@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.18

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (607) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +308 -133
  3. package/dist/AbuseProtection.d.ts +100 -0
  4. package/dist/AbuseProtection.d.ts.map +1 -0
  5. package/dist/AbuseProtection.js +71 -0
  6. package/dist/AbuseProtection.js.map +1 -0
  7. package/dist/AccessGrant.d.ts +344 -0
  8. package/dist/AccessGrant.d.ts.map +1 -0
  9. package/dist/AccessGrant.js +687 -0
  10. package/dist/AccessGrant.js.map +1 -0
  11. package/dist/ApiKey.d.ts +0 -12
  12. package/dist/ApiKey.d.ts.map +1 -1
  13. package/dist/ApiKey.js +36 -27
  14. package/dist/ApiKey.js.map +1 -1
  15. package/dist/Assurance.d.ts +415 -0
  16. package/dist/Assurance.d.ts.map +1 -0
  17. package/dist/Assurance.js +764 -0
  18. package/dist/Assurance.js.map +1 -0
  19. package/dist/AtomicPlanExecutor.d.ts +28 -0
  20. package/dist/AtomicPlanExecutor.d.ts.map +1 -0
  21. package/dist/AtomicPlanExecutor.js +5 -0
  22. package/dist/AtomicPlanExecutor.js.map +1 -0
  23. package/dist/AuditLog.d.ts +2314 -52
  24. package/dist/AuditLog.d.ts.map +1 -1
  25. package/dist/AuditLog.js +511 -33
  26. package/dist/AuditLog.js.map +1 -1
  27. package/dist/AuthFlow.d.ts +128 -38
  28. package/dist/AuthFlow.d.ts.map +1 -1
  29. package/dist/AuthFlow.js +611 -263
  30. package/dist/AuthFlow.js.map +1 -1
  31. package/dist/AuthRateLimit.d.ts +96 -0
  32. package/dist/AuthRateLimit.d.ts.map +1 -0
  33. package/dist/AuthRateLimit.js +212 -0
  34. package/dist/AuthRateLimit.js.map +1 -0
  35. package/dist/Challenge.d.ts +0 -3
  36. package/dist/Challenge.d.ts.map +1 -1
  37. package/dist/Challenge.js +1 -4
  38. package/dist/Challenge.js.map +1 -1
  39. package/dist/Client.d.ts +205 -10
  40. package/dist/Client.d.ts.map +1 -1
  41. package/dist/Client.js +397 -16
  42. package/dist/Client.js.map +1 -1
  43. package/dist/CloudflareTurnstile.d.ts +28 -0
  44. package/dist/CloudflareTurnstile.d.ts.map +1 -0
  45. package/dist/CloudflareTurnstile.js +205 -0
  46. package/dist/CloudflareTurnstile.js.map +1 -0
  47. package/dist/Crypto.d.ts +0 -3
  48. package/dist/Crypto.d.ts.map +1 -1
  49. package/dist/Crypto.js +1 -4
  50. package/dist/Crypto.js.map +1 -1
  51. package/dist/DelegatedAccessStorageMigrations.d.ts +7 -0
  52. package/dist/DelegatedAccessStorageMigrations.d.ts.map +1 -0
  53. package/dist/DelegatedAccessStorageMigrations.js +159 -0
  54. package/dist/DelegatedAccessStorageMigrations.js.map +1 -0
  55. package/dist/DisposableEmailDomains.d.ts +19 -0
  56. package/dist/DisposableEmailDomains.d.ts.map +1 -0
  57. package/dist/DisposableEmailDomains.js +85 -0
  58. package/dist/DisposableEmailDomains.js.map +1 -0
  59. package/dist/DomainVerification.d.ts +0 -9
  60. package/dist/DomainVerification.d.ts.map +1 -1
  61. package/dist/DomainVerification.js +36 -22
  62. package/dist/DomainVerification.js.map +1 -1
  63. package/dist/DrizzleBunSqliteStorage.d.ts +18 -0
  64. package/dist/DrizzleBunSqliteStorage.d.ts.map +1 -0
  65. package/dist/DrizzleBunSqliteStorage.js +11 -0
  66. package/dist/DrizzleBunSqliteStorage.js.map +1 -0
  67. package/dist/DrizzleD1SqliteStorage.d.ts +4 -4
  68. package/dist/DrizzleD1SqliteStorage.d.ts.map +1 -1
  69. package/dist/DrizzleD1SqliteStorage.js +5 -5
  70. package/dist/DrizzleD1SqliteStorage.js.map +1 -1
  71. package/dist/DrizzleDurableObjectSqliteStorage.d.ts +19 -0
  72. package/dist/DrizzleDurableObjectSqliteStorage.d.ts.map +1 -0
  73. package/dist/DrizzleDurableObjectSqliteStorage.js +14 -0
  74. package/dist/DrizzleDurableObjectSqliteStorage.js.map +1 -0
  75. package/dist/DrizzleEffectSqliteStorage.d.ts +13 -4
  76. package/dist/DrizzleEffectSqliteStorage.d.ts.map +1 -1
  77. package/dist/DrizzleEffectSqliteStorage.js +71 -4
  78. package/dist/DrizzleEffectSqliteStorage.js.map +1 -1
  79. package/dist/DrizzleNodeSqliteStorage.d.ts +18 -0
  80. package/dist/DrizzleNodeSqliteStorage.d.ts.map +1 -0
  81. package/dist/DrizzleNodeSqliteStorage.js +11 -0
  82. package/dist/DrizzleNodeSqliteStorage.js.map +1 -0
  83. package/dist/DrizzleWasmSqliteStorage.d.ts +23 -0
  84. package/dist/DrizzleWasmSqliteStorage.d.ts.map +1 -0
  85. package/dist/DrizzleWasmSqliteStorage.js +15 -0
  86. package/dist/DrizzleWasmSqliteStorage.js.map +1 -0
  87. package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts +34 -0
  88. package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts.map +1 -0
  89. package/dist/EffectQbPostgresDelegatedAccessStorage.js +499 -0
  90. package/dist/EffectQbPostgresDelegatedAccessStorage.js.map +1 -0
  91. package/dist/EffectQbPostgresStorage.d.ts +171 -0
  92. package/dist/EffectQbPostgresStorage.d.ts.map +1 -0
  93. package/dist/EffectQbPostgresStorage.js +4280 -0
  94. package/dist/EffectQbPostgresStorage.js.map +1 -0
  95. package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts +112 -0
  96. package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts.map +1 -0
  97. package/dist/EffectQbSqliteDelegatedAccessStorage.js +602 -0
  98. package/dist/EffectQbSqliteDelegatedAccessStorage.js.map +1 -0
  99. package/dist/EffectQbSqliteStorage.d.ts +181 -23
  100. package/dist/EffectQbSqliteStorage.d.ts.map +1 -1
  101. package/dist/EffectQbSqliteStorage.js +1728 -135
  102. package/dist/EffectQbSqliteStorage.js.map +1 -1
  103. package/dist/EmailAuth.d.ts +65 -0
  104. package/dist/EmailAuth.d.ts.map +1 -0
  105. package/dist/EmailAuth.js +171 -0
  106. package/dist/EmailAuth.js.map +1 -0
  107. package/dist/EmailIdentityAuth.d.ts +30 -0
  108. package/dist/EmailIdentityAuth.d.ts.map +1 -0
  109. package/dist/EmailIdentityAuth.js +142 -0
  110. package/dist/EmailIdentityAuth.js.map +1 -0
  111. package/dist/EmailOtp.d.ts +10 -11
  112. package/dist/EmailOtp.d.ts.map +1 -1
  113. package/dist/EmailOtp.js +44 -81
  114. package/dist/EmailOtp.js.map +1 -1
  115. package/dist/EmailRisk.d.ts +48 -0
  116. package/dist/EmailRisk.d.ts.map +1 -0
  117. package/dist/EmailRisk.js +33 -0
  118. package/dist/EmailRisk.js.map +1 -0
  119. package/dist/EmailVerification.d.ts +10 -16
  120. package/dist/EmailVerification.d.ts.map +1 -1
  121. package/dist/EmailVerification.js +85 -42
  122. package/dist/EmailVerification.js.map +1 -1
  123. package/dist/Guard.d.ts +11 -0
  124. package/dist/Guard.d.ts.map +1 -0
  125. package/dist/Guard.js +11 -0
  126. package/dist/Guard.js.map +1 -0
  127. package/dist/HibpPwnedPasswords.d.ts +56 -0
  128. package/dist/HibpPwnedPasswords.d.ts.map +1 -0
  129. package/dist/HibpPwnedPasswords.js +232 -0
  130. package/dist/HibpPwnedPasswords.js.map +1 -0
  131. package/dist/HttpApi/AdminPermissionDefinition.d.ts +4 -0
  132. package/dist/HttpApi/AdminPermissionDefinition.d.ts.map +1 -0
  133. package/dist/HttpApi/AdminPermissionDefinition.js +4 -0
  134. package/dist/HttpApi/AdminPermissionDefinition.js.map +1 -0
  135. package/dist/HttpApi/AdminSecurityTimeline.d.ts +4 -0
  136. package/dist/HttpApi/AdminSecurityTimeline.d.ts.map +1 -0
  137. package/dist/HttpApi/AdminSecurityTimeline.js +4 -0
  138. package/dist/HttpApi/AdminSecurityTimeline.js.map +1 -0
  139. package/dist/HttpApi/AdminSession.d.ts +4 -0
  140. package/dist/HttpApi/AdminSession.d.ts.map +1 -0
  141. package/dist/HttpApi/AdminSession.js +4 -0
  142. package/dist/HttpApi/AdminSession.js.map +1 -0
  143. package/dist/HttpApi/AdminTrustedDevice.d.ts +4 -0
  144. package/dist/HttpApi/AdminTrustedDevice.d.ts.map +1 -0
  145. package/dist/HttpApi/AdminTrustedDevice.js +4 -0
  146. package/dist/HttpApi/AdminTrustedDevice.js.map +1 -0
  147. package/dist/HttpApi/Api.d.ts +879 -877
  148. package/dist/HttpApi/Api.d.ts.map +1 -1
  149. package/dist/HttpApi/Api.js +2160 -896
  150. package/dist/HttpApi/Api.js.map +1 -1
  151. package/dist/HttpApi/ApiKey.d.ts +4 -0
  152. package/dist/HttpApi/ApiKey.d.ts.map +1 -0
  153. package/dist/HttpApi/ApiKey.js +4 -0
  154. package/dist/HttpApi/ApiKey.js.map +1 -0
  155. package/dist/HttpApi/Audit.d.ts +6 -0
  156. package/dist/HttpApi/Audit.d.ts.map +1 -0
  157. package/dist/HttpApi/Audit.js +10 -0
  158. package/dist/HttpApi/Audit.js.map +1 -0
  159. package/dist/HttpApi/ClientApi.d.ts +917 -0
  160. package/dist/HttpApi/ClientApi.d.ts.map +1 -0
  161. package/dist/HttpApi/ClientApi.js +101 -0
  162. package/dist/HttpApi/ClientApi.js.map +1 -0
  163. package/dist/HttpApi/EmailAuth.d.ts +6 -0
  164. package/dist/HttpApi/EmailAuth.d.ts.map +1 -0
  165. package/dist/HttpApi/EmailAuth.js +6 -0
  166. package/dist/HttpApi/EmailAuth.js.map +1 -0
  167. package/dist/HttpApi/EmailGuards.d.ts +115 -0
  168. package/dist/HttpApi/EmailGuards.d.ts.map +1 -0
  169. package/dist/HttpApi/EmailGuards.js +191 -0
  170. package/dist/HttpApi/EmailGuards.js.map +1 -0
  171. package/dist/HttpApi/EmailOtp.d.ts +6 -0
  172. package/dist/HttpApi/EmailOtp.d.ts.map +1 -0
