@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.18
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +308 -133
- package/dist/AbuseProtection.d.ts +100 -0
- package/dist/AbuseProtection.d.ts.map +1 -0
- package/dist/AbuseProtection.js +71 -0
- package/dist/AbuseProtection.js.map +1 -0
- package/dist/AccessGrant.d.ts +344 -0
- package/dist/AccessGrant.d.ts.map +1 -0
- package/dist/AccessGrant.js +687 -0
- package/dist/AccessGrant.js.map +1 -0
- package/dist/ApiKey.d.ts +0 -12
- package/dist/ApiKey.d.ts.map +1 -1
- package/dist/ApiKey.js +36 -27
- package/dist/ApiKey.js.map +1 -1
- package/dist/Assurance.d.ts +415 -0
- package/dist/Assurance.d.ts.map +1 -0
- package/dist/Assurance.js +764 -0
- package/dist/Assurance.js.map +1 -0
- package/dist/AtomicPlanExecutor.d.ts +28 -0
- package/dist/AtomicPlanExecutor.d.ts.map +1 -0
- package/dist/AtomicPlanExecutor.js +5 -0
- package/dist/AtomicPlanExecutor.js.map +1 -0
- package/dist/AuditLog.d.ts +2314 -52
- package/dist/AuditLog.d.ts.map +1 -1
- package/dist/AuditLog.js +511 -33
- package/dist/AuditLog.js.map +1 -1
- package/dist/AuthFlow.d.ts +128 -38
- package/dist/AuthFlow.d.ts.map +1 -1
- package/dist/AuthFlow.js +611 -263
- package/dist/AuthFlow.js.map +1 -1
- package/dist/AuthRateLimit.d.ts +96 -0
- package/dist/AuthRateLimit.d.ts.map +1 -0
- package/dist/AuthRateLimit.js +212 -0
- package/dist/AuthRateLimit.js.map +1 -0
- package/dist/Challenge.d.ts +0 -3
- package/dist/Challenge.d.ts.map +1 -1
- package/dist/Challenge.js +1 -4
- package/dist/Challenge.js.map +1 -1
- package/dist/Client.d.ts +205 -10
- package/dist/Client.d.ts.map +1 -1
- package/dist/Client.js +397 -16
- package/dist/Client.js.map +1 -1
- package/dist/CloudflareTurnstile.d.ts +28 -0
- package/dist/CloudflareTurnstile.d.ts.map +1 -0
- package/dist/CloudflareTurnstile.js +205 -0
- package/dist/CloudflareTurnstile.js.map +1 -0
- package/dist/Crypto.d.ts +0 -3
- package/dist/Crypto.d.ts.map +1 -1
- package/dist/Crypto.js +1 -4
- package/dist/Crypto.js.map +1 -1
- package/dist/DelegatedAccessStorageMigrations.d.ts +7 -0
- package/dist/DelegatedAccessStorageMigrations.d.ts.map +1 -0
- package/dist/DelegatedAccessStorageMigrations.js +159 -0
- package/dist/DelegatedAccessStorageMigrations.js.map +1 -0
- package/dist/DisposableEmailDomains.d.ts +19 -0
- package/dist/DisposableEmailDomains.d.ts.map +1 -0
- package/dist/DisposableEmailDomains.js +85 -0
- package/dist/DisposableEmailDomains.js.map +1 -0
- package/dist/DomainVerification.d.ts +0 -9
- package/dist/DomainVerification.d.ts.map +1 -1
- package/dist/DomainVerification.js +36 -22
- package/dist/DomainVerification.js.map +1 -1
- package/dist/DrizzleBunSqliteStorage.d.ts +18 -0
- package/dist/DrizzleBunSqliteStorage.d.ts.map +1 -0
- package/dist/DrizzleBunSqliteStorage.js +11 -0
- package/dist/DrizzleBunSqliteStorage.js.map +1 -0
- package/dist/DrizzleD1SqliteStorage.d.ts +4 -4
- package/dist/DrizzleD1SqliteStorage.d.ts.map +1 -1
- package/dist/DrizzleD1SqliteStorage.js +5 -5
- package/dist/DrizzleD1SqliteStorage.js.map +1 -1
- package/dist/DrizzleDurableObjectSqliteStorage.d.ts +19 -0
- package/dist/DrizzleDurableObjectSqliteStorage.d.ts.map +1 -0
- package/dist/DrizzleDurableObjectSqliteStorage.js +14 -0
- package/dist/DrizzleDurableObjectSqliteStorage.js.map +1 -0
- package/dist/DrizzleEffectSqliteStorage.d.ts +13 -4
- package/dist/DrizzleEffectSqliteStorage.d.ts.map +1 -1
- package/dist/DrizzleEffectSqliteStorage.js +71 -4
- package/dist/DrizzleEffectSqliteStorage.js.map +1 -1
- package/dist/DrizzleNodeSqliteStorage.d.ts +18 -0
- package/dist/DrizzleNodeSqliteStorage.d.ts.map +1 -0
- package/dist/DrizzleNodeSqliteStorage.js +11 -0
- package/dist/DrizzleNodeSqliteStorage.js.map +1 -0
- package/dist/DrizzleWasmSqliteStorage.d.ts +23 -0
- package/dist/DrizzleWasmSqliteStorage.d.ts.map +1 -0
- package/dist/DrizzleWasmSqliteStorage.js +15 -0
- package/dist/DrizzleWasmSqliteStorage.js.map +1 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts +34 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts.map +1 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.js +499 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.js.map +1 -0
- package/dist/EffectQbPostgresStorage.d.ts +171 -0
- package/dist/EffectQbPostgresStorage.d.ts.map +1 -0
- package/dist/EffectQbPostgresStorage.js +4280 -0
- package/dist/EffectQbPostgresStorage.js.map +1 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts +112 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts.map +1 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.js +602 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.js.map +1 -0
- package/dist/EffectQbSqliteStorage.d.ts +181 -23
- package/dist/EffectQbSqliteStorage.d.ts.map +1 -1
- package/dist/EffectQbSqliteStorage.js +1728 -135
- package/dist/EffectQbSqliteStorage.js.map +1 -1
- package/dist/EmailAuth.d.ts +65 -0
- package/dist/EmailAuth.d.ts.map +1 -0
- package/dist/EmailAuth.js +171 -0
- package/dist/EmailAuth.js.map +1 -0
- package/dist/EmailIdentityAuth.d.ts +30 -0
- package/dist/EmailIdentityAuth.d.ts.map +1 -0
- package/dist/EmailIdentityAuth.js +142 -0
- package/dist/EmailIdentityAuth.js.map +1 -0
- package/dist/EmailOtp.d.ts +10 -11
- package/dist/EmailOtp.d.ts.map +1 -1
- package/dist/EmailOtp.js +44 -81
- package/dist/EmailOtp.js.map +1 -1
- package/dist/EmailRisk.d.ts +48 -0
- package/dist/EmailRisk.d.ts.map +1 -0
- package/dist/EmailRisk.js +33 -0
- package/dist/EmailRisk.js.map +1 -0
- package/dist/EmailVerification.d.ts +10 -16
- package/dist/EmailVerification.d.ts.map +1 -1
- package/dist/EmailVerification.js +85 -42
- package/dist/EmailVerification.js.map +1 -1
- package/dist/Guard.d.ts +11 -0
- package/dist/Guard.d.ts.map +1 -0
- package/dist/Guard.js +11 -0
- package/dist/Guard.js.map +1 -0
- package/dist/HibpPwnedPasswords.d.ts +56 -0
- package/dist/HibpPwnedPasswords.d.ts.map +1 -0
- package/dist/HibpPwnedPasswords.js +232 -0
- package/dist/HibpPwnedPasswords.js.map +1 -0
- package/dist/HttpApi/AdminPermissionDefinition.d.ts +4 -0
- package/dist/HttpApi/AdminPermissionDefinition.d.ts.map +1 -0
- package/dist/HttpApi/AdminPermissionDefinition.js +4 -0
- package/dist/HttpApi/AdminPermissionDefinition.js.map +1 -0
- package/dist/HttpApi/AdminSecurityTimeline.d.ts +4 -0
- package/dist/HttpApi/AdminSecurityTimeline.d.ts.map +1 -0
- package/dist/HttpApi/AdminSecurityTimeline.js +4 -0
- package/dist/HttpApi/AdminSecurityTimeline.js.map +1 -0
- package/dist/HttpApi/AdminSession.d.ts +4 -0
- package/dist/HttpApi/AdminSession.d.ts.map +1 -0
- package/dist/HttpApi/AdminSession.js +4 -0
- package/dist/HttpApi/AdminSession.js.map +1 -0
- package/dist/HttpApi/AdminTrustedDevice.d.ts +4 -0
- package/dist/HttpApi/AdminTrustedDevice.d.ts.map +1 -0
- package/dist/HttpApi/AdminTrustedDevice.js +4 -0
- package/dist/HttpApi/AdminTrustedDevice.js.map +1 -0
- package/dist/HttpApi/Api.d.ts +879 -877
- package/dist/HttpApi/Api.d.ts.map +1 -1
- package/dist/HttpApi/Api.js +2160 -896
- package/dist/HttpApi/Api.js.map +1 -1
- package/dist/HttpApi/ApiKey.d.ts +4 -0
- package/dist/HttpApi/ApiKey.d.ts.map +1 -0
- package/dist/HttpApi/ApiKey.js +4 -0
- package/dist/HttpApi/ApiKey.js.map +1 -0
- package/dist/HttpApi/Audit.d.ts +6 -0
- package/dist/HttpApi/Audit.d.ts.map +1 -0
- package/dist/HttpApi/Audit.js +10 -0
- package/dist/HttpApi/Audit.js.map +1 -0
- package/dist/HttpApi/ClientApi.d.ts +917 -0
- package/dist/HttpApi/ClientApi.d.ts.map +1 -0
- package/dist/HttpApi/ClientApi.js +101 -0
- package/dist/HttpApi/ClientApi.js.map +1 -0
- package/dist/HttpApi/EmailAuth.d.ts +6 -0
- package/dist/HttpApi/EmailAuth.d.ts.map +1 -0
- package/dist/HttpApi/EmailAuth.js +6 -0
- package/dist/HttpApi/EmailAuth.js.map +1 -0
- package/dist/HttpApi/EmailGuards.d.ts +115 -0
- package/dist/HttpApi/EmailGuards.d.ts.map +1 -0
- package/dist/HttpApi/EmailGuards.js +191 -0
- package/dist/HttpApi/EmailGuards.js.map +1 -0
- package/dist/HttpApi/EmailOtp.d.ts +6 -0
- package/dist/HttpApi/EmailOtp.d.ts.map +1 -0
- package/dist/HttpApi/EmailOtp.js +6 -0
- package/dist/HttpApi/EmailOtp.js.map +1 -0
- package/dist/HttpApi/EmailVerification.d.ts +6 -0
- package/dist/HttpApi/EmailVerification.d.ts.map +1 -0
- package/dist/HttpApi/EmailVerification.js +6 -0
- package/dist/HttpApi/EmailVerification.js.map +1 -0
- package/dist/HttpApi/Endpoints.d.ts +629 -301
- package/dist/HttpApi/Endpoints.d.ts.map +1 -1
- package/dist/HttpApi/Endpoints.js +178 -120
- package/dist/HttpApi/Endpoints.js.map +1 -1
- package/dist/HttpApi/Errors.d.ts +26 -7
- package/dist/HttpApi/Errors.d.ts.map +1 -1
- package/dist/HttpApi/Errors.js +26 -4
- package/dist/HttpApi/Errors.js.map +1 -1
- package/dist/HttpApi/Identity.d.ts +6 -0
- package/dist/HttpApi/Identity.d.ts.map +1 -0
- package/dist/HttpApi/Identity.js +6 -0
- package/dist/HttpApi/Identity.js.map +1 -0
- package/dist/HttpApi/IdentityGuards.d.ts +31 -0
