@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +308 -133
- package/dist/AbuseProtection.d.ts +100 -0
- package/dist/AbuseProtection.d.ts.map +1 -0
- package/dist/AbuseProtection.js +71 -0
- package/dist/AbuseProtection.js.map +1 -0
- package/dist/AccessGrant.d.ts +344 -0
- package/dist/AccessGrant.d.ts.map +1 -0
- package/dist/AccessGrant.js +687 -0
- package/dist/AccessGrant.js.map +1 -0
- package/dist/ApiKey.d.ts +0 -12
- package/dist/ApiKey.d.ts.map +1 -1
- package/dist/ApiKey.js +36 -27
- package/dist/ApiKey.js.map +1 -1
- package/dist/Assurance.d.ts +415 -0
- package/dist/Assurance.d.ts.map +1 -0
- package/dist/Assurance.js +764 -0
- package/dist/Assurance.js.map +1 -0
- package/dist/AtomicPlanExecutor.d.ts +28 -0
- package/dist/AtomicPlanExecutor.d.ts.map +1 -0
- package/dist/AtomicPlanExecutor.js +5 -0
- package/dist/AtomicPlanExecutor.js.map +1 -0
- package/dist/AuditLog.d.ts +2314 -52
- package/dist/AuditLog.d.ts.map +1 -1
- package/dist/AuditLog.js +511 -33
- package/dist/AuditLog.js.map +1 -1
- package/dist/AuthFlow.d.ts +128 -38
- package/dist/AuthFlow.d.ts.map +1 -1
- package/dist/AuthFlow.js +611 -263
- package/dist/AuthFlow.js.map +1 -1
- package/dist/AuthRateLimit.d.ts +96 -0
- package/dist/AuthRateLimit.d.ts.map +1 -0
- package/dist/AuthRateLimit.js +212 -0
- package/dist/AuthRateLimit.js.map +1 -0
- package/dist/Challenge.d.ts +0 -3
- package/dist/Challenge.d.ts.map +1 -1
- package/dist/Challenge.js +1 -4
- package/dist/Challenge.js.map +1 -1
- package/dist/Client.d.ts +205 -10
- package/dist/Client.d.ts.map +1 -1
- package/dist/Client.js +397 -16
- package/dist/Client.js.map +1 -1
- package/dist/CloudflareTurnstile.d.ts +28 -0
- package/dist/CloudflareTurnstile.d.ts.map +1 -0
- package/dist/CloudflareTurnstile.js +205 -0
- package/dist/CloudflareTurnstile.js.map +1 -0
- package/dist/Crypto.d.ts +0 -3
- package/dist/Crypto.d.ts.map +1 -1
- package/dist/Crypto.js +1 -4
- package/dist/Crypto.js.map +1 -1
- package/dist/DelegatedAccessStorageMigrations.d.ts +7 -0
- package/dist/DelegatedAccessStorageMigrations.d.ts.map +1 -0
- package/dist/DelegatedAccessStorageMigrations.js +159 -0
- package/dist/DelegatedAccessStorageMigrations.js.map +1 -0
- package/dist/DisposableEmailDomains.d.ts +19 -0
- package/dist/DisposableEmailDomains.d.ts.map +1 -0
- package/dist/DisposableEmailDomains.js +85 -0
- package/dist/DisposableEmailDomains.js.map +1 -0
- package/dist/DomainVerification.d.ts +0 -9
- package/dist/DomainVerification.d.ts.map +1 -1
- package/dist/DomainVerification.js +36 -22
- package/dist/DomainVerification.js.map +1 -1
- package/dist/DrizzleBunSqliteStorage.d.ts +18 -0
- package/dist/DrizzleBunSqliteStorage.d.ts.map +1 -0
- package/dist/DrizzleBunSqliteStorage.js +11 -0
- package/dist/DrizzleBunSqliteStorage.js.map +1 -0
- package/dist/DrizzleD1SqliteStorage.d.ts +4 -4
- package/dist/DrizzleD1SqliteStorage.d.ts.map +1 -1
- package/dist/DrizzleD1SqliteStorage.js +5 -5
- package/dist/DrizzleD1SqliteStorage.js.map +1 -1
- package/dist/DrizzleDurableObjectSqliteStorage.d.ts +19 -0
- package/dist/DrizzleDurableObjectSqliteStorage.d.ts.map +1 -0
- package/dist/DrizzleDurableObjectSqliteStorage.js +14 -0
- package/dist/DrizzleDurableObjectSqliteStorage.js.map +1 -0
- package/dist/DrizzleEffectSqliteStorage.d.ts +13 -4
- package/dist/DrizzleEffectSqliteStorage.d.ts.map +1 -1
- package/dist/DrizzleEffectSqliteStorage.js +71 -4
- package/dist/DrizzleEffectSqliteStorage.js.map +1 -1
- package/dist/DrizzleNodeSqliteStorage.d.ts +18 -0
- package/dist/DrizzleNodeSqliteStorage.d.ts.map +1 -0
- package/dist/DrizzleNodeSqliteStorage.js +11 -0
- package/dist/DrizzleNodeSqliteStorage.js.map +1 -0
- package/dist/DrizzleWasmSqliteStorage.d.ts +23 -0
- package/dist/DrizzleWasmSqliteStorage.d.ts.map +1 -0
- package/dist/DrizzleWasmSqliteStorage.js +15 -0
- package/dist/DrizzleWasmSqliteStorage.js.map +1 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts +34 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts.map +1 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.js +499 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.js.map +1 -0
- package/dist/EffectQbPostgresStorage.d.ts +171 -0
- package/dist/EffectQbPostgresStorage.d.ts.map +1 -0
- package/dist/EffectQbPostgresStorage.js +4280 -0
- package/dist/EffectQbPostgresStorage.js.map +1 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts +112 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts.map +1 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.js +602 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.js.map +1 -0
- package/dist/EffectQbSqliteStorage.d.ts +181 -23
- package/dist/EffectQbSqliteStorage.d.ts.map +1 -1
- package/dist/EffectQbSqliteStorage.js +1728 -135
- package/dist/EffectQbSqliteStorage.js.map +1 -1
- package/dist/EmailAuth.d.ts +65 -0
- package/dist/EmailAuth.d.ts.map +1 -0
- package/dist/EmailAuth.js +171 -0
- package/dist/EmailAuth.js.map +1 -0
- package/dist/EmailIdentityAuth.d.ts +30 -0
- package/dist/EmailIdentityAuth.d.ts.map +1 -0
- package/dist/EmailIdentityAuth.js +142 -0
- package/dist/EmailIdentityAuth.js.map +1 -0
- package/dist/EmailOtp.d.ts +10 -11
- package/dist/EmailOtp.d.ts.map +1 -1
- package/dist/EmailOtp.js +44 -81
- package/dist/EmailOtp.js.map +1 -1
- package/dist/EmailRisk.d.ts +48 -0
- package/dist/EmailRisk.d.ts.map +1 -0
- package/dist/EmailRisk.js +33 -0
- package/dist/EmailRisk.js.map +1 -0
- package/dist/EmailVerification.d.ts +10 -16
- package/dist/EmailVerification.d.ts.map +1 -1
- package/dist/EmailVerification.js +85 -42
- package/dist/EmailVerification.js.map +1 -1
- package/dist/Guard.d.ts +11 -0
- package/dist/Guard.d.ts.map +1 -0
- package/dist/Guard.js +11 -0
- package/dist/Guard.js.map +1 -0
- package/dist/HibpPwnedPasswords.d.ts +56 -0
- package/dist/HibpPwnedPasswords.d.ts.map +1 -0
- package/dist/HibpPwnedPasswords.js +232 -0
- package/dist/HibpPwnedPasswords.js.map +1 -0
- package/dist/HttpApi/AdminPermissionDefinition.d.ts +4 -0
- package/dist/HttpApi/AdminPermissionDefinition.d.ts.map +1 -0
- package/dist/HttpApi/AdminPermissionDefinition.js +4 -0
- package/dist/HttpApi/AdminPermissionDefinition.js.map +1 -0
- package/dist/HttpApi/AdminSecurityTimeline.d.ts +4 -0
- package/dist/HttpApi/AdminSecurityTimeline.d.ts.map +1 -0
- package/dist/HttpApi/AdminSecurityTimeline.js +4 -0
- package/dist/HttpApi/AdminSecurityTimeline.js.map +1 -0
- package/dist/HttpApi/AdminSession.d.ts +4 -0
- package/dist/HttpApi/AdminSession.d.ts.map +1 -0
- package/dist/HttpApi/AdminSession.js +4 -0
- package/dist/HttpApi/AdminSession.js.map +1 -0
- package/dist/HttpApi/AdminTrustedDevice.d.ts +4 -0
- package/dist/HttpApi/AdminTrustedDevice.d.ts.map +1 -0
- package/dist/HttpApi/AdminTrustedDevice.js +4 -0
- package/dist/HttpApi/AdminTrustedDevice.js.map +1 -0
- package/dist/HttpApi/Api.d.ts +879 -877
- package/dist/HttpApi/Api.d.ts.map +1 -1
- package/dist/HttpApi/Api.js +2160 -896
- package/dist/HttpApi/Api.js.map +1 -1
- package/dist/HttpApi/ApiKey.d.ts +4 -0
- package/dist/HttpApi/ApiKey.d.ts.map +1 -0
- package/dist/HttpApi/ApiKey.js +4 -0
- package/dist/HttpApi/ApiKey.js.map +1 -0
- package/dist/HttpApi/Audit.d.ts +6 -0
- package/dist/HttpApi/Audit.d.ts.map +1 -0
- package/dist/HttpApi/Audit.js +10 -0
- package/dist/HttpApi/Audit.js.map +1 -0
- package/dist/HttpApi/ClientApi.d.ts +917 -0
- package/dist/HttpApi/ClientApi.d.ts.map +1 -0
- package/dist/HttpApi/ClientApi.js +101 -0
- package/dist/HttpApi/ClientApi.js.map +1 -0
- package/dist/HttpApi/EmailAuth.d.ts +6 -0
- package/dist/HttpApi/EmailAuth.d.ts.map +1 -0
- package/dist/HttpApi/EmailAuth.js +6 -0
- package/dist/HttpApi/EmailAuth.js.map +1 -0
- package/dist/HttpApi/EmailGuards.d.ts +115 -0
- package/dist/HttpApi/EmailGuards.d.ts.map +1 -0
- package/dist/HttpApi/EmailGuards.js +191 -0
- package/dist/HttpApi/EmailGuards.js.map +1 -0
- package/dist/HttpApi/EmailOtp.d.ts +6 -0
- package/dist/HttpApi/EmailOtp.d.ts.map +1 -0
- package/dist/HttpApi/EmailOtp.js +6 -0
- package/dist/HttpApi/EmailOtp.js.map +1 -0
- package/dist/HttpApi/EmailVerification.d.ts +6 -0
- package/dist/HttpApi/EmailVerification.d.ts.map +1 -0
- package/dist/HttpApi/EmailVerification.js +6 -0
- package/dist/HttpApi/EmailVerification.js.map +1 -0
- package/dist/HttpApi/Endpoints.d.ts +629 -301
- package/dist/HttpApi/Endpoints.d.ts.map +1 -1
- package/dist/HttpApi/Endpoints.js +178 -120
- package/dist/HttpApi/Endpoints.js.map +1 -1
- package/dist/HttpApi/Errors.d.ts +26 -7
- package/dist/HttpApi/Errors.d.ts.map +1 -1
- package/dist/HttpApi/Errors.js +26 -4
- package/dist/HttpApi/Errors.js.map +1 -1
- package/dist/HttpApi/Identity.d.ts +6 -0
- package/dist/HttpApi/Identity.d.ts.map +1 -0
- package/dist/HttpApi/Identity.js +6 -0
- package/dist/HttpApi/Identity.js.map +1 -0
- package/dist/HttpApi/IdentityGuards.d.ts +31 -0
- package/dist/HttpApi/IdentityGuards.d.ts.map +1 -0
- package/dist/HttpApi/IdentityGuards.js +33 -0
- package/dist/HttpApi/IdentityGuards.js.map +1 -0
- package/dist/HttpApi/Jwt.d.ts +4 -0
- package/dist/HttpApi/Jwt.d.ts.map +1 -0
- package/dist/HttpApi/Jwt.js +4 -0
- package/dist/HttpApi/Jwt.js.map +1 -0
- package/dist/HttpApi/JwtDiscovery.d.ts +4 -0
- package/dist/HttpApi/JwtDiscovery.d.ts.map +1 -0
- package/dist/HttpApi/JwtDiscovery.js +4 -0
- package/dist/HttpApi/JwtDiscovery.js.map +1 -0
- package/dist/HttpApi/LoginApproval.d.ts +5 -0
- package/dist/HttpApi/LoginApproval.d.ts.map +1 -0
- package/dist/HttpApi/LoginApproval.js +5 -0
- package/dist/HttpApi/LoginApproval.js.map +1 -0
- package/dist/HttpApi/LoginNotification.d.ts +5 -0
- package/dist/HttpApi/LoginNotification.d.ts.map +1 -0
- package/dist/HttpApi/LoginNotification.js +5 -0
- package/dist/HttpApi/LoginNotification.js.map +1 -0
- package/dist/HttpApi/MagicLink.d.ts +6 -0
- package/dist/HttpApi/MagicLink.d.ts.map +1 -0
- package/dist/HttpApi/MagicLink.js +6 -0
- package/dist/HttpApi/MagicLink.js.map +1 -0
- package/dist/HttpApi/Mfa.d.ts +5 -0
- package/dist/HttpApi/Mfa.d.ts.map +1 -0
- package/dist/HttpApi/Mfa.js +5 -0
- package/dist/HttpApi/Mfa.js.map +1 -0
- package/dist/HttpApi/Middleware.d.ts +14 -0
- package/dist/HttpApi/Middleware.d.ts.map +1 -0
- package/dist/HttpApi/Middleware.js +5 -0
