authTimelineEventFromAuditEvent = (event, options) => {
|
|
98
|
+
switch (event.type) {
|
|
99
|
+
case "auth.login.succeeded": {
|
|
100
|
+
const userId = actorUserId(event.actor);
|
|
101
|
+
return userId === undefined
|
|
102
|
+
? Option.none()
|
|
103
|
+
: baseEvent(event, options, userId, "auth", "info", "Login succeeded", { method: event.method }, event.actor, event.request);
|
|
104
|
+
}
|
|
105
|
+
case "auth.login.failed": {
|
|
106
|
+
const userId = subjectUserId(event.subject);
|
|
107
|
+
return userId === undefined
|
|
108
|
+
? Option.none()
|
|
109
|
+
: baseEvent(event, options, userId, "auth", "warning", "Login failed", { method: event.method, reason: event.reason }, undefined, event.request);
|
|
110
|
+
}
|
|
111
|
+
case "auth.session.revoked": {
|
|
112
|
+
const userId = actorUserId(event.actor);
|
|
113
|
+
return userId === undefined
|
|
114
|
+
? Option.none()
|
|
115
|
+
: baseEvent(event, options, userId, "session", "info", "Session revoked", { sessionId: sessionId(event.sessionId), reason: event.reason }, event.actor, event.request);
|
|
116
|
+
}
|
|
117
|
+
case "auth.policy.denied": {
|
|
118
|
+
const userId = actorUserId(event.actor);
|
|
119
|
+
return userId === undefined
|
|
120
|
+
? Option.none()
|
|
121
|
+
: baseEvent(event, options, userId, "policy", "warning", "Security policy denied", { policyId: policyId(event.policyId), reason: event.reason }, event.actor, event.request);
|
|
122
|
+
}
|
|
123
|
+
}
|
|
124
|
+
};
|
|
125
|
+
const riskTimelineSeverity = (assessment) => assessment.risk.level === "critical"
|
|
126
|
+
? "critical"
|
|
127
|
+
: assessment.risk.level === "high" || assessment.risk.level === "medium"
|
|
128
|
+
? "warning"
|
|
129
|
+
: "info";
|
|
130
|
+
const riskAssessmentMetadata = (assessment) => omitUndefined({
|
|
131
|
+
method: assessment.method,
|
|
132
|
+
amr: [...assessment.amr],
|
|
133
|
+
aal: assessment.aal,
|
|
134
|
+
device: { status: assessment.device.status },
|
|
135
|
+
risk: {
|
|
136
|
+
level: assessment.risk.level,
|
|
137
|
+
signals: assessment.risk.signals.map((signal) => omitUndefined({
|
|
138
|
+
type: signal.type,
|
|
139
|
+
level: signal.level,
|
|
140
|
+
})),
|
|
141
|
+
},
|
|
142
|
+
metadata: assessment.metadata,
|
|
143
|
+
});
|
|
144
|
+
const riskTimelineEventFromAuditEvent = (event, options) => baseEvent(event, options, event.assessment.userId, "risk", riskTimelineSeverity(event.assessment), "Login risk assessed", riskAssessmentMetadata(event.assessment), event.actor, event.request);
|
|
145
|
+
const oauthTimelineEventFromAuditEvent = (event, options) => {
|
|
146
|
+
switch (event.type) {
|
|
147
|
+
case "auth.oauth.account.linked": {
|
|
148
|
+
return baseEvent(event, options, event.userId, "oauth", "info", "OAuth account linked", {
|
|
149
|
+
accountId: oauthAccountId(event.accountId),
|
|
150
|
+
providerId: oauthProviderId(event.providerId),
|
|
151
|
+
providerAccountId: event.providerAccountId,
|
|
152
|
+
reason: event.reason,
|
|
153
|
+
}, event.actor, event.request);
|
|
154
|
+
}
|
|
155
|
+
case "auth.oauth.account.unlinked": {
|
|
156
|
+
return baseEvent(event, options, event.userId, "oauth", "info", "OAuth account unlinked", {
|
|
157
|
+
accountId: oauthAccountId(event.accountId),
|
|
158
|
+
providerId: oauthProviderId(event.providerId),
|
|
159
|
+
providerAccountId: event.providerAccountId,
|
|
160
|
+
reason: event.reason,
|
|
161
|
+
}, event.actor, event.request);
|
|
162
|
+
}
|
|
163
|
+
case "auth.oauth.link_confirmation.started": {
|
|
164
|
+
return baseEvent(event, options, event.userId, "oauth", "info", "OAuth link confirmation started", {
|
|
165
|
+
challengeId: challengeId(event.challengeId),
|
|
166
|
+
providerId: oauthProviderId(event.providerId),
|
|
167
|
+
providerAccountId: event.providerAccountId,
|
|
168
|
+
reason: event.reason,
|
|
169
|
+
}, event.actor, event.request);
|
|
170
|
+
}
|
|
171
|
+
case "auth.oauth.link_confirmation.confirmed": {
|
|
172
|
+
return baseEvent(event, options, event.userId, "oauth", "info", "OAuth link confirmation confirmed", {
|
|
173
|
+
challengeId: challengeId(event.challengeId),
|
|
174
|
+
providerId: oauthProviderId(event.providerId),
|
|
175
|
+
providerAccountId: event.providerAccountId,
|
|
176
|
+
reason: event.reason,
|
|
177
|
+
}, event.actor, event.request);
