@effect-auth/core 0.1.0-alpha.15 → 0.1.0-alpha.18

package/dist/Assurance.d.ts

@@ -0,0 +1,415 @@
+import { Context, Effect, Layer, Result, Schema } from "effect";
+import type { CredentialId, OAuthProviderId, UnixMillis } from "./Identifiers.js";
+export type AssuranceLevel = "aal1" | "aal2" | "aal3";
+export declare const assuranceLevels: readonly ["aal1", "aal2", "aal3"];
+export declare const rankAssurance: (level: AssuranceLevel) => number;
+export declare const assuranceAtLeast: (actual: AssuranceLevel, required: AssuranceLevel) => boolean;
+export declare const strongerAssurance: (left: AssuranceLevel, right: AssuranceLevel) => AssuranceLevel;
+export declare const canonicalAuthMethodReferences: readonly ["pwd", "email_otp", "magic_link", "oauth", "totp", "passkey", "recovery_code"];
+export type BuiltInAuthMethodReference = (typeof canonicalAuthMethodReferences)[number];
+export type AuthMethodReference = BuiltInAuthMethodReference | (string & {});
+interface EvidenceBase<K extends string> {
+    readonly version: 1;
+    readonly type: K;
+    readonly verifiedAt: UnixMillis;
+}
+export interface PasswordEvidence extends EvidenceBase<"password"> {
+    readonly credentialId: CredentialId;
+}
+export interface EmailOtpEvidence extends EvidenceBase<"email_otp"> {
+    readonly identityId: string;
+}
+export interface MagicLinkEvidence extends EvidenceBase<"magic_link"> {
+    readonly identityId: string;
+}
+export interface OAuthEvidence extends EvidenceBase<"oauth"> {
+    readonly providerId: OAuthProviderId;
+    readonly providerAccountId: string;
+}
+export interface TotpEvidence extends EvidenceBase<"totp"> {
+    readonly factorId: CredentialId;
+    readonly acceptedCounter: number;
+}
+export type PasskeyUserVerification = "verified" | "not-verified" | "unknown";
+export type PasskeyAuthenticatorAttachment = "platform" | "cross-platform";
+export interface PasskeyEvidence extends EvidenceBase<"passkey"> {
+    readonly credentialId: CredentialId;
+    readonly userVerification: PasskeyUserVerification;
+    readonly authenticatorAttachment?: PasskeyAuthenticatorAttachment;
+    readonly backedUp?: boolean;
+    readonly backupEligible?: boolean;
+    readonly signCount?: number;
+    readonly aaguid?: string;
+}
+export interface RecoveryCodeEvidence extends EvidenceBase<"recovery_code"> {
+    readonly codeId: CredentialId;
+}
+export type CustomEvidenceProperty = boolean | number | string;
+export type CustomEvidenceProperties = Readonly<Record<string, CustomEvidenceProperty>>;
+export interface CustomEvidence extends EvidenceBase<"custom"> {
+    readonly policyId: string;
+    readonly policyVersion: number;
+    readonly kind: string;
+    readonly properties: CustomEvidenceProperties;
+}
+export type AuthenticationEvidence = PasswordEvidence | EmailOtpEvidence | MagicLinkEvidence | OAuthEvidence | TotpEvidence | PasskeyEvidence | RecoveryCodeEvidence | CustomEvidence;
+declare const AuthenticationEvidenceTimeError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "AuthenticationEvidenceTimeError";
+} & Readonly<A>;
+export declare class AuthenticationEvidenceTimeError extends AuthenticationEvidenceTimeError_base<{
+    readonly eventType: AuthenticationEvidence["type"];
+    readonly verifiedAt: UnixMillis;
+    readonly serverNow: UnixMillis;
+    readonly maximumFutureSkewMillis: number;
+}> {
+}
+/** Maximum time authentication evidence may lead the server clock by default. */
+export declare const defaultAuthenticationEvidenceFutureSkewMillis = 60000;
+export declare const validateAuthenticationEvidenceTimestamps: (events: readonly AuthenticationEvidence[], serverNow: UnixMillis, maximumFutureSkewMillis?: number) => Result.Result<void, AuthenticationEvidenceTimeError>;
+export declare const maximumCustomEvidenceProperties = 32;
+export declare const maximumCustomEvidencePropertyKeyLength = 128;
+export declare const maximumCustomEvidenceStringPropertyLength = 2048;
+export declare const maximumCustomAuthMethodReferenceLength = 128;
+export declare const AuthenticationEvent: Schema.Union<readonly [Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"password">;
+    readonly credentialId: Schema.brand<Schema.String, "auth/CredentialId">;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"email_otp">;
+    readonly identityId: Schema.String;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"magic_link">;
+    readonly identityId: Schema.String;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"oauth">;
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly providerAccountId: Schema.String;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"totp">;
