@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (255) hide show
  1. package/README.md +790 -73
  2. package/dist/ApiKey.d.ts +207 -0
  3. package/dist/ApiKey.d.ts.map +1 -0
  4. package/dist/ApiKey.js +275 -0
  5. package/dist/ApiKey.js.map +1 -0
  6. package/dist/AuditLog.d.ts +335 -1
  7. package/dist/AuditLog.d.ts.map +1 -1
  8. package/dist/AuditLog.js +318 -1
  9. package/dist/AuditLog.js.map +1 -1
  10. package/dist/AuthConfig.d.ts +42 -0
  11. package/dist/AuthConfig.d.ts.map +1 -0
  12. package/dist/AuthConfig.js +43 -0
  13. package/dist/AuthConfig.js.map +1 -0
  14. package/dist/AuthFlow.d.ts +462 -36
  15. package/dist/AuthFlow.d.ts.map +1 -1
  16. package/dist/AuthFlow.js +657 -5
  17. package/dist/AuthFlow.js.map +1 -1
  18. package/dist/AuthKernel.d.ts +3 -0
  19. package/dist/AuthKernel.d.ts.map +1 -0
  20. package/dist/AuthKernel.js +9 -0
  21. package/dist/AuthKernel.js.map +1 -0
  22. package/dist/Challenge.d.ts +24 -4
  23. package/dist/Challenge.d.ts.map +1 -1
  24. package/dist/Challenge.js +167 -1
  25. package/dist/Challenge.js.map +1 -1
  26. package/dist/Client.d.ts +449 -0
  27. package/dist/Client.d.ts.map +1 -0
  28. package/dist/Client.js +985 -0
  29. package/dist/Client.js.map +1 -0
  30. package/dist/Crypto.d.ts +6 -1
  31. package/dist/Crypto.d.ts.map +1 -1
  32. package/dist/Crypto.js +62 -1
  33. package/dist/Crypto.js.map +1 -1
  34. package/dist/DomainVerification.d.ts +200 -0
  35. package/dist/DomainVerification.d.ts.map +1 -0
  36. package/dist/DomainVerification.js +304 -0
  37. package/dist/DomainVerification.js.map +1 -0
  38. package/dist/EffectQbSqliteStorage.d.ts +985 -0
  39. package/dist/EffectQbSqliteStorage.d.ts.map +1 -0
  40. package/dist/EffectQbSqliteStorage.js +2824 -0
  41. package/dist/EffectQbSqliteStorage.js.map +1 -0
  42. package/dist/EmailOtp.d.ts +120 -0
  43. package/dist/EmailOtp.d.ts.map +1 -0
  44. package/dist/EmailOtp.js +286 -0
  45. package/dist/EmailOtp.js.map +1 -0
  46. package/dist/EmailVerification.d.ts +121 -0
  47. package/dist/EmailVerification.d.ts.map +1 -0
  48. package/dist/EmailVerification.js +200 -0
  49. package/dist/EmailVerification.js.map +1 -0
  50. package/dist/HttpApi/Api.d.ts +2410 -0
  51. package/dist/HttpApi/Api.d.ts.map +1 -0
  52. package/dist/HttpApi/Api.js +3026 -0
  53. package/dist/HttpApi/Api.js.map +1 -0
  54. package/dist/HttpApi/Endpoints.d.ts +1073 -0
  55. package/dist/HttpApi/Endpoints.d.ts.map +1 -0
  56. package/dist/HttpApi/Endpoints.js +428 -0
  57. package/dist/HttpApi/Endpoints.js.map +1 -0
  58. package/dist/HttpApi/Errors.d.ts +114 -0
  59. package/dist/HttpApi/Errors.d.ts.map +1 -0
  60. package/dist/HttpApi/Errors.js +230 -0
  61. package/dist/HttpApi/Errors.js.map +1 -0
  62. package/dist/HttpApi/Schemas.d.ts +1254 -0
  63. package/dist/HttpApi/Schemas.d.ts.map +1 -0
  64. package/dist/HttpApi/Schemas.js +862 -0
  65. package/dist/HttpApi/Schemas.js.map +1 -0
  66. package/dist/HttpApi/Security.d.ts +159 -0
  67. package/dist/HttpApi/Security.d.ts.map +1 -0
  68. package/dist/HttpApi/Security.js +530 -0
  69. package/dist/HttpApi/Security.js.map +1 -0
  70. package/dist/HttpApi/Transport.d.ts +65 -0
  71. package/dist/HttpApi/Transport.d.ts.map +1 -0
  72. package/dist/HttpApi/Transport.js +311 -0
  73. package/dist/HttpApi/Transport.js.map +1 -0
  74. package/dist/HttpApi/index.d.ts +8 -0
  75. package/dist/HttpApi/index.d.ts.map +1 -0
  76. package/dist/HttpApi/index.js +7 -0
  77. package/dist/HttpApi/index.js.map +1 -0
  78. package/dist/HttpApi.d.ts +2 -0
  79. package/dist/HttpApi.d.ts.map +1 -0
  80. package/dist/HttpApi.js +2 -0
  81. package/dist/HttpApi.js.map +1 -0
  82. package/dist/Identifiers.d.ts +3 -0
  83. package/dist/Identifiers.d.ts.map +1 -1
  84. package/dist/Identifiers.js +2 -0
  85. package/dist/Identifiers.js.map +1 -1
  86. package/dist/IncidentAction.d.ts +80 -0
  87. package/dist/IncidentAction.d.ts.map +1 -0
  88. package/dist/IncidentAction.js +158 -0
  89. package/dist/IncidentAction.js.map +1 -0
  90. package/dist/Internal.d.ts +7 -0
  91. package/dist/Internal.d.ts.map +1 -0
  92. package/dist/Internal.js +12 -0
  93. package/dist/Internal.js.map +1 -0
  94. package/dist/Jwt.d.ts +281 -0
  95. package/dist/Jwt.d.ts.map +1 -0
  96. package/dist/Jwt.js +721 -0
  97. package/dist/Jwt.js.map +1 -0
  98. package/dist/LoginApproval.d.ts +314 -0
  99. package/dist/LoginApproval.d.ts.map +1 -0
  100. package/dist/LoginApproval.js +551 -0
  101. package/dist/LoginApproval.js.map +1 -0
  102. package/dist/LoginNotification.d.ts +183 -0
  103. package/dist/LoginNotification.d.ts.map +1 -0
  104. package/dist/LoginNotification.js +329 -0
  105. package/dist/LoginNotification.js.map +1 -0
  106. package/dist/LoginRisk.d.ts +344 -0
  107. package/dist/LoginRisk.d.ts.map +1 -0
  108. package/dist/LoginRisk.js +484 -0
  109. package/dist/LoginRisk.js.map +1 -0
  110. package/dist/MachineAuth.d.ts +73 -0
  111. package/dist/MachineAuth.d.ts.map +1 -0
  112. package/dist/MachineAuth.js +147 -0
  113. package/dist/MachineAuth.js.map +1 -0
  114. package/dist/MagicLink.d.ts +85 -0
  115. package/dist/MagicLink.d.ts.map +1 -0
  116. package/dist/MagicLink.js +206 -0
  117. package/dist/MagicLink.js.map +1 -0
  118. package/dist/Mailer.d.ts +147 -0
  119. package/dist/Mailer.d.ts.map +1 -0
  120. package/dist/Mailer.js +208 -0
  121. package/dist/Mailer.js.map +1 -0
  122. package/dist/OAuth.d.ts +1890 -0
  123. package/dist/OAuth.d.ts.map +1 -0
  124. package/dist/OAuth.js +3063 -0
  125. package/dist/OAuth.js.map +1 -0
  126. package/dist/Passkey.d.ts +334 -0
  127. package/dist/Passkey.d.ts.map +1 -0
  128. package/dist/Passkey.js +422 -0
  129. package/dist/Passkey.js.map +1 -0
  130. package/dist/PasskeySimpleWebAuthn.d.ts +11 -0
  131. package/dist/PasskeySimpleWebAuthn.d.ts.map +1 -0
  132. package/dist/PasskeySimpleWebAuthn.js +181 -0
  133. package/dist/PasskeySimpleWebAuthn.js.map +1 -0
  134. package/dist/Password.d.ts +237 -0
  135. package/dist/Password.d.ts.map +1 -0
  136. package/dist/Password.js +641 -0
  137. package/dist/Password.js.map +1 -0
  138. package/dist/Policy.d.ts +7 -4
  139. package/dist/Policy.d.ts.map +1 -1
  140. package/dist/Policy.js +28 -5
  141. package/dist/Policy.js.map +1 -1
  142. package/dist/Privacy.d.ts +15 -0