|
|
178
|
+
}
|
|
179
|
+
case "auth.oauth.provider_token.refreshed": {
|
|
180
|
+
return baseEvent(event, options, event.userId, "oauth", "info", "OAuth provider token refreshed", {
|
|
181
|
+
accountId: oauthAccountId(event.accountId),
|
|
182
|
+
providerId: oauthProviderId(event.providerId),
|
|
183
|
+
providerAccountId: event.providerAccountId,
|
|
184
|
+
}, event.actor, event.request);
|
|
185
|
+
}
|
|
186
|
+
case "auth.oauth.provider_token.revoked": {
|
|
187
|
+
return baseEvent(event, options, event.userId, "oauth", "info", "OAuth provider token revoked", {
|
|
188
|
+
accountId: oauthAccountId(event.accountId),
|
|
189
|
+
providerId: oauthProviderId(event.providerId),
|
|
190
|
+
providerAccountId: event.providerAccountId,
|
|
191
|
+
reason: event.reason,
|
|
192
|
+
}, event.actor, event.request);
|
|
193
|
+
}
|
|
194
|
+
}
|
|
195
|
+
};
|
|
196
|
+
const mfaTimelineEventFromAuditEvent = (event, options) => {
|
|
197
|
+
switch (event.type) {
|
|
198
|
+
case "auth.passkey.credential.revoked": {
|
|
199
|
+
return baseEvent(event, options, event.userId, "mfa", "info", "Passkey revoked", {
|
|
200
|
+
credentialId: passkeyCredentialId(event.credentialId),
|
|
201
|
+
reason: event.reason,
|
|
202
|
+
}, event.actor, event.request);
|
|
203
|
+
}
|
|
204
|
+
case "auth.totp.enrollment.started": {
|
|
205
|
+
return baseEvent(event, options, event.userId, "mfa", "info", "TOTP enrollment started", { factorId: credentialId(event.factorId) }, event.actor, event.request);
|
|
206
|
+
}
|
|
207
|
+
case "auth.totp.factor.confirmed": {
|
|
208
|
+
return baseEvent(event, options, event.userId, "mfa", "info", "TOTP factor confirmed", { factorId: credentialId(event.factorId) }, event.actor, event.request);
|
|
209
|
+
}
|
|
210
|
+
case "auth.totp.factor.verified": {
|
|
211
|
+
return baseEvent(event, options, event.userId, "mfa", "info", "TOTP factor verified", { factorId: credentialId(event.factorId) }, event.actor, event.request);
|
|
212
|
+
}
|
|
213
|
+
case "auth.totp.factor.revoked": {
|
|
214
|
+
return baseEvent(event, options, event.userId, "mfa", "info", "TOTP factor revoked", { factorId: credentialId(event.factorId), reason: event.reason }, event.actor, event.request);
|
|
215
|
+
}
|
|
216
|
+
case "auth.recovery_code.generated": {
|
|
217
|
+
return baseEvent(event, options, event.userId, "mfa", "info", "Recovery codes generated", { count: event.count }, event.actor, event.request);
|
|
218
|
+
}
|
|
219
|
+
case "auth.recovery_code.verified": {
|
|
220
|
+
return baseEvent(event, options, event.userId, "mfa", "warning", "Recovery code used", { codeId: credentialId(event.codeId) }, event.actor, event.request);
|
|
221
|
+
}
|
|
222
|
+
case "auth.recovery_code.revoked": {
|
|
223
|
+
return baseEvent(event, options, event.userId, "mfa", "info", "Recovery code revoked", { codeId: credentialId(event.codeId), reason: event.reason }, event.actor, event.request);
|
|
224
|
+
}
|
|
225
|
+
}
|
|
226
|
+
};
|
|
227
|
+
const apiKeyTimelineEventFromAuditEvent = (event, options) => {
|
|
228
|
+
switch (event.type) {
|
|
229
|
+
case "auth.api_key.created": {
|
|
230
|
+
return baseEvent(event, options, event.userId, "api_key", "info", "API key created", { keyId: apiKeyId(event.keyId), scopes: event.scopes }, event.actor, event.request);
|
|
231
|
+
}
|
|
232
|
+
case "auth.api_key.verified": {
|
|
233
|
+
return baseEvent(event, options, event.userId, "api_key", "info", "API key used", { keyId: apiKeyId(event.keyId), scopes: event.scopes }, event.actor, event.request);
|
|
234
|
+
}
|
|
235
|
+
case "auth.api_key.revoked": {
|
|
236
|
+
return baseEvent(event, options, event.userId, "api_key", "info", "API key revoked", { keyId: apiKeyId(event.keyId), reason: event.reason }, event.actor, event.request);
|
|
237
|
+
}
|
|
238
|
+
case "auth.api_key.verification_failed": {
|
|
239
|
+
const userId = actorUserId(event.actor);
|
|
240
|
+
return userId === undefined
|
|
241
|
+
? Option.none()
|
|
242
|
+
: baseEvent(event, options, userId, "api_key", "warning", "API key verification failed", { reason: event.reason }, event.actor, event.request);
|
|
243
|
+
}
|
|
244
|
+
}
|
|
245
|
+
};
|
|
246
|
+
const refreshTokenTimelineEventFromAuditEvent = (event, options) => {
|
|
247
|
+
switch (event.type) {
|
|
248
|
+
case "auth.refresh_token.issued": {
