@effect-auth/core 0.1.0-alpha.15 → 0.1.0-alpha.18

package/dist/HttpApi/Password.d.ts

@@ -0,0 +1,220 @@
+import { Effect, Layer } from "effect";
+import type { Schema } from "effect";
+import { HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+import { AuthRateLimit } from "../AuthRateLimit.js";
+import type { EmailVerificationFlowService } from "../EmailVerification.js";
+import type { UserId } from "../Identifiers.js";
+import { PasswordLogin, PasswordManagement, PasswordRegistration, PasswordReset } from "../Password.js";
+import type { PasswordChangeInput, PasswordLoginService, PasswordManagementService, PasswordRegistrationService, PasswordResetService, PasswordSetInput } from "../Password.js";
+import { CurrentSession, SessionCookie, Sessions } from "../Sessions.js";
+import type { SessionCookieService, SessionsService } from "../Sessions.js";
+import { AuthBadRequestError, AuthIdentityAlreadyRegisteredError, AuthInternalError, AuthPolicyDeniedError, AuthRateLimitedError, AuthStepUpRequiredError } from "./Errors.js";
+import { PasswordHttpOperations } from "./Operations/Password.js";
+import { PasswordHttpApiGroup } from "./PasswordContract.js";
+import type { PasswordResetStartGuardRequest, PasswordResetVerifyGuardRequest, PasswordSignInGuardRequest, PasswordSignUpGuardRequest } from "./PasswordGuards.js";
+import { PasswordChangeBody, PasswordSetBody } from "./Schemas.js";
+import { AuthHttp } from "./Transport.js";
+import type { AuthHttpService } from "./Transport.js";
+export * from "./Operations/Password.js";
+export * from "./PasswordContract.js";
+export * from "./PasswordGuards.js";
+export declare const passwordSetInput: (userId: UserId, payload: Schema.Schema.Type<typeof PasswordSetBody>) => PasswordSetInput;
+export declare const passwordChangeInput: (userId: UserId, payload: Schema.Schema.Type<typeof PasswordChangeBody>) => PasswordChangeInput;
+export type PasswordSignInHandlerRequest = PasswordSignInGuardRequest;
+export type PasswordSignUpHandlerRequest = PasswordSignUpGuardRequest;
+export type PasswordResetStartHandlerRequest = PasswordResetStartGuardRequest;
+export type PasswordResetVerifyHandlerRequest = PasswordResetVerifyGuardRequest;
+export type PasswordSetHandlerRequest = {
+    readonly payload: Schema.Schema.Type<typeof PasswordSetBody>;
+    readonly request: HttpServerRequest.HttpServerRequest;
+};
+export type PasswordChangeHandlerRequest = {
+    readonly payload: Schema.Schema.Type<typeof PasswordChangeBody>;
+    readonly request: HttpServerRequest.HttpServerRequest;
+};
+export declare const makePasswordSignInHandler: (dependencies: {
+    readonly password: PasswordLoginService;
+    readonly authHttp: AuthHttpService;
+    readonly emailVerificationFlow?: EmailVerificationFlowService;
+}) => (handlerRequest: PasswordSignInGuardRequest) => Effect.Effect<HttpServerResponse.HttpServerResponse, AuthRateLimitedError | import("./Errors.js").AuthRequestRejectedError | import("./Transport.js").PasswordSignInHttpError, AuthRateLimit>;
+export declare const makePasswordSignUpHandler: (dependencies: {
+    readonly registration: PasswordRegistrationService;
+    readonly authHttp: AuthHttpService;
+    readonly emailVerificationFlow?: EmailVerificationFlowService;
+}) => (handlerRequest: PasswordSignUpGuardRequest) => Effect.Effect<HttpServerResponse.HttpServerResponse, AuthBadRequestError | AuthIdentityAlreadyRegisteredError | AuthRateLimitedError | import("./Errors.js").AuthRequestRejectedError | import("./Transport.js").PasswordSignUpHttpError, AuthRateLimit>;
+export declare const makePasswordResetStartHandler: (dependencies: {
+    readonly passwordReset: PasswordResetService;
+}) => (handlerRequest: PasswordResetStartGuardRequest) => Effect.Effect<HttpServerResponse.HttpServerResponse, AuthInternalError | AuthRateLimitedError | import("./Errors.js").AuthRequestRejectedError, AuthRateLimit>;
+export declare const makePasswordResetVerifyHandler: (dependencies: {
+    readonly passwordReset: PasswordResetService;
+}) => (handlerRequest: PasswordResetVerifyGuardRequest) => Effect.Effect<HttpServerResponse.HttpServerResponse, AuthBadRequestError | AuthInternalError | AuthRateLimitedError | import("./Errors.js").AuthRequestRejectedError, AuthRateLimit>;
+export declare const makePasswordSetHandler: (dependencies: {
+    readonly passwordManagement: PasswordManagementService;
+    readonly sessions: SessionsService;
+    readonly sessionCookie: SessionCookieService;
+    readonly guards?: Effect.Effect<void, unknown, CurrentSession>;
+}) => (handlerRequest: PasswordSetHandlerRequest) => Effect.Effect<HttpServerResponse.HttpServerResponse, AuthBadRequestError | AuthInternalError | AuthPolicyDeniedError | AuthRateLimitedError | AuthStepUpRequiredError | import("./Errors.js").AuthUnauthenticatedError, never>;
+export declare const makePasswordChangeHandler: (dependencies: {
+    readonly passwordManagement: PasswordManagementService;
+    readonly sessions: SessionsService;
+    readonly sessionCookie: SessionCookieService;
+    readonly guards?: Effect.Effect<void, unknown, CurrentSession>;
+}) => (handlerRequest: PasswordChangeHandlerRequest) => Effect.Effect<HttpServerResponse.HttpServerResponse, AuthBadRequestError | AuthInternalError | AuthPolicyDeniedError | AuthRateLimitedError | AuthStepUpRequiredError | import("./Errors.js").AuthUnauthenticatedError, never>;
+export declare const PasswordHttpOperationsLive: Layer.Layer<PasswordHttpOperations, never, AuthHttp | AuthRateLimit | PasswordLogin | PasswordManagement | PasswordRegistration | PasswordReset | SessionCookie | Sessions>;
+export declare const passwordGroupHandlers: (handlers: HttpApiBuilder.Handlers.FromGroup<typeof PasswordHttpApiGroup>) => Effect.Effect<HttpApiBuilder.Handlers<import("./Middleware.js").AuthOriginCheckMiddleware | import("./Errors.js").AuthSchemaErrorMiddleware, {
+    readonly change: import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"change", "POST", "/auth/password/change", never, never, Schema.toCodecJson<Schema.Struct<{