  173. package/dist/HttpApi/EmailOtp.js +6 -0
  174. package/dist/HttpApi/EmailOtp.js.map +1 -0
  175. package/dist/HttpApi/EmailVerification.d.ts +6 -0
  176. package/dist/HttpApi/EmailVerification.d.ts.map +1 -0
  177. package/dist/HttpApi/EmailVerification.js +6 -0
  178. package/dist/HttpApi/EmailVerification.js.map +1 -0
  179. package/dist/HttpApi/Endpoints.d.ts +629 -301
  180. package/dist/HttpApi/Endpoints.d.ts.map +1 -1
  181. package/dist/HttpApi/Endpoints.js +178 -120
  182. package/dist/HttpApi/Endpoints.js.map +1 -1
  183. package/dist/HttpApi/Errors.d.ts +26 -7
  184. package/dist/HttpApi/Errors.d.ts.map +1 -1
  185. package/dist/HttpApi/Errors.js +26 -4
  186. package/dist/HttpApi/Errors.js.map +1 -1
  187. package/dist/HttpApi/Identity.d.ts +6 -0
  188. package/dist/HttpApi/Identity.d.ts.map +1 -0
  189. package/dist/HttpApi/Identity.js +6 -0
  190. package/dist/HttpApi/Identity.js.map +1 -0
  191. package/dist/HttpApi/IdentityGuards.d.ts +31 -0
  192. package/dist/HttpApi/IdentityGuards.d.ts.map +1 -0
  193. package/dist/HttpApi/IdentityGuards.js +33 -0
  194. package/dist/HttpApi/IdentityGuards.js.map +1 -0
  195. package/dist/HttpApi/Jwt.d.ts +4 -0
  196. package/dist/HttpApi/Jwt.d.ts.map +1 -0
  197. package/dist/HttpApi/Jwt.js +4 -0
  198. package/dist/HttpApi/Jwt.js.map +1 -0
  199. package/dist/HttpApi/JwtDiscovery.d.ts +4 -0
  200. package/dist/HttpApi/JwtDiscovery.d.ts.map +1 -0
  201. package/dist/HttpApi/JwtDiscovery.js +4 -0
  202. package/dist/HttpApi/JwtDiscovery.js.map +1 -0
  203. package/dist/HttpApi/LoginApproval.d.ts +5 -0
  204. package/dist/HttpApi/LoginApproval.d.ts.map +1 -0
  205. package/dist/HttpApi/LoginApproval.js +5 -0
  206. package/dist/HttpApi/LoginApproval.js.map +1 -0
  207. package/dist/HttpApi/LoginNotification.d.ts +5 -0
  208. package/dist/HttpApi/LoginNotification.d.ts.map +1 -0
  209. package/dist/HttpApi/LoginNotification.js +5 -0
  210. package/dist/HttpApi/LoginNotification.js.map +1 -0
  211. package/dist/HttpApi/MagicLink.d.ts +6 -0
  212. package/dist/HttpApi/MagicLink.d.ts.map +1 -0
  213. package/dist/HttpApi/MagicLink.js +6 -0
  214. package/dist/HttpApi/MagicLink.js.map +1 -0
  215. package/dist/HttpApi/Mfa.d.ts +5 -0
  216. package/dist/HttpApi/Mfa.d.ts.map +1 -0
  217. package/dist/HttpApi/Mfa.js +5 -0
  218. package/dist/HttpApi/Mfa.js.map +1 -0
  219. package/dist/HttpApi/Middleware.d.ts +14 -0
  220. package/dist/HttpApi/Middleware.d.ts.map +1 -0
  221. package/dist/HttpApi/Middleware.js +5 -0
  222. package/dist/HttpApi/Middleware.js.map +1 -0
  223. package/dist/HttpApi/OAuth.d.ts +4 -0
  224. package/dist/HttpApi/OAuth.d.ts.map +1 -0
  225. package/dist/HttpApi/OAuth.js +4 -0
  226. package/dist/HttpApi/OAuth.js.map +1 -0
  227. package/dist/HttpApi/OAuthProviderAuthorization.d.ts +4 -0
  228. package/dist/HttpApi/OAuthProviderAuthorization.d.ts.map +1 -0
  229. package/dist/HttpApi/OAuthProviderAuthorization.js +4 -0
  230. package/dist/HttpApi/OAuthProviderAuthorization.js.map +1 -0
  231. package/dist/HttpApi/OAuthToken.d.ts +4 -0
  232. package/dist/HttpApi/OAuthToken.d.ts.map +1 -0
  233. package/dist/HttpApi/OAuthToken.js +4 -0
  234. package/dist/HttpApi/OAuthToken.js.map +1 -0
  235. package/dist/HttpApi/OidcDiscovery.d.ts +4 -0
  236. package/dist/HttpApi/OidcDiscovery.d.ts.map +1 -0
  237. package/dist/HttpApi/OidcDiscovery.js +4 -0
  238. package/dist/HttpApi/OidcDiscovery.js.map +1 -0
  239. package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts +28 -0
  240. package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts.map +1 -0
  241. package/dist/HttpApi/Operations/AdminPermissionDefinition.js +5 -0
  242. package/dist/HttpApi/Operations/AdminPermissionDefinition.js.map +1 -0
  243. package/dist/HttpApi/Operations/AdminSession.d.ts +16 -0
  244. package/dist/HttpApi/Operations/AdminSession.d.ts.map +1 -0
  245. package/dist/HttpApi/Operations/AdminSession.js +5 -0
  246. package/dist/HttpApi/Operations/AdminSession.js.map +1 -0
  247. package/dist/HttpApi/Operations/ApiKey.d.ts +16 -0
  248. package/dist/HttpApi/Operations/ApiKey.d.ts.map +1 -0
  249. package/dist/HttpApi/Operations/ApiKey.js +5 -0
  250. package/dist/HttpApi/Operations/ApiKey.js.map +1 -0
  251. package/dist/HttpApi/Operations/Discovery.d.ts +19 -0
  252. package/dist/HttpApi/Operations/Discovery.d.ts.map +1 -0
  253. package/dist/HttpApi/Operations/Discovery.js +7 -0
  254. package/dist/HttpApi/Operations/Discovery.js.map +1 -0
  255. package/dist/HttpApi/Operations/EmailAuth.d.ts +12 -0
  256. package/dist/HttpApi/Operations/EmailAuth.d.ts.map +1 -0
  257. package/dist/HttpApi/Operations/EmailAuth.js +5 -0
  258. package/dist/HttpApi/Operations/EmailAuth.js.map +1 -0
  259. package/dist/HttpApi/Operations/EmailOtp.d.ts +14 -0
  260. package/dist/HttpApi/Operations/EmailOtp.d.ts.map +1 -0
  261. package/dist/HttpApi/Operations/EmailOtp.js +5 -0
  262. package/dist/HttpApi/Operations/EmailOtp.js.map +1 -0
  263. package/dist/HttpApi/Operations/EmailVerification.d.ts +14 -0
  264. package/dist/HttpApi/Operations/EmailVerification.d.ts.map +1 -0
  265. package/dist/HttpApi/Operations/EmailVerification.js +5 -0
  266. package/dist/HttpApi/Operations/EmailVerification.js.map +1 -0
  267. package/dist/HttpApi/Operations/HttpOperation.d.ts +4 -0
  268. package/dist/HttpApi/Operations/HttpOperation.d.ts.map +1 -0
  269. package/dist/HttpApi/Operations/HttpOperation.js +2 -0
  270. package/dist/HttpApi/Operations/HttpOperation.js.map +1 -0
  271. package/dist/HttpApi/Operations/Identity.d.ts +22 -0
  272. package/dist/HttpApi/Operations/Identity.d.ts.map +1 -0
  273. package/dist/HttpApi/Operations/Identity.js +5 -0
  274. package/dist/HttpApi/Operations/Identity.js.map +1 -0
  275. package/dist/HttpApi/Operations/Jwt.d.ts +14 -0
  276. package/dist/HttpApi/Operations/Jwt.d.ts.map +1 -0
  277. package/dist/HttpApi/Operations/Jwt.js +5 -0
  278. package/dist/HttpApi/Operations/Jwt.js.map +1 -0
  279. package/dist/HttpApi/Operations/LoginApproval.d.ts +16 -0
  280. package/dist/HttpApi/Operations/LoginApproval.d.ts.map +1 -0
  281. package/dist/HttpApi/Operations/LoginApproval.js +5 -0
  282. package/dist/HttpApi/Operations/LoginApproval.js.map +1 -0
  283. package/dist/HttpApi/Operations/MagicLink.d.ts +14 -0
  284. package/dist/HttpApi/Operations/MagicLink.d.ts.map +1 -0
  285. package/dist/HttpApi/Operations/MagicLink.js +5 -0
  286. package/dist/HttpApi/Operations/MagicLink.js.map +1 -0
  287. package/dist/HttpApi/Operations/Mfa.d.ts +24 -0
  288. package/dist/HttpApi/Operations/Mfa.d.ts.map +1 -0
  289. package/dist/HttpApi/Operations/Mfa.js +5 -0
  290. package/dist/HttpApi/Operations/Mfa.js.map +1 -0
  291. package/dist/HttpApi/Operations/OAuth.d.ts +20 -0
  292. package/dist/HttpApi/Operations/OAuth.d.ts.map +1 -0
  293. package/dist/HttpApi/Operations/OAuth.js +5 -0
  294. package/dist/HttpApi/Operations/OAuth.js.map +1 -0
  295. package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts +12 -0
  296. package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts.map +1 -0
  297. package/dist/HttpApi/Operations/OAuthProviderAuthorization.js +5 -0
  298. package/dist/HttpApi/Operations/OAuthProviderAuthorization.js.map +1 -0
  299. package/dist/HttpApi/Operations/OAuthToken.d.ts +16 -0
  300. package/dist/HttpApi/Operations/OAuthToken.d.ts.map +1 -0
  301. package/dist/HttpApi/Operations/OAuthToken.js +5 -0
  302. package/dist/HttpApi/Operations/OAuthToken.js.map +1 -0
  303. package/dist/HttpApi/Operations/Passkey.d.ts +22 -0
  304. package/dist/HttpApi/Operations/Passkey.d.ts.map +1 -0
  305. package/dist/HttpApi/Operations/Passkey.js +5 -0
  306. package/dist/HttpApi/Operations/Passkey.js.map +1 -0
  307. package/dist/HttpApi/Operations/Password.d.ts +22 -0
  308. package/dist/HttpApi/Operations/Password.d.ts.map +1 -0
  309. package/dist/HttpApi/Operations/Password.js +5 -0
  310. package/dist/HttpApi/Operations/Password.js.map +1 -0
  311. package/dist/HttpApi/Operations/RecoveryCodes.d.ts +20 -0
  312. package/dist/HttpApi/Operations/RecoveryCodes.d.ts.map +1 -0
  313. package/dist/HttpApi/Operations/RecoveryCodes.js +5 -0
  314. package/dist/HttpApi/Operations/RecoveryCodes.js.map +1 -0
  315. package/dist/HttpApi/Operations/RefreshToken.d.ts +12 -0
  316. package/dist/HttpApi/Operations/RefreshToken.d.ts.map +1 -0
  317. package/dist/HttpApi/Operations/RefreshToken.js +5 -0
  318. package/dist/HttpApi/Operations/RefreshToken.js.map +1 -0
  319. package/dist/HttpApi/Operations/Security.d.ts +12 -0
  320. package/dist/HttpApi/Operations/Security.d.ts.map +1 -0
  321. package/dist/HttpApi/Operations/Security.js +5 -0
  322. package/dist/HttpApi/Operations/Security.js.map +1 -0
  323. package/dist/HttpApi/Operations/SecurityTimeline.d.ts +19 -0
  324. package/dist/HttpApi/Operations/SecurityTimeline.d.ts.map +1 -0
  325. package/dist/HttpApi/Operations/SecurityTimeline.js +7 -0