- package/dist/HttpApi/IdentityGuards.d.ts.map +1 -0
- package/dist/HttpApi/IdentityGuards.js +33 -0
- package/dist/HttpApi/IdentityGuards.js.map +1 -0
- package/dist/HttpApi/Jwt.d.ts +4 -0
- package/dist/HttpApi/Jwt.d.ts.map +1 -0
- package/dist/HttpApi/Jwt.js +4 -0
- package/dist/HttpApi/Jwt.js.map +1 -0
- package/dist/HttpApi/JwtDiscovery.d.ts +4 -0
- package/dist/HttpApi/JwtDiscovery.d.ts.map +1 -0
- package/dist/HttpApi/JwtDiscovery.js +4 -0
- package/dist/HttpApi/JwtDiscovery.js.map +1 -0
- package/dist/HttpApi/LoginApproval.d.ts +5 -0
- package/dist/HttpApi/LoginApproval.d.ts.map +1 -0
- package/dist/HttpApi/LoginApproval.js +5 -0
- package/dist/HttpApi/LoginApproval.js.map +1 -0
- package/dist/HttpApi/LoginNotification.d.ts +5 -0
- package/dist/HttpApi/LoginNotification.d.ts.map +1 -0
- package/dist/HttpApi/LoginNotification.js +5 -0
- package/dist/HttpApi/LoginNotification.js.map +1 -0
- package/dist/HttpApi/MagicLink.d.ts +6 -0
- package/dist/HttpApi/MagicLink.d.ts.map +1 -0
- package/dist/HttpApi/MagicLink.js +6 -0
- package/dist/HttpApi/MagicLink.js.map +1 -0
- package/dist/HttpApi/Mfa.d.ts +5 -0
- package/dist/HttpApi/Mfa.d.ts.map +1 -0
- package/dist/HttpApi/Mfa.js +5 -0
- package/dist/HttpApi/Mfa.js.map +1 -0
- package/dist/HttpApi/Middleware.d.ts +14 -0
- package/dist/HttpApi/Middleware.d.ts.map +1 -0
- package/dist/HttpApi/Middleware.js +5 -0
- package/dist/HttpApi/Middleware.js.map +1 -0
- package/dist/HttpApi/OAuth.d.ts +4 -0
- package/dist/HttpApi/OAuth.d.ts.map +1 -0
- package/dist/HttpApi/OAuth.js +4 -0
- package/dist/HttpApi/OAuth.js.map +1 -0
- package/dist/HttpApi/OAuthProviderAuthorization.d.ts +4 -0
- package/dist/HttpApi/OAuthProviderAuthorization.d.ts.map +1 -0
- package/dist/HttpApi/OAuthProviderAuthorization.js +4 -0
- package/dist/HttpApi/OAuthProviderAuthorization.js.map +1 -0
- package/dist/HttpApi/OAuthToken.d.ts +4 -0
- package/dist/HttpApi/OAuthToken.d.ts.map +1 -0
- package/dist/HttpApi/OAuthToken.js +4 -0
- package/dist/HttpApi/OAuthToken.js.map +1 -0
- package/dist/HttpApi/OidcDiscovery.d.ts +4 -0
- package/dist/HttpApi/OidcDiscovery.d.ts.map +1 -0
- package/dist/HttpApi/OidcDiscovery.js +4 -0
- package/dist/HttpApi/OidcDiscovery.js.map +1 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts +28 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts.map +1 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.js +5 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.js.map +1 -0
- package/dist/HttpApi/Operations/AdminSession.d.ts +16 -0
- package/dist/HttpApi/Operations/AdminSession.d.ts.map +1 -0
- package/dist/HttpApi/Operations/AdminSession.js +5 -0
- package/dist/HttpApi/Operations/AdminSession.js.map +1 -0
- package/dist/HttpApi/Operations/ApiKey.d.ts +16 -0
- package/dist/HttpApi/Operations/ApiKey.d.ts.map +1 -0
- package/dist/HttpApi/Operations/ApiKey.js +5 -0
- package/dist/HttpApi/Operations/ApiKey.js.map +1 -0
- package/dist/HttpApi/Operations/Discovery.d.ts +19 -0
- package/dist/HttpApi/Operations/Discovery.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Discovery.js +7 -0
- package/dist/HttpApi/Operations/Discovery.js.map +1 -0
- package/dist/HttpApi/Operations/EmailAuth.d.ts +12 -0
- package/dist/HttpApi/Operations/EmailAuth.d.ts.map +1 -0
- package/dist/HttpApi/Operations/EmailAuth.js +5 -0
- package/dist/HttpApi/Operations/EmailAuth.js.map +1 -0
- package/dist/HttpApi/Operations/EmailOtp.d.ts +14 -0
- package/dist/HttpApi/Operations/EmailOtp.d.ts.map +1 -0
- package/dist/HttpApi/Operations/EmailOtp.js +5 -0
- package/dist/HttpApi/Operations/EmailOtp.js.map +1 -0
- package/dist/HttpApi/Operations/EmailVerification.d.ts +14 -0
- package/dist/HttpApi/Operations/EmailVerification.d.ts.map +1 -0
- package/dist/HttpApi/Operations/EmailVerification.js +5 -0
- package/dist/HttpApi/Operations/EmailVerification.js.map +1 -0
- package/dist/HttpApi/Operations/HttpOperation.d.ts +4 -0
- package/dist/HttpApi/Operations/HttpOperation.d.ts.map +1 -0
- package/dist/HttpApi/Operations/HttpOperation.js +2 -0
- package/dist/HttpApi/Operations/HttpOperation.js.map +1 -0
- package/dist/HttpApi/Operations/Identity.d.ts +22 -0
- package/dist/HttpApi/Operations/Identity.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Identity.js +5 -0
- package/dist/HttpApi/Operations/Identity.js.map +1 -0
- package/dist/HttpApi/Operations/Jwt.d.ts +14 -0
- package/dist/HttpApi/Operations/Jwt.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Jwt.js +5 -0
- package/dist/HttpApi/Operations/Jwt.js.map +1 -0
- package/dist/HttpApi/Operations/LoginApproval.d.ts +16 -0
- package/dist/HttpApi/Operations/LoginApproval.d.ts.map +1 -0
- package/dist/HttpApi/Operations/LoginApproval.js +5 -0
- package/dist/HttpApi/Operations/LoginApproval.js.map +1 -0
- package/dist/HttpApi/Operations/MagicLink.d.ts +14 -0
- package/dist/HttpApi/Operations/MagicLink.d.ts.map +1 -0
- package/dist/HttpApi/Operations/MagicLink.js +5 -0
- package/dist/HttpApi/Operations/MagicLink.js.map +1 -0
- package/dist/HttpApi/Operations/Mfa.d.ts +24 -0
- package/dist/HttpApi/Operations/Mfa.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Mfa.js +5 -0
- package/dist/HttpApi/Operations/Mfa.js.map +1 -0
- package/dist/HttpApi/Operations/OAuth.d.ts +20 -0
- package/dist/HttpApi/Operations/OAuth.d.ts.map +1 -0
- package/dist/HttpApi/Operations/OAuth.js +5 -0
- package/dist/HttpApi/Operations/OAuth.js.map +1 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts +12 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts.map +1 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.js +5 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.js.map +1 -0
- package/dist/HttpApi/Operations/OAuthToken.d.ts +16 -0
- package/dist/HttpApi/Operations/OAuthToken.d.ts.map +1 -0
- package/dist/HttpApi/Operations/OAuthToken.js +5 -0
- package/dist/HttpApi/Operations/OAuthToken.js.map +1 -0
- package/dist/HttpApi/Operations/Passkey.d.ts +22 -0
- package/dist/HttpApi/Operations/Passkey.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Passkey.js +5 -0
- package/dist/HttpApi/Operations/Passkey.js.map +1 -0
- package/dist/HttpApi/Operations/Password.d.ts +22 -0
- package/dist/HttpApi/Operations/Password.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Password.js +5 -0
- package/dist/HttpApi/Operations/Password.js.map +1 -0
- package/dist/HttpApi/Operations/RecoveryCodes.d.ts +20 -0
- package/dist/HttpApi/Operations/RecoveryCodes.d.ts.map +1 -0
- package/dist/HttpApi/Operations/RecoveryCodes.js +5 -0
- package/dist/HttpApi/Operations/RecoveryCodes.js.map +1 -0
- package/dist/HttpApi/Operations/RefreshToken.d.ts +12 -0
- package/dist/HttpApi/Operations/RefreshToken.d.ts.map +1 -0
- package/dist/HttpApi/Operations/RefreshToken.js +5 -0
- package/dist/HttpApi/Operations/RefreshToken.js.map +1 -0
- package/dist/HttpApi/Operations/Security.d.ts +12 -0
- package/dist/HttpApi/Operations/Security.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Security.js +5 -0
- package/dist/HttpApi/Operations/Security.js.map +1 -0
- package/dist/HttpApi/Operations/SecurityTimeline.d.ts +19 -0
- package/dist/HttpApi/Operations/SecurityTimeline.d.ts.map +1 -0
- package/dist/HttpApi/Operations/SecurityTimeline.js +7 -0
- package/dist/HttpApi/Operations/SecurityTimeline.js.map +1 -0
- package/dist/HttpApi/Operations/Session.d.ts +22 -0
- package/dist/HttpApi/Operations/Session.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Session.js +5 -0
- package/dist/HttpApi/Operations/Session.js.map +1 -0
- package/dist/HttpApi/Operations/StepUp.d.ts +22 -0
- package/dist/HttpApi/Operations/StepUp.d.ts.map +1 -0
- package/dist/HttpApi/Operations/StepUp.js +5 -0
- package/dist/HttpApi/Operations/StepUp.js.map +1 -0
- package/dist/HttpApi/Operations/Totp.d.ts +20 -0
- package/dist/HttpApi/Operations/Totp.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Totp.js +5 -0
- package/dist/HttpApi/Operations/Totp.js.map +1 -0
- package/dist/HttpApi/Operations/TrustedDevice.d.ts +23 -0
- package/dist/HttpApi/Operations/TrustedDevice.d.ts.map +1 -0
- package/dist/HttpApi/Operations/TrustedDevice.js +7 -0
- package/dist/HttpApi/Operations/TrustedDevice.js.map +1 -0
- package/dist/HttpApi/Operations/index.d.ts +27 -0
- package/dist/HttpApi/Operations/index.d.ts.map +1 -0
- package/dist/HttpApi/Operations/index.js +27 -0
- package/dist/HttpApi/Operations/index.js.map +1 -0
- package/dist/HttpApi/Passkey.d.ts +5 -0
- package/dist/HttpApi/Passkey.d.ts.map +1 -0
- package/dist/HttpApi/Passkey.js +5 -0
- package/dist/HttpApi/Passkey.js.map +1 -0
- package/dist/HttpApi/Password.d.ts +220 -0
- package/dist/HttpApi/Password.d.ts.map +1 -0
- package/dist/HttpApi/Password.js +237 -0
- package/dist/HttpApi/Password.js.map +1 -0
- package/dist/HttpApi/PasswordContract.d.ts +307 -0
- package/dist/HttpApi/PasswordContract.d.ts.map +1 -0
- package/dist/HttpApi/PasswordContract.js +63 -0