- package/dist/HttpApi/Middleware.js.map +1 -0
- package/dist/HttpApi/OAuth.d.ts +4 -0
- package/dist/HttpApi/OAuth.d.ts.map +1 -0
- package/dist/HttpApi/OAuth.js +4 -0
- package/dist/HttpApi/OAuth.js.map +1 -0
- package/dist/HttpApi/OAuthProviderAuthorization.d.ts +4 -0
- package/dist/HttpApi/OAuthProviderAuthorization.d.ts.map +1 -0
- package/dist/HttpApi/OAuthProviderAuthorization.js +4 -0
- package/dist/HttpApi/OAuthProviderAuthorization.js.map +1 -0
- package/dist/HttpApi/OAuthToken.d.ts +4 -0
- package/dist/HttpApi/OAuthToken.d.ts.map +1 -0
- package/dist/HttpApi/OAuthToken.js +4 -0
- package/dist/HttpApi/OAuthToken.js.map +1 -0
- package/dist/HttpApi/OidcDiscovery.d.ts +4 -0
- package/dist/HttpApi/OidcDiscovery.d.ts.map +1 -0
- package/dist/HttpApi/OidcDiscovery.js +4 -0
- package/dist/HttpApi/OidcDiscovery.js.map +1 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts +28 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts.map +1 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.js +5 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.js.map +1 -0
- package/dist/HttpApi/Operations/AdminSession.d.ts +16 -0
- package/dist/HttpApi/Operations/AdminSession.d.ts.map +1 -0
- package/dist/HttpApi/Operations/AdminSession.js +5 -0
- package/dist/HttpApi/Operations/AdminSession.js.map +1 -0
- package/dist/HttpApi/Operations/ApiKey.d.ts +16 -0
- package/dist/HttpApi/Operations/ApiKey.d.ts.map +1 -0
- package/dist/HttpApi/Operations/ApiKey.js +5 -0
- package/dist/HttpApi/Operations/ApiKey.js.map +1 -0
- package/dist/HttpApi/Operations/Discovery.d.ts +19 -0
- package/dist/HttpApi/Operations/Discovery.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Discovery.js +7 -0
- package/dist/HttpApi/Operations/Discovery.js.map +1 -0
- package/dist/HttpApi/Operations/EmailAuth.d.ts +12 -0
- package/dist/HttpApi/Operations/EmailAuth.d.ts.map +1 -0
- package/dist/HttpApi/Operations/EmailAuth.js +5 -0
- package/dist/HttpApi/Operations/EmailAuth.js.map +1 -0
- package/dist/HttpApi/Operations/EmailOtp.d.ts +14 -0
- package/dist/HttpApi/Operations/EmailOtp.d.ts.map +1 -0
- package/dist/HttpApi/Operations/EmailOtp.js +5 -0
- package/dist/HttpApi/Operations/EmailOtp.js.map +1 -0
- package/dist/HttpApi/Operations/EmailVerification.d.ts +14 -0
- package/dist/HttpApi/Operations/EmailVerification.d.ts.map +1 -0
- package/dist/HttpApi/Operations/EmailVerification.js +5 -0
- package/dist/HttpApi/Operations/EmailVerification.js.map +1 -0
- package/dist/HttpApi/Operations/HttpOperation.d.ts +4 -0
- package/dist/HttpApi/Operations/HttpOperation.d.ts.map +1 -0
- package/dist/HttpApi/Operations/HttpOperation.js +2 -0
- package/dist/HttpApi/Operations/HttpOperation.js.map +1 -0
- package/dist/HttpApi/Operations/Identity.d.ts +22 -0
- package/dist/HttpApi/Operations/Identity.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Identity.js +5 -0
- package/dist/HttpApi/Operations/Identity.js.map +1 -0
- package/dist/HttpApi/Operations/Jwt.d.ts +14 -0
- package/dist/HttpApi/Operations/Jwt.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Jwt.js +5 -0
- package/dist/HttpApi/Operations/Jwt.js.map +1 -0
- package/dist/HttpApi/Operations/LoginApproval.d.ts +16 -0
- package/dist/HttpApi/Operations/LoginApproval.d.ts.map +1 -0
- package/dist/HttpApi/Operations/LoginApproval.js +5 -0
- package/dist/HttpApi/Operations/LoginApproval.js.map +1 -0
- package/dist/HttpApi/Operations/MagicLink.d.ts +14 -0
- package/dist/HttpApi/Operations/MagicLink.d.ts.map +1 -0
- package/dist/HttpApi/Operations/MagicLink.js +5 -0
- package/dist/HttpApi/Operations/MagicLink.js.map +1 -0
- package/dist/HttpApi/Operations/Mfa.d.ts +24 -0
- package/dist/HttpApi/Operations/Mfa.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Mfa.js +5 -0
- package/dist/HttpApi/Operations/Mfa.js.map +1 -0
- package/dist/HttpApi/Operations/OAuth.d.ts +20 -0
- package/dist/HttpApi/Operations/OAuth.d.ts.map +1 -0
- package/dist/HttpApi/Operations/OAuth.js +5 -0
- package/dist/HttpApi/Operations/OAuth.js.map +1 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts +12 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts.map +1 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.js +5 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.js.map +1 -0
- package/dist/HttpApi/Operations/OAuthToken.d.ts +16 -0
- package/dist/HttpApi/Operations/OAuthToken.d.ts.map +1 -0
- package/dist/HttpApi/Operations/OAuthToken.js +5 -0
- package/dist/HttpApi/Operations/OAuthToken.js.map +1 -0
- package/dist/HttpApi/Operations/Passkey.d.ts +22 -0
- package/dist/HttpApi/Operations/Passkey.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Passkey.js +5 -0
- package/dist/HttpApi/Operations/Passkey.js.map +1 -0
- package/dist/HttpApi/Operations/Password.d.ts +22 -0
- package/dist/HttpApi/Operations/Password.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Password.js +5 -0
- package/dist/HttpApi/Operations/Password.js.map +1 -0
- package/dist/HttpApi/Operations/RecoveryCodes.d.ts +20 -0
- package/dist/HttpApi/Operations/RecoveryCodes.d.ts.map +1 -0
- package/dist/HttpApi/Operations/RecoveryCodes.js +5 -0
- package/dist/HttpApi/Operations/RecoveryCodes.js.map +1 -0
- package/dist/HttpApi/Operations/RefreshToken.d.ts +12 -0
- package/dist/HttpApi/Operations/RefreshToken.d.ts.map +1 -0
- package/dist/HttpApi/Operations/RefreshToken.js +5 -0
- package/dist/HttpApi/Operations/RefreshToken.js.map +1 -0
- package/dist/HttpApi/Operations/Security.d.ts +12 -0
- package/dist/HttpApi/Operations/Security.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Security.js +5 -0
- package/dist/HttpApi/Operations/Security.js.map +1 -0
- package/dist/HttpApi/Operations/SecurityTimeline.d.ts +19 -0
- package/dist/HttpApi/Operations/SecurityTimeline.d.ts.map +1 -0
- package/dist/HttpApi/Operations/SecurityTimeline.js +7 -0
- package/dist/HttpApi/Operations/SecurityTimeline.js.map +1 -0
- package/dist/HttpApi/Operations/Session.d.ts +22 -0
- package/dist/HttpApi/Operations/Session.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Session.js +5 -0
- package/dist/HttpApi/Operations/Session.js.map +1 -0
- package/dist/HttpApi/Operations/StepUp.d.ts +22 -0
- package/dist/HttpApi/Operations/StepUp.d.ts.map +1 -0
- package/dist/HttpApi/Operations/StepUp.js +5 -0
- package/dist/HttpApi/Operations/StepUp.js.map +1 -0
- package/dist/HttpApi/Operations/Totp.d.ts +20 -0
- package/dist/HttpApi/Operations/Totp.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Totp.js +5 -0
- package/dist/HttpApi/Operations/Totp.js.map +1 -0
- package/dist/HttpApi/Operations/TrustedDevice.d.ts +23 -0
- package/dist/HttpApi/Operations/TrustedDevice.d.ts.map +1 -0
- package/dist/HttpApi/Operations/TrustedDevice.js +7 -0
- package/dist/HttpApi/Operations/TrustedDevice.js.map +1 -0
- package/dist/HttpApi/Operations/index.d.ts +27 -0
- package/dist/HttpApi/Operations/index.d.ts.map +1 -0
- package/dist/HttpApi/Operations/index.js +27 -0
- package/dist/HttpApi/Operations/index.js.map +1 -0
- package/dist/HttpApi/Passkey.d.ts +5 -0
- package/dist/HttpApi/Passkey.d.ts.map +1 -0
- package/dist/HttpApi/Passkey.js +5 -0
- package/dist/HttpApi/Passkey.js.map +1 -0
- package/dist/HttpApi/Password.d.ts +220 -0
- package/dist/HttpApi/Password.d.ts.map +1 -0
- package/dist/HttpApi/Password.js +237 -0
- package/dist/HttpApi/Password.js.map +1 -0
- package/dist/HttpApi/PasswordContract.d.ts +307 -0
- package/dist/HttpApi/PasswordContract.d.ts.map +1 -0
- package/dist/HttpApi/PasswordContract.js +63 -0
- package/dist/HttpApi/PasswordContract.js.map +1 -0
- package/dist/HttpApi/PasswordGuards.d.ts +82 -0
- package/dist/HttpApi/PasswordGuards.d.ts.map +1 -0
- package/dist/HttpApi/PasswordGuards.js +179 -0
- package/dist/HttpApi/PasswordGuards.js.map +1 -0
- package/dist/HttpApi/RecoveryCodes.d.ts +5 -0
- package/dist/HttpApi/RecoveryCodes.d.ts.map +1 -0
- package/dist/HttpApi/RecoveryCodes.js +5 -0
- package/dist/HttpApi/RecoveryCodes.js.map +1 -0
- package/dist/HttpApi/RefreshToken.d.ts +4 -0
- package/dist/HttpApi/RefreshToken.d.ts.map +1 -0
- package/dist/HttpApi/RefreshToken.js +4 -0
- package/dist/HttpApi/RefreshToken.js.map +1 -0
- package/dist/HttpApi/RequestGuards.d.ts +42 -0
- package/dist/HttpApi/RequestGuards.d.ts.map +1 -0
- package/dist/HttpApi/RequestGuards.js +194 -0
- package/dist/HttpApi/RequestGuards.js.map +1 -0
- package/dist/HttpApi/Schemas.d.ts +361 -84
- package/dist/HttpApi/Schemas.d.ts.map +1 -1
- package/dist/HttpApi/Schemas.js +190 -27
- package/dist/HttpApi/Schemas.js.map +1 -1
- package/dist/HttpApi/Security.d.ts +12 -93
- package/dist/HttpApi/Security.d.ts.map +1 -1
- package/dist/HttpApi/Security.js +65 -356
- package/dist/HttpApi/Security.js.map +1 -1
- package/dist/HttpApi/SecurityTimeline.d.ts +4 -0
- package/dist/HttpApi/SecurityTimeline.d.ts.map +1 -0
- package/dist/HttpApi/SecurityTimeline.js +4 -0
- package/dist/HttpApi/SecurityTimeline.js.map +1 -0
- package/dist/HttpApi/Session.d.ts +5 -0
- package/dist/HttpApi/Session.d.ts.map +1 -0
- package/dist/HttpApi/Session.js +5 -0
- package/dist/HttpApi/Session.js.map +1 -0
- package/dist/HttpApi/SessionGuards.d.ts +15 -0
- package/dist/HttpApi/SessionGuards.d.ts.map +1 -0
- package/dist/HttpApi/SessionGuards.js +37 -0
- package/dist/HttpApi/SessionGuards.js.map +1 -0
- package/dist/HttpApi/StepUp.d.ts +5 -0
- package/dist/HttpApi/StepUp.d.ts.map +1 -0
- package/dist/HttpApi/StepUp.js +5 -0
- package/dist/HttpApi/StepUp.js.map +1 -0
- package/dist/HttpApi/Totp.d.ts +5 -0
- package/dist/HttpApi/Totp.d.ts.map +1 -0
- package/dist/HttpApi/Totp.js +5 -0
- package/dist/HttpApi/Totp.js.map +1 -0
- package/dist/HttpApi/Transport.d.ts +4 -6
- package/dist/HttpApi/Transport.d.ts.map +1 -1
- package/dist/HttpApi/Transport.js +62 -36
- package/dist/HttpApi/Transport.js.map +1 -1
- package/dist/HttpApi/TrustedDevice.d.ts +4 -0
- package/dist/HttpApi/TrustedDevice.d.ts.map +1 -0
- package/dist/HttpApi/TrustedDevice.js +4 -0
- package/dist/HttpApi/TrustedDevice.js.map +1 -0
- package/dist/HttpApi/index.d.ts +9 -3
- package/dist/HttpApi/index.d.ts.map +1 -1
- package/dist/HttpApi/index.js +8 -2
- package/dist/HttpApi/index.js.map +1 -1
- package/dist/Identity.d.ts +138 -0