|
|
249
|
+
return baseEvent(event, options, event.userId, "refresh_token", "info", "Refresh token issued", {
|
|
250
|
+
tokenId: refreshTokenId(event.tokenId),
|
|
251
|
+
familyId: refreshTokenFamilyId(event.familyId),
|
|
252
|
+
expiresAt: event.expiresAt,
|
|
253
|
+
}, event.actor, event.request);
|
|
254
|
+
}
|
|
255
|
+
case "auth.refresh_token.rotated": {
|
|
256
|
+
return baseEvent(event, options, event.userId, "refresh_token", "info", "Refresh token rotated", {
|
|
257
|
+
previousTokenId: refreshTokenId(event.previousTokenId),
|
|
258
|
+
tokenId: refreshTokenId(event.tokenId),
|
|
259
|
+
familyId: refreshTokenFamilyId(event.familyId),
|
|
260
|
+
expiresAt: event.expiresAt,
|
|
261
|
+
}, event.actor, event.request);
|
|
262
|
+
}
|
|
263
|
+
case "auth.refresh_token.reuse_detected": {
|
|
264
|
+
return baseEvent(event, options, event.userId, "refresh_token", "critical", "Refresh token reuse detected", {
|
|
265
|
+
tokenId: refreshTokenId(event.tokenId),
|
|
266
|
+
familyId: refreshTokenFamilyId(event.familyId),
|
|
267
|
+
}, event.actor, event.request);
|
|
268
|
+
}
|
|
269
|
+
case "auth.refresh_token.revoked": {
|
|
270
|
+
return baseEvent(event, options, event.userId, "refresh_token", "info", "Refresh token revoked", {
|
|
271
|
+
tokenId: refreshTokenId(event.tokenId),
|
|
272
|
+
familyId: refreshTokenFamilyId(event.familyId),
|
|
273
|
+
reason: event.reason,
|
|
274
|
+
}, event.actor, event.request);
|
|
275
|
+
}
|
|
276
|
+
}
|
|
277
|
+
};
|
|
278
|
+
const incidentActionOperations = (result) => [
|
|
279
|
+
...(result.sessions === undefined ? [] : ["revoke_sessions"]),
|
|
280
|
+
...(result.trustedDevices === undefined ? [] : ["revoke_trusted_devices"]),
|
|
281
|
+
...(result.apiKeys === undefined ? [] : ["revoke_api_keys"]),
|
|
282
|
+
...(result.refreshTokens === undefined ? [] : ["revoke_refresh_tokens"]),
|
|
283
|
+
];
|
|
284
|
+
const incidentActionMetadata = (result) => omitUndefined({
|
|
285
|
+
reason: result.reason,
|
|
286
|
+
operations: incidentActionOperations(result),
|
|
287
|
+
sessions: result.sessions === undefined
|
|
288
|
+
? undefined
|
|
289
|
+
: {
|
|
290
|
+
revokedAll: result.sessions.revokedAll,
|
|
291
|
+
activeBefore: result.sessions.activeBefore,
|
|
292
|
+
},
|
|
293
|
+
trustedDevices: result.trustedDevices === undefined
|
|
294
|
+
? undefined
|
|
295
|
+
: { revoked: result.trustedDevices.revoked },
|
|
296
|
+
apiKeys: result.apiKeys === undefined
|
|
297
|
+
? undefined
|
|
298
|
+
: { revoked: result.apiKeys.revoked },
|
|
299
|
+
refreshTokens: result.refreshTokens === undefined
|
|
300
|
+
? undefined
|
|
301
|
+
: {
|
|
302
|
+
revokedFamilies: result.refreshTokens.revokedFamilies,
|
|
303
|
+
activeBefore: result.refreshTokens.activeBefore,
|
|
304
|
+
},
|
|
305
|
+
});
|
|
306
|
+
const incidentTimelineEventFromAuditEvent = (event, options) => baseEvent(event, options, event.userId, "incident", "critical", "Incident action executed", incidentActionMetadata(event.result), event.actor, event.request);
|
|
307
|
+
const jwtTimelineEventFromAuditEvent = (event, options) => {
|
|
308
|
+
const userId = actorUserId(event.actor);
|
|
309
|
+
if (userId === undefined) {
|
|
310
|
+
return Option.none();
|
|
311
|
+
}
|
|
312
|
+
switch (event.type) {
|
|
313
|
+
case "auth.jwt.introspected": {
|
|
314
|
+
return baseEvent(event, options, userId, "jwt", event.active ? "info" : "warning", event.active ? "JWT introspected" : "JWT introspection failed", {
|
|
315
|
+
active: event.active,
|
|
316
|
+
jwtId: event.jwtId,
|
|
317
|
+
expiresAt: event.expiresAt,
|
|
318
|
+
reason: event.reason,
|
|
319
|
+
}, event.actor, event.request);
|
|
320
|
+
}
|
|
321
|
+
case "auth.jwt.revoked": {
|
|
322
|
+
return baseEvent(event, options, userId, "jwt", "info", "JWT revoked", {
|
|
323
|
+
jwtId: event.jwtId,
|
|
324
|
+
expiresAt: event.expiresAt,
|
|
325
|
+
reason: event.reason,
|
|
326
|
+
}, event.actor, event.request);
|
|
327
|
+
}
|
|
328
|
+
}
|
|
329
|
+
};
|
|
330
|
+
export const securityTimelineEventFromAuditEvent = (event, options = {}) => {
|
|
331
|
+
if (isAuthTimelineAuditEvent(event)) {
|
|
332
|
+
return authTimelineEventFromAuditEvent(event, options);
|
|
333
|
+
}
|
|
334
|
+
if (isRiskTimelineAuditEvent(event)) {
|
|
335
|
+