  326. package/dist/HttpApi/Operations/SecurityTimeline.js.map +1 -0
  327. package/dist/HttpApi/Operations/Session.d.ts +22 -0
  328. package/dist/HttpApi/Operations/Session.d.ts.map +1 -0
  329. package/dist/HttpApi/Operations/Session.js +5 -0
  330. package/dist/HttpApi/Operations/Session.js.map +1 -0
  331. package/dist/HttpApi/Operations/StepUp.d.ts +22 -0
  332. package/dist/HttpApi/Operations/StepUp.d.ts.map +1 -0
  333. package/dist/HttpApi/Operations/StepUp.js +5 -0
  334. package/dist/HttpApi/Operations/StepUp.js.map +1 -0
  335. package/dist/HttpApi/Operations/Totp.d.ts +20 -0
  336. package/dist/HttpApi/Operations/Totp.d.ts.map +1 -0
  337. package/dist/HttpApi/Operations/Totp.js +5 -0
  338. package/dist/HttpApi/Operations/Totp.js.map +1 -0
  339. package/dist/HttpApi/Operations/TrustedDevice.d.ts +23 -0
  340. package/dist/HttpApi/Operations/TrustedDevice.d.ts.map +1 -0
  341. package/dist/HttpApi/Operations/TrustedDevice.js +7 -0
  342. package/dist/HttpApi/Operations/TrustedDevice.js.map +1 -0
  343. package/dist/HttpApi/Operations/index.d.ts +27 -0
  344. package/dist/HttpApi/Operations/index.d.ts.map +1 -0
  345. package/dist/HttpApi/Operations/index.js +27 -0
  346. package/dist/HttpApi/Operations/index.js.map +1 -0
  347. package/dist/HttpApi/Passkey.d.ts +5 -0
  348. package/dist/HttpApi/Passkey.d.ts.map +1 -0
  349. package/dist/HttpApi/Passkey.js +5 -0
  350. package/dist/HttpApi/Passkey.js.map +1 -0
  351. package/dist/HttpApi/Password.d.ts +220 -0
  352. package/dist/HttpApi/Password.d.ts.map +1 -0
  353. package/dist/HttpApi/Password.js +237 -0
  354. package/dist/HttpApi/Password.js.map +1 -0
  355. package/dist/HttpApi/PasswordContract.d.ts +307 -0
  356. package/dist/HttpApi/PasswordContract.d.ts.map +1 -0
  357. package/dist/HttpApi/PasswordContract.js +63 -0
  358. package/dist/HttpApi/PasswordContract.js.map +1 -0
  359. package/dist/HttpApi/PasswordGuards.d.ts +82 -0
  360. package/dist/HttpApi/PasswordGuards.d.ts.map +1 -0
  361. package/dist/HttpApi/PasswordGuards.js +179 -0
  362. package/dist/HttpApi/PasswordGuards.js.map +1 -0
  363. package/dist/HttpApi/RecoveryCodes.d.ts +5 -0
  364. package/dist/HttpApi/RecoveryCodes.d.ts.map +1 -0
  365. package/dist/HttpApi/RecoveryCodes.js +5 -0
  366. package/dist/HttpApi/RecoveryCodes.js.map +1 -0
  367. package/dist/HttpApi/RefreshToken.d.ts +4 -0
  368. package/dist/HttpApi/RefreshToken.d.ts.map +1 -0
  369. package/dist/HttpApi/RefreshToken.js +4 -0
  370. package/dist/HttpApi/RefreshToken.js.map +1 -0
  371. package/dist/HttpApi/RequestGuards.d.ts +42 -0
  372. package/dist/HttpApi/RequestGuards.d.ts.map +1 -0
  373. package/dist/HttpApi/RequestGuards.js +194 -0
  374. package/dist/HttpApi/RequestGuards.js.map +1 -0
  375. package/dist/HttpApi/Schemas.d.ts +361 -84
  376. package/dist/HttpApi/Schemas.d.ts.map +1 -1
  377. package/dist/HttpApi/Schemas.js +190 -27
  378. package/dist/HttpApi/Schemas.js.map +1 -1
  379. package/dist/HttpApi/Security.d.ts +12 -93
  380. package/dist/HttpApi/Security.d.ts.map +1 -1
  381. package/dist/HttpApi/Security.js +65 -356
  382. package/dist/HttpApi/Security.js.map +1 -1
  383. package/dist/HttpApi/SecurityTimeline.d.ts +4 -0
  384. package/dist/HttpApi/SecurityTimeline.d.ts.map +1 -0
  385. package/dist/HttpApi/SecurityTimeline.js +4 -0
  386. package/dist/HttpApi/SecurityTimeline.js.map +1 -0
  387. package/dist/HttpApi/Session.d.ts +5 -0
  388. package/dist/HttpApi/Session.d.ts.map +1 -0
  389. package/dist/HttpApi/Session.js +5 -0
  390. package/dist/HttpApi/Session.js.map +1 -0
  391. package/dist/HttpApi/SessionGuards.d.ts +15 -0
  392. package/dist/HttpApi/SessionGuards.d.ts.map +1 -0
  393. package/dist/HttpApi/SessionGuards.js +37 -0
  394. package/dist/HttpApi/SessionGuards.js.map +1 -0
  395. package/dist/HttpApi/StepUp.d.ts +5 -0
  396. package/dist/HttpApi/StepUp.d.ts.map +1 -0
  397. package/dist/HttpApi/StepUp.js +5 -0
  398. package/dist/HttpApi/StepUp.js.map +1 -0
  399. package/dist/HttpApi/Totp.d.ts +5 -0
  400. package/dist/HttpApi/Totp.d.ts.map +1 -0
  401. package/dist/HttpApi/Totp.js +5 -0
  402. package/dist/HttpApi/Totp.js.map +1 -0
  403. package/dist/HttpApi/Transport.d.ts +4 -6
  404. package/dist/HttpApi/Transport.d.ts.map +1 -1
  405. package/dist/HttpApi/Transport.js +62 -36
  406. package/dist/HttpApi/Transport.js.map +1 -1
  407. package/dist/HttpApi/TrustedDevice.d.ts +4 -0
  408. package/dist/HttpApi/TrustedDevice.d.ts.map +1 -0
  409. package/dist/HttpApi/TrustedDevice.js +4 -0
  410. package/dist/HttpApi/TrustedDevice.js.map +1 -0
  411. package/dist/HttpApi/index.d.ts +9 -3
  412. package/dist/HttpApi/index.d.ts.map +1 -1
  413. package/dist/HttpApi/index.js +8 -2
  414. package/dist/HttpApi/index.js.map +1 -1
  415. package/dist/Identity.d.ts +138 -0
  416. package/dist/Identity.d.ts.map +1 -0
  417. package/dist/Identity.js +105 -0
  418. package/dist/Identity.js.map +1 -0
  419. package/dist/IdentityManagement.d.ts +189 -0
  420. package/dist/IdentityManagement.d.ts.map +1 -0
  421. package/dist/IdentityManagement.js +317 -0
  422. package/dist/IdentityManagement.js.map +1 -0
  423. package/dist/IncidentAction.d.ts +1 -4
  424. package/dist/IncidentAction.d.ts.map +1 -1
  425. package/dist/IncidentAction.js +15 -9
  426. package/dist/IncidentAction.js.map +1 -1
  427. package/dist/Internal.d.ts +2 -0
  428. package/dist/Internal.d.ts.map +1 -1
  429. package/dist/Internal.js +30 -0
  430. package/dist/Internal.js.map +1 -1
  431. package/dist/Invitation.d.ts +362 -0
  432. package/dist/Invitation.d.ts.map +1 -0
  433. package/dist/Invitation.js +633 -0
  434. package/dist/Invitation.js.map +1 -0
  435. package/dist/IpQualityScore.d.ts +38 -0
  436. package/dist/IpQualityScore.d.ts.map +1 -0
  437. package/dist/IpQualityScore.js +215 -0
  438. package/dist/IpQualityScore.js.map +1 -0
  439. package/dist/Jwt.d.ts +8 -29
  440. package/dist/Jwt.d.ts.map +1 -1
  441. package/dist/Jwt.js +67 -56
  442. package/dist/Jwt.js.map +1 -1
  443. package/dist/LoginApproval.d.ts +15 -30
  444. package/dist/LoginApproval.d.ts.map +1 -1
  445. package/dist/LoginApproval.js +47 -41
  446. package/dist/LoginApproval.js.map +1 -1
  447. package/dist/LoginNotification.d.ts +7 -11
  448. package/dist/LoginNotification.d.ts.map +1 -1
  449. package/dist/LoginNotification.js +30 -17
  450. package/dist/LoginNotification.js.map +1 -1
  451. package/dist/LoginRisk.d.ts +11 -13
  452. package/dist/LoginRisk.d.ts.map +1 -1
  453. package/dist/LoginRisk.js +66 -26
  454. package/dist/LoginRisk.js.map +1 -1
  455. package/dist/LoginRiskEnrichment.d.ts +145 -0
  456. package/dist/LoginRiskEnrichment.d.ts.map +1 -0
  457. package/dist/LoginRiskEnrichment.js +220 -0
  458. package/dist/LoginRiskEnrichment.js.map +1 -0
  459. package/dist/MagicLink.d.ts +9 -8
  460. package/dist/MagicLink.d.ts.map +1 -1
  461. package/dist/MagicLink.js +40 -73
  462. package/dist/MagicLink.js.map +1 -1
  463. package/dist/Mailer.d.ts +19 -12
  464. package/dist/Mailer.d.ts.map +1 -1
  465. package/dist/Mailer.js +10 -12
  466. package/dist/Mailer.js.map +1 -1
  467. package/dist/OAuth.d.ts +93 -96
  468. package/dist/OAuth.d.ts.map +1 -1
  469. package/dist/OAuth.js +404 -217
  470. package/dist/OAuth.js.map +1 -1
  471. package/dist/Passkey.d.ts +15 -17
  472. package/dist/Passkey.d.ts.map +1 -1
  473. package/dist/Passkey.js +86 -39
  474. package/dist/Passkey.js.map +1 -1
  475. package/dist/PasskeyBrowser.d.ts +39 -0
  476. package/dist/PasskeyBrowser.d.ts.map +1 -0
  477. package/dist/PasskeyBrowser.js +206 -0
  478. package/dist/PasskeyBrowser.js.map +1 -0
  479. package/dist/PasskeySimpleWebAuthn.d.ts.map +1 -1
  480. package/dist/PasskeySimpleWebAuthn.js +19 -7
  481. package/dist/PasskeySimpleWebAuthn.js.map +1 -1
  482. package/dist/Password.d.ts +71 -37
  483. package/dist/Password.d.ts.map +1 -1
  484. package/dist/Password.js +295 -81
  485. package/dist/Password.js.map +1 -1
  486. package/dist/PasswordRisk.d.ts +63 -0
  487. package/dist/PasswordRisk.d.ts.map +1 -0
  488. package/dist/PasswordRisk.js +37 -0
  489. package/dist/PasswordRisk.js.map +1 -0
  490. package/dist/Permission.d.ts +308 -0
  491. package/dist/Permission.d.ts.map +1 -0
  492. package/dist/Permission.js +827 -0
  493. package/dist/Permission.js.map +1 -0
  494. package/dist/Policy.d.ts +31 -18
  495. package/dist/Policy.d.ts.map +1 -1
  496. package/dist/Policy.js +58 -14
  497. package/dist/Policy.js.map +1 -1
  498. package/dist/PostgresDelegatedAccessStorageMigrations.d.ts +7 -0
  499. package/dist/PostgresDelegatedAccessStorageMigrations.d.ts.map +1 -0
  500. package/dist/PostgresDelegatedAccessStorageMigrations.js +119 -0
  501. package/dist/PostgresDelegatedAccessStorageMigrations.js.map +1 -0
  502. package/dist/PostgresStorageMigrations.d.ts +15 -0
