@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.18

package/dist/HttpApi/PasswordContract.d.ts

@@ -0,0 +1,307 @@
+import { HttpApi, HttpApiEndpoint, HttpApiGroup, HttpApiSchema } from "effect/unstable/httpapi";
+import { AuthBadRequestError, AuthInternalError, AuthIdentityAlreadyRegisteredError, AuthInvalidCredentialsError, AuthPolicyDeniedError, AuthRateLimitedError, AuthRequestRejectedError, AuthSchemaErrorMiddleware, AuthStepUpRequiredError, AuthUnauthenticatedError } from "./Errors.js";
+import { AuthOriginCheckMiddleware } from "./Middleware.js";
+export declare const passwordSignInEndpoint: HttpApiEndpoint.HttpApiEndpoint<"signIn", "POST", "/sign-in", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly password: import("effect/Schema").String;
+    readonly deviceFingerprint: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly userAgentFamily: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly platform: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly timezone: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly screenClass: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["small", "medium", "large"]>>;
+        readonly appDeviceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_mfa">;
+    readonly flowId: import("effect/Schema").String;
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literals<readonly ["totp", "backup-code", "passkey"]>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_email_verification">;
+    readonly flowId: import("effect/Schema").String;
+    readonly identityId: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_passkey_enrollment">;
+    readonly flowId: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthInvalidCredentialsError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthRequestRejectedError | typeof AuthInternalError>, never, never>;
+export declare const passwordSignUpEndpoint: HttpApiEndpoint.HttpApiEndpoint<"signUp", "POST", "/sign-up", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly password: import("effect/Schema").String;
+    readonly deviceFingerprint: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly userAgentFamily: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly platform: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly timezone: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly screenClass: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["small", "medium", "large"]>>;
+        readonly appDeviceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_mfa">;
+    readonly flowId: import("effect/Schema").String;
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literals<readonly ["totp", "backup-code", "passkey"]>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_email_verification">;
+    readonly flowId: import("effect/Schema").String;
+    readonly identityId: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_passkey_enrollment">;
+    readonly flowId: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthIdentityAlreadyRegisteredError | typeof AuthRequestRejectedError | typeof AuthInternalError>, never, never>;
+export declare const passwordResetStartEndpoint: HttpApiEndpoint.HttpApiEndpoint<"resetStart", "POST", "/reset/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<HttpApiSchema.NoContent>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthRequestRejectedError | typeof AuthInternalError>, never, never>;
+export declare const passwordResetVerifyEndpoint: HttpApiEndpoint.HttpApiEndpoint<"resetVerify", "POST", "/reset/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").String;
+    readonly password: import("effect/Schema").String;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<HttpApiSchema.NoContent>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthRequestRejectedError | typeof AuthInternalError>, never, never>;
+export declare const passwordSetEndpoint: HttpApiEndpoint.HttpApiEndpoint<"set", "POST", "/set", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly password: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<HttpApiSchema.NoContent>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthRequestRejectedError | typeof AuthInternalError>, never, never>;