return riskTimelineEventFromAuditEvent(event, options);
|
|
336
|
+
}
|
|
337
|
+
if (isOAuthTimelineAuditEvent(event)) {
|
|
338
|
+
return oauthTimelineEventFromAuditEvent(event, options);
|
|
339
|
+
}
|
|
340
|
+
if (isMfaTimelineAuditEvent(event)) {
|
|
341
|
+
return mfaTimelineEventFromAuditEvent(event, options);
|
|
342
|
+
}
|
|
343
|
+
if (isApiKeyTimelineAuditEvent(event)) {
|
|
344
|
+
return apiKeyTimelineEventFromAuditEvent(event, options);
|
|
345
|
+
}
|
|
346
|
+
if (isRefreshTokenTimelineAuditEvent(event)) {
|
|
347
|
+
return refreshTokenTimelineEventFromAuditEvent(event, options);
|
|
348
|
+
}
|
|
349
|
+
if (isIncidentTimelineAuditEvent(event)) {
|
|
350
|
+
return incidentTimelineEventFromAuditEvent(event, options);
|
|
351
|
+
}
|
|
352
|
+
if (isJwtTimelineAuditEvent(event)) {
|
|
353
|
+
return jwtTimelineEventFromAuditEvent(event, options);
|
|
354
|
+
}
|
|
355
|
+
return Option.none();
|
|
356
|
+
};
|
|
357
|
+
export const insert = (event) => SecurityTimelineStore.use((store) => store.insert(event));
|
|
358
|
+
export const listByUser = (input) => SecurityTimelineStore.use((store) => store.listByUser(input));
|
|
359
|
+
export const deleteBefore = (input) => SecurityTimelineStore.use((store) => store.deleteBefore(input));
|
|
360
|
+
export const recordAuditEvent = (event, options = {}) => {
|
|
361
|
+
const timelineEvent = securityTimelineEventFromAuditEvent(event, options);
|
|
362
|
+
return Option.isNone(timelineEvent)
|
|
363
|
+
? Effect.succeed(Option.none())
|
|
364
|
+
: insert(timelineEvent.value).pipe(Effect.as(timelineEvent));
|
|
365
|
+
};
|
|
366
|
+
const securityTimelineProjectionOptions = (event, options) => {
|
|
367
|
+
const id = event.id === undefined && options.timelineEventId !== undefined
|
|
368
|
+
? options.timelineEventId(event)
|
|
369
|
+
: undefined;
|
|
370
|
+
return id === undefined ? {} : { id };
|
|
371
|
+
};
|
|
372
|
+
const projectAuditEventToSecurityTimeline = (dependencies, event, options) => {
|
|
373
|
+
const timelineEvent = securityTimelineEventFromAuditEvent(event, securityTimelineProjectionOptions(event, options));
|
|
374
|
+
return Option.isNone(timelineEvent)
|
|
375
|
+
? Effect.void
|
|
376
|
+
: dependencies.securityTimeline.insert(timelineEvent.value);
|
|
377
|
+
};
|
|
378
|
+
const securityTimelineProjectionError = (cause) => new AuditLogError({
|
|
379
|
+
message: "Failed to project audit event to security timeline",
|
|
380
|
+
cause,
|
|
381
|
+
});
|
|
382
|
+
export const makeSecurityTimelineAuditLog = (dependencies) => {
|
|
383
|
+
const options = dependencies.options ?? {};
|
|
384
|
+
const projectionFailure = options.projectionFailure ?? "ignore";
|
|
385
|
+
return AuditLog.make({
|
|
386
|
+
emit: (event) => {
|
|
387
|
+
const projection = projectAuditEventToSecurityTimeline(dependencies, event, options);
|
|
388
|
+
const handledProjection = projectionFailure === "fail"
|
|
389
|
+
? projection.pipe(Effect.mapError(securityTimelineProjectionError))
|
|
390
|
+
: projection.pipe(Effect.catchTag("SecurityTimelineStoreError", () => Effect.void));
|
|
391
|
+
return dependencies.auditLog.emit(event).pipe(Effect.flatMap(() => handledProjection));
|
|
392
|
+
},
|
|
393
|
+
});
|
|
394
|
+
};
|
|
395
|
+
export const SecurityTimelineAuditLogLive = (options = {}) => Layer.effect(AuditLog)(Effect.gen(function* () {
|
|
396
|
+
const auditLog = yield* AuditLog;
|
|
397
|
+
const securityTimeline = yield* SecurityTimelineStore;
|
|
398
|
+
return makeSecurityTimelineAuditLog({
|
|
399
|
+
auditLog,
|
|
400
|
+
securityTimeline,
|
|
401
|
+
options,
|
|
402
|
+
});
|
|
403
|
+
}));
|
|
404
|
+
const compareTimelineEvents = (left, right) => {
|
|
405
|
+
const occurredAt = Number(right.occurredAt) - Number(left.occurredAt);
|
|
406
|
+
return occurredAt === 0
|
|
407
|
+
? String(right.id).localeCompare(String(left.id))
|
|
408
|
+
: occurredAt;
|
|
409
|
+
};
|
|
410
|
+
const insertSortedTimelineEvent = (events, event) => {
|
|
411
|
+
const index = events.findIndex((existing) => compareTimelineEvents(event, existing) < 0);
|
|
412
|
+
return index === -1
|
|
413
|
+
? [...events, event]
|
|
414
|
+
: [...events.slice(0, index), event, ...events.slice(index)];
|
|
415
|
+
};
|
|
416
|
+
const sortTimelineEvents = (events) => {
|
|
417
|
+
let sorted = [];
|
|
418
|
+