+    readonly factorId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly acceptedCounter: Schema.Number;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"passkey">;
+    readonly credentialId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly userVerification: Schema.Literals<readonly ["verified", "not-verified", "unknown"]>;
+    readonly authenticatorAttachment: Schema.optional<Schema.Literals<readonly ["platform", "cross-platform"]>>;
+    readonly backedUp: Schema.optional<Schema.Boolean>;
+    readonly backupEligible: Schema.optional<Schema.Boolean>;
+    readonly signCount: Schema.optional<Schema.Number>;
+    readonly aaguid: Schema.optional<Schema.String>;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"recovery_code">;
+    readonly codeId: Schema.brand<Schema.String, "auth/CredentialId">;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"custom">;
+    readonly policyId: Schema.String;
+    readonly policyVersion: Schema.Number;
+    readonly kind: Schema.String;
+    readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Boolean, Schema.Finite, Schema.String]>>;
+}>]>;
+export type AuthenticationEvent = typeof AuthenticationEvent.Type;
+export declare const maximumSessionAuthenticationEvents = 32;
+export declare const AuthenticationEvents: Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"password">;
+    readonly credentialId: Schema.brand<Schema.String, "auth/CredentialId">;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"email_otp">;
+    readonly identityId: Schema.String;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"magic_link">;
+    readonly identityId: Schema.String;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"oauth">;
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly providerAccountId: Schema.String;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"totp">;
+    readonly factorId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly acceptedCounter: Schema.Number;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"passkey">;
+    readonly credentialId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly userVerification: Schema.Literals<readonly ["verified", "not-verified", "unknown"]>;
+    readonly authenticatorAttachment: Schema.optional<Schema.Literals<readonly ["platform", "cross-platform"]>>;
+    readonly backedUp: Schema.optional<Schema.Boolean>;
+    readonly backupEligible: Schema.optional<Schema.Boolean>;
+    readonly signCount: Schema.optional<Schema.Number>;
+    readonly aaguid: Schema.optional<Schema.String>;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"recovery_code">;
+    readonly codeId: Schema.brand<Schema.String, "auth/CredentialId">;
+}>, Schema.Struct<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"custom">;
+    readonly policyId: Schema.String;
+    readonly policyVersion: Schema.Number;
+    readonly kind: Schema.String;
+    readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Boolean, Schema.Finite, Schema.String]>>;
+}>]>>;
+export type AuthenticationEvents = typeof AuthenticationEvents.Type;
+export declare const parseAuthenticationEvent: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"password">;
+    readonly credentialId: Schema.brand<Schema.String, "auth/CredentialId">;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"email_otp">;
+    readonly identityId: Schema.String;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"magic_link">;
+    readonly identityId: Schema.String;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"oauth">;
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly providerAccountId: Schema.String;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"totp">;
+    readonly factorId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly acceptedCounter: Schema.Number;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"recovery_code">;
+    readonly codeId: Schema.brand<Schema.String, "auth/CredentialId">;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"custom">;
+    readonly policyId: Schema.String;
+    readonly policyVersion: Schema.Number;
+    readonly kind: Schema.String;
+    readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Boolean, Schema.Finite, Schema.String]>>;
+}, "Type"> | {
+    readonly version: 1;
+    readonly verifiedAt: number & import("effect/Brand").Brand<"auth/UnixMillis">;
+    readonly type: "passkey";
+    readonly credentialId: string & import("effect/Brand").Brand<"auth/CredentialId">;
+    readonly userVerification: "not-verified" | "unknown" | "verified";
+    readonly authenticatorAttachment?: "cross-platform" | "platform" | undefined;
+    readonly backedUp?: boolean | undefined;
