@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.19
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +307 -133
- package/dist/AbuseProtection.d.ts +100 -0
- package/dist/AbuseProtection.d.ts.map +1 -0
- package/dist/AbuseProtection.js +71 -0
- package/dist/AbuseProtection.js.map +1 -0
- package/dist/AccessGrant.d.ts +344 -0
- package/dist/AccessGrant.d.ts.map +1 -0
- package/dist/AccessGrant.js +687 -0
- package/dist/AccessGrant.js.map +1 -0
- package/dist/ApiKey.d.ts +0 -12
- package/dist/ApiKey.d.ts.map +1 -1
- package/dist/ApiKey.js +36 -27
- package/dist/ApiKey.js.map +1 -1
- package/dist/Assurance.d.ts +415 -0
- package/dist/Assurance.d.ts.map +1 -0
- package/dist/Assurance.js +764 -0
- package/dist/Assurance.js.map +1 -0
- package/dist/AtomicPlanExecutor.d.ts +28 -0
- package/dist/AtomicPlanExecutor.d.ts.map +1 -0
- package/dist/AtomicPlanExecutor.js +5 -0
- package/dist/AtomicPlanExecutor.js.map +1 -0
- package/dist/AuditLog.d.ts +2314 -52
- package/dist/AuditLog.d.ts.map +1 -1
- package/dist/AuditLog.js +511 -33
- package/dist/AuditLog.js.map +1 -1
- package/dist/AuthFlow.d.ts +128 -38
- package/dist/AuthFlow.d.ts.map +1 -1
- package/dist/AuthFlow.js +611 -263
- package/dist/AuthFlow.js.map +1 -1
- package/dist/AuthRateLimit.d.ts +96 -0
- package/dist/AuthRateLimit.d.ts.map +1 -0
- package/dist/AuthRateLimit.js +212 -0
- package/dist/AuthRateLimit.js.map +1 -0
- package/dist/Challenge.d.ts +0 -3
- package/dist/Challenge.d.ts.map +1 -1
- package/dist/Challenge.js +1 -4
- package/dist/Challenge.js.map +1 -1
- package/dist/Client.d.ts +205 -10
- package/dist/Client.d.ts.map +1 -1
- package/dist/Client.js +397 -16
- package/dist/Client.js.map +1 -1
- package/dist/CloudflareTurnstile.d.ts +28 -0
- package/dist/CloudflareTurnstile.d.ts.map +1 -0
- package/dist/CloudflareTurnstile.js +205 -0
- package/dist/CloudflareTurnstile.js.map +1 -0
- package/dist/Crypto.d.ts +0 -3
- package/dist/Crypto.d.ts.map +1 -1
- package/dist/Crypto.js +1 -4
- package/dist/Crypto.js.map +1 -1
- package/dist/DelegatedAccessStorageMigrations.d.ts +7 -0
- package/dist/DelegatedAccessStorageMigrations.d.ts.map +1 -0
- package/dist/DelegatedAccessStorageMigrations.js +159 -0
- package/dist/DelegatedAccessStorageMigrations.js.map +1 -0
- package/dist/DevEmail.d.ts +44 -0
- package/dist/DevEmail.d.ts.map +1 -0
- package/dist/DevEmail.js +115 -0
- package/dist/DevEmail.js.map +1 -0
- package/dist/DevelopmentSeed.d.ts +47 -0
- package/dist/DevelopmentSeed.d.ts.map +1 -0
- package/dist/DevelopmentSeed.js +337 -0
- package/dist/DevelopmentSeed.js.map +1 -0
- package/dist/DisposableEmailDomains.d.ts +19 -0
- package/dist/DisposableEmailDomains.d.ts.map +1 -0
- package/dist/DisposableEmailDomains.js +85 -0
- package/dist/DisposableEmailDomains.js.map +1 -0
- package/dist/DomainVerification.d.ts +0 -9
- package/dist/DomainVerification.d.ts.map +1 -1
- package/dist/DomainVerification.js +36 -22
- package/dist/DomainVerification.js.map +1 -1
- package/dist/DrizzleBunSqliteStorage.d.ts +18 -0
- package/dist/DrizzleBunSqliteStorage.d.ts.map +1 -0
- package/dist/DrizzleBunSqliteStorage.js +11 -0
- package/dist/DrizzleBunSqliteStorage.js.map +1 -0
- package/dist/DrizzleD1SqliteStorage.d.ts +4 -4
- package/dist/DrizzleD1SqliteStorage.d.ts.map +1 -1
- package/dist/DrizzleD1SqliteStorage.js +5 -5
- package/dist/DrizzleD1SqliteStorage.js.map +1 -1
- package/dist/DrizzleEffectSqliteStorage.d.ts +13 -4
- package/dist/DrizzleEffectSqliteStorage.d.ts.map +1 -1
- package/dist/DrizzleEffectSqliteStorage.js +71 -4
- package/dist/DrizzleEffectSqliteStorage.js.map +1 -1
- package/dist/DrizzleNodeSqliteStorage.d.ts +18 -0
- package/dist/DrizzleNodeSqliteStorage.d.ts.map +1 -0
- package/dist/DrizzleNodeSqliteStorage.js +11 -0
- package/dist/DrizzleNodeSqliteStorage.js.map +1 -0
- package/dist/DrizzlePostgresStorage.d.ts +26 -0
- package/dist/DrizzlePostgresStorage.d.ts.map +1 -0
- package/dist/DrizzlePostgresStorage.js +14 -0
- package/dist/DrizzlePostgresStorage.js.map +1 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts +34 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.d.ts.map +1 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.js +499 -0
- package/dist/EffectQbPostgresDelegatedAccessStorage.js.map +1 -0
- package/dist/EffectQbPostgresStorage.d.ts +178 -0
- package/dist/EffectQbPostgresStorage.d.ts.map +1 -0
- package/dist/EffectQbPostgresStorage.js +4637 -0
- package/dist/EffectQbPostgresStorage.js.map +1 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts +112 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.d.ts.map +1 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.js +602 -0
- package/dist/EffectQbSqliteDelegatedAccessStorage.js.map +1 -0
- package/dist/EffectQbSqliteStorage.d.ts +221 -23
- package/dist/EffectQbSqliteStorage.d.ts.map +1 -1
- package/dist/EffectQbSqliteStorage.js +2064 -135
- package/dist/EffectQbSqliteStorage.js.map +1 -1
- package/dist/EmailAuth.d.ts +65 -0
- package/dist/EmailAuth.d.ts.map +1 -0
- package/dist/EmailAuth.js +171 -0
- package/dist/EmailAuth.js.map +1 -0
- package/dist/EmailIdentityAuth.d.ts +30 -0
- package/dist/EmailIdentityAuth.d.ts.map +1 -0
- package/dist/EmailIdentityAuth.js +142 -0
- package/dist/EmailIdentityAuth.js.map +1 -0
- package/dist/EmailOtp.d.ts +10 -11
- package/dist/EmailOtp.d.ts.map +1 -1
- package/dist/EmailOtp.js +44 -81
- package/dist/EmailOtp.js.map +1 -1
- package/dist/EmailRisk.d.ts +48 -0
- package/dist/EmailRisk.d.ts.map +1 -0
- package/dist/EmailRisk.js +33 -0
- package/dist/EmailRisk.js.map +1 -0
- package/dist/EmailVerification.d.ts +10 -16
- package/dist/EmailVerification.d.ts.map +1 -1
- package/dist/EmailVerification.js +85 -42
- package/dist/EmailVerification.js.map +1 -1
- package/dist/Guard.d.ts +11 -0
- package/dist/Guard.d.ts.map +1 -0
- package/dist/Guard.js +11 -0
- package/dist/Guard.js.map +1 -0
- package/dist/HibpPwnedPasswords.d.ts +56 -0
- package/dist/HibpPwnedPasswords.d.ts.map +1 -0
- package/dist/HibpPwnedPasswords.js +232 -0
- package/dist/HibpPwnedPasswords.js.map +1 -0
- package/dist/HttpApi/AdminPermissionDefinition.d.ts +4 -0
- package/dist/HttpApi/AdminPermissionDefinition.d.ts.map +1 -0
- package/dist/HttpApi/AdminPermissionDefinition.js +4 -0
- package/dist/HttpApi/AdminPermissionDefinition.js.map +1 -0
- package/dist/HttpApi/AdminSecurityTimeline.d.ts +4 -0
- package/dist/HttpApi/AdminSecurityTimeline.d.ts.map +1 -0
- package/dist/HttpApi/AdminSecurityTimeline.js +4 -0
- package/dist/HttpApi/AdminSecurityTimeline.js.map +1 -0
- package/dist/HttpApi/AdminSession.d.ts +4 -0
- package/dist/HttpApi/AdminSession.d.ts.map +1 -0
- package/dist/HttpApi/AdminSession.js +4 -0
- package/dist/HttpApi/AdminSession.js.map +1 -0
- package/dist/HttpApi/AdminTrustedDevice.d.ts +4 -0
- package/dist/HttpApi/AdminTrustedDevice.d.ts.map +1 -0
- package/dist/HttpApi/AdminTrustedDevice.js +4 -0
- package/dist/HttpApi/AdminTrustedDevice.js.map +1 -0
- package/dist/HttpApi/Api.d.ts +939 -884
- package/dist/HttpApi/Api.d.ts.map +1 -1
- package/dist/HttpApi/Api.js +2254 -940
- package/dist/HttpApi/Api.js.map +1 -1
- package/dist/HttpApi/ApiKey.d.ts +4 -0
- package/dist/HttpApi/ApiKey.d.ts.map +1 -0
- package/dist/HttpApi/ApiKey.js +4 -0
- package/dist/HttpApi/ApiKey.js.map +1 -0
- package/dist/HttpApi/Audit.d.ts +6 -0
- package/dist/HttpApi/Audit.d.ts.map +1 -0
- package/dist/HttpApi/Audit.js +10 -0
- package/dist/HttpApi/Audit.js.map +1 -0
- package/dist/HttpApi/ClientApi.d.ts +917 -0
- package/dist/HttpApi/ClientApi.d.ts.map +1 -0
- package/dist/HttpApi/ClientApi.js +101 -0
- package/dist/HttpApi/ClientApi.js.map +1 -0
- package/dist/HttpApi/EmailAuth.d.ts +6 -0
- package/dist/HttpApi/EmailAuth.d.ts.map +1 -0
- package/dist/HttpApi/EmailAuth.js +6 -0
- package/dist/HttpApi/EmailAuth.js.map +1 -0
- package/dist/HttpApi/EmailGuards.d.ts +115 -0
- package/dist/HttpApi/EmailGuards.d.ts.map +1 -0
- package/dist/HttpApi/EmailGuards.js +191 -0
- package/dist/HttpApi/EmailGuards.js.map +1 -0
- package/dist/HttpApi/EmailOtp.d.ts +6 -0
- package/dist/HttpApi/EmailOtp.d.ts.map +1 -0
- package/dist/HttpApi/EmailOtp.js +6 -0
- package/dist/HttpApi/EmailOtp.js.map +1 -0
- package/dist/HttpApi/EmailVerification.d.ts +6 -0
- package/dist/HttpApi/EmailVerification.d.ts.map +1 -0
- package/dist/HttpApi/EmailVerification.js +6 -0
- package/dist/HttpApi/EmailVerification.js.map +1 -0
- package/dist/HttpApi/Endpoints.d.ts +661 -301
- package/dist/HttpApi/Endpoints.d.ts.map +1 -1
- package/dist/HttpApi/Endpoints.js +207 -120
- package/dist/HttpApi/Endpoints.js.map +1 -1
- package/dist/HttpApi/Errors.d.ts +37 -10
- package/dist/HttpApi/Errors.d.ts.map +1 -1
- package/dist/HttpApi/Errors.js +42 -4
- package/dist/HttpApi/Errors.js.map +1 -1
- package/dist/HttpApi/Identity.d.ts +6 -0
- package/dist/HttpApi/Identity.d.ts.map +1 -0
- package/dist/HttpApi/Identity.js +6 -0
- package/dist/HttpApi/Identity.js.map +1 -0
- package/dist/HttpApi/IdentityGuards.d.ts +31 -0
- package/dist/HttpApi/IdentityGuards.d.ts.map +1 -0