  143. package/dist/Privacy.d.ts.map +1 -1
  144. package/dist/Privacy.js +58 -1
  145. package/dist/Privacy.js.map +1 -1
  146. package/dist/RateLimiter.d.ts +104 -0
  147. package/dist/RateLimiter.d.ts.map +1 -0
  148. package/dist/RateLimiter.js +118 -0
  149. package/dist/RateLimiter.js.map +1 -0
  150. package/dist/RecoveryCode.d.ts +169 -0
  151. package/dist/RecoveryCode.d.ts.map +1 -0
  152. package/dist/RecoveryCode.js +299 -0
  153. package/dist/RecoveryCode.js.map +1 -0
  154. package/dist/RefreshToken.d.ts +222 -0
  155. package/dist/RefreshToken.d.ts.map +1 -0
  156. package/dist/RefreshToken.js +342 -0
  157. package/dist/RefreshToken.js.map +1 -0
  158. package/dist/Retention.d.ts +98 -0
  159. package/dist/Retention.d.ts.map +1 -0
  160. package/dist/Retention.js +204 -0
  161. package/dist/Retention.js.map +1 -0
  162. package/dist/SecurityTimeline.d.ts +78 -0
  163. package/dist/SecurityTimeline.d.ts.map +1 -0
  164. package/dist/SecurityTimeline.js +461 -0
  165. package/dist/SecurityTimeline.js.map +1 -0
  166. package/dist/Sessions.d.ts +123 -11
  167. package/dist/Sessions.d.ts.map +1 -1
  168. package/dist/Sessions.js +534 -1
  169. package/dist/Sessions.js.map +1 -1
  170. package/dist/StepUp.d.ts +44 -0
  171. package/dist/StepUp.d.ts.map +1 -0
  172. package/dist/StepUp.js +82 -0
  173. package/dist/StepUp.js.map +1 -0
  174. package/dist/Storage.d.ts +73 -5
  175. package/dist/Storage.d.ts.map +1 -1
  176. package/dist/Storage.js +11 -1
  177. package/dist/Storage.js.map +1 -1
  178. package/dist/StorageMigrations.d.ts +23 -1
  179. package/dist/StorageMigrations.d.ts.map +1 -1
  180. package/dist/StorageMigrations.js +462 -2
  181. package/dist/StorageMigrations.js.map +1 -1
  182. package/dist/Testing.d.ts +9 -1
  183. package/dist/Testing.d.ts.map +1 -1
  184. package/dist/Testing.js +30 -2
  185. package/dist/Testing.js.map +1 -1
  186. package/dist/Totp.d.ts +220 -0
  187. package/dist/Totp.d.ts.map +1 -0
  188. package/dist/Totp.js +477 -0
  189. package/dist/Totp.js.map +1 -0
  190. package/dist/TrustedDevice.d.ts +127 -0
  191. package/dist/TrustedDevice.d.ts.map +1 -0
  192. package/dist/TrustedDevice.js +252 -0
  193. package/dist/TrustedDevice.js.map +1 -0
  194. package/dist/WaitUntil.d.ts.map +1 -1
  195. package/dist/WaitUntil.js +1 -1
  196. package/dist/WaitUntil.js.map +1 -1
  197. package/dist/Webhook.d.ts +380 -0
  198. package/dist/Webhook.d.ts.map +1 -0
  199. package/dist/Webhook.js +592 -0
  200. package/dist/Webhook.js.map +1 -0
  201. package/dist/alchemy/cloudflare/Email.d.ts +25 -0
  202. package/dist/alchemy/cloudflare/Email.d.ts.map +1 -0
  203. package/dist/alchemy/cloudflare/Email.js +117 -0
  204. package/dist/alchemy/cloudflare/Email.js.map +1 -0
  205. package/dist/alchemy/cloudflare/RateLimitDurableObject.d.ts +34 -0
  206. package/dist/alchemy/cloudflare/RateLimitDurableObject.d.ts.map +1 -0
  207. package/dist/alchemy/cloudflare/RateLimitDurableObject.js +30 -0
  208. package/dist/alchemy/cloudflare/RateLimitDurableObject.js.map +1 -0
  209. package/dist/cloudflare/Email.d.ts +25 -0
  210. package/dist/cloudflare/Email.d.ts.map +1 -0
  211. package/dist/cloudflare/Email.js +153 -0
  212. package/dist/cloudflare/Email.js.map +1 -0
  213. package/dist/cloudflare/RateLimitDurableObject.d.ts +50 -0
  214. package/dist/cloudflare/RateLimitDurableObject.d.ts.map +1 -0
  215. package/dist/cloudflare/RateLimitDurableObject.js +51 -0
  216. package/dist/cloudflare/RateLimitDurableObject.js.map +1 -0
  217. package/dist/index.d.ts +25 -0
  218. package/dist/index.d.ts.map +1 -1
  219. package/dist/index.js +25 -0
  220. package/dist/index.js.map +1 -1
  221. package/dist/internal/RateLimitDurableObject.d.ts +32 -0
  222. package/dist/internal/RateLimitDurableObject.d.ts.map +1 -0
  223. package/dist/internal/RateLimitDurableObject.js +80 -0
  224. package/dist/internal/RateLimitDurableObject.js.map +1 -0
  225. package/migrations/0002_auth_password.sql +25 -0
  226. package/migrations/0003_auth_login_approval_review.sql +22 -0
  227. package/migrations/0004_auth_trusted_device.sql +12 -0
  228. package/migrations/0005_auth_passkey.sql +17 -0
  229. package/migrations/0006_auth_totp_factor.sql +17 -0
  230. package/migrations/0007_auth_recovery_code.sql +13 -0
  231. package/migrations/0008_auth_api_key.sql +17 -0
  232. package/migrations/0009_auth_refresh_token.sql +21 -0
  233. package/migrations/0010_auth_jwt_revocation.sql +8 -0
  234. package/migrations/0011_auth_oauth_account.sql +16 -0
  235. package/migrations/0012_auth_oauth_provider_token_vault.sql +20 -0
  236. package/migrations/0013_auth_security_timeline.sql +16 -0
  237. package/migrations/0014_auth_webhook_outbox.sql +16 -0
  238. package/migrations/0015_auth_webhook_replay.sql +7 -0
  239. package/migrations/0016_auth_login_risk_history.sql +23 -0
  240. package/migrations/0017_auth_audit_log.sql +17 -0
  241. package/migrations/0018_auth_domain_verification.sql +18 -0
  242. package/migrations/0019_auth_oauth_authorization_code.sql +17 -0
  243. package/migrations/0020_auth_oauth_provider_mode_token.sql +24 -0
  244. package/migrations/0021_auth_oauth_client_secret.sql +14 -0
  245. package/migrations/0022_auth_oauth_client.sql +15 -0
  246. package/migrations/0023_auth_oauth_consent.sql +15 -0
  247. package/package.json +162 -26
  248. package/dist/D1Kysely.d.ts +0 -40
  249. package/dist/D1Kysely.d.ts.map +0 -1
  250. package/dist/D1Kysely.js +0 -75
  251. package/dist/D1Kysely.js.map +0 -1
  252. package/dist/KyselyStorage.d.ts +0 -41
  253. package/dist/KyselyStorage.d.ts.map +0 -1
  254. package/dist/KyselyStorage.js +0 -176
  255. package/dist/KyselyStorage.js.map +0 -1
@@ -0,0 +1,461 @@
1
+ import { Brand, Context, Data, Effect, Layer, Option } from "effect";
2
+ import { AuditLog, AuditLogError } from "./AuditLog.js";
3
+ export const SecurityTimelineEventId = Brand.nominal();
4
+ export class SecurityTimelineStoreError extends Data.TaggedError("SecurityTimelineStoreError") {
5
+ }
6
+ export class SecurityTimelineStore extends Context.Service()("auth/SecurityTimelineStore") {
7
+ }
8
+ (function (SecurityTimelineStore) {
9
+ SecurityTimelineStore.make = (service) => SecurityTimelineStore.of(service);
10
+ })(SecurityTimelineStore || (SecurityTimelineStore = {}));
11
