@effect-auth/core 0.1.0-alpha.10 → 0.1.0-alpha.13

package/dist/LoginRisk.js

@@ -1,5 +1,6 @@
 // oxlint-disable import(namespace): Schema.Codec is a type namespace exported by Effect.
 import { Context, Data, Effect, Layer, Schema } from "effect";
+import { currentUnixMillis } from "./Internal.js";
 export const LoginRiskLevelSchema = Schema.Literals([
     "unknown",
     "low",
@@ -15,6 +16,21 @@ const loginRiskLevelRank = {
     high: 3,
     critical: 4,
 };
+const authAssuranceLevelRank = {
+    aal1: 1,
+    aal2: 2,
+    aal3: 3,
+};
+export const compareLoginRiskLevels = (left, right) => loginRiskLevelRank[left] - loginRiskLevelRank[right];
+export const maxLoginRiskLevel = (levels, emptyLevel = "unknown") => {
+    let max = emptyLevel;
+    for (const level of levels) {
+        if (compareLoginRiskLevels(level, max) > 0) {
+            max = level;
+        }
+    }
+    return max;
+};
 export class LoginRiskSignal extends Schema.Class("LoginRiskSignal")({
     type: Schema.String,
     level: Schema.optional(LoginRiskLevelSchema),
@@ -40,12 +56,408 @@ export class LoginRiskContext extends Schema.Class("LoginRiskContext")({
 export const isLoginRiskContext = Schema.is(LoginRiskContext);
 export class LoginRiskError extends Data.TaggedError("LoginRiskError") {
 }
+export class EmailReputationError extends Data.TaggedError("EmailReputationError") {
+}
+export class IpReputationError extends Data.TaggedError("IpReputationError") {
+}
+export class LoginRiskHistoryError extends Data.TaggedError("LoginRiskHistoryError") {
+}
+export class EmailReputation extends Context.Service()("auth/EmailReputation") {
+}
+(function (EmailReputation) {
+    EmailReputation.make = (service) => EmailReputation.of(service);
+})(EmailReputation || (EmailReputation = {}));
+export class IpReputation extends Context.Service()("auth/IpReputation") {
+}
+(function (IpReputation) {
+    IpReputation.make = (service) => IpReputation.of(service);
+})(IpReputation || (IpReputation = {}));
+export class LoginRiskHistory extends Context.Service()("auth/LoginRiskHistory") {
+}
+(function (LoginRiskHistory) {
+    LoginRiskHistory.make = (service) => LoginRiskHistory.of(service);
+})(LoginRiskHistory || (LoginRiskHistory = {}));
 export class LoginRiskEngine extends Context.Service()("auth/LoginRiskEngine") {
 }
 (function (LoginRiskEngine) {
     LoginRiskEngine.make = (service) => LoginRiskEngine.of(service);
     LoginRiskEngine.custom = (assess) => LoginRiskEngine.of({ assess });
 })(LoginRiskEngine || (LoginRiskEngine = {}));
+export const makeLoginRiskSignal = (input) => LoginRiskSignal.make({
+    type: input.type,
+    ...(input.level === undefined ? {} : { level: input.level }),
+    ...(input.metadata === undefined
+        ? {}
+        : { metadata: structuredClone(input.metadata) }),
+});
+export const makeLoginRiskContext = (input = {}) => {
+    const signals = [...(input.signals ?? [])].map(makeLoginRiskSignal);
+    const level = input.level ??
+        maxLoginRiskLevel(signals.map((signal) => signal.level ?? "unknown"), input.emptyLevel);
+    return LoginRiskContext.make({
+        level,
+        signals,
+        ...(input.metadata === undefined
+            ? {}
+            : { metadata: structuredClone(input.metadata) }),
+    });
+};
+export const summarizeLoginRiskContext = (risk) => ({
+    level: risk.level,
+    signals: risk.signals.map((signal) => ({
+        type: signal.type,
+        ...(signal.level === undefined ? {} : { level: signal.level }),
+    })),
+});
+export const makeLoginRiskAssessment = (input) => ({
+    userId: input.userId,
+    method: input.method,
+    amr: [...input.amr],
+    aal: input.aal,
+    device: { status: input.device.status },
+    risk: summarizeLoginRiskContext(input.risk),
+    ...(input.metadata === undefined
+        ? {}
+        : { metadata: structuredClone(input.metadata) }),
+});
+const compactMetadata = (input) => {
+    const entries = Object.entries(input).filter(([, value]) => value !== undefined && (!Array.isArray(value) || value.length > 0));
+    return entries.length === 0 ? undefined : Object.fromEntries(entries);
+};
+const loginRiskError = (message, cause) => new LoginRiskError({ message, cause });
+const loginRiskRuleSignals = (result) => {
+    if (result === undefined) {
+        return [];
+    }
+    return (Array.isArray(result) ? result : [result]).map(makeLoginRiskSignal);
+};
+const loginRiskRuleOptions = (value) => value === undefined || value === true || value === false ? undefined : value;
+const authAssuranceAtLeast = (actual, minimum) => authAssuranceLevelRank[actual] >= authAssuranceLevelRank[minimum];
+export const makeLoginRiskRule = (assess) => ({ assess });
+export const makeLoginRiskDeviceRule = (options = {}) => makeLoginRiskRule((input) => {
+    const { status } = input.device;
+    const level = status === "known"
+        ? options.knownDeviceLevel
+        : status === "new"
+            ? (options.newDeviceLevel ?? "medium")
+            : (options.unknownDeviceLevel ?? "medium");
+    return Effect.succeed(level === undefined
+        ? undefined
+        : makeLoginRiskSignal({
+            type: `${status}-device`,
+            level,
+            metadata: { status },
+        }));
+});
+export const makeLoginRiskEmailVerificationRule = (options = {}) => makeLoginRiskRule((input) => Effect.succeed(input.emailVerified === false
+    ? makeLoginRiskSignal({
+        type: "unverified-email",
