@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.18

package/dist/LoginRiskEnrichment.d.ts

@@ -0,0 +1,145 @@
+import { Context, Effect, Layer } from "effect";
+import type { CryptoError, CryptoKey, CryptoService } from "./Crypto.js";
+import { Crypto } from "./Crypto.js";
+import type { UnixMillis } from "./Identifiers.js";
+import type { LoginRequestContext, LoginRiskLevel, LoginRiskMetadata } from "./LoginRisk.js";
+export type GeoIpOperation = "lookup";
+declare const GeoIpError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "GeoIpError";
+} & Readonly<A>;
+export declare class GeoIpError extends GeoIpError_base<{
+    readonly operation: GeoIpOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export type GeoIpCacheOperation = "get" | "set";
+declare const GeoIpCacheError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "GeoIpCacheError";
+} & Readonly<A>;
+export declare class GeoIpCacheError extends GeoIpCacheError_base<{
+    readonly operation: GeoIpCacheOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+declare const LoginRiskEnrichmentError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "LoginRiskEnrichmentError";
+} & Readonly<A>;
+export declare class LoginRiskEnrichmentError extends LoginRiskEnrichmentError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface GeoIpLookupInput {
+    readonly ip: string;
+    readonly request?: Omit<LoginRequestContext, "ip">;
+    readonly metadata?: LoginRiskMetadata;
+}
+export interface GeoIpLookupResult {
+    readonly country?: string;
+    readonly region?: string;
+    readonly city?: string;
+    readonly latitude?: number;
+    readonly longitude?: number;
+    readonly anonymousProxy?: boolean;
+    readonly hostingProvider?: boolean;
+    readonly riskLevel?: LoginRiskLevel;
+    readonly reasons?: readonly string[];
+}
+export interface GeoIpService {
+    readonly lookup: (input: GeoIpLookupInput) => Effect.Effect<GeoIpLookupResult, GeoIpError>;
+}
+declare const GeoIp_base: Context.ServiceClass<GeoIp, "auth/GeoIp", GeoIpService>;
+export declare class GeoIp extends GeoIp_base {
+}
+export interface GeoIpCacheEntry {
+    readonly value: GeoIpLookupResult;
+    readonly expiresAt: UnixMillis;
+}
+export interface GeoIpCacheService {
+    readonly get: (key: string) => Effect.Effect<GeoIpCacheEntry | undefined, GeoIpCacheError>;
+    readonly set: (key: string, entry: GeoIpCacheEntry) => Effect.Effect<void, GeoIpCacheError>;
+}
+declare const GeoIpCache_base: Context.ServiceClass<GeoIpCache, "auth/GeoIpCache", GeoIpCacheService>;
+export declare class GeoIpCache extends GeoIpCache_base {
+}
+export type LoginRiskKeyNamespace = "geoip-cache" | "risk-device" | "risk-location" | (string & {});
+export interface LoginRiskKeyInput {
+    readonly namespace: LoginRiskKeyNamespace;
+    readonly value: string;
+}
+export type LoginRiskKeyFactory = (input: LoginRiskKeyInput) => Effect.Effect<string, unknown>;
+export interface DeviceFingerprintParts {
+    readonly userAgentFamily?: string;
+    readonly platform?: string;
+    readonly timezone?: string;
+    readonly locale?: string;
+    readonly screenClass?: "small" | "medium" | "large";
+    readonly appDeviceId?: string;
+}
+export interface LoginRiskEnrichmentInput {
+    readonly request?: LoginRequestContext;
+    readonly deviceFingerprint?: DeviceFingerprintParts;
+    readonly deviceKey?: string;
+    readonly locationKey?: string;
+    readonly metadata?: LoginRiskMetadata;
+    readonly now?: UnixMillis;
+}
+export interface LoginRiskEnrichmentResult {
+    readonly request?: LoginRequestContext;
+    readonly deviceKey?: string;
+    readonly locationKey?: string;
+    readonly metadata?: LoginRiskMetadata;
+    readonly geo?: GeoIpLookupResult;
+}
+export type GeoIpLookupFailureMode = "ignore" | "fail";
+export interface LoginRiskEnricherOptions {
+    readonly coordinatePrecision?: number;
+    readonly geoIpTtlMillis?: number;
+    readonly geoIpLookupFailure?: GeoIpLookupFailureMode;
+    readonly cacheKey?: LoginRiskKeyFactory;
+}
+export interface LoginRiskEnricherDependencies {
+    readonly geoIp?: GeoIpService;
+    readonly geoIpCache?: GeoIpCacheService;
+    readonly options?: LoginRiskEnricherOptions;
+}
+export interface LoginRiskEnricherService {
+    readonly enrich: (input: LoginRiskEnrichmentInput) => Effect.Effect<LoginRiskEnrichmentResult, LoginRiskEnrichmentError>;