+ const clone = (value) => structuredClone(value);
12
+ const omitUndefined = (record) => Object.fromEntries(Object.entries(record).filter(([, value]) => value !== undefined));
13
+ const eventIdFromAudit = (event, options) => options.id ??
14
+ (event.id === undefined ? undefined : SecurityTimelineEventId(event.id));
15
+ const actorUserId = (actor) => actor.type === "user" ? actor.userId : undefined;
16
+ const subjectUserId = (subject) => subject.type === "user" ? subject.userId : undefined;
17
+ const challengeId = (id) => id;
18
+ const credentialId = (id) => id;
19
+ const sessionId = (id) => id;
20
+ const oauthAccountId = (id) => id;
21
+ const oauthProviderId = (id) => id;
22
+ const passkeyCredentialId = (id) => id;
23
+ const policyId = (id) => id;
24
+ const apiKeyId = (id) => id;
25
+ const refreshTokenId = (id) => id;
26
+ const refreshTokenFamilyId = (id) => id;
27
+ const baseEvent = (event, options, userId, category, severity, summary, metadata, actor, request) => {
28
+ const id = eventIdFromAudit(event, options);
29
+ if (id === undefined) {
30
+ return Option.none();
31
+ }
32
+ return Option.some(omitUndefined({
33
+ id,
34
+ userId,
35
+ type: event.type,
36
+ category,
37
+ severity,
38
+ occurredAt: event.occurredAt,
39
+ summary,
40
+ actor,
41
+ request,
42
+ metadata,
43
+ }));
44
+ };
45
+ const authTimelineAuditEventTypes = new Set([
46
+ "auth.login.failed",
47
+ "auth.login.succeeded",
48
+ "auth.policy.denied",
49
+ "auth.session.revoked",
50
+ ]);
51
+ const riskTimelineAuditEventTypes = new Set([
52
+ "auth.risk.assessed",
53
+ ]);
54
+ const oauthTimelineAuditEventTypes = new Set([
55
+ "auth.oauth.account.linked",
56
+ "auth.oauth.account.unlinked",
57
+ "auth.oauth.link_confirmation.confirmed",
58
+ "auth.oauth.link_confirmation.started",
59
+ "auth.oauth.provider_token.refreshed",
60
+ "auth.oauth.provider_token.revoked",
61
+ ]);
62
+ const mfaTimelineAuditEventTypes = new Set([
63
+ "auth.passkey.credential.revoked",
64
+ "auth.recovery_code.generated",
65
+ "auth.recovery_code.revoked",
66
+ "auth.recovery_code.verified",
67
+ "auth.totp.enrollment.started",
68
+ "auth.totp.factor.confirmed",
69
+ "auth.totp.factor.revoked",
70
+ "auth.totp.factor.verified",
71
+ ]);
72
+ const apiKeyTimelineAuditEventTypes = new Set([
73
+ "auth.api_key.created",
74
+ "auth.api_key.revoked",
75
+ "auth.api_key.verification_failed",
76
+ "auth.api_key.verified",
77
+ ]);
78
+ const refreshTokenTimelineAuditEventTypes = new Set([
79
+ "auth.refresh_token.issued",
80
+ "auth.refresh_token.reuse_detected",
81
+ "auth.refresh_token.revoked",
82
+ "auth.refresh_token.rotated",
83
+ ]);
84
+ const incidentTimelineAuditEventTypes = new Set(["auth.incident_action.executed"]);
85
+ const jwtTimelineAuditEventTypes = new Set([
86
+ "auth.jwt.introspected",
87
+ "auth.jwt.revoked",
88
+ ]);
89
+ const isAuthTimelineAuditEvent = (event) => authTimelineAuditEventTypes.has(event.type);
90
+ const isRiskTimelineAuditEvent = (event) => riskTimelineAuditEventTypes.has(event.type);
91
+ const isOAuthTimelineAuditEvent = (event) => oauthTimelineAuditEventTypes.has(event.type);
92
+ const isMfaTimelineAuditEvent = (event) => mfaTimelineAuditEventTypes.has(event.type);
93
+ const isApiKeyTimelineAuditEvent = (event) => apiKeyTimelineAuditEventTypes.has(event.type);
94
+ const isRefreshTokenTimelineAuditEvent = (event) => refreshTokenTimelineAuditEventTypes.has(event.type);
95
+ const isIncidentTimelineAuditEvent = (event) => incidentTimelineAuditEventTypes.has(event.type);
96
+ const isJwtTimelineAuditEvent = (event) => jwtTimelineAuditEventTypes.has(event.type);
97
+ const authTimelineEventFromAuditEvent = (event, options) => {
98
+ switch (event.type) {
99
+ case "auth.login.succeeded": {
100
+ const userId = actorUserId(event.actor);
101
+ return userId === undefined
102
+ ? Option.none()
103
+ : baseEvent(event, options, userId, "auth", "info", "Login succeeded", { method: event.method }, event.actor, event.request);
104
+ }
105
+ case "auth.login.failed": {
106
+ const userId = subjectUserId(event.subject);
107
+ return userId === undefined
108
+ ? Option.none()
109
+ : baseEvent(event, options, userId, "auth", "warning", "Login failed", { method: event.method, reason: event.reason }, undefined, event.request);
110
+ }
111
+ case "auth.session.revoked": {
112
+ const userId = actorUserId(event.actor);
113
+ return userId === undefined
114
+ ? Option.none()
115
+ : baseEvent(event, options, userId, "session", "info", "Session revoked", { sessionId: sessionId(event.sessionId), reason: event.reason }, event.actor, event.request);
116
+ }
117
+ case "auth.policy.denied": {
118
+ const userId = actorUserId(event.actor);
119
+ return userId === undefined
120
+ ? Option.none()
121
+ : baseEvent(event, options, userId, "policy", "warning", "Security policy denied", { policyId: policyId(event.policyId), reason: event.reason }, event.actor, event.request);
122
+ }
123
+ }
124
+ };
125
+ const riskTimelineSeverity = (assessment) => assessment.risk.level === "critical"
126
+ ? "critical"
127
+ : assessment.risk.level === "high" || assessment.risk.level === "medium"
128
+ ? "warning"
129
+ : "info";
130
+ const riskAssessmentMetadata = (assessment) => omitUndefined({
131
+ method: assessment.method,
132
+ amr: [...assessment.amr],
133
+ aal: assessment.aal,
134
+ device: { status: assessment.device.status },
135
+ risk: {
136
+ level: assessment.risk.level,
137
+ signals: assessment.risk.signals.map((signal) => omitUndefined({
138
+ type: signal.type,
139
+ level: signal.level,
140
+ })),
141
+ },
142
+ metadata: assessment.metadata,
143
+ });
144
+ const riskTimelineEventFromAuditEvent = (event, options) => baseEvent(event, options, event.assessment.userId, "risk", riskTimelineSeverity(event.assessment), "Login risk assessed", riskAssessmentMetadata(event.assessment), event.actor, event.request);
145
+ const oauthTimelineEventFromAuditEvent = (event, options) => {
146
+ switch (event.type) {
147
+ case "auth.oauth.account.linked": {
148
+ return baseEvent(event, options, event.userId, "oauth", "info", "OAuth account linked", {
149
+ accountId: oauthAccountId(event.accountId),
150
+ providerId: oauthProviderId(event.providerId),
151
+ providerAccountId: event.providerAccountId,
152
+ reason: event.reason,
153
+ }, event.actor, event.request);