+export declare const passwordChangeEndpoint: HttpApiEndpoint.HttpApiEndpoint<"change", "POST", "/change", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly currentPassword: import("effect/Schema").String;
+    readonly newPassword: import("effect/Schema").String;
+}>>, never, import("effect/Schema").toCodecJson<HttpApiSchema.NoContent>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthRequestRejectedError | typeof AuthInternalError>, never, never>;
+declare const PasswordHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"password", HttpApiEndpoint.HttpApiEndpoint<"change", "POST", "/auth/password/change", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly currentPassword: import("effect/Schema").String;
+    readonly newPassword: import("effect/Schema").String;
+}>>, never, import("effect/Schema").toCodecJson<HttpApiSchema.NoContent>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthRequestRejectedError | typeof AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | HttpApiEndpoint.HttpApiEndpoint<"resetStart", "POST", "/auth/password/reset/start", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly secret: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<HttpApiSchema.NoContent>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthRequestRejectedError | typeof AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | HttpApiEndpoint.HttpApiEndpoint<"resetVerify", "POST", "/auth/password/reset/verify", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly challengeId: import("effect/Schema").brand<import("effect/Schema").String, "auth/ChallengeId">;
+    readonly secret: import("effect/Schema").String;
+    readonly password: import("effect/Schema").String;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<HttpApiSchema.NoContent>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthRequestRejectedError | typeof AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | HttpApiEndpoint.HttpApiEndpoint<"set", "POST", "/auth/password/set", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly password: import("effect/Schema").String;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+}>>, never, import("effect/Schema").toCodecJson<HttpApiSchema.NoContent>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthUnauthenticatedError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthRequestRejectedError | typeof AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | HttpApiEndpoint.HttpApiEndpoint<"signIn", "POST", "/auth/password/sign-in", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly password: import("effect/Schema").String;
+    readonly deviceFingerprint: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly userAgentFamily: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly platform: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly timezone: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly screenClass: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["small", "medium", "large"]>>;
+        readonly appDeviceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_mfa">;
+    readonly flowId: import("effect/Schema").String;
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literals<readonly ["totp", "backup-code", "passkey"]>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_email_verification">;
+    readonly flowId: import("effect/Schema").String;
+    readonly identityId: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_passkey_enrollment">;
+    readonly flowId: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthInvalidCredentialsError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthRequestRejectedError | typeof AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never> | HttpApiEndpoint.HttpApiEndpoint<"signUp", "POST", "/auth/password/sign-up", never, never, import("effect/Schema").toCodecJson<import("effect/Schema").Struct<{
+    readonly identity: import("effect/Schema").Struct<{
+        readonly scope: import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"global">;
+        }>, import("effect/Schema").Struct<{
+            readonly type: import("effect/Schema").Literal<"tenant">;
+            readonly tenantId: import("effect/Schema").String;
+        }>]>;
+        readonly kind: import("effect/Schema").String;
+        readonly value: import("effect/Schema").String;