+}
+declare const LoginRiskEnricher_base: Context.ServiceClass<LoginRiskEnricher, "auth/LoginRiskEnricher", LoginRiskEnricherService>;
+export declare class LoginRiskEnricher extends LoginRiskEnricher_base {
+}
+export declare const coarseCoordinate: (value: number | undefined, precision?: number) => number | undefined;
+export declare const safeGeoReasonCodes: (reasons: readonly string[] | undefined) => readonly string[] | undefined;
+export declare const locationKeyFromGeo: (geo: Pick<GeoIpLookupResult, "country" | "region"> | undefined) => string | undefined;
+export declare const locationKeyFromRequestContext: (request: Pick<LoginRequestContext, "country" | "region"> | undefined) => string | undefined;
+export declare const loginRequestContextFromGeo: (input: {
+    readonly request?: LoginRequestContext;
+    readonly geo?: GeoIpLookupResult;
+    readonly coordinatePrecision?: number;
+}) => LoginRequestContext | undefined;
+export declare const mergeLoginRequestContext: (base: LoginRequestContext | undefined, override: LoginRequestContext | undefined) => LoginRequestContext | undefined;
+export declare const safeGeoMetadata: (geo: GeoIpLookupResult | undefined) => LoginRiskMetadata | undefined;
+export declare const deviceFingerprintMaterial: (input: DeviceFingerprintParts) => string;
+export declare const makeLoginRiskKeyFactory: (dependencies: {
+    readonly crypto: CryptoService;
+    readonly key: CryptoKey;
+}) => LoginRiskKeyFactory;
+export declare const loginRiskKey: (input: {
+    readonly key: CryptoKey;
+} & LoginRiskKeyInput) => Effect.Effect<string, CryptoError, Crypto>;
+export declare const deviceKeyFromFingerprint: (input: {
+    readonly fingerprint: DeviceFingerprintParts;
+    readonly cacheKey: LoginRiskKeyFactory;
+}) => Effect.Effect<string, unknown>;
+export declare const makeGeoIpCacheMemory: () => GeoIpCacheService;
+export declare const GeoIpCacheMemoryLive: Layer.Layer<GeoIpCache, never, never>;
+export declare const makeGeoIpNoop: () => GeoIpService;
+export declare const GeoIpNoopLive: Layer.Layer<GeoIp, never, never>;
+export declare const makeLoginRiskEnricher: (dependencies?: LoginRiskEnricherDependencies) => LoginRiskEnricherService;
+export declare const LoginRiskEnricherLive: (options?: LoginRiskEnricherOptions) => Layer.Layer<LoginRiskEnricher, never, never>;
+export declare const enrichLoginRisk: (input: LoginRiskEnrichmentInput) => Effect.Effect<LoginRiskEnrichmentResult, LoginRiskEnrichmentError, LoginRiskEnricher>;
+export {};
+//# sourceMappingURL=LoginRiskEnrichment.d.ts.map

package/dist/LoginRiskEnrichment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginRiskEnrichment.d.ts","sourceRoot":"","sources":["../src/LoginRiskEnrichment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAU,MAAM,QAAQ,CAAC;AAE9D,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;;;;AAEtC,qBAAa,UAAW,SAAQ,gBAA+B;IAC7D,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,KAAK,CAAC;;;;AAEhD,qBAAa,eAAgB,SAAQ,qBAAoC;IACvE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;;;;AAEL,qBAAa,wBAAyB,SAAQ,8BAE5C;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,gBAAgB,KACpB,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;CACnD;;AAED,qBAAa,KAAM,SAAQ,UAE1B;CAAG;AAEJ,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,CACZ,GAAG,EAAE,MAAM,KACR,MAAM,CAAC,MAAM,CAAC,eAAe,GAAG,SAAS,EAAE,eAAe,CAAC,CAAC;IACjE,QAAQ,CAAC,GAAG,EAAE,CACZ,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,eAAe,KACnB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;CAC3C;;AAED,qBAAa,UAAW,SAAQ,eAGV;CAAG;AAEzB,MAAM,MAAM,qBAAqB,GAC7B,aAAa,GACb,aAAa,GACb,eAAe,GACf,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAChC,KAAK,EAAE,iBAAiB,KACrB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;IACpD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC;CAClC;AAED,MAAM,MAAM,sBAAsB,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEvD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CACzC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,wBAAwB,CAAC;CAC7C;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,wBAAwB,KAC5B,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE,wBAAwB,CAAC,CAAC;CACzE;;AAED,qBAAa,iBAAkB,SAAQ,sBAGV;CAAG;AAiDhC,eAAO,MAAM,gBAAgB,UACpB,MAAM,GAAG,SAAS,cACb,MAAM,KACjB,MAAM,