154
+ }
155
+ case "auth.oauth.account.unlinked": {
156
+ return baseEvent(event, options, event.userId, "oauth", "info", "OAuth account unlinked", {
157
+ accountId: oauthAccountId(event.accountId),
158
+ providerId: oauthProviderId(event.providerId),
159
+ providerAccountId: event.providerAccountId,
160
+ reason: event.reason,
161
+ }, event.actor, event.request);
162
+ }
163
+ case "auth.oauth.link_confirmation.started": {
164
+ return baseEvent(event, options, event.userId, "oauth", "info", "OAuth link confirmation started", {
165
+ challengeId: challengeId(event.challengeId),
166
+ providerId: oauthProviderId(event.providerId),
167
+ providerAccountId: event.providerAccountId,
168
+ reason: event.reason,
169
+ }, event.actor, event.request);
170
+ }
171
+ case "auth.oauth.link_confirmation.confirmed": {
172
+ return baseEvent(event, options, event.userId, "oauth", "info", "OAuth link confirmation confirmed", {
173
+ challengeId: challengeId(event.challengeId),
174
+ providerId: oauthProviderId(event.providerId),
175
+ providerAccountId: event.providerAccountId,
176
+ reason: event.reason,
177
+ }, event.actor, event.request);
178
+ }
179
+ case "auth.oauth.provider_token.refreshed": {
180
+ return baseEvent(event, options, event.userId, "oauth", "info", "OAuth provider token refreshed", {
181
+ accountId: oauthAccountId(event.accountId),
182
+ providerId: oauthProviderId(event.providerId),
183
+ providerAccountId: event.providerAccountId,
184
+ }, event.actor, event.request);
185
+ }
186
+ case "auth.oauth.provider_token.revoked": {
187
+ return baseEvent(event, options, event.userId, "oauth", "info", "OAuth provider token revoked", {
188
+ accountId: oauthAccountId(event.accountId),
189
+ providerId: oauthProviderId(event.providerId),
190
+ providerAccountId: event.providerAccountId,
191
+ reason: event.reason,
192
+ }, event.actor, event.request);
193
+ }
194
+ }
195
+ };
196
+ const mfaTimelineEventFromAuditEvent = (event, options) => {
197
+ switch (event.type) {
198
+ case "auth.passkey.credential.revoked": {
199
+ return baseEvent(event, options, event.userId, "mfa", "info", "Passkey revoked", {
200
+ credentialId: passkeyCredentialId(event.credentialId),
201
+ reason: event.reason,
202
+ }, event.actor, event.request);
203
+ }
204
+ case "auth.totp.enrollment.started": {
205
+ return baseEvent(event, options, event.userId, "mfa", "info", "TOTP enrollment started", { factorId: credentialId(event.factorId) }, event.actor, event.request);
206
+ }
207
+ case "auth.totp.factor.confirmed": {
208
+ return baseEvent(event, options, event.userId, "mfa", "info", "TOTP factor confirmed", { factorId: credentialId(event.factorId) }, event.actor, event.request);
209
+ }
210
+ case "auth.totp.factor.verified": {
211
+ return baseEvent(event, options, event.userId, "mfa", "info", "TOTP factor verified", { factorId: credentialId(event.factorId) }, event.actor, event.request);
212
+ }
213
+ case "auth.totp.factor.revoked": {
214
+ return baseEvent(event, options, event.userId, "mfa", "info", "TOTP factor revoked", { factorId: credentialId(event.factorId), reason: event.reason }, event.actor, event.request);
215
+ }
216
+ case "auth.recovery_code.generated": {
217
+ return baseEvent(event, options, event.userId, "mfa", "info", "Recovery codes generated", { count: event.count }, event.actor, event.request);
218
+ }
219
+ case "auth.recovery_code.verified": {
220
+ return baseEvent(event, options, event.userId, "mfa", "warning", "Recovery code used", { codeId: credentialId(event.codeId) }, event.actor, event.request);
221
+ }
222
+ case "auth.recovery_code.revoked": {
223
+ return baseEvent(event, options, event.userId, "mfa", "info", "Recovery code revoked", { codeId: credentialId(event.codeId), reason: event.reason }, event.actor, event.request);
224
+ }
225
+ }
226
+ };
227
+ const apiKeyTimelineEventFromAuditEvent = (event, options) => {
228
+ switch (event.type) {
229
+ case "auth.api_key.created": {
230
+ return baseEvent(event, options, event.userId, "api_key", "info", "API key created", { keyId: apiKeyId(event.keyId), scopes: event.scopes }, event.actor, event.request);
231
+ }
232
+ case "auth.api_key.verified": {
233
+ return baseEvent(event, options, event.userId, "api_key", "info", "API key used", { keyId: apiKeyId(event.keyId), scopes: event.scopes }, event.actor, event.request);
234
+ }
235
+ case "auth.api_key.revoked": {
236
+ return baseEvent(event, options, event.userId, "api_key", "info", "API key revoked", { keyId: apiKeyId(event.keyId), reason: event.reason }, event.actor, event.request);
237
+ }
238
+ case "auth.api_key.verification_failed": {
239
+ const userId = actorUserId(event.actor);
240
+ return userId === undefined
241
+ ? Option.none()
242
+ : baseEvent(event, options, userId, "api_key", "warning", "API key verification failed", { reason: event.reason }, event.actor, event.request);
243
+ }
244
+ }
245
+ };
246
+ const refreshTokenTimelineEventFromAuditEvent = (event, options) => {
247
+ switch (event.type) {
248
+ case "auth.refresh_token.issued": {
249
+ return baseEvent(event, options, event.userId, "refresh_token", "info", "Refresh token issued", {
250
+ tokenId: refreshTokenId(event.tokenId),
251
+ familyId: refreshTokenFamilyId(event.familyId),
252
+ expiresAt: event.expiresAt,
253
+ }, event.actor, event.request);
254
+ }
255
+ case "auth.refresh_token.rotated": {
256
+ return baseEvent(event, options, event.userId, "refresh_token", "info", "Refresh token rotated", {
257
+ previousTokenId: refreshTokenId(event.previousTokenId),
258
+ tokenId: refreshTokenId(event.tokenId),
259
+ familyId: refreshTokenFamilyId(event.familyId),
260
+ expiresAt: event.expiresAt,
261
+ }, event.actor, event.request);
262
+ }
263
+ case "auth.refresh_token.reuse_detected": {
264
+ return baseEvent(event, options, event.userId, "refresh_token", "critical", "Refresh token reuse detected", {
265
+ tokenId: refreshTokenId(event.tokenId),
266
+ familyId: refreshTokenFamilyId(event.familyId),
267
+ }, event.actor, event.request);
268
+ }
269
+ case "auth.refresh_token.revoked": {
270
+ return baseEvent(event, options, event.userId, "refresh_token", "info", "Refresh token revoked", {
271
+ tokenId: refreshTokenId(event.tokenId),
272
+ familyId: refreshTokenFamilyId(event.familyId),
273