- package/dist/HttpApi/IdentityGuards.js +33 -0
- package/dist/HttpApi/IdentityGuards.js.map +1 -0
- package/dist/HttpApi/Jwt.d.ts +4 -0
- package/dist/HttpApi/Jwt.d.ts.map +1 -0
- package/dist/HttpApi/Jwt.js +4 -0
- package/dist/HttpApi/Jwt.js.map +1 -0
- package/dist/HttpApi/JwtDiscovery.d.ts +4 -0
- package/dist/HttpApi/JwtDiscovery.d.ts.map +1 -0
- package/dist/HttpApi/JwtDiscovery.js +4 -0
- package/dist/HttpApi/JwtDiscovery.js.map +1 -0
- package/dist/HttpApi/LoginApproval.d.ts +5 -0
- package/dist/HttpApi/LoginApproval.d.ts.map +1 -0
- package/dist/HttpApi/LoginApproval.js +5 -0
- package/dist/HttpApi/LoginApproval.js.map +1 -0
- package/dist/HttpApi/LoginNotification.d.ts +5 -0
- package/dist/HttpApi/LoginNotification.d.ts.map +1 -0
- package/dist/HttpApi/LoginNotification.js +5 -0
- package/dist/HttpApi/LoginNotification.js.map +1 -0
- package/dist/HttpApi/MagicLink.d.ts +6 -0
- package/dist/HttpApi/MagicLink.d.ts.map +1 -0
- package/dist/HttpApi/MagicLink.js +6 -0
- package/dist/HttpApi/MagicLink.js.map +1 -0
- package/dist/HttpApi/Mfa.d.ts +5 -0
- package/dist/HttpApi/Mfa.d.ts.map +1 -0
- package/dist/HttpApi/Mfa.js +5 -0
- package/dist/HttpApi/Mfa.js.map +1 -0
- package/dist/HttpApi/Middleware.d.ts +26 -0
- package/dist/HttpApi/Middleware.d.ts.map +1 -0
- package/dist/HttpApi/Middleware.js +13 -0
- package/dist/HttpApi/Middleware.js.map +1 -0
- package/dist/HttpApi/OAuth.d.ts +4 -0
- package/dist/HttpApi/OAuth.d.ts.map +1 -0
- package/dist/HttpApi/OAuth.js +4 -0
- package/dist/HttpApi/OAuth.js.map +1 -0
- package/dist/HttpApi/OAuthDeviceAuthorization.d.ts +106 -0
- package/dist/HttpApi/OAuthDeviceAuthorization.d.ts.map +1 -0
- package/dist/HttpApi/OAuthDeviceAuthorization.js +415 -0
- package/dist/HttpApi/OAuthDeviceAuthorization.js.map +1 -0
- package/dist/HttpApi/OAuthProviderAuthorization.d.ts +4 -0
- package/dist/HttpApi/OAuthProviderAuthorization.d.ts.map +1 -0
- package/dist/HttpApi/OAuthProviderAuthorization.js +4 -0
- package/dist/HttpApi/OAuthProviderAuthorization.js.map +1 -0
- package/dist/HttpApi/OAuthToken.d.ts +4 -0
- package/dist/HttpApi/OAuthToken.d.ts.map +1 -0
- package/dist/HttpApi/OAuthToken.js +4 -0
- package/dist/HttpApi/OAuthToken.js.map +1 -0
- package/dist/HttpApi/OidcDiscovery.d.ts +4 -0
- package/dist/HttpApi/OidcDiscovery.d.ts.map +1 -0
- package/dist/HttpApi/OidcDiscovery.js +4 -0
- package/dist/HttpApi/OidcDiscovery.js.map +1 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts +28 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.d.ts.map +1 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.js +5 -0
- package/dist/HttpApi/Operations/AdminPermissionDefinition.js.map +1 -0
- package/dist/HttpApi/Operations/AdminSession.d.ts +16 -0
- package/dist/HttpApi/Operations/AdminSession.d.ts.map +1 -0
- package/dist/HttpApi/Operations/AdminSession.js +5 -0
- package/dist/HttpApi/Operations/AdminSession.js.map +1 -0
- package/dist/HttpApi/Operations/ApiKey.d.ts +16 -0
- package/dist/HttpApi/Operations/ApiKey.d.ts.map +1 -0
- package/dist/HttpApi/Operations/ApiKey.js +5 -0
- package/dist/HttpApi/Operations/ApiKey.js.map +1 -0
- package/dist/HttpApi/Operations/Discovery.d.ts +19 -0
- package/dist/HttpApi/Operations/Discovery.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Discovery.js +7 -0
- package/dist/HttpApi/Operations/Discovery.js.map +1 -0
- package/dist/HttpApi/Operations/EmailAuth.d.ts +12 -0
- package/dist/HttpApi/Operations/EmailAuth.d.ts.map +1 -0
- package/dist/HttpApi/Operations/EmailAuth.js +5 -0
- package/dist/HttpApi/Operations/EmailAuth.js.map +1 -0
- package/dist/HttpApi/Operations/EmailOtp.d.ts +14 -0
- package/dist/HttpApi/Operations/EmailOtp.d.ts.map +1 -0
- package/dist/HttpApi/Operations/EmailOtp.js +5 -0
- package/dist/HttpApi/Operations/EmailOtp.js.map +1 -0
- package/dist/HttpApi/Operations/EmailVerification.d.ts +14 -0
- package/dist/HttpApi/Operations/EmailVerification.d.ts.map +1 -0
- package/dist/HttpApi/Operations/EmailVerification.js +5 -0
- package/dist/HttpApi/Operations/EmailVerification.js.map +1 -0
- package/dist/HttpApi/Operations/HttpOperation.d.ts +4 -0
- package/dist/HttpApi/Operations/HttpOperation.d.ts.map +1 -0
- package/dist/HttpApi/Operations/HttpOperation.js +2 -0
- package/dist/HttpApi/Operations/HttpOperation.js.map +1 -0
- package/dist/HttpApi/Operations/Identity.d.ts +22 -0
- package/dist/HttpApi/Operations/Identity.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Identity.js +5 -0
- package/dist/HttpApi/Operations/Identity.js.map +1 -0
- package/dist/HttpApi/Operations/Jwt.d.ts +14 -0
- package/dist/HttpApi/Operations/Jwt.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Jwt.js +5 -0
- package/dist/HttpApi/Operations/Jwt.js.map +1 -0
- package/dist/HttpApi/Operations/LoginApproval.d.ts +16 -0
- package/dist/HttpApi/Operations/LoginApproval.d.ts.map +1 -0
- package/dist/HttpApi/Operations/LoginApproval.js +5 -0
- package/dist/HttpApi/Operations/LoginApproval.js.map +1 -0
- package/dist/HttpApi/Operations/MagicLink.d.ts +14 -0
- package/dist/HttpApi/Operations/MagicLink.d.ts.map +1 -0
- package/dist/HttpApi/Operations/MagicLink.js +5 -0
- package/dist/HttpApi/Operations/MagicLink.js.map +1 -0
- package/dist/HttpApi/Operations/Mfa.d.ts +24 -0
- package/dist/HttpApi/Operations/Mfa.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Mfa.js +5 -0
- package/dist/HttpApi/Operations/Mfa.js.map +1 -0
- package/dist/HttpApi/Operations/OAuth.d.ts +20 -0
- package/dist/HttpApi/Operations/OAuth.d.ts.map +1 -0
- package/dist/HttpApi/Operations/OAuth.js +5 -0
- package/dist/HttpApi/Operations/OAuth.js.map +1 -0
- package/dist/HttpApi/Operations/OAuthDeviceAuthorization.d.ts +23 -0
- package/dist/HttpApi/Operations/OAuthDeviceAuthorization.d.ts.map +1 -0
- package/dist/HttpApi/Operations/OAuthDeviceAuthorization.js +7 -0
- package/dist/HttpApi/Operations/OAuthDeviceAuthorization.js.map +1 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts +12 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.d.ts.map +1 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.js +5 -0
- package/dist/HttpApi/Operations/OAuthProviderAuthorization.js.map +1 -0
- package/dist/HttpApi/Operations/OAuthToken.d.ts +26 -0
- package/dist/HttpApi/Operations/OAuthToken.d.ts.map +1 -0
- package/dist/HttpApi/Operations/OAuthToken.js +9 -0
- package/dist/HttpApi/Operations/OAuthToken.js.map +1 -0
- package/dist/HttpApi/Operations/Passkey.d.ts +22 -0
- package/dist/HttpApi/Operations/Passkey.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Passkey.js +5 -0
- package/dist/HttpApi/Operations/Passkey.js.map +1 -0
- package/dist/HttpApi/Operations/Password.d.ts +22 -0
- package/dist/HttpApi/Operations/Password.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Password.js +5 -0
- package/dist/HttpApi/Operations/Password.js.map +1 -0
- package/dist/HttpApi/Operations/RecoveryCodes.d.ts +20 -0
- package/dist/HttpApi/Operations/RecoveryCodes.d.ts.map +1 -0
- package/dist/HttpApi/Operations/RecoveryCodes.js +5 -0
- package/dist/HttpApi/Operations/RecoveryCodes.js.map +1 -0
- package/dist/HttpApi/Operations/RefreshToken.d.ts +12 -0
- package/dist/HttpApi/Operations/RefreshToken.d.ts.map +1 -0
- package/dist/HttpApi/Operations/RefreshToken.js +5 -0
- package/dist/HttpApi/Operations/RefreshToken.js.map +1 -0
- package/dist/HttpApi/Operations/Security.d.ts +12 -0
- package/dist/HttpApi/Operations/Security.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Security.js +5 -0
- package/dist/HttpApi/Operations/Security.js.map +1 -0
- package/dist/HttpApi/Operations/SecurityTimeline.d.ts +19 -0
- package/dist/HttpApi/Operations/SecurityTimeline.d.ts.map +1 -0
- package/dist/HttpApi/Operations/SecurityTimeline.js +7 -0
- package/dist/HttpApi/Operations/SecurityTimeline.js.map +1 -0
- package/dist/HttpApi/Operations/Session.d.ts +22 -0
- package/dist/HttpApi/Operations/Session.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Session.js +5 -0
- package/dist/HttpApi/Operations/Session.js.map +1 -0
- package/dist/HttpApi/Operations/StepUp.d.ts +22 -0
- package/dist/HttpApi/Operations/StepUp.d.ts.map +1 -0
- package/dist/HttpApi/Operations/StepUp.js +5 -0
- package/dist/HttpApi/Operations/StepUp.js.map +1 -0
- package/dist/HttpApi/Operations/Totp.d.ts +20 -0
- package/dist/HttpApi/Operations/Totp.d.ts.map +1 -0
- package/dist/HttpApi/Operations/Totp.js +5 -0
- package/dist/HttpApi/Operations/Totp.js.map +1 -0
- package/dist/HttpApi/Operations/TrustedDevice.d.ts +23 -0
- package/dist/HttpApi/Operations/TrustedDevice.d.ts.map +1 -0
- package/dist/HttpApi/Operations/TrustedDevice.js +7 -0
- package/dist/HttpApi/Operations/TrustedDevice.js.map +1 -0
- package/dist/HttpApi/Operations/index.d.ts +28 -0
- package/dist/HttpApi/Operations/index.d.ts.map +1 -0
- package/dist/HttpApi/Operations/index.js +28 -0
- package/dist/HttpApi/Operations/index.js.map +1 -0
- package/dist/HttpApi/Passkey.d.ts +5 -0
- package/dist/HttpApi/Passkey.d.ts.map +1 -0