GAAG,SAUX,CAAC;AAEF,eAAO,MAAM,kBAAkB,YACpB,SAAS,MAAM,EAAE,GAAG,SAAS,KACrC,SAAS,MAAM,EAAE,GAAG,SAItB,CAAC;AAEF,eAAO,MAAM,kBAAkB,QACxB,IAAI,CAAC,iBAAiB,EAAE,SAAS,GAAG,QAAQ,CAAC,GAAG,SAAS,KAC7D,MAAM,GAAG,SAG2C,CAAC;AAExD,eAAO,MAAM,6BAA6B,YAC/B,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,QAAQ,CAAC,GAAG,SAAS,KACnE,MAAM,GAAG,SAGmD,CAAC;AAEhE,eAAO,MAAM,0BAA0B,UAAW;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC,KAAG,mBAAmB,GAAG,SAoBzB,CAAC;AAEF,eAAO,MAAM,wBAAwB,SAC7B,mBAAmB,GAAG,SAAS,YAC3B,mBAAmB,GAAG,SAAS,KACxC,mBAAmB,GAAG,SAOxB,CAAC;AAEF,eAAO,MAAM,eAAe,QACrB,iBAAiB,GAAG,SAAS,KACjC,iBAAiB,GAAG,SAWtB,CAAC;AAeF,eAAO,MAAM,yBAAyB,UAC7B,sBAAsB,KAC5B,MAQU,CAAC;AAEd,eAAO,MAAM,uBAAuB,iBACnB;IACb,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;CACzB,KAAG,mBAKA,CAAC;AAEP,eAAO,MAAM,YAAY,UAChB;IACL,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;CACzB,GAAG,iBAAiB,KACpB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAMzC,CAAC;AAEJ,eAAO,MAAM,wBAAwB,UAAW;IAC9C,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAI7B,CAAC;AAEL,eAAO,MAAM,oBAAoB,QAAO,iBAUvC,CAAC;AAEF,eAAO,MAAM,oBAAoB,uCACa,CAAC;AAE/C,eAAO,MAAM,aAAa,QAAO,YAG7B,CAAC;AAEL,eAAO,MAAM,aAAa,kCAAwC,CAAC;AAoFnE,eAAO,MAAM,qBAAqB,kBAClB,6BAA6B,KAC1C,wBAwCC,CAAC;AAEL,eAAO,MAAM,qBAAqB,aAAc,wBAAwB,iDAYrE,CAAC;AAEJ,eAAO,MAAM,eAAe,UACnB,wBAAwB,KAC9B,MAAM,CAAC,MAAM,CACd,yBAAyB,EACzB,wBAAwB,EACxB,iBAAiB,CAC2C,CAAC"}

package/dist/LoginRiskEnrichment.js

@@ -0,0 +1,220 @@
+import { Context, Data, Effect, Layer, Option } from "effect";
+import { Crypto } from "./Crypto.js";
+import { UnixMillis as makeUnixMillis } from "./Identifiers.js";
+import { currentUnixMillis } from "./Internal.js";
+export class GeoIpError extends Data.TaggedError("GeoIpError") {
+}
+export class GeoIpCacheError extends Data.TaggedError("GeoIpCacheError") {
+}
+export class LoginRiskEnrichmentError extends Data.TaggedError("LoginRiskEnrichmentError") {
+}
+export class GeoIp extends Context.Service()("auth/GeoIp") {
+}
+export class GeoIpCache extends Context.Service()("auth/GeoIpCache") {
+}
+export class LoginRiskEnricher extends Context.Service()("auth/LoginRiskEnricher") {
+}
+const defaultGeoIpTtlMillis = 15 * 60 * 1000;
+const safeReasonPattern = /^[a-z0-9_.-]{1,64}$/;
+const compactMetadata = (input) => {
+    const entries = Object.entries(input).filter(([, value]) => value !== undefined && (!Array.isArray(value) || value.length > 0));
+    return entries.length === 0 ? undefined : Object.fromEntries(entries);
+};
+const compactLoginRequestContext = (input) => {
+    const entries = Object.entries(input).filter(([, value]) => value !== undefined);
+    return entries.length === 0
+        ? undefined
+        : Object.fromEntries(entries);
+};
+const mergeMetadata = (left, right) => {
+    const merged = {
+        ...left,
+        ...right,
+    };
+    return Object.keys(merged).length === 0 ? undefined : merged;
+};
+const finiteNumber = (value) => value === undefined || !Number.isFinite(value) ? undefined : value;
+const normalizedPrecision = (precision) => precision === undefined || !Number.isInteger(precision)
+    ? 1
+    : Math.min(6, Math.max(0, precision));
+export const coarseCoordinate = (value, precision) => {
+    const finite = finiteNumber(value);
+    if (finite === undefined) {
+        return undefined;
+    }
+    const factor = 10 ** normalizedPrecision(precision);
+    return Math.round(finite * factor) / factor;
+};
+export const safeGeoReasonCodes = (reasons) => {
+    const safe = reasons?.filter((reason) => safeReasonPattern.test(reason));
+    return safe === undefined || safe.length === 0 ? undefined : safe;
+};
+export const locationKeyFromGeo = (geo) => geo?.country === undefined
+    ? undefined
+    : ["geo", geo.country, geo.region ?? "_"].join(":");
+export const locationKeyFromRequestContext = (request) => request?.country === undefined
+    ? undefined
+    : ["geo", request.country, request.region ?? "_"].join(":");
+export const loginRequestContextFromGeo = (input) => {
+    const { coordinatePrecision, geo, request } = input;
+    const latitude = coarseCoordinate(geo?.latitude ?? request?.latitude, coordinatePrecision);
+    const longitude = coarseCoordinate(geo?.longitude ?? request?.longitude, coordinatePrecision);
+    return compactLoginRequestContext({
+        ip: request?.ip,