for (const event of events) {
|
|
419
|
+
sorted = insertSortedTimelineEvent(sorted, event);
|
|
420
|
+
}
|
|
421
|
+
return sorted;
|
|
422
|
+
};
|
|
423
|
+
export const filterSecurityTimelineEvents = (events, input) => {
|
|
424
|
+
const types = input.types === undefined ? undefined : new Set(input.types);
|
|
425
|
+
const categories = input.categories === undefined ? undefined : new Set(input.categories);
|
|
426
|
+
const beforeOccurredAt = input.beforeOccurredAt === undefined
|
|
427
|
+
? undefined
|
|
428
|
+
: Number(input.beforeOccurredAt);
|
|
429
|
+
const limit = input.limit === undefined ? undefined : Math.max(0, Math.floor(input.limit));
|
|
430
|
+
const filtered = [...events]
|
|
431
|
+
.filter((event) => event.userId === input.userId)
|
|
432
|
+
.filter((event) => beforeOccurredAt === undefined || Number(event.occurredAt) < beforeOccurredAt)
|
|
433
|
+
.filter((event) => types === undefined || types.has(event.type))
|
|
434
|
+
.filter((event) => categories === undefined || categories.has(event.category));
|
|
435
|
+
const sorted = sortTimelineEvents(filtered).map(clone);
|
|
436
|
+
return limit === undefined ? sorted : sorted.slice(0, limit);
|
|
437
|
+
};
|
|
438
|
+
export const makeSecurityTimelineStoreMemory = () => {
|
|
439
|
+
const eventsById = new Map();
|
|
440
|
+
return SecurityTimelineStore.make({
|
|
441
|
+
insert: (event) => Effect.sync(() => {
|
|
442
|
+
eventsById.set(event.id, clone(event));
|
|
443
|
+
}),
|
|
444
|
+
listByUser: (input) => Effect.sync(() => filterSecurityTimelineEvents(eventsById.values(), input)),
|
|
445
|
+
deleteBefore: (input) => Effect.sync(() => {
|
|
446
|
+
const deletedIds = [];
|
|
447
|
+
for (const [id, event] of eventsById) {
|
|
448
|
+
if (Number(event.occurredAt) < Number(input.beforeOccurredAt) &&
|
|
449
|
+
(input.userId === undefined || event.userId === input.userId)) {
|
|
450
|
+
deletedIds.push(id);
|
|
451
|
+
}
|
|
452
|
+
}
|
|
453
|
+
for (const id of deletedIds) {
|
|
454
|
+
eventsById.delete(id);
|
|
455
|
+
}
|
|
456
|
+
return deletedIds.length;
|
|
457
|
+
}),
|
|
458
|
+
});
|
|
459
|
+
};
|
|
460
|
+
export const SecurityTimelineStoreMemoryLive = Layer.sync(SecurityTimelineStore)(makeSecurityTimelineStoreMemory);
|
|
461
|
+
//# sourceMappingURL=SecurityTimeline.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"SecurityTimeline.js","sourceRoot":"","sources":["../src/SecurityTimeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIrE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AA2BxD,MAAM,CAAC,MAAM,uBAAuB,GAClC,KAAK,CAAC,OAAO,EAA2B,CAAC;AA8C3C,MAAM,OAAO,0BAA2B,SAAQ,IAAI,CAAC,WAAW,CAC9D,4BAA4B,CAK5B;CAAG;AAcL,MAAM,OAAO,qBAAsB,SAAQ,OAAO,CAAC,OAAO,EAGvD,CAAC,4BAA4B,CAAC;CAAG;AAEpC,WAAiB,qBAAqB;IACvB,0BAAI,GAAG,CAClB,OAAqC,EACP,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC,EAJgB,qBAAqB,KAArB,qBAAqB,QAIrC;AAeD,MAAM,KAAK,GAAG,CAAI,KAAQ,EAAK,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAEzD,MAAM,aAAa,GAAG,CAA8C,MAAS,EAAK,EAAE,CAClF,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC7D,CAAC;AAET,MAAM,gBAAgB,GAAG,CACvB,KAAqB,EACrB,OAA+C,EACV,EAAE,CACvC,OAAO,CAAC,EAAE;IACV,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAE3E,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAsB,EAAE,CAC5D,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAEnD,MAAM,aAAa,GAAG,CAAC,OAAqB,EAAsB,EAAE,CAClE,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAEvD,MAAM,WAAW,GAAG,CAAC,EAAe,EAAe,EAAE,CAAC,EAAE,CAAC;AACzD,MAAM,YAAY,GAAG,CAAC,EAAgB,EAAgB,EAAE,CAAC,EAAE,CAAC;AAC5D,MAAM,SAAS,GAAG,CAAC,EAAyB,EAAyB,EAAE,CAAC,EAAE,CAAC;AAC3E,MAAM,cAAc,GAAG,CAAC,EAAkB,EAAkB,EAAE,CAAC,EAAE,CAAC;AAClE,MAAM,eAAe,GAAG,CAAC,EAAmB,EAAmB,EAAE,CAAC,EAAE,CAAC;AACrE,MAAM,mBAAmB,GAAG,CAAC,EAAuB,EAAuB,EAAE,CAAC,EAAE,CAAC;AACjF,MAAM,QAAQ,GAAG,CAAC,EAAY,EAAY,EAAE,CAAC,EAAE,CAAC;AAChD,MAAM,QAAQ,GAAG,CAAC,EAAY,EAAY,EAAE,CAAC,EAAE,CAAC;AAChD,MAAM,cAAc,GAAG,CAAC,EAA8B,EAA8B,EAAE,CACpF,EAAE,CAAC;AACL,MAAM,oBAAoB,GAAG,CAC3B,EAAwB,EACF,EAAE,CAAC,EAAE,CAAC;AAE9B,MAAM,SAAS,GAAG,CAChB,KAAqB,EACrB,OAA+C,EAC/C,MAAc,EACd,QAAuC,EACvC,QAAuC,EACvC,OAAe,EACf,QAA4C,EAC5C,KAAkB,EAClB,OAAsB,EACqB,EAAE;IAC7C,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE5C,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAChB,aAAa,CAAC;QACZ,EAAE;QACF,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ;QACR,QAAQ;QACR,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO;QACP,KAAK;QACL,OAAO;QACP,QAAQ;KACT,CAAiC,CACnC,CAAC;AACJ,CAAC,CAAC;AAwDF,MAAM,2BAA2B,GAAwC,IAAI,GAAG,CAAC;IAC/E,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAwC,IAAI,GAAG,CAAC;IAC/E,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAwC,IAAI,GAAG,CAAC;IAChF,2BAA2B;IAC3B,6BAA6B;IAC7B,wCAAwC;IACxC,sCAAsC;IACtC,qCAAqC;IACrC,mCAAmC;CACpC,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAwC,IAAI,GAAG,CAAC;IAC9E,iCAAiC;IACjC,8BAA8B;IAC9B,4BAA4B;IAC5B,6BAA6B;IAC7B,8BAA8B;IAC9B,4BAA4B;IAC5B,0BAA0B;IAC1B,2BAA2B;CAC5B,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAwC,IAAI,GAAG,CAAC;IACjF,sBAAsB;IACtB,sBAAsB;IACtB,kCAAkC;IAClC,uBAAuB;CACxB,CAAC,CAAC;AAEH,MAAM,mCAAmC,GACvC,IAAI,GAAG,CAAC;IACN,2BAA2B;IAC3B,mCAAmC;IACnC,4BAA4B;IAC5B,4BAA4B;CAC7B,CAAC,CAAC;AAEL,MAAM,+BAA+B,GACnC,IAAI,GAAG,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;AAE7C,MAAM,0BAA0B,GAAwC,IAAI,GAAG,CAAC;IAC9E,uBAAuB;IACvB,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAC/B,KAAqB,EACY,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAElF,MAAM,wBAAwB,GAAG,CAC/B,KAAqB,EACY,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAElF,MAAM,yBAAyB,GAAG,CAChC,KAAqB,EACa,EAAE,CAAC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEpF,MAAM,uBAAuB,GAAG,CAC9B,KAAqB,EACW,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEhF,MAAM,0BAA0B,GAAG,CACjC,KAAqB,EACc,EAAE,CACrC,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEhD,MAAM,gCAAgC,GAAG,CACvC,KAAqB,EACoB,EAAE,CAC3C,mCAAmC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEtD,MAAM,4BAA4B,GAAG,CACnC,KAAqB,EACgB,EAAE,CACvC,+BAA+B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAElD,MAAM,uBAAuB,GAAG,CAC9B,KAAqB,EACW,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEhF,MAAM,+BAA+B,GAAG,CACtC,KAA6B,EAC7B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,MAAM,EACN,MAAM,EACN,iBAAiB,EACjB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACxB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5C,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,EACT,cAAc,EACd,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC9C,SAAS,EACT,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;QACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC/D,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;QACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,QAAQ,EACR,SAAS,EACT,wBAAwB,EACxB,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC5D,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,UAA+B,EACA,EAAE,CACjC,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU;IAClC,CAAC,CAAC,UAAU;IACZ,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;QACtE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC;AAEf,MAAM,sBAAsB,GAAG,CAC7B,UAA+B,EACI,EAAE,CACrC,aAAa,CAAC;IACZ,MAAM,EAAE,UAAU,CAAC,MAAM;IACzB,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC;IACxB,GAAG,EAAE,UAAU,CAAC,GAAG;IACnB,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE;IAC5C,IAAI,EAAE;QACJ,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK;QAC5B,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9C,aAAa,CAAC;YACZ,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CACH;KACF;IACD,QAAQ,EAAE,UAAU,CAAC,QAAQ;CAC9B,CAAC,CAAC;AAEL,MAAM,+BAA+B,GAAG,CACtC,KAA6B,EAC7B,OAA+C,EACJ,EAAE,CAC7C,SAAS,CACP,KAAK,EACL,OAAO,EACP,KAAK,CAAC,UAAU,CAAC,MAAM,EACvB,MAAM,EACN,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,EACtC,qBAAqB,EACrB,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,EACxC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;AAEJ,MAAM,gCAAgC,GAAG,CACvC,KAA8B,EAC9B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,sBAAsB,EACtB;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,6BAA6B,CAAC,CAAC,CAAC;YACnC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,wBAAwB,EACxB;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,sCAAsC,CAAC,CAAC,CAAC;YAC5C,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,iCAAiC,EACjC;gBACE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC3C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,wCAAwC,CAAC,CAAC,CAAC;YAC9C,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,mCAAmC,EACnC;gBACE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC3C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,qCAAqC,CAAC,CAAC,CAAC