- package/dist/HttpApi/Passkey.js +5 -0
- package/dist/HttpApi/Passkey.js.map +1 -0
- package/dist/HttpApi/Password.d.ts +220 -0
- package/dist/HttpApi/Password.d.ts.map +1 -0
- package/dist/HttpApi/Password.js +237 -0
- package/dist/HttpApi/Password.js.map +1 -0
- package/dist/HttpApi/PasswordContract.d.ts +307 -0
- package/dist/HttpApi/PasswordContract.d.ts.map +1 -0
- package/dist/HttpApi/PasswordContract.js +63 -0
- package/dist/HttpApi/PasswordContract.js.map +1 -0
- package/dist/HttpApi/PasswordGuards.d.ts +82 -0
- package/dist/HttpApi/PasswordGuards.d.ts.map +1 -0
- package/dist/HttpApi/PasswordGuards.js +179 -0
- package/dist/HttpApi/PasswordGuards.js.map +1 -0
- package/dist/HttpApi/RecoveryCodes.d.ts +5 -0
- package/dist/HttpApi/RecoveryCodes.d.ts.map +1 -0
- package/dist/HttpApi/RecoveryCodes.js +5 -0
- package/dist/HttpApi/RecoveryCodes.js.map +1 -0
- package/dist/HttpApi/RefreshToken.d.ts +4 -0
- package/dist/HttpApi/RefreshToken.d.ts.map +1 -0
- package/dist/HttpApi/RefreshToken.js +4 -0
- package/dist/HttpApi/RefreshToken.js.map +1 -0
- package/dist/HttpApi/RequestGuards.d.ts +42 -0
- package/dist/HttpApi/RequestGuards.d.ts.map +1 -0
- package/dist/HttpApi/RequestGuards.js +194 -0
- package/dist/HttpApi/RequestGuards.js.map +1 -0
- package/dist/HttpApi/Schemas.d.ts +399 -84
- package/dist/HttpApi/Schemas.d.ts.map +1 -1
- package/dist/HttpApi/Schemas.js +225 -27
- package/dist/HttpApi/Schemas.js.map +1 -1
- package/dist/HttpApi/Security.d.ts +12 -93
- package/dist/HttpApi/Security.d.ts.map +1 -1
- package/dist/HttpApi/Security.js +65 -356
- package/dist/HttpApi/Security.js.map +1 -1
- package/dist/HttpApi/SecurityTimeline.d.ts +4 -0
- package/dist/HttpApi/SecurityTimeline.d.ts.map +1 -0
- package/dist/HttpApi/SecurityTimeline.js +4 -0
- package/dist/HttpApi/SecurityTimeline.js.map +1 -0
- package/dist/HttpApi/Session.d.ts +5 -0
- package/dist/HttpApi/Session.d.ts.map +1 -0
- package/dist/HttpApi/Session.js +5 -0
- package/dist/HttpApi/Session.js.map +1 -0
- package/dist/HttpApi/SessionGuards.d.ts +15 -0
- package/dist/HttpApi/SessionGuards.d.ts.map +1 -0
- package/dist/HttpApi/SessionGuards.js +37 -0
- package/dist/HttpApi/SessionGuards.js.map +1 -0
- package/dist/HttpApi/StepUp.d.ts +5 -0
- package/dist/HttpApi/StepUp.d.ts.map +1 -0
- package/dist/HttpApi/StepUp.js +5 -0
- package/dist/HttpApi/StepUp.js.map +1 -0
- package/dist/HttpApi/Totp.d.ts +5 -0
- package/dist/HttpApi/Totp.d.ts.map +1 -0
- package/dist/HttpApi/Totp.js +5 -0
- package/dist/HttpApi/Totp.js.map +1 -0
- package/dist/HttpApi/Transport.d.ts +4 -6
- package/dist/HttpApi/Transport.d.ts.map +1 -1
- package/dist/HttpApi/Transport.js +62 -36
- package/dist/HttpApi/Transport.js.map +1 -1
- package/dist/HttpApi/TrustedDevice.d.ts +4 -0
- package/dist/HttpApi/TrustedDevice.d.ts.map +1 -0
- package/dist/HttpApi/TrustedDevice.js +4 -0
- package/dist/HttpApi/TrustedDevice.js.map +1 -0
- package/dist/HttpApi/index.d.ts +11 -3
- package/dist/HttpApi/index.d.ts.map +1 -1
- package/dist/HttpApi/index.js +10 -2
- package/dist/HttpApi/index.js.map +1 -1
- package/dist/Identity.d.ts +138 -0
- package/dist/Identity.d.ts.map +1 -0
- package/dist/Identity.js +105 -0
- package/dist/Identity.js.map +1 -0
- package/dist/IdentityManagement.d.ts +189 -0
- package/dist/IdentityManagement.d.ts.map +1 -0
- package/dist/IdentityManagement.js +317 -0
- package/dist/IdentityManagement.js.map +1 -0
- package/dist/IncidentAction.d.ts +1 -4
- package/dist/IncidentAction.d.ts.map +1 -1
- package/dist/IncidentAction.js +15 -9
- package/dist/IncidentAction.js.map +1 -1
- package/dist/Internal.d.ts +2 -0
- package/dist/Internal.d.ts.map +1 -1
- package/dist/Internal.js +30 -0
- package/dist/Internal.js.map +1 -1
- package/dist/Invitation.d.ts +362 -0
- package/dist/Invitation.d.ts.map +1 -0
- package/dist/Invitation.js +633 -0
- package/dist/Invitation.js.map +1 -0
- package/dist/IpQualityScore.d.ts +38 -0
- package/dist/IpQualityScore.d.ts.map +1 -0
- package/dist/IpQualityScore.js +215 -0
- package/dist/IpQualityScore.js.map +1 -0
- package/dist/Jwt.d.ts +8 -29
- package/dist/Jwt.d.ts.map +1 -1
- package/dist/Jwt.js +67 -56
- package/dist/Jwt.js.map +1 -1
- package/dist/LoginApproval.d.ts +15 -30
- package/dist/LoginApproval.d.ts.map +1 -1
- package/dist/LoginApproval.js +47 -41
- package/dist/LoginApproval.js.map +1 -1
- package/dist/LoginNotification.d.ts +7 -11
- package/dist/LoginNotification.d.ts.map +1 -1
- package/dist/LoginNotification.js +30 -17
- package/dist/LoginNotification.js.map +1 -1
- package/dist/LoginRisk.d.ts +11 -13
- package/dist/LoginRisk.d.ts.map +1 -1
- package/dist/LoginRisk.js +66 -26
- package/dist/LoginRisk.js.map +1 -1
- package/dist/LoginRiskEnrichment.d.ts +145 -0
- package/dist/LoginRiskEnrichment.d.ts.map +1 -0
- package/dist/LoginRiskEnrichment.js +220 -0
- package/dist/LoginRiskEnrichment.js.map +1 -0
- package/dist/MagicLink.d.ts +9 -8
- package/dist/MagicLink.d.ts.map +1 -1
- package/dist/MagicLink.js +40 -73
- package/dist/MagicLink.js.map +1 -1
- package/dist/Mailer.d.ts +19 -12
- package/dist/Mailer.d.ts.map +1 -1
- package/dist/Mailer.js +10 -12
- package/dist/Mailer.js.map +1 -1
- package/dist/OAuth.d.ts +138 -96
- package/dist/OAuth.d.ts.map +1 -1
- package/dist/OAuth.js +522 -221
- package/dist/OAuth.js.map +1 -1
- package/dist/OAuthDeviceAuthorization.d.ts +378 -0
- package/dist/OAuthDeviceAuthorization.d.ts.map +1 -0
- package/dist/OAuthDeviceAuthorization.js +860 -0
- package/dist/OAuthDeviceAuthorization.js.map +1 -0
- package/dist/OAuthDeviceClient.d.ts +76 -0
- package/dist/OAuthDeviceClient.d.ts.map +1 -0
- package/dist/OAuthDeviceClient.js +362 -0
- package/dist/OAuthDeviceClient.js.map +1 -0
- package/dist/Passkey.d.ts +15 -17
- package/dist/Passkey.d.ts.map +1 -1
- package/dist/Passkey.js +86 -39
- package/dist/Passkey.js.map +1 -1
- package/dist/PasskeyBrowser.d.ts +39 -0
- package/dist/PasskeyBrowser.d.ts.map +1 -0
- package/dist/PasskeyBrowser.js +206 -0
- package/dist/PasskeyBrowser.js.map +1 -0
- package/dist/PasskeySimpleWebAuthn.d.ts.map +1 -1
- package/dist/PasskeySimpleWebAuthn.js +19 -7
- package/dist/PasskeySimpleWebAuthn.js.map +1 -1
- package/dist/Password.d.ts +71 -37
- package/dist/Password.d.ts.map +1 -1
- package/dist/Password.js +295 -81
- package/dist/Password.js.map +1 -1
- package/dist/PasswordRisk.d.ts +63 -0
- package/dist/PasswordRisk.d.ts.map +1 -0
- package/dist/PasswordRisk.js +37 -0
- package/dist/PasswordRisk.js.map +1 -0
- package/dist/Permission.d.ts +308 -0
- package/dist/Permission.d.ts.map +1 -0
- package/dist/Permission.js +827 -0
- package/dist/Permission.js.map +1 -0
- package/dist/Policy.d.ts +31 -18
- package/dist/Policy.d.ts.map +1 -1
- package/dist/Policy.js +58 -14
- package/dist/Policy.js.map +1 -1
- package/dist/PostgresDelegatedAccessStorageMigrations.d.ts +7 -0
- package/dist/PostgresDelegatedAccessStorageMigrations.d.ts.map +1 -0
- package/dist/PostgresDelegatedAccessStorageMigrations.js +119 -0
- package/dist/PostgresDelegatedAccessStorageMigrations.js.map +1 -0
- package/dist/PostgresStorageMigrations.d.ts +16 -0
- package/dist/PostgresStorageMigrations.d.ts.map +1 -0
- package/dist/PostgresStorageMigrations.js +674 -0
- package/dist/PostgresStorageMigrations.js.map +1 -0
- package/dist/Privacy.d.ts +0 -3
- package/dist/Privacy.d.ts.map +1 -1
- package/dist/Privacy.js +2 -5
- package/dist/Privacy.js.map +1 -1
- package/dist/RateLimiter.d.ts +0 -3
- package/dist/RateLimiter.d.ts.map +1 -1
- package/dist/RateLimiter.js +1 -4
- package/dist/RateLimiter.js.map +1 -1
- package/dist/RecoveryCode.d.ts +83 -11
- package/dist/RecoveryCode.d.ts.map +1 -1
- package/dist/RecoveryCode.js +273 -75
- package/dist/RecoveryCode.js.map +1 -1
- package/dist/RecoveryPolicy.d.ts +81 -0
- package/dist/RecoveryPolicy.d.ts.map +1 -0
- package/dist/RecoveryPolicy.js +119 -0
- package/dist/RecoveryPolicy.js.map +1 -0
- package/dist/RefreshToken.d.ts +0 -9
- package/dist/RefreshToken.d.ts.map +1 -1
- package/dist/RefreshToken.js +31 -22
- package/dist/RefreshToken.js.map +1 -1
- package/dist/Retention.d.ts +6 -1
- package/dist/Retention.d.ts.map +1 -1
- package/dist/Retention.js +49 -12
- package/dist/Retention.js.map +1 -1
- package/dist/SecurityTimeline.d.ts +1 -4
- package/dist/SecurityTimeline.d.ts.map +1 -1
- package/dist/SecurityTimeline.js +110 -17
- package/dist/SecurityTimeline.js.map +1 -1
- package/dist/Sessions.d.ts +124 -29
- package/dist/Sessions.d.ts.map +1 -1
- package/dist/Sessions.js +626 -94
- package/dist/Sessions.js.map +1 -1
- package/dist/SqliteStorageSchemaData.d.ts +2 -0
- package/dist/SqliteStorageSchemaData.d.ts.map +1 -0
- package/dist/SqliteStorageSchemaData.js +508 -0
- package/dist/SqliteStorageSchemaData.js.map +1 -0
- package/dist/StepUp.d.ts +132 -11
- package/dist/StepUp.d.ts.map +1 -1
- package/dist/StepUp.js +387 -19
- package/dist/StepUp.js.map +1 -1
- package/dist/Storage.d.ts +89 -23
- package/dist/Storage.d.ts.map +1 -1
- package/dist/Storage.js +10 -12
- package/dist/Storage.js.map +1 -1