+        level: options.unverifiedEmailLevel ?? "medium",
+    })
+    : undefined));
+export const makeLoginRiskAssuranceRule = (options = {}) => {
+    const minimum = options.minimum ?? "aal2";
+    const level = options.level ?? "medium";
+    return makeLoginRiskRule((input) => Effect.succeed(authAssuranceAtLeast(input.aal, minimum)
+        ? undefined
+        : makeLoginRiskSignal({
+            type: "low-assurance",
+            level,
+            metadata: { actual: input.aal, minimum },
+        })));
+};
+const emailReputationSignals = (result, options) => [
+    ...(result.blocked === true
+        ? [
+            {
+                type: "blocked-email",
+                level: options.blockedLevel ?? "critical",
+                metadata: compactMetadata({ blocked: true, reasons: result.reasons }),
+            },
+        ]
+        : []),
+    ...(result.disposable === true
+        ? [
+            {
+                type: "disposable-email",
+                level: options.disposableLevel ?? "high",
+                metadata: compactMetadata({ disposable: true, reasons: result.reasons }),
+            },
+        ]
+        : []),
+    ...(result.suspiciousDomain === true
+        ? [
+            {
+                type: "suspicious-email-domain",
+                level: options.suspiciousDomainLevel ?? "medium",
+                metadata: compactMetadata({
+                    suspiciousDomain: true,
+                    reasons: result.reasons,
+                }),
+            },
+        ]
+        : []),
+    ...(result.riskLevel === undefined
+        ? []
+        : [
+            {
+                type: "email-reputation",
+                level: result.riskLevel,
+                metadata: compactMetadata({ reasons: result.reasons }),
+            },
+        ]),
+];
+const ipReputationSignals = (result, options) => [
+    ...(result.blocked === true
+        ? [
+            {
+                type: "blocked-ip",
+                level: options.blockedLevel ?? "critical",
+                metadata: compactMetadata({ blocked: true, reasons: result.reasons }),
+            },
+        ]
+        : []),
+    ...(result.tor === true
+        ? [
+            {
+                type: "tor-ip",
+                level: options.torLevel ?? "high",
+                metadata: compactMetadata({ tor: true, reasons: result.reasons }),
+            },
+        ]
+        : []),
+    ...(result.proxy === true
+        ? [
+            {
+                type: "proxy-ip",
+                level: options.proxyLevel ?? "medium",
+                metadata: compactMetadata({ proxy: true, reasons: result.reasons }),
+            },
+        ]
+        : []),
+    ...(result.vpn === true
+        ? [
+            {
+                type: "vpn-ip",
+                level: options.vpnLevel ?? "medium",
+                metadata: compactMetadata({ vpn: true, reasons: result.reasons }),
+            },
+        ]
+        : []),
+    ...(result.datacenter === true
+        ? [
+            {
+                type: "datacenter-ip",
+                level: options.datacenterLevel ?? "medium",
+                metadata: compactMetadata({ datacenter: true, reasons: result.reasons }),
+            },
+        ]
+        : []),
+    ...(result.riskLevel === undefined
+        ? []
+        : [
+            {
+                type: "ip-reputation",
+                level: result.riskLevel,
+                metadata: compactMetadata({ reasons: result.reasons }),
+            },
+        ]),
+];
+const loginRiskHistoryVelocityLevel = (result, options) => {
+    if (result.velocityRiskLevel !== undefined) {
+        return result.velocityRiskLevel;
+    }
+    const { failedLoginCountThreshold, loginCountThreshold } = options;
+    const matchesLoginCount = loginCountThreshold !== undefined &&
+        result.recentLoginCount !== undefined &&
+        result.recentLoginCount >= loginCountThreshold;
+    const matchesFailedLoginCount = failedLoginCountThreshold !== undefined &&
+        result.recentFailedLoginCount !== undefined &&
+        result.recentFailedLoginCount >= failedLoginCountThreshold;
+    return matchesLoginCount || matchesFailedLoginCount
+        ? (options.velocityLevel ?? "high")
+        : undefined;
+};
+const loginRiskHistorySignals = (result, options, enabled) => {
+    const velocityLevel = enabled.velocity === true
+        ? loginRiskHistoryVelocityLevel(result, options)
+        : undefined;
+    return [
+        ...(velocityLevel === undefined
+            ? []
+            : [
+                {
+                    type: "login-velocity",
+                    level: velocityLevel,
+                    metadata: compactMetadata({
+                        recentLoginCount: result.recentLoginCount,
+                        recentFailedLoginCount: result.recentFailedLoginCount,
+                        recentSuccessfulLoginCount: result.recentSuccessfulLoginCount,
+                        reasons: result.reasons,
+                    }),
+                },
+            ]),
+        ...(enabled.device === true && result.newDevice === true
+            ? [
+                {
+                    type: "new-device-history",
+                    level: options.newDeviceLevel ?? "medium",
+                    metadata: compactMetadata({ newDevice: true, reasons: result.reasons }),
+                },
+            ]
+            : []),