- package/dist/Identity.d.ts.map +1 -0
- package/dist/Identity.js +105 -0
- package/dist/Identity.js.map +1 -0
- package/dist/IdentityManagement.d.ts +189 -0
- package/dist/IdentityManagement.d.ts.map +1 -0
- package/dist/IdentityManagement.js +317 -0
- package/dist/IdentityManagement.js.map +1 -0
- package/dist/IncidentAction.d.ts +1 -4
- package/dist/IncidentAction.d.ts.map +1 -1
- package/dist/IncidentAction.js +15 -9
- package/dist/IncidentAction.js.map +1 -1
- package/dist/Internal.d.ts +2 -0
- package/dist/Internal.d.ts.map +1 -1
- package/dist/Internal.js +30 -0
- package/dist/Internal.js.map +1 -1
- package/dist/Invitation.d.ts +362 -0
- package/dist/Invitation.d.ts.map +1 -0
- package/dist/Invitation.js +633 -0
- package/dist/Invitation.js.map +1 -0
- package/dist/IpQualityScore.d.ts +38 -0
- package/dist/IpQualityScore.d.ts.map +1 -0
- package/dist/IpQualityScore.js +215 -0
- package/dist/IpQualityScore.js.map +1 -0
- package/dist/Jwt.d.ts +8 -29
- package/dist/Jwt.d.ts.map +1 -1
- package/dist/Jwt.js +67 -56
- package/dist/Jwt.js.map +1 -1
- package/dist/LoginApproval.d.ts +15 -30
- package/dist/LoginApproval.d.ts.map +1 -1
- package/dist/LoginApproval.js +47 -41
- package/dist/LoginApproval.js.map +1 -1
- package/dist/LoginNotification.d.ts +7 -11
- package/dist/LoginNotification.d.ts.map +1 -1
- package/dist/LoginNotification.js +30 -17
- package/dist/LoginNotification.js.map +1 -1
- package/dist/LoginRisk.d.ts +11 -13
- package/dist/LoginRisk.d.ts.map +1 -1
- package/dist/LoginRisk.js +66 -26
- package/dist/LoginRisk.js.map +1 -1
- package/dist/LoginRiskEnrichment.d.ts +145 -0
- package/dist/LoginRiskEnrichment.d.ts.map +1 -0
- package/dist/LoginRiskEnrichment.js +220 -0
- package/dist/LoginRiskEnrichment.js.map +1 -0
- package/dist/MagicLink.d.ts +9 -8
- package/dist/MagicLink.d.ts.map +1 -1
- package/dist/MagicLink.js +40 -73
- package/dist/MagicLink.js.map +1 -1
- package/dist/Mailer.d.ts +19 -12
- package/dist/Mailer.d.ts.map +1 -1
- package/dist/Mailer.js +10 -12
- package/dist/Mailer.js.map +1 -1
- package/dist/OAuth.d.ts +93 -96
- package/dist/OAuth.d.ts.map +1 -1
- package/dist/OAuth.js +404 -217
- package/dist/OAuth.js.map +1 -1
- package/dist/Passkey.d.ts +15 -17
- package/dist/Passkey.d.ts.map +1 -1
- package/dist/Passkey.js +86 -39
- package/dist/Passkey.js.map +1 -1
- package/dist/PasskeyBrowser.d.ts +39 -0
- package/dist/PasskeyBrowser.d.ts.map +1 -0
- package/dist/PasskeyBrowser.js +206 -0
- package/dist/PasskeyBrowser.js.map +1 -0
- package/dist/PasskeySimpleWebAuthn.d.ts.map +1 -1
- package/dist/PasskeySimpleWebAuthn.js +19 -7
- package/dist/PasskeySimpleWebAuthn.js.map +1 -1
- package/dist/Password.d.ts +71 -37
- package/dist/Password.d.ts.map +1 -1
- package/dist/Password.js +295 -81
- package/dist/Password.js.map +1 -1
- package/dist/PasswordRisk.d.ts +63 -0
- package/dist/PasswordRisk.d.ts.map +1 -0
- package/dist/PasswordRisk.js +37 -0
- package/dist/PasswordRisk.js.map +1 -0
- package/dist/Permission.d.ts +308 -0
- package/dist/Permission.d.ts.map +1 -0
- package/dist/Permission.js +827 -0
- package/dist/Permission.js.map +1 -0
- package/dist/Policy.d.ts +31 -18
- package/dist/Policy.d.ts.map +1 -1
- package/dist/Policy.js +58 -14
- package/dist/Policy.js.map +1 -1
- package/dist/PostgresDelegatedAccessStorageMigrations.d.ts +7 -0
- package/dist/PostgresDelegatedAccessStorageMigrations.d.ts.map +1 -0
- package/dist/PostgresDelegatedAccessStorageMigrations.js +119 -0
- package/dist/PostgresDelegatedAccessStorageMigrations.js.map +1 -0
- package/dist/PostgresStorageMigrations.d.ts +15 -0
- package/dist/PostgresStorageMigrations.d.ts.map +1 -0
- package/dist/PostgresStorageMigrations.js +620 -0
- package/dist/PostgresStorageMigrations.js.map +1 -0
- package/dist/Privacy.d.ts +0 -3
- package/dist/Privacy.d.ts.map +1 -1
- package/dist/Privacy.js +2 -5
- package/dist/Privacy.js.map +1 -1
- package/dist/RateLimiter.d.ts +0 -3
- package/dist/RateLimiter.d.ts.map +1 -1
- package/dist/RateLimiter.js +1 -4
- package/dist/RateLimiter.js.map +1 -1
- package/dist/RecoveryCode.d.ts +83 -11
- package/dist/RecoveryCode.d.ts.map +1 -1
- package/dist/RecoveryCode.js +273 -75
- package/dist/RecoveryCode.js.map +1 -1
- package/dist/RecoveryPolicy.d.ts +81 -0
- package/dist/RecoveryPolicy.d.ts.map +1 -0
- package/dist/RecoveryPolicy.js +119 -0
- package/dist/RecoveryPolicy.js.map +1 -0
- package/dist/RefreshToken.d.ts +0 -9
- package/dist/RefreshToken.d.ts.map +1 -1
- package/dist/RefreshToken.js +31 -22
- package/dist/RefreshToken.js.map +1 -1
- package/dist/SecurityTimeline.d.ts +1 -4
- package/dist/SecurityTimeline.d.ts.map +1 -1
- package/dist/SecurityTimeline.js +110 -17
- package/dist/SecurityTimeline.js.map +1 -1
- package/dist/Sessions.d.ts +124 -29
- package/dist/Sessions.d.ts.map +1 -1
- package/dist/Sessions.js +626 -94
- package/dist/Sessions.js.map +1 -1
- package/dist/StepUp.d.ts +132 -11
- package/dist/StepUp.d.ts.map +1 -1
- package/dist/StepUp.js +387 -19
- package/dist/StepUp.js.map +1 -1
- package/dist/Storage.d.ts +89 -23
- package/dist/Storage.d.ts.map +1 -1
- package/dist/Storage.js +10 -12
- package/dist/Storage.js.map +1 -1
- package/dist/StorageMigrations.d.ts +6 -1
- package/dist/StorageMigrations.d.ts.map +1 -1
- package/dist/StorageMigrations.js +224 -0
- package/dist/StorageMigrations.js.map +1 -1
- package/dist/StorageSchemaGenerator.d.ts +486 -0
- package/dist/StorageSchemaGenerator.d.ts.map +1 -0
- package/dist/StorageSchemaGenerator.js +1022 -0
- package/dist/StorageSchemaGenerator.js.map +1 -0
- package/dist/StrongFactor.d.ts +64 -0
- package/dist/StrongFactor.d.ts.map +1 -0
- package/dist/StrongFactor.js +100 -0
- package/dist/StrongFactor.js.map +1 -0
- package/dist/Testing.js +2 -2
- package/dist/Testing.js.map +1 -1
- package/dist/Totp.d.ts +88 -13
- package/dist/Totp.d.ts.map +1 -1
- package/dist/Totp.js +192 -34
- package/dist/Totp.js.map +1 -1
- package/dist/TrustedDevice.d.ts +0 -9
- package/dist/TrustedDevice.d.ts.map +1 -1
- package/dist/TrustedDevice.js +15 -17
- package/dist/TrustedDevice.js.map +1 -1
- package/dist/WaitUntil.d.ts +0 -3
- package/dist/WaitUntil.d.ts.map +1 -1
- package/dist/WaitUntil.js +1 -4
- package/dist/WaitUntil.js.map +1 -1
- package/dist/Webhook.d.ts +42 -12
- package/dist/Webhook.d.ts.map +1 -1
- package/dist/Webhook.js +165 -26
- package/dist/Webhook.js.map +1 -1
- package/dist/alchemy/cloudflare/Email.d.ts.map +1 -1
- package/dist/alchemy/cloudflare/Email.js +9 -4
- package/dist/alchemy/cloudflare/Email.js.map +1 -1
- package/dist/cloudflare/Email.js +1 -1
- package/dist/cloudflare/Email.js.map +1 -1
- package/dist/cloudflare/RequestMetadata.d.ts +49 -0
- package/dist/cloudflare/RequestMetadata.d.ts.map +1 -0
- package/dist/cloudflare/RequestMetadata.js +71 -0
- package/dist/cloudflare/RequestMetadata.js.map +1 -0
- package/dist/index.d.ts +0 -35
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +0 -35
- package/dist/index.js.map +1 -1
- package/dist/internal/AuthFlowFinalizer.d.ts +31 -0
- package/dist/internal/AuthFlowFinalizer.d.ts.map +1 -0
- package/dist/internal/AuthFlowFinalizer.js +182 -0
- package/dist/internal/AuthFlowFinalizer.js.map +1 -0
- package/migrations/0001_auth_storage.sql +1 -0
- package/migrations/0006_auth_totp_factor.sql +1 -0
- package/migrations/0024_auth_permission.sql +39 -0
- package/migrations/0025_auth_permission_definition.sql +19 -0
- package/migrations/0026_auth_user_identity.sql +59 -0
- package/migrations/0027_auth_audit_log_storage_order.sql +46 -0
- package/migrations/0028_auth_oauth_client_secret_key.sql +39 -0
- package/migrations/delegated-access/0001_auth_delegated_access.sql +152 -0
- package/migrations/postgres/0001_auth_core.sql +77 -0
- package/migrations/postgres/0002_auth_security_oauth.sql +65 -0
- package/migrations/postgres/0003_auth_credentials_tokens.sql +43 -0
- package/migrations/postgres/0004_auth_security_history.sql +103 -0
- package/migrations/postgres/0005_auth_webhooks.sql +29 -0
- package/migrations/postgres/0006_auth_domain_timeline.sql +50 -0
- package/migrations/postgres/0007_auth_oauth_clients.sql +85 -0
- package/migrations/postgres/0008_auth_oauth_tokens.sql +63 -0
- package/migrations/postgres/0009_auth_permissions.sql +66 -0
- package/migrations/postgres/delegated-access/0001_auth_delegated_access.sql +112 -0
- package/package.json +301 -2
package/dist/RecoveryCode.js
CHANGED
|
@@ -11,9 +11,6 @@ export class RecoveryCodeError extends Data.TaggedError("RecoveryCodeError") {
|
|
|
11
11
|
}
|
|
12
12
|
export class RecoveryCodes extends Context.Service()("auth/RecoveryCodes") {
|
|
13
13
|
}
|
|
14
|
-
(function (RecoveryCodes) {
|
|
15
|
-
RecoveryCodes.make = (service) => RecoveryCodes.of(service);
|
|
16
|
-
})(RecoveryCodes || (RecoveryCodes = {}));
|
|
17
14
|
const textEncoder = new TextEncoder();
|
|
18
15
|
const recoveryCodeAlphabet = "ABCDEFGHJKLMNPQRSTUVWXYZ23456789";
|
|
19
16
|
const recoveryCodeError = (operation, message, cause) => new RecoveryCodeError({
|
|
@@ -47,9 +44,7 @@ const base32Encode = (bytes) => {
|
|
|
47
44
|
}
|
|
48
45
|
return output;
|
|
49
46
|
};
|
|
50
|
-
const groupRecoveryCode = (code, groupSize) => RecoveryCode(code
|
|
51
|
-
.match(new RegExp(`.{1,${groupSize}}`, "g"))
|
|
52
|
-
?.join("-") ?? code);
|
|
47
|
+
const groupRecoveryCode = (code, groupSize) => RecoveryCode(code.match(new RegExp(`.{1,${groupSize}}`, "g"))?.join("-") ?? code);
|
|
53
48
|
const cleanRecoveryCodeValue = (code, operation) => {
|
|
54
49
|
const cleaned = code.trim().toUpperCase().replaceAll(/[\s-]/g, "");
|
|
55
50
|
if (cleaned.length === 0) {
|
|
@@ -66,7 +61,7 @@ const normalizeRecoveryCodeValue = (code, operation) => Effect.gen(function* ()
|
|
|
66
61
|
return groupRecoveryCode(cleaned, Math.min(defaultRecoveryCodeGroupSize, length));
|
|
67
62
|
});
|
|
68
63
|
const hashRecoveryCodeValue = (dependencies, code, operation) => dependencies.crypto.digestSha256({ data: `recovery-code:${code}` }).pipe(Effect.map((hash) => RecoveryCodeHash(`sha256:${hash}`)), Effect.mapError((cause) => recoveryCodeError(operation, "Failed to hash recovery code", cause)));
|
|
69
|
-
export const makeRecoveryCodes = (dependencies) => RecoveryCodes.