- package/dist/StorageMigrations.d.ts +7 -1
- package/dist/StorageMigrations.d.ts.map +1 -1
- package/dist/StorageMigrations.js +256 -0
- package/dist/StorageMigrations.js.map +1 -1
- package/dist/StorageSchemaGenerator.d.ts +544 -0
- package/dist/StorageSchemaGenerator.d.ts.map +1 -0
- package/dist/StorageSchemaGenerator.js +1418 -0
- package/dist/StorageSchemaGenerator.js.map +1 -0
- package/dist/StrongFactor.d.ts +64 -0
- package/dist/StrongFactor.d.ts.map +1 -0
- package/dist/StrongFactor.js +100 -0
- package/dist/StrongFactor.js.map +1 -0
- package/dist/Testing.js +2 -2
- package/dist/Testing.js.map +1 -1
- package/dist/Totp.d.ts +88 -13
- package/dist/Totp.d.ts.map +1 -1
- package/dist/Totp.js +192 -34
- package/dist/Totp.js.map +1 -1
- package/dist/TrustedDevice.d.ts +0 -9
- package/dist/TrustedDevice.d.ts.map +1 -1
- package/dist/TrustedDevice.js +15 -17
- package/dist/TrustedDevice.js.map +1 -1
- package/dist/WaitUntil.d.ts +0 -3
- package/dist/WaitUntil.d.ts.map +1 -1
- package/dist/WaitUntil.js +1 -4
- package/dist/WaitUntil.js.map +1 -1
- package/dist/Webhook.d.ts +42 -12
- package/dist/Webhook.d.ts.map +1 -1
- package/dist/Webhook.js +165 -26
- package/dist/Webhook.js.map +1 -1
- package/dist/alchemy/cloudflare/Email.d.ts.map +1 -1
- package/dist/alchemy/cloudflare/Email.js +9 -4
- package/dist/alchemy/cloudflare/Email.js.map +1 -1
- package/dist/cloudflare/Email.js +1 -1
- package/dist/cloudflare/Email.js.map +1 -1
- package/dist/cloudflare/RequestMetadata.d.ts +49 -0
- package/dist/cloudflare/RequestMetadata.d.ts.map +1 -0
- package/dist/cloudflare/RequestMetadata.js +71 -0
- package/dist/cloudflare/RequestMetadata.js.map +1 -0
- package/dist/index.d.ts +0 -35
- package/dist/index.d.ts.map +1 -1
- package/dist/index.js +0 -35
- package/dist/index.js.map +1 -1
- package/dist/internal/AuthFlowFinalizer.d.ts +31 -0
- package/dist/internal/AuthFlowFinalizer.d.ts.map +1 -0
- package/dist/internal/AuthFlowFinalizer.js +182 -0
- package/dist/internal/AuthFlowFinalizer.js.map +1 -0
- package/migrations/0001_auth_storage.sql +1 -0
- package/migrations/0006_auth_totp_factor.sql +1 -0
- package/migrations/0024_auth_permission.sql +39 -0
- package/migrations/0025_auth_permission_definition.sql +19 -0
- package/migrations/0026_auth_user_identity.sql +59 -0
- package/migrations/0027_auth_audit_log_storage_order.sql +46 -0
- package/migrations/0028_auth_oauth_client_secret_key.sql +39 -0
- package/migrations/0029_auth_oauth_device_authorization.sql +28 -0
- package/migrations/delegated-access/0001_auth_delegated_access.sql +152 -0
- package/migrations/postgres/0001_auth_core.sql +77 -0
- package/migrations/postgres/0002_auth_security_oauth.sql +65 -0
- package/migrations/postgres/0003_auth_credentials_tokens.sql +43 -0
- package/migrations/postgres/0004_auth_security_history.sql +103 -0
- package/migrations/postgres/0005_auth_webhooks.sql +29 -0
- package/migrations/postgres/0006_auth_domain_timeline.sql +50 -0
- package/migrations/postgres/0007_auth_oauth_clients.sql +85 -0
- package/migrations/postgres/0008_auth_oauth_tokens.sql +63 -0
- package/migrations/postgres/0009_auth_permissions.sql +66 -0
- package/migrations/postgres/0010_auth_oauth_device_authorization.sql +50 -0
- package/migrations/postgres/delegated-access/0001_auth_delegated_access.sql +112 -0
- package/package.json +309 -2
|
@@ -0,0 +1,337 @@
|
|
|
1
|
+
import { Clock, Context, Data, Effect, Layer, Option, Redacted } from "effect";
|
|
2
|
+
import { CredentialId, IdentityId, UnixMillis, UserId } from "./Identifiers.js";
|
|
3
|
+
import { emailLoginIdentity, IdentityKindRegistry } from "./Identity.js";
|
|
4
|
+
import { PasswordHasher } from "./Password.js";
|
|
5
|
+
import { CredentialStore, IdentityStore, RegistrationStore, UserStore, } from "./Storage.js";
|
|
6
|
+
export const developmentSeedUserCount = 100;
|
|
7
|
+
export const developmentSeedPassword = "password";
|
|
8
|
+
export const developmentSeedVersion = 1;
|
|
9
|
+
const developmentSeedOwner = "@effect-auth/core/DevelopmentSeed";
|
|
10
|
+
const developmentSeedMetadataKey = "effectAuthDevelopmentSeed";
|
|
11
|
+
export class DevelopmentSeedError extends Data.TaggedError("DevelopmentSeedError") {
|
|
12
|
+
}
|
|
13
|
+
const knownStates = [
|
|
14
|
+
"active-verified",
|
|
15
|
+
"unverified",
|
|
16
|
+
"disabled",
|
|
17
|
+
"revoked-identity",
|
|
18
|
+
"revoked-password",
|
|
19
|
+
];
|
|
20
|
+
const shuffledRemainingStates = () => {
|
|
21
|
+
const states = [
|
|
22
|
+
...Array.from({ length: 84 }).fill("active-verified"),
|
|
23
|
+
...Array.from({ length: 7 }).fill("unverified"),
|
|
24
|
+
...Array.from({ length: 3 }).fill("disabled"),
|
|
25
|
+
"revoked-identity",
|
|
26
|
+
];
|
|
27
|
+
let randomState = 0x45_ff_ec_7a;
|
|
28
|
+
for (let index = states.length - 1; index > 0; index -= 1) {
|
|
29
|
+
randomState = Math.imul(randomState, 1_664_525) + 1_013_904_223;
|
|
30
|
+
if (randomState < 0) {
|
|
31
|
+
randomState += 4_294_967_296;
|
|
32
|
+
}
|
|
33
|
+
const swapIndex = randomState % (index + 1);
|
|
34
|
+
[states[index], states[swapIndex]] = [states[swapIndex], states[index]];
|
|
35
|
+
}
|
|
36
|
+
return states;
|
|
37
|
+
};
|
|
38
|
+
export const developmentSeedUsers = Object.freeze([...knownStates, ...shuffledRemainingStates()].map((state, index) => {
|
|
39
|
+
const userNumber = index + 1;
|
|
40
|
+
return Object.freeze({
|
|
41
|
+
userNumber,
|
|
42
|
+
email: `user${userNumber}@example.test`,
|
|
43
|
+
state,
|
|
44
|
+
});
|
|
45
|
+
}));
|
|
46
|
+
const userIdFor = (userNumber) => UserId(`effect-auth-development-user-${userNumber}`);
|
|
47
|
+
const identityIdFor = (userNumber) => IdentityId(`effect-auth-development-email-${userNumber}`);
|
|
48
|
+
const credentialIdFor = (userNumber) => CredentialId(`effect-auth-development-password-${userNumber}`);
|
|
49
|
+
const metadataFor = (definition) => ({
|
|
50
|
+
[developmentSeedMetadataKey]: {
|
|
51
|
+
owner: developmentSeedOwner,
|
|
52
|
+
version: developmentSeedVersion,
|
|
53
|
+
userNumber: definition.userNumber,
|
|
54
|
+
state: definition.state,
|
|
55
|
+
},
|
|
56
|
+
});
|
|
57
|
+
const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
|
|
58
|
+
const hasSeedOwnership = (metadata, definition) => {
|
|
59
|
+
const marker = metadata?.[developmentSeedMetadataKey];
|
|
60
|
+
return (isRecord(marker) &&
|
|
61
|
+
marker.owner === developmentSeedOwner &&
|
|
62
|
+
marker.version === developmentSeedVersion &&
|
|
63
|
+
marker.userNumber === definition.userNumber &&
|
|
64
|
+
marker.state === definition.state);
|
|
65
|
+
};
|
|
66
|
+
const failure = (definition, reason, message, cause) => new DevelopmentSeedError({
|
|
67
|
+
reason,
|
|
68
|
+
message,
|
|
69
|
+
userNumber: definition.userNumber,
|
|
70
|
+
...(cause === undefined ? {} : { cause }),
|
|
71
|
+
});
|
|
72
|
+
const readExistingRows = (definition, users, identities, credentials) => {
|
|
73
|
+
const userId = userIdFor(definition.userNumber);
|
|
74
|
+
return Effect.all({
|
|
75
|
+
user: users.findById(userId),
|
|
76
|
+
identity: identities.findById(identityIdFor(definition.userNumber)),
|
|
77
|
+
credential: credentials === undefined
|
|
78
|
+
? Effect.succeed(Option.none())
|
|
79
|
+
: credentials.findPasswordByUserId(userId),
|
|
80
|
+
}).pipe(Effect.mapError((cause) => failure(definition, "storage", `Failed to read development seed user ${definition.userNumber}.`, cause)));
|
|
81
|
+
};
|
|
82
|
+
const effectiveState = (definition, includePassword) => definition.state === "revoked-password" && !includePassword
|
|
83
|
+
? "active-verified"
|
|
84
|
+
: definition.state;
|
|
85
|
+
const validateExistingRows = (definition, rows, includePassword, normalizedValue, allowPendingIdentityRevocation = false) =>
|
|
86
|
+
// oxlint-disable-next-line eslint/complexity -- validation compares the owned aggregate's identity and lifecycle state before accepting a rerun
|
|
87
|
+
Effect.gen(function* () {
|
|
88
|
+
if (Option.isNone(rows.user) ||
|
|
89
|
+
Option.isNone(rows.identity) ||
|
|
90
|
+
(includePassword && Option.isNone(rows.credential)) ||
|
|
91
|
+
(!includePassword && Option.isSome(rows.credential))) {
|
|
92
|
+
return yield* failure(definition, "state", `Development seed user ${definition.userNumber} is only partially present.`);
|
|
93
|
+
}
|
|
94
|
+
const user = rows.user.value;
|
|
95
|
+
const identity = rows.identity.value;
|
|
96
|
+
const credential = Option.getOrUndefined(rows.credential);
|
|
97
|
+
if (!hasSeedOwnership(user.metadata, definition) ||
|
|
98
|
+
!hasSeedOwnership(identity.metadata, definition) ||
|
|
99
|
+
(credential !== undefined &&
|
|
100
|
+
!hasSeedOwnership(credential.metadata, definition))) {
|
|
101
|
+
return yield* failure(definition, "ownership", `Development seed user ${definition.userNumber} conflicts with data not owned by this seed version.`);
|
|
102
|
+
}
|
|
103
|
+
const state = effectiveState(definition, includePassword);
|
|