+    }>;
+    readonly password: import("effect/Schema").String;
+    readonly deviceFingerprint: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly userAgentFamily: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly platform: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly timezone: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly locale: import("effect/Schema").optional<import("effect/Schema").String>;
+        readonly screenClass: import("effect/Schema").optional<import("effect/Schema").Literals<readonly ["small", "medium", "large"]>>;
+        readonly appDeviceId: import("effect/Schema").optional<import("effect/Schema").String>;
+    }>>;
+    readonly metadata: import("effect/Schema").optional<import("effect/Schema").$Record<import("effect/Schema").String, import("effect/Schema").Unknown>>;
+    readonly botChallenge: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly token: import("effect/Schema").String;
+    }>>;
+}>>, never, import("effect/Schema").toCodecJson<import("effect/Schema").Union<readonly [import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"authenticated">;
+    readonly expiresAt: import("effect/Schema").Number;
+    readonly aal: import("effect/Schema").Literals<readonly ["aal1", "aal2", "aal3"]>;
+    readonly amr: import("effect/Schema").$Array<import("effect/Schema").String>;
+    readonly mfaVerifiedAt: import("effect/Schema").optional<import("effect/Schema").brand<import("effect/Schema").Number, "auth/UnixMillis">>;
+    readonly claims: import("effect/Schema").optional<import("effect/Schema").Struct<{
+        readonly verifiedIdentityKinds: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly requirements: import("effect/Schema").optional<import("effect/Schema").$Array<import("effect/Schema").String>>;
+        readonly recoveryEnrollment: import("effect/Schema").optional<import("effect/Schema").Struct<{
+            readonly allowed: import("effect/Schema").$Array<import("effect/Schema").String>;
+        }>>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_mfa">;
+    readonly flowId: import("effect/Schema").String;
+    readonly factors: import("effect/Schema").$Array<import("effect/Schema").Struct<{
+        readonly type: import("effect/Schema").Literals<readonly ["totp", "backup-code", "passkey"]>;
+    }>>;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_email_verification">;
+    readonly flowId: import("effect/Schema").String;
+    readonly identityId: import("effect/Schema").brand<import("effect/Schema").String, "auth/IdentityId">;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_login_approval">;
+    readonly flowId: import("effect/Schema").String;
+    readonly approvalChallengeId: import("effect/Schema").String;
+    readonly channel: import("effect/Schema").String;
+    readonly sessionBinding: import("effect/Schema").Literals<readonly ["originating-device", "approval-device", "none"]>;
+    readonly sameDeviceRequired: import("effect/Schema").Boolean;
+    readonly reason: import("effect/Schema").String;
+}>, import("effect/Schema").Struct<{
+    readonly type: import("effect/Schema").Literal<"requires_passkey_enrollment">;
+    readonly flowId: import("effect/Schema").String;
+}>]>>, import("effect/Schema").toCodecJson<typeof AuthBadRequestError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthIdentityAlreadyRegisteredError | typeof AuthRequestRejectedError | typeof AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware, never>, false>;
+export declare class PasswordHttpApiGroup extends PasswordHttpApiGroup_base {
+}
+declare const PasswordHttpApi_base: HttpApi.HttpApi<"PasswordHttpApi", typeof PasswordHttpApiGroup>;
+export declare class PasswordHttpApi extends PasswordHttpApi_base {
+}
+export {};
+//# sourceMappingURL=PasswordContract.d.ts.map

package/dist/HttpApi/PasswordContract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordContract.d.ts","sourceRoot":"","sources":["../../src/HttpApi/PasswordContract.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,eAAe,EACf,YAAY,EACZ,aAAa,EACd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kCAAkC,EAClC,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAyB5D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qRAYlC,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4RAYlC,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;mTAQtC,CAAC;AAEF,eAAO,MAAM,2BAA2B;;;;;;;mTAQvC,CAAC;AAEF,eAAO,MAAM,mBAAmB;;;qVAI9B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;qVAQlC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEF,qBAAa,oBAAqB,SAAQ,yBAWF;CAAG;;AAE3C,qBAAa,eAAgB,SAAQ,oBAEpC;CAAG"}