- package/dist/HttpApi/PasswordContract.js.map +1 -0
- package/dist/HttpApi/PasswordGuards.d.ts +82 -0
- package/dist/HttpApi/PasswordGuards.d.ts.map +1 -0
- package/dist/HttpApi/PasswordGuards.js +179 -0
- package/dist/HttpApi/PasswordGuards.js.map +1 -0
- package/dist/HttpApi/RecoveryCodes.d.ts +5 -0
- package/dist/HttpApi/RecoveryCodes.d.ts.map +1 -0
- package/dist/HttpApi/RecoveryCodes.js +5 -0
- package/dist/HttpApi/RecoveryCodes.js.map +1 -0
- package/dist/HttpApi/RefreshToken.d.ts +4 -0
- package/dist/HttpApi/RefreshToken.d.ts.map +1 -0
- package/dist/HttpApi/RefreshToken.js +4 -0
- package/dist/HttpApi/RefreshToken.js.map +1 -0
- package/dist/HttpApi/RequestGuards.d.ts +42 -0
- package/dist/HttpApi/RequestGuards.d.ts.map +1 -0
- package/dist/HttpApi/RequestGuards.js +194 -0
- package/dist/HttpApi/RequestGuards.js.map +1 -0
- package/dist/HttpApi/Schemas.d.ts +361 -84
- package/dist/HttpApi/Schemas.d.ts.map +1 -1
- package/dist/HttpApi/Schemas.js +190 -27
- package/dist/HttpApi/Schemas.js.map +1 -1
- package/dist/HttpApi/Security.d.ts +12 -93
- package/dist/HttpApi/Security.d.ts.map +1 -1
- package/dist/HttpApi/Security.js +65 -356
- package/dist/HttpApi/Security.js.map +1 -1
- package/dist/HttpApi/SecurityTimeline.d.ts +4 -0
- package/dist/HttpApi/SecurityTimeline.d.ts.map +1 -0
- package/dist/HttpApi/SecurityTimeline.js +4 -0
- package/dist/HttpApi/SecurityTimeline.js.map +1 -0
- package/dist/HttpApi/Session.d.ts +5 -0
- package/dist/HttpApi/Session.d.ts.map +1 -0
- package/dist/HttpApi/Session.js +5 -0
- package/dist/HttpApi/Session.js.map +1 -0
- package/dist/HttpApi/SessionGuards.d.ts +15 -0
- package/dist/HttpApi/SessionGuards.d.ts.map +1 -0
- package/dist/HttpApi/SessionGuards.js +37 -0
- package/dist/HttpApi/SessionGuards.js.map +1 -0
- package/dist/HttpApi/StepUp.d.ts +5 -0
- package/dist/HttpApi/StepUp.d.ts.map +1 -0
- package/dist/HttpApi/StepUp.js +5 -0
- package/dist/HttpApi/StepUp.js.map +1 -0
- package/dist/HttpApi/Totp.d.ts +5 -0
- package/dist/HttpApi/Totp.d.ts.map +1 -0
- package/dist/HttpApi/Totp.js +5 -0
- package/dist/HttpApi/Totp.js.map +1 -0
- package/dist/HttpApi/Transport.d.ts +4 -6
- package/dist/HttpApi/Transport.d.ts.map +1 -1
- package/dist/HttpApi/Transport.js +62 -36
- package/dist/HttpApi/Transport.js.map +1 -1
- package/dist/HttpApi/TrustedDevice.d.ts +4 -0
- package/dist/HttpApi/TrustedDevice.d.ts.map +1 -0
- package/dist/HttpApi/TrustedDevice.js +4 -0
- package/dist/HttpApi/TrustedDevice.js.map +1 -0
- package/dist/HttpApi/index.d.ts +9 -3
- package/dist/HttpApi/index.d.ts.map +1 -1
- package/dist/HttpApi/index.js +8 -2
- package/dist/HttpApi/index.js.map +1 -1
- package/dist/Identity.d.ts +138 -0
- package/dist/Identity.d.ts.map +1 -0
- package/dist/Identity.js +105 -0
- package/dist/Identity.js.map +1 -0
- package/dist/IdentityManagement.d.ts +189 -0
- package/dist/IdentityManagement.d.ts.map +1 -0
- package/dist/IdentityManagement.js +317 -0
- package/dist/IdentityManagement.js.map +1 -0
- package/dist/IncidentAction.d.ts +1 -4
- package/dist/IncidentAction.d.ts.map +1 -1
- package/dist/IncidentAction.js +15 -9
- package/dist/IncidentAction.js.map +1 -1
- package/dist/Internal.d.ts +2 -0
- package/dist/Internal.d.ts.map +1 -1
- package/dist/Internal.js +30 -0
- package/dist/Internal.js.map +1 -1
- package/dist/Invitation.d.ts +362 -0
- package/dist/Invitation.d.ts.map +1 -0
- package/dist/Invitation.js +633 -0
- package/dist/Invitation.js.map +1 -0
- package/dist/IpQualityScore.d.ts +38 -0
- package/dist/IpQualityScore.d.ts.map +1 -0
- package/dist/IpQualityScore.js +215 -0
- package/dist/IpQualityScore.js.map +1 -0
- package/dist/Jwt.d.ts +8 -29
- package/dist/Jwt.d.ts.map +1 -1
- package/dist/Jwt.js +67 -56
- package/dist/Jwt.js.map +1 -1
- package/dist/LoginApproval.d.ts +15 -30
- package/dist/LoginApproval.d.ts.map +1 -1
- package/dist/LoginApproval.js +47 -41
- package/dist/LoginApproval.js.map +1 -1
- package/dist/LoginNotification.d.ts +7 -11
- package/dist/LoginNotification.d.ts.map +1 -1
- package/dist/LoginNotification.js +30 -17
- package/dist/LoginNotification.js.map +1 -1
- package/dist/LoginRisk.d.ts +11 -13
- package/dist/LoginRisk.d.ts.map +1 -1
- package/dist/LoginRisk.js +66 -26
- package/dist/LoginRisk.js.map +1 -1
- package/dist/LoginRiskEnrichment.d.ts +145 -0
- package/dist/LoginRiskEnrichment.d.ts.map +1 -0
- package/dist/LoginRiskEnrichment.js +220 -0
- package/dist/LoginRiskEnrichment.js.map +1 -0
- package/dist/MagicLink.d.ts +9 -8
- package/dist/MagicLink.d.ts.map +1 -1
- package/dist/MagicLink.js +40 -73
- package/dist/MagicLink.js.map +1 -1
- package/dist/Mailer.d.ts +19 -12
- package/dist/Mailer.d.ts.map +1 -1
- package/dist/Mailer.js +10 -12
- package/dist/Mailer.js.map +1 -1
- package/dist/OAuth.d.ts +93 -96
- package/dist/OAuth.d.ts.map +1 -1
- package/dist/OAuth.js +404 -217
- package/dist/OAuth.js.map +1 -1
- package/dist/Passkey.d.ts +15 -17
- package/dist/Passkey.d.ts.map +1 -1
- package/dist/Passkey.js +86 -39
- package/dist/Passkey.js.map +1 -1
- package/dist/PasskeyBrowser.d.ts +39 -0
- package/dist/PasskeyBrowser.d.ts.map +1 -0
- package/dist/PasskeyBrowser.js +206 -0
- package/dist/PasskeyBrowser.js.map +1 -0
- package/dist/PasskeySimpleWebAuthn.d.ts.map +1 -1
- package/dist/PasskeySimpleWebAuthn.js +19 -7
- package/dist/PasskeySimpleWebAuthn.js.map +1 -1
- package/dist/Password.d.ts +71 -37
- package/dist/Password.d.ts.map +1 -1
- package/dist/Password.js +295 -81
- package/dist/Password.js.map +1 -1
- package/dist/PasswordRisk.d.ts +63 -0
- package/dist/PasswordRisk.d.ts.map +1 -0
- package/dist/PasswordRisk.js +37 -0
- package/dist/PasswordRisk.js.map +1 -0
- package/dist/Permission.d.ts +308 -0
- package/dist/Permission.d.ts.map +1 -0
- package/dist/Permission.js +827 -0
- package/dist/Permission.js.map +1 -0
- package/dist/Policy.d.ts +31 -18
- package/dist/Policy.d.ts.map +1 -1
- package/dist/Policy.js +58 -14
- package/dist/Policy.js.map +1 -1
- package/dist/PostgresDelegatedAccessStorageMigrations.d.ts +7 -0
- package/dist/PostgresDelegatedAccessStorageMigrations.d.ts.map +1 -0
- package/dist/PostgresDelegatedAccessStorageMigrations.js +119 -0
- package/dist/PostgresDelegatedAccessStorageMigrations.js.map +1 -0
- package/dist/PostgresStorageMigrations.d.ts +15 -0
- package/dist/PostgresStorageMigrations.d.ts.map +1 -0
- package/dist/PostgresStorageMigrations.js +620 -0
- package/dist/PostgresStorageMigrations.js.map +1 -0
- package/dist/Privacy.d.ts +0 -3
- package/dist/Privacy.d.ts.map +1 -1
- package/dist/Privacy.js +2 -5
- package/dist/Privacy.js.map +1 -1
- package/dist/RateLimiter.d.ts +0 -3
- package/dist/RateLimiter.d.ts.map +1 -1
- package/dist/RateLimiter.js +1 -4
- package/dist/RateLimiter.js.map +1 -1
- package/dist/RecoveryCode.d.ts +83 -11
- package/dist/RecoveryCode.d.ts.map +1 -1
- package/dist/RecoveryCode.js +273 -75
- package/dist/RecoveryCode.js.map +1 -1
- package/dist/RecoveryPolicy.d.ts +81 -0
- package/dist/RecoveryPolicy.d.ts.map +1 -0
- package/dist/RecoveryPolicy.js +119 -0
- package/dist/RecoveryPolicy.js.map +1 -0
- package/dist/RefreshToken.d.ts +0 -9
- package/dist/RefreshToken.d.ts.map +1 -1
- package/dist/RefreshToken.js +31 -22
- package/dist/RefreshToken.js.map +1 -1
- package/dist/SecurityTimeline.d.ts +1 -4
- package/dist/SecurityTimeline.d.ts.map +1 -1
- package/dist/SecurityTimeline.js +110 -17
- package/dist/SecurityTimeline.js.map +1 -1
- package/dist/Sessions.d.ts +124 -29
- package/dist/Sessions.d.ts.map +1 -1
- package/dist/Sessions.js +626 -94
- package/dist/Sessions.js.map +1 -1
- package/dist/StepUp.d.ts +132 -11
- package/dist/StepUp.d.ts.map +1 -1
- package/dist/StepUp.js +387 -19
- package/dist/StepUp.js.map +1 -1
- package/dist/Storage.d.ts +89 -23
- package/dist/Storage.d.ts.map +1 -1
- package/dist/Storage.js +10 -12
- package/dist/Storage.js.map +1 -1
- package/dist/StorageMigrations.d.ts +6 -1
- package/dist/StorageMigrations.d.ts.map +1 -1
- package/dist/StorageMigrations.js +224 -0
- package/dist/StorageMigrations.js.map +1 -1
- package/dist/StorageSchemaGenerator.d.ts +486 -0
- package/dist/StorageSchemaGenerator.d.ts.map +1 -0
- package/dist/StorageSchemaGenerator.js +1022 -0
- package/dist/StorageSchemaGenerator.js.map +1 -0
- package/dist/StrongFactor.d.ts +64 -0
- package/dist/StrongFactor.d.ts.map +1 -0
- package/dist/StrongFactor.js +100 -0
- package/dist/StrongFactor.js.map +1 -0
- package/dist/Testing.js +2 -2
- package/dist/Testing.js.map +1 -1
- package/dist/Totp.d.ts +88 -13
- package/dist/Totp.d.ts.map +1 -1
- package/dist/Totp.js +192 -34
- package/dist/Totp.js.map +1 -1
- package/dist/TrustedDevice.d.ts +0 -9
- package/dist/TrustedDevice.d.ts.map +1 -1
- package/dist/TrustedDevice.js +15 -17
- package/dist/TrustedDevice.js.map +1 -1
- package/dist/WaitUntil.d.ts +0 -3
- package/dist/WaitUntil.d.ts.map +1 -1
- package/dist/WaitUntil.js +1 -4
- package/dist/WaitUntil.js.map +1 -1