104
|
+
const expectsDisabled = state === "disabled";
|
|
105
|
+
const expectsVerified = state !== "unverified" && state !== "revoked-identity";
|
|
106
|
+
const expectsRevokedIdentity = state === "revoked-identity";
|
|
107
|
+
const expectsRevokedPassword = state === "revoked-password";
|
|
108
|
+
const identityRevoked = identity.revokedAt !== undefined;
|
|
109
|
+
const revocationMatches = identityRevoked === expectsRevokedIdentity ||
|
|
110
|
+
(allowPendingIdentityRevocation &&
|
|
111
|
+
expectsRevokedIdentity &&
|
|
112
|
+
!identityRevoked);
|
|
113
|
+
if (user.id !== userIdFor(definition.userNumber) ||
|
|
114
|
+
(user.disabledAt !== undefined) !== expectsDisabled ||
|
|
115
|
+
identity.id !== identityIdFor(definition.userNumber) ||
|
|
116
|
+
identity.userId !== user.id ||
|
|
117
|
+
identity.scope.type !== "global" ||
|
|
118
|
+
identity.kind !== "email" ||
|
|
119
|
+
identity.value !== definition.email ||
|
|
120
|
+
identity.normalizedValue !== normalizedValue ||
|
|
121
|
+
(identity.verifiedAt !== undefined) !== expectsVerified ||
|
|
122
|
+
!revocationMatches ||
|
|
123
|
+
identity.isPrimaryLogin === expectsRevokedIdentity ||
|
|
124
|
+
(credential !== undefined &&
|
|
125
|
+
(credential.id !== credentialIdFor(definition.userNumber) ||
|
|
126
|
+
credential.userId !== user.id ||
|
|
127
|
+
(credential.revokedAt !== undefined) !== expectsRevokedPassword))) {
|
|
128
|
+
return yield* failure(definition, "state", `Development seed user ${definition.userNumber} does not match its expected state.`);
|
|
129
|
+
}
|
|
130
|
+
});
|
|
131
|
+
const registrationInputFor = (definition, includePassword, normalized, now, passwordHash) => {
|
|
132
|
+
const state = effectiveState(definition, includePassword);
|
|
133
|
+
const userId = userIdFor(definition.userNumber);
|
|
134
|
+
const metadata = metadataFor(definition);
|
|
135
|
+
return {
|
|
136
|
+
user: {
|
|
137
|
+
id: userId,
|
|
138
|
+
createdAt: now,
|
|
139
|
+
updatedAt: now,
|
|
140
|
+
...(state === "disabled" ? { disabledAt: now } : {}),
|
|
141
|
+
metadata,
|
|
142
|
+
},
|
|
143
|
+
identity: {
|
|
144
|
+
id: identityIdFor(definition.userNumber),
|
|
145
|
+
userId,
|
|
146
|
+
scope: normalized.scope,
|
|
147
|
+
kind: normalized.kind,
|
|
148
|
+
value: normalized.value,
|
|
149
|
+
normalizedValue: normalized.normalizedValue,
|
|
150
|
+
...(state === "unverified" || state === "revoked-identity"
|
|
151
|
+
? {}
|
|
152
|
+
: { verifiedAt: now }),
|
|
153
|
+
isPrimaryLogin: state !== "revoked-identity",
|
|
154
|
+
createdAt: now,
|
|
155
|
+
metadata,
|
|
156
|
+
},
|
|
157
|
+
...(includePassword && passwordHash !== undefined
|
|
158
|
+
? {
|
|
159
|
+
passwordCredential: {
|
|
160
|
+
id: credentialIdFor(definition.userNumber),
|
|
161
|
+
userId,
|
|
162
|
+
passwordHash,
|
|
163
|
+
createdAt: now,
|
|
164
|
+
updatedAt: now,
|
|
165
|
+
...(state === "revoked-password" ? { revokedAt: now } : {}),
|
|
166
|
+
metadata,
|
|
167
|
+
},
|
|
168
|
+
}
|
|
169
|
+
: {}),
|
|
170
|
+
};
|
|
171
|
+
};
|
|
172
|
+
export class DevelopmentSeed extends Context.Service()("auth/DevelopmentSeed", {
|
|
173
|
+
make: Effect.gen(function* () {
|
|
174
|
+
const users = yield* UserStore;
|
|
175
|
+
const identities = yield* IdentityStore;
|
|
176
|
+
const registration = yield* RegistrationStore;
|
|
177
|
+
const identityKinds = yield* IdentityKindRegistry;
|
|
178
|
+
const runSeed = (password) => Effect.gen(function* () {
|
|
179
|
+
const includePassword = password !== undefined;
|
|
180
|
+
const now = UnixMillis(yield* Clock.currentTimeMillis);
|
|
181
|
+
let passwordHash;
|
|
182
|
+
const verifiedPasswordHashes = new Set();
|
|
183
|
+
const getPasswordHash = () => {
|
|
184
|
+
if (passwordHash !== undefined) {
|
|
185
|
+
return Effect.succeed(passwordHash);
|
|
186
|
+
}
|
|
187
|
+
if (password === undefined) {
|
|
188
|
+
return Effect.fail(new DevelopmentSeedError({
|
|
189
|
+
reason: "password-hash",
|
|
190
|
+
message: "Password seed dependencies are unavailable.",
|
|
191
|
+
}));
|
|
192
|
+
}
|
|
193
|
+
return password.hasher
|
|
194
|
+
.hash({ password: Redacted.make(developmentSeedPassword) })
|
|
195
|
+
.pipe(Effect.map((hash) => {
|
|
196
|
+
passwordHash = hash;
|
|
197
|
+
return hash;
|
|
198
|
+
}), Effect.mapError((cause) => new DevelopmentSeedError({
|
|
199
|
+
reason: "password-hash",
|
|
200
|
+
message: "Failed to hash the development seed password.",
|
|
201
|
+
cause,
|
|
202
|
+
})));
|
|
203
|
+
};
|
|
204
|
+
const validatePasswordHash = (definition, credential) => {
|
|
205
|
+
const { passwordHash: storedHash } = credential;
|
|
206
|
+
if (verifiedPasswordHashes.has(storedHash)) {
|
|
207
|
+
return Effect.void;
|
|
208
|
+
}
|
|
209
|
+
if (password === undefined) {
|
|
210
|
+
return Effect.fail(failure(definition, "password-hash", "Password seed dependencies are unavailable."));
|
|
211
|
+
}
|
|
212
|
+
return password.hasher
|
|
213
|
+
.verify({
|
|
214
|
+
hash: storedHash,
|
|
215
|
+
password: Redacted.make(developmentSeedPassword),
|
|
216
|
+
})
|
|
217
|
+
.pipe(Effect.mapError((cause) => failure(definition, "password-hash", `Failed to verify the password for development seed user ${definition.userNumber}.`, cause)), Effect.flatMap((valid) => valid
|
|
218
|
+
? Effect.sync(() => {
|
|
219
|
+
verifiedPasswordHashes.add(storedHash);
|
|
220
|
+
passwordHash ??= storedHash;
|
|
221
|
+
})
|
|
222
|
+
: Effect.fail(failure(definition, "state", `Development seed user ${definition.userNumber} no longer uses the documented password.`))));
|
|
223
|
+
};
|
|
224
|
+
const acceptExistingRows = (definition, normalizedValue, rows) => Effect.gen(function* () {
|
|
225
|
+
let validatedRows = rows;
|
|
226
|
+
if (effectiveState(definition, includePassword) ===
|
|
227
|
+
"revoked-identity" &&
|
|
228
|
+
Option.isSome(rows.identity) &&
|
|
229
|
+
rows.identity.value.revokedAt === undefined) {
|
|
230
|
+
yield* validateExistingRows(definition, rows, includePassword, normalizedValue, true);
|
|
231
|
+
yield* identities
|
|
232
|
+
.revoke({
|
|
233
|
+
id: rows.identity.value.id,
|
|
234
|
+
userId: userIdFor(definition.userNumber),
|
|
235
|
+
expectedUpdatedAt: rows.identity.value.updatedAt,
|
|
236
|
+
revokedAt: now,
|
|
237
|
+
reason: "development-seed",
|
|
238
|
+
})
|
|
239
|
+
.pipe(Effect.mapError((cause) => failure(definition, "storage", `Failed to finish revoking ${definition.email}.`, cause)));
|
|
240
|
+
validatedRows = yield* readExistingRows(definition, users, identities, password?.credentials);
|
|
241
|
+
}
|
|
242
|
+
yield* validateExistingRows(definition, validatedRows, includePassword, normalizedValue);
|
|
243
|
+
if (includePassword && Option.isSome(validatedRows.credential)) {
|
|
244
|
+
yield* validatePasswordHash(definition, validatedRows.credential.value);
|
|
245
|
+
}
|
|
246
|
+
return {
|
|
247
|
+
...definition,
|
|
248
|
+
state: effectiveState(definition, includePassword),
|
|
249
|
+
userId: userIdFor(definition.userNumber),
|
|
250
|
+
outcome: "existing",
|
|
251
|
+
};
|
|
252
|
+
});
|
|
253
|
+
const hasCompleteRows = (rows) => Option.isSome(rows.user) &&
|
|
254
|
+
Option.isSome(rows.identity) &&
|
|
255
|
+
(includePassword
|
|
256
|
+
? Option.isSome(rows.credential)
|
|
257
|
+
: Option.isNone(rows.credential));
|
|
258
|
+
const results = [];
|
|
259
|
+
for (const definition of developmentSeedUsers) {
|
|
260
|
+
const normalized = yield* identityKinds
|
|
261
|
+
.normalize(emailLoginIdentity(definition.email))
|
|
262
|
+
.pipe(Effect.mapError((cause) => failure(definition, "normalization", `Failed to normalize ${definition.email}.`, cause)));
|
|
263
|
+
const existingRows = yield* readExistingRows(definition, users, identities, password?.credentials);
|
|
264
|
+
const allAbsent = Option.isNone(existingRows.user) &&
|
|
265
|
+
Option.isNone(existingRows.identity) &&
|
|
266
|
+
Option.isNone(existingRows.credential);
|
|
267
|
+
if (!allAbsent) {
|
|
268
|
+
const existingResult = yield* acceptExistingRows(definition, normalized.normalizedValue, existingRows);
|
|
269
|
+
results.push(existingResult);
|
|
270
|
+
continue;
|
|
271
|
+
}
|
|
272
|
+
const activeIdentity = yield* identities
|
|
273
|
+
.findByKindAndNormalizedValue(normalized)
|
|
274
|
+
.pipe(Effect.mapError((cause) => failure(definition, "storage", `Failed to check ${definition.email} for conflicts.`, cause)));
|
|
275
|
+
if (Option.isSome(activeIdentity)) {
|
|
276
|
+
const racedRows = yield* readExistingRows(definition, users, identities, password?.credentials);
|
|
277
|
+
if (hasCompleteRows(racedRows)) {
|
|
278
|
+
const racedResult = yield* acceptExistingRows(definition, normalized.normalizedValue, racedRows);
|
|
279
|
+
results.push(racedResult);
|
|
280
|
+
continue;
|
|
281
|
+
}
|
|
282
|
+
return yield* failure(definition, "ownership", `${definition.email} is already owned by another user.`);
|
|
283
|
+
}
|
|
284
|
+