+        readonly currentPassword: Schema.String;
+        readonly newPassword: Schema.String;
+    }>>, never, Schema.toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, Schema.toCodecJson<typeof AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof AuthInternalError>, import("./Middleware.js").AuthOriginCheckMiddleware | import("./Errors.js").AuthSchemaErrorMiddleware, never>;
+    readonly resetStart: import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"resetStart", "POST", "/auth/password/reset/start", never, never, Schema.toCodecJson<Schema.Struct<{
+        readonly identity: Schema.Struct<{
+            readonly scope: Schema.Union<readonly [Schema.Struct<{
+                readonly type: Schema.Literal<"global">;
+            }>, Schema.Struct<{
+                readonly type: Schema.Literal<"tenant">;
+                readonly tenantId: Schema.String;
+            }>]>;
+            readonly kind: Schema.String;
+            readonly value: Schema.String;
+        }>;
+        readonly secret: Schema.optional<Schema.String>;
+        readonly locale: Schema.optional<Schema.String>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+        readonly botChallenge: Schema.optional<Schema.Struct<{
+            readonly token: Schema.String;
+        }>>;
+    }>>, never, Schema.toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, Schema.toCodecJson<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof AuthInternalError>, import("./Middleware.js").AuthOriginCheckMiddleware | import("./Errors.js").AuthSchemaErrorMiddleware, never>;
+    readonly resetVerify: import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"resetVerify", "POST", "/auth/password/reset/verify", never, never, Schema.toCodecJson<Schema.Struct<{
+        readonly challengeId: Schema.brand<Schema.String, "auth/ChallengeId">;
+        readonly secret: Schema.String;
+        readonly password: Schema.String;
+        readonly botChallenge: Schema.optional<Schema.Struct<{
+            readonly token: Schema.String;
+        }>>;
+    }>>, never, Schema.toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, Schema.toCodecJson<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof AuthInternalError>, import("./Middleware.js").AuthOriginCheckMiddleware | import("./Errors.js").AuthSchemaErrorMiddleware, never>;
+    readonly set: import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"set", "POST", "/auth/password/set", never, never, Schema.toCodecJson<Schema.Struct<{
+        readonly password: Schema.String;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+    }>>, never, Schema.toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, Schema.toCodecJson<typeof AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof AuthInternalError>, import("./Middleware.js").AuthOriginCheckMiddleware | import("./Errors.js").AuthSchemaErrorMiddleware, never>;
+    readonly signIn: import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"signIn", "POST", "/auth/password/sign-in", never, never, Schema.toCodecJson<Schema.Struct<{
+        readonly identity: Schema.Struct<{
+            readonly scope: Schema.Union<readonly [Schema.Struct<{
+                readonly type: Schema.Literal<"global">;
+            }>, Schema.Struct<{
+                readonly type: Schema.Literal<"tenant">;
+                readonly tenantId: Schema.String;
+            }>]>;
+            readonly kind: Schema.String;
+            readonly value: Schema.String;
+        }>;
+        readonly password: Schema.String;
+        readonly deviceFingerprint: Schema.optional<Schema.Struct<{
+            readonly userAgentFamily: Schema.optional<Schema.String>;
+            readonly platform: Schema.optional<Schema.String>;
+            readonly timezone: Schema.optional<Schema.String>;
+            readonly locale: Schema.optional<Schema.String>;
+            readonly screenClass: Schema.optional<Schema.Literals<readonly ["small", "medium", "large"]>>;
+            readonly appDeviceId: Schema.optional<Schema.String>;
+        }>>;
+        readonly botChallenge: Schema.optional<Schema.Struct<{
+            readonly token: Schema.String;
+        }>>;
+    }>>, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
+        readonly type: Schema.Literal<"authenticated">;
+        readonly expiresAt: Schema.Number;
+        readonly aal: Schema.Literals<readonly ["aal1", "aal2", "aal3"]>;
+        readonly amr: Schema.$Array<Schema.String>;
+        readonly mfaVerifiedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly claims: Schema.optional<Schema.Struct<{
+            readonly verifiedIdentityKinds: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly requirements: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly recoveryEnrollment: Schema.optional<Schema.Struct<{
+                readonly allowed: Schema.$Array<Schema.String>;
+            }>>;
+        }>>;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"requires_mfa">;
+        readonly flowId: Schema.String;
+        readonly factors: Schema.$Array<Schema.Struct<{
+            readonly type: Schema.Literals<readonly ["totp", "backup-code", "passkey"]>;
+        }>>;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"requires_email_verification">;
+        readonly flowId: Schema.String;
+        readonly identityId: Schema.brand<Schema.String, "auth/IdentityId">;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"requires_login_approval">;
+        readonly flowId: Schema.String;
+        readonly approvalChallengeId: Schema.String;
+        readonly channel: Schema.String;
+        readonly sessionBinding: Schema.Literals<readonly ["originating-device", "approval-device", "none"]>;
+        readonly sameDeviceRequired: Schema.Boolean;
+        readonly reason: Schema.String;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"requires_passkey_enrollment">;
+        readonly flowId: Schema.String;