- package/dist/Webhook.d.ts +42 -12
- package/dist/Webhook.d.ts.map +1 -1
- package/dist/Webhook.js +165 -26
- package/dist/Webhook.js.map +1 -1
- package/dist/alchemy/cloudflare/Email.d.ts.map +1 -1
- package/dist/alchemy/cloudflare/Email.js +9 -4
- package/dist/alchemy/cloudflare/Email.js.map +1 -1
- package/dist/cloudflare/Email.js +1 -1
- package/dist/cloudflare/Email.js.map +1 -1
- package/dist/cloudflare/RequestMetadata.d.ts +49 -0
- package/dist/cloudflare/RequestMetadata.d.ts.map +1 -0
- package/dist/cloudflare/RequestMetadata.js +71 -0
- package/dist/cloudflare/RequestMetadata.js.map +1 -0
- package/dist/index.d.ts +0 -35
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +0 -35
- package/dist/index.js.map +1 -1
- package/dist/internal/AuthFlowFinalizer.d.ts +31 -0
- package/dist/internal/AuthFlowFinalizer.d.ts.map +1 -0
- package/dist/internal/AuthFlowFinalizer.js +182 -0
- package/dist/internal/AuthFlowFinalizer.js.map +1 -0
- package/migrations/0001_auth_storage.sql +1 -0
- package/migrations/0006_auth_totp_factor.sql +1 -0
- package/migrations/0024_auth_permission.sql +39 -0
- package/migrations/0025_auth_permission_definition.sql +19 -0
- package/migrations/0026_auth_user_identity.sql +59 -0
- package/migrations/0027_auth_audit_log_storage_order.sql +46 -0
- package/migrations/0028_auth_oauth_client_secret_key.sql +39 -0
- package/migrations/delegated-access/0001_auth_delegated_access.sql +152 -0
- package/migrations/postgres/0001_auth_core.sql +77 -0
- package/migrations/postgres/0002_auth_security_oauth.sql +65 -0
- package/migrations/postgres/0003_auth_credentials_tokens.sql +43 -0
- package/migrations/postgres/0004_auth_security_history.sql +103 -0
- package/migrations/postgres/0005_auth_webhooks.sql +29 -0
- package/migrations/postgres/0006_auth_domain_timeline.sql +50 -0
- package/migrations/postgres/0007_auth_oauth_clients.sql +85 -0
- package/migrations/postgres/0008_auth_oauth_tokens.sql +63 -0
- package/migrations/postgres/0009_auth_permissions.sql +66 -0
- package/migrations/postgres/delegated-access/0001_auth_delegated_access.sql +112 -0
- package/package.json +301 -2
package/dist/StepUp.js
CHANGED
|
@@ -1,9 +1,89 @@
|
|
|
1
|
-
import { Data, Duration, Effect } from "effect";
|
|
1
|
+
import { Context, Data, Duration, Effect, Layer, Option } from "effect";
|
|
2
|
+
import { CustomEvidencePolicies, deriveAssuranceResult, emptyCustomEvidencePolicyRegistry, latestAssuranceAuthenticationEventResult, latestFactorAuthenticationEventResult, latestMethodAuthenticationEventResult, } from "./Assurance.js";
|
|
2
3
|
import { currentUnixMillis } from "./Internal.js";
|
|
3
|
-
import {
|
|
4
|
+
import { PasskeyCredentialManagement } from "./Passkey.js";
|
|
5
|
+
import { AuthorizationError } from "./Policy.js";
|
|
6
|
+
import { RecoveryCodeManagement } from "./RecoveryCode.js";
|
|
4
7
|
import { CurrentSession } from "./Sessions.js";
|
|
8
|
+
import { CredentialStore } from "./Storage.js";
|
|
9
|
+
import { TotpFactorManagement } from "./Totp.js";
|
|
10
|
+
export class StepUpCapabilityError extends Data.TaggedError("StepUpCapabilityError") {
|
|
11
|
+
}
|
|
12
|
+
export class StepUpCapabilities extends Context.Service()("auth/StepUpCapabilities") {
|
|
13
|
+
}
|
|
5
14
|
export class StepUpRequired extends Data.TaggedError("StepUpRequired") {
|
|
6
15
|
}
|
|
16
|
+
export class StepUpDenied extends Data.TaggedError("StepUpDenied") {
|
|
17
|
+
}
|
|
18
|
+
const stepUpCapabilityError = (message, cause) => new StepUpCapabilityError({
|
|
19
|
+
message,
|
|
20
|
+
...(cause === undefined ? {} : { cause }),
|
|
21
|
+
});
|
|
22
|
+
const uniqueCapabilities = (capabilities) => [...new Set(capabilities)];
|
|
23
|
+
const capabilityArray = (capability) => typeof capability === "string" ? [capability] : capability;
|
|
24
|
+
export const makeStepUpCapabilities = (dependencies) => StepUpCapabilities.of({
|
|
25
|
+
listForUser: Effect.fn("auth.step_up.capabilities.list")(function* (input) {
|
|
26
|
+
const capabilities = new Set();
|
|
27
|
+
if (dependencies.credentials !== undefined) {
|
|
28
|
+
const passwordCredential = yield* dependencies.credentials
|
|
29
|
+
.findPasswordByUserId(input.userId)
|
|
30
|
+
.pipe(Effect.mapError((cause) => stepUpCapabilityError("Failed to load password capability", cause)));
|
|
31
|
+
if (Option.isSome(passwordCredential) &&
|
|
32
|
+
passwordCredential.value.revokedAt === undefined) {
|
|
33
|
+
capabilities.add("password");
|
|
34
|
+
capabilities.add("aal1-capable");
|
|
35
|
+
}
|
|
36
|
+
}
|
|
37
|
+
if (dependencies.passkeyCredentialManagement !== undefined) {
|
|
38
|
+
const passkeys = yield* dependencies.passkeyCredentialManagement
|
|
39
|
+
.listForUser({ userId: input.userId })
|
|
40
|
+
.pipe(Effect.mapError((cause) => stepUpCapabilityError("Failed to load passkey capability", cause)));
|
|
41
|
+
if (passkeys.length > 0) {
|
|
42
|
+
capabilities.add("passkey");
|
|
43
|
+
if (dependencies.passkeySupportsAal2 !== undefined &&
|
|
44
|
+
passkeys.some(dependencies.passkeySupportsAal2)) {
|
|
45
|
+
capabilities.add("aal2-capable");
|
|
46
|
+
}
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
if (dependencies.totpFactorManagement !== undefined) {
|
|
50
|
+
const totpFactors = yield* dependencies.totpFactorManagement
|
|
51
|
+
.listForUser({ userId: input.userId })
|
|
52
|
+
.pipe(Effect.mapError((cause) => stepUpCapabilityError("Failed to load TOTP capability", cause)));
|
|
53
|
+
if (totpFactors.length > 0) {
|
|
54
|
+
capabilities.add("totp");
|
|
55
|
+
capabilities.add("aal2-capable");
|
|
56
|
+
}
|
|
57
|
+
}
|
|
58
|
+
if (dependencies.recoveryCodeManagement !== undefined) {
|
|
59
|
+
const recoveryCodes = yield* dependencies.recoveryCodeManagement
|
|
60
|
+
.listForUser({ userId: input.userId })
|
|
61
|
+
.pipe(Effect.mapError((cause) => stepUpCapabilityError("Failed to load recovery-code capability", cause)));
|
|
62
|
+
if (recoveryCodes.length > 0) {
|
|
63
|
+
capabilities.add("recovery-code");
|
|
64
|
+
}
|
|
65
|
+
}
|
|
66
|
+
return [...capabilities];
|
|
67
|
+
}),
|
|
68
|
+
});
|
|
69
|
+
export const StepUpCapabilitiesLive = Layer.effect(StepUpCapabilities)(Effect.gen(function* () {
|
|
70
|
+
const credentials = yield* Effect.serviceOption(CredentialStore);
|
|
71
|
+
const passkeyCredentialManagement = yield* Effect.serviceOption(PasskeyCredentialManagement);
|
|
72
|
+
const totpFactorManagement = yield* Effect.serviceOption(TotpFactorManagement);
|
|
73
|
+
const recoveryCodeManagement = yield* Effect.serviceOption(RecoveryCodeManagement);
|
|
74
|
+
return makeStepUpCapabilities({
|
|
75
|
+
...(Option.isSome(credentials) ? { credentials: credentials.value } : {}),
|
|
76
|
+
...(Option.isSome(passkeyCredentialManagement)
|
|
77
|
+
? { passkeyCredentialManagement: passkeyCredentialManagement.value }
|
|
78
|
+
: {}),
|
|
79
|
+
...(Option.isSome(totpFactorManagement)
|
|
80
|
+
? { totpFactorManagement: totpFactorManagement.value }
|
|
81
|
+
: {}),
|
|
82
|
+
...(Option.isSome(recoveryCodeManagement)
|
|
83
|
+
? { recoveryCodeManagement: recoveryCodeManagement.value }
|
|
84
|
+
: {}),
|
|
85
|
+
});
|
|
86
|
+
}));
|
|
7
87
|
const aalRank = {
|
|
8
88
|
aal1: 1,
|
|
9
89
|
aal2: 2,
|
|
@@ -28,13 +108,42 @@ const freshnessFailure = (session, now, maxAge, verifiedAt = Number(session.auth
|
|
|
28
108
|
authAgeMillis,
|
|
29
109
|
};
|
|
30
110
|
};
|
|
31
|
-
const
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
111
|
+
const loadCustomEvidencePolicies = Effect.serviceOption(CustomEvidencePolicies).pipe(Effect.map((policies) => Option.getOrElse(policies, () => emptyCustomEvidencePolicyRegistry)));
|
|
112
|
+
const validateAuthenticationEvents = (session, customEvidencePolicies) => Effect.fromResult(deriveAssuranceResult(session.authenticationEvents, {
|
|
113
|
+
customEvidencePolicies,
|
|
114
|
+
})).pipe(Effect.asVoid);
|
|
115
|
+
const freshnessReferenceTime = (session, requiredAal, customEvidencePolicies) => requiredAal === undefined
|
|
116
|
+
? Effect.succeed(Number(session.authTime))
|
|
117
|
+
: Effect.fromResult(latestAssuranceAuthenticationEventResult(session.authenticationEvents, requiredAal, customEvidencePolicies)).pipe(Effect.map((event) => Number(event?.verifiedAt ?? session.authTime)));
|
|
118
|
+
const hasRecoveryRemediation = (session) => session.claims?.requirements?.includes("recovery_remediation") === true;
|
|
119
|
+
const isStrongMethod = (method) => method === "totp" || method === "passkey";
|
|
120
|
+
const methodRequiresRecoveryRemediation = (session, method, customEvidencePolicies) => Effect.gen(function* () {
|
|
121
|
+
if (isStrongMethod(method)) {
|
|
122
|
+
return true;
|
|
123
|
+
}
|
|
124
|
+
let requiresRemediation = false;
|
|
125
|
+
for (const event of session.authenticationEvents) {
|
|
126
|
+
if (event.type !== "custom") {
|