  503. package/dist/PostgresStorageMigrations.d.ts.map +1 -0
  504. package/dist/PostgresStorageMigrations.js +620 -0
  505. package/dist/PostgresStorageMigrations.js.map +1 -0
  506. package/dist/Privacy.d.ts +0 -3
  507. package/dist/Privacy.d.ts.map +1 -1
  508. package/dist/Privacy.js +2 -5
  509. package/dist/Privacy.js.map +1 -1
  510. package/dist/RateLimiter.d.ts +0 -3
  511. package/dist/RateLimiter.d.ts.map +1 -1
  512. package/dist/RateLimiter.js +1 -4
  513. package/dist/RateLimiter.js.map +1 -1
  514. package/dist/RecoveryCode.d.ts +83 -11
  515. package/dist/RecoveryCode.d.ts.map +1 -1
  516. package/dist/RecoveryCode.js +273 -75
  517. package/dist/RecoveryCode.js.map +1 -1
  518. package/dist/RecoveryPolicy.d.ts +81 -0
  519. package/dist/RecoveryPolicy.d.ts.map +1 -0
  520. package/dist/RecoveryPolicy.js +119 -0
  521. package/dist/RecoveryPolicy.js.map +1 -0
  522. package/dist/RefreshToken.d.ts +0 -9
  523. package/dist/RefreshToken.d.ts.map +1 -1
  524. package/dist/RefreshToken.js +31 -22
  525. package/dist/RefreshToken.js.map +1 -1
  526. package/dist/SecurityTimeline.d.ts +1 -4
  527. package/dist/SecurityTimeline.d.ts.map +1 -1
  528. package/dist/SecurityTimeline.js +110 -17
  529. package/dist/SecurityTimeline.js.map +1 -1
  530. package/dist/Sessions.d.ts +124 -29
  531. package/dist/Sessions.d.ts.map +1 -1
  532. package/dist/Sessions.js +626 -94
  533. package/dist/Sessions.js.map +1 -1
  534. package/dist/StepUp.d.ts +132 -11
  535. package/dist/StepUp.d.ts.map +1 -1
  536. package/dist/StepUp.js +387 -19
  537. package/dist/StepUp.js.map +1 -1
  538. package/dist/Storage.d.ts +89 -23
  539. package/dist/Storage.d.ts.map +1 -1
  540. package/dist/Storage.js +10 -12
  541. package/dist/Storage.js.map +1 -1
  542. package/dist/StorageMigrations.d.ts +6 -1
  543. package/dist/StorageMigrations.d.ts.map +1 -1
  544. package/dist/StorageMigrations.js +224 -0
  545. package/dist/StorageMigrations.js.map +1 -1
  546. package/dist/StorageSchemaGenerator.d.ts +486 -0
  547. package/dist/StorageSchemaGenerator.d.ts.map +1 -0
  548. package/dist/StorageSchemaGenerator.js +1022 -0
  549. package/dist/StorageSchemaGenerator.js.map +1 -0
  550. package/dist/StrongFactor.d.ts +64 -0
  551. package/dist/StrongFactor.d.ts.map +1 -0
  552. package/dist/StrongFactor.js +100 -0
  553. package/dist/StrongFactor.js.map +1 -0
  554. package/dist/Testing.js +2 -2
  555. package/dist/Testing.js.map +1 -1
  556. package/dist/Totp.d.ts +88 -13
  557. package/dist/Totp.d.ts.map +1 -1
  558. package/dist/Totp.js +192 -34
  559. package/dist/Totp.js.map +1 -1
  560. package/dist/TrustedDevice.d.ts +0 -9
  561. package/dist/TrustedDevice.d.ts.map +1 -1
  562. package/dist/TrustedDevice.js +15 -17
  563. package/dist/TrustedDevice.js.map +1 -1
  564. package/dist/WaitUntil.d.ts +0 -3
  565. package/dist/WaitUntil.d.ts.map +1 -1
  566. package/dist/WaitUntil.js +1 -4
  567. package/dist/WaitUntil.js.map +1 -1
  568. package/dist/Webhook.d.ts +42 -12
  569. package/dist/Webhook.d.ts.map +1 -1
  570. package/dist/Webhook.js +165 -26
  571. package/dist/Webhook.js.map +1 -1
  572. package/dist/alchemy/cloudflare/Email.d.ts.map +1 -1
  573. package/dist/alchemy/cloudflare/Email.js +9 -4
  574. package/dist/alchemy/cloudflare/Email.js.map +1 -1
  575. package/dist/cloudflare/Email.js +1 -1
  576. package/dist/cloudflare/Email.js.map +1 -1
  577. package/dist/cloudflare/RequestMetadata.d.ts +49 -0
  578. package/dist/cloudflare/RequestMetadata.d.ts.map +1 -0
  579. package/dist/cloudflare/RequestMetadata.js +71 -0
  580. package/dist/cloudflare/RequestMetadata.js.map +1 -0
  581. package/dist/index.d.ts +0 -35
  582. package/dist/index.d.ts.map +1 -1
  583. package/dist/index.js +0 -35
  584. package/dist/index.js.map +1 -1
  585. package/dist/internal/AuthFlowFinalizer.d.ts +31 -0
  586. package/dist/internal/AuthFlowFinalizer.d.ts.map +1 -0
  587. package/dist/internal/AuthFlowFinalizer.js +182 -0
  588. package/dist/internal/AuthFlowFinalizer.js.map +1 -0
  589. package/migrations/0001_auth_storage.sql +1 -0
  590. package/migrations/0006_auth_totp_factor.sql +1 -0
  591. package/migrations/0024_auth_permission.sql +39 -0
  592. package/migrations/0025_auth_permission_definition.sql +19 -0
  593. package/migrations/0026_auth_user_identity.sql +59 -0
  594. package/migrations/0027_auth_audit_log_storage_order.sql +46 -0
  595. package/migrations/0028_auth_oauth_client_secret_key.sql +39 -0
  596. package/migrations/delegated-access/0001_auth_delegated_access.sql +152 -0
  597. package/migrations/postgres/0001_auth_core.sql +77 -0
  598. package/migrations/postgres/0002_auth_security_oauth.sql +65 -0
  599. package/migrations/postgres/0003_auth_credentials_tokens.sql +43 -0
  600. package/migrations/postgres/0004_auth_security_history.sql +103 -0
  601. package/migrations/postgres/0005_auth_webhooks.sql +29 -0
  602. package/migrations/postgres/0006_auth_domain_timeline.sql +50 -0
  603. package/migrations/postgres/0007_auth_oauth_clients.sql +85 -0
  604. package/migrations/postgres/0008_auth_oauth_tokens.sql +63 -0
  605. package/migrations/postgres/0009_auth_permissions.sql +66 -0
  606. package/migrations/postgres/delegated-access/0001_auth_delegated_access.sql +112 -0
  607. package/package.json +301 -2
package/dist/StepUp.js CHANGED
@@ -1,9 +1,89 @@
1
- import { Data, Duration, Effect } from "effect";
1
+ import { Context, Data, Duration, Effect, Layer, Option } from "effect";
2
+ import { CustomEvidencePolicies, deriveAssuranceResult, emptyCustomEvidencePolicyRegistry, latestAssuranceAuthenticationEventResult, latestFactorAuthenticationEventResult, latestMethodAuthenticationEventResult, } from "./Assurance.js";
2
3
  import { currentUnixMillis } from "./Internal.js";
3
- import { AuthzError } from "./Policy.js";
4
+ import { PasskeyCredentialManagement } from "./Passkey.js";
5
+ import { AuthorizationError } from "./Policy.js";
6
+ import { RecoveryCodeManagement } from "./RecoveryCode.js";
4
7
  import { CurrentSession } from "./Sessions.js";
8
+ import { CredentialStore } from "./Storage.js";
9
+ import { TotpFactorManagement } from "./Totp.js";
10
+ export class StepUpCapabilityError extends Data.TaggedError("StepUpCapabilityError") {
11
+ }
12
+ export class StepUpCapabilities extends Context.Service()("auth/StepUpCapabilities") {
13
+ }
5
14
  export class StepUpRequired extends Data.TaggedError("StepUpRequired") {
6
15
  }
16
+ export class StepUpDenied extends Data.TaggedError("StepUpDenied") {
17
+ }
18
+ const stepUpCapabilityError = (message, cause) => new StepUpCapabilityError({
19
+ message,
20
+ ...(cause === undefined ? {} : { cause }),
21
+ });
22
+ const uniqueCapabilities = (capabilities) => [...new Set(capabilities)];
23
+ const capabilityArray = (capability) => typeof capability === "string" ? [capability] : capability;
24
+ export const makeStepUpCapabilities = (dependencies) => StepUpCapabilities.of({
25
+ listForUser: Effect.fn("auth.step_up.capabilities.list")(function* (input) {
26
+ const capabilities = new Set();
27
+ if (dependencies.credentials !== undefined) {
28
+ const passwordCredential = yield* dependencies.credentials
29
+ .findPasswordByUserId(input.userId)
30
+ .pipe(Effect.mapError((cause) => stepUpCapabilityError("Failed to load password capability", cause)));
31
+ if (Option.isSome(passwordCredential) &&
32
+ passwordCredential.value.revokedAt === undefined) {
33
+ capabilities.add("password");
34
+ capabilities.add("aal1-capable");
35
+ }
36
+ }
37
+ if (dependencies.passkeyCredentialManagement !== undefined) {
38
+ const passkeys = yield* dependencies.passkeyCredentialManagement
39
+ .listForUser({ userId: input.userId })
40
+ .pipe(Effect.mapError((cause) => stepUpCapabilityError("Failed to load passkey capability", cause)));
41
+ if (passkeys.length > 0) {
42
+ capabilities.add("passkey");
43
+ if (dependencies.passkeySupportsAal2 !== undefined &&
44
+ passkeys.some(dependencies.passkeySupportsAal2)) {
45
+ capabilities.add("aal2-capable");
46
+ }
47
+ }
48
+ }
49
+ if (dependencies.totpFactorManagement !== undefined) {
50
+ const totpFactors = yield* dependencies.totpFactorManagement
51
+ .listForUser({ userId: input.userId })
52
+ .pipe(Effect.mapError((cause) => stepUpCapabilityError("Failed to load TOTP capability", cause)));
53
+ if (totpFactors.length > 0) {
54
+ capabilities.add("totp");
55
+ capabilities.add("aal2-capable");
56
+ }
57
+ }
58
+ if (dependencies.recoveryCodeManagement !== undefined) {
59
+ const recoveryCodes = yield* dependencies.recoveryCodeManagement
60
+ .listForUser({ userId: input.userId })
61
+ .pipe(Effect.mapError((cause) => stepUpCapabilityError("Failed to load recovery-code capability", cause)));
62
+ if (recoveryCodes.length > 0) {
63
+ capabilities.add("recovery-code");
64
+ }
65
+ }
66
+ return [...capabilities];
67
+ }),
68
+ });
69