+        ...(enabled.location === true && result.newLocation === true
+            ? [
+                {
+                    type: "new-location",
+                    level: options.newLocationLevel ?? "medium",
+                    metadata: compactMetadata({ newLocation: true, reasons: result.reasons }),
+                },
+            ]
+            : []),
+        ...(enabled.impossibleTravel === true && result.impossibleTravel === true
+            ? [
+                {
+                    type: "impossible-travel",
+                    level: options.impossibleTravelLevel ?? "critical",
+                    metadata: compactMetadata({
+                        impossibleTravel: true,
+                        reasons: result.reasons,
+                    }),
+                },
+            ]
+            : []),
+        ...(enabled.riskLevel === true && result.riskLevel !== undefined
+            ? [
+                {
+                    type: "login-history",
+                    level: result.riskLevel,
+                    metadata: compactMetadata({ reasons: result.reasons }),
+                },
+            ]
+            : []),
+    ];
+};
+const makeLoginRiskHistoryLookupInput = (input, occurredAt) => ({
+    userId: input.userId,
+    ...(input.email === undefined ? {} : { email: input.email }),
+    occurredAt,
+    method: input.method,
+    amr: [...input.amr],
+    aal: input.aal,
+    device: { status: input.device.status },
+    ...(input.deviceKey === undefined ? {} : { deviceKey: input.deviceKey }),
+    ...(input.locationKey === undefined ? {} : { locationKey: input.locationKey }),
+    ...(input.request === undefined ? {} : { request: { ...input.request } }),
+    ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+});
+const makeLoginRiskHistoryRuleFor = (dependencies, enabled) => {
+    const options = dependencies.options ?? {};
+    const lookupFailure = options.lookupFailure ?? "ignore";
+    return makeLoginRiskRule((input) => Effect.gen(function* () {
+        const occurredAt = input.occurredAt ?? (yield* currentUnixMillis);
+        const lookup = dependencies.loginRiskHistory.lookup(makeLoginRiskHistoryLookupInput(input, occurredAt));
+        const handledLookup = lookupFailure === "fail"
+            ? lookup.pipe(Effect.mapError((cause) => loginRiskError("Login risk history lookup failed", cause)), Effect.map((result) => result))
+            : lookup.pipe(Effect.catchTag("LoginRiskHistoryError", () => Effect.succeed(undefined)));
+        const result = yield* handledLookup;
+        return result === undefined
+            ? undefined
+            : loginRiskHistorySignals(result, options, enabled);
+    }));
+};
+export const makeEmailReputationRiskRule = (dependencies) => {
+    const options = dependencies.options ?? {};
+    const lookupFailure = options.lookupFailure ?? "ignore";
+    return makeLoginRiskRule((input) => {
+        if (input.email === undefined) {
+            return Effect.succeed(undefined);
+        }
+        const lookup = dependencies.emailReputation.lookup({
+            email: input.email,
+            ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+        });
+        const handledLookup = lookupFailure === "fail"
+            ? lookup.pipe(Effect.mapError((cause) => loginRiskError("Email reputation lookup failed", cause)), Effect.map((result) => result))
+            : lookup.pipe(Effect.catchTag("EmailReputationError", () => Effect.succeed(undefined)));
+        return handledLookup.pipe(Effect.map((result) => result === undefined ? undefined : emailReputationSignals(result, options)));
+    });
+};
+export const makeIpReputationRiskRule = (dependencies) => {
+    const options = dependencies.options ?? {};
+    const lookupFailure = options.lookupFailure ?? "ignore";
+    return makeLoginRiskRule((input) => {
+        if (input.request?.ip === undefined) {
+            return Effect.succeed(undefined);
+        }
+        const { ip, ...request } = input.request;
+        const lookup = dependencies.ipReputation.lookup({
+            ip,
+            request,
+            ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+        });
+        const handledLookup = lookupFailure === "fail"
+            ? lookup.pipe(Effect.mapError((cause) => loginRiskError("IP reputation lookup failed", cause)), Effect.map((result) => result))
+            : lookup.pipe(Effect.catchTag("IpReputationError", () => Effect.succeed(undefined)));
+        return handledLookup.pipe(Effect.map((result) => result === undefined ? undefined : ipReputationSignals(result, options)));
+    });
+};
+export const makeLoginHistoryRiskRule = (dependencies) => makeLoginRiskHistoryRuleFor(dependencies, {
+    velocity: true,
+    device: true,
+    location: true,
+    impossibleTravel: true,
+    riskLevel: true,
+});
+export const makeLoginVelocityRiskRule = (dependencies) => makeLoginRiskHistoryRuleFor(dependencies, {
+    velocity: true,
+});
+export const makeLoginDeviceHistoryRiskRule = (dependencies) => makeLoginRiskHistoryRuleFor(dependencies, {
+    device: true,
+});
+export const makeImpossibleTravelRiskRule = (dependencies) => makeLoginRiskHistoryRuleFor(dependencies, {
+    impossibleTravel: true,
+});
+export const makeLoginRiskEngine = (options = {}) => {
+    const rules = options.rules ?? [];
+    return LoginRiskEngine.make({
+        assess: (input) => Effect.gen(function* () {
+            const signals = [];