+    readonly backupEligible?: boolean | undefined;
+    readonly signCount?: number | undefined;
+    readonly aaguid?: string | undefined;
+};
+export declare const parseAuthenticationEvents: (input: unknown, options?: import("effect/SchemaAST").ParseOptions) => readonly (Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"password">;
+    readonly credentialId: Schema.brand<Schema.String, "auth/CredentialId">;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"email_otp">;
+    readonly identityId: Schema.String;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"magic_link">;
+    readonly identityId: Schema.String;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"oauth">;
+    readonly providerId: Schema.brand<Schema.String, "auth/OAuthProviderId">;
+    readonly providerAccountId: Schema.String;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"totp">;
+    readonly factorId: Schema.brand<Schema.String, "auth/CredentialId">;
+    readonly acceptedCounter: Schema.Number;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"recovery_code">;
+    readonly codeId: Schema.brand<Schema.String, "auth/CredentialId">;
+}, "Type"> | Schema.Struct.ReadonlySide<{
+    readonly version: Schema.Literal<1>;
+    readonly verifiedAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly type: Schema.Literal<"custom">;
+    readonly policyId: Schema.String;
+    readonly policyVersion: Schema.Number;
+    readonly kind: Schema.String;
+    readonly properties: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Boolean, Schema.Finite, Schema.String]>>;
+}, "Type"> | {
+    readonly version: 1;
+    readonly verifiedAt: number & import("effect/Brand").Brand<"auth/UnixMillis">;
+    readonly type: "passkey";
+    readonly credentialId: string & import("effect/Brand").Brand<"auth/CredentialId">;
+    readonly userVerification: "not-verified" | "unknown" | "verified";
+    readonly authenticatorAttachment?: "cross-platform" | "platform" | undefined;
+    readonly backedUp?: boolean | undefined;
+    readonly backupEligible?: boolean | undefined;
+    readonly signCount?: number | undefined;
+    readonly aaguid?: string | undefined;
+})[];
+export declare const passwordEvidence: (evidence: Omit<PasswordEvidence, "type" | "version">) => PasswordEvidence;
+export declare const emailOtpEvidence: (evidence: Omit<EmailOtpEvidence, "type" | "version">) => EmailOtpEvidence;
+export declare const magicLinkEvidence: (evidence: Omit<MagicLinkEvidence, "type" | "version">) => MagicLinkEvidence;
+export declare const oauthEvidence: (evidence: Omit<OAuthEvidence, "type" | "version">) => OAuthEvidence;
+export declare const totpEvidence: (evidence: Omit<TotpEvidence, "type" | "version">) => TotpEvidence;
+export declare const passkeyEvidence: (evidence: Omit<PasskeyEvidence, "type" | "version">) => PasskeyEvidence;
+export declare const recoveryCodeEvidence: (evidence: Omit<RecoveryCodeEvidence, "type" | "version">) => RecoveryCodeEvidence;
+export declare const customEvidence: (evidence: Omit<CustomEvidence, "type" | "version">) => CustomEvidence;
+export type CustomEvidencePolicyResult = {
+    readonly role: "primary";
+    readonly level: "aal1";
+    readonly amr: AuthMethodReference;
+} | {
+    readonly role: "independent-second-factor";
+    readonly level: "aal1";
+    readonly amr: AuthMethodReference;
+} | {
+    readonly role: "multi-factor";
+    readonly level: "aal2" | "aal3";
+    readonly amr: AuthMethodReference;
+};
+declare const CustomEvidencePolicyError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "CustomEvidencePolicyError";
+} & Readonly<A>;
+export declare class CustomEvidencePolicyError extends CustomEvidencePolicyError_base<{
+    readonly reason: "unregistered_policy" | "kind_mismatch" | "invalid_properties" | "invalid_result" | "reserved_amr";
+    readonly policyId: string;
+    readonly policyVersion: number;
+    readonly cause?: unknown;
+}> {
+}
+declare const CustomEvidencePolicyConfigurationError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "CustomEvidencePolicyConfigurationError";
+} & Readonly<A>;
+export declare class CustomEvidencePolicyConfigurationError extends CustomEvidencePolicyConfigurationError_base<{
+    readonly reason: "invalid_policy_id" | "invalid_policy_version" | "invalid_policy_kind" | "invalid_policy_metadata" | "duplicate_policy";
+    readonly policyId: string;
+    readonly policyVersion: number;
+    readonly cause?: unknown;
+}> {
+}
+declare const CustomEvidencePolicyTypeId: unique symbol;
+interface CustomEvidencePolicyInternals<Properties extends CustomEvidenceProperties, PolicyResult extends CustomEvidencePolicyResult> {