package/dist/HttpApi/PasswordContract.js

@@ -0,0 +1,63 @@
+import { HttpApi, HttpApiEndpoint, HttpApiGroup, HttpApiSchema, } from "effect/unstable/httpapi";
+import { AuthBadRequestError, AuthInternalError, AuthIdentityAlreadyRegisteredError, AuthInvalidCredentialsError, AuthPolicyDeniedError, AuthRateLimitedError, AuthRequestRejectedError, AuthSchemaErrorMiddleware, AuthStepUpRequiredError, AuthUnauthenticatedError, } from "./Errors.js";
+import { AuthOriginCheckMiddleware } from "./Middleware.js";
+import { PrimaryAuthSuccess, PasswordChangeBody, PasswordResetStartBody, PasswordResetVerifyBody, PasswordSetBody, PasswordSignInBody, PasswordSignUpBody, } from "./Schemas.js";
+const httpApiGuardErrors = [
+    AuthPolicyDeniedError,
+    AuthStepUpRequiredError,
+    AuthRateLimitedError,
+    AuthRequestRejectedError,
+    AuthInternalError,
+];
+const authenticatedHttpApiGuardBadRequestErrors = [
+    AuthUnauthenticatedError,
+    AuthBadRequestError,
+    ...httpApiGuardErrors,
+];
+export const passwordSignInEndpoint = HttpApiEndpoint.post("signIn", "/sign-in", {
+    payload: PasswordSignInBody,
+    success: PrimaryAuthSuccess,
+    error: [
+        AuthBadRequestError,
+        AuthInvalidCredentialsError,
+        ...httpApiGuardErrors,
+    ],
+});
+export const passwordSignUpEndpoint = HttpApiEndpoint.post("signUp", "/sign-up", {
+    payload: PasswordSignUpBody,
+    success: PrimaryAuthSuccess,
+    error: [
+        AuthBadRequestError,
+        AuthIdentityAlreadyRegisteredError,
+        ...httpApiGuardErrors,
+    ],
+});
+export const passwordResetStartEndpoint = HttpApiEndpoint.post("resetStart", "/reset/start", {
+    payload: PasswordResetStartBody,
+    success: HttpApiSchema.NoContent,
+    error: [AuthBadRequestError, ...httpApiGuardErrors],
+});
+export const passwordResetVerifyEndpoint = HttpApiEndpoint.post("resetVerify", "/reset/verify", {
+    payload: PasswordResetVerifyBody,
+    success: HttpApiSchema.NoContent,
+    error: [AuthBadRequestError, ...httpApiGuardErrors],
+});
+export const passwordSetEndpoint = HttpApiEndpoint.post("set", "/set", {
+    payload: PasswordSetBody,
+    success: HttpApiSchema.NoContent,
+    error: authenticatedHttpApiGuardBadRequestErrors,
+});
+export const passwordChangeEndpoint = HttpApiEndpoint.post("change", "/change", {
+    payload: PasswordChangeBody,
+    success: HttpApiSchema.NoContent,
+    error: authenticatedHttpApiGuardBadRequestErrors,
+});
+export class PasswordHttpApiGroup extends HttpApiGroup.make("password")
+    .add(passwordSignInEndpoint, passwordSignUpEndpoint, passwordResetStartEndpoint, passwordResetVerifyEndpoint, passwordSetEndpoint.middleware(AuthOriginCheckMiddleware), passwordChangeEndpoint.middleware(AuthOriginCheckMiddleware))
+    .prefix("/auth/password")
+    .middleware(AuthSchemaErrorMiddleware)
+    .middleware(AuthOriginCheckMiddleware) {
+}
+export class PasswordHttpApi extends HttpApi.make("PasswordHttpApi").add(PasswordHttpApiGroup) {
+}
+//# sourceMappingURL=PasswordContract.js.map

package/dist/HttpApi/PasswordContract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordContract.js","sourceRoot":"","sources":["../../src/HttpApi/PasswordContract.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,eAAe,EACf,YAAY,EACZ,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,kCAAkC,EAClC,2BAA2B,EAC3B,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAEtB,MAAM,kBAAkB,GAAG;IACzB,qBAAqB;IACrB,uBAAuB;IACvB,oBAAoB;IACpB,wBAAwB;IACxB,iBAAiB;CACT,CAAC;AAEX,MAAM,yCAAyC,GAAG;IAChD,wBAAwB;IACxB,mBAAmB;IACnB,GAAG,kBAAkB;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC,IAAI,CACxD,QAAQ,EACR,UAAU,EACV;IACE,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,kBAAkB;IAC3B,KAAK,EAAE;QACL,mBAAmB;QACnB,2BAA2B;QAC3B,GAAG,kBAAkB;KACtB;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC,IAAI,CACxD,QAAQ,EACR,UAAU,EACV;IACE,