+    }>]>>, Schema.toCodecJson<typeof AuthBadRequestError | typeof import("./Errors.js").AuthInvalidCredentialsError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof import("./Errors.js").AuthRequestRejectedError | typeof AuthInternalError>, import("./Middleware.js").AuthOriginCheckMiddleware | import("./Errors.js").AuthSchemaErrorMiddleware, never>;
+    readonly signUp: import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"signUp", "POST", "/auth/password/sign-up", never, never, Schema.toCodecJson<Schema.Struct<{
+        readonly identity: Schema.Struct<{
+            readonly scope: Schema.Union<readonly [Schema.Struct<{
+                readonly type: Schema.Literal<"global">;
+            }>, Schema.Struct<{
+                readonly type: Schema.Literal<"tenant">;
+                readonly tenantId: Schema.String;
+            }>]>;
+            readonly kind: Schema.String;
+            readonly value: Schema.String;
+        }>;
+        readonly password: Schema.String;
+        readonly deviceFingerprint: Schema.optional<Schema.Struct<{
+            readonly userAgentFamily: Schema.optional<Schema.String>;
+            readonly platform: Schema.optional<Schema.String>;
+            readonly timezone: Schema.optional<Schema.String>;
+            readonly locale: Schema.optional<Schema.String>;
+            readonly screenClass: Schema.optional<Schema.Literals<readonly ["small", "medium", "large"]>>;
+            readonly appDeviceId: Schema.optional<Schema.String>;
+        }>>;
+        readonly metadata: Schema.optional<Schema.$Record<Schema.String, Schema.Unknown>>;
+        readonly botChallenge: Schema.optional<Schema.Struct<{
+            readonly token: Schema.String;
+        }>>;
+    }>>, never, Schema.toCodecJson<Schema.Union<readonly [Schema.Struct<{
+        readonly type: Schema.Literal<"authenticated">;
+        readonly expiresAt: Schema.Number;
+        readonly aal: Schema.Literals<readonly ["aal1", "aal2", "aal3"]>;
+        readonly amr: Schema.$Array<Schema.String>;
+        readonly mfaVerifiedAt: Schema.optional<Schema.brand<Schema.Number, "auth/UnixMillis">>;
+        readonly claims: Schema.optional<Schema.Struct<{
+            readonly verifiedIdentityKinds: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly requirements: Schema.optional<Schema.$Array<Schema.String>>;
+            readonly recoveryEnrollment: Schema.optional<Schema.Struct<{
+                readonly allowed: Schema.$Array<Schema.String>;
+            }>>;
+        }>>;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"requires_mfa">;
+        readonly flowId: Schema.String;
+        readonly factors: Schema.$Array<Schema.Struct<{
+            readonly type: Schema.Literals<readonly ["totp", "backup-code", "passkey"]>;
+        }>>;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"requires_email_verification">;
+        readonly flowId: Schema.String;
+        readonly identityId: Schema.brand<Schema.String, "auth/IdentityId">;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"requires_login_approval">;
+        readonly flowId: Schema.String;
+        readonly approvalChallengeId: Schema.String;
+        readonly channel: Schema.String;
+        readonly sessionBinding: Schema.Literals<readonly ["originating-device", "approval-device", "none"]>;
+        readonly sameDeviceRequired: Schema.Boolean;
+        readonly reason: Schema.String;
+    }>, Schema.Struct<{
+        readonly type: Schema.Literal<"requires_passkey_enrollment">;
+        readonly flowId: Schema.String;
+    }>]>>, Schema.toCodecJson<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthIdentityAlreadyRegisteredError | typeof import("./Errors.js").AuthRequestRejectedError | typeof AuthInternalError>, import("./Middleware.js").AuthOriginCheckMiddleware | import("./Errors.js").AuthSchemaErrorMiddleware, never>;
+}, "change" | "resetStart" | "resetVerify" | "set" | "signIn" | "signUp">, never, PasswordHttpOperations>;
+export declare const PasswordHttpApiGroupLive: Layer.Layer<import("effect/unstable/httpapi/HttpApiGroup").Service<"PasswordHttpApi", "password">, never, import("./Middleware.js").AuthOriginCheckMiddleware | import("./Errors.js").AuthSchemaErrorMiddleware | PasswordHttpOperations>;
+export declare const PasswordHttpApiLive: Layer.Layer<never, never, AuthHttp | AuthRateLimit | import("effect/FileSystem").FileSystem | import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpRouter").HttpRouter | PasswordLogin | PasswordManagement | PasswordRegistration | PasswordReset | import("effect/Path").Path | SessionCookie | Sessions>;
+//# sourceMappingURL=Password.d.ts.map

package/dist/HttpApi/Password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Password.d.ts","sourceRoot":"","sources":["../../src/HttpApi/Password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAoB,MAAM,QAAQ,CAAC;AACzD,OAAO,KAAK,EAAY,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAIzD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,EACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,yBAAyB,EACzB,2BAA2B,EAC3B,oBAAoB,EACpB,gBAAgB,EAGjB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EAEhB,MAAM,gBAAgB,CAAC;AAIxB,OAAO,EACL,mBAAmB,EACnB,kCAAkC,EAClC,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EAEpB,uBAAuB,EACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAmB,MAAM,uBAAuB,CAAC;AAC9E,OAAO,KAAK,EACV,8BAA8B,EAC9B,+BAA+B,EAC/B,0BAA0B,EAC1B,0BAA0B,EAC3B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAMnE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AAepC,eAAO,MAAM,gBAAgB,WACnB,MAAM,WACL,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,eAAe,CAAC,KAClD,gBAID,CAAC;AAEH,eAAO,MAAM,mBAAmB,WACtB,MAAM,WACL,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,kBAAkB,CAAC,KACrD,mBAID,CAAC;AAmFH,MAAM,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AACtE,MAAM,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AACtE,MAAM,MAAM,gCAAgC,GAAG,8BAA8B,CAAC;AAC9E,MAAM,MAAM,iCAAiC,GAAG,+BAA+B,CAAC;AAEhF,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,eAAe,CAAC,CAAC;IAC7D,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAChE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;CACvD,CAAC;AAEF,eAAO,MAAM,yBAAyB,iBAAkB;IACtD,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,4BAA4B,CAAC;CAC/D,kPAmDG,CAAC;AAEL,eAAO,MAAM,yBAAyB,iBAAkB;IACtD,QAAQ,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,4BAA4B,CAAC;CAC/D,6SAyFG,CAAC;AAEL,eAAO,MAAM,6BAA6B,iBAAkB;IAC1D,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;CAC9C,uNAoBG,CAAC;AAEL,eAAO,MAAM,8BAA8B,iBAAkB;IAC3D,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;CAC9C,8OAuBG,CAAC;AAyDL,eAAO,MAAM,sBAAsB,iBAAkB;IACnD,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;CAChE,kRAgBG,CAAC;AAEL,eAAO,MAAM,yBAAyB,iBAAkB;IACtD,QAAQ,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;CAChE,qRAgBG,CAAC;AAEL,eAAO,MAAM,0BAA0B,6KAwEtC,CAAC;AAEF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yGAajC,CAAC;AAEF,eAAO,MAAM,wBAAwB,2OAIpC,CAAC;AAEF,eAAO,MAAM,mBAAmB,oYAK/B,CAAC"}