|
127
|
+
continue;
|
|
128
|
+
}
|
|
129
|
+
const assurance = yield* Effect.fromResult(deriveAssuranceResult([event], { customEvidencePolicies }));
|
|
130
|
+
if (assurance.amr.includes(method) &&
|
|
131
|
+
(!assurance.primaryEstablished || aalAtLeast(assurance.level, "aal2"))) {
|
|
132
|
+
requiresRemediation = true;
|
|
133
|
+
}
|
|
134
|
+
}
|
|
135
|
+
return requiresRemediation;
|
|
136
|
+
});
|
|
137
|
+
const remediationFailure = (session) => hasRecoveryRemediation(session)
|
|
138
|
+
? {
|
|
139
|
+
reason: "session-requirement-unsatisfied",
|
|
140
|
+
requirement: "recovery_remediation",
|
|
141
|
+
}
|
|
142
|
+
: undefined;
|
|
143
|
+
const eventVerifiedAt = (event) => event === undefined ? Number.NEGATIVE_INFINITY : Number(event.verifiedAt);
|
|
36
144
|
const sessionRequirementFailures = (session, noSessionRequirements) => {
|
|
37
|
-
if (noSessionRequirements === undefined ||
|
|
145
|
+
if (noSessionRequirements === undefined ||
|
|
146
|
+
noSessionRequirements.length === 0) {
|
|
38
147
|
return [];
|
|
39
148
|
}
|
|
40
149
|
const activeRequirements = session.claims?.requirements ?? [];
|
|
@@ -49,34 +158,293 @@ const sessionRequirementFailures = (session, noSessionRequirements) => {
|
|
|
49
158
|
};
|
|
50
159
|
export const checkStepUp = (requirement) => Effect.gen(function* () {
|
|
51
160
|
const session = yield* CurrentSession;
|
|
161
|
+
const customEvidencePolicies = yield* loadCustomEvidencePolicies;
|
|
162
|
+
yield* validateAuthenticationEvents(session, customEvidencePolicies);
|
|
52
163
|
const now = requirement.maxAge === undefined ? undefined : yield* currentUnixMillis;
|
|
164
|
+
const freshness = requirement.maxAge === undefined || now === undefined
|
|
165
|
+
? undefined
|
|
166
|
+
: freshnessFailure(session, Number(now), requirement.maxAge, yield* freshnessReferenceTime(session, requirement.aal, customEvidencePolicies));
|
|
53
167
|
const failures = [
|
|
168
|
+
...(requirement.aal !== undefined &&
|
|
169
|
+
aalRank[requirement.aal] >= aalRank.aal2 &&
|
|
170
|
+
session.claims?.requirements?.includes("recovery_remediation") === true
|
|
171
|
+
? [
|
|
172
|
+
{
|
|
173
|
+
reason: "session-requirement-unsatisfied",
|
|
174
|
+
requirement: "recovery_remediation",
|
|
175
|
+
},
|
|
176
|
+
]
|
|
177
|
+
: []),
|
|
54
178
|
...(requirement.aal === undefined
|
|
55
179
|
? []
|
|
56
180
|
: [aalFailure(session, requirement.aal)].filter((failure) => failure !== undefined)),
|
|
57
|
-
...(
|
|
58
|
-
? []
|
|
59
|
-
: [
|
|
60
|
-
freshnessFailure(session, Number(now), requirement.maxAge, freshnessReferenceTime(session, requirement.aal)),
|
|
61
|
-
].filter((failure) => failure !== undefined)),
|
|
181
|
+
...(freshness === undefined ? [] : [freshness]),
|
|
62
182
|
...sessionRequirementFailures(session, requirement.noSessionRequirements),
|
|
63
183
|
];
|
|
64
184
|
return failures.length === 0
|
|
65
185
|
? { _tag: "Satisfied", session }
|
|
66
186
|
: { _tag: "Required", session, failures };
|
|
67
187
|
});
|
|
188
|
+
export const aal = (requiredAal, options = {}) => ({
|
|
189
|
+
_tag: "Aal",
|
|
190
|
+
aal: requiredAal,
|
|
191
|
+
...(options.maxAge === undefined ? {} : { maxAge: options.maxAge }),
|
|
192
|
+
});
|
|
193
|
+
export const amr = (method, options = {}) => ({
|
|
194
|
+
_tag: "Amr",
|
|
195
|
+
method,
|
|
196
|
+
...(options.maxAge === undefined ? {} : { maxAge: options.maxAge }),
|
|
197
|
+
});
|
|
198
|
+
export const factor = (method, factorId, options = {}) => ({
|
|
199
|
+
_tag: "Factor",
|
|
200
|
+
method,
|
|
201
|
+
factorId,
|
|
202
|
+
...(options.maxAge === undefined ? {} : { maxAge: options.maxAge }),
|
|
203
|
+
});
|
|
204
|
+
export const every = (...requirements) => ({
|
|
205
|
+
_tag: "Every",
|
|
206
|
+
requirements,
|
|
207
|
+
});
|
|
208
|
+
export const oneOf = (...requirements) => ({
|
|
209
|
+
_tag: "OneOf",
|
|
210
|
+
requirements,
|
|
211
|
+
});
|
|
212
|
+
export const available = (capabilities, policy) => ({
|
|
213
|
+
_tag: "Available",
|
|
214
|
+
capabilities: uniqueCapabilities(capabilityArray(capabilities)),
|
|
215
|
+
policy,
|
|
216
|
+
});
|
|
217
|
+
export const allow = () => ({ _tag: "Allow" });
|
|
218
|
+
export const deny = (reason = "step-up-policy-denied") => ({
|
|
219
|
+
_tag: "Deny",
|
|
220
|
+
reason,
|
|
221
|
+
});
|
|
222
|
+
export const adaptive = (rules) => ({
|
|
223
|
+
_tag: "AdaptiveStepUpPolicy",
|
|
224
|
+
rules,
|
|
225
|
+
});
|
|
226
|
+
export const session = (input) => ({
|
|
227
|
+
_tag: "SessionStepUpPolicy",
|
|
228
|
+
require: input.require,
|
|
229
|
+
...(input.maxAge === undefined ? {} : { maxAge: input.maxAge }),
|
|
230
|
+
...(input.noSessionRequirements === undefined
|
|
231
|
+
? {}
|
|
232
|
+
: { noSessionRequirements: input.noSessionRequirements }),
|
|
233
|
+
});
|
|
234
|
+
const isSessionStepUpPolicy = (policy) => "_tag" in policy && policy._tag === "SessionStepUpPolicy";
|
|
235
|
+
export const isAdaptiveStepUpPolicy = (policy) => "_tag" in policy && policy._tag === "AdaptiveStepUpPolicy";
|
|
236
|
+
const predicateFailures = (predicate, current, now, inheritedMaxAge, customEvidencePolicies) => {
|
|
237
|
+
switch (predicate._tag) {
|
|
238
|
+
case "Aal": {
|
|
239
|
+
return Effect.gen(function* () {
|
|
240
|
+
const maxAge = predicate.maxAge ?? inheritedMaxAge;
|
|
241
|
+
const failure = aalFailure(current, predicate.aal);
|
|
242
|
+
const freshness = maxAge === undefined
|
|
243
|
+
? undefined
|
|
244
|
+
: freshnessFailure(current, now, maxAge, yield* freshnessReferenceTime(current, predicate.aal, customEvidencePolicies));
|
|
245
|
+
const remediation = aalRank[predicate.aal] >= aalRank.aal2
|
|
246
|
+
? remediationFailure(current)
|
|
247
|
+
: undefined;
|
|
248
|
+
return [remediation, failure, freshness].filter((detail) => detail !== undefined);
|
|
249
|
+
});
|
|
250
|
+
}
|
|
251
|
+
case "Amr": {
|
|
252
|
+
return Effect.gen(function* () {
|
|
253
|
+
const maxAge = predicate.maxAge ?? inheritedMaxAge;
|
|
254
|
+
const event = yield* Effect.fromResult(latestMethodAuthenticationEventResult(current.authenticationEvents, predicate.method, customEvidencePolicies));
|
|
255
|
+
const methodFailure = current.amr.includes(predicate.method)
|
|
256
|
+
? undefined
|
|
257
|
+
: {
|
|
258
|
+
reason: "amr-missing",
|
|
259
|
+
method: predicate.method,
|
|
260
|
+
};
|
|
261
|
+
const freshness = maxAge === undefined
|
|
262
|
+
? undefined
|
|
263
|
+
: freshnessFailure(current, now, maxAge, eventVerifiedAt(event));
|
|
264
|
+
const requiresRemediation = hasRecoveryRemediation(current)
|
|
265
|
+
? yield* methodRequiresRecoveryRemediation(current, predicate.method, customEvidencePolicies)
|
|
266
|
+
: false;
|
|
267
|
+
const remediation = requiresRemediation
|
|
268
|
+
? remediationFailure(current)
|
|
269
|
+
: undefined;
|
|
270
|
+
return [remediation, methodFailure, freshness].filter((detail) => detail !== undefined);
|
|
271
|
+
});
|
|
272
|
+
}
|
|
273
|
+
case "Factor": {
|
|
274
|
+
return Effect.gen(function* () {
|
|
275
|
+
const maxAge = predicate.maxAge ?? inheritedMaxAge;
|
|
276
|
+
const event = yield* Effect.fromResult(latestFactorAuthenticationEventResult(current.authenticationEvents, predicate.method, predicate.factorId, customEvidencePolicies));
|
|
277
|
+
const methodFailure = event === undefined
|
|
278
|
+
? {
|
|
279
|
+
reason: "amr-missing",
|
|
280
|
+
method: predicate.method,
|
|
281
|
+
}
|
|
282
|
+
: undefined;
|
|
283
|
+
const freshness = maxAge === undefined || event === undefined
|
|
284
|
+
? undefined
|
|
285
|
+
: freshnessFailure(current, now, maxAge, Number(event.verifiedAt));
|
|
286
|
+
const remediation = isStrongMethod(predicate.method)
|
|
287
|
+
? remediationFailure(current)
|
|
288
|
+
: undefined;
|
|
289
|
+
return [remediation, methodFailure, freshness].filter((detail) => detail !== undefined);
|
|
290
|
+
});
|
|
291
|
+
}
|
|
292
|
+
case "Every": {
|
|
293
|
+
return Effect.gen(function* () {
|
|
294
|
+
const failures = [];
|
|
295
|
+
for (const requirement of predicate.requirements) {
|
|
296
|
+
failures.push(...(yield* predicateFailures(requirement, current, now, inheritedMaxAge, customEvidencePolicies)));
|
|
297
|
+
}
|
|
298
|
+
return failures;
|
|
299
|
+
});
|
|
300
|
+
}
|
|
301
|
+
case "OneOf": {
|
|
302
|
+
if (predicate.requirements.length === 0) {
|
|
303
|
+
return Effect.succeed([{ reason: "step-up-alternative-unsatisfied" }]);
|
|
304
|
+
}
|
|
305
|
+
return Effect.gen(function* () {
|
|
306
|
+
const results = [];
|
|
307
|
+
for (const requirement of predicate.requirements) {
|
|
308
|
+
results.push(yield* predicateFailures(requirement, current, now, inheritedMaxAge, customEvidencePolicies));
|
|
309
|
+
}
|
|
310
|
+
return results.some((failures) => failures.length === 0)
|
|
311
|
+
? []
|
|
312
|
+
: results.flat();
|
|
313
|
+
});
|