+            for (const rule of rules) {
+                signals.push(...loginRiskRuleSignals(yield* rule.assess(input)));
+            }
+            return makeLoginRiskContext({
+                signals,
+                emptyLevel: options.emptyLevel,
+                ...(options.metadata === undefined ? {} : { metadata: options.metadata }),
+            });
+        }),
+    });
+};
+export const makeLoginRiskEngineBasic = (options = {}) => {
+    const rules = [];
+    if (options.device !== false) {
+        rules.push(makeLoginRiskDeviceRule(loginRiskRuleOptions(options.device)));
+    }
+    if (options.emailVerification !== false) {
+        rules.push(makeLoginRiskEmailVerificationRule(loginRiskRuleOptions(options.emailVerification)));
+    }
+    if (options.assurance !== undefined && options.assurance !== false) {
+        rules.push(makeLoginRiskAssuranceRule(loginRiskRuleOptions(options.assurance)));
+    }
+    rules.push(...(options.rules ?? []));
+    return makeLoginRiskEngine({
+        rules,
+        emptyLevel: options.emptyLevel ?? "low",
+        ...(options.metadata === undefined ? {} : { metadata: options.metadata }),
+    });
+};
+export const assessLoginRisk = (input) => LoginRiskEngine.use((engine) => engine.assess(input));
+export const lookupEmailReputation = (input) => EmailReputation.use((service) => service.lookup(input));
+export const lookupIpReputation = (input) => IpReputation.use((service) => service.lookup(input));
+export const lookupLoginRiskHistory = (input) => LoginRiskHistory.use((service) => service.lookup(input));
+export const recordLoginRiskHistory = (input) => LoginRiskHistory.use((service) => service.record(input));
+export const deleteLoginRiskHistoryBefore = (input) => LoginRiskHistory.use((service) => service.deleteBefore(input));
 export const defaultLoginRiskContext = LoginRiskContext.make({
     level: "unknown",
     signals: [],
@@ -54,4 +466,19 @@ export const makeLoginRiskEngineNoop = () => LoginRiskEngine.make({
     assess: () => Effect.succeed(defaultLoginRiskContext),
 });
 export const LoginRiskEngineNoopLive = Layer.succeed(LoginRiskEngine, makeLoginRiskEngineNoop());
+export const LoginRiskEngineBasicLive = (options) => Layer.succeed(LoginRiskEngine)(makeLoginRiskEngineBasic(options));
+export const makeEmailReputationNoop = () => EmailReputation.make({
+    lookup: () => Effect.succeed({}),
+});
+export const EmailReputationNoopLive = Layer.succeed(EmailReputation)(makeEmailReputationNoop());
+export const makeIpReputationNoop = () => IpReputation.make({
+    lookup: () => Effect.succeed({}),
+});
+export const IpReputationNoopLive = Layer.succeed(IpReputation)(makeIpReputationNoop());
+export const makeLoginRiskHistoryNoop = () => LoginRiskHistory.make({
+    lookup: () => Effect.succeed({}),
+    record: () => Effect.void,
+    deleteBefore: () => Effect.succeed(0),
+});
+export const LoginRiskHistoryNoopLive = Layer.succeed(LoginRiskHistory)(makeLoginRiskHistoryNoop());
 //# sourceMappingURL=LoginRisk.js.map

package/dist/LoginRisk.js.map

@@ -1 +1 @@
-{"version":3,"file":"LoginRisk.js","sourceRoot":"","sources":["../src/LoginRisk.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAO9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClD,SAAS;IACT,KAAK;IACL,QAAQ;IACR,MAAM;IACN,UAAU;CACF,CAAC,CAAC;AAIZ,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAE7E,MAAM,kBAAkB,GAAG;IACzB,OAAO,EAAE,CAAC;IACV,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CAC6B,CAAC;AAE3C,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAC/C,iBAAiB,CAClB,CAAC;IACA,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CACnD,CAAC;CAAG;AAKL,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC;AAE5D,MAAM,OAAO,gBAAiB,SAAQ,MAAM,CAAC,KAAK,CAChD,kBAAkB,CACnB,CAAC;IACA,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CACnD,CAAC;IACA,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7D,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7D,CAAC;IAED,SAAS,CAAC,KAAqB;QAC7B,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;CACF;AAKD,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC;AAwB9D,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAGnE;CAAG;AAQL,MAAM,OAAO,eAAgB,SAAQ,OAAO,CAAC,OAAO,EAGjD,CAAC,sBAAsB,CAAC;CAAG;AAE9B,WAAiB,eAAe;IACjB,oBAAI,GAAG,CAClB,OAA+B,EACP,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IAE5C,sBAAM,GAAG,CACpB,MAAwC,EAChB,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9D,CAAC,EARgB,eAAe,KAAf,eAAe,QAQ/B;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAqB,gBAAgB,CAAC,IAAI,CAAC;IAC7E,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAA2B,EAAE,CAClE,eAAe,CAAC,IAAI,CAAC;IACnB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC;CACtD,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC,OAAO,CAClD,eAAe,EACf,uBAAuB,EAAE,CAC1B,CAAC"}