+ reason: event.reason,
274
+ }, event.actor, event.request);
275
+ }
276
+ }
277
+ };
278
+ const incidentActionOperations = (result) => [
279
+ ...(result.sessions === undefined ? [] : ["revoke_sessions"]),
280
+ ...(result.trustedDevices === undefined ? [] : ["revoke_trusted_devices"]),
281
+ ...(result.apiKeys === undefined ? [] : ["revoke_api_keys"]),
282
+ ...(result.refreshTokens === undefined ? [] : ["revoke_refresh_tokens"]),
283
+ ];
284
+ const incidentActionMetadata = (result) => omitUndefined({
285
+ reason: result.reason,
286
+ operations: incidentActionOperations(result),
287
+ sessions: result.sessions === undefined
288
+ ? undefined
289
+ : {
290
+ revokedAll: result.sessions.revokedAll,
291
+ activeBefore: result.sessions.activeBefore,
292
+ },
293
+ trustedDevices: result.trustedDevices === undefined
294
+ ? undefined
295
+ : { revoked: result.trustedDevices.revoked },
296
+ apiKeys: result.apiKeys === undefined
297
+ ? undefined
298
+ : { revoked: result.apiKeys.revoked },
299
+ refreshTokens: result.refreshTokens === undefined
300
+ ? undefined
301
+ : {
302
+ revokedFamilies: result.refreshTokens.revokedFamilies,
303
+ activeBefore: result.refreshTokens.activeBefore,
304
+ },
305
+ });
306
+ const incidentTimelineEventFromAuditEvent = (event, options) => baseEvent(event, options, event.userId, "incident", "critical", "Incident action executed", incidentActionMetadata(event.result), event.actor, event.request);
307
+ const jwtTimelineEventFromAuditEvent = (event, options) => {
308
+ const userId = actorUserId(event.actor);
309
+ if (userId === undefined) {
310
+ return Option.none();
311
+ }
312
+ switch (event.type) {
313
+ case "auth.jwt.introspected": {
314
+ return baseEvent(event, options, userId, "jwt", event.active ? "info" : "warning", event.active ? "JWT introspected" : "JWT introspection failed", {
315
+ active: event.active,
316
+ jwtId: event.jwtId,
317
+ expiresAt: event.expiresAt,
318
+ reason: event.reason,
319
+ }, event.actor, event.request);
320
+ }
321
+ case "auth.jwt.revoked": {
322
+ return baseEvent(event, options, userId, "jwt", "info", "JWT revoked", {
323
+ jwtId: event.jwtId,
324
+ expiresAt: event.expiresAt,
325
+ reason: event.reason,
326
+ }, event.actor, event.request);
327
+ }
328
+ }
329
+ };
330
+ export const securityTimelineEventFromAuditEvent = (event, options = {}) => {
331
+ if (isAuthTimelineAuditEvent(event)) {
332
+ return authTimelineEventFromAuditEvent(event, options);
333
+ }
334
+ if (isRiskTimelineAuditEvent(event)) {
335
+ return riskTimelineEventFromAuditEvent(event, options);
336
+ }
337
+ if (isOAuthTimelineAuditEvent(event)) {
338
+ return oauthTimelineEventFromAuditEvent(event, options);
339
+ }
340
+ if (isMfaTimelineAuditEvent(event)) {
341
+ return mfaTimelineEventFromAuditEvent(event, options);
342
+ }
343
+ if (isApiKeyTimelineAuditEvent(event)) {
344
+ return apiKeyTimelineEventFromAuditEvent(event, options);
345
+ }
346
+ if (isRefreshTokenTimelineAuditEvent(event)) {
347
+ return refreshTokenTimelineEventFromAuditEvent(event, options);
348
+ }
349
+ if (isIncidentTimelineAuditEvent(event)) {
350
+ return incidentTimelineEventFromAuditEvent(event, options);
351
+ }
352
+ if (isJwtTimelineAuditEvent(event)) {
353
+ return jwtTimelineEventFromAuditEvent(event, options);
354
+ }
355
+ return Option.none();
356
+ };
357
+ export const insert = (event) => SecurityTimelineStore.use((store) => store.insert(event));
358
+ export const listByUser = (input) => SecurityTimelineStore.use((store) => store.listByUser(input));
359
+ export const deleteBefore = (input) => SecurityTimelineStore.use((store) => store.deleteBefore(input));
360
+ export const recordAuditEvent = (event, options = {}) => {
361
+ const timelineEvent = securityTimelineEventFromAuditEvent(event, options);
362
+ return Option.isNone(timelineEvent)
363
+ ? Effect.succeed(Option.none())
364
+ : insert(timelineEvent.value).pipe(Effect.as(timelineEvent));
365
+ };
366
+ const securityTimelineProjectionOptions = (event, options) => {
367
+ const id = event.id === undefined && options.timelineEventId !== undefined
368
+ ? options.timelineEventId(event)
369
+ : undefined;
370
+ return id === undefined ? {} : { id };
371
+ };
372
+ const projectAuditEventToSecurityTimeline = (dependencies, event, options) => {
373
+ const timelineEvent = securityTimelineEventFromAuditEvent(event, securityTimelineProjectionOptions(event, options));
374
+ return Option.isNone(timelineEvent)
375
+ ? Effect.void
376
+ : dependencies.securityTimeline.insert(timelineEvent.value);
377
+ };
378
+ const securityTimelineProjectionError = (cause) => new AuditLogError({
379
+ message: "Failed to project audit event to security timeline",
380
+ cause,
381
+ });
382
+ export const makeSecurityTimelineAuditLog = (dependencies) => {
383
+ const options = dependencies.options ?? {};
384
+ const projectionFailure = options.projectionFailure ?? "ignore";
385
+ return AuditLog.make({
386
+ emit: (event) => {
387
+ const projection = projectAuditEventToSecurityTimeline(dependencies, event, options);
388
+ const handledProjection = projectionFailure === "fail"
389
+ ? projection.pipe(Effect.mapError(securityTimelineProjectionError))
390
+ : projection.pipe(Effect.catchTag("SecurityTimelineStoreError", () => Effect.void));
391
+ return dependencies.auditLog.emit(event).pipe(Effect.flatMap(() => handledProjection));
392
+ },
393
+ });
394
+ };
395
+ export const SecurityTimelineAuditLogLive = (options = {}) => Layer.effect(AuditLog)(Effect.gen(function* () {
396
+ const auditLog = yield* AuditLog;
397
+ const securityTimeline = yield* SecurityTimelineStore;
398
+ return makeSecurityTimelineAuditLog({
399
+ auditLog,
400
+ securityTimeline,
401
+ options,
402
+ });
403
+ }));
404
+ const compareTimelineEvents = (left, right) => {
405
+ const occurredAt = Number(right.occurredAt) - Number(left.occurredAt);
406
+ return occurredAt === 0
407
+ ? String(right.id).localeCompare(String(left.id))
408
+ : occurredAt;
409
+ };
410
+ const insertSortedTimelineEvent = (events, event) => {
411
+ const index = events.findIndex((existing) => compareTimelineEvents(event, existing) < 0);
412
+ return index === -1
413
+ ? [...events, event]
414
+ : [...events.slice(0, index), event, ...events.slice(index)];
415
+ };
416
+ const sortTimelineEvents = (events) => {