+        userAgent: request?.userAgent,
+        country: geo?.country ?? request?.country,
+        region: geo?.region ?? request?.region,
+        city: geo?.city ?? request?.city,
+        latitude,
+        longitude,
+    });
+};
+export const mergeLoginRequestContext = (base, override) => {
+    const merged = {
+        ...base,
+        ...override,
+    };
+    return Object.keys(merged).length === 0 ? undefined : merged;
+};
+export const safeGeoMetadata = (geo) => {
+    if (geo === undefined) {
+        return undefined;
+    }
+    return compactMetadata({
+        geoRiskLevel: geo.riskLevel,
+        anonymousProxy: geo.anonymousProxy,
+        hostingProvider: geo.hostingProvider,
+        geoReasons: safeGeoReasonCodes(geo.reasons),
+    });
+};
+const fingerprintPart = (value, fallback) => {
+    const normalized = value
+        ?.trim()
+        .toLowerCase()
+        .replaceAll(/[^a-z0-9_.:-]/g, "_")
+        .slice(0, 64);
+    return normalized === undefined || normalized === "" ? fallback : normalized;
+};
+export const deviceFingerprintMaterial = (input) => [
+    fingerprintPart(input.userAgentFamily, "ua_unknown"),
+    fingerprintPart(input.platform, "platform_unknown"),
+    fingerprintPart(input.timezone, "tz_unknown"),
+    fingerprintPart(input.locale, "locale_unknown"),
+    input.screenClass ?? "screen_unknown",
+    fingerprintPart(input.appDeviceId, "app_device_unknown"),
+].join("|");
+export const makeLoginRiskKeyFactory = (dependencies) => (input) => dependencies.crypto.hmacSha256({
+    key: dependencies.key,
+    data: `${input.namespace}:${input.value}`,
+});
+export const loginRiskKey = (input) => Crypto.use((crypto) => crypto.hmacSha256({
+    key: input.key,
+    data: `${input.namespace}:${input.value}`,
+}));
+export const deviceKeyFromFingerprint = (input) => input.cacheKey({
+    namespace: "risk-device",
+    value: deviceFingerprintMaterial(input.fingerprint),
+});
+export const makeGeoIpCacheMemory = () => {
+    const entries = new Map();
+    return GeoIpCache.of({
+        get: (key) => Effect.sync(() => entries.get(key)),
+        set: (key, entry) => Effect.sync(() => {
+            entries.set(key, entry);
+        }),
+    });
+};
+export const GeoIpCacheMemoryLive = Layer.sync(GeoIpCache)(makeGeoIpCacheMemory);
+export const makeGeoIpNoop = () => GeoIp.of({
+    lookup: () => Effect.succeed({}),
+});
+export const GeoIpNoopLive = Layer.succeed(GeoIp)(makeGeoIpNoop());
+const enrichmentError = (message, cause) => new LoginRiskEnrichmentError({ message, cause });
+const lookupGeoIp = (dependencies, input, now) => {
+    const { geoIp, geoIpCache } = dependencies;
+    const options = dependencies.options ?? {};
+    const failureMode = options.geoIpLookupFailure ?? "ignore";
+    const { ip } = input;
+    if (ip === undefined || geoIp === undefined) {
+        return Effect.succeed(undefined);
+    }
+    const cache = geoIpCache;
+    const lookup = Effect.gen(function* () {
+        const cacheKey = cache === undefined || options.cacheKey === undefined
+            ? undefined
+            : yield* options
+                .cacheKey({ namespace: "geoip-cache", value: ip })
+                .pipe(Effect.mapError((cause) => enrichmentError("Failed to calculate GeoIP cache key", cause)));
+        const cached = cacheKey === undefined || cache === undefined
+            ? undefined
+            : yield* cache
+                .get(cacheKey)
+                .pipe(Effect.mapError((cause) => enrichmentError("Failed to load GeoIP cache entry", cause)));
+        if (cached !== undefined && Number(cached.expiresAt) > Number(now)) {
+            return cached.value;
+        }
+        const { ip: _ip, ...request } = input;
+        const geo = yield* geoIp
+            .lookup({
+            ip,
+            request,
+        })
+            .pipe(Effect.mapError((cause) => enrichmentError("GeoIP lookup failed", cause)));
+        if (cacheKey !== undefined && cache !== undefined) {
+            const ttlMillis = options.geoIpTtlMillis ?? defaultGeoIpTtlMillis;
+            yield* cache
+                .set(cacheKey, {
+                value: geo,
+                expiresAt: makeUnixMillis(Number(now) + Math.max(0, ttlMillis)),
+            })
+                .pipe(Effect.mapError((cause) => enrichmentError("Failed to store GeoIP cache entry", cause)));