|
314
|
+
}
|
|
315
|
+
}
|
|
316
|
+
};
|
|
317
|
+
export const checkPolicy = (policy) => {
|
|
318
|
+
if (!isSessionStepUpPolicy(policy)) {
|
|
319
|
+
return checkStepUp(policy);
|
|
320
|
+
}
|
|
321
|
+
return Effect.gen(function* () {
|
|
322
|
+
const current = yield* CurrentSession;
|
|
323
|
+
const customEvidencePolicies = yield* loadCustomEvidencePolicies;
|
|
324
|
+
yield* validateAuthenticationEvents(current, customEvidencePolicies);
|
|
325
|
+
const now = yield* currentUnixMillis;
|
|
326
|
+
const failures = [
|
|
327
|
+
...(yield* predicateFailures(policy.require, current, Number(now), policy.maxAge, customEvidencePolicies)),
|
|
328
|
+
...sessionRequirementFailures(current, policy.noSessionRequirements),
|
|
329
|
+
];
|
|
330
|
+
return failures.length === 0
|
|
331
|
+
? { _tag: "Satisfied", session: current }
|
|
332
|
+
: { _tag: "Required", session: current, failures };
|
|
333
|
+
});
|
|
334
|
+
};
|
|
335
|
+
export const checkAdaptivePolicy = (policy) => Effect.gen(function* () {
|
|
336
|
+
const current = yield* CurrentSession;
|
|
337
|
+
const customEvidencePolicies = yield* loadCustomEvidencePolicies;
|
|
338
|
+
yield* validateAuthenticationEvents(current, customEvidencePolicies);
|
|
339
|
+
const capabilities = yield* StepUpCapabilities.use((service) => service.listForUser({ userId: current.userId }));
|
|
340
|
+
for (const rule of policy.rules) {
|
|
341
|
+
switch (rule._tag) {
|
|
342
|
+
case "Allow": {
|
|
343
|
+
return { _tag: "Satisfied", session: current };
|
|
344
|
+
}
|
|
345
|
+
case "Deny": {
|
|
346
|
+
return {
|
|
347
|
+
_tag: "Denied",
|
|
348
|
+
session: current,
|
|
349
|
+
reason: rule.reason,
|
|
350
|
+
};
|
|
351
|
+
}
|
|
352
|
+
case "Available": {
|
|
353
|
+
const matched = rule.capabilities.filter((capability) => capabilities.includes(capability));
|
|
354
|
+
if (matched.length === 0) {
|
|
355
|
+
continue;
|
|
356
|
+
}
|
|
357
|
+
const decision = yield* checkPolicy(rule.policy);
|
|
358
|
+
return {
|
|
359
|
+
...decision,
|
|
360
|
+
capabilities: matched,
|
|
361
|
+
};
|
|
362
|
+
}
|
|
363
|
+
}
|
|
364
|
+
}
|
|
365
|
+
return {
|
|
366
|
+
_tag: "Denied",
|
|
367
|
+
session: current,
|
|
368
|
+
reason: "no-step-up-capability-available",
|
|
369
|
+
};
|
|
370
|
+
});
|
|
371
|
+
export const checkAnyPolicy = (policy) => isAdaptiveStepUpPolicy(policy)
|
|
372
|
+
? checkAdaptivePolicy(policy)
|
|
373
|
+
: checkPolicy(policy);
|
|
68
374
|
export const requireStepUp = (requirement) => Effect.flatMap(checkStepUp(requirement), (decision) => decision._tag === "Satisfied"
|
|
69
375
|
? Effect.void
|
|
70
376
|
: Effect.fail(new StepUpRequired({
|
|
71
377
|
failures: decision.failures,
|
|
72
378
|
session: decision.session,
|
|
73
379
|
})));
|
|
74
|
-
export const
|
|
380
|
+
export const requirePolicy = (policy) => Effect.flatMap(checkPolicy(policy), (decision) => decision._tag === "Satisfied"
|
|
381
|
+
? Effect.void
|
|
382
|
+
: Effect.fail(new StepUpRequired({
|
|
383
|
+
failures: decision.failures,
|
|
384
|
+
session: decision.session,
|
|
385
|
+
})));
|
|
386
|
+
export const requireAdaptivePolicy = (policy) => Effect.gen(function* () {
|
|
387
|
+
const decision = yield* checkAdaptivePolicy(policy);
|
|
388
|
+
switch (decision._tag) {
|
|
389
|
+
case "Satisfied": {
|
|
390
|
+
return;
|
|
391
|
+
}
|
|
392
|
+
case "Required": {
|
|
393
|
+
return yield* new StepUpRequired({
|
|
394
|
+
failures: decision.failures,
|
|
395
|
+
session: decision.session,
|
|
396
|
+
...(decision.capabilities === undefined
|
|
397
|
+
? {}
|
|
398
|
+
: { capabilities: decision.capabilities }),
|
|
399
|
+
});
|
|
400
|
+
}
|
|
401
|
+
case "Denied": {
|
|
402
|
+
return yield* new StepUpDenied({
|
|
403
|
+
reason: decision.reason,
|
|
404
|
+
session: decision.session,
|
|
405
|
+
...(decision.capabilities === undefined
|
|
406
|
+
? {}
|
|
407
|
+
: { capabilities: decision.capabilities }),
|
|
408
|
+
});
|
|
409
|
+
}
|
|
410
|
+
}
|
|
411
|
+
});
|
|
412
|
+
export const requireAnyPolicy = (policy) => isAdaptiveStepUpPolicy(policy)
|
|
413
|
+
? requireAdaptivePolicy(policy)
|
|
414
|
+
: requirePolicy(policy);
|
|
415
|
+
export function toGuard(policy) {
|
|
416
|
+
return requireAnyPolicy(policy);
|
|
417
|
+
}
|
|
418
|
+
export const requireAal = (requiredAal) => requireStepUp({
|
|
419
|
+
aal: requiredAal,
|
|
420
|
+
...(aalRank[requiredAal] >= aalRank.aal2
|
|
421
|
+
? { noSessionRequirements: ["recovery_remediation"] }
|
|
422
|
+
: {}),
|
|
423
|
+
});
|
|
75
424
|
export const requireFresh = (maxAge) => requireStepUp({ maxAge });
|
|
76
425
|
export const requireNoSessionRequirements = (...requirements) => requireStepUp({ noSessionRequirements: requirements });
|
|
77
|
-
export
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
426
|
+
export function toPolicy(requirement, policyId) {
|
|
427
|
+
return requireAnyPolicy(requirement).pipe(Effect.mapError((cause) => {
|
|
428
|
+
switch (cause._tag) {
|
|
429
|
+
case "CustomEvidencePolicyError": {
|
|
430
|
+
return cause;
|
|
431
|
+
}
|
|
432
|
+
case "StepUpDenied": {
|
|
433
|
+
return new AuthorizationError({
|
|
434
|
+
reason: cause.reason,
|
|
435
|
+
policyId,
|
|
436
|
+
cause,
|
|
437
|
+
});
|
|
438
|
+
}
|
|
439
|
+
case "StepUpRequired":
|
|
440
|
+
case "StepUpCapabilityError": {
|
|
441
|
+
return new AuthorizationError({
|
|
442
|
+
reason: "step-up-required",
|
|
443
|
+
policyId,
|
|
444
|
+
cause,
|
|
445
|
+
});
|
|
446
|
+
}
|
|
447
|
+
}
|
|
448
|
+
}));
|
|
449
|
+
}
|
|
82
450
|
//# sourceMappingURL=StepUp.js.map
|
package/dist/StepUp.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"StepUp.js","sourceRoot":"","sources":["../src/StepUp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAGhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAmC/C,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAGnE;CAAG;AAEL,MAAM,OAAO,GAAuC;IAClD,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,MAA0B,EAC1B,OAA2B,EAClB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;AAElD,MAAM,UAAU,GAAG,CACjB,OAA4B,EAC5B,WAA+B,EACE,EAAE,CACnC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC;IAClC,CAAC,CAAC,SAAS;IACX,CAAC,CAAC;QACE,MAAM,EAAE,aAAa;QACrB,WAAW;QACX,UAAU,EAAE,OAAO,CAAC,GAAG;KACxB,CAAC;AAER,MAAM,gBAAgB,GAAG,CACvB,OAA4B,EAC5B,GAAW,EACX,MAAyB,EACzB,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EACJ,EAAE;IACnC,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC;IAEpD,OAAO,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,MAAM,EAAE,cAAc;YACtB,YAAY;YACZ,aAAa;SACd,CAAC;AACR,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAAG,CAC7B,OAA4B,EAC5B,WAA2C,EACnC,EAAE,CACV,WAAW,KAAK,SAAS;IACzB,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI;IACpC,OAAO,CAAC,aAAa,KAAK,SAAS;IACjC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC;IAC/B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE/B,MAAM,0BAA0B,GAAG,CACjC,OAA4B,EAC5B,qBAAgE,EAChC,EAAE;IAClC,IAAI,qBAAqB,KAAK,SAAS,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;IAE9D,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CACnD,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtC,CAAC,CAAC;YACE;gBACE,MAAM,EAAE,iCAA0C;gBAClD,WAAW;aACZ;SACF;QACH,CAAC,CAAC,EAAE,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,WAA8B,EACwB,EAAE,CACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IACtC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACpF,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAC3C,CAAC,OAAO,EAAkC,EAAE,CAAC,OAAO,KAAK,SAAS,CACnE,CAAC;QACN,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;YACvD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,gBAAgB,CACd,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,EACX,WAAW,CAAC,MAAM,EAClB,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CACjD;aACF,CAAC,MAAM,CACN,CAAC,OAAO,EAAkC,EAAE,CAAC,OAAO,KAAK,SAAS,CACnE,CAAC;QACN,GAAG,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,qBAAqB,CAAC;KAC1E,CAAC;IAEF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE,OAAO,EAAE;QACzC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACvD,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,WAA8B,EACuB,EAAE,CACvD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CACpD,QAAQ,CAAC,IAAI,KAAK,WAAW;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,cAAc,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CACH,CACN,CAAC;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,GAAuB,EAC8B,EAAE,CACvD,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;AAEzB,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAyB,EAC4B,EAAE,CACvD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAE5B,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,GAAG,YAA2C,EACO,EAAE,CACvD,aAAa,CAAC,EAAE,qBAAqB,EAAE,YAAY,EAAE,CAAC,CAAC;AAEzD,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,WAA8B,EAC9B,QAAmB,EAC8B,EAAE,CACnD,aAAa,CAAC,WAAW,CAAC,CAAC,IAAI,CAC7B,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,UAAU,CAAC;IACb,MAAM,EAAE,kBAAkB;IAC1B,QAAQ;IACR,KAAK;CACN,CAAC,CACL,CACF,CAAC"}