|
|
64
|
+
export const makeRecoveryCodes = (dependencies) => RecoveryCodes.of({
|
|
70
65
|
generate: Effect.fn("auth.recovery_code.generate")(function* (input) {
|
|
71
66
|
const count = yield* validateCount(input?.count ?? defaultRecoveryCodeCount);
|
|
72
67
|
const length = yield* validateLength(input?.length ?? defaultRecoveryCodeLength, "generate");
|
|
@@ -74,7 +69,9 @@ export const makeRecoveryCodes = (dependencies) => RecoveryCodes.make({
|
|
|
74
69
|
const bytes = Math.ceil((length * 5) / 8);
|
|
75
70
|
const codes = [];
|
|
76
71
|
for (let index = 0; index < count; index += 1) {
|
|
77
|
-
const random = yield* dependencies.crypto
|
|
72
|
+
const random = yield* dependencies.crypto
|
|
73
|
+
.randomBytes(bytes)
|
|
74
|
+
.pipe(Effect.mapError((cause) => recoveryCodeError("generate", "Failed to generate recovery code", cause)));
|
|
78
75
|
const code = base32Encode(random).slice(0, length);
|
|
79
76
|
codes.push(Redacted.make(groupRecoveryCode(code, groupSize)));
|
|
80
77
|
}
|
|
@@ -113,11 +110,133 @@ export const RecoveryCodesLive = Layer.effect(RecoveryCodes)(Effect.gen(function
|
|
|
113
110
|
}));
|
|
114
111
|
export class RecoveryCodeStoreError extends Data.TaggedError("RecoveryCodeStoreError") {
|
|
115
112
|
}
|
|
113
|
+
export class RecoveryCodeSessionRotateStoreError extends Data.TaggedError("RecoveryCodeSessionRotateStoreError") {
|
|
114
|
+
}
|
|
115
|
+
export class RecoveryCodeSessionRotateStore extends Context.Service()("auth/RecoveryCodeSessionRotateStore") {
|
|
116
|
+
}
|
|
117
|
+
export class RecoveryCodeLoginCommitStoreError extends Data.TaggedError("RecoveryCodeLoginCommitStoreError") {
|
|
118
|
+
}
|
|
119
|
+
export class RecoveryCodeLoginCommitStore extends Context.Service()("auth/RecoveryCodeLoginCommitStore") {
|
|
120
|
+
}
|
|
121
|
+
export const makeRecoveryCodeLoginCommitStoreMemory = (options = {}) => {
|
|
122
|
+
const verifications = new Map(options.verifications?.map((row) => [row.id, structuredClone(row)]));
|
|
123
|
+
const codes = new Map(options.recoveryCodes?.map((row) => [row.id, cloneRecoveryCodeRecord(row)]));
|
|
124
|
+
const sessions = new Map(options.sessions?.map((row) => [row.id, structuredClone(row)]));
|
|
125
|
+
return RecoveryCodeLoginCommitStore.of({
|
|
126
|
+
commit: (input) => Effect.try({
|
|
127
|
+
// oxlint-disable-next-line eslint/complexity -- all atomic preconditions must be checked before mutating any map.
|
|
128
|
+
try: () => {
|
|
129
|
+
const verification = verifications.get(input.verification.id);
|
|
130
|
+
const code = codes.get(input.codeId);
|
|
131
|
+
if (verification === undefined ||
|
|
132
|
+
JSON.stringify(verification) !==
|
|
133
|
+
JSON.stringify(input.verification) ||
|
|
134
|
+
verification.type !== "auth-flow-state" ||
|
|
135
|
+
verification.subject !== input.userId ||
|
|
136
|
+
verification.consumedAt !== undefined ||
|
|
137
|
+
Number(verification.expiresAt) <= Number(input.consumedAt) ||
|
|
138
|
+
code === undefined ||
|
|
139
|
+
code.userId !== input.userId ||
|
|
140
|
+
code.usedAt !== undefined ||
|
|
141
|
+
code.revokedAt !== undefined ||
|
|
142
|
+
(input.session === undefined &&
|
|
143
|
+
input.continuation !== "login-approval") ||
|
|
144
|
+
(input.session !== undefined && input.continuation !== undefined) ||
|
|
145
|
+
(input.session !== undefined &&
|
|
146
|
+
(input.session.userId !== input.userId ||
|
|
147
|
+
sessions.has(input.session.id)))) {
|
|
148
|
+
return false;
|
|
149
|
+
}
|
|
150
|
+
if (options.failBeforeCommit?.() === true) {
|
|
151
|
+
throw new Error("Injected session insert failure");
|
|
152
|
+
}
|
|
153
|
+
verifications.set(verification.id, {
|
|
154
|
+
...verification,
|
|
155
|
+
consumedAt: input.consumedAt,
|
|
156
|
+
});
|
|
157
|
+
codes.set(code.id, {
|
|
158
|
+
...code,
|
|
159
|
+
usedAt: input.usedAt,
|
|
160
|
+
...(input.codeMetadata === undefined
|
|
161
|
+
? {}
|
|
162
|
+
: { metadata: input.codeMetadata }),
|
|
163
|
+
});
|
|
164
|
+
if (input.session !== undefined) {
|
|
165
|
+
sessions.set(input.session.id, structuredClone(input.session));
|
|
166
|
+
}
|
|
167
|
+
return true;
|
|
168
|
+
},
|
|
169
|
+
catch: (cause) => new RecoveryCodeLoginCommitStoreError({
|
|
170
|
+
message: "Atomic recovery-code login commit failed",
|
|
171
|
+
cause,
|
|
172
|
+
}),
|
|
173
|
+
}),
|
|
174
|
+
});
|
|
175
|
+
};
|
|
176
|
+
/** Deterministic maintained in-memory implementation used by local runtimes and tests. */
|
|
177
|
+
export const makeRecoveryCodeSessionRotateStoreMemory = (options = {}) => {
|
|
178
|
+
const codes = new Map(options.recoveryCodes?.map((row) => [row.id, cloneRecoveryCodeRecord(row)]));
|
|
179
|
+
const sessions = new Map(options.sessions?.map((row) => [row.id, structuredClone(row)]));
|
|
180
|
+
return RecoveryCodeSessionRotateStore.of({
|
|
181
|
+
consumeAndRotate: (input) => Effect.try({
|
|
182
|
+
try: () => {
|
|
183
|
+
const code = codes.get(input.codeId);
|
|
184
|
+
const session = sessions.get(input.sessionId);
|
|
185
|
+
if (code === undefined ||
|
|
186
|
+
code.userId !== input.userId ||
|
|
187
|
+
code.usedAt !== undefined ||
|
|
188
|
+
code.revokedAt !== undefined ||
|
|
189
|
+
session === undefined ||
|
|
190
|
+
session.userId !== input.userId ||
|
|
191
|
+
session.revokedAt !== undefined ||
|
|
192
|
+
session.expiresAt <= input.now ||
|
|
193
|
+
session.secretHash !== input.expectedSecretHash ||
|
|
194
|
+
JSON.stringify(session.authenticationEvents) !==
|
|
195
|
+
JSON.stringify(input.expectedAuthenticationEvents)) {
|
|
196
|
+
return Option.none();
|
|
197
|
+
}
|
|
198
|
+
if (options.failBeforeCommit?.() === true) {
|
|
199
|
+
throw new RecoveryCodeSessionRotateStoreError({
|
|
200
|
+
message: "Injected atomic recovery failure",
|
|
201
|
+
});
|
|
202
|
+
}
|
|
203
|
+
const nextCode = {
|
|
204
|
+
...code,
|
|
205
|
+
usedAt: input.usedAt,
|
|
206
|
+
...(input.codeMetadata === undefined
|
|
207
|
+
? {}
|
|
208
|
+
: { metadata: input.codeMetadata }),
|
|
209
|
+
};
|
|
210
|
+
const nextSession = {
|
|
211
|
+
...session,
|
|
212
|
+
secretHash: input.secretHash,
|
|
213
|
+
rotatedAt: input.rotatedAt,
|
|
214
|
+
authenticationEvents: structuredClone(input.authenticationEvents),
|
|
215
|
+
authTime: input.authTime,
|
|
216
|
+
aal: input.aal,
|
|
217
|
+
amr: [...input.amr],
|
|
218
|
+
...(input.mfaVerifiedAt === undefined
|
|
219
|
+
? {}
|
|
220
|
+
: { mfaVerifiedAt: input.mfaVerifiedAt }),
|
|
221
|
+
...(input.claims === undefined
|
|
222
|
+
? {}
|
|
223
|
+
: { claims: structuredClone(input.claims) }),
|
|
224
|
+
};
|
|
225
|
+
codes.set(input.codeId, nextCode);
|
|
226
|
+
sessions.set(input.sessionId, nextSession);
|
|
227
|
+
return Option.some(structuredClone(nextSession));
|
|
228
|
+
},
|
|
229
|
+
catch: (cause) => cause instanceof RecoveryCodeSessionRotateStoreError
|
|
230
|
+
? cause
|
|
231
|
+
: new RecoveryCodeSessionRotateStoreError({
|
|
232
|
+
message: "Atomic recovery session rotation failed",
|
|
233
|
+
cause,
|
|
234
|
+
}),
|
|
235
|
+
}),
|
|
236
|
+
});
|
|
237
|
+
};
|
|
116
238
|
export class RecoveryCodeStore extends Context.Service()("auth/RecoveryCodeStore") {
|
|
117
239
|
}
|
|
118
|
-
(function (RecoveryCodeStore) {
|
|
119
|
-
RecoveryCodeStore.make = (service) => RecoveryCodeStore.of(service);
|
|
120
|
-
})(RecoveryCodeStore || (RecoveryCodeStore = {}));
|
|
121
240
|
const cloneMetadata = (metadata) => metadata === undefined ? undefined : structuredClone(metadata);
|
|
122
241
|
const cloneRecoveryCodeRecord = (record) => ({
|
|
123
242
|
...record,
|
|
@@ -127,7 +246,7 @@ const cloneRecoveryCodeRecord = (record) => ({
|
|
|
127
246
|
});
|
|
128
247
|
export const makeRecoveryCodeStoreMemory = () => {
|
|
129
248
|
const codes = new Map();
|
|
130
|
-
return RecoveryCodeStore.