+ export const StepUpCapabilitiesLive = Layer.effect(StepUpCapabilities)(Effect.gen(function* () {
70
+ const credentials = yield* Effect.serviceOption(CredentialStore);
71
+ const passkeyCredentialManagement = yield* Effect.serviceOption(PasskeyCredentialManagement);
72
+ const totpFactorManagement = yield* Effect.serviceOption(TotpFactorManagement);
73
+ const recoveryCodeManagement = yield* Effect.serviceOption(RecoveryCodeManagement);
74
+ return makeStepUpCapabilities({
75
+ ...(Option.isSome(credentials) ? { credentials: credentials.value } : {}),
76
+ ...(Option.isSome(passkeyCredentialManagement)
77
+ ? { passkeyCredentialManagement: passkeyCredentialManagement.value }
78
+ : {}),
79
+ ...(Option.isSome(totpFactorManagement)
80
+ ? { totpFactorManagement: totpFactorManagement.value }
81
+ : {}),
82
+ ...(Option.isSome(recoveryCodeManagement)
83
+ ? { recoveryCodeManagement: recoveryCodeManagement.value }
84
+ : {}),
85
+ });
86
+ }));
7
87
  const aalRank = {
8
88
  aal1: 1,
9
89
  aal2: 2,
@@ -28,13 +108,42 @@ const freshnessFailure = (session, now, maxAge, verifiedAt = Number(session.auth
28
108
  authAgeMillis,
29
109
  };
30
110
  };
31
- const freshnessReferenceTime = (session, requiredAal) => requiredAal !== undefined &&
32
- aalRank[requiredAal] >= aalRank.aal2 &&
33
- session.mfaVerifiedAt !== undefined
34
- ? Number(session.mfaVerifiedAt)
35
- : Number(session.authTime);
111
+ const loadCustomEvidencePolicies = Effect.serviceOption(CustomEvidencePolicies).pipe(Effect.map((policies) => Option.getOrElse(policies, () => emptyCustomEvidencePolicyRegistry)));
112
+ const validateAuthenticationEvents = (session, customEvidencePolicies) => Effect.fromResult(deriveAssuranceResult(session.authenticationEvents, {
113
+ customEvidencePolicies,
114
+ })).pipe(Effect.asVoid);
115
+ const freshnessReferenceTime = (session, requiredAal, customEvidencePolicies) => requiredAal === undefined
116
+ ? Effect.succeed(Number(session.authTime))
117
+ : Effect.fromResult(latestAssuranceAuthenticationEventResult(session.authenticationEvents, requiredAal, customEvidencePolicies)).pipe(Effect.map((event) => Number(event?.verifiedAt ?? session.authTime)));
118
+ const hasRecoveryRemediation = (session) => session.claims?.requirements?.includes("recovery_remediation") === true;
119
+ const isStrongMethod = (method) => method === "totp" || method === "passkey";
120
+ const methodRequiresRecoveryRemediation = (session, method, customEvidencePolicies) => Effect.gen(function* () {
121
+ if (isStrongMethod(method)) {
122
+ return true;
123
+ }
124
+ let requiresRemediation = false;
125
+ for (const event of session.authenticationEvents) {
126
+ if (event.type !== "custom") {
127
+ continue;
128
+ }
129
+ const assurance = yield* Effect.fromResult(deriveAssuranceResult([event], { customEvidencePolicies }));
130
+ if (assurance.amr.includes(method) &&
131
+ (!assurance.primaryEstablished || aalAtLeast(assurance.level, "aal2"))) {
132
+ requiresRemediation = true;
133
+ }
134
+ }
135
+ return requiresRemediation;
136
+ });
137
+ const remediationFailure = (session) => hasRecoveryRemediation(session)
138
+ ? {
139
+ reason: "session-requirement-unsatisfied",
140
+ requirement: "recovery_remediation",
141
+ }
142
+ : undefined;
143
+ const eventVerifiedAt = (event) => event === undefined ? Number.NEGATIVE_INFINITY : Number(event.verifiedAt);
36
144
  const sessionRequirementFailures = (session, noSessionRequirements) => {
37
- if (noSessionRequirements === undefined || noSessionRequirements.length === 0) {
145
+ if (noSessionRequirements === undefined ||
146
+ noSessionRequirements.length === 0) {
38
147
  return [];
39
148
  }
40
149
  const activeRequirements = session.claims?.requirements ?? [];
@@ -49,34 +158,293 @@ const sessionRequirementFailures = (session, noSessionRequirements) => {
49
158
  };
50
159
  export const checkStepUp = (requirement) => Effect.gen(function* () {
51
160
  const session = yield* CurrentSession;
161
+ const customEvidencePolicies = yield* loadCustomEvidencePolicies;
162
+ yield* validateAuthenticationEvents(session, customEvidencePolicies);
52
163
  const now = requirement.maxAge === undefined ? undefined : yield* currentUnixMillis;
164
+ const freshness = requirement.maxAge === undefined || now === undefined
165
+ ? undefined
166
+ : freshnessFailure(session, Number(now), requirement.maxAge, yield* freshnessReferenceTime(session, requirement.aal, customEvidencePolicies));
53
167
  const failures = [
168
+ ...(requirement.aal !== undefined &&
169
+ aalRank[requirement.aal] >= aalRank.aal2 &&
170
+ session.claims?.requirements?.includes("recovery_remediation") === true
171
+ ? [
172
+ {
173
+ reason: "session-requirement-unsatisfied",
174
+ requirement: "recovery_remediation",
175
+ },
176
+ ]
177
+ : []),
54
178
  ...(requirement.aal === undefined
55
179
  ? []
56
180
  : [aalFailure(session, requirement.aal)].filter((failure) => failure !== undefined)),
57
- ...(requirement.maxAge === undefined || now === undefined
58
- ? []
59
- : [
60
- freshnessFailure(session, Number(now), requirement.maxAge, freshnessReferenceTime(session, requirement.aal)),
61
- ].filter((failure) => failure !== undefined)),
181
+ ...(freshness === undefined ? [] : [freshness]),
62
182
  ...sessionRequirementFailures(session, requirement.noSessionRequirements),
63
183
  ];
64
184
  return failures.length === 0
65
185
  ? { _tag: "Satisfied", session }
66
186
  : { _tag: "Required", session, failures };
67
187
  });
188
+ export const aal = (requiredAal, options = {}) => ({
189
+ _tag: "Aal",
190
+ aal: requiredAal,
191
+ ...(options.maxAge === undefined ? {} : { maxAge: options.maxAge }),
192
+ });
193
+ export const amr = (method, options = {}) => ({
194
+ _tag: "Amr",
195
+ method,
196
+ ...(options.maxAge === undefined ? {} : { maxAge: options.maxAge }),
197
+ });
198
+ export const factor = (method, factorId, options = {}) => ({
199
+ _tag: "Factor",
200
+ method,
201
+ factorId,
202
+ ...(options.maxAge === undefined ? {} : { maxAge: options.maxAge }),
203
+ });
204
+ export const every = (...requirements) => ({
205
+ _tag: "Every",
206
+ requirements,
207
+ });
208
+ export const oneOf = (...requirements) => ({
209
+ _tag: "OneOf",
210
+ requirements,
211
+ });
212
+ export const available = (capabilities, policy) => ({
213
+ _tag: "Available",
214
+ capabilities: uniqueCapabilities(capabilityArray(capabilities)),
215
+ policy,
216
+ });
217
+ export const allow = () => ({ _tag: "Allow" });
218
+ export const deny = (reason = "step-up-policy-denied") => ({
219
+ _tag: "Deny",
220
+ reason,
221
+ });
222
+ export const adaptive = (rules) => ({
223
+ _tag: "AdaptiveStepUpPolicy",
224
+ rules,
225
+ });
226
+ export const session = (input) => ({
227
+ _tag: "SessionStepUpPolicy",
228
+ require: input.require,
229
+ ...(input.maxAge === undefined ? {} : { maxAge: input.maxAge }),
230
+ ...(input.noSessionRequirements === undefined
231
+ ? {}
232
+ : { noSessionRequirements: input.noSessionRequirements }),
233
+ });
234
+ const isSessionStepUpPolicy = (policy) => "_tag" in policy && policy._tag === "SessionStepUpPolicy";
235
+ export const isAdaptiveStepUpPolicy = (policy) => "_tag" in policy && policy._tag === "AdaptiveStepUpPolicy";
236
+ const predicateFailures = (predicate, current, now, inheritedMaxAge, customEvidencePolicies) => {
237
+ switch (predicate._tag) {
238
+ case "Aal": {
239
+ return Effect.gen(function* () {
240
+ const maxAge = predicate.maxAge ?? inheritedMaxAge;
241
+ const failure = aalFailure(current, predicate.aal);
242
+ const freshness = maxAge === undefined
243
+ ? undefined
244
+ : freshnessFailure(current, now, maxAge, yield* freshnessReferenceTime(current, predicate.aal, customEvidencePolicies));
245
+ const remediation = aalRank[predicate.aal] >= aalRank.aal2
246
+ ? remediationFailure(current)
247
+ : undefined;
248
+ return [remediation, failure, freshness].filter((detail) => detail !== undefined);
249
+ });
250
+ }
251
+ case "Amr": {
252
+ return Effect.gen(function* () {
253
+ const maxAge = predicate.maxAge ?? inheritedMaxAge;
254
+ const event = yield* Effect.fromResult(latestMethodAuthenticationEventResult(current.authenticationEvents, predicate.method, customEvidencePolicies));
255
+ const methodFailure = current.amr.includes(predicate.method)
256
+ ? undefined
257
+ : {
258
+ reason: "amr-missing",
259
+ method: predicate.method,
260
+ };
261
+ const freshness = maxAge === undefined
262
+ ? undefined
263
+ : freshnessFailure(current, now, maxAge, eventVerifiedAt(event));
264
+ const requiresRemediation = hasRecoveryRemediation(current)
265
+ ? yield* methodRequiresRecoveryRemediation(current, predicate.method, customEvidencePolicies)
266
+ : false;
267
+ const remediation = requiresRemediation
268
+ ? remediationFailure(current)
269
+ : undefined;
270
+ return [remediation, methodFailure, freshness].filter((detail) => detail !== undefined);