+        }
+        return geo;
+    });
+    return failureMode === "fail"
+        ? lookup
+        : lookup.pipe(Effect.catchCause(() => Effect.succeed(undefined)));
+};
+export const makeLoginRiskEnricher = (dependencies = {}) => LoginRiskEnricher.of({
+    enrich: Effect.fn("auth.login_risk.enrich")(function* (input) {
+        const now = input.now ?? (yield* currentUnixMillis);
+        const options = dependencies.options ?? {};
+        const geo = input.request === undefined
+            ? undefined
+            : yield* lookupGeoIp(dependencies, input.request, now);
+        const request = loginRequestContextFromGeo({
+            request: input.request,
+            geo,
+            coordinatePrecision: options.coordinatePrecision,
+        });
+        const deviceKey = input.deviceKey ??
+            (input.deviceFingerprint === undefined || options.cacheKey === undefined
+                ? undefined
+                : yield* deviceKeyFromFingerprint({
+                    fingerprint: input.deviceFingerprint,
+                    cacheKey: options.cacheKey,
+                }).pipe(Effect.mapError((cause) => enrichmentError("Failed to calculate device key", cause))));
+        const locationKey = input.locationKey ??
+            locationKeyFromGeo(geo) ??
+            locationKeyFromRequestContext(request);
+        const metadata = mergeMetadata(input.metadata, safeGeoMetadata(geo));
+        return {
+            ...(request === undefined ? {} : { request }),
+            ...(deviceKey === undefined ? {} : { deviceKey }),
+            ...(locationKey === undefined ? {} : { locationKey }),
+            ...(metadata === undefined ? {} : { metadata }),
+            ...(geo === undefined ? {} : { geo }),
+        };
+    }),
+});
+export const LoginRiskEnricherLive = (options) => Layer.effect(LoginRiskEnricher)(Effect.gen(function* () {
+    const geoIp = yield* Effect.serviceOption(GeoIp);
+    const geoIpCache = yield* Effect.serviceOption(GeoIpCache);
+    return makeLoginRiskEnricher({
+        ...(Option.isSome(geoIp) ? { geoIp: geoIp.value } : {}),
+        ...(Option.isSome(geoIpCache) ? { geoIpCache: geoIpCache.value } : {}),
+        ...(options === undefined ? {} : { options }),
+    });
+}));
+export const enrichLoginRisk = (input) => LoginRiskEnricher.use((service) => service.enrich(input));
+//# sourceMappingURL=LoginRiskEnrichment.js.map

package/dist/LoginRiskEnrichment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoginRiskEnrichment.js","sourceRoot":"","sources":["../src/LoginRiskEnrichment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAG9D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASlD,MAAM,OAAO,UAAW,SAAQ,IAAI,CAAC,WAAW,CAAC,YAAY,CAI3D;CAAG;AAIL,MAAM,OAAO,eAAgB,SAAQ,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAIrE;CAAG;AAEL,MAAM,OAAO,wBAAyB,SAAQ,IAAI,CAAC,WAAW,CAC5D,0BAA0B,CAI1B;CAAG;AA0BL,MAAM,OAAO,KAAM,SAAQ,OAAO,CAAC,OAAO,EAAuB,CAC/D,YAAY,CACb;CAAG;AAiBJ,MAAM,OAAO,UAAW,SAAQ,OAAO,CAAC,OAAO,EAG5C,CAAC,iBAAiB,CAAC;CAAG;AAgEzB,MAAM,OAAO,iBAAkB,SAAQ,OAAO,CAAC,OAAO,EAGnD,CAAC,wBAAwB,CAAC;CAAG;AAEhC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD,MAAM,eAAe,GAAG,CACtB,KAAwC,EACT,EAAE;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CACZ,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACrE,CAAC;IAEF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,0BAA0B,GAAG,CACjC,KAA6C,EACZ,EAAE;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAC1C,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CACnC,CAAC;IAEF,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,CAAC,SAAS;QACX,CAAC,CAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAyB,CAAC;AAC3D,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CACpB,IAAmC,EACnC,KAAoC,EACL,EAAE;IACjC,MAAM,MAAM,GAAG;QACb,GAAG,IAAI;QACP,GAAG,KAAK;KACT,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAyB,EAAsB,EAAE,CACrE,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAErE,MAAM,mBAAmB,GAAG,CAAC,SAA6B,EAAU,EAAE,CACpE,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC;IACrD,CAAC,CAAC,CAAC;IACH,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAAyB,EACzB,SAAkB,EACE,EAAE;IACtB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAEnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAEpD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC;AAC9C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,OAAsC,EACP,EAAE;IACjC,MAAM,IAAI,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEzE,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,GAA8D,EAC1C,EAAE,CACtB,GAAG,EAAE,OAAO,KAAK,SAAS;IACxB,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAExD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,OAAoE,EAChD,EAAE,CACtB,OAAO,EAAE,OAAO,KAAK,SAAS;IAC5B,CAAC,CAAC,SAAS;IACX,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,KAI1C,EAAmC,EAAE;IACpC,MAAM,EAAE,mBAAmB,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,GAAG,EAAE,QAAQ,IAAI,OAAO,EAAE,QAAQ,EAClC,mBAAmB,CACpB,CAAC;IACF,MAAM,SAAS,GAAG,gBAAgB,CAChC,GAAG,EAAE,SAAS,IAAI,OAAO,EAAE,SAAS,EACpC,mBAAmB,CACpB,CAAC;IAEF,OAAO,0BAA0B,CAAC;QAChC,EAAE,EAAE,OAAO,EAAE,EAAE;QACf,SAAS,EAAE,OAAO,EAAE,SAAS;QAC7B,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO;QACzC,MAAM,EAAE,GAAG,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM;QACtC,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,OAAO,EAAE,IAAI;QAChC,QAAQ;QACR,SAAS;KACV,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,IAAqC,EACrC,QAAyC,EACR,EAAE;IACnC,MAAM,MAAM,GAAG;QACb,GAAG,IAAI;QACP,GAAG,QAAQ;KACZ,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,GAAkC,EACH,EAAE;IACjC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,eAAe,CAAC;QACrB,YAAY,EAAE,GAAG,CAAC,SAAS;QAC3B,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,UAAU,EAAE,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CACtB,KAAyB,EACzB,QAAgB,EACR,EAAE;IACV,MAAM,UAAU,GAAG,KAAK;QACtB,EAAE,IAAI,EAAE;SACP,WAAW,EAAE;SACb,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC;SACjC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,KAA6B,EACrB,EAAE,CACV;IACE,eAAe,CAAC,KAAK,CAAC,eAAe,EAAE,YAAY,CAAC;IACpD,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACnD,eAAe,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,CAAC;IAC7C,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAC/C,KAAK,CAAC,WAAW,IAAI,gBAAgB;IACrC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,oBAAoB,CAAC;CACzD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEd,MAAM,CAAC,MAAM,uBAAuB,GAClC,CAAC,YAGA,EAAuB,EAAE,CAC1B,CAAC,KAAK,EAAE,EAAE,CACR,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC;IAC7B,GAAG,EAAE,YAAY,CAAC,GAAG;IACrB,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE;CAC1C,CAAC,CAAC;AAEP,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,KAEqB,EACuB,EAAE,CAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpB,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,KAAK,CAAC,GAAG;IACd,IAAI,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE;CAC1C,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAGxC,EAAkC,EAAE,CACnC,KAAK,CAAC,QAAQ,CAAC;IACb,SAAS,EAAE,aAAa;IACxB,KAAK,EAAE,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC;CACpD,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAsB,EAAE;IAC1D,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IAEnD,OAAO,UAAU,CAAC,EAAE,CAAC;QACnB,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjD,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAClB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAC/B,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,aAAa,GAAG,GAAiB,EAAE,CAC9C,KAAK,CAAC,EAAE,CAAC;IACP,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;CACjC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;AAEnE,MAAM,eAAe,GAAG,CACtB,OAAe,EACf,KAAe,EACW,EAAE,CAAC,IAAI,wBAAwB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;AAEhF,MAAM,WAAW,GAAG,CAClB,YAA2C,EAC3C,KAA0B,EAC1B,GAAe,EACyD,EAAE;IAC1E,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,YAAY,CAAC;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC;IAC3D,MAAM,EAAE,EAAE,EAAE,GAAG,KAAK,CAAC;IAErB,IAAI,EAAE,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC;IAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACjC,MAAM,QAAQ,GACZ,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;YACnD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO;iBACX,QAAQ,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;iBACjD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAC9D,CACF,CAAC;QACV,MAAM,MAAM,GACV,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;YAC3C,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK;iBACT,GAAG,CAAC,QAAQ,CAAC;iBACb,