|
|
249
|
+
return RecoveryCodeStore.of({
|
|
131
250
|
insertMany: (rows) => Effect.sync(() => {
|
|
132
251
|
for (const row of rows) {
|
|
133
252
|
codes.set(row.id, cloneRecoveryCodeRecord(row));
|
|
@@ -159,6 +278,24 @@ export const makeRecoveryCodeStoreMemory = () => {
|
|
|
159
278
|
codes.set(input.id, updated);
|
|
160
279
|
return Option.some(cloneRecoveryCodeRecord(updated));
|
|
161
280
|
}),
|
|
281
|
+
replaceActiveForUser: (input) => Effect.sync(() => {
|
|
282
|
+
for (const [id, row] of codes) {
|
|
283
|
+
if (row.userId === input.userId &&
|
|
284
|
+
row.usedAt === undefined &&
|
|
285
|
+
row.revokedAt === undefined) {
|
|
286
|
+
codes.set(id, {
|
|
287
|
+
...row,
|
|
288
|
+
revokedAt: input.revokedAt,
|
|
289
|
+
metadata: input.revokeReason === undefined
|
|
290
|
+
? row.metadata
|
|
291
|
+
: { ...row.metadata, revokeReason: input.revokeReason },
|
|
292
|
+
});
|
|
293
|
+
}
|
|
294
|
+
}
|
|
295
|
+
for (const row of input.rows) {
|
|
296
|
+
codes.set(row.id, cloneRecoveryCodeRecord(row));
|
|
297
|
+
}
|
|
298
|
+
}),
|
|
162
299
|
revoke: (input) => Effect.sync(() => {
|
|
163
300
|
const row = codes.get(input.id);
|
|
164
301
|
if (row !== undefined) {
|
|
@@ -178,9 +315,6 @@ export class RecoveryCodeManagementError extends Data.TaggedError("RecoveryCodeM
|
|
|
178
315
|
}
|
|
179
316
|
export class RecoveryCodeManagement extends Context.Service()("auth/RecoveryCodeManagement") {
|
|
180
317
|
}
|
|
181
|
-
(function (RecoveryCodeManagement) {
|
|
182
|
-
RecoveryCodeManagement.make = (service) => RecoveryCodeManagement.of(service);
|
|
183
|
-
})(RecoveryCodeManagement || (RecoveryCodeManagement = {}));
|
|
184
318
|
const recoveryCodeInfo = (record) => ({
|
|
185
319
|
id: record.id,
|
|
186
320
|
createdAt: record.createdAt,
|
|
@@ -195,21 +329,24 @@ const recoveryCodeManagementError = (operation, message, cause) => new RecoveryC
|
|
|
195
329
|
});
|
|
196
330
|
const makeRecoveryCodeId = (dependencies, operation) => dependencies.crypto.randomToken(dependencies.codeIdBytes ?? 16).pipe(Effect.map(CredentialId), Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to generate recovery code id", cause)));
|
|
197
331
|
const loadOwnedRecoveryCode = (dependencies, operation, input) => Effect.gen(function* () {
|
|
198
|
-
const code = yield* dependencies.codeStore
|
|
332
|
+
const code = yield* dependencies.codeStore
|
|
333
|
+
.findById(input.codeId)
|
|
334
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to load recovery code", cause)));
|
|
199
335
|
if (Option.isNone(code) || code.value.userId !== input.userId) {
|
|
200
336
|
return yield* recoveryCodeManagementError(operation, "Recovery code not found");
|
|
201
337
|
}
|
|
202
338
|
return code.value;
|
|
203
339
|
});
|
|
204
|
-
export const makeRecoveryCodeManagement = (dependencies) =>
|
|
205
|
-
|
|
206
|
-
const operation = "generate";
|
|
340
|
+
export const makeRecoveryCodeManagement = (dependencies) => {
|
|
341
|
+
const generateForUserWithOperation = (input, operation, persist = true) => Effect.gen(function* () {
|
|
207
342
|
const now = input.now ?? (yield* currentUnixMillis);
|
|
208
343
|
const codes = yield* dependencies.recoveryCodes
|
|
209
344
|
.generate({
|
|
210
345
|
...(input.count === undefined ? {} : { count: input.count }),
|
|
211
346
|
...(input.length === undefined ? {} : { length: input.length }),
|
|
212
|
-
...(input.groupSize === undefined
|
|
347
|
+
...(input.groupSize === undefined
|
|
348
|
+
? {}
|
|
349
|
+
: { groupSize: input.groupSize }),
|
|
213
350
|
})
|
|
214
351
|
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to generate recovery codes", cause)));
|
|
215
352
|
const rows = [];
|
|
@@ -225,71 +362,132 @@ export const makeRecoveryCodeManagement = (dependencies) => RecoveryCodeManageme
|
|
|
225
362
|
...(input.metadata === undefined ? {} : { metadata: input.metadata }),
|
|
226
363
|
});
|
|
227
364
|
}
|
|
228
|
-
|
|
365
|
+
if (persist) {
|
|
366
|
+
yield* dependencies.codeStore
|
|
367
|
+
.insertMany(rows)
|
|
368
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to store recovery codes", cause)));
|
|
369
|
+
}
|
|
229
370
|
return {
|
|
230
371
|
codes,
|
|
231
372
|
records: rows.map(recoveryCodeInfo),
|
|
232
373
|
};
|
|
233
|
-
})
|
|
234
|
-
|
|
235
|
-
|
|
236
|
-
|
|
237
|
-
|
|
238
|
-
|
|
239
|
-
|
|
240
|
-
|
|
241
|
-
const
|
|
242
|
-
|
|
243
|
-
|
|
244
|
-
|
|
245
|
-
|
|
374
|
+
});
|
|
375
|
+
return RecoveryCodeManagement.of({
|
|
376
|
+
generateForUser: Effect.fn("auth.recovery_code.management.generate")(function* (input) {
|
|
377
|
+
return yield* generateForUserWithOperation(input, "generate");
|
|
378
|
+
}),
|
|
379
|
+
regenerateForUser: Effect.fn("auth.recovery_code.management.regenerate")(function* (input) {
|
|
380
|
+
const operation = "regenerate";
|
|
381
|
+
const generated = yield* generateForUserWithOperation(input, operation, false);
|
|
382
|
+
const revokedAt = input.now ?? (yield* currentUnixMillis);
|
|
383
|
+
// Records were deliberately not persisted, so reconstruct them from generated values.
|
|
384
|
+
const replacementRows = [];
|
|
385
|
+
for (let index = 0; index < generated.codes.length; index += 1) {
|
|
386
|
+
replacementRows.push({
|
|
387
|
+
id: generated.records[index].id,
|
|
388
|
+
userId: input.userId,
|
|
389
|
+
codeHash: yield* dependencies.recoveryCodes
|
|
390
|
+
.hash({
|
|
391
|
+
code: Redacted.make(Redacted.value(generated.codes[index])),
|
|
392
|
+
})
|
|
393
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to hash recovery code", cause))),
|
|
394
|
+
createdAt: generated.records[index].createdAt,
|
|
395
|
+
...(input.metadata === undefined
|
|
396
|
+
? {}
|
|
397
|
+
: { metadata: input.metadata }),
|
|
398
|
+
});
|
|
246
399
|
}
|
|
247
|
-
|
|
248
|
-
.
|
|
249
|
-
|
|
250
|
-
|
|
251
|
-
|
|
400
|
+
yield* dependencies.codeStore
|
|
401
|
+
.replaceActiveForUser({
|
|
402
|
+
userId: input.userId,
|
|
403
|
+
rows: replacementRows,
|
|
404
|
+
revokedAt,
|
|
405
|
+
revokeReason: input.revokeReason ?? "regenerated",
|
|
252
406
|
})
|
|
253
|
-
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to
|
|
254
|
-
|
|
407
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to replace recovery codes", cause)));
|
|
408
|
+
return generated;
|
|
409
|
+
}),
|
|
410
|
+
identifyForUser: Effect.fn("auth.recovery_code.management.identify")(function* (input) {
|
|
411
|
+
const operation = "verify";
|
|
412
|
+
const codes = yield* dependencies.codeStore
|
|
413
|
+
.listByUser({ userId: input.userId })
|
|
414
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to list recovery codes", cause)));
|
|
415
|
+
for (const code of codes) {
|
|
416
|
+
const valid = yield* dependencies.recoveryCodes
|
|
417
|
+
.verify({ code: input.code, hash: code.codeHash })
|
|
418
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to verify recovery code", cause)));
|
|
419
|
+
if (!valid) {
|
|
420
|
+
continue;
|
|
421
|
+
}
|
|
255
422
|
return {
|
|
256
423
|
valid: true,
|
|
257
|
-
code: recoveryCodeInfo(
|
|
424
|
+
code: recoveryCodeInfo(code),
|
|
258
425
|
};
|
|
259
426
|
}
|
|
260
|
-
|
|
261
|
-
|
|
262
|
-
|
|
263
|
-
|
|
264
|
-
|
|
265
|
-
.