;YAC3C,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,gCAAgC,EAChC;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;aAC3C,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,mCAAmC,CAAC,CAAC,CAAC;YACzC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,8BAA8B,EAC9B;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,CACrC,KAA4B,EAC5B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iCAAiC,CAAC,CAAC,CAAC;YACvC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,iBAAiB,EACjB;gBACE,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC;gBACrD,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,8BAA8B,CAAC,CAAC,CAAC;YACpC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,yBAAyB,EACzB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAC1C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAC1C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,sBAAsB,EACtB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAC1C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,0BAA0B,CAAC,CAAC,CAAC;YAChC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,qBAAqB,EACrB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAChE,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,8BAA8B,CAAC,CAAC,CAAC;YACpC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,0BAA0B,EAC1B,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EACtB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,6BAA6B,CAAC,CAAC,CAAC;YACnC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,SAAS,EACT,oBAAoB,EACpB,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACtC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC5D,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CACxC,KAA+B,EAC/B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACtD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,SAAS,EACT,MAAM,EACN,cAAc,EACd,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACtD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACtD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,kCAAkC,CAAC,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,SAAS,EACT,SAAS,EACT,6BAA6B,EAC7B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACxB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,uCAAuC,GAAG,CAC9C,KAAqC,EACrC,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,MAAM,EACN,sBAAsB,EACtB;gBACE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,MAAM,EACN,uBAAuB,EACvB;gBACE,eAAe,EAAE,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC;gBACtD,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,mCAAmC,CAAC,CAAC,CAAC;YACzC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,UAAU,EACV,8BAA8B,EAC9B;gBACE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;aAC/C,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,MAAM,EACN,uBAAuB,EACvB;gBACE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,MAA4B,EACT,EAAE,CAAC;IACtB,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7D,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;IAC1E,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC5D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;CACzE,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,MAA4B,EACO,EAAE,CACrC,aAAa,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,UAAU,EAAE,wBAAwB,CAAC,MAAM,CAAC;IAC5C,QAAQ,EACN,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;YACtC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY;SAC3C;IACP,cAAc,EACZ,MAAM,CAAC,cAAc,KAAK,SAAS;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE;IAChD,OAAO,EACL,MAAM,CAAC,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;IACzC,aAAa,EACX,MAAM,CAAC,aAAa,KAAK,SAAS;QAChC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,eAAe;YACrD,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,YAAY;SAChD;CACR,CAAC,CAAC;AAEL,MAAM,mCAAmC,GAAG,CAC1C,KAAiC,EACjC,OAA+C,EACJ,EAAE,CAC7C,SAAS,CACP,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,UAAU,EACV,UAAU,EACV,0BAA0B,EAC1B,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,EACpC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;AAEJ,MAAM,8BAA8B,GAAG,CACrC,KAA4B,EAC5B,OAA+C,EACJ,EAAE;IAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAExC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,MAAM,EACN,KAAK,EACL,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EACjC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