const hash = includePassword ? yield* getPasswordHash() : undefined;
|
|
285
|
+
const registrationResult = yield* registration
|
|
286
|
+
.create(registrationInputFor(definition, includePassword, normalized, now, hash))
|
|
287
|
+
.pipe(Effect.map((registered) => ({ _tag: "Created", registered })), Effect.catch((error) => readExistingRows(definition, users, identities, password?.credentials).pipe(Effect.flatMap((rows) => hasCompleteRows(rows)
|
|
288
|
+
? acceptExistingRows(definition, normalized.normalizedValue, rows).pipe(Effect.map((result) => ({ _tag: "Existing", result })))
|
|
289
|
+
: Effect.fail(failure(definition, "registration", `Failed to create development seed user ${definition.userNumber}.`, error))))));
|
|
290
|
+
if (registrationResult._tag === "Existing") {
|
|
291
|
+
results.push(registrationResult.result);
|
|
292
|
+
continue;
|
|
293
|
+
}
|
|
294
|
+
const { registered } = registrationResult;
|
|
295
|
+
if (effectiveState(definition, includePassword) === "revoked-identity") {
|
|
296
|
+
const revoked = yield* identities
|
|
297
|
+
.revoke({
|
|
298
|
+
id: registered.identity.id,
|
|
299
|
+
userId: registered.user.id,
|
|
300
|
+
expectedUpdatedAt: registered.identity.updatedAt,
|
|
301
|
+
revokedAt: now,
|
|
302
|
+
reason: "development-seed",
|
|
303
|
+
})
|
|
304
|
+
.pipe(Effect.mapError((cause) => failure(definition, "storage", `Failed to revoke ${definition.email}.`, cause)));
|
|
305
|
+
if (Option.isNone(revoked)) {
|
|
306
|
+
const rows = yield* readExistingRows(definition, users, identities, password?.credentials);
|
|
307
|
+
yield* validateExistingRows(definition, rows, includePassword, normalized.normalizedValue);
|
|
308
|
+
}
|
|
309
|
+
}
|
|
310
|
+
results.push({
|
|
311
|
+
...definition,
|
|
312
|
+
state: effectiveState(definition, includePassword),
|
|
313
|
+
userId: registered.user.id,
|
|
314
|
+
outcome: "created",
|
|
315
|
+
});
|
|
316
|
+
}
|
|
317
|
+
return {
|
|
318
|
+
created: results.filter(({ outcome }) => outcome === "created")
|
|
319
|
+
.length,
|
|
320
|
+
existing: results.filter(({ outcome }) => outcome === "existing")
|
|
321
|
+
.length,
|
|
322
|
+
users: results,
|
|
323
|
+
};
|
|
324
|
+
});
|
|
325
|
+
return {
|
|
326
|
+
seedUsers: runSeed().pipe(Effect.withSpan("auth.development_seed.seed_users")),
|
|
327
|
+
seedPasswordUsers: Effect.gen(function* () {
|
|
328
|
+
const credentials = yield* CredentialStore;
|
|
329
|
+
const hasher = yield* PasswordHasher;
|
|
330
|
+
return yield* runSeed({ credentials, hasher });
|
|
331
|
+
}).pipe(Effect.withSpan("auth.development_seed.seed_password_users")),
|
|
332
|
+
};
|
|
333
|
+
}),
|
|
334
|
+
}) {
|
|
335
|
+
}
|
|
336
|
+
export const DevelopmentSeedLive = Layer.effect(DevelopmentSeed)(DevelopmentSeed.make);
|
|
337
|
+
//# sourceMappingURL=DevelopmentSeed.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"DevelopmentSeed.js","sourceRoot":"","sources":["../src/DevelopmentSeed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAEzE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EACL,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,SAAS,GACV,MAAM,cAAc,CAAC;AAOtB,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAY,CAAC;AACrD,MAAM,CAAC,MAAM,uBAAuB,GAAG,UAAmB,CAAC;AAC3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAU,CAAC;AAEjD,MAAM,oBAAoB,GAAG,mCAA4C,CAAC;AAC1E,MAAM,0BAA0B,GAAG,2BAAoC,CAAC;AA8CxE,MAAM,OAAO,oBAAqB,SAAQ,IAAI,CAAC,WAAW,CACxD,sBAAsB,CAMtB;CAAG;AAEL,MAAM,WAAW,GAAwC;IACvD,iBAAiB;IACjB,YAAY;IACZ,UAAU;IACV,kBAAkB;IAClB,kBAAkB;CACnB,CAAC;AAEF,MAAM,uBAAuB,GAAG,GAAwC,EAAE;IACxE,MAAM,MAAM,GAA+B;QACzC,GAAG,KAAK,CAAC,IAAI,CAA2B,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAC1D,iBAAiB,CAClB;QACD,GAAG,KAAK,CAAC,IAAI,CAA2B,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC;QACzE,GAAG,KAAK,CAAC,IAAI,CAA2B,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;QACvE,kBAAkB;KACnB,CAAC;IACF,IAAI,WAAW,GAAG,aAAa,CAAC;IAEhC,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,aAAa,CAAC;QAChE,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,WAAW,IAAI,aAAa,CAAC;QAC/B,CAAC;QACD,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAE,EAAE,MAAM,CAAC,KAAK,CAAE,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAC/B,MAAM,CAAC,MAAM,CACX,CAAC,GAAG,WAAW,EAAE,GAAG,uBAAuB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;IAClE,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU;QACV,KAAK,EAAE,OAAO,UAAU,eAAe;QACvC,KAAK;KACN,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,SAAS,GAAG,CAAC,UAAkB,EAAU,EAAE,CAC/C,MAAM,CAAC,gCAAgC,UAAU,EAAE,CAAC,CAAC;AAEvD,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAc,EAAE,CACvD,UAAU,CAAC,iCAAiC,UAAU,EAAE,CAAC,CAAC;AAE5D,MAAM,eAAe,GAAG,CAAC,UAAkB,EAAgB,EAAE,CAC3D,YAAY,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;AAEjE,MAAM,WAAW,GAAG,CAClB,UAAyC,EACN,EAAE,CAAC,CAAC;IACvC,CAAC,0BAA0B,CAAC,EAAE;QAC5B,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,sBAAsB;QAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,KAAK,EAAE,UAAU,CAAC,KAAK;KACxB;CACF,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG,CAAC,KAAc,EAA8C,EAAE,CAC9E,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,gBAAgB,GAAG,CACvB,QAAuD,EACvD,UAAyC,EAChC,EAAE;IACX,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,0BAA0B,CAAC,CAAC;IACtD,OAAO,CACL,QAAQ,CAAC,MAAM,CAAC;QAChB,MAAM,CAAC,KAAK,KAAK,oBAAoB;QACrC,MAAM,CAAC,OAAO,KAAK,sBAAsB;QACzC,MAAM,CAAC,UAAU,KAAK,UAAU,CAAC,UAAU;QAC3C,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,CAClC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CACd,UAAyC,EACzC,MAAkC,EAClC,OAAe,EACf,KAAe,EACO,EAAE,CACxB,IAAI,oBAAoB,CAAC;IACvB,MAAM;IACN,OAAO;IACP,UAAU,EAAE,UAAU,CAAC,UAAU;IACjC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAQL,MAAM,gBAAgB,GAAG,CACvB,UAAyC,EACzC,KAA2B,EAC3B,UAAoC,EACpC,WAAmD,EACA,EAAE;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,GAAG,CAAC;QAChB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5B,QAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACnE,UAAU,EACR,WAAW,KAAK,SAAS;YACvB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC/B,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC,MAAM,CAAC;KAC/C,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,OAAO,CACL,UAAU,EACV,SAAS,EACT,wCAAwC,UAAU,CAAC,UAAU,GAAG,EAChE,KAAK,CACN,CACF,CACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,UAAyC,EACzC,eAAwB,EACE,EAAE,CAC5B,UAAU,CAAC,KAAK,KAAK,kBAAkB,IAAI,CAAC,eAAe;IACzD,CAAC,CAAC,iBAAiB;IACnB,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;AAEvB,MAAM,oBAAoB,GAAG,CAC3B,UAAyC,EACzC,IAAkB,EAClB,eAAwB,EACxB,eAAuB,EACvB,8BAA8B,GAAG,KAAK,EACK,EAAE;AAC7C,gJAAgJ;AAChJ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IACE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC5B,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,CAAC,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EACpD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,OAAO,CACnB,UAAU,EACV,OAAO,EACP,yBAAyB,UAAU,CAAC,UAAU,6BAA6B,CAC5E,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC1D,IACE,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC;QAC5C,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QAChD,CAAC,UAAU,KAAK,SAAS;YACvB,CAAC,gBAAgB,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,OAAO,CACnB,UAAU,EACV,WAAW,EACX,yBAAyB,UAAU,CAAC,UAAU,sDAAsD,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,KAAK,KAAK,UAAU,CAAC;IAC7C,MAAM,eAAe,GACnB,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,kBAAkB,CAAC;IACzD,MAAM,sBAAsB,GAAG,KAAK,KAAK,kBAAkB,CAAC;IAC5D,MAAM,sBAAsB,GAAG,KAAK,KAAK,kBAAkB,CAAC;IAC5D,MAAM,eAAe,GAAG,QAAQ,CAAC,SAAS,KAAK,SAAS,CAAC;IACzD,MAAM,iBAAiB,GACrB,eAAe,KAAK,sBAAsB;QAC1C,CAAC,8BAA8B;YAC7B,sBAAsB;YACtB,CAAC,eAAe,CAAC,CAAC;IACtB,IACE,IAAI,CAAC,EAAE,KAAK,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC;QAC5C,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,KAAK,eAAe;QACnD,QAAQ,CAAC,EAAE,KAAK,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC;QACpD,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE;QAC3B,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ;QAChC,QAAQ,CAAC,IAAI,KAAK,OAAO;QACzB,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK;QACnC,QAAQ,CAAC,eAAe,KAAK,eAAe;QAC5C,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,KAAK,eAAe;QACvD,CAAC,iBAAiB;QAClB,QAAQ,CAAC,cAAc,KAAK,sBAAsB;QAClD,CAAC,UAAU,KAAK,SAAS;YACvB,CAAC,UAAU,CAAC,EAAE,KAAK,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC;gBACvD,UAAU,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE;gBAC7B,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS,CAAC,KAAK,sBAAsB,CAAC,CAAC,EACrE,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,OAAO,CACnB,UAAU,EACV,OAAO,EACP,yBAAyB,UAAU,CAAC,UAAU,qCAAqC,CACpF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,oBAAoB,GAAG,CAC3B,UAAyC,EACzC,eAAwB,EACxB,UAKC,EACD,GAAe,EACf,YAAgC,EACP,EAAE;IAC3B,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACzC,OAAO;QACL,IAAI,EAAE;YACJ,EAAE,EAAE,MAAM;YACV,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,