|
|
266
|
-
|
|
267
|
-
|
|
268
|
-
|
|
269
|
-
|
|
270
|
-
|
|
271
|
-
|
|
272
|
-
|
|
273
|
-
|
|
274
|
-
|
|
275
|
-
|
|
276
|
-
|
|
277
|
-
|
|
278
|
-
|
|
279
|
-
|
|
280
|
-
|
|
281
|
-
|
|
282
|
-
|
|
283
|
-
|
|
284
|
-
|
|
285
|
-
|
|
286
|
-
|
|
287
|
-
|
|
288
|
-
|
|
289
|
-
|
|
290
|
-
|
|
291
|
-
|
|
292
|
-
})
|
|
427
|
+
return { valid: false };
|
|
428
|
+
}),
|
|
429
|
+
verifyForUser: Effect.fn("auth.recovery_code.management.verify")(function* (input) {
|
|
430
|
+
const operation = "verify";
|
|
431
|
+
const now = input.now ?? (yield* currentUnixMillis);
|
|
432
|
+
const codes = yield* dependencies.codeStore
|
|
433
|
+
.listByUser({ userId: input.userId })
|
|
434
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to list recovery codes", cause)));
|
|
435
|
+
for (const code of codes) {
|
|
436
|
+
const valid = yield* dependencies.recoveryCodes
|
|
437
|
+
.verify({ code: input.code, hash: code.codeHash })
|
|
438
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to verify recovery code", cause)));
|
|
439
|
+
if (!valid) {
|
|
440
|
+
continue;
|
|
441
|
+
}
|
|
442
|
+
const updated = yield* dependencies.codeStore
|
|
443
|
+
.markUsed({
|
|
444
|
+
id: code.id,
|
|
445
|
+
usedAt: now,
|
|
446
|
+
...(input.metadata === undefined
|
|
447
|
+
? {}
|
|
448
|
+
: { metadata: input.metadata }),
|
|
449
|
+
})
|
|
450
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to mark recovery code as used", cause)));
|
|
451
|
+
if (Option.isSome(updated)) {
|
|
452
|
+
return {
|
|
453
|
+
valid: true,
|
|
454
|
+
code: recoveryCodeInfo(updated.value),
|
|
455
|
+
};
|
|
456
|
+
}
|
|
457
|
+
}
|
|
458
|
+
return { valid: false };
|
|
459
|
+
}),
|
|
460
|
+
listForUser: Effect.fn("auth.recovery_code.management.list")(function* (input) {
|
|
461
|
+
const codes = yield* dependencies.codeStore
|
|
462
|
+
.listByUser({
|
|
463
|
+
userId: input.userId,
|
|
464
|
+
...(input.includeUsed === undefined
|
|
465
|
+
? {}
|
|
466
|
+
: { includeUsed: input.includeUsed }),
|
|
467
|
+
...(input.includeRevoked === undefined
|
|
468
|
+
? {}
|
|
469
|
+
: { includeRevoked: input.includeRevoked }),
|
|
470
|
+
})
|
|
471
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError("list", "Failed to list recovery codes", cause)));
|
|
472
|
+
return codes.map(recoveryCodeInfo);
|
|
473
|
+
}),
|
|
474
|
+
revokeForUser: Effect.fn("auth.recovery_code.management.revoke")(function* (input) {
|
|
475
|
+
const operation = "revoke";
|
|
476
|
+
const code = yield* loadOwnedRecoveryCode(dependencies, operation, input);
|
|
477
|
+
if (code.revokedAt !== undefined) {
|
|
478
|
+
return;
|
|
479
|
+
}
|
|
480
|
+
const revokedAt = input.revokedAt ?? (yield* currentUnixMillis);
|
|
481
|
+
yield* dependencies.codeStore
|
|
482
|
+
.revoke({
|
|
483
|
+
id: input.codeId,
|
|
484
|
+
revokedAt,
|
|
485
|
+
...(input.reason === undefined ? {} : { reason: input.reason }),
|
|
486
|
+
})
|
|
487
|
+
.pipe(Effect.mapError((cause) => recoveryCodeManagementError(operation, "Failed to revoke recovery code", cause)));
|
|
488
|
+
}),
|
|
489
|
+
});
|
|
490
|
+
};
|
|
293
491
|
export const RecoveryCodeManagementLive = Layer.effect(RecoveryCodeManagement)(Effect.gen(function* () {
|
|
294
492
|
const recoveryCodes = yield* RecoveryCodes;
|
|
295
493
|
const crypto = yield* Crypto;
|
package/dist/RecoveryCode.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"RecoveryCode.js","sourceRoot":"","sources":["../src/RecoveryCode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAG/E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGlD,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,EAAgB,CAAC;AAG1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,EAAoB,CAAC;AAElE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAI9C,MAAM,OAAO,iBAAkB,SAAQ,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAIzE;CAAG;AA+BL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AAMD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAEhE,MAAM,iBAAiB,GAAG,CACxB,SAAgC,EAChC,OAAe,EACf,KAAe,EACI,EAAE,CACrB,IAAI,iBAAiB,CAAC;IACpB,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CAAC,KAAa,EAA4C,EAAE,CAChF,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG;IACnD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;IACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,iBAAiB,CACf,UAAU,EACV,0DAA0D,CAC3D,CACF,CAAC;AAER,MAAM,cAAc,GAAG,CACrB,MAAc,EACd,SAAgC,EACU,EAAE,CAC5C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE;IACrD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,iBAAiB,CACf,SAAS,EACT,0DAA0D,CAC3D,CACF,CAAC;AAER,MAAM,iBAAiB,GAAG,CACxB,SAAiB,EACyB,EAAE,CAC5C,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,IAAI,EAAE;IAC9D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,iBAAiB,CACf,UAAU,EACV,8DAA8D,CAC/D,CACF,CAAC;AAER,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAU,EAAE;IACjD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC;QAEV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,oBAAoB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAgB,EAAE,CAC1E,YAAY,CACV,IAAI;KACD,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC;IAC5C,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CACtB,CAAC;AAEJ,MAAM,sBAAsB,GAAG,CAC7B,IAAY,EACZ,SAAgC,EACU,EAAE;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAEnE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,oBAAoB,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,OAAO,MAAM,CAAC,IAAI,CAChB,iBAAiB,CAAC,SAAS,EAAE,+CAA+C,CAAC,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC,CAAC;AAEF,MAAM,0BAA0B,GAAG,CACjC,IAAY,EACZ,SAAgC,EACgB,EAAE,CAClD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEhE,OAAO,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC,CAAC;AACpF,CAAC,CAAC,CAAC;AAEL,MAAM,qBAAqB,GAAG,CAC5B,YAAuC,EACvC,IAAY,EACZ,SAAgC,EACoB,EAAE,CACtD,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,EACxD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,iBAAiB,CAAC,SAAS,EAAE,8BAA8B,EAAE,KAAK,CAAC,CACpE,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,YAAuC,EACjB,EAAE,CACxB,aAAa,CAAC,IAAI,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,IAAI,wBAAwB,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAClC,KAAK,EAAE,MAAM,IAAI,yBAAyB,EAC1C,UAAU,CACX,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACxC,KAAK,EAAE,SAAS,IAAI,4BAA4B,CACjD,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAsC,EAAE,CAAC;QAEpD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAC/D,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,iBAAiB,CAAC,UAAU,EAAE,kCAAkC,EAAE,KAAK,CAAC,CACzE,CACF,CAAC;YACF,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAEnD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI;QAClE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAClD,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EACpB,WAAW,CACZ,CAAC;QAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACzD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAC3C,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAC1B,MAAM,CACP,CAAC;QAEF,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE9C,OAAO,KAAK,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAC3C,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAC1B,QAAQ,CACT,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAE9E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACtE,CAAC;QAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE3E,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM;aAC9B,eAAe,CAAC;YACf,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SACtC,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,iBAAiB,CAAC,QAAQ,EAAE,wCAAwC,EAAE,KAAK,CAAC,CAC7E,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAE7B,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC,CAAC,CACH,CAAC;AAqCF,MAAM,OAAO,sBAAuB,SAAQ,IAAI,CAAC,WAAW,CAC1D,wBAAwB,CAKxB;CAAG;AAoBL,MAAM,OAAO,iBAAkB,SAAQ,OAAO,CAAC,OAAO,EAGnD,CAAC,wBAAwB,CAAC;CAAG;AAEhC,WAAiB,iBAAiB;IACnB,sBAAI,GAAG,CAClB,OAAiC,EACP,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC,EAJgB,iBAAiB,KAAjB,iBAAiB,QAIjC;AAED,MAAM,aAAa,GAAG,CACpB,QAAuB,EACR,EAAE,CACjB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,eAAe,CAAC,QAAQ,CAAO,CAAC;AAExE,MAAM,uBAAuB,GAAG,CAC9B,MAA0B,EACN,EAAE,CAAC,CAAC;IACxB,GAAG,MAAM;IACT,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAA6B,EAAE;IACxE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAE1D,OAAO,iBAAiB,CAAC,IAAI,CAAC;QAC5B,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CACnB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC;QACJ,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAE1B,OAAO,GAAG,KAAK,SAAS;gBACtB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC;QACJ,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACf,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;aAChB,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC3B,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;YACxD,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CACjE;aACA,GAAG,CAAC,uBAAuB,CAAC,CAChC;QACH,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAClB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAEhC,IACE,GAAG,KAAK,SAAS;gBACjB,GAAG,CAAC,MAAM,KAAK,SAAS;gBACxB,GAAG,CAAC,SAAS,KAAK,SAAS,EAC3B,CAAC;gBACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;YAED,MAAM,OAAO,GAAG;gBACd,GAAG,GAAG;gBACN,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;aACZ,CAAC;YAE/B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAE7B,OAAO,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAEhC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE;oBAClB,GAAG,GAAG;oBACN,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,QAAQ,EACN,KAAK,CAAC,MAAM,KAAK,SAAS;wBACxB,CAAC,CAAC,GAAG,CAAC,QAAQ;wBACd,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CACtE,2BAA2B,CAC5B,CAAC;AAoDF,MAAM,OAAO,2BAA4B,SAAQ,IAAI,CAAC,WAAW,CAC/D,6BAA6B,CAK7B;CAAG;AAiBL,MAAM,OAAO,sBAAuB,SAAQ,OAAO,CAAC,OAAO,EAGxD,CAAC,6BAA6B,CAAC;CAAG;AAErC,WAAiB,sBAAsB;IACxB,2BAAI,GAAG,CAClB,OAAsC,EACP,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACzE,CAAC,EAJgB,sBAAsB,KAAtB,sBAAsB,QAItC;AASD,MAAM,gBAAgB,GAAG,CAAC,MAA0B,EAAoB,EAAE,CAAC,CAAC;IAC1E,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACjE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1E,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;CACxE,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAClC,SAA0C,EAC1C,OAAe,EACf,KAAe,EACc,EAAE,CAC/B,IAAI,2BAA2B,CAAC;IAC9B,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,YAAgD,EAChD,SAA0C,EACgB,EAAE,CAC5D,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EACxB,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,qCAAqC,EACrC,KAAK,CACN,CACF,CACF,CAAC;AAEJ,MAAM,qBAAqB,GAAG,CAC5B,YAAgD,EAChD,SAA0C,EAC1C,KAAiE,EACD,EAAE,CAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CAAC,SAAS,EAAE,8BAA8B,EAAE,KAAK,CAAC,CAC9E,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9D,OAAO,KAAK,CAAC,CAAC,2BAA2B,CACvC,SAAS,EACT,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,YAAgD,EACjB,EAAE,CACjC,sBAAsB,CAAC,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,wCAAwC,CAAC,CAClE,QAAQ,CAAC,EAAE,KAAK;QACd,MAAM,SAAS,GAAG,UAAmB,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;aAC5C,QAAQ,CAAC;YACR,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SACzE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,mCAAmC,EACnC,KAAK,CACN,CACF,CACF,CAAC;QACJ,MAAM,IAAI,GAAyB,EAAE,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;iBAC/C,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;iBACnD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,8BAA8B,EAC9B,KAAK,CACN,CACF,CACF,CAAC;YAEJ,IAAI,CAAC,IAAI,CAAC;gBACR,EAAE,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE,SAAS,CAAC;gBACtD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ;gBACR,SAAS,EAAE,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;aACtE,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CACjD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,gCAAgC,EAChC,KAAK,CACN,CACF,CACF,CAAC;QAEF,OAAO;YACL,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;SACH,CAAC;IACrC,CAAC,CACF;IACD,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EACxE,KAAK;QAEL,MAAM,SAAS,GAAG,QAAiB,CAAC;QACpC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;aACxC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;aACpC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,+BAA+B,EAC/B,KAAK,CACN,CACF,CACF,CAAC;QAEJ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;iBAC5C,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;iBACjD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,gCAAgC,EAChC,KAAK,CACN,CACF,CACF,CAAC;YAEJ,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBAC1C,QAAQ,CAAC;gBACR,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,MAAM,EAAE,GAAG;gBACX,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;aACtE,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,sCAAsC,EACtC,KAAK,CACN,CACF,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC;iBACI,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAA4C,CAAC;IACpE,CAAC,CAAC;IACF,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;aACxC,UAAU,CAAC;YACV,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;gBACjC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;SAC9C,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CAAC,MAAM,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAC5E,CACF,CAAC;QAEJ,OAAO,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EACxE,KAAK;QAEL,MAAM,SAAS,GAAG,QAAiB,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAE1E,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEhE,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;aAC1B,MAAM,CAAC;YACN,EAAE,EAAE,KAAK,CAAC,MAAM;YAChB,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAChE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,gCAAgC,EAChC,KAAK,CACN,CACF,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAC5E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IAE3C,OAAO,0BAA0B,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC,CACH,CAAC"}