package/dist/HttpApi/Password.js

@@ -0,0 +1,237 @@
+import { Effect, Layer, Option, Redacted } from "effect";
+import { HttpServerRequest, HttpServerResponse } from "effect/unstable/http";
+import { HttpApiBuilder } from "effect/unstable/httpapi";
+import { BotChallengeVerifier } from "../AbuseProtection.js";
+import { AuthRateLimit } from "../AuthRateLimit.js";
+import { EmailVerificationFlow } from "../EmailVerification.js";
+import { LoginRiskEnricher } from "../LoginRiskEnrichment.js";
+import { PasswordLogin, PasswordManagement, PasswordRegistration, PasswordReset, } from "../Password.js";
+import { isAuthorizationError } from "../Policy.js";
+import { RateLimitExceededError } from "../RateLimiter.js";
+import { CurrentSession, SessionCookie, Sessions } from "../Sessions.js";
+import { StepUpRequired } from "../StepUp.js";
+import { TrustedDeviceCookie } from "../TrustedDevice.js";
+import { AuthBadRequestError, AuthIdentityAlreadyRegisteredError, AuthInternalError, AuthPolicyDeniedError, AuthRateLimitedError, AuthSchemaErrorMiddlewareLive, AuthStepUpRequiredError, } from "./Errors.js";
+import { PasswordHttpOperations } from "./Operations/Password.js";
+import { PasswordHttpApiGroup, PasswordHttpApi } from "./PasswordContract.js";
+import { PasswordGuards } from "./PasswordGuards.js";
+import { PasswordChangeBody, PasswordSetBody } from "./Schemas.js";
+import { AuthOriginCheckMiddlewareConfigLive, customEvidencePolicyHttpFailure, } from "./Security.js";
+import { readRequiredSession } from "./SessionGuards.js";
+import { AuthHttp } from "./Transport.js";
+export * from "./Operations/Password.js";
+export * from "./PasswordContract.js";
+export * from "./PasswordGuards.js";
+const canStartRequiredEmailVerification = (result) => result._tag === "RequiresEmailVerification" && result.userId !== undefined;
+export const passwordSetInput = (userId, payload) => ({
+    userId,
+    password: Redacted.make(payload.password),
+    ...(payload.metadata === undefined ? {} : { metadata: payload.metadata }),
+});
+export const passwordChangeInput = (userId, payload) => ({
+    userId,
+    currentPassword: Redacted.make(payload.currentPassword),
+    newPassword: Redacted.make(payload.newPassword),
+});
+const passwordInternalError = (message) => new AuthInternalError({
+    code: "internal_error",
+    message,
+});
+const passwordBadRequest = (message) => new AuthBadRequestError({ code: "bad_request", message });
+const startRequiredEmailVerification = (dependencies, result) => Effect.gen(function* () {
+    if (dependencies.emailVerificationFlow === undefined ||
+        !canStartRequiredEmailVerification(result)) {
+        return result;
+    }
+    yield* dependencies.emailVerificationFlow
+        .start({ identityId: result.identityId })
+        .pipe(Effect.catchTag("EmailVerificationFlowStartError", () => Effect.fail(passwordInternalError("Failed to start email verification"))));
+    return result;
+});
+const rateLimited = (retryAfter) => new AuthRateLimitedError({
+    code: "rate_limited",
+    message: "Too many authentication attempts",
+    retryAfter,
+});
+const provideRequestGuardServices = (dependencies, handler) => ((...args) => {
+    let effect = handler(...args).pipe(Effect.provideService(AuthRateLimit, dependencies.authRateLimit));
+    if (dependencies.botChallengeVerifier !== undefined) {
+        effect = effect.pipe(Effect.provideService(BotChallengeVerifier, dependencies.botChallengeVerifier));
+    }
+    if (dependencies.trustedDeviceCookie !== undefined) {
+        effect = effect.pipe(Effect.provideService(TrustedDeviceCookie, dependencies.trustedDeviceCookie));
+    }
+    if (dependencies.loginRiskEnricher !== undefined) {
+        effect = effect.pipe(Effect.provideService(LoginRiskEnricher, dependencies.loginRiskEnricher));
+    }
+    return effect;
+});
+export const makePasswordSignInHandler = (dependencies) => Effect.fn("auth.http.password.sign_in")(function* (handlerRequest) {
+    yield* Effect.annotateCurrentSpan("auth.http.endpoint", "password.sign_in");
+    const guarded = yield* PasswordGuards.signIn(handlerRequest);
+    const result = yield* dependencies.password.signIn(guarded.input).pipe(Effect.catchTag("StorageError", () => Effect.fail(passwordInternalError("Failed to sign in with password"))), Effect.catchTag("PasswordHashError", () => Effect.fail(passwordInternalError("Failed to sign in with password"))), Effect.catchTag("TrustedDeviceError", () => Effect.fail(passwordInternalError("Failed to sign in with password"))), Effect.catchTag("LoginRiskError", () => Effect.fail(passwordInternalError("Failed to sign in with password"))), Effect.catchTag("TotpFactorManagementError", () => Effect.fail(passwordInternalError("Failed to sign in with password"))), Effect.catchTag("RecoveryCodeManagementError", () => Effect.fail(passwordInternalError("Failed to sign in with password"))), Effect.catchTag("PasskeyCredentialManagementError", () => Effect.fail(passwordInternalError("Failed to sign in with password"))), Effect.catchTag("SessionCreateError", (error) => customEvidencePolicyHttpFailure(error, "Failed to sign in with password") ??