QAAQ;SACT;QACD,QAAQ,EAAE;YACR,EAAE,EAAE,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC;YACxC,MAAM;YACN,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,GAAG,CAAC,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,kBAAkB;gBACxD,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;YACxB,cAAc,EAAE,KAAK,KAAK,kBAAkB;YAC5C,SAAS,EAAE,GAAG;YACd,QAAQ;SACT;QACD,GAAG,CAAC,eAAe,IAAI,YAAY,KAAK,SAAS;YAC/C,CAAC,CAAC;gBACE,kBAAkB,EAAE;oBAClB,EAAE,EAAE,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC;oBAC1C,MAAM;oBACN,YAAY;oBACZ,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,GAAG;oBACd,GAAG,CAAC,KAAK,KAAK,kBAAkB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3D,QAAQ;iBACT;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,OAAO,eAAgB,SAAQ,OAAO,CAAC,OAAO,EAGjD,CAAC,sBAAsB,EAAE;IAC1B,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACxB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;QAC/B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;QACxC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QAC9C,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC;QAElD,MAAM,OAAO,GAAG,CAAC,QAGhB,EAAmE,EAAE,CACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,eAAe,GAAG,QAAQ,KAAK,SAAS,CAAC;YAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACvD,IAAI,YAAgC,CAAC;YACrC,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;YAEjD,MAAM,eAAe,GAAG,GAGtB,EAAE;gBACF,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;oBAC/B,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;gBACtC,CAAC;gBACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,oBAAoB,CAAC;wBACvB,MAAM,EAAE,eAAe;wBACvB,OAAO,EAAE,6CAA6C;qBACvD,CAAC,CACH,CAAC;gBACJ,CAAC;gBACD,OAAO,QAAQ,CAAC,MAAM;qBACnB,IAAI,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC;qBAC1D,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;oBAClB,YAAY,GAAG,IAAI,CAAC;oBACpB,OAAO,IAAI,CAAC;gBACd,CAAC,CAAC,EACF,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,oBAAoB,CAAC;oBACvB,MAAM,EAAE,eAAe;oBACvB,OAAO,EAAE,+CAA+C;oBACxD,KAAK;iBACN,CAAC,CACL,CACF,CAAC;YACN,CAAC,CAAC;YAEF,MAAM,oBAAoB,GAAG,CAC3B,UAAyC,EACzC,UAAiC,EACU,EAAE;gBAC7C,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;gBAChD,IAAI,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3C,OAAO,MAAM,CAAC,IAAI,CAAC;gBACrB,CAAC;gBACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC3B,OAAO,MAAM,CAAC,IAAI,CAChB,OAAO,CACL,UAAU,EACV,eAAe,EACf,6CAA6C,CAC9C,CACF,CAAC;gBACJ,CAAC;gBACD,OAAO,QAAQ,CAAC,MAAM;qBACnB,MAAM,CAAC;oBACN,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC;iBACjD,CAAC;qBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,OAAO,CACL,UAAU,EACV,eAAe,EACf,2DAA2D,UAAU,CAAC,UAAU,GAAG,EACnF,KAAK,CACN,CACF,EACD,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK;oBACH,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;wBACf,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACvC,YAAY,KAAK,UAAU,CAAC;oBAC9B,CAAC,CAAC;oBACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,OAAO,CACL,UAAU,EACV,OAAO,EACP,yBAAyB,UAAU,CAAC,UAAU,0CAA0C,CACzF,CACF,CACN,CACF,CAAC;YACN,CAAC,CAAC;YAEF,MAAM,kBAAkB,GAAG,CACzB,UAAyC,EACzC,eAAuB,EACvB,IAAkB,EAC8C,EAAE,CAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAClB,IAAI,aAAa,GAAG,IAAI,CAAC;gBACzB,IACE,cAAc,CAAC,UAAU,EAAE,eAAe,CAAC;oBACzC,kBAAkB;oBACpB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;oBAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,EAC3C,CAAC;oBACD,KAAK,CAAC,CAAC,oBAAoB,CACzB,UAAU,EACV,IAAI,EACJ,eAAe,EACf,eAAe,EACf,IAAI,CACL,CAAC;oBACF,KAAK,CAAC,CAAC,UAAU;yBACd,MAAM,CAAC;wBACN,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;wBAC1B,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC;wBACxC,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS;wBAChD,SAAS,EAAE,GAAG;wBACd,MAAM,EAAE,kBAAkB;qBAC3B,CAAC;yBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,OAAO,CACL,UAAU,EACV,SAAS,EACT,6BAA6B,UAAU,CAAC,KAAK,GAAG,EAChD,KAAK,CACN,CACF,CACF,CAAC;oBACJ,aAAa,GAAG,KAAK,CAAC,CAAC,gBAAgB,CACrC,UAAU,EACV,KAAK,EACL,UAAU,EACV,QAAQ,EAAE,WAAW,CACtB,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,CAAC,oBAAoB,CACzB,UAAU,EACV,aAAa,EACb,eAAe,EACf,eAAe,CAChB,CAAC;gBACF,IAAI,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC/D,KAAK,CAAC,CAAC,oBAAoB,CACzB,UAAU,EACV,aAAa,CAAC,UAAU,CAAC,KAAK,CAC/B,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,GAAG,UAAU;oBACb,KAAK,EAAE,cAAc,CAAC,UAAU,EAAE,eAAe,CAAC;oBAClD,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC;oBACxC,OAAO,EAAE,UAAU;iBACpB,CAAC;YACJ,CAAC,CAAC,CAAC;YACL,MAAM,eAAe,GAAG,CAAC,IAAkB,EAAW,EAAE,CACtD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;gBACxB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAC5B,CAAC,eAAe;oBACd,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;oBAChC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAEtC,MAAM,OAAO,GAAgC,EAAE,CAAC;YAChD,KAAK,MAAM,UAAU,IAAI,oBAAoB,EAAE,CAAC;gBAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,aAAa;qBACpC,SAAS,CAAC,kBAAkB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;qBAC/C,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,OAAO,CACL,UAAU,EACV,eAAe,EACf,uBAAuB,UAAU,CAAC,KAAK,GAAG,EAC1C,KAAK,CACN,CACF,CACF,CAAC;gBACJ,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAC1C,UAAU,EACV,KAAK,EACL,UAAU,EACV,QAAQ,EAAE,WAAW,CACtB,CAAC;gBACF,MAAM,SAAS,GACb,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC;oBAChC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;oBACpC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;gBAEzC,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAC9C,UAAU,EACV,UAAU,CAAC,eAAe,EAC1B,YAAY,CACb,CAAC;oBACF,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;oBAC7B,SAAS;gBACX,CAAC;gBAED,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,UAAU;qBACrC,4BAA4B,CAAC,UAAU,CAAC;qBACxC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,OAAO,CACL,UAAU,EACV,SAAS,EACT,mBAAmB,UAAU,CAAC,KAAK,iBAAiB,EACpD,KAAK,CACN,CACF,CACF,CAAC;gBACJ,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;oBAClC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,gBAAgB,CACvC,UAAU,EACV,KAAK,EACL,UAAU,EACV,QAAQ,EAAE,WAAW,CACtB,CAAC;oBACF,IAAI,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC/B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAC3C,UAAU,EACV,UAAU,CAAC,eAAe,EAC1B,SAAS,CACV,CAAC;wBACF,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;wBAC1B,SAAS;oBACX,CAAC;oBACD,OAAO,KAAK,CAAC,CAAC,OAAO,CACnB,UAAU,EACV,WAAW,EACX,GAAG,UAAU,CAAC,KAAK,oCAAoC,CACxD,CAAC;gBACJ,CAAC;gBAED,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpE,MAAM,kBAAkB,GAAG,KAAK,CAAC,CAAC,YAAY;qBAC3C,MAAM,CACL,oBAAoB,CAClB,UAAU,EACV,eAAe,EACf,UAAU,EACV,GAAG,EACH,IAAI,CACL,CACF;qBACA,IAAI,CACH,MAAM,CAAC,GAAG,CACR,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAU,CAC3D,EACD,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CACrB,gBAAgB,CACd,UAAU,EACV,KAAK,EACL,UAAU,EACV,QAAQ,EAAE,WAAW,CACtB,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACtB,eAAe,CAAC,IAAI,CAAC;oBACnB,CAAC,CAAC,kBAAkB,CAChB,UAAU,EACV,UAAU,CAAC,eAAe,EAC1B,IAAI,CACL,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CACR,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAU,CACpD,CACF;oBACH,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,OAAO,CACL,UAAU,EACV,cAAc,EACd,0CAA0C,UAAU,CAAC,UAAU,GAAG,EAClE,KAAK,CACN,CACF,CACN,CACF,CACF,CACF,CAAC;gBACJ,IAAI,kBAAkB,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC3C,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;oBACxC,SAAS;gBACX,CAAC;gBACD,MAAM,EAAE,UAAU,EAAE,GAAG,kBAAkB,CAAC;gBAE1C,IACE,cAAc,CAAC,UAAU,EAAE,eAAe,CAAC,KAAK,kBAAkB,EAClE,CAAC;oBACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,UAAU;yBAC9B,MAAM,CAAC;wBACN,EAAE,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE;wBAC1B,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE;wBAC1B,iBAAiB,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS;wBAChD,SAAS,EAAE,GAAG;wBACd,MAAM,EAAE,kBAAkB;qBAC3B,CAAC;yBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,OAAO,CACL,UAAU,EACV,SAAS,EACT,oBAAoB,UAAU,CAAC,KAAK,GAAG,EACvC,KAAK,CACN,CACF,CACF,CAAC;oBACJ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAClC,UAAU,EACV,KAAK,EACL,UAAU,EACV,QAAQ,EAAE,WAAW,CACtB,CAAC;wBACF,KAAK,CAAC,CAAC,oBAAoB,CACzB,UAAU,EACV,IAAI,EACJ,eAAe,EACf,UAAU,CAAC,eAAe,CAC3B,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO,CAAC,IAAI,CAAC;oBACX,GAAG,UAAU;oBACb,KAAK,EAAE,cAAc,CAAC,UAAU,EAAE,eAAe,CAAC;oBAClD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,EAAE;oBAC1B,OAAO,EAAE,SAAS;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC;qBAC5D,MAAM;gBACT,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,KAAK,UAAU,CAAC;qBAC9D,MAAM;gBACT,KAAK,EAAE,OAAO;aACf,CAAC;QACJ,CAAC,CAAC,CAAC;QAEL,OAAO;YACL,SAAS,EAAE,OAAO,EAAE,CAAC,IAAI,CACvB,MAAM,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CACpD;YACD,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;gBACrC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;gBAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;gBACrC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC,CAAC;CACH,CAAC;CAAG;AAEL,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAC9D,eAAe,CAAC,IAAI,CACrB,CAAC"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