|
|
1
|
+
{"version":3,"file":"RecoveryCode.js","sourceRoot":"","sources":["../src/RecoveryCode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAG/E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AASlD,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,EAAgB,CAAC;AAG1D,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,EAAoB,CAAC;AAElE,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAC5C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC;AAQ9C,MAAM,OAAO,iBAAkB,SAAQ,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAIzE;CAAG;AAkCL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAM5B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAEhE,MAAM,iBAAiB,GAAG,CACxB,SAAgC,EAChC,OAAe,EACf,KAAe,EACI,EAAE,CACrB,IAAI,iBAAiB,CAAC;IACpB,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CACpB,KAAa,EAC6B,EAAE,CAC5C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG;IACnD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;IACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,iBAAiB,CACf,UAAU,EACV,0DAA0D,CAC3D,CACF,CAAC;AAER,MAAM,cAAc,GAAG,CACrB,MAAc,EACd,SAAgC,EACU,EAAE,CAC5C,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE;IACrD,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,iBAAiB,CACf,SAAS,EACT,0DAA0D,CAC3D,CACF,CAAC;AAER,MAAM,iBAAiB,GAAG,CACxB,SAAiB,EACyB,EAAE,CAC5C,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,IAAI,EAAE;IAC9D,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,iBAAiB,CACf,UAAU,EACV,8DAA8D,CAC/D,CACF,CAAC;AAER,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAU,EAAE;IACjD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC;QAEV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,oBAAoB,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,oBAAoB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAgB,EAAE,CAC1E,YAAY,CACV,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CACpE,CAAC;AAEJ,MAAM,sBAAsB,GAAG,CAC7B,IAAY,EACZ,SAAgC,EACU,EAAE;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAEnE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,CAChB,iBAAiB,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAChE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,oBAAoB,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,OAAO,MAAM,CAAC,IAAI,CAChB,iBAAiB,CACf,SAAS,EACT,+CAA+C,CAChD,CACF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC,CAAC;AAEF,MAAM,0BAA0B,GAAG,CACjC,IAAY,EACZ,SAAgC,EACgB,EAAE,CAClD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEhE,OAAO,iBAAiB,CACtB,OAAO,EACP,IAAI,CAAC,GAAG,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAC/C,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,qBAAqB,GAAG,CAC5B,YAAuC,EACvC,IAAY,EACZ,SAAgC,EACoB,EAAE,CACtD,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,EACxD,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,iBAAiB,CAAC,SAAS,EAAE,8BAA8B,EAAE,KAAK,CAAC,CACpE,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,YAAuC,EACjB,EAAE,CACxB,aAAa,CAAC,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACjE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAChC,KAAK,EAAE,KAAK,IAAI,wBAAwB,CACzC,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAClC,KAAK,EAAE,MAAM,IAAI,yBAAyB,EAC1C,UAAU,CACX,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACxC,KAAK,EAAE,SAAS,IAAI,4BAA4B,CACjD,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAsC,EAAE,CAAC;QAEpD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM;iBACtC,WAAW,CAAC,KAAK,CAAC;iBAClB,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,iBAAiB,CACf,UAAU,EACV,kCAAkC,EAClC,KAAK,CACN,CACF,CACF,CAAC;YACJ,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAEnD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,8BAA8B,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI;QAClE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAClD,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EACpB,WAAW,CACZ,CAAC;QAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACzD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAC3C,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAC1B,MAAM,CACP,CAAC;QAEF,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAE9C,OAAO,KAAK,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,sBAAsB,CAC3C,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAC1B,QAAQ,CACT,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACtE,CAAC;QAEF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACtE,CAAC;QAEF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,qBAAqB,CACvC,YAAY,EACZ,OAAO,EACP,QAAQ,CACT,CAAC;QAEF,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM;aAC9B,eAAe,CAAC;YACf,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SACtC,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,iBAAiB,CACf,QAAQ,EACR,wCAAwC,EACxC,KAAK,CACN,CACF,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAE7B,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC,CAAC,CACH,CAAC;AA6CF,MAAM,OAAO,sBAAuB,SAAQ,IAAI,CAAC,WAAW,CAC1D,wBAAwB,CAKxB;CAAG;AAqCL,MAAM,OAAO,mCAAoC,SAAQ,IAAI,CAAC,WAAW,CACvE,qCAAqC,CACkB;CAAG;AAY5D,MAAM,OAAO,8BAA+B,SAAQ,OAAO,CAAC,OAAO,EAGhE,CAAC,qCAAqC,CAAC;CAAG;AAsB7C,MAAM,OAAO,iCAAkC,SAAQ,IAAI,CAAC,WAAW,CACrE,mCAAmC,CACoB;CAAG;AAS5D,MAAM,OAAO,4BAA6B,SAAQ,OAAO,CAAC,OAAO,EAG9D,CAAC,mCAAmC,CAAC;CAAG;AAS3C,MAAM,CAAC,MAAM,sCAAsC,GAAG,CACpD,OAAO,GAAyC,EAAE,EACb,EAAE;IACvC,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CACpE,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5E,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAC/D,CAAC;IACF,OAAO,4BAA4B,CAAC,EAAE,CAAC;QACrC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,GAAG,CAAC;YACT,kHAAkH;YAClH,GAAG,EAAE,GAAG,EAAE;gBACR,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACrC,IACE,YAAY,KAAK,SAAS;oBAC1B,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;wBAC1B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC;oBACpC,YAAY,CAAC,IAAI,KAAK,iBAAiB;oBACvC,YAAY,CAAC,OAAO,KAAK,KAAK,CAAC,MAAM;oBACrC,YAAY,CAAC,UAAU,KAAK,SAAS;oBACrC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;oBAC1D,IAAI,KAAK,SAAS;oBAClB,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBAC5B,IAAI,CAAC,MAAM,KAAK,SAAS;oBACzB,IAAI,CAAC,SAAS,KAAK,SAAS;oBAC5B,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;wBAC1B,KAAK,CAAC,YAAY,KAAK,gBAAgB,CAAC;oBAC1C,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC;oBACjE,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS;wBAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;4BACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EACpC,CAAC;oBACD,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;oBAC1C,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBACrD,CAAC;gBACD,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EAAE;oBACjC,GAAG,YAAY;oBACf,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B,CAAC,CAAC;gBACH,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;oBACjB,GAAG,IAAI;oBACP,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;wBAClC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;iBACtC,CAAC,CAAC;gBACH,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAChC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,iCAAiC,CAAC;gBACpC,OAAO,EAAE,0CAA0C;gBACnD,KAAK;aACN,CAAC;SACL,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAQF,0FAA0F;AAC1F,MAAM,CAAC,MAAM,wCAAwC,GAAG,CACtD,OAAO,GAA2C,EAAE,EACb,EAAE;IACzC,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5E,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAC/D,CAAC;IACF,OAAO,8BAA8B,CAAC,EAAE,CAAC;QACvC,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC1B,MAAM,CAAC,GAAG,CAAC;YACT,GAAG,EAAE,GAAG,EAAE;gBACR,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC9C,IACE,IAAI,KAAK,SAAS;oBAClB,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBAC5B,IAAI,CAAC,MAAM,KAAK,SAAS;oBACzB,IAAI,CAAC,SAAS,KAAK,SAAS;oBAC5B,OAAO,KAAK,SAAS;oBACrB,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBAC/B,OAAO,CAAC,SAAS,KAAK,SAAS;oBAC/B,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,GAAG;oBAC9B,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,kBAAkB;oBAC/C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,oBAAoB,CAAC;wBAC1C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,4BAA4B,CAAC,EACpD,CAAC;oBACD,OAAO,MAAM,CAAC,IAAI,EAAc,CAAC;gBACnC,CAAC;gBACD,IAAI,OAAO,CAAC,gBAAgB,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;oBAC1C,MAAM,IAAI,mCAAmC,CAAC;wBAC5C,OAAO,EAAE,kCAAkC;qBAC5C,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,QAAQ,GAAuB;oBACnC,GAAG,IAAI;oBACP,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS;wBAClC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;iBACtC,CAAC;gBACF,MAAM,WAAW,GAAe;oBAC9B,GAAG,OAAO;oBACV,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,oBAAoB,EAAE,eAAe,CAAC,KAAK,CAAC,oBAAoB,CAAC;oBACjE,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC;oBACnB,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS;wBACnC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;oBAC3C,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;wBAC5B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;iBAC/C,CAAC;gBACF,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBAClC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC;YACnD,CAAC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,mCAAmC;gBAClD,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,mCAAmC,CAAC;oBACtC,OAAO,EAAE,yCAAyC;oBAClD,KAAK;iBACN,CAAC;SACT,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,OAAO,iBAAkB,SAAQ,OAAO,CAAC,OAAO,EAGnD,CAAC,wBAAwB,CAAC;CAAG;AAEhC,MAAM,aAAa,GAAG,CACpB,QAAuB,EACR,EAAE,CACjB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,eAAe,CAAC,QAAQ,CAAO,CAAC;AAExE,MAAM,uBAAuB,GAAG,CAC9B,MAA0B,EACN,EAAE,CAAC,CAAC;IACxB,GAAG,MAAM;IACT,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;CAClD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAA6B,EAAE;IACxE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoC,CAAC;IAE1D,OAAO,iBAAiB,CAAC,EAAE,CAAC;QAC1B,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CACnB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC;QACJ,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAE1B,OAAO,GAAG,KAAK,SAAS;gBACtB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC;QACJ,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACf,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;aAChB,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC3B,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;YACxD,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CACjE;aACA,GAAG,CAAC,uBAAuB,CAAC,CAChC;QACH,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAClB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAEhC,IACE,GAAG,KAAK,SAAS;gBACjB,GAAG,CAAC,MAAM,KAAK,SAAS;gBACxB,GAAG,CAAC,SAAS,KAAK,SAAS,EAC3B,CAAC;gBACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;YACvB,CAAC;YAED,MAAM,OAAO,GAAG;gBACd,GAAG,GAAG;gBACN,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;aACZ,CAAC;YAE/B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAE7B,OAAO,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC;QACJ,oBAAoB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC9B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;gBAC9B,IACE,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;oBAC3B,GAAG,CAAC,MAAM,KAAK,SAAS;oBACxB,GAAG,CAAC,SAAS,KAAK,SAAS,EAC3B,CAAC;oBACD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE;wBACZ,GAAG,GAAG;wBACN,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,QAAQ,EACN,KAAK,CAAC,YAAY,KAAK,SAAS;4BAC9B,CAAC,CAAC,GAAG,CAAC,QAAQ;4BACd,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;qBAC5D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBAC7B,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAEhC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE;oBAClB,GAAG,GAAG;oBACN,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,QAAQ,EACN,KAAK,CAAC,MAAM,KAAK,SAAS;wBACxB,CAAC,CAAC,GAAG,CAAC,QAAQ;wBACd,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CACtE,2BAA2B,CAC5B,CAAC;AAyDF,MAAM,OAAO,2BAA4B,SAAQ,IAAI,CAAC,WAAW,CAC/D,6BAA6B,CAK7B;CAAG;AA8BL,MAAM,OAAO,sBAAuB,SAAQ,OAAO,CAAC,OAAO,EAGxD,CAAC,6BAA6B,CAAC;CAAG;AASrC,MAAM,gBAAgB,GAAG,CAAC,MAA0B,EAAoB,EAAE,CAAC,CAAC;IAC1E,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACjE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1E,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;CACxE,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAClC,SAA0C,EAC1C,OAAe,EACf,KAAe,EACc,EAAE,CAC/B,IAAI,2BAA2B,CAAC;IAC9B,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,YAAgD,EAChD,SAA0C,EACgB,EAAE,CAC5D,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAClE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EACxB,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,qCAAqC,EACrC,KAAK,CACN,CACF,CACF,CAAC;AAEJ,MAAM,qBAAqB,GAAG,CAC5B,YAAgD,EAChD,SAA0C,EAC1C,KAAiE,EACD,EAAE,CAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;SACvC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;SACtB,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,8BAA8B,EAC9B,KAAK,CACN,CACF,CACF,CAAC;IAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9D,OAAO,KAAK,CAAC,CAAC,2BAA2B,CACvC,SAAS,EACT,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,YAAgD,EACjB,EAAE;IACjC,MAAM,4BAA4B,GAAG,CACnC,KAAuC,EACvC,SAGC,EACD,OAAO,GAAG,IAAI,EACd,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;aAC5C,QAAQ,CAAC;YACR,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;gBAC/B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SACpC,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,mCAAmC,EACnC,KAAK,CACN,CACF,CACF,CAAC;QACJ,MAAM,IAAI,GAAyB,EAAE,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