+    readonly validateProperties: (properties: unknown) => Result.Result<CustomEvidenceProperties, unknown>;
+    readonly evaluate: (properties: CustomEvidenceProperties) => unknown;
+    readonly _Properties?: Properties;
+    readonly _PolicyResult?: PolicyResult;
+}
+export interface CustomEvidencePolicy<PolicyId extends string = string, PolicyVersion extends number = number, Kind extends string = string, Properties extends CustomEvidenceProperties = CustomEvidenceProperties, PolicyResult extends CustomEvidencePolicyResult = CustomEvidencePolicyResult> {
+    readonly policyId: PolicyId;
+    readonly policyVersion: PolicyVersion;
+    readonly kind: Kind;
+    readonly [CustomEvidencePolicyTypeId]: CustomEvidencePolicyInternals<Properties, PolicyResult>;
+}
+export type DefinedCustomEvidence<PolicyId extends string, PolicyVersion extends number, Kind extends string, Properties extends CustomEvidenceProperties> = Omit<CustomEvidence, "policyId" | "policyVersion" | "kind" | "properties"> & {
+    readonly policyId: PolicyId;
+    readonly policyVersion: PolicyVersion;
+    readonly kind: Kind;
+    readonly properties: Properties;
+};
+export interface CustomEvidenceDefinition<PolicyId extends string, PolicyVersion extends number, Kind extends string, Properties extends CustomEvidenceProperties, PolicyResult extends CustomEvidencePolicyResult> {
+    readonly policy: CustomEvidencePolicy<PolicyId, PolicyVersion, Kind, Properties, PolicyResult>;
+    readonly make: (input: {
+        readonly verifiedAt: UnixMillis;
+        readonly properties: Properties;
+    }) => DefinedCustomEvidence<PolicyId, PolicyVersion, Kind, Properties>;
+}
+type IsAny<A> = 0 extends 1 & A ? true : false;
+type IsNever<A> = [A] extends [never] ? true : false;
+type IsEqual<A, B> = (<T>() => T extends A ? 1 : 2) extends <T>() => (T extends B ? 1 : 2) ? (<T>() => T extends B ? 1 : 2) extends <T>() => (T extends A ? 1 : 2) ? true : false : false;
+type IsFlatCustomEvidenceField<S extends Schema.Constraint> = IsAny<S["Type"]> extends true ? false : IsNever<S["Type"]> extends true ? false : [S["Type"]] extends [CustomEvidenceProperty] ? [S["Encoded"]] extends [CustomEvidenceProperty] ? IsEqual<S["Type"], S["Encoded"]> extends true ? [S["DecodingServices"] | S["EncodingServices"]] extends [never] ? S["~type.optionality"] extends "required" ? S["~encoded.optionality"] extends "required" ? S["~type.mutability"] extends "readonly" ? S["~encoded.mutability"] extends "readonly" ? true : false : false : false : false : false : false : false : false;
+type InvalidCustomEvidenceFields<Fields extends Schema.Struct.Fields> = {
+    readonly [Key in keyof Fields]: Key extends string ? IsFlatCustomEvidenceField<Fields[Key]> extends true ? never : Key : Key;
+}[keyof Fields];
+type FlatCustomEvidenceStruct<Fields extends Schema.Struct.Fields> = Schema.Struct<Fields> & ([InvalidCustomEvidenceFields<Fields>] extends [never] ? unknown : {
+    readonly "Invalid custom evidence property fields": never;
+});
+type CustomEvidencePropertiesOf<Fields extends Schema.Struct.Fields> = Schema.Struct.Type<Fields> extends CustomEvidenceProperties ? Schema.Struct.Type<Fields> : never;
+export declare const defineCustomEvidence: <const PolicyId extends string, const PolicyVersion extends number, const Kind extends string, const Fields extends Schema.Struct.Fields, const PolicyResult extends CustomEvidencePolicyResult>(definition: {
+    readonly policyId: PolicyId;
+    readonly policyVersion: PolicyVersion;
+    readonly kind: Kind;
+    readonly properties: FlatCustomEvidenceStruct<Fields>;
+    readonly evaluate: (properties: Schema.Struct.Type<Fields>) => PolicyResult;
+}) => CustomEvidenceDefinition<PolicyId, PolicyVersion, Kind, CustomEvidencePropertiesOf<Fields>, PolicyResult>;
+export interface CustomEvidencePolicyRegistry {
+    readonly resolve: (policyId: string, policyVersion: number) => CustomEvidencePolicy | undefined;
+}
+declare const CustomEvidencePolicies_base: Context.ServiceClass<CustomEvidencePolicies, "auth/CustomEvidencePolicies", CustomEvidencePolicyRegistry>;
+export declare class CustomEvidencePolicies extends CustomEvidencePolicies_base {
+}
+export declare const emptyCustomEvidencePolicyRegistry: CustomEvidencePolicyRegistry;
+export declare const makeCustomEvidencePolicyRegistryResult: (policies: readonly CustomEvidencePolicy[]) => Result.Result<CustomEvidencePolicyRegistry, CustomEvidencePolicyConfigurationError>;
+/**
+ * Compatibility constructor for existing synchronous call sites. New code should
+ * use makeCustomEvidencePolicyRegistryResult with defineCustomEvidence policies.