271
+ });
272
+ }
273
+ case "Factor": {
274
+ return Effect.gen(function* () {
275
+ const maxAge = predicate.maxAge ?? inheritedMaxAge;
276
+ const event = yield* Effect.fromResult(latestFactorAuthenticationEventResult(current.authenticationEvents, predicate.method, predicate.factorId, customEvidencePolicies));
277
+ const methodFailure = event === undefined
278
+ ? {
279
+ reason: "amr-missing",
280
+ method: predicate.method,
281
+ }
282
+ : undefined;
283
+ const freshness = maxAge === undefined || event === undefined
284
+ ? undefined
285
+ : freshnessFailure(current, now, maxAge, Number(event.verifiedAt));
286
+ const remediation = isStrongMethod(predicate.method)
287
+ ? remediationFailure(current)
288
+ : undefined;
289
+ return [remediation, methodFailure, freshness].filter((detail) => detail !== undefined);
290
+ });
291
+ }
292
+ case "Every": {
293
+ return Effect.gen(function* () {
294
+ const failures = [];
295
+ for (const requirement of predicate.requirements) {
296
+ failures.push(...(yield* predicateFailures(requirement, current, now, inheritedMaxAge, customEvidencePolicies)));
297
+ }
298
+ return failures;
299
+ });
300
+ }
301
+ case "OneOf": {
302
+ if (predicate.requirements.length === 0) {
303
+ return Effect.succeed([{ reason: "step-up-alternative-unsatisfied" }]);
304
+ }
305
+ return Effect.gen(function* () {
306
+ const results = [];
307
+ for (const requirement of predicate.requirements) {
308
+ results.push(yield* predicateFailures(requirement, current, now, inheritedMaxAge, customEvidencePolicies));
309
+ }
310
+ return results.some((failures) => failures.length === 0)
311
+ ? []
312
+ : results.flat();
313
+ });
314
+ }
315
+ }
316
+ };
317
+ export const checkPolicy = (policy) => {
318
+ if (!isSessionStepUpPolicy(policy)) {
319
+ return checkStepUp(policy);
320
+ }
321
+ return Effect.gen(function* () {
322
+ const current = yield* CurrentSession;
323
+ const customEvidencePolicies = yield* loadCustomEvidencePolicies;
324
+ yield* validateAuthenticationEvents(current, customEvidencePolicies);
325
+ const now = yield* currentUnixMillis;
326
+ const failures = [
327
+ ...(yield* predicateFailures(policy.require, current, Number(now), policy.maxAge, customEvidencePolicies)),
328
+ ...sessionRequirementFailures(current, policy.noSessionRequirements),
329
+ ];
330
+ return failures.length === 0
331
+ ? { _tag: "Satisfied", session: current }
332
+ : { _tag: "Required", session: current, failures };
333
+ });
334
+ };
335
+ export const checkAdaptivePolicy = (policy) => Effect.gen(function* () {
336
+ const current = yield* CurrentSession;
337
+ const customEvidencePolicies = yield* loadCustomEvidencePolicies;
338
+ yield* validateAuthenticationEvents(current, customEvidencePolicies);
339
+ const capabilities = yield* StepUpCapabilities.use((service) => service.listForUser({ userId: current.userId }));
340
+ for (const rule of policy.rules) {
341
+ switch (rule._tag) {
342
+ case "Allow": {
343
+ return { _tag: "Satisfied", session: current };
344
+ }
345
+ case "Deny": {
346
+ return {
347
+ _tag: "Denied",
348
+ session: current,
349
+ reason: rule.reason,
350
+ };
351
+ }
352
+ case "Available": {
353
+ const matched = rule.capabilities.filter((capability) => capabilities.includes(capability));
354
+ if (matched.length === 0) {
355
+ continue;
356
+ }
357
+ const decision = yield* checkPolicy(rule.policy);
358
+ return {
359
+ ...decision,
360
+ capabilities: matched,
361
+ };
362
+ }
363
+ }
364
+ }
365
+ return {
366
+ _tag: "Denied",
367
+ session: current,
368
+ reason: "no-step-up-capability-available",
369
+ };
370
+ });
371
+ export const checkAnyPolicy = (policy) => isAdaptiveStepUpPolicy(policy)
372
+ ? checkAdaptivePolicy(policy)
373
+ : checkPolicy(policy);
68
374
  export const requireStepUp = (requirement) => Effect.flatMap(checkStepUp(requirement), (decision) => decision._tag === "Satisfied"
69
375
  ? Effect.void
70
376
  : Effect.fail(new StepUpRequired({
71
377
  failures: decision.failures,
72
378
  session: decision.session,
73
379
  })));
74
- export const requireAal = (aal) => requireStepUp({ aal });
380
+ export const requirePolicy = (policy) => Effect.flatMap(checkPolicy(policy), (decision) => decision._tag === "Satisfied"
381
+ ? Effect.void
382
+ : Effect.fail(new StepUpRequired({
383
+ failures: decision.failures,
384
+ session: decision.session,
385
+ })));
386
+ export const requireAdaptivePolicy = (policy) => Effect.gen(function* () {
387
+ const decision = yield* checkAdaptivePolicy(policy);
388
+ switch (decision._tag) {
389
+ case "Satisfied": {
390
+ return;
391
+ }
392
+ case "Required": {
393
+ return yield* new StepUpRequired({
394
+ failures: decision.failures,
395
+ session: decision.session,
396
+ ...(decision.capabilities === undefined
397
+ ? {}
398
+ : { capabilities: decision.capabilities }),
399
+ });
400
+ }
401
+ case "Denied": {
402
+ return yield* new StepUpDenied({
403
+ reason: decision.reason,
404
+ session: decision.session,
405
+ ...(decision.capabilities === undefined
406
+ ? {}
407
+ : { capabilities: decision.capabilities }),
408
+ });
409
+ }
410
+ }
411
+ });
412
+ export const requireAnyPolicy = (policy) => isAdaptiveStepUpPolicy(policy)
413
+ ? requireAdaptivePolicy(policy)
414
+ : requirePolicy(policy);
415
+ export function toGuard(policy) {
416
+ return requireAnyPolicy(policy);
417
+ }
418
+ export const requireAal = (requiredAal) => requireStepUp({
419
+ aal: requiredAal,
420
+ ...(aalRank[requiredAal] >= aalRank.aal2
421
+ ? { noSessionRequirements: ["recovery_remediation"] }
422
+ : {}),
423
+ });
75
424
  export const requireFresh = (maxAge) => requireStepUp({ maxAge });
76
425
  export const requireNoSessionRequirements = (...requirements) => requireStepUp({ noSessionRequirements: requirements });
77
- export const toPolicy = (requirement, policyId) => requireStepUp(requirement).pipe(Effect.mapError((cause) => new AuthzError({
78
- reason: "step-up-required",
79
- policyId,
80
- cause,
81
- })));
426
+ export function toPolicy(requirement, policyId) {
427
+ return requireAnyPolicy(requirement).pipe(Effect.mapError((cause) => {
428
+ switch (cause._tag) {
429
+ case "CustomEvidencePolicyError": {
430
+ return cause;
431
+ }
432
+ case "StepUpDenied": {
433
+ return new AuthorizationError({
434
+ reason: cause.reason,
435
+ policyId,
436
+ cause,
437
+ });
438
+ }
439
+ case "StepUpRequired":
440
+ case "StepUpCapabilityError": {
441
+ return new AuthorizationError({
442
+ reason: "step-up-required",
443
+ policyId,
444
+ cause,
445
+ });
446
+ }
447
+ }
448
+ }));
449
+ }
82
450
  //# sourceMappingURL=StepUp.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"StepUp.js","sourceRoot":"","sources":["../src/StepUp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAmC/C,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAGnE;CAAG;AAEL,MAAM,OAAO,GAAuC;IAClD,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,MAA0B,EAC1B,OAA2B,EAClB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;AAElD,MAAM,UAAU,GAAG,CACjB,OAA4B,EAC5B,WAA+B,EACE,EAAE,CACnC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC;IAClC,CAAC,CAAC,SAAS;IACX,CAAC,CAAC;QACE,MAAM,EAAE,aAAa;QACrB,WAAW;QACX,UAAU,EAAE,OAAO,CAAC,GAAG;KACxB,CAAC;AAER,MAAM,gBAAgB,GAAG,CACvB,OAA4B,EAC5B,GAAW,EACX,MAAyB,EACzB,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EACJ,EAAE;IACnC,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC;IAEpD,OAAO,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,MAAM,EAAE,cAAc;YACtB,YAAY;YACZ,aAAa;SACd,CAAC;AACR,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,OAA4B,EAC5B,WAA2C,EACnC,EAAE,CACV,WAAW,KAAK,SAAS;IACzB,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI;IACpC,OAAO,CAAC,aAAa,KAAK,SAAS;IACjC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;IAC/B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE/B,MAAM,0BAA0B,GAAG,CACjC,OAA4B,EAC5B,qBAAgE,EAChC,EAAE;IAClC,IAAI,qBAAqB,KAAK,SAAS,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;IAE9D,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CACnD,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtC,CAAC,CAAC;YACE;gBACE,MAAM,EAAE,iCAA0C;gBAClD,WAAW;aACZ;SACF;QACH,CAAC,CAAC,EAAE,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,WAA8B,EACwB,EAAE,CACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IACtC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACpF,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAC3C,CAAC,OAAO,EAAkC,EAAE,CAAC,OAAO,KAAK,SAAS,CACnE,CAAC;QACN,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;YACvD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,gBAAgB,CACd,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,EACX,WAAW,CAAC,MAAM,EAClB,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CACjD;aACF,CAAC,MAAM,CACN,CAAC,OAAO,EAAkC,EAAE,CAAC,OAAO,KAAK,SAAS,CACnE,CAAC;QACN,GAAG,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,qBAAqB,CAAC;KAC1E,CAAC;IAEF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE,OAAO,EAAE;QACzC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACvD,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,WAA8B,EACuB,EAAE,CACvD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CACpD,QAAQ,CAAC,IAAI,KAAK,WAAW;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,cAAc,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CACH,CACN,CAAC;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,GAAuB,EAC8B,EAAE,CACvD,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAEzB,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAyB,EAC4B,EAAE,CACvD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAE5B,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,GAAG,YAA2C,EACO,EAAE,CACvD,aAAa,CAAC,EAAE,qBAAqB,EAAE,YAAY,EAAE,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,WAA8B,EAC9B,QAAmB,EAC8B,EAAE,CACnD,aAAa,CAAC,WAAW,CAAC,CAAC,IAAI,CAC7B,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,UAAU,CAAC;IACb,MAAM,EAAE,kBAAkB;IAC1B,QAAQ;IACR,KAAK;CACN,CAAC,CACL,CACF,CAAC"}