+{"version":3,"file":"LoginRisk.js","sourceRoot":"","sources":["../src/LoginRisk.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAI9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAIlD,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClD,SAAS;IACT,KAAK;IACL,QAAQ;IACR,MAAM;IACN,UAAU;CACF,CAAC,CAAC;AAIZ,MAAM,uBAAuB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAI7E,MAAM,kBAAkB,GAAG;IACzB,OAAO,EAAE,CAAC;IACV,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,QAAQ,EAAE,CAAC;CAC6B,CAAC;AAE3C,MAAM,sBAAsB,GAAG;IAC7B,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACqC,CAAC;AAE/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,IAAoB,EACpB,KAAqB,EACb,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,MAAgC,EAChC,aAA6B,SAAS,EACtB,EAAE;IAClB,IAAI,GAAG,GAAG,UAAU,CAAC;IAErB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,sBAAsB,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,GAAG,GAAG,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAC/C,iBAAiB,CAClB,CAAC;IACA,IAAI,EAAE,MAAM,CAAC,MAAM;IACnB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CACnD,CAAC;CAAG;AAKL,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC;AAQ5D,MAAM,OAAO,gBAAiB,SAAQ,MAAM,CAAC,KAAK,CAChD,kBAAkB,CACnB,CAAC;IACA,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC;IACtC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC;CACnD,CAAC;IACA,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7D,CAAC;IAED,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7D,CAAC;IAED,SAAS,CAAC,KAAqB;QAC7B,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;CACF;AAKD,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC;AAgE9D,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAGnE;CAAG;AAIL,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CACxD,sBAAsB,CAKtB;CAAG;AAIL,MAAM,OAAO,iBAAkB,SAAQ,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAIzE;CAAG;AAIL,MAAM,OAAO,qBAAsB,SAAQ,IAAI,CAAC,WAAW,CACzD,uBAAuB,CAKvB;CAAG;AA6GL,MAAM,OAAO,eAAgB,SAAQ,OAAO,CAAC,OAAO,EAGjD,CAAC,sBAAsB,CAAC;CAAG;AAE9B,WAAiB,eAAe;IACjB,oBAAI,GAAG,CAClB,OAA+B,EACP,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC,EAJgB,eAAe,KAAf,eAAe,QAI/B;AAED,MAAM,OAAO,YAAa,SAAQ,OAAO,CAAC,OAAO,EAG9C,CAAC,mBAAmB,CAAC;CAAG;AAE3B,WAAiB,YAAY;IACd,iBAAI,GAAG,CAAC,OAA4B,EAAuB,EAAE,CACxE,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,EAHgB,YAAY,KAAZ,YAAY,QAG5B;AAED,MAAM,OAAO,gBAAiB,SAAQ,OAAO,CAAC,OAAO,EAGlD,CAAC,uBAAuB,CAAC;CAAG;AAE/B,WAAiB,gBAAgB;IAClB,qBAAI,GAAG,CAClB,OAAgC,EACP,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC,EAJgB,gBAAgB,KAAhB,gBAAgB,QAIhC;AA+FD,MAAM,OAAO,eAAgB,SAAQ,OAAO,CAAC,OAAO,EAGjD,CAAC,sBAAsB,CAAC;CAAG;AAE9B,WAAiB,eAAe;IACjB,oBAAI,GAAG,CAClB,OAA+B,EACP,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IAE5C,sBAAM,GAAG,CACpB,MAAwC,EAChB,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9D,CAAC,EARgB,eAAe,KAAf,eAAe,QAQ/B;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAA6C,EAC5B,EAAE,CACnB,eAAe,CAAC,IAAI,CAAC;IACnB,IAAI,EAAE,KAAK,CAAC,IAAI;IAChB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5D,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC9B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;CACnD,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,QAA+B,EAAE,EACf,EAAE;IACpB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpE,MAAM,KAAK,GACT,KAAK,CAAC,KAAK;QACX,iBAAiB,CACf,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC,EAClD,KAAK,CAAC,UAAU,CACjB,CAAC;IAEJ,OAAO,gBAAgB,CAAC,IAAI,CAAC;QAC3B,KAAK;QACL,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;KACnD,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,IAAsB,EACG,EAAE,CAAC,CAAC;IAC7B,KAAK,EAAE,IAAI,CAAC,KAAK;IACjB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;KAC/D,CAAC,CAAC;CACJ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,KAA+B,EACV,EAAE,CAAC,CAAC;IACzB,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;IACnB,GAAG,EAAE,KAAK,CAAC,GAAG;IACd,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;IACvC,IAAI,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC;IAC3C,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;QAC9B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;CACnD,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CACtB,KAAwC,EACT,EAAE;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CACZ,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACrE,CAAC;IAEF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,KAAe,EAAkB,EAAE,CAC1E,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEzC,MAAM,oBAAoB,GAAG,CAC3B,MAA2B,EACC,EAAE;IAC9B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAC9E,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAI,KAA8B,EAAiB,EAAE,CAChF,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAE/E,MAAM,oBAAoB,GAAG,CAC3B,MAA0B,EAC1B,OAA2B,EAClB,EAAE,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAC;AAEhF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,MAA+B,EAChB,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAEjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,UAAsC,EAAE,EACzB,EAAE,CACjB,iBAAiB,CAAC,CAAC,KAAK,EAAE,EAAE;IAC1B,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;IAChC,MAAM,KAAK,GACT,MAAM,KAAK,OAAO;QAChB,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC1B,CAAC,CAAC,MAAM,KAAK,KAAK;YAChB,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,IAAI,QAAQ,CAAC;YACtC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,CAAC;IAEjD,OAAO,MAAM,CAAC,OAAO,CACnB,KAAK,KAAK,SAAS;QACjB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,mBAAmB,CAAC;YAClB,IAAI,EAAE,GAAG,MAAM,SAAS;YACxB,KAAK;YACL,QAAQ,EAAE,EAAE,MAAM,EAAE;SACrB,CAAC,CACP,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAChD,UAAiD,EAAE,EACpC,EAAE,CACjB,iBAAiB,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1B,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,aAAa,KAAK,KAAK;IAC3B,CAAC,CAAC,mBAAmB,CAAC;QAClB,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,OAAO,CAAC,oBAAoB,IAAI,QAAQ;KAChD,CAAC;IACJ,CAAC,CAAC,SAAS,CACd,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,UAAyC,EAAE,EAC5B,EAAE;IACjB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC;IAExC,OAAO,iBAAiB,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,MAAM,CAAC,OAAO,CACZ,oBAAoB,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;QACtC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,mBAAmB,CAAC;YAClB,IAAI,EAAE,eAAe;YACrB,KAAK;YACL,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE;SACzC,CAAC,CACP,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,MAAmC,EACnC,OAA4C,EACX,EAAE,CAAC;IACpC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI;QACzB,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,OAAO,CAAC,YAAY,IAAI,UAAU;gBACzC,QAAQ,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;aACtE;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI;QAC5B,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,OAAO,CAAC,eAAe,IAAI,MAAM;gBACxC,QAAQ,EAAE,eAAe,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;aACzE;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,IAAI;QAClC,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,KAAK,EAAE,OAAO,CAAC,qBAAqB,IAAI,QAAQ;gBAChD,QAAQ,EAAE,eAAe,CAAC;oBACxB,gBAAgB,EAAE,IAAI;oBACtB,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB,CAAC;aACH;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;QAChC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,MAAM,CAAC,SAAS;gBACvB,QAAQ,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;aACvD;SACF,CAAC;CACP,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAC1B,MAAgC,EAChC,OAAyC,EACR,EAAE,CAAC;IACpC,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI;QACzB,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,OAAO,CAAC,YAAY,IAAI,UAAU;gBACzC,QAAQ,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;aACtE;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI;QACrB,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,MAAM;gBACjC,QAAQ,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;aAClE;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;QACvB,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ;gBACrC,QAAQ,EAAE,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;aACpE;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI;QACrB,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,QAAQ;gBACnC,QAAQ,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;aAClE;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI;QAC5B,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,OAAO,CAAC,eAAe,IAAI,QAAQ;gBAC1C,QAAQ,EAAE,eAAe,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;aACzE;SACF;QACH,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;QAChC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE;gBACE,IAAI,EAAE,eAAe;gBACrB,KAAK,EAAE,MAAM,CAAC,SAAS;gBACvB,QAAQ,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;aACvD;SACF,CAAC;CACP,CAAC;AAUF,MAAM,6BAA6B,GAAG,CACpC,MAAoC,EACpC,OAAoC,EACR,EAAE;IAC9B,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC,iBAAiB,CAAC;IAClC,CAAC;IAED,MAAM,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC;IACnE,MAAM,iBAAiB,GACrB,mBAAmB,KAAK,SAAS;QACjC,MAAM,CAAC,gBAAgB,KAAK,SAAS;QACrC,MAAM,CAAC,gBAAgB,IAAI,mBAAmB,CAAC;IACjD,MAAM,uBAAuB,GAC3B,yBAAyB,KAAK,SAAS;QACvC,MAAM,CAAC,sBAAsB,KAAK,SAAS;QAC3C,MAAM,CAAC,sBAAsB,IAAI,yBAAyB,CAAC;IAE7D,OAAO,iBAAiB,IAAI,uBAAuB;QACjD,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC;QACnC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAC9B,MAAoC,EACpC,OAAoC,EACpC,OAAsC,EACL,EAAE;IACnC,MAAM,aAAa,GACjB,OAAO,CAAC,QAAQ,KAAK,IAAI;QACvB,CAAC,CAAC,6BAA6B,CAAC,MAAM,EAAE,OAAO,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO;QACL,GAAG,CAAC,aAAa,KAAK,SAAS;YAC7B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,gBAAgB;oBACtB,KAAK,EAAE,aAAa;oBACpB,QAAQ,EAAE,eAAe,CAAC;wBACxB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;wBACzC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;wBACrD,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;wBAC7D,OAAO,EAAE,MAAM,CAAC,OAAO;qBACxB,CAAC;iBACH;aACF,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;YACtD,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,oBAAoB;oBAC1B,KAAK,EAAE,OAAO,CAAC,cAAc,IAAI,QAAQ;oBACzC,QAAQ,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;iBACxE;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI;YAC1D,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,OAAO,CAAC,gBAAgB,IAAI,QAAQ;oBAC3C,QAAQ,EAAE,eAAe,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;iBAC1E;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,IAAI,IAAI,MAAM,CAAC,gBAAgB,KAAK,IAAI;YACvE,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,mBAAmB;oBACzB,KAAK,EAAE,OAAO,CAAC,qBAAqB,IAAI,UAAU;oBAClD,QAAQ,EAAE,eAAe,CAAC;wBACxB,gBAAgB,EAAE,IAAI;wBACtB,OAAO,EAAE,MAAM,CAAC,OAAO;qBACxB,CAAC;iBACH;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAC9D,CAAC,CAAC;gBACE;oBACE,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,MAAM,CAAC,SAAS;oBACvB,QAAQ,EAAE,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;iBACvD;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,+BAA+B,GAAG,CACtC,KAA2B,EAC3B,UAAsB,EACO,EAAE,CAAC,CAAC;IACjC,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5D,UAAU;IACV,MAAM,EAAE,KAAK,CAAC,MAAM;IACpB,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;IACnB,GAAG,EAAE,KAAK,CAAC,GAAG;IACd,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;IACvC,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;IACxE,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;IAC9E,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACzE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;CACtE,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAClC,YAA8C,EAC9C,OAAsC,EACvB,EAAE;IACjB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC;IAExD,OAAO,iBAAiB,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,MAAM,CACjD,+BAA+B,CAAC,KAAK,EAAE,UAAU,CAAC,CACnD,CAAC;QACF,MAAM,aAAa,GAIjB,aAAa,KAAK,MAAM;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,cAAc,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAC1D,EACD,MAAM,CAAC,GAAG,CACR,CAAC,MAAM,EAAE,EAAE,CAAC,MAAkD,CAC/D,CACF;YACH,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;QACR,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;QAEpC,OAAO,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,uBAAuB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,YAAsD,EACvC,EAAE;IACjB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC;IAExD,OAAO,iBAAiB,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC,MAAM,CAAC;YACjD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,MAAM,aAAa,GAIjB,aAAa,KAAK,MAAM;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,cAAc,CAAC,gCAAgC,EAAE,KAAK,CAAC,CACxD,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAiD,CAAC,CAC1E;YACH,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACzE,CAAC;QAER,OAAO,aAAa,CAAC,IAAI,CACvB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpB,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAC3E,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,YAAmD,EACpC,EAAE;IACjB,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,QAAQ,CAAC;IAExD,OAAO,iBAAiB,CAAC,CAAC,KAAK,EAAE,EAAE;QACjC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,SAAS,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;QACzC,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC;YAC9C,EAAE;YACF,OAAO;YACP,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACtE,CAAC,CAAC;QACH,MAAM,aAAa,GAIjB,aAAa,KAAK,MAAM;YACtB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,cAAc,CAAC,6BAA6B,EAAE,KAAK,CAAC,CACrD,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAA8C,CAAC,CACvE;YACH,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACtE,CAAC;QAER,OAAO,aAAa,CAAC,IAAI,CACvB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpB,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CACxE,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,YAA8C,EAC/B,EAAE,CACjB,2BAA2B,CAAC,YAAY,EAAE;IACxC,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACd,gBAAgB,EAAE,IAAI;IACtB,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,YAA8C,EAC/B,EAAE,CACjB,2BAA2B,CAAC,YAAY,EAAE;IACxC,QAAQ,EAAE,IAAI;CACf,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,YAA8C,EAC/B,EAAE,CACjB,2BAA2B,CAAC,YAAY,EAAE;IACxC,MAAM,EAAE,IAAI;CACb,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,YAA8C,EAC/B,EAAE,CACjB,2BAA2B,CAAC,YAAY,EAAE;IACxC,gBAAgB,EAAE,IAAI;CACvB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,UAAkC,EAAE,EACZ,EAAE;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAElC,OAAO,eAAe,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAsB,EAAE,CAAC;YAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnE,CAAC;YAED,OAAO,oBAAoB,CAAC;gBAC1B,OAAO;gBACP,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,UAAuC,EAAE,EACjB,EAAE;IAC1B,MAAM,KAAK,GAAoB,EAAE,CAAC;IAElC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,IAAI,OAAO,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,kCAAkC,CAChC,oBAAoB,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAChD,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QACnE,KAAK,CAAC,IAAI,CACR,0BAA0B,CAAC,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACpE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IAErC,OAAO,mBAAmB,CAAC;QACzB,KAAK;QACL,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,KAAK;QACvC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;KAC1E,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAA2B,EACuC,EAAE,CACpE,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,KAAiC,EACkD,EAAE,CACrF,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAE1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,KAA8B,EAC4C,EAAE,CAC5E,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAEvD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAAkC,EAKlC,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAE9D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAAkC,EAC4B,EAAE,CAChE,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,KAAwC,EACwB,EAAE,CAClE,gBAAgB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,uBAAuB,GAAqB,gBAAgB,CAAC,IAAI,CAAC;IAC7E,KAAK,EAAE,SAAS;IAChB,OAAO,EAAE,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAA2B,EAAE,CAClE,eAAe,CAAC,IAAI,CAAC;IACnB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC;CACtD,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC,OAAO,CAClD,eAAe,EACf,uBAAuB,EAAE,CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,OAAqC,EACrC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAA2B,EAAE,CAClE,eAAe,CAAC,IAAI,CAAC;IACnB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;CACjC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CACnE,uBAAuB,EAAE,CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAwB,EAAE,CAC5D,YAAY,CAAC,IAAI,CAAC;IAChB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;CACjC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAC7D,oBAAoB,EAAE,CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAA4B,EAAE,CACpE,gBAAgB,CAAC,IAAI,CAAC;IACpB,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;IACzB,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;CACtC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CACrE,wBAAwB,EAAE,CAC3B,CAAC"}