+ */
+export declare const makeCustomEvidencePolicyRegistry: (policies: readonly CustomEvidencePolicy[]) => CustomEvidencePolicyRegistry;
+export declare namespace CustomEvidencePolicies {
+    const make: (policies: readonly CustomEvidencePolicy[]) => Effect.Effect<CustomEvidencePolicyRegistry, CustomEvidencePolicyConfigurationError>;
+}
+export declare const CustomEvidencePoliciesLive: (policies: readonly CustomEvidencePolicy[]) => Layer.Layer<CustomEvidencePolicies, CustomEvidencePolicyConfigurationError>;
+export interface DeriveAssuranceOptions {
+    readonly customEvidencePolicies?: CustomEvidencePolicyRegistry;
+}
+export interface DerivedAssurance {
+    readonly level: AssuranceLevel;
+    readonly amr: readonly AuthMethodReference[];
+    readonly authenticatedAt?: UnixMillis;
+    readonly primaryEstablished: boolean;
+    readonly recoveryRemediation: boolean;
+}
+export declare const authenticationMethodForResult: (evidence: AuthenticationEvidence, customEvidencePolicies: CustomEvidencePolicyRegistry) => Result.Result<AuthMethodReference, CustomEvidencePolicyError>;
+export declare const authenticationMethodFor: (evidence: AuthenticationEvidence, customEvidencePolicies?: CustomEvidencePolicyRegistry) => AuthMethodReference;
+export declare const authenticationFactorId: (evidence: AuthenticationEvidence) => CredentialId | undefined;
+export declare const authenticationEventMatchesMethodResult: (evidence: AuthenticationEvidence, method: AuthMethodReference, customEvidencePolicies: CustomEvidencePolicyRegistry) => Result.Result<boolean, CustomEvidencePolicyError>;
+export declare const authenticationEventMatchesMethod: (evidence: AuthenticationEvidence, method: AuthMethodReference, customEvidencePolicies?: CustomEvidencePolicyRegistry) => boolean;
+export declare const latestAuthenticationEvent: (events: readonly AuthenticationEvidence[], predicate: (event: AuthenticationEvidence) => boolean) => AuthenticationEvidence | undefined;
+export declare const latestMethodAuthenticationEventResult: (events: readonly AuthenticationEvidence[], method: AuthMethodReference, customEvidencePolicies: CustomEvidencePolicyRegistry) => Result.Result<AuthenticationEvidence | undefined, CustomEvidencePolicyError>;
+export declare const latestMethodAuthenticationEvent: (events: readonly AuthenticationEvidence[], method: AuthMethodReference, customEvidencePolicies?: CustomEvidencePolicyRegistry) => AuthenticationEvidence | undefined;
+export declare const latestFactorAuthenticationEventResult: (events: readonly AuthenticationEvidence[], method: AuthMethodReference, factorId: CredentialId, customEvidencePolicies: CustomEvidencePolicyRegistry) => Result.Result<AuthenticationEvidence | undefined, CustomEvidencePolicyError>;
+export declare const latestFactorAuthenticationEvent: (events: readonly AuthenticationEvidence[], method: AuthMethodReference, factorId: CredentialId, customEvidencePolicies?: CustomEvidencePolicyRegistry) => AuthenticationEvidence | undefined;
+export declare const latestAssuranceAuthenticationEventResult: (events: readonly AuthenticationEvidence[], required: AssuranceLevel, customEvidencePolicies: CustomEvidencePolicyRegistry) => Result.Result<AuthenticationEvidence | undefined, CustomEvidencePolicyError>;
+export declare const latestAssuranceAuthenticationEvent: (events: readonly AuthenticationEvidence[], required: AssuranceLevel, customEvidencePolicies?: CustomEvidencePolicyRegistry) => AuthenticationEvidence | undefined;
+export declare const deriveAssuranceResult: (events: readonly AuthenticationEvidence[], options?: DeriveAssuranceOptions) => Result.Result<DerivedAssurance, CustomEvidencePolicyError>;
+export declare const deriveAssurance: (events: readonly AuthenticationEvidence[], options?: DeriveAssuranceOptions) => DerivedAssurance;