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,kBAAkB;IAC3B,KAAK,EAAE;QACL,mBAAmB;QACnB,kCAAkC;QAClC,GAAG,kBAAkB;KACtB;CACF,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,eAAe,CAAC,IAAI,CAC5D,YAAY,EACZ,cAAc,EACd;IACE,OAAO,EAAE,sBAAsB;IAC/B,OAAO,EAAE,aAAa,CAAC,SAAS;IAChC,KAAK,EAAE,CAAC,mBAAmB,EAAE,GAAG,kBAAkB,CAAC;CACpD,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,eAAe,CAAC,IAAI,CAC7D,aAAa,EACb,eAAe,EACf;IACE,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,aAAa,CAAC,SAAS;IAChC,KAAK,EAAE,CAAC,mBAAmB,EAAE,GAAG,kBAAkB,CAAC;CACpD,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE;IACrE,OAAO,EAAE,eAAe;IACxB,OAAO,EAAE,aAAa,CAAC,SAAS;IAChC,KAAK,EAAE,yCAAyC;CACjD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC,IAAI,CACxD,QAAQ,EACR,SAAS,EACT;IACE,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,aAAa,CAAC,SAAS;IAChC,KAAK,EAAE,yCAAyC;CACjD,CACF,CAAC;AAEF,MAAM,OAAO,oBAAqB,SAAQ,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;KACpE,GAAG,CACF,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,EAC3B,mBAAmB,CAAC,UAAU,CAAC,yBAAyB,CAAC,EACzD,sBAAsB,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAC7D;KACA,MAAM,CAAC,gBAAgB,CAAC;KACxB,UAAU,CAAC,yBAAyB,CAAC;KACrC,UAAU,CAAC,yBAAyB,CAAC;CAAG;AAE3C,MAAM,OAAO,eAAgB,SAAQ,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,GAAG,CACtE,oBAAoB,CACrB;CAAG"}

package/dist/HttpApi/PasswordGuards.d.ts

@@ -0,0 +1,82 @@
+import { Effect, Redacted } from "effect";
+import type { Schema } from "effect";
+import { HttpServerRequest } from "effect/unstable/http";
+import { AuthRateLimit } from "../AuthRateLimit.js";
+import type { LoginRequestContext } from "../LoginRisk.js";
+import type { PasswordResetStartInput, PasswordResetVerifyInput, PasswordSignInInput, PasswordSignUpInput } from "../Password.js";
+import { AuthInternalError, AuthRateLimitedError, AuthRequestRejectedError } from "./Errors.js";
+import type { RequestSecurityPolicyOverride } from "./RequestGuards.js";
+import { PasswordResetStartBody, PasswordResetVerifyBody, PasswordSignInBody, PasswordSignUpBody } from "./Schemas.js";
+export interface PasswordHttpRiskContext {
+    readonly request?: LoginRequestContext;
+    readonly deviceKey?: string;
+    readonly locationKey?: string;
+}
+export interface PasswordSignInGuardRequest {
+    readonly payload: Schema.Schema.Type<typeof PasswordSignInBody>;
+    readonly request?: HttpServerRequest.HttpServerRequest;
+}
+export interface PasswordSignUpGuardRequest {
+    readonly payload: Schema.Schema.Type<typeof PasswordSignUpBody>;
+    readonly request?: HttpServerRequest.HttpServerRequest;
+}
+export interface PasswordResetStartGuardRequest {
+    readonly payload: Schema.Schema.Type<typeof PasswordResetStartBody>;
+    readonly request?: HttpServerRequest.HttpServerRequest;
+}
+export interface PasswordResetVerifyGuardRequest {
+    readonly payload: Schema.Schema.Type<typeof PasswordResetVerifyBody>;
+    readonly request?: HttpServerRequest.HttpServerRequest;
+}
+export interface PasswordSignInGuarded {
+    readonly input: PasswordSignInInput;
+}
+export interface PasswordSignUpGuarded {
+    readonly input: PasswordSignUpInput;
+}
+export interface PasswordResetStartGuarded {
+    readonly input: PasswordResetStartInput;
+}
+export interface PasswordResetVerifyGuarded {
+    readonly input: PasswordResetVerifyInput;
+}
+export type PasswordGuardError = AuthInternalError | AuthRateLimitedError | AuthRequestRejectedError;
+export type PasswordGuard<Request, Guarded> = (request: Request) => Effect.Effect<Guarded, PasswordGuardError, AuthRateLimit>;
+export type ConfigurablePasswordGuard<Request, Guarded> = PasswordGuard<Request, Guarded> & {
+    readonly withPolicy: (policy: RequestSecurityPolicyOverride) => PasswordGuard<Request, Guarded>;
+};
+export declare const passwordSignInInput: (payload: Schema.Schema.Type<typeof PasswordSignInBody>, trustedDeviceToken?: Redacted.Redacted<string>, riskContext?: PasswordHttpRiskContext) => PasswordSignInInput;
+export declare const passwordSignUpInput: (payload: Schema.Schema.Type<typeof PasswordSignUpBody>, riskContext?: PasswordHttpRiskContext) => PasswordSignUpInput;
+export declare const passwordResetStartInput: (payload: Schema.Schema.Type<typeof PasswordResetStartBody>) => PasswordResetStartInput;