+        Effect.fail(passwordInternalError("Failed to sign in with password"))), Effect.catchTag("AuthFlowStateError", () => Effect.fail(passwordInternalError("Failed to sign in with password"))), Effect.catchTag("LoginApprovalReviewError", () => Effect.fail(passwordInternalError("Failed to sign in with password"))), Effect.catchTag("LoginApprovalFlowStartError", () => Effect.fail(passwordInternalError("Failed to sign in with password"))));
+    yield* startRequiredEmailVerification(dependencies, result);
+    return yield* dependencies.authHttp.commitPasswordSignInResult(result);
+});
+export const makePasswordSignUpHandler = (dependencies) => Effect.fn("auth.http.password.sign_up")(function* (handlerRequest) {
+    yield* Effect.annotateCurrentSpan("auth.http.endpoint", "password.sign_up");
+    const guarded = yield* PasswordGuards.signUp(handlerRequest);
+    const result = yield* dependencies.registration.signUp(guarded.input).pipe(Effect.catchTag("IdentityAlreadyRegisteredError", () => Effect.fail(new AuthIdentityAlreadyRegisteredError({
+        code: "identity_already_registered",
+        message: "Identity is already registered",
+    }))), Effect.catchTags({
+        IdentityKindNotRegisteredError: () => Effect.fail(passwordBadRequest("Invalid login identity")),
+        IdentityScopeNotAllowedError: () => Effect.fail(passwordBadRequest("Invalid login identity")),
+        IdentityValidationError: (error) => Effect.fail(passwordBadRequest(error.message)),
+    }), Effect.catchTags({
+        RegistrationConflictError: () => Effect.fail(passwordInternalError("Failed to sign up with password")),
+        RegistrationFailureError: () => Effect.fail(passwordInternalError("Failed to sign up with password")),
+    }), Effect.catchTag("PasswordHashError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("PasswordRiskRejectedError", () => Effect.fail(passwordBadRequest("Password does not meet policy requirements"))), Effect.catchTag("PasswordTooLongError", () => Effect.fail(passwordBadRequest("Password does not meet policy requirements"))), Effect.catchTag("EmailNotAcceptedError", () => Effect.fail(passwordBadRequest("Email is not accepted"))), Effect.catchTag("EmailRiskProviderUnavailableError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("CryptoError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("TrustedDeviceError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("LoginRiskError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("TotpFactorManagementError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("RecoveryCodeManagementError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("PasskeyCredentialManagementError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("SessionCreateError", (error) => customEvidencePolicyHttpFailure(error, "Failed to sign up with password") ??
+        Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("AuthFlowStateError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("LoginApprovalReviewError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))), Effect.catchTag("LoginApprovalFlowStartError", () => Effect.fail(passwordInternalError("Failed to sign up with password"))));
+    yield* startRequiredEmailVerification(dependencies, result);
+    return yield* dependencies.authHttp.commitPasswordSignUpResult(result);
+});
+export const makePasswordResetStartHandler = (dependencies) => Effect.fn("auth.http.password.reset_start")(function* (handlerRequest) {
+    yield* Effect.annotateCurrentSpan("auth.http.endpoint", "password.reset_start");
+    const guarded = yield* PasswordGuards.resetStart(handlerRequest);
+    yield* dependencies.passwordReset.start(guarded.input).pipe(Effect.mapError(() => new AuthInternalError({
+        code: "internal_error",
+        message: "Failed to start password reset",
+    })));
+    return HttpServerResponse.empty({ status: 204 });
+});
+export const makePasswordResetVerifyHandler = (dependencies) => Effect.fn("auth.http.password.reset_verify")(function* (handlerRequest) {
+    yield* Effect.annotateCurrentSpan("auth.http.endpoint", "password.reset_verify");
+    const guarded = yield* PasswordGuards.resetVerify(handlerRequest);
+    yield* dependencies.passwordReset.verify(guarded.input).pipe(Effect.mapError((error) => new AuthBadRequestError({
+        code: "bad_request",
+        message: error.message === "Password does not meet policy requirements"
+            ? "Password does not meet policy requirements"
+            : "Invalid password reset request",
+    })));
+    return HttpServerResponse.empty({ status: 204 });
+});
+const passwordManagementError = (error) => error.reason === "internal"
+    ? new AuthInternalError({
+        code: "internal_error",
+        message: "Failed to update password",
+    })
+    : new AuthBadRequestError({
+        code: "bad_request",
+        message: error.reason === "password_policy_rejected"
+            ? "Password does not meet policy requirements"
+            : "Invalid password update request",
+    });
+const passwordGuardError = (error) => {
+    if (error instanceof StepUpRequired) {
+        return new AuthStepUpRequiredError({
+            code: "step_up_required",
+            message: "Step-up authentication required",
+        });
+    }
+    if (isAuthorizationError(error)) {
+        return new AuthPolicyDeniedError({
+            code: "policy_denied",
+            message: "Access denied",
+        });
+    }
+    if (error instanceof RateLimitExceededError) {
+        return rateLimited(error.retryAfter);
+    }
+    return passwordInternalError("Password update guard failed");
+};
+const passwordGuardFailure = (error) => customEvidencePolicyHttpFailure(error, "Password update guard failed") ??