+export declare const compactAuthenticationEventsResult: (events: readonly AuthenticationEvidence[], maximumEvents: number, customEvidencePolicies: CustomEvidencePolicyRegistry) => Result.Result<readonly AuthenticationEvidence[], CustomEvidencePolicyError>;
+export declare const compactAuthenticationEvents: (events: readonly AuthenticationEvidence[], maximumEvents?: number, customEvidencePolicies?: CustomEvidencePolicyRegistry) => readonly AuthenticationEvidence[];
+export declare const deriveMfaVerifiedAtResult: (events: readonly AuthenticationEvidence[], customEvidencePolicies: CustomEvidencePolicyRegistry) => Result.Result<UnixMillis | undefined, CustomEvidencePolicyError>;
+export declare const deriveMfaVerifiedAt: (events: readonly AuthenticationEvidence[], customEvidencePolicies?: CustomEvidencePolicyRegistry) => UnixMillis | undefined;
+export {};
+//# sourceMappingURL=Assurance.d.ts.map

package/dist/Assurance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Assurance.d.ts","sourceRoot":"","sources":["../src/Assurance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAOtE,OAAO,KAAK,EACV,YAAY,EACZ,eAAe,EACf,UAAU,EACX,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEtD,eAAO,MAAM,eAAe,YAAI,MAAM,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAQjE,eAAO,MAAM,aAAa,UAAW,cAAc,KAAG,MAChC,CAAC;AAEvB,eAAO,MAAM,gBAAgB,WACnB,cAAc,YACZ,cAAc,KACvB,OAA2D,CAAC;AAE/D,eAAO,MAAM,iBAAiB,SACtB,cAAc,SACb,cAAc,KACpB,cAAgE,CAAC;AAEpE,eAAO,MAAM,6BAA6B,YACxC,KAAK,EACL,WAAW,EACX,YAAY,EACZ,OAAO,EACP,MAAM,EACN,SAAS,EACT,eAAe,CACP,CAAC;AAEX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,6BAA6B,CAAC,CAAC,MAAM,CAAC,CAAC;AACjD,MAAM,MAAM,mBAAmB,GAAG,0BAA0B,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE7E,UAAU,YAAY,CAAC,CAAC,SAAS,MAAM;IACrC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY,CAAC,UAAU,CAAC;IAChE,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;CACrC;AAED,MAAM,WAAW,gBAAiB,SAAQ,YAAY,CAAC,WAAW,CAAC;IACjE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,iBAAkB,SAAQ,YAAY,CAAC,YAAY,CAAC;IACnE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAc,SAAQ,YAAY,CAAC,OAAO,CAAC;IAC1D,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,YAAa,SAAQ,YAAY,CAAC,MAAM,CAAC;IACxD,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,CAAC;AAC9E,MAAM,MAAM,8BAA8B,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAE3E,MAAM,WAAW,eAAgB,SAAQ,YAAY,CAAC,SAAS,CAAC;IAC9D,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,uBAAuB,CAAC;IACnD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,8BAA8B,CAAC;IAClE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAqB,SAAQ,YAAY,CAAC,eAAe,CAAC;IACzE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAC/D,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAC7C,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CACvC,CAAC;AAEF,MAAM,WAAW,cAAe,SAAQ,YAAY,CAAC,QAAQ,CAAC;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;CAC/C;AAED,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,aAAa,GACb,YAAY,GACZ,eAAe,GACf,oBAAoB,GACpB,cAAc,CAAC;;;;AAEnB,qBAAa,+BAAgC,SAAQ,qCAEnD;IACA,QAAQ,CAAC,SAAS,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACnD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C,CAAC;CAAG;AAEL,iFAAiF;AACjF,eAAO,MAAM,6CAA6C,QAAS,CAAC;AAEpE,eAAO,MAAM,wCAAwC,WAC3C,SAAS,sBAAsB,EAAE,aAC9B,UAAU,uCAEpB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,+BAA+B,CAerD,CAAC;AAMF,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAClD,eAAO,MAAM,sCAAsC,MAAM,CAAC;AAC1D,eAAO,MAAM,yCAAyC,OAAO,CAAC;AAC9D,eAAO,MAAM,sCAAsC,MAAM,CAAC;AAgC1D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsD9B,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAC;AAElE,eAAO,MAAM,kCAAkC,KAAK,CAAC;AACrD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAEhC,CAAC;AACF,MAAM,MAAM,oBAAoB,GAAG,OAAO,oBAAoB,CAAC,IAAI,CAAC;AAEpE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CACU,CAAC;AAChD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IACU,CAAC;AAKjD,eAAO,MAAM,gBAAgB,aACjB,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC,KACnD,gBAA4E,CAAC;AAChF,eAAO,MAAM,gBAAgB,aACjB,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC,KACnD,gBACwD,CAAC;AAC5D,eAAO,MAAM,iBAAiB,aAClB,IAAI,CAAC,iBAAiB,EAAE,MAAM,GAAG,SAAS,CAAC,KACpD,iBACyD,CAAC;AAC7D,eAAO,MAAM,aAAa,aACd,IAAI,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC,KAChD,aAAsE,CAAC;AAC1E,eAAO,MAAM,YAAY,aACb,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC,KAC/C,YAAoE,CAAC;AACxE,eAAO,MAAM,eAAe,aAChB,IAAI,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC,KAClD,eAA0E,CAAC;AAC9E,eAAO,MAAM,oBAAoB,aACrB,IAAI,CAAC,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC,KACvD,oBAC4D,CAAC;AAMhE,eAAO,MAAM,cAAc,aACf,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC,KACjD,cAaF,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC;CACnC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC;CACnC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,mBAAmB,CAAC;CACnC,CAAC;;;;AAEN,qBAAa,yBAA0B,SAAQ,+BAE7C;IACA,QAAQ,CAAC,MAAM,EACX,qBAAqB,GACrB,eAAe,GACf,oBAAoB,GACpB,gBAAgB,GAChB,cAAc,CAAC;IACnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;;;;AAEL,qBAAa,sCAAuC,SAAQ,4CAE1D;IACA,QAAQ,CAAC,MAAM,EACX,mBAAmB,GACnB,wBAAwB,GACxB,qBAAqB,GACrB,yBAAyB,GACzB,kBAAkB,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,QAAA,MAAM,0BAA0B,EAAE,OAAO,MAE/B,CAAC;AAEX,UAAU,6BAA6B,CACrC,UAAU,SAAS,wBAAwB,EAC3C,YAAY,SAAS,0BAA0B;IAE/C,QAAQ,CAAC,kBAAkB,EAAE,CAC3B,UAAU,EAAE,OAAO,KAChB,MAAM,CAAC,MAAM,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,wBAAwB,KAAK,OAAO,CAAC;IACrE,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC;IAClC,QAAQ,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB,CACnC,QAAQ,SAAS,MAAM,GAAG,MAAM,EAChC,aAAa,SAAS,MAAM,GAAG,MAAM,EACrC,IAAI,SAAS,MAAM,GAAG,MAAM,EAC5B,UAAU,SAAS,wBAAwB,GAAG,wBAAwB,EACtE,YAAY,SAAS,0BAA0B,GAAG,0BAA0B;IAE5E,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,CAAC,0BAA0B,CAAC,EAAE,6BAA6B,CAClE,UAAU,EACV,YAAY,CACb,CAAC;CACH;AAED,MAAM,MAAM,qBAAqB,CAC/B,QAAQ,SAAS,MAAM,EACvB,aAAa,SAAS,MAAM,EAC5B,IAAI,SAAS,MAAM,EACnB,UAAU,SAAS,wBAAwB,IACzC,IAAI,CACN,cAAc,EACd,UAAU,GAAG,eAAe,GAAG,MAAM,GAAG,YAAY,CACrD,GAAG;IACF,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC,CAAC;AAEF,MAAM,WAAW,wBAAwB,CACvC,QAAQ,SAAS,MAAM,EACvB,aAAa,SAAS,MAAM,EAC5B,IAAI,SAAS,MAAM,EACnB,UAAU,SAAS,wBAAwB,EAC3C,YAAY,SAAS,0BAA0B;IAE/C,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CACnC,QAAQ,EACR,aAAa,EACb,IAAI,EACJ,UAAU,EACV,YAAY,CACb,CAAC;IACF,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;QAChC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;KACjC,KAAK,qBAAqB,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;CACxE;AAED,KAAK,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC;AAC/C,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC;AACrD,KAAK,OAAO,CAAC,CAAC,EAAE,CAAC,IACf,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,QAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA,GAC/D,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,QAAO,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA,GACjE,IAAI,GACJ,KAAK,GACP,KAAK,CAAC;AAEZ,KAAK,yBAAyB,CAAC,CAAC,SAAS,MAAM,CAAC,UAAU,IACxD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,IAAI,GACzB,KAAK,GACL,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,IAAI,GAC7B,KAAK,GACL,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,GAC1C,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,GAC7C,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,SAAS,IAAI,GAC3C,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAC7D,CAAC,CAAC,mBAAmB,CAAC,SAAS,UAAU,GACvC,CAAC,CAAC,sBAAsB,CAAC,SAAS,UAAU,GAC1C,CAAC,CAAC,kBAAkB,CAAC,SAAS,UAAU,GACtC,CAAC,CAAC,qBAAqB,CAAC,SAAS,UAAU,GACzC,IAAI,GACJ,KAAK,GACP,KAAK,GACP,KAAK,GACP,KAAK,GACP,KAAK,GACP,KAAK,GACP,KAAK,GACP,KAAK,CAAC;AAEhB,KAAK,2BAA2B,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI;IACtE,QAAQ,EAAE,GAAG,IAAI,MAAM,MAAM,GAAG,GAAG,SAAS,MAAM,GAC9C,yBAAyB