|
|
1
|
+
{"version":3,"file":"StepUp.js","sourceRoot":"","sources":["../src/StepUp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExE,OAAO,EACL,sBAAsB,EAGtB,qBAAqB,EACrB,iCAAiC,EACjC,wCAAwC,EACxC,qCAAqC,EACrC,qCAAqC,GACtC,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAAE,MAAM,cAAc,CAAC;AAK3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAO/C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AA4CjD,MAAM,OAAO,qBAAsB,SAAQ,IAAI,CAAC,WAAW,CACzD,uBAAuB,CAIvB;CAAG;AAQL,MAAM,OAAO,kBAAmB,SAAQ,OAAO,CAAC,OAAO,EAGpD,CAAC,yBAAyB,CAAC;CAAG;AAuFjC,MAAM,OAAO,cAAe,SAAQ,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAInE;CAAG;AAEL,MAAM,OAAO,YAAa,SAAQ,IAAI,CAAC,WAAW,CAAC,cAAc,CAI/D;CAAG;AAEL,MAAM,qBAAqB,GAAG,CAC5B,OAAe,EACf,KAAe,EACQ,EAAE,CACzB,IAAI,qBAAqB,CAAC;IACxB,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,YAAwC,EACX,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;AAE7D,MAAM,eAAe,GAAG,CACtB,UAAmC,EACN,EAAE,CAC/B,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AAE7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,YAA4C,EACjB,EAAE,CAC7B,kBAAkB,CAAC,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACvE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;QAEjD,IAAI,YAAY,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YAC3C,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,WAAW;iBACvD,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC;iBAClC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,oCAAoC,EAAE,KAAK,CAAC,CACnE,CACF,CAAC;YAEJ,IACE,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC;gBACjC,kBAAkB,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,EAChD,CAAC;gBACD,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC7B,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,2BAA2B,KAAK,SAAS,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,2BAA2B;iBAC7D,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBACrC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAClE,CACF,CAAC;YAEJ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC5B,IACE,YAAY,CAAC,mBAAmB,KAAK,SAAS;oBAC9C,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAC/C,CAAC;oBACD,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,oBAAoB;iBACzD,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBACrC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAC/D,CACF,CAAC;YAEJ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACzB,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QAED,IAAI,YAAY,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;YACtD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,sBAAsB;iBAC7D,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;iBACrC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,qBAAqB,CACnB,yCAAyC,EACzC,KAAK,CACN,CACF,CACF,CAAC;YAEJ,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,YAAY,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;IAC3B,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC,MAAM,CAAC,kBAAkB,CAAC,CACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;IACjE,MAAM,2BAA2B,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAC7D,2BAA2B,CAC5B,CAAC;IACF,MAAM,oBAAoB,GACxB,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,sBAAsB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CACxD,sBAAsB,CACvB,CAAC;IAEF,OAAO,sBAAsB,CAAC;QAC5B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC;YAC5C,CAAC,CAAC,EAAE,2BAA2B,EAAE,2BAA2B,CAAC,KAAK,EAAE;YACpE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC;YACrC,CAAC,CAAC,EAAE,oBAAoB,EAAE,oBAAoB,CAAC,KAAK,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC;YACvC,CAAC,CAAC,EAAE,sBAAsB,EAAE,sBAAsB,CAAC,KAAK,EAAE;YAC1D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,OAAO,GAAuC;IAClD,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACR,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,MAA0B,EAC1B,OAA2B,EAClB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;AAElD,MAAM,UAAU,GAAG,CACjB,OAA4B,EAC5B,WAA+B,EACE,EAAE,CACnC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC;IAClC,CAAC,CAAC,SAAS;IACX,CAAC,CAAC;QACE,MAAM,EAAE,aAAa;QACrB,WAAW;QACX,UAAU,EAAE,OAAO,CAAC,GAAG;KACxB,CAAC;AAER,MAAM,gBAAgB,GAAG,CACvB,OAA4B,EAC5B,GAAW,EACX,MAAyB,EACzB,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EACJ,EAAE;IACnC,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,UAAU,CAAC,CAAC;IAEpD,OAAO,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,MAAM,EAAE,cAAc;YACtB,YAAY;YACZ,aAAa;SACd,CAAC;AACR,CAAC,CAAC;AAEF,MAAM,0BAA0B,GAAG,MAAM,CAAC,aAAa,CACrD,sBAAsB,CACvB,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CACtB,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,iCAAiC,CAAC,CACpE,CACF,CAAC;AAEF,MAAM,4BAA4B,GAAG,CACnC,OAA4B,EAC5B,sBAAoD,EACJ,EAAE,CAClD,MAAM,CAAC,UAAU,CACf,qBAAqB,CAAC,OAAO,CAAC,oBAAoB,EAAE;IAClD,sBAAsB;CACvB,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAExB,MAAM,sBAAsB,GAAG,CAC7B,OAA4B,EAC5B,WAA2C,EAC3C,sBAAoD,EACF,EAAE,CACpD,WAAW,KAAK,SAAS;IACvB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1C,CAAC,CAAC,MAAM,CAAC,UAAU,CACf,wCAAwC,CACtC,OAAO,CAAC,oBAAoB,EAC5B,WAAW,EACX,sBAAsB,CACvB,CACF,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CACrE,CAAC;AAER,MAAM,sBAAsB,GAAG,CAAC,OAA4B,EAAW,EAAE,CACvE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,sBAAsB,CAAC,KAAK,IAAI,CAAC;AAE1E,MAAM,cAAc,GAAG,CAAC,MAA2B,EAAW,EAAE,CAC9D,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,CAAC;AAE5C,MAAM,iCAAiC,GAAG,CACxC,OAA4B,EAC5B,MAA2B,EAC3B,sBAAoD,EACD,EAAE,CACrD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACxC,qBAAqB,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,sBAAsB,EAAE,CAAC,CAC3D,CAAC;QACF,IACE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC9B,CAAC,CAAC,SAAS,CAAC,kBAAkB,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,EACtE,CAAC;YACD,mBAAmB,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,OAA4B,EACK,EAAE,CACnC,sBAAsB,CAAC,OAAO,CAAC;IAC7B,CAAC,CAAC;QACE,MAAM,EAAE,iCAAiC;QACzC,WAAW,EAAE,sBAAsB;KACpC;IACH,CAAC,CAAC,SAAS,CAAC;AAEhB,MAAM,eAAe,GAAG,CAAC,KAAkD,EAAE,EAAE,CAC7E,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAE5E,MAAM,0BAA0B,GAAG,CACjC,OAA4B,EAC5B,qBAAgE,EAChC,EAAE;IAClC,IACE,qBAAqB,KAAK,SAAS;QACnC,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAClC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,EAAE,YAAY,IAAI,EAAE,CAAC;IAE9D,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CACnD,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtC,CAAC,CAAC;YACE;gBACE,MAAM,EAAE,iCAA0C;gBAClD,WAAW;aACZ;SACF;QACH,CAAC,CAAC,EAAE,CACP,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,WAA8B,EAC4C,EAAE,CAC5E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IACtC,MAAM,sBAAsB,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC;IACjE,KAAK,CAAC,CAAC,4BAA4B,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACrE,MAAM,GAAG,GACP,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC;IAC1E,MAAM,SAAS,GACb,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;QACnD,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,gBAAgB,CACd,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,EACX,WAAW,CAAC,MAAM,EAClB,KAAK,CAAC,CAAC,sBAAsB,CAC3B,OAAO,EACP,WAAW,CAAC,GAAG,EACf,sBAAsB,CACvB,CACF,CAAC;IACR,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK,SAAS;YACjC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI;YACxC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,sBAAsB,CAAC,KAAK,IAAI;YACrE,CAAC,CAAC;gBACE;oBACE,MAAM,EAAE,iCAA0C;oBAClD,WAAW,EAAE,sBAA+B;iBAC7C;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,WAAW,CAAC,GAAG,KAAK,SAAS;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAC3C,CAAC,OAAO,EAAkC,EAAE,CAAC,OAAO,KAAK,SAAS,CACnE,CAAC;QACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/C,GAAG,0BAA0B,CAAC,OAAO,EAAE,WAAW,CAAC,qBAAqB,CAAC;KAC1E,CAAC;IAEF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE,OAAO,EAAE;QACzC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACvD,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,GAAG,GAAG,CACjB,WAA+B,EAC/B,OAAO,GAA2B,EAAE,EACnB,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,WAAW;IAChB,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;CACpE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,GAAG,GAAG,CACjB,MAA2B,EAC3B,OAAO,GAA2B,EAAE,EACnB,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,KAAK;IACX,MAAM;IACN,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;CACpE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,MAA2B,EAC3B,QAAsB,EACtB,OAAO,GAA2B,EAAE,EACnB,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,QAAQ;IACd,MAAM;IACN,QAAQ;IACR,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;CACpE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,GAAG,YAAwC,EAC1B,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,OAAO;IACb,