+export declare const passwordResetVerifyInput: (payload: Schema.Schema.Type<typeof PasswordResetVerifyBody>) => PasswordResetVerifyInput;
+export declare const PasswordGuards: {
+    readonly signIn: ((request: PasswordSignInGuardRequest) => Effect.Effect<{
+        input: PasswordSignInInput;
+    }, AuthInternalError | AuthRateLimitedError | AuthRequestRejectedError, AuthRateLimit>) & {
+        withPolicy: (policy: RequestSecurityPolicyOverride) => (request: PasswordSignInGuardRequest) => Effect.Effect<{
+            input: PasswordSignInInput;
+        }, AuthInternalError | AuthRateLimitedError | AuthRequestRejectedError, AuthRateLimit>;
+    };
+    readonly signUp: ((request: PasswordSignUpGuardRequest) => Effect.Effect<{
+        input: PasswordSignUpInput;
+    }, AuthInternalError | AuthRateLimitedError | AuthRequestRejectedError, AuthRateLimit>) & {
+        withPolicy: (policy: RequestSecurityPolicyOverride) => (request: PasswordSignUpGuardRequest) => Effect.Effect<{
+            input: PasswordSignUpInput;
+        }, AuthInternalError | AuthRateLimitedError | AuthRequestRejectedError, AuthRateLimit>;
+    };
+    readonly resetStart: ((request: PasswordResetStartGuardRequest) => Effect.Effect<{
+        input: PasswordResetStartInput;
+    }, AuthInternalError | AuthRateLimitedError | AuthRequestRejectedError, AuthRateLimit>) & {
+        withPolicy: (policy: RequestSecurityPolicyOverride) => (request: PasswordResetStartGuardRequest) => Effect.Effect<{
+            input: PasswordResetStartInput;
+        }, AuthInternalError | AuthRateLimitedError | AuthRequestRejectedError, AuthRateLimit>;
+    };
+    readonly resetVerify: ((request: PasswordResetVerifyGuardRequest) => Effect.Effect<{
+        input: PasswordResetVerifyInput;
+    }, AuthInternalError | AuthRateLimitedError | AuthRequestRejectedError, AuthRateLimit>) & {
+        withPolicy: (policy: RequestSecurityPolicyOverride) => (request: PasswordResetVerifyGuardRequest) => Effect.Effect<{
+            input: PasswordResetVerifyInput;
+        }, AuthInternalError | AuthRateLimitedError | AuthRequestRejectedError, AuthRateLimit>;
+    };
+};
+//# sourceMappingURL=PasswordGuards.d.ts.map

package/dist/HttpApi/PasswordGuards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PasswordGuards.d.ts","sourceRoot":"","sources":["../../src/HttpApi/PasswordGuards.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAU,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAM3D,OAAO,KAAK,EACV,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,aAAa,CAAC;AAMrB,OAAO,KAAK,EAEV,6BAA6B,EAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;CACxD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,kBAAkB,CAAC,CAAC;IAChE,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;CACxD;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,sBAAsB,CAAC,CAAC;IACpE,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;CACxD;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,uBAAuB,CAAC,CAAC;IACrE,QAAQ,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;CACxD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACzC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAC1C;AAED,MAAM,MAAM,kBAAkB,GAC1B,iBAAiB,GACjB,oBAAoB,GACpB,wBAAwB,CAAC;AAE7B,MAAM,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,IAAI,CAC5C,OAAO,EAAE,OAAO,KACb,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,kBAAkB,EAAE,aAAa,CAAC,CAAC;AAE/D,MAAM,MAAM,yBAAyB,CAAC,OAAO,EAAE,OAAO,IAAI,aAAa,CACrE,OAAO,EACP,OAAO,CACR,GAAG;IACF,QAAQ,CAAC,UAAU,EAAE,CACnB,MAAM,EAAE,6BAA6B,KAClC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;CACtC,CAAC;AAoDF,eAAO,MAAM,mBAAmB,YACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,kBAAkB,CAAC,uBACjC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAChC,uBAAuB,KACpC,mBAqBF,CAAC;AAEF,eAAO,MAAM,mBAAmB,YACrB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,kBAAkB,CAAC,gBACxC,uBAAuB,KACpC,mBAoBF,CAAC;AAEF,eAAO,MAAM,uBAAuB,YACzB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,sBAAsB,CAAC,KACzD,uBAOF,CAAC;AAEF,eAAO,MAAM,wBAAwB,YAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,uBAAuB,CAAC,KAC1D,wBAID,CAAC;AA6JH,eAAO,MAAM,cAAc;;;;6BAtBJ,6BAA6B;;;;;;;6BAI7B,6BAA6B;;;;;;;6BAM3B,6BAA6B;;;;;;;6BAO7B,6BAA6B;;;;CAU5C,CAAC"}