1
+ {"version":3,"file":"StepUp.js","sourceRoot":"","sources":["../src/StepUp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExE,OAAO,EACL,sBAAsB,EAGtB,qBAAqB,EACrB,iCAAiC,EACjC,wCAAwC,EACxC,qCAAqC,EACrC,qCAAqC,GACtC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAK3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAO/C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AA4CjD,MAAM,OAAO,qBAAsB,SAAQ,IAAI,CAAC,WAAW,CACzD,uBAAuB,CAIvB;CAAG;AAQL,MAAM,OAAO,kBAAmB,SAAQ,OAAO,CAAC,OAAO,EAGpD,CAAC,yBAAyB,CAAC;CAAG;AAuFjC,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAInE;CAAG;AAEL,MAAM,OAAO,YAAa,SAAQ,IAAI,CAAC,WAAW,CAAC,cAAc,CAI/D;CAAG;AAEL,MAAM,qBAAqB,GAAG,CAC5B,OAAe,EACf,KAAe,EACQ,EAAE,CACzB,IAAI,qBAAqB,CAAC;IACxB,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,YAAwC,EACX,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;AAE7D,MAAM,eAAe,GAAG,CACtB,UAAmC,EACN,EAAE,CAC/B,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AAE7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,YAA4C,EACjB,EAAE,CAC7B,kBAAkB,CAAC,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACvE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;QAEjD,IAAI,YAAY,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,WAAW;iBACvD,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC;iBAClC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,oCAAoC,EAAE,KAAK,CAAC,CACnE,CACF,CAAC;YAEJ,IACE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;gBACjC,kBAAkB,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,EAChD,CAAC;gBACD,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC7B,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,2BAA2B,KAAK,SAAS,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,2BAA2B;iBAC7D,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBACrC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAClE,CACF,CAAC;YAEJ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC5B,IACE,YAAY,CAAC,mBAAmB,KAAK,SAAS;oBAC9C,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAC/C,CAAC;oBACD,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,oBAAoB;iBACzD,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBACrC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAC/D,CACF,CAAC;YAEJ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACzB,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YACtD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,sBAAsB;iBAC7D,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBACrC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CACnB,yCAAyC,EACzC,KAAK,CACN,CACF,CACF,CAAC;YAEJ,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;IAC3B,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;IACjE,MAAM,2BAA2B,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAC7D,2BAA2B,CAC5B,CAAC;IACF,MAAM,oBAAoB,GACxB,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,sBAAsB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CACxD,sBAAsB,CACvB,CAAC;IAEF,OAAO,sBAAsB,CAAC;QAC5B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC;YAC5C,CAAC,CAAC,EAAE,2BAA2B,EAAE,2BAA2B,CAAC,KAAK,EAAE;YACpE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;YACrC,CAAC,CAAC,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,KAAK,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC;YACvC,CAAC,CAAC,EAAE,sBAAsB,EAAE,sBAAsB,CAAC,KAAK,EAAE;YAC1D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,OAAO,GAAuC;IAClD,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,MAA0B,EAC1B,OAA2B,EAClB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;AAElD,MAAM,UAAU,GAAG,CACjB,OAA4B,EAC5B,WAA+B,EACE,EAAE,CACnC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC;IAClC,CAAC,CAAC,SAAS;IACX,CAAC,CAAC;QACE,MAAM,EAAE,aAAa;QACrB,WAAW;QACX,UAAU,EAAE,OAAO,CAAC,GAAG;KACxB,CAAC;AAER,MAAM,gBAAgB,GAAG,CACvB,OAA4B,EAC5B,GAAW,EACX,MAAyB,EACzB,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EACJ,EAAE;IACnC,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC;IAEpD,OAAO,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,MAAM,EAAE,cAAc;YACtB,YAAY;YACZ,aAAa;SACd,CAAC;AACR,CAAC,CAAC;AAEF,MAAM,0BAA0B,GAAG,MAAM,CAAC,aAAa,CACrD,sBAAsB,CACvB,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtB,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,iCAAiC,CAAC,CACpE,CACF,CAAC;AAEF,MAAM,4BAA4B,GAAG,CACnC,OAA4B,EAC5B,sBAAoD,EACJ,EAAE,CAClD,MAAM,CAAC,UAAU,CACf,qBAAqB,CAAC,OAAO,CAAC,oBAAoB,EAAE;IAClD,sBAAsB;CACvB,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAExB,MAAM,sBAAsB,GAAG,CAC7B,OAA4B,EAC5B,WAA2C,EAC3C,sBAAoD,EACF,EAAE,CACpD,WAAW,KAAK,SAAS;IACvB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC,MAAM,CAAC,UAAU,CACf,wCAAwC,CACtC,OAAO,CAAC,oBAAoB,EAC5B,WAAW,EACX,sBAAsB,CACvB,CACF,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CACrE,CAAC;AAER,MAAM,sBAAsB,GAAG,CAAC,OAA4B,EAAW,EAAE,CACvE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,sBAAsB,CAAC,KAAK,IAAI,CAAC;AAE1E,MAAM,cAAc,GAAG,CAAC,MAA2B,EAAW,EAAE,CAC9D,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,CAAC;AAE5C,MAAM,iCAAiC,GAAG,CACxC,OAA4B,EAC5B,MAA2B,EAC3B,sBAAoD,EACD,EAAE,CACrD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACxC,qBAAqB,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAC3D,CAAC;QACF,IACE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC9B,CAAC,CAAC,SAAS,CAAC,kBAAkB,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EACtE,CAAC;YACD,mBAAmB,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,OAA4B,EACK,EAAE,CACnC,sBAAsB,CAAC,OAAO,CAAC;IAC7B,CAAC,CAAC;QACE,MAAM,EAAE,iCAAiC;QACzC,WAAW,EAAE,sBAAsB;KACpC;IACH,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,eAAe,GAAG,CAAC,KAAkD,EAAE,EAAE,CAC7E,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAE5E,MAAM,0BAA0B,GAAG,CACjC,OAA4B,EAC5B,qBAAgE,EAChC,EAAE;IAClC,IACE,qBAAqB,KAAK,SAAS;QACnC,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;IAE9D,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CACnD,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtC,CAAC,CAAC;YACE;gBACE,MAAM,EAAE,iCAA0C;gBAClD,WAAW;aACZ;SACF;QACH,CAAC,CAAC,EAAE,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,WAA8B,EAC4C,EAAE,CAC5E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IACtC,MAAM,sBAAsB,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC;IACjE,KAAK,CAAC,CAAC,4BAA4B,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACrE,MAAM,GAAG,GACP,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC;IAC1E,MAAM,SAAS,GACb,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;QACnD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,gBAAgB,CACd,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,EACX,WAAW,CAAC,MAAM,EAClB,KAAK,CAAC,CAAC,sBAAsB,CAC3B,OAAO,EACP,WAAW,CAAC,GAAG,EACf,sBAAsB,CACvB,CACF,CAAC;IACR,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK,SAAS;YACjC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI;YACxC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,sBAAsB,CAAC,KAAK,IAAI;YACrE,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,iCAA0C;oBAClD,WAAW,EAAE,sBAA+B;iBAC7C;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAC3C,CAAC,OAAO,EAAkC,EAAE,CAAC,OAAO,KAAK,SAAS,CACnE,CAAC;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/C,GAAG,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,qBAAqB,CAAC;KAC1E,CAAC;IAEF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE,OAAO,EAAE;QACzC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACvD,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,GAAG,GAAG,CACjB,WAA+B,EAC/B,OAAO,GAA2B,EAAE,EACnB,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,WAAW;IAChB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;CACpE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,GAAG,GAAG,CACjB,MAA2B,EAC3B,OAAO,GAA2B,EAAE,EACnB,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