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAC3D,CACF,CAAC;QAEV,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACnE,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK;aACrB,MAAM,CAAC;YACN,EAAE;YACF,OAAO;SACR,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAC9C,CACF,CAAC;QAEJ,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAClD,MAAM,SAAS,GAAG,OAAO,CAAC,cAAc,IAAI,qBAAqB,CAAC;YAElE,KAAK,CAAC,CAAC,KAAK;iBACT,GAAG,CAAC,QAAQ,EAAE;gBACb,KAAK,EAAE,GAAG;gBACV,SAAS,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;aAChE,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAC5D,CACF,CAAC;QACN,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,OAAO,WAAW,KAAK,MAAM;QAC3B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,YAAY,GAAkC,EAAE,EACtB,EAAE,CAC5B,iBAAiB,CAAC,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC1D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC;QAC3C,MAAM,GAAG,GACP,KAAK,CAAC,OAAO,KAAK,SAAS;YACzB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,0BAA0B,CAAC;YACzC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG;YACH,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;SACjD,CAAC,CAAC;QACH,MAAM,SAAS,GACb,KAAK,CAAC,SAAS;YACf,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;gBACtE,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,CAAC,CAAC,wBAAwB,CAAC;oBAC9B,WAAW,EAAE,KAAK,CAAC,iBAAiB;oBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,eAAe,CAAC,gCAAgC,EAAE,KAAK,CAAC,CACzD,CACF,CAAC,CAAC;QACT,MAAM,WAAW,GACf,KAAK,CAAC,WAAW;YACjB,kBAAkB,CAAC,GAAG,CAAC;YACvB,6BAA6B,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAErE,OAAO;YACL,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YACrD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;SACF,CAAC;IACxC,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAkC,EAAE,EAAE,CAC1E,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC7B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAE3D,OAAO,qBAAqB,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,KAA+B,EAK/B,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC"}

package/dist/MagicLink.d.ts

@@ -7,13 +7,15 @@ import { Crypto } from "./Crypto.js";
 import type { CryptoService } from "./Crypto.js";
 import type { ChallengeId, UnixMillis } from "./Identifiers.js";
 import { Email } from "./Identifiers.js";
+import type { LoginIdentityInput, IdentityKindRegistryService } from "./Identity.js";
+import { IdentityKindRegistry } from "./Identity.js";
 import type { LoginRequestContext } from "./LoginRisk.js";
 import { AuthMailer } from "./Mailer.js";
 import type { AuthMailerService } from "./Mailer.js";
-import { UserStore } from "./Storage.js";
-import type { UserStoreService } from "./Storage.js";
+import { IdentityStore, RegistrationStore, UserStore } from "./Storage.js";
+import type { IdentityStoreService, RegistrationStoreService, UserStoreService } from "./Storage.js";
 export interface MagicLinkStartInput {
-    readonly email: Email;
+    readonly identity: LoginIdentityInput;
     readonly secret?: Redacted.Redacted<string>;
     readonly ttl?: Duration.Duration;
     readonly locale?: string;
@@ -60,9 +62,6 @@ export interface MagicLinkLoginService {
 declare const MagicLinkLogin_base: Context.ServiceClass<MagicLinkLogin, "auth/login/MagicLink", MagicLinkLoginService>;
 export declare class MagicLinkLogin extends MagicLinkLogin_base {
 }
-export declare namespace MagicLinkLogin {
-    const make: (service: MagicLinkLoginService) => MagicLinkLoginService;
-}
 export interface MagicLinkOptions {
     readonly ttl?: Duration.Duration;
     readonly secretBytes?: number;
@@ -72,6 +71,9 @@ export interface MagicLinkOptions {
 export interface MagicLinkDependencies extends MagicLinkOptions {
     readonly challenge: ChallengeService;
     readonly users: UserStoreService;
+    readonly identities: IdentityStoreService;
+    readonly registration: RegistrationStoreService;
+    readonly identityKinds: IdentityKindRegistryService;
     readonly crypto: CryptoService;
     readonly authFlow: AuthFlowService;
     readonly authMailer: AuthMailerService;
@@ -79,7 +81,6 @@ export interface MagicLinkDependencies extends MagicLinkOptions {
 export declare const defaultMagicLinkTtl: Duration.Duration;
 export declare const defaultMagicLinkSecretBytes = 32;
 export declare const makeMagicLinkLogin: (dependencies: MagicLinkDependencies) => MagicLinkLoginService;
-export declare const MagicLinkLoginLive: (options: MagicLinkOptions) => Layer.Layer<MagicLinkLogin, never, AuthFlow | AuthMailer | Challenge | Crypto | UserStore>;
-export declare const MagicLinkFeatureLive: (options: MagicLinkOptions) => Layer.Layer<MagicLinkLogin, never, AuthFlow | AuthMailer | Challenge | Crypto | UserStore>;
+export declare const MagicLinkLoginLive: (options: MagicLinkOptions) => Layer.Layer<MagicLinkLogin, never, AuthFlow | AuthMailer | Challenge | Crypto | IdentityKindRegistry | IdentityStore | RegistrationStore | UserStore>;
 export {};
 //# sourceMappingURL=MagicLink.d.ts.map

package/dist/MagicLink.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MagicLink.d.ts","sourceRoot":"","sources":["../src/MagicLink.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAU,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAElF,OAAO,EAAE,QAAQ,EAAc,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EACV,2BAA2B,EAC3B,eAAe,EACf,YAAY,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,KAAK,EAAU,MAAM,kBAAkB,CAAC;AAEjD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,KAAK,EAAW,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAE9D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;CACxC;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IACzD,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;;;;AAED,qBAAa,mBAAoB,SAAQ,yBAEvC;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;;;;AAEL,qBAAa,oBAAqB,SAAQ,0BAExC;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,MAAM,cAAc,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AAExE,MAAM,MAAM,qBAAqB,GAC7B,2BAA2B,CAAC,YAAY,CAAC,GACzC,YAAY,CAAC,oBAAoB,GAAG,iBAAiB,CAAC,CAAC;AAE3D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,CACd,KAAK,EAAE,mBAAmB,KACvB,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IAC1D,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,oBAAoB,KACxB,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;CACjE;;AAED,qBAAa,cAAe,SAAQ,mBAGT;CAAG;AAE9B,yBAAiB,cAAc,CAAC;IACvB,MAAM,IAAI,YAAa,qBAAqB,KAAG,qBAC1B,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,MAAM,CAAC;CACxD;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;CACxC;AAMD,eAAO,MAAM,mBAAmB,mBAAuB,CAAC;AACxD,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAwJ9C,eAAO,MAAM,kBAAkB,iBACf,qBAAqB,KAClC,qBAwIF,CAAC;AAEF,eAAO,MAAM,kBAAkB,YAAa,gBAAgB,+FAkBzD,CAAC;AAEJ,eAAO,MAAM,oBAAoB,YApBW,gBAAgB,+FAoBN,CAAC"}
+{"version":3,"file":"MagicLink.d.ts","sourceRoot":"","sources":["../src/MagicLink.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EAEP,QAAQ,EACR,MAAM,EACN,KAAK,EAEL,QAAQ,EACT,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAAE,QAAQ,EAAc,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EACV,2BAA2B,EAC3B,eAAe,EACf,YAAY,EACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAKjD,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,KAAK,EACV,kBAAkB,EAClB,2BAA2B,EAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAErD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,KAAK,EACV,oBAAoB,EACpB,wBAAwB,EACxB,gBAAgB,EACjB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;CACxC;AAED,MAAM,WAAW,iBAAkB,SAAQ,gBAAgB;IACzD,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;;;;AAED,qBAAa,mBAAoB,SAAQ,yBAEvC;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;;;;AAEL,qBAAa,oBAAqB,SAAQ,0BAExC;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,MAAM,cAAc,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AAExE,MAAM,MAAM,qBAAqB,GAC7B,2BAA2B,CAAC,YAAY,CAAC,GACzC,YAAY,CAAC,oBAAoB,GAAG,iBAAiB,CAAC,CAAC;AAE3D,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,CACd,KAAK,EAAE,mBAAmB,KACvB,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IAC1D,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,oBAAoB,KACxB,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;CACjE;;AAED,qBAAa,cAAe,SAAQ,mBAGT;CAAG;AAE9B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,MAAM,CAAC;CACxD;AAED,MAAM,WAAW,qBAAsB,SAAQ,gBAAgB;IAC7D,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAC;IAC1C,QAAQ,CAAC,YAAY,EAAE,wBAAwB,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;CACxC;AAED,eAAO,MAAM,mBAAmB,mBAAuB,CAAC;AACxD,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAgD9C,eAAO,MAAM,kBAAkB,iBACf,qBAAqB,KAClC,qBAqKF,CAAC;AAEF,eAAO,MAAM,kBAAkB,YAAa,gBAAgB,0JAwBzD,CAAC"}