;iBAC/C,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;iBACnD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,8BAA8B,EAC9B,KAAK,CACN,CACF,CACF,CAAC;YAEJ,IAAI,CAAC,IAAI,CAAC;gBACR,EAAE,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE,SAAS,CAAC;gBACtD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ;gBACR,SAAS,EAAE,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;aACtE,CAAC,CAAC;QACL,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACZ,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBAC1B,UAAU,CAAC,IAAI,CAAC;iBAChB,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,gCAAgC,EAChC,KAAK,CACN,CACF,CACF,CAAC;QACN,CAAC;QAED,OAAO;YACL,KAAK;YACL,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;SACH,CAAC;IACrC,CAAC,CAAC,CAAC;IAEL,OAAO,sBAAsB,CAAC,EAAE,CAAC;QAC/B,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,wCAAwC,CAAC,CAClE,QAAQ,CAAC,EAAE,KAAK;YACd,OAAO,KAAK,CAAC,CAAC,4BAA4B,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QAChE,CAAC,CACF;QACD,iBAAiB,EAAE,MAAM,CAAC,EAAE,CAAC,0CAA0C,CAAC,CACtE,QAAQ,CAAC,EAAE,KAAK;YACd,MAAM,SAAS,GAAG,YAAqB,CAAC;YACxC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,4BAA4B,CACnD,KAAK,EACL,SAAS,EACT,KAAK,CACN,CAAC;YACF,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC1D,sFAAsF;YACtF,MAAM,eAAe,GAAyB,EAAE,CAAC;YACjD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBAC/D,eAAe,CAAC,IAAI,CAAC;oBACnB,EAAE,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC,EAAE;oBAChC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;yBACxC,IAAI,CAAC;wBACJ,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC;qBAC7D,CAAC;yBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,8BAA8B,EAC9B,KAAK,CACN,CACF,CACF;oBACH,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC,SAAS;oBAC9C,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;wBAC9B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;iBAClC,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBAC1B,oBAAoB,CAAC;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,eAAe;gBACrB,SAAS;gBACT,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,aAAa;aAClD,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,kCAAkC,EAClC,KAAK,CACN,CACF,CACF,CAAC;YAEJ,OAAO,SAAS,CAAC;QACnB,CAAC,CACF;QACD,eAAe,EAAE,MAAM,CAAC,EAAE,CAAC,wCAAwC,CAAC,CAClE,QAAQ,CAAC,EAAE,KAAK;YACd,MAAM,SAAS,GAAG,QAAiB,CAAC;YACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBACxC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBACpC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,+BAA+B,EAC/B,KAAK,CACN,CACF,CACF,CAAC;YAEJ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;qBAC5C,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;qBACjD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,gCAAgC,EAChC,KAAK,CACN,CACF,CACF,CAAC;gBAEJ,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,SAAS;gBACX,CAAC;gBAED,OAAO;oBACL,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,gBAAgB,CAAC,IAAI,CAAC;iBACa,CAAC;YAC9C,CAAC;YAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAA4C,CAAC;QACpE,CAAC,CACF;QACD,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAC9D,QAAQ,CAAC,EAAE,KAAK;YACd,MAAM,SAAS,GAAG,QAAiB,CAAC;YACpC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBACxC,UAAU,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBACpC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,+BAA+B,EAC/B,KAAK,CACN,CACF,CACF,CAAC;YACJ,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;qBAC5C,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;qBACjD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,gCAAgC,EAChC,KAAK,CACN,CACF,CACF,CAAC;gBACJ,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,SAAS;gBACX,CAAC;gBACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;qBAC1C,QAAQ,CAAC;oBACR,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,MAAM,EAAE,GAAG;oBACX,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;wBAC9B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;iBAClC,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,sCAAsC,EACtC,KAAK,CACN,CACF,CACF,CAAC;gBAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,OAAO;wBACL,KAAK,EAAE,IAAI;wBACX,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC;qBACI,CAAC;gBAC9C,CAAC;YACH,CAAC;YAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAA4C,CAAC;QACpE,CAAC,CACF;QACD,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAC1D,QAAQ,CAAC,EAAE,KAAK;YACd,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBACxC,UAAU,CAAC;gBACV,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;oBACjC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBACvC,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;aAC9C,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,MAAM,EACN,+BAA+B,EAC/B,KAAK,CACN,CACF,CACF,CAAC;YAEJ,OAAO,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACrC,CAAC,CACF;QACD,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAC9D,QAAQ,CAAC,EAAE,KAAK;YACd,MAAM,SAAS,GAAG,QAAiB,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,qBAAqB,CACvC,YAAY,EACZ,SAAS,EACT,KAAK,CACN,CAAC;YAEF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAEhE,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBAC1B,MAAM,CAAC;gBACN,EAAE,EAAE,KAAK,CAAC,MAAM;gBAChB,SAAS;gBACT,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;aAChE,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,gCAAgC,EAChC,KAAK,CACN,CACF,CACF,CAAC;QACN,CAAC,CACF;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAC5E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IAE3C,OAAO,0BAA0B,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC,CACH,CAAC"}
|
|
@@ -0,0 +1,81 @@
|
|
|
1
|
+
import { Context, Effect, Layer } from "effect";
|
|
2
|
+
import type { AuthenticationEvidence } from "./Assurance.js";
|
|
3
|
+
import type { AuthenticatedIdentityContext, AuthFlowCompleteInput, AuthMethod } from "./AuthFlow.js";
|
|
4
|
+
import type { SessionToken, UserId } from "./Identifiers.js";
|
|
5
|
+
import type { LoginApprovalIntent } from "./LoginApproval.js";
|
|
6
|
+
import type { LoginRequestContext, LoginRiskContext } from "./LoginRisk.js";
|
|
7
|
+
import { CurrentSession, Sessions, SessionRotateError } from "./Sessions.js";
|
|
8
|
+
import type { CurrentSessionShape, IssuedSession, SessionClaims, SessionRevokeError, SessionUpdateClaimsError } from "./Sessions.js";
|
|
9
|
+
/** A recovery mechanism understood by the application enrolling it. */
|
|
10
|
+
export type RecoveryCapabilityKind = "verified-email" | "recovery-codes" | "second-passkey" | "oauth-account" | (string & {});
|
|
11
|
+
export type NonEmptyRecoveryCapabilities = readonly [
|
|
12
|
+
RecoveryCapabilityKind,
|
|
13
|
+
...RecoveryCapabilityKind[]
|
|
14
|
+
];
|
|
15
|
+
export interface RecoveryRequirementPolicyInput {
|
|
16
|
+
readonly userId: UserId;
|
|
17
|
+
readonly identity?: AuthenticatedIdentityContext;
|
|
18
|
+
readonly intent?: LoginApprovalIntent;
|
|
19
|
+
readonly method: AuthMethod;
|
|
20
|
+
readonly request?: LoginRequestContext;
|
|
21
|
+
readonly risk?: LoginRiskContext;
|
|
22
|
+
readonly claims?: SessionClaims;
|
|
23
|
+
/** Trusted application context, such as tenant, role, plan, or risk metadata. */
|
|
24
|
+
readonly metadata?: Readonly<Record<string, unknown>>;
|
|
25
|
+
}
|
|
26
|
+
export type RecoveryRequirementDecision = {
|
|
27
|
+
readonly type: "allow";
|
|
28
|
+
} | {
|
|
29
|
+
readonly type: "require-enrollment";
|
|
30
|
+
readonly allowed: NonEmptyRecoveryCapabilities;
|
|
31
|
+
} | {
|
|
32
|
+
readonly type: "deny";
|
|
33
|
+
readonly reason: string;
|
|
34
|
+
};
|
|
35
|
+
export interface RecoveryRequirementPolicyService {
|
|
36
|
+
readonly decide: (input: RecoveryRequirementPolicyInput) => Effect.Effect<RecoveryRequirementDecision>;
|
|
37
|
+
}
|
|
38
|
+
declare const RecoveryRequirementPolicy_base: Context.ServiceClass<RecoveryRequirementPolicy, "auth/RecoveryRequirementPolicy", RecoveryRequirementPolicyService>;
|
|
39
|
+
export declare class RecoveryRequirementPolicy extends RecoveryRequirementPolicy_base {
|
|
40
|
+
}
|
|
41
|
+
export declare const makeRecoveryRequirementPolicyAllow: () => RecoveryRequirementPolicyService;
|
|
42
|
+
export declare const RecoveryRequirementPolicyAllowLive: Layer.Layer<RecoveryRequirementPolicy, never, never>;
|
|
43
|
+
export declare const withRecoveryEnrollmentRequirement: (claims: SessionClaims | undefined, allowed: NonEmptyRecoveryCapabilities) => SessionClaims;
|
|
44
|
+
export declare const defaultRecoveryRemediationCapabilities: readonly ["verified-email", "recovery-codes", "second-passkey", "oauth-account"];
|
|
45
|
+
export declare const withRecoveryRemediationRequirement: (claims: SessionClaims | undefined, allowed: NonEmptyRecoveryCapabilities) => SessionClaims;
|
|
46
|
+
declare const RecoveryCapabilityNotAllowedError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
|
|
47
|
+
readonly _tag: "RecoveryCapabilityNotAllowedError";
|
|
48
|
+
} & Readonly<A>;
|
|
49
|
+
export declare class RecoveryCapabilityNotAllowedError extends RecoveryCapabilityNotAllowedError_base<{
|
|
50
|
+
readonly capability: RecoveryCapabilityKind;
|
|
51
|
+
}> {
|
|
52
|
+
}
|
|
53
|
+
/** Validates policy claims only; it never infers whether a capability exists. */
|
|
54
|
+
export declare const validateRecoveryEnrollmentCapability: (claims: SessionClaims | undefined, capability: RecoveryCapabilityKind) => Effect.Effect<void, RecoveryCapabilityNotAllowedError>;
|
|
55
|
+
export declare const validateRecoveryRemediationCapability: (claims: SessionClaims | undefined, capability: RecoveryCapabilityKind) => Effect.Effect<void, RecoveryCapabilityNotAllowedError>;
|
|
56
|
+
export interface CompleteRecoveryEnrollmentInput {
|
|
57
|
+
readonly capability: RecoveryCapabilityKind;
|
|
58
|
+
readonly reason?: string;
|
|
59
|
+
}
|
|
60
|
+
/** Call only after the application-owned enrollment operation has succeeded. */
|
|
61
|
+
export declare const completeCurrentSessionRecoveryEnrollment: (input: CompleteRecoveryEnrollmentInput) => Effect.Effect<CurrentSessionShape, RecoveryCapabilityNotAllowedError | SessionUpdateClaimsError, CurrentSession | Sessions>;
|
|
62
|
+
declare const InvalidRecoveryRemediationEvidenceError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
|
|
63
|
+
readonly _tag: "InvalidRecoveryRemediationEvidenceError";
|
|
64
|
+
} & Readonly<A>;
|
|
65
|
+
export declare class InvalidRecoveryRemediationEvidenceError extends InvalidRecoveryRemediationEvidenceError_base<{
|
|
66
|
+
readonly message: string;
|
|
67
|
+
}> {
|
|
68
|
+
}
|
|
69
|
+
export interface CompleteRecoveryRemediationInput {
|
|
70
|
+
readonly token: SessionToken;
|
|
71
|
+
/** The caller confirms this capability was successfully enrolled or verified. */
|
|
72
|
+
readonly capability: RecoveryCapabilityKind;
|
|
73
|
+
readonly evidence?: AuthenticationEvidence | readonly AuthenticationEvidence[];
|
|
74
|
+
readonly revokeOtherSessions?: boolean;
|
|
75
|
+
readonly reason?: string;
|
|
76
|
+
}
|
|
77
|
+
/** Completes application-owned remediation with an atomic session CAS rotation. */
|
|
78
|
+
export declare const completeRecoveryRemediation: (input: CompleteRecoveryRemediationInput) => Effect.Effect<IssuedSession, RecoveryCapabilityNotAllowedError | InvalidRecoveryRemediationEvidenceError | SessionRotateError | SessionRevokeError, Sessions>;
|
|
79
|
+
export declare const recoveryPolicyInput: (input: AuthFlowCompleteInput) => RecoveryRequirementPolicyInput;
|
|
80
|
+
export {};
|
|
81
|
+
//# sourceMappingURL=RecoveryPolicy.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"RecoveryPolicy.d.ts","sourceRoot":"","sources":["../src/RecoveryPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EACV,4BAA4B,EAC5B,qBAAqB,EACrB,UAAU,EACX,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,KAAK,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,KAAK,EACV,mBAAmB,EACnB,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,eAAe,CAAC;AAEvB,uEAAuE;AACvE,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,gBAAgB,GAChB,gBAAgB,GAChB,eAAe,GACf,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,MAAM,4BAA4B,GAAG,SAAS;IAClD,sBAAsB;IACtB,GAAG,sBAAsB,EAAE;CAC5B,CAAC;AAEF,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,4BAA4B,CAAC;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1B;IACE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,4BAA4B,CAAC;CAChD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,8BAA8B,KAClC,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;CACjD;;AAED,qBAAa,yBAA0B,SAAQ,8BAGV;CAAG;AAExC,eAAO,MAAM,kCAAkC,QACzC,gCAGA,CAAC;AAEP,eAAO,MAAM,kCAAkC,sDAER,CAAC;AAExC,eAAO,MAAM,iCAAiC,WACpC,aAAa,GAAG,SAAS,WACxB,4BAA4B,KACpC,aAMD,CAAC;AAEH,eAAO,MAAM,sCAAsC,kFAKF,CAAC;AAElD,eAAO,MAAM,kCAAkC,WACrC,aAAa,GAAG,SAAS,WACxB,4BAA4B,KACpC,aAMD,CAAC;;;;AAEH,qBAAa,iCAAkC,SAAQ,uCAErD;IACA,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;CAC7C,CAAC;CAAG;AAEL,iFAAiF;AACjF,eAAO,MAAM,oCAAoC,WACvC,aAAa,GAAG,SAAS,cACrB,sBAAsB,KACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,iCAAiC,CAIgB,CAAC;AAEzE,eAAO,MAAM,qCAAqC,WACxC,aAAa,GAAG,SAAS,cACrB,sBAAsB,KACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,iCAAiC,CAIgB,CAAC;AAkBzE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,gFAAgF;AAChF,eAAO,MAAM,wCAAwC,UAC5C,+BAA+B,KACrC,MAAM,CAAC,MAAM,CACd,mBAAmB,EACnB,iCAAiC,GAAG,wBAAwB,EAC5D,cAAc,GAAG,QAAQ,CAcvB,CAAC;;;;AAkBL,qBAAa,uCAAwC,SAAQ,6CAE3D;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;CAAG;AAElC,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EACd,sBAAsB,GACtB,SAAS,sBAAsB,EAAE,CAAC;IACtC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,mFAAmF;AACnF,eAAO,MAAM,2BAA2B,UAC/B,gCAAgC,KACtC,MAAM,CAAC,MAAM,CACd,aAAa,EACX,iCAAiC,GACjC,uCAAuC,GACvC,kBAAkB,GAClB,kBAAkB,EACpB,QAAQ,CA6CN,CAAC;AAEL,eAAO,MAAM,mBAAmB,UACvB,qBAAqB,KAC3B,8BASD,CAAC"}
|