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,IAAI,GACjD,KAAK,GACL,GAAG,GACL,GAAG;CACR,CAAC,MAAM,MAAM,CAAC,CAAC;AAEhB,KAAK,wBAAwB,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,IAC/D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GACnB,CAAC,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAClD,OAAO,GACP;IAAE,QAAQ,CAAC,yCAAyC,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AAEvE,KAAK,0BAA0B,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,IACjE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,wBAAwB,GACvD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAC1B,KAAK,CAAC;AAoLZ,eAAO,MAAM,oBAAoB,GAC/B,KAAK,CAAC,QAAQ,SAAS,MAAM,EAC7B,KAAK,CAAC,aAAa,SAAS,MAAM,EAClC,KAAK,CAAC,IAAI,SAAS,MAAM,EACzB,KAAK,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,EACzC,KAAK,CAAC,YAAY,SAAS,0BAA0B,cACzC;IACZ,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACtD,QAAQ,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC;CAC7E,KAAG,wBAAwB,CAC1B,QAAQ,EACR,aAAa,EACb,IAAI,EACJ,0BAA0B,CAAC,MAAM,CAAC,EAClC,YAAY,CA4Db,CAAC;AAEF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,CAChB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,KAClB,oBAAoB,GAAG,SAAS,CAAC;CACvC;;AAED,qBAAa,sBAAuB,SAAQ,2BAGV;CAAG;AAErC,eAAO,MAAM,iCAAiC,EAAE,4BACH,CAAC;AA2B9C,eAAO,MAAM,sCAAsC,aACvC,SAAS,oBAAoB,EAAE,KACxC,MAAM,CAAC,MAAM,CACd,4BAA4B,EAC5B,sCAAsC,CA2DvC,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gCAAgC,aACjC,SAAS,oBAAoB,EAAE,KACxC,4BACkE,CAAC;AAEtE,yBAAiB,sBAAsB,CAAC;IAC/B,MAAM,IAAI,aACL,SAAS,oBAAoB,EAAE,KACxC,MAAM,CAAC,MAAM,CACd,4BAA4B,EAC5B,sCAAsC,CAIrC,CAAC;CACL;AAED,eAAO,MAAM,0BAA0B,aAC3B,SAAS,oBAAoB,EAAE,KACxC,KAAK,CAAC,KAAK,CACZ,sBAAsB,EACtB,sCAAsC,CAEqC,CAAC;AAiG9E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,4BAA4B,CAAC;CAChE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAC7C,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;IACtC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC;AAoED,eAAO,MAAM,6BAA6B,aAC9B,sBAAsB,0BACR,4BAA4B,KACnD,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,yBAAyB,CAQ9D,CAAC;AAEF,eAAO,MAAM,uBAAuB,aACxB,sBAAsB,2BACR,4BAA4B,KACnD,mBAGA,CAAC;AAEJ,eAAO,MAAM,sBAAsB,aACvB,sBAAsB,KAC/B,YAAY,GAAG,SAgBjB,CAAC;AAEF,eAAO,MAAM,sCAAsC,aACvC,sBAAsB,UACxB,mBAAmB,0BACH,4BAA4B,KACnD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,yBAAyB,CAQlD,CAAC;AAEF,eAAO,MAAM,gCAAgC,aACjC,sBAAsB,UACxB,mBAAmB,2BACH,4BAA4B,KACnD,OAOA,CAAC;AAEJ,eAAO,MAAM,yBAAyB,WAC5B,SAAS,sBAAsB,EAAE,aAC9B,CAAC,KAAK,EAAE,sBAAsB,KAAK,OAAO,KACpD,sBAAsB,GAAG,SAW3B,CAAC;AAEF,eAAO,MAAM,qCAAqC,WACxC,SAAS,sBAAsB,EAAE,UACjC,mBAAmB,0BACH,4BAA4B,KACnD,MAAM,CAAC,MAAM,CACd,sBAAsB,GAAG,SAAS,EAClC,yBAAyB,CAoB1B,CAAC;AAEF,eAAO,MAAM,+BAA+B,WAClC,SAAS,sBAAsB,EAAE,UACjC,mBAAmB,2BACH,4BAA4B,KACnD,sBAAsB,GAAG,SAOzB,CAAC;AAEJ,eAAO,MAAM,qCAAqC,WACxC,SAAS,sBAAsB,EAAE,UACjC,mBAAmB,YACjB,YAAY,0BACE,4BAA4B,KACnD,MAAM,CAAC,MAAM,CACd,sBAAsB,GAAG,SAAS,EAClC,yBAAyB,CAqB1B,CAAC;AAEF,eAAO,MAAM,+BAA+B,WAClC,SAAS,sBAAsB,EAAE,UACjC,mBAAmB,YACjB,YAAY,2BACE,4BAA4B,KACnD,sBAAsB,GAAG,SAQzB,CAAC;AAgDJ,eAAO,MAAM,wCAAwC,WAC3C,SAAS,sBAAsB,EAAE,YAC/B,cAAc,0BACA,4BAA4B,KACnD,MAAM,CAAC,MAAM,CACd,sBAAsB,GAAG,SAAS,EAClC,yBAAyB,CA2C1B,CAAC;AAEF,eAAO,MAAM,kCAAkC,WACrC,SAAS,sBAAsB,EAAE,YAC/B,cAAc,2BACA,4BAA4B,KACnD,sBAAsB,GAAG,SAOzB,CAAC;AAEJ,eAAO,MAAM,qBAAqB,WACxB,SAAS,sBAAsB,EAAE,YAChC,sBAAsB,KAC9B,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,yBAAyB,CAmD3D,CAAC;AAEF,eAAO,MAAM,eAAe,WAClB,SAAS,sBAAsB,EAAE,YAChC,sBAAsB,KAC9B,gBACwD,CAAC;AAqE5D,eAAO,MAAM,iCAAiC,WACpC,SAAS,sBAAsB,EAAE,iBAC1B,MAAM,0BACG,4BAA4B,KACnD,MAAM,CAAC,MAAM,CACd,SAAS,sBAAsB,EAAE,EACjC,yBAAyB,CA+D1B,CAAC;AAiBF,eAAO,MAAM,2BAA2B,WAC9B,SAAS,sBAAsB,EAAE,mDAEhB,4BAA4B,KACpD,SAAS,sBAAsB,EAgCjC,CAAC;AAEF,eAAO,MAAM,yBAAyB,WAC5B,SAAS,sBAAsB,EAAE,0BACjB,4BAA4B,KACnD,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,SAAS,EAAE,yBAAyB,CAwBjE,CAAC;AAEF,eAAO,MAAM,mBAAmB,WACtB,SAAS,sBAAsB,EAAE,2BACjB,4BAA4B,KACnD,UAAU,GAAG,SAC8D,CAAC"}