417
+ let sorted = [];
418
+ for (const event of events) {
419
+ sorted = insertSortedTimelineEvent(sorted, event);
420
+ }
421
+ return sorted;
422
+ };
423
+ export const filterSecurityTimelineEvents = (events, input) => {
424
+ const types = input.types === undefined ? undefined : new Set(input.types);
425
+ const categories = input.categories === undefined ? undefined : new Set(input.categories);
426
+ const beforeOccurredAt = input.beforeOccurredAt === undefined
427
+ ? undefined
428
+ : Number(input.beforeOccurredAt);
429
+ const limit = input.limit === undefined ? undefined : Math.max(0, Math.floor(input.limit));
430
+ const filtered = [...events]
431
+ .filter((event) => event.userId === input.userId)
432
+ .filter((event) => beforeOccurredAt === undefined || Number(event.occurredAt) < beforeOccurredAt)
433
+ .filter((event) => types === undefined || types.has(event.type))
434
+ .filter((event) => categories === undefined || categories.has(event.category));
435
+ const sorted = sortTimelineEvents(filtered).map(clone);
436
+ return limit === undefined ? sorted : sorted.slice(0, limit);
437
+ };
438
+ export const makeSecurityTimelineStoreMemory = () => {
439
+ const eventsById = new Map();
440
+ return SecurityTimelineStore.make({
441
+ insert: (event) => Effect.sync(() => {
442
+ eventsById.set(event.id, clone(event));
443
+ }),
444
+ listByUser: (input) => Effect.sync(() => filterSecurityTimelineEvents(eventsById.values(), input)),
445
+ deleteBefore: (input) => Effect.sync(() => {
446
+ const deletedIds = [];
447
+ for (const [id, event] of eventsById) {
448
+ if (Number(event.occurredAt) < Number(input.beforeOccurredAt) &&
449
+ (input.userId === undefined || event.userId === input.userId)) {
450
+ deletedIds.push(id);
451
+ }
452
+ }
453
+ for (const id of deletedIds) {
454
+ eventsById.delete(id);
455
+ }
456
+ return deletedIds.length;
457
+ }),
458
+ });
459
+ };
460
+ export const SecurityTimelineStoreMemoryLive = Layer.sync(SecurityTimelineStore)(makeSecurityTimelineStoreMemory);
461
+ //# sourceMappingURL=SecurityTimeline.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"SecurityTimeline.js","sourceRoot":"","sources":["../src/SecurityTimeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAIrE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AA2BxD,MAAM,CAAC,MAAM,uBAAuB,GAClC,KAAK,CAAC,OAAO,EAA2B,CAAC;AA8C3C,MAAM,OAAO,0BAA2B,SAAQ,IAAI,CAAC,WAAW,CAC9D,4BAA4B,CAK5B;CAAG;AAcL,MAAM,OAAO,qBAAsB,SAAQ,OAAO,CAAC,OAAO,EAGvD,CAAC,4BAA4B,CAAC;CAAG;AAEpC,WAAiB,qBAAqB;IACvB,0BAAI,GAAG,CAClB,OAAqC,EACP,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC,EAJgB,qBAAqB,KAArB,qBAAqB,QAIrC;AAeD,MAAM,KAAK,GAAG,CAAI,KAAQ,EAAK,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;AAEzD,MAAM,aAAa,GAAG,CAA8C,MAAS,EAAK,EAAE,CAClF,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC7D,CAAC;AAET,MAAM,gBAAgB,GAAG,CACvB,KAAqB,EACrB,OAA+C,EACV,EAAE,CACvC,OAAO,CAAC,EAAE;IACV,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAE3E,MAAM,WAAW,GAAG,CAAC,KAAiB,EAAsB,EAAE,CAC5D,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAEnD,MAAM,aAAa,GAAG,CAAC,OAAqB,EAAsB,EAAE,CAClE,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAEvD,MAAM,WAAW,GAAG,CAAC,EAAe,EAAe,EAAE,CAAC,EAAE,CAAC;AACzD,MAAM,YAAY,GAAG,CAAC,EAAgB,EAAgB,EAAE,CAAC,EAAE,CAAC;AAC5D,MAAM,SAAS,GAAG,CAAC,EAAyB,EAAyB,EAAE,CAAC,EAAE,CAAC;AAC3E,MAAM,cAAc,GAAG,CAAC,EAAkB,EAAkB,EAAE,CAAC,EAAE,CAAC;AAClE,MAAM,eAAe,GAAG,CAAC,EAAmB,EAAmB,EAAE,CAAC,EAAE,CAAC;AACrE,MAAM,mBAAmB,GAAG,CAAC,EAAuB,EAAuB,EAAE,CAAC,EAAE,CAAC;AACjF,MAAM,QAAQ,GAAG,CAAC,EAAY,EAAY,EAAE,CAAC,EAAE,CAAC;AAChD,MAAM,QAAQ,GAAG,CAAC,EAAY,EAAY,EAAE,CAAC,EAAE,CAAC;AAChD,MAAM,cAAc,GAAG,CAAC,EAA8B,EAA8B,EAAE,CACpF,EAAE,CAAC;AACL,MAAM,oBAAoB,GAAG,CAC3B,EAAwB,EACF,EAAE,CAAC,EAAE,CAAC;AAE9B,MAAM,SAAS,GAAG,CAChB,KAAqB,EACrB,OAA+C,EAC/C,MAAc,EACd,QAAuC,EACvC,QAAuC,EACvC,OAAe,EACf,QAA4C,EAC5C,KAAkB,EAClB,OAAsB,EACqB,EAAE;IAC7C,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE5C,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAChB,aAAa,CAAC;QACZ,EAAE;QACF,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ;QACR,QAAQ;QACR,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,OAAO;QACP,KAAK;QACL,OAAO;QACP,QAAQ;KACT,CAAiC,CACnC,CAAC;AACJ,CAAC,CAAC;AAwDF,MAAM,2BAA2B,GAAwC,IAAI,GAAG,CAAC;IAC/E,mBAAmB;IACnB,sBAAsB;IACtB,oBAAoB;IACpB,sBAAsB;CACvB,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAwC,IAAI,GAAG,CAAC;IAC/E,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAwC,IAAI,GAAG,CAAC;IAChF,2BAA2B;IAC3B,6BAA6B;IAC7B,wCAAwC;IACxC,sCAAsC;IACtC,qCAAqC;IACrC,mCAAmC;CACpC,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAwC,IAAI,GAAG,CAAC;IAC9E,iCAAiC;IACjC,8BAA8B;IAC9B,4BAA4B;IAC5B,6BAA6B;IAC7B,8BAA8B;IAC9B,4BAA4B;IAC5B,0BAA0B;IAC1B,2BAA2B;CAC5B,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAwC,IAAI,GAAG,CAAC;IACjF,sBAAsB;IACtB,sBAAsB;IACtB,kCAAkC;IAClC,uBAAuB;CACxB,CAAC,CAAC;AAEH,MAAM,mCAAmC,GACvC,IAAI,GAAG,CAAC;IACN,2BAA2B;IAC3B,mCAAmC;IACnC,4BAA4B;IAC5B,4BAA4B;CAC7B,CAAC,CAAC;AAEL,MAAM,+BAA+B,GACnC,IAAI,GAAG,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;AAE7C,MAAM,0BAA0B,GAAwC,IAAI,GAAG,CAAC;IAC9E,uBAAuB;IACvB,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,wBAAwB,GAAG,CAC/B,KAAqB,EACY,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAElF,MAAM,wBAAwB,GAAG,CAC/B,KAAqB,EACY,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAElF,MAAM,yBAAyB,GAAG,CAChC,KAAqB,EACa,EAAE,CAAC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEpF,MAAM,uBAAuB,GAAG,CAC9B,KAAqB,EACW,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEhF,MAAM,0BAA0B,GAAG,CACjC,KAAqB,EACc,EAAE,CACrC,6BAA6B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEhD,MAAM,gCAAgC,GAAG,CACvC,KAAqB,EACoB,EAAE,CAC3C,mCAAmC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEtD,MAAM,4BAA4B,GAAG,CACnC,KAAqB,EACgB,EAAE,CACvC,+BAA+B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAElD,MAAM,uBAAuB,GAAG,CAC9B,KAAqB,EACW,EAAE,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAEhF,MAAM,+BAA+B,GAAG,CACtC,KAA6B,EAC7B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,MAAM,EACN,MAAM,EACN,iBAAiB,EACjB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACxB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;QACD,KAAK,mBAAmB,CAAC,CAAC,CAAC;YACzB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5C,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,MAAM,EACN,SAAS,EACT,cAAc,EACd,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC9C,SAAS,EACT,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;QACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC/D,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;QACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,QAAQ,EACR,SAAS,EACT,wBAAwB,EACxB,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC5D,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAC3B,UAA+B,EACA,EAAE,CACjC,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK,UAAU;IAClC,CAAC,CAAC,UAAU;IACZ,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,KAAK,QAAQ;QACtE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC;AAEf,MAAM,sBAAsB,GAAG,CAC7B,UAA+B,EACI,EAAE,CACrC,aAAa,CAAC;IACZ,MAAM,EAAE,UAAU,CAAC,MAAM;IACzB,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC;IACxB,GAAG,EAAE,UAAU,CAAC,GAAG;IACnB,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE;IAC5C,IAAI,EAAE;QACJ,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK;QAC5B,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAC9C,aAAa,CAAC;YACZ,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB,CAAC,CACH;KACF;IACD,QAAQ,EAAE,UAAU,CAAC,QAAQ;CAC9B,CAAC,CAAC;AAEL,MAAM,+BAA+B,GAAG,CACtC,KAA6B,EAC7B,OAA+C,EACJ,EAAE,CAC7C,SAAS,CACP,KAAK,EACL,OAAO,EACP,KAAK,CAAC,UAAU,CAAC,MAAM,EACvB,MAAM,EACN,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,EACtC,qBAAqB,EACrB,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,EACxC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;AAEJ,MAAM,gCAAgC,GAAG,CACvC,KAA8B,EAC9B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,sBAAsB,EACtB;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,6BAA6B,CAAC,CAAC,CAAC;YACnC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,wBAAwB,EACxB;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,sCAAsC,CAAC,CAAC,CAAC;YAC5C,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,iCAAiC,EACjC;gBACE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC3C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,wCAAwC,CAAC,CAAC,CAAC;YAC9C,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,mCAAmC,EACnC;gBACE,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;gBAC3C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,qCAAqC,CAAC,CAAC,CAAC;YAC3C,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,gCAAgC,EAChC;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;aAC3C,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,mCAAmC,CAAC,CAAC,CAAC;YACzC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,OAAO,EACP,MAAM,EACN,8BAA8B,EAC9B;gBACE,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC1C,UAAU,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC7C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,8BAA8B,GAAG,CACrC,KAA4B,EAC5B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iCAAiC,CAAC,CAAC,CAAC;YACvC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,iBAAiB,EACjB;gBACE,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC;gBACrD,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,8BAA8B,CAAC,CAAC,CAAC;YACpC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,yBAAyB,EACzB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAC1C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAC1C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,sBAAsB,EACtB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAC1C,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,0BAA0B,CAAC,CAAC,CAAC;YAChC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,qBAAqB,EACrB,EAAE,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAChE,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,8BAA8B,CAAC,CAAC,CAAC;YACpC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,0BAA0B,EAC1B,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EACtB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,6BAA6B,CAAC,CAAC,CAAC;YACnC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,SAAS,EACT,oBAAoB,EACpB,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,EACtC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,KAAK,EACL,MAAM,EACN,uBAAuB,EACvB,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAC5D,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CACxC,KAA+B,EAC/B,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACtD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,SAAS,EACT,MAAM,EACN,cAAc,EACd,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACtD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,sBAAsB,CAAC,CAAC,CAAC;YAC5B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACtD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,kCAAkC,CAAC,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAExC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,SAAS,CACP,KAAK,EACL,OAAO,EACP,MAAM,EACN,SAAS,EACT,SAAS,EACT,6BAA6B,EAC7B,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EACxB,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACR,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,uCAAuC,GAAG,CAC9C,KAAqC,EACrC,OAA+C,EACJ,EAAE;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,2BAA2B,CAAC,CAAC,CAAC;YACjC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,MAAM,EACN,sBAAsB,EACtB;gBACE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,MAAM,EACN,uBAAuB,EACvB;gBACE,eAAe,EAAE,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC;gBACtD,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,mCAAmC,CAAC,CAAC,CAAC;YACzC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,UAAU,EACV,8BAA8B,EAC9B;gBACE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;aAC/C,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,eAAe,EACf,MAAM,EACN,uBAAuB,EACvB;gBACE,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;gBACtC,QAAQ,EAAE,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9C,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,MAA4B,EACT,EAAE,CAAC;IACtB,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7D,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC;IAC1E,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC5D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;CACzE,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,MAA4B,EACO,EAAE,CACrC,aAAa,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,UAAU,EAAE,wBAAwB,CAAC,MAAM,CAAC;IAC5C,QAAQ,EACN,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU;YACtC,YAAY,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY;SAC3C;IACP,cAAc,EACZ,MAAM,CAAC,cAAc,KAAK,SAAS;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE;IAChD,OAAO,EACL,MAAM,CAAC,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE;IACzC,aAAa,EACX,MAAM,CAAC,aAAa,KAAK,SAAS;QAChC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,eAAe;YACrD,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,YAAY;SAChD;CACR,CAAC,CAAC;AAEL,MAAM,mCAAmC,GAAG,CAC1C,KAAiC,EACjC,OAA+C,EACJ,EAAE,CAC7C,SAAS,CACP,KAAK,EACL,OAAO,EACP,KAAK,CAAC,MAAM,EACZ,UAAU,EACV,UAAU,EACV,0BAA0B,EAC1B,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,EACpC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;AAEJ,MAAM,8BAA8B,GAAG,CACrC,KAA4B,EAC5B,OAA+C,EACJ,EAAE;IAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAExC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,uBAAuB,CAAC,CAAC,CAAC;YAC7B,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,MAAM,EACN,KAAK,EACL,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EACjC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,0BAA0B,EAC9D;gBACE,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,OAAO,SAAS,CACd,KAAK,EACL,OAAO,EACP,MAAM,EACN,KAAK,EACL,MAAM,EACN,aAAa,EACb;gBACE,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,EACD,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,OAAO,CACd,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CACjD,KAAqB,EACrB,UAAkD,EAAE,EACT,EAAE;IAC7C,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,+BAA+B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,yBAAyB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,gCAAgC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,8BAA8B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,iCAAiC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,gCAAgC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,uCAAuC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,mCAAmC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,OAAO,8BAA8B,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,KAA4B,EAC4C,EAAE,CAC1E,qBAAqB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,KAAsC,EAKtC,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,KAAwC,EACkC,EAAE,CAC5E,qBAAqB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAqB,EACrB,UAAkD,EAAE,EAKpD,EAAE;IACF,MAAM,aAAa,GAAG,mCAAmC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE1E,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,iCAAiC,GAAG,CACxC,KAAqB,EACrB,OAAwC,EACA,EAAE;IAC1C,MAAM,EAAE,GACN,KAAK,CAAC,EAAE,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;QAC7D,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC;QAChC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,mCAAmC,GAAG,CAC1C,YAEC,EACD,KAAqB,EACrB,OAAwC,EACxC,EAAE;IACF,MAAM,aAAa,GAAG,mCAAmC,CACvD,KAAK,EACL,iCAAiC,CAAC,KAAK,EAAE,OAAO,CAAC,CAClD,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,YAAY,CAAC,gBAAgB,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,+BAA+B,GAAG,CAAC,KAAc,EAAE,EAAE,CACzD,IAAI,aAAa,CAAC;IAChB,OAAO,EAAE,oDAAoD;IAC7D,KAAK;CACN,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,YAI5C,EAAmB,EAAE;IACpB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3C,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC;IAEhE,OAAO,QAAQ,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;YACd,MAAM,UAAU,GAAG,mCAAmC,CACpD,YAAY,EACZ,KAAK,EACL,OAAO,CACR,CAAC;YACF,MAAM,iBAAiB,GACrB,iBAAiB,KAAK,MAAM;gBAC1B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,+BAA+B,CAAC,CAAC;gBACnE,CAAC,CAAC,UAAU,CAAC,IAAI,CACb,MAAM,CAAC,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CACjE,CAAC;YAER,OAAO,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,CACxC,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,UAA2C,EAAE,EAC7C,EAAE,CACF,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CACpB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC;IAEtD,OAAO,4BAA4B,CAAC;QAClC,QAAQ;QACR,gBAAgB;QAChB,OAAO;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,qBAAqB,GAAG,CAC5B,IAA2B,EAC3B,KAA4B,EACpB,EAAE;IACV,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAEtE,OAAO,UAAU,KAAK,CAAC;QACrB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC,CAAC,UAAU,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAChC,MAAwC,EACxC,KAA4B,EACM,EAAE;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAC5B,CAAC,QAAQ,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CACzD,CAAC;IAEF,OAAO,KAAK,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC;QACpB,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACjE,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CACzB,MAAuC,EACL,EAAE;IACpC,IAAI,MAAM,GAAqC,EAAE,CAAC;IAElD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,MAAuC,EACvC,KAAsC,EACJ,EAAE;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,UAAU,GACd,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,gBAAgB,GACpB,KAAK,CAAC,gBAAgB,KAAK,SAAS;QAClC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrC,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC;SACzB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC;SAChD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CACR,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,gBAAgB,CAChF;SACA,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC/D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEvD,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAC1C,GAAiC,EAAE;IACjC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkD,CAAC;IAE7E,OAAO,qBAAqB,CAAC,IAAI,CAAC;QAChC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC;QACJ,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,4BAA4B,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7E,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CACtB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,UAAU,GAA8B,EAAE,CAAC;YAEjD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;gBACrC,IACE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC;oBACzD,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,EAC7D,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC5B,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,CAAC;YAED,OAAO,UAAU,CAAC,MAAM,CAAC;QAC3B,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAC9E,+BAA+B,CAChC,CAAC"}