+    Effect.fail(passwordGuardError(error));
+const runPasswordGuards = (guards, current) => guards === undefined
+    ? Effect.void
+    : guards.pipe(Effect.provideService(CurrentSession, CurrentSession.of(current.currentSession)), 
+    // oxlint-disable-next-line promise/prefer-await-to-then -- This catches Effect failures, not Promise rejections.
+    Effect.catch(passwordGuardFailure));
+export const makePasswordSetHandler = (dependencies) => Effect.fn("auth.http.password.set")(function* (handlerRequest) {
+    const { payload, request } = handlerRequest;
+    yield* Effect.annotateCurrentSpan("auth.http.endpoint", "password.set");
+    const current = yield* readRequiredSession(dependencies, request);
+    yield* runPasswordGuards(dependencies.guards, current);
+    yield* dependencies.passwordManagement
+        .set(passwordSetInput(current.currentSession.userId, payload))
+        .pipe(Effect.mapError(passwordManagementError));
+    return HttpServerResponse.empty({ status: 204 });
+});
+export const makePasswordChangeHandler = (dependencies) => Effect.fn("auth.http.password.change")(function* (handlerRequest) {
+    const { payload, request } = handlerRequest;
+    yield* Effect.annotateCurrentSpan("auth.http.endpoint", "password.change");
+    const current = yield* readRequiredSession(dependencies, request);
+    yield* runPasswordGuards(dependencies.guards, current);
+    yield* dependencies.passwordManagement
+        .change(passwordChangeInput(current.currentSession.userId, payload))
+        .pipe(Effect.mapError(passwordManagementError));
+    return HttpServerResponse.empty({ status: 204 });
+});
+export const PasswordHttpOperationsLive = Layer.effect(PasswordHttpOperations, Effect.gen(function* () {
+    const password = yield* PasswordLogin;
+    const registration = yield* PasswordRegistration;
+    const passwordReset = yield* PasswordReset;
+    const passwordManagement = yield* PasswordManagement;
+    const authHttp = yield* AuthHttp;
+    const emailVerificationFlow = yield* Effect.serviceOption(EmailVerificationFlow);
+    const sessions = yield* Sessions;
+    const sessionCookie = yield* SessionCookie;
+    const authRateLimit = yield* AuthRateLimit;
+    const botChallengeVerifier = yield* Effect.serviceOption(BotChallengeVerifier);
+    const trustedDeviceCookie = yield* Effect.serviceOption(TrustedDeviceCookie);
+    const loginRiskEnricher = yield* Effect.serviceOption(LoginRiskEnricher);
+    const guardServices = {
+        authRateLimit,
+        ...(Option.isSome(botChallengeVerifier)
+            ? { botChallengeVerifier: botChallengeVerifier.value }
+            : {}),
+        ...(Option.isSome(trustedDeviceCookie)
+            ? { trustedDeviceCookie: trustedDeviceCookie.value }
+            : {}),
+        ...(Option.isSome(loginRiskEnricher)
+            ? { loginRiskEnricher: loginRiskEnricher.value }
+            : {}),
+    };
+    return PasswordHttpOperations.of({
+        signIn: provideRequestGuardServices(guardServices, makePasswordSignInHandler({
+            password,
+            authHttp,
+            ...(Option.isSome(emailVerificationFlow)
+                ? { emailVerificationFlow: emailVerificationFlow.value }
+                : {}),
+        })),
+        signUp: provideRequestGuardServices(guardServices, makePasswordSignUpHandler({
+            registration,
+            authHttp,
+            ...(Option.isSome(emailVerificationFlow)
+                ? { emailVerificationFlow: emailVerificationFlow.value }
+                : {}),
+        })),
+        resetStart: provideRequestGuardServices(guardServices, makePasswordResetStartHandler({ passwordReset })),
+        resetVerify: provideRequestGuardServices(guardServices, makePasswordResetVerifyHandler({ passwordReset })),
+        set: makePasswordSetHandler({
+            passwordManagement,
+            sessions,
+            sessionCookie,
+        }),
+        change: makePasswordChangeHandler({
+            passwordManagement,
+            sessions,
+            sessionCookie,
+        }),
+    });
+}));
+export const passwordGroupHandlers = Effect.fn("auth.http.password.group")(function* (handlers) {
+    const operations = yield* PasswordHttpOperations;
+    return handlers
+        .handle("signIn", operations.signIn)
+        .handle("signUp", operations.signUp)
+        .handle("resetStart", operations.resetStart)
+        .handle("resetVerify", operations.resetVerify)
+        .handle("set", operations.set)
+        .handle("change", operations.change);
+});
+export const PasswordHttpApiGroupLive = HttpApiBuilder.group(PasswordHttpApi, "password", passwordGroupHandlers);
+export const PasswordHttpApiLive = HttpApiBuilder.layer(PasswordHttpApi).pipe(Layer.provide(PasswordHttpApiGroupLive), Layer.provide(PasswordHttpOperationsLive), Layer.provide(AuthOriginCheckMiddlewareConfigLive), Layer.provide(AuthSchemaErrorMiddlewareLive));
+//# sourceMappingURL=Password.js.map