import { Layer } from "effect";
|
|
2
|
+
import { EmailReputation } from "./LoginRisk.js";
|
|
3
|
+
import type { EmailReputationService } from "./LoginRisk.js";
|
|
4
|
+
export declare const DisposableEmailDomainReason: {
|
|
5
|
+
readonly allowlisted: "disposable-domain-allowlisted";
|
|
6
|
+
readonly denylisted: "disposable-domain-denylisted";
|
|
7
|
+
readonly invalid: "invalid-email-domain";
|
|
8
|
+
};
|
|
9
|
+
export interface DisposableEmailDomainsOptions {
|
|
10
|
+
/** A pinned, application-supplied snapshot of disposable domains. */
|
|
11
|
+
readonly domains: Iterable<string>;
|
|
12
|
+
/** Explicit exceptions. An allowlist match takes precedence over all denylists. */
|
|
13
|
+
readonly allowlist?: Iterable<string>;
|
|
14
|
+
/** Application-specific additions to the disposable-domain snapshot. */
|
|
15
|
+
readonly denylist?: Iterable<string>;
|
|
16
|
+
}
|
|
17
|
+
export declare const makeDisposableEmailDomains: (options: DisposableEmailDomainsOptions) => EmailReputationService;
|
|
18
|
+
export declare const DisposableEmailDomainsLive: (options: DisposableEmailDomainsOptions) => Layer.Layer<EmailReputation, never, never>;
|
|
19
|
+
//# sourceMappingURL=DisposableEmailDomains.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"DisposableEmailDomains.d.ts","sourceRoot":"","sources":["../src/DisposableEmailDomains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,EAAE,eAAe,EAAwB,MAAM,gBAAgB,CAAC;AACvE,OAAO,KAAK,EAEV,sBAAsB,EACvB,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,2BAA2B;aACtC,WAAW,EAAE,+BAA+B;aAC5C,UAAU,EAAE,8BAA8B;aAC1C,OAAO,EAAE,sBAAsB;CACvB,CAAC;AAEX,MAAM,WAAW,6BAA6B;IAC5C,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnC,mFAAmF;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtC,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;CACtC;AAqDD,eAAO,MAAM,0BAA0B,YAC5B,6BAA6B,KACrC,sBAoCF,CAAC;AAEF,eAAO,MAAM,0BAA0B,YAC5B,6BAA6B,+CACgC,CAAC"}
|
|
@@ -0,0 +1,85 @@
|
|
|
1
|
+
import { Effect, Layer } from "effect";
|
|
2
|
+
import { EmailReputation, EmailReputationError } from "./LoginRisk.js";
|
|
3
|
+
export const DisposableEmailDomainReason = {
|
|
4
|
+
allowlisted: "disposable-domain-allowlisted",
|
|
5
|
+
denylisted: "disposable-domain-denylisted",
|
|
6
|
+
invalid: "invalid-email-domain",
|
|
7
|
+
};
|
|
8
|
+
const normalizeDomain = (input) => {
|
|
9
|
+
const candidate = input.trim().replace(/\.+$/, "").toLowerCase();
|
|
10
|
+
if (candidate.length === 0 || candidate.includes("@")) {
|
|
11
|
+
return undefined;
|
|
12
|
+
}
|
|
13
|
+
try {
|
|
14
|
+
// URL's host parser applies the runtime's Web-standard IDNA processing.
|
|
15
|
+
const domain = new URL(`http://${candidate}`).hostname.replace(/\.$/, "");
|
|
16
|
+
if (domain.length > 253 ||
|
|
17
|
+
domain.includes(":") ||
|
|
18
|
+
!domain.includes(".") ||
|
|
19
|
+
domain
|
|
20
|
+
.split(".")
|
|
21
|
+
.some((label) => label.length === 0 ||
|
|
22
|
+
label.length > 63 ||
|
|
23
|
+
!/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(label))) {
|
|
24
|
+
return undefined;
|
|
25
|
+
}
|
|
26
|
+
return domain;
|
|
27
|
+
}
|
|
28
|
+
catch {
|
|
29
|
+
return undefined;
|
|
30
|
+
}
|
|
31
|
+
};
|
|
32
|
+
const makeSet = (domains) => {
|
|
33
|
+
const normalized = new Set();
|
|
34
|
+
for (const domain of domains) {
|
|
35
|
+
const value = normalizeDomain(domain);
|
|
36
|
+
if (value !== undefined) {
|
|
37
|
+
normalized.add(value);
|
|
38
|
+
}
|
|
39
|
+
}
|
|
40
|
+
return normalized;
|
|
41
|
+
};
|
|
42
|
+
const matches = (domains, domain) => {
|
|
43
|
+
let candidate = domain;
|
|
44
|
+
while (candidate.includes(".")) {
|
|
45
|
+
if (domains.has(candidate)) {
|
|
46
|
+
return true;
|
|
47
|
+
}
|
|
48
|
+
candidate = candidate.slice(candidate.indexOf(".") + 1);
|
|
49
|
+
}
|
|
50
|
+
return false;
|
|
51
|
+
};
|
|
52
|
+
export const makeDisposableEmailDomains = (options) => {
|
|
53
|
+
const allowlist = makeSet(options.allowlist ?? []);
|
|
54
|
+
const denylist = makeSet((function* () {
|
|
55
|
+
yield* options.domains;
|
|
56
|
+
yield* options.denylist ?? [];
|
|
57
|
+
})());
|
|
58
|
+
return EmailReputation.of({
|
|
59
|
+
lookup: ({ email }) => {
|
|
60
|
+
const separator = String(email).lastIndexOf("@");
|
|
61
|
+
const domain = normalizeDomain(String(email).slice(separator + 1));
|
|
62
|
+
if (separator <= 0 || domain === undefined) {
|
|
63
|
+
return Effect.fail(new EmailReputationError({
|
|
64
|
+
operation: "lookup",
|
|
65
|
+
message: DisposableEmailDomainReason.invalid,
|
|
66
|
+
}));
|
|
67
|
+
}
|
|
68
|
+
if (matches(allowlist, domain)) {
|
|
69
|
+
return Effect.succeed({
|
|
70
|
+
disposable: false,
|
|
71
|
+
reasons: [DisposableEmailDomainReason.allowlisted],
|
|
72
|
+
});
|
|
73
|
+
}
|
|
74
|
+
const disposable = matches(denylist, domain);
|
|
75
|
+
return Effect.succeed({
|
|
76
|
+
disposable,
|
|
77
|
+
...(disposable
|
|
78
|
+
? { reasons: [DisposableEmailDomainReason.denylisted] }
|
|
79
|
+
: {}),
|
|
80
|
+
});
|
|
81
|
+
},
|
|
82
|
+
});
|
|
83
|
+
};
|
|
84
|
+
export const DisposableEmailDomainsLive = (options) => Layer.succeed(EmailReputation, makeDisposableEmailDomains(options));
|
|
85
|
+
//# sourceMappingURL=DisposableEmailDomains.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"DisposableEmailDomains.js","sourceRoot":"","sources":["../src/DisposableEmailDomains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAMvE,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,WAAW,EAAE,+BAA+B;IAC5C,UAAU,EAAE,8BAA8B;IAC1C,OAAO,EAAE,sBAAsB;CACvB,CAAC;AAWX,MAAM,eAAe,GAAG,CAAC,KAAa,EAAsB,EAAE;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,wEAAwE;QACxE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1E,IACE,MAAM,CAAC,MAAM,GAAG,GAAG;YACnB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YACpB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;YACrB,MAAM;iBACH,KAAK,CAAC,GAAG,CAAC;iBACV,IAAI,CACH,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,CAAC;gBAClB,KAAK,CAAC,MAAM,GAAG,EAAE;gBACjB,CAAC,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CACnD,EACH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,OAAyB,EAAuB,EAAE;IACjE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,OAA4B,EAAE,MAAc,EAAW,EAAE;IACxE,IAAI,SAAS,GAAG,MAAM,CAAC;IACvB,OAAO,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QACD,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,OAAsC,EACd,EAAE;IAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,OAAO,CACtB,CAAC,QAAQ,CAAC;QACR,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACvB,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IAChC,CAAC,CAAC,EAAE,CACL,CAAC;IAEF,OAAO,eAAe,CAAC,EAAE,CAAC;QACxB,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE;YACpB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;YACnE,IAAI,SAAS,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC3C,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,oBAAoB,CAAC;oBACvB,SAAS,EAAE,QAAQ;oBACnB,OAAO,EAAE,2BAA2B,CAAC,OAAO;iBAC7C,CAAC,CACH,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,OAAO,CAA8B;oBACjD,UAAU,EAAE,KAAK;oBACjB,OAAO,EAAE,CAAC,2BAA2B,CAAC,WAAW,CAAC;iBACnD,CAAC,CAAC;YACL,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,MAAM,CAAC,OAAO,CAAC;gBACpB,UAAU;gBACV,GAAG,CAAC,UAAU;oBACZ,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,2BAA2B,CAAC,UAAU,CAAC,EAAE;oBACvD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,OAAsC,EACtC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC"}
|
|
@@ -121,9 +121,6 @@ export interface DomainVerificationProofCheckerService {
|
|
|
121
121
|
declare const DomainVerificationProofChecker_base: Context.ServiceClass<DomainVerificationProofChecker, "auth/DomainVerificationProofChecker", DomainVerificationProofCheckerService>;
|
|
122
122
|
export declare class DomainVerificationProofChecker extends DomainVerificationProofChecker_base {
|
|
123
123
|
}
|
|
124
|
-
export declare namespace DomainVerificationProofChecker {
|
|
125
|
-
const make: (service: DomainVerificationProofCheckerService) => DomainVerificationProofCheckerService;
|
|
126
|
-
}
|
|
127
124
|
export interface DomainVerificationStoreFindByOwnerAndDomainInput {
|
|
128
125
|
readonly ownerId: string;
|
|
129
126
|
readonly domain: DomainName;
|
|
@@ -159,9 +156,6 @@ export interface DomainVerificationStoreService {
|
|
|
159
156
|
declare const DomainVerificationStore_base: Context.ServiceClass<DomainVerificationStore, "auth/DomainVerificationStore", DomainVerificationStoreService>;
|
|
160
157
|
export declare class DomainVerificationStore extends DomainVerificationStore_base {
|
|
161
158
|
}
|
|
162
|
-
export declare namespace DomainVerificationStore {
|
|
163
|
-
const make: (service: DomainVerificationStoreService) => DomainVerificationStoreService;
|
|
164
|
-
}
|
|
165