,KAAK;IACX,MAAM;IACN,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;CACpE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,MAA2B,EAC3B,QAAsB,EACtB,OAAO,GAA2B,EAAE,EACnB,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,QAAQ;IACd,MAAM;IACN,QAAQ;IACR,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;CACpE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,GAAG,YAAwC,EAC1B,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,OAAO;IACb,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,GAAG,YAAwC,EAC1B,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,OAAO;IACb,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,YAAqC,EACrC,MAAoB,EACA,EAAE,CAAC,CAAC;IACxB,IAAI,EAAE,WAAW;IACjB,YAAY,EAAE,kBAAkB,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG,GAAuB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,uBAAuB,EAAsB,EAAE,CAAC,CAAC;IAC7E,IAAI,EAAE,MAAM;IACZ,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,KAAoC,EACd,EAAE,CAAC,CAAC;IAC1B,IAAI,EAAE,sBAAsB;IAC5B,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAIvB,EAAuB,EAAE,CAAC,CAAC;IAC1B,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC/D,GAAG,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS;QAC3C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,EAAE,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAC5B,MAAoB,EACW,EAAE,CACjC,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB,CAAC;AAE5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,MAAuB,EACS,EAAE,CAClC,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,sBAAsB,CAAC;AAE7D,MAAM,iBAAiB,GAAG,CACxB,SAA0B,EAC1B,OAA4B,EAC5B,GAAW,EACX,eAA8C,EAC9C,sBAAoD,EACsB,EAAE;IAC5E,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,eAAe,CAAC;gBACnD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnD,MAAM,SAAS,GACb,MAAM,KAAK,SAAS;oBAClB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,gBAAgB,CACd,OAAO,EACP,GAAG,EACH,MAAM,EACN,KAAK,CAAC,CAAC,sBAAsB,CAC3B,OAAO,EACP,SAAS,CAAC,GAAG,EACb,sBAAsB,CACvB,CACF,CAAC;gBAER,MAAM,WAAW,GACf,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI;oBACpC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;oBAC7B,CAAC,CAAC,SAAS,CAAC;gBAChB,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,MAAM,CAC7C,CAAC,MAAM,EAAiC,EAAE,CAAC,MAAM,KAAK,SAAS,CAChE,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,eAAe,CAAC;gBACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACpC,qCAAqC,CACnC,OAAO,CAAC,oBAAoB,EAC5B,SAAS,CAAC,MAAM,EAChB,sBAAsB,CACvB,CACF,CAAC;gBACF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;oBAC1D,CAAC,CAAC,SAAS;oBACX,CAAC,CAAE;wBACC,MAAM,EAAE,aAAsB;wBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;qBACM,CAAC;gBACrC,MAAM,SAAS,GACb,MAAM,KAAK,SAAS;oBAClB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrE,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,OAAO,CAAC;oBACzD,CAAC,CAAC,KAAK,CAAC,CAAC,iCAAiC,CACtC,OAAO,EACP,SAAS,CAAC,MAAM,EAChB,sBAAsB,CACvB;oBACH,CAAC,CAAC,KAAK,CAAC;gBACV,MAAM,WAAW,GAAG,mBAAmB;oBACrC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;oBAC7B,CAAC,CAAC,SAAS,CAAC;gBACd,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,MAAM,CACnD,CAAC,MAAM,EAAiC,EAAE,CAAC,MAAM,KAAK,SAAS,CAChE,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,eAAe,CAAC;gBACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACpC,qCAAqC,CACnC,OAAO,CAAC,oBAAoB,EAC5B,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,QAAQ,EAClB,sBAAsB,CACvB,CACF,CAAC;gBACF,MAAM,aAAa,GACjB,KAAK,KAAK,SAAS;oBACjB,CAAC,CAAE;wBACC,MAAM,EAAE,aAAsB;wBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;qBACM;oBAClC,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,SAAS,GACb,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;oBACzC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;gBACvE,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC;oBAClD,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;oBAC7B,CAAC,CAAC,SAAS,CAAC;gBACd,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,MAAM,CACnD,CAAC,MAAM,EAAiC,EAAE,CAAC,MAAM,KAAK,SAAS,CAChE,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,QAAQ,GAA0B,EAAE,CAAC;gBAC3C,KAAK,MAAM,WAAW,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;oBACjD,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAC1B,WAAW,EACX,OAAO,EACP,GAAG,EACH,eAAe,EACf,sBAAsB,CACvB,CAAC,CACH,CAAC;gBACJ,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,CAAC,CAAC;YACzE,CAAC;YAED,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,OAAO,GAAuC,EAAE,CAAC;gBACvD,KAAK,MAAM,WAAW,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;oBACjD,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,CAAC,iBAAiB,CACtB,WAAW,EACX,OAAO,EACP,GAAG,EACH,eAAe,EACf,sBAAsB,CACvB,CACF,CAAC;gBACJ,CAAC;gBAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;oBACtD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,MAAoB,EACsD,EAAE;IAC5E,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QACtC,MAAM,sBAAsB,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC;QACjE,KAAK,CAAC,CAAC,4BAA4B,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QACrC,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAC1B,MAAM,CAAC,OAAO,EACd,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,EACX,MAAM,CAAC,MAAM,EACb,sBAAsB,CACvB,CAAC;YACF,GAAG,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,qBAAqB,CAAC;SACrE,CAAC;QAEF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE,OAAO,EAAE,OAAO,EAAE;YAClD,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAA4B,EAK5B,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IACtC,MAAM,sBAAsB,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC;IACjE,KAAK,CAAC,CAAC,4BAA4B,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7D,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAChD,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,IAAI,EAAE,WAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAC1D,CAAC;YACD,KAAK,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,IAAI,EAAE,QAAiB;oBACvB,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC;YACJ,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CACtD,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAClC,CAAC;gBAEF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,SAAS;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAEjD,OAAO;oBACL,GAAG,QAAQ;oBACX,YAAY,EAAE,OAAO;iBACtB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAiB;QACvB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,iCAAiC;KAC1C,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,MAAuB,EAKvB,EAAE,CACF,sBAAsB,CAAC,MAAM,CAAC;IAC5B,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC;IAC7B,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AAE1B,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,WAA8B,EAK9B,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CACpD,QAAQ,CAAC,IAAI,KAAK,WAAW;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,cAAc,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CACH,CACN,CAAC;AAEJ,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAAoB,EAKpB,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC/C,QAAQ,CAAC,IAAI,KAAK,WAAW;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,cAAc,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CACH,CACN,CAAC;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,MAA4B,EAQ5B,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAEpD,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,KAAK,UAAU,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC;gBAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC;gBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAuB,EAQvB,EAAE,CACF,sBAAsB,CAAC,MAAM,CAAC;IAC5B,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC;IAC/B,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;AAmB5B,MAAM,UAAU,OAAO,CAAC,MAAuB;IAC7C,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,WAA+B,EAK/B,EAAE,CACF,aAAa,CAAC;IACZ,GAAG,EAAE,WAAW;IAChB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI;QACtC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,sBAAsB,CAAC,EAAE;QACrD,CAAC,CAAC,EAAE,CAAC;CACR,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAyB,EAKzB,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAE/B,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,GAAG,YAA2C,EAK9C,EAAE,CAAC,aAAa,CAAC,EAAE,qBAAqB,EAAE,YAAY,EAAE,CAAC,CAAC;AAkB5D,MAAM,UAAU,QAAQ,CAAC,WAA4B,EAAE,QAAmB;IACxE,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE;QACxB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,2BAA2B,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,KAAK,cAAc,EAAE,CAAC;gBACpB,OAAO,IAAI,kBAAkB,CAAC;oBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ;oBACR,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;YACD,KAAK,gBAAgB,CAAC;YACtB,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,OAAO,IAAI,kBAAkB,CAAC;oBAC5B,MAAM,EAAE,kBAAkB;oBAC1B,QAAQ;oBACR,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}