package/dist/HttpApi/Password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Password.js","sourceRoot":"","sources":["../../src/HttpApi/Password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAGhE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,oBAAoB,EACpB,aAAa,GACd,MAAM,gBAAgB,CAAC;AAWxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAMzE,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,OAAO,EACL,mBAAmB,EACnB,kCAAkC,EAClC,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,6BAA6B,EAC7B,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAO9E,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EACL,mCAAmC,EACnC,+BAA+B,GAChC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AAUpC,MAAM,iCAAiC,GAAG,CACxC,MAAsB,EAC0B,EAAE,CAClD,MAAM,CAAC,IAAI,KAAK,2BAA2B,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC;AAE7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAc,EACd,OAAmD,EACjC,EAAE,CAAC,CAAC;IACtB,MAAM;IACN,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzC,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;CAC1E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAAc,EACd,OAAsD,EACjC,EAAE,CAAC,CAAC;IACzB,MAAM;IACN,eAAe,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC;IACvD,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAAC,OAAe,EAAE,EAAE,CAChD,IAAI,iBAAiB,CAAC;IACpB,IAAI,EAAE,gBAAgB;IACtB,OAAO;CACR,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAE,EAAE,CAC7C,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;AAE5D,MAAM,8BAA8B,GAAG,CACrC,YAEC,EACD,MAAsB,EACtB,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IACE,YAAY,CAAC,qBAAqB,KAAK,SAAS;QAChD,CAAC,iCAAiC,CAAC,MAAM,CAAC,EAC1C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,CAAC,YAAY,CAAC,qBAAqB;SACtC,KAAK,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;SACxC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE,CACtD,MAAM,CAAC,IAAI,CACT,qBAAqB,CAAC,oCAAoC,CAAC,CAC5D,CACF,CACF,CAAC;IAEJ,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,CAAC,UAA6B,EAAE,EAAE,CACpD,IAAI,oBAAoB,CAAC;IACvB,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,kCAAkC;IAC3C,UAAU;CACX,CAAC,CAAC;AAEL,MAAM,2BAA2B,GAAG,CAClC,YAKC,EACD,OAAkD,EACmB,EAAE,CACvE,CAAC,CAAC,GAAG,IAAU,EAAE,EAAE;IACjB,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAChC,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,YAAY,CAAC,aAAa,CAAC,CACjE,CAAC;IACF,IAAI,YAAY,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,GAAG,MAAM,CAAC,IAAI,CAClB,MAAM,CAAC,cAAc,CACnB,oBAAoB,EACpB,YAAY,CAAC,oBAAoB,CAClC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,GAAG,MAAM,CAAC,IAAI,CAClB,MAAM,CAAC,cAAc,CACnB,mBAAmB,EACnB,YAAY,CAAC,mBAAmB,CACjC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACjD,MAAM,GAAG,MAAM,CAAC,IAAI,CAClB,MAAM,CAAC,cAAc,CAAC,iBAAiB,EAAE,YAAY,CAAC,iBAAiB,CAAC,CACzE,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAsE,CAAC;AAiB1E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,YAIzC,EAAE,EAAE,CACH,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC/C,cAA4C;IAE5C,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE,CACnC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CACxC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CACzC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CACrC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAClD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE,CACvD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CACb,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE,CACR,+BAA+B,CAC7B,KAAK,EACL,iCAAiC,CAClC;QACD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACxE,EACD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CACzC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC/C,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAClD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,CACF,CAAC;IACF,KAAK,CAAC,CAAC,8BAA8B,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAE5D,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,YAIzC,EAAE,EAAE,CACH,MAAM,CAAC,EAAE,CAAC,4BAA4B,CAAC,CAAC,QAAQ,CAAC,EAC/C,cAA4C;IAE5C,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAE7D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CACxE,MAAM,CAAC,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE,CACrD,MAAM,CAAC,IAAI,CACT,IAAI,kCAAkC,CAAC;QACrC,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,gCAAgC;KAC1C,CAAC,CACH,CACF,EACD,MAAM,CAAC,SAAS,CAAC;QACf,8BAA8B,EAAE,GAAG,EAAE,CACnC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;QAC3D,4BAA4B,EAAE,GAAG,EAAE,CACjC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC;QAC3D,uBAAuB,EAAE,CAAC,KAAK,EAAE,EAAE,CACjC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;KACjD,CAAC,EACF,MAAM,CAAC,SAAS,CAAC;QACf,yBAAyB,EAAE,GAAG,EAAE,CAC9B,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC;QACvE,wBAAwB,EAAE,GAAG,EAAE,CAC7B,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC;KACxE,CAAC,EACF,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CACxC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,IAAI,CACT,kBAAkB,CAAC,4CAA4C,CAAC,CACjE,CACF,EACD,MAAM,CAAC,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAC3C,MAAM,CAAC,IAAI,CACT,kBAAkB,CAAC,4CAA4C,CAAC,CACjE,CACF,EACD,MAAM,CAAC,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAC5C,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CACzD,EACD,MAAM,CAAC,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE,CACxD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE,CAClC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CACzC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE,CACrC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAClD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE,CACvD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CACb,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE,CACR,+BAA+B,CAC7B,KAAK,EACL,iCAAiC,CAClC;QACD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACxE,EACD,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE,CACzC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAC/C,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,EACD,MAAM,CAAC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE,CAClD,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,iCAAiC,CAAC,CAAC,CACtE,CACF,CAAC;IACF,KAAK,CAAC,CAAC,8BAA8B,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAE5D,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,YAE7C,EAAE,EAAE,CACH,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EACnD,cAAgD;IAEhD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,oBAAoB,EACpB,sBAAsB,CACvB,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACjE,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CACzD,MAAM,CAAC,QAAQ,CACb,GAAG,EAAE,CACH,IAAI,iBAAiB,CAAC;QACpB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,gCAAgC;KAC1C,CAAC,CACL,CACF,CAAC;IAEF,OAAO,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,YAE9C,EAAE,EAAE,CACH,MAAM,CAAC,EAAE,CAAC,iCAAiC,CAAC,CAAC,QAAQ,CAAC,EACpD,cAAiD;IAEjD,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,oBAAoB,EACpB,uBAAuB,CACxB,CAAC;IACF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IAClE,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAC1D,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,mBAAmB,CAAC;QACtB,IAAI,EAAE,aAAa;QACnB,OAAO,EACL,KAAK,CAAC,OAAO,KAAK,4CAA4C;YAC5D,CAAC,CAAC,4CAA4C;YAC9C,CAAC,CAAC,gCAAgC;KACvC,CAAC,CACL,CACF,CAAC;IAEF,OAAO,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEL,MAAM,uBAAuB,GAAG,CAAC,KAAkC,EAAE,EAAE,CACrE,KAAK,CAAC,MAAM,KAAK,UAAU;IACzB,CAAC,CAAC,IAAI,iBAAiB,CAAC;QACpB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,2BAA2B;KACrC,CAAC;IACJ,CAAC,CAAC,IAAI,mBAAmB,CAAC;QACtB,IAAI,EAAE,aAAa;QACnB,OAAO,EACL,KAAK,CAAC,MAAM,KAAK,0BAA0B;YACzC,CAAC,CAAC,4CAA4C;YAC9C,CAAC,CAAC,iCAAiC;KACxC,CAAC,CAAC;AAET,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAAE,EAAE;IAC5C,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,OAAO,IAAI,uBAAuB,CAAC;YACjC,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,IAAI,qBAAqB,CAAC;YAC/B,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;QAC5C,OAAO,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,qBAAqB,CAAC,8BAA8B,CAAC,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAE,EAAE,CAC9C,+BAA+B,CAAC,KAAK,EAAE,8BAA8B,CAAC;IACtE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;AAEzC,MAAM,iBAAiB,GAAG,CACxB,MAAgE,EAChE,OAAyB,EACzB,EAAE,CACF,MAAM,KAAK,SAAS;IAClB,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,cAAc,CACnB,cAAc,EACd,cAAc,CAAC,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAC1C;IACD,iHAAiH;IACjH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CACnC,CAAC;AAER,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,YAKtC,EAAE,EAAE,CACH,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAC3C,cAAyC;IAEzC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;IAE5C,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,EAAE,cAAc,CAAC,CAAC;IAExE,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAClE,KAAK,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEvD,KAAK,CAAC,CAAC,YAAY,CAAC,kBAAkB;SACnC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAElD,OAAO,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,YAKzC,EAAE,EAAE,CACH,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAC9C,cAA4C;IAE5C,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC;IAE5C,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;IAE3E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAClE,KAAK,CAAC,CAAC,iBAAiB,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEvD,KAAK,CAAC,CAAC,YAAY,CAAC,kBAAkB;SACnC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACnE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAElD,OAAO,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC,MAAM,CACpD,sBAAsB,EACtB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IACtC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC;IACjD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAC3C,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,qBAAqB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CACvD,qBAAqB,CACtB,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAC3C,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAC3C,MAAM,oBAAoB,GACxB,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,mBAAmB,GACvB,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG;QACpB,aAAa;QACb,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;YACrC,CAAC,CAAC,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,KAAK,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC;YACpC,CAAC,CAAC,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,KAAK,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAClC,CAAC,CAAC,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,KAAK,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IACF,OAAO,sBAAsB,CAAC,EAAE,CAAC;QAC/B,MAAM,EAAE,2BAA2B,CACjC,aAAa,EACb,yBAAyB,CAAC;YACxB,QAAQ;YACR,QAAQ;YACR,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC;gBACtC,CAAC,CAAC,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,KAAK,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH;QACD,MAAM,EAAE,2BAA2B,CACjC,aAAa,EACb,yBAAyB,CAAC;YACxB,YAAY;YACZ,QAAQ;YACR,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC;gBACtC,CAAC,CAAC,EAAE,qBAAqB,EAAE,qBAAqB,CAAC,KAAK,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH;QACD,UAAU,EAAE,2BAA2B,CACrC,aAAa,EACb,6BAA6B,CAAC,EAAE,aAAa,EAAE,CAAC,CACjD;QACD,WAAW,EAAE,2BAA2B,CACtC,aAAa,EACb,8BAA8B,CAAC,EAAE,aAAa,EAAE,CAAC,CAClD;QACD,GAAG,EAAE,sBAAsB,CAAC;YAC1B,kBAAkB;YAClB,QAAQ;YACR,aAAa;SACd,CAAC;QACF,MAAM,EAAE,yBAAyB,CAAC;YAChC,kBAAkB;YAClB,QAAQ;YACR,aAAa;SACd,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CACxE,QAAQ,CAAC,EACP,QAAwE;IAExE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC;IACjD,OAAO,QAAQ;SACZ,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;SACnC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC;SACnC,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,UAAU,CAAC;SAC3C,MAAM,CAAC,aAAa,EAAE,UAAU,CAAC,WAAW,CAAC;SAC7C,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC;SAC7B,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;AACzC,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAC,KAAK,CAC1D,eAAe,EACf,UAAU,EACV,qBAAqB,CACtB,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAC3E,KAAK,CAAC,OAAO,CAAC,wBAAwB,CAAC,EACvC,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC,EACzC,KAAK,CAAC,OAAO,CAAC,mCAAmC,CAAC,EAClD,KAAK,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAC7C,CAAC"}