,0BAA0B,EAC9D;gBACE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,MAAM,EACN,KAAK,EACL,MAAM,EACN,aAAa,EACb;gBACE,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CACjD,KAAqB,EACrB,UAAkD,EAAE,EACT,EAAE;IAC7C,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,gCAAgC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,8BAA8B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,iCAAiC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,gCAAgC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,uCAAuC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,mCAAmC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,8BAA8B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,KAA4B,EAC4C,EAAE,CAC1E,qBAAqB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,KAAsC,EAKtC,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,KAAwC,EACkC,EAAE,CAC5E,qBAAqB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAqB,EACrB,UAAkD,EAAE,EAKpD,EAAE;IACF,MAAM,aAAa,GAAG,mCAAmC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE1E,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CACxC,KAAqB,EACrB,OAAwC,EACA,EAAE;IAC1C,MAAM,EAAE,GACN,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;QAC7D,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;QAChC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,mCAAmC,GAAG,CAC1C,YAEC,EACD,KAAqB,EACrB,OAAwC,EACxC,EAAE;IACF,MAAM,aAAa,GAAG,mCAAmC,CACvD,KAAK,EACL,iCAAiC,CAAC,KAAK,EAAE,OAAO,CAAC,CAClD,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,+BAA+B,GAAG,CAAC,KAAc,EAAE,EAAE,CACzD,IAAI,aAAa,CAAC;IAChB,OAAO,EAAE,oDAAoD;IAC7D,KAAK;CACN,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,YAI5C,EAAmB,EAAE;IACpB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3C,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC;IAEhE,OAAO,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YACd,MAAM,UAAU,GAAG,mCAAmC,CACpD,YAAY,EACZ,KAAK,EACL,OAAO,CACR,CAAC;YACF,MAAM,iBAAiB,GACrB,iBAAiB,KAAK,MAAM;gBAC1B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;gBACnE,CAAC,CAAC,UAAU,CAAC,IAAI,CACb,MAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CACjE,CAAC;YAER,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,CACxC,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,UAA2C,EAAE,EAC7C,EAAE,CACF,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;IAEtD,OAAO,4BAA4B,CAAC;QAClC,QAAQ;QACR,gBAAgB;QAChB,OAAO;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,qBAAqB,GAAG,CAC5B,IAA2B,EAC3B,KAA4B,EACpB,EAAE;IACV,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEtE,OAAO,UAAU,KAAK,CAAC;QACrB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,UAAU,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAChC,MAAwC,EACxC,KAA4B,EACM,EAAE;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAC5B,CAAC,QAAQ,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CACzD,CAAC;IAEF,OAAO,KAAK,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC;QACpB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,MAAuC,EACL,EAAE;IACpC,IAAI,MAAM,GAAqC,EAAE,CAAC;IAElD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,MAAuC,EACvC,KAAsC,EACJ,EAAE;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,gBAAgB,GACpB,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAClC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrC,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;SAChD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,gBAAgB,CAChF;SACA,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC/D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAC1C,GAAiC,EAAE;IACjC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkD,CAAC;IAE7E,OAAO,qBAAqB,CAAC,IAAI,CAAC;QAChC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC;QACJ,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7E,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CACtB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,UAAU,GAA8B,EAAE,CAAC;YAEjD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;gBACrC,IACE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;oBACzD,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,EAC7D,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC5B,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,CAAC;YAED,OAAO,UAAU,CAAC,MAAM,CAAC;QAC3B,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAC9E,+BAA+B,CAChC,CAAC"}
|