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,GAAG,YAAwC,EAC1B,EAAE,CAAC,CAAC;IACrB,IAAI,EAAE,OAAO;IACb,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,YAAqC,EACrC,MAAoB,EACA,EAAE,CAAC,CAAC;IACxB,IAAI,EAAE,WAAW;IACjB,YAAY,EAAE,kBAAkB,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IAC/D,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG,GAAuB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,uBAAuB,EAAsB,EAAE,CAAC,CAAC;IAC7E,IAAI,EAAE,MAAM;IACZ,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,KAAoC,EACd,EAAE,CAAC,CAAC;IAC1B,IAAI,EAAE,sBAAsB;IAC5B,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAIvB,EAAuB,EAAE,CAAC,CAAC;IAC1B,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;IAC/D,GAAG,CAAC,KAAK,CAAC,qBAAqB,KAAK,SAAS;QAC3C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,qBAAqB,EAAE,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAC5B,MAAoB,EACW,EAAE,CACjC,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,qBAAqB,CAAC;AAE5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,MAAuB,EACS,EAAE,CAClC,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,sBAAsB,CAAC;AAE7D,MAAM,iBAAiB,GAAG,CACxB,SAA0B,EAC1B,OAA4B,EAC5B,GAAW,EACX,eAA8C,EAC9C,sBAAoD,EACsB,EAAE;IAC5E,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,eAAe,CAAC;gBACnD,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnD,MAAM,SAAS,GACb,MAAM,KAAK,SAAS;oBAClB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,gBAAgB,CACd,OAAO,EACP,GAAG,EACH,MAAM,EACN,KAAK,CAAC,CAAC,sBAAsB,CAC3B,OAAO,EACP,SAAS,CAAC,GAAG,EACb,sBAAsB,CACvB,CACF,CAAC;gBAER,MAAM,WAAW,GACf,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI;oBACpC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;oBAC7B,CAAC,CAAC,SAAS,CAAC;gBAChB,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,MAAM,CAC7C,CAAC,MAAM,EAAiC,EAAE,CAAC,MAAM,KAAK,SAAS,CAChE,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,eAAe,CAAC;gBACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACpC,qCAAqC,CACnC,OAAO,CAAC,oBAAoB,EAC5B,SAAS,CAAC,MAAM,EAChB,sBAAsB,CACvB,CACF,CAAC;gBACF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;oBAC1D,CAAC,CAAC,SAAS;oBACX,CAAC,CAAE;wBACC,MAAM,EAAE,aAAsB;wBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;qBACM,CAAC;gBACrC,MAAM,SAAS,GACb,MAAM,KAAK,SAAS;oBAClB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrE,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,OAAO,CAAC;oBACzD,CAAC,CAAC,KAAK,CAAC,CAAC,iCAAiC,CACtC,OAAO,EACP,SAAS,CAAC,MAAM,EAChB,sBAAsB,CACvB;oBACH,CAAC,CAAC,KAAK,CAAC;gBACV,MAAM,WAAW,GAAG,mBAAmB;oBACrC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;oBAC7B,CAAC,CAAC,SAAS,CAAC;gBACd,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,MAAM,CACnD,CAAC,MAAM,EAAiC,EAAE,CAAC,MAAM,KAAK,SAAS,CAChE,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,eAAe,CAAC;gBACnD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACpC,qCAAqC,CACnC,OAAO,CAAC,oBAAoB,EAC5B,SAAS,CAAC,MAAM,EAChB,SAAS,CAAC,QAAQ,EAClB,sBAAsB,CACvB,CACF,CAAC;gBACF,MAAM,aAAa,GACjB,KAAK,KAAK,SAAS;oBACjB,CAAC,CAAE;wBACC,MAAM,EAAE,aAAsB;wBAC9B,MAAM,EAAE,SAAS,CAAC,MAAM;qBACM;oBAClC,CAAC,CAAC,SAAS,CAAC;gBAChB,MAAM,SAAS,GACb,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;oBACzC,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;gBACvE,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC;oBAClD,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC;oBAC7B,CAAC,CAAC,SAAS,CAAC;gBACd,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,MAAM,CACnD,CAAC,MAAM,EAAiC,EAAE,CAAC,MAAM,KAAK,SAAS,CAChE,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,QAAQ,GAA0B,EAAE,CAAC;gBAC3C,KAAK,MAAM,WAAW,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;oBACjD,QAAQ,CAAC,IAAI,CACX,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAC1B,WAAW,EACX,OAAO,EACP,GAAG,EACH,eAAe,EACf,sBAAsB,CACvB,CAAC,CACH,CAAC;gBACJ,CAAC;gBACD,OAAO,QAAQ,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,CAAC,CAAC;YACzE,CAAC;YAED,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACzB,MAAM,OAAO,GAAuC,EAAE,CAAC;gBACvD,KAAK,MAAM,WAAW,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;oBACjD,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,CAAC,iBAAiB,CACtB,WAAW,EACX,OAAO,EACP,GAAG,EACH,eAAe,EACf,sBAAsB,CACvB,CACF,CAAC;gBACJ,CAAC;gBAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;oBACtD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACrB,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,MAAoB,EACsD,EAAE;IAC5E,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QACtC,MAAM,sBAAsB,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC;QACjE,KAAK,CAAC,CAAC,4BAA4B,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QACrC,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAC1B,MAAM,CAAC,OAAO,EACd,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,EACX,MAAM,CAAC,MAAM,EACb,sBAAsB,CACvB,CAAC;YACF,GAAG,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,qBAAqB,CAAC;SACrE,CAAC;QAEF,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC1B,CAAC,CAAC,EAAE,IAAI,EAAE,WAAoB,EAAE,OAAO,EAAE,OAAO,EAAE;YAClD,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,MAA4B,EAK5B,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;IACtC,MAAM,sBAAsB,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAAC;IACjE,KAAK,CAAC,CAAC,4BAA4B,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7D,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAChD,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,OAAO,EAAE,CAAC;gBACb,OAAO,EAAE,IAAI,EAAE,WAAoB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YAC1D,CAAC;YACD,KAAK,MAAM,EAAE,CAAC;gBACZ,OAAO;oBACL,IAAI,EAAE,QAAiB;oBACvB,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC;YACJ,CAAC;YACD,KAAK,WAAW,EAAE,CAAC;gBACjB,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CACtD,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,CAClC,CAAC;gBAEF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACzB,SAAS;gBACX,CAAC;gBAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAEjD,OAAO;oBACL,GAAG,QAAQ;oBACX,YAAY,EAAE,OAAO;iBACtB,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAiB;QACvB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,iCAAiC;KAC1C,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,cAAc,GAAG,CAC5B,MAAuB,EAKvB,EAAE,CACF,sBAAsB,CAAC,MAAM,CAAC;IAC5B,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC;IAC7B,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AAE1B,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,WAA8B,EAK9B,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CACpD,QAAQ,CAAC,IAAI,KAAK,WAAW;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,cAAc,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CACH,CACN,CAAC;AAEJ,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAAoB,EAKpB,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAC/C,QAAQ,CAAC,IAAI,KAAK,WAAW;IAC3B,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,cAAc,CAAC;QACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC1B,CAAC,CACH,CACN,CAAC;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,MAA4B,EAQ5B,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAEpD,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,WAAW,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,KAAK,UAAU,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC;gBAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC,CAAC,IAAI,YAAY,CAAC;gBAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,GAAG,CAAC,QAAQ,CAAC,YAAY,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;aAC7C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,MAAuB,EAQvB,EAAE,CACF,sBAAsB,CAAC,MAAM,CAAC;IAC5B,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC;IAC/B,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;AAmB5B,MAAM,UAAU,OAAO,CAAC,MAAuB;IAC7C,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,WAA+B,EAK/B,EAAE,CACF,aAAa,CAAC;IACZ,GAAG,EAAE,WAAW;IAChB,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,IAAI;QACtC,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,sBAAsB,CAAC,EAAE;QACrD,CAAC,CAAC,EAAE,CAAC;CACR,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,MAAyB,EAKzB,EAAE,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AAE/B,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,GAAG,YAA2C,EAK9C,EAAE,CAAC,aAAa,CAAC,EAAE,qBAAqB,EAAE,YAAY,EAAE,CAAC,CAAC;AAkB5D,MAAM,UAAU,QAAQ,CAAC,WAA4B,EAAE,QAAmB;IACxE,OAAO,gBAAgB,CAAC,WAAW,CAAC,CAAC,IAAI,CACvC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE;QACxB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,2BAA2B,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,KAAK,cAAc,EAAE,CAAC;gBACpB,OAAO,IAAI,kBAAkB,CAAC;oBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ;oBACR,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;YACD,KAAK,gBAAgB,CAAC;YACtB,KAAK,uBAAuB,EAAE,CAAC;gBAC7B,OAAO,IAAI,kBAAkB,CAAC;oBAC5B,MAAM,EAAE,kBAAkB;oBAC1B,QAAQ;oBACR,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}
|