package/dist/MachineAuth.d.ts

@@ -0,0 +1,73 @@
+import { Effect } from "effect";
+import type { Duration } from "effect";
+import type { ApiKeyId, ApiKeyInfo, ApiKeyVerificationService } from "./ApiKey.js";
+import type { UserId, UnixMillis } from "./Identifiers.js";
+import type { JwtAudience, JwtClaims, JwtKeyInfo, JwtVerifierService } from "./Jwt.js";
+export type MachineCredentialKind = "api_key" | "jwt";
+export type MachineAuthErrorReason = "missing_bearer" | "invalid_api_key" | "invalid_jwt" | "missing_scope" | "verification_failed";
+declare const MachineAuthError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "MachineAuthError";
+} & Readonly<A>;
+export declare class MachineAuthError extends MachineAuthError_base<{
+    readonly reason: MachineAuthErrorReason;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface MachineActorMetadataFields {
+    readonly tenantId?: string;
+    readonly serviceAccountId?: string;
+}
+export interface MachineApiKeyActor extends MachineActorMetadataFields {
+    readonly kind: "api_key";
+    readonly userId: UserId;
+    readonly keyId: ApiKeyId;
+    readonly scopes: readonly string[];
+    readonly key: ApiKeyInfo;
+}
+export interface MachineJwtActor extends MachineActorMetadataFields {
+    readonly kind: "jwt";
+    readonly subject: string | undefined;
+    readonly jwtId?: string;
+    readonly scopes: readonly string[];
+    readonly claims: JwtClaims;
+    readonly key: JwtKeyInfo;
+}
+export type MachineActor = MachineApiKeyActor | MachineJwtActor;
+export interface MachineActorFieldOptions {
+    readonly tenantIdField?: string;
+    readonly serviceAccountIdField?: string;
+}
+export interface VerifyMachineApiKeyOptions extends MachineActorFieldOptions {
+    readonly apiKeyVerification: ApiKeyVerificationService;
+    readonly headers: Headers;
+    readonly requiredScopes?: readonly string[];
+    readonly now?: UnixMillis;
+    readonly verificationMetadata?: Readonly<Record<string, unknown>>;
+}
+export interface VerifyMachineJwtOptions extends MachineActorFieldOptions {
+    readonly jwtVerifier: JwtVerifierService;
+    readonly headers: Headers;
+    readonly requiredScopes?: readonly string[];
+    readonly issuer?: string;
+    readonly audience?: JwtAudience;
+    readonly now?: UnixMillis;
+    readonly clockTolerance?: Duration.Duration;
+}
+export declare const bearerToken: (headers: Headers) => string | undefined;
+export declare const apiKeyPrefixFromSecret: (secret: string) => string;
+export declare const jwtClaimScopes: (claims: JwtClaims) => readonly string[];
+export declare const apiKeyMachineActor: (key: ApiKeyInfo, options?: MachineActorFieldOptions) => MachineApiKeyActor;
+export declare const jwtMachineActor: (input: {
+    readonly claims: JwtClaims;
+    readonly key: JwtKeyInfo;
+    readonly scopes?: readonly string[];
+}, options?: MachineActorFieldOptions) => MachineJwtActor;
+export declare const requireMachineScopes: <A extends MachineActor>(input: {
+    readonly actor: A;
+    readonly scopes: readonly string[];
+}) => Effect.Effect<A, MachineAuthError>;
+export declare const verifyMachineApiKey: (options: VerifyMachineApiKeyOptions) => Effect.Effect<MachineApiKeyActor, MachineAuthError>;
+export declare const verifyMachineJwt: (options: VerifyMachineJwtOptions) => Effect.Effect<MachineJwtActor, MachineAuthError>;
+export {};
+//# sourceMappingURL=MachineAuth.d.ts.map

package/dist/MachineAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MachineAuth.d.ts","sourceRoot":"","sources":["../src/MachineAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,MAAM,EAAY,MAAM,QAAQ,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,KAAK,EACV,QAAQ,EACR,UAAU,EACV,yBAAyB,EAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,UAAU,EACV,kBAAkB,EACnB,MAAM,UAAU,CAAC;AAElB,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,KAAK,CAAC;AAEtD,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,iBAAiB,GACjB,aAAa,GACb,eAAe,GACf,qBAAqB,CAAC;;;;AAE1B,qBAAa,gBAAiB,SAAQ,sBAAqC;IACzE,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,kBAAmB,SAAQ,0BAA0B;IACpE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,eAAgB,SAAQ,0BAA0B;IACjE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,MAAM,YAAY,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAEhE,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,0BAA2B,SAAQ,wBAAwB;IAC1E,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,uBAAwB,SAAQ,wBAAwB;IACvE,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;CAC7C;AAED,eAAO,MAAM,WAAW,GAAI,SAAS,OAAO,KAAG,MAAM,GAAG,SAYvD,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,QAAQ,MAAM,KAAG,MAIvD,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,QAAQ,SAAS,KAAG,SAAS,MAAM,EAWjE,CAAC;AAmCF,eAAO,MAAM,kBAAkB,GAC7B,KAAK,UAAU,EACf,UAAS,wBAA6B,KACrC,kBAUD,CAAC;AAEH,eAAO,MAAM,eAAe,GAC1B,OAAO;IACL,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,EACD,UAAS,wBAA6B,KACrC,eAkBF,CAAC;AAQF,eAAO,MAAM,oBAAoB,GAAI,CAAC,SAAS,YAAY,EAAE,OAAO;IAClE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,KAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAWpC,CAAC;AAEF,eAAO,MAAM,mBAAmB,GAC9B,SAAS,0BAA0B,KAClC,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,gBAAgB,CAyCjD,CAAC;AAEL,eAAO,MAAM,gBAAgB,GAC3B,SAAS,uBAAuB,KAC/B,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,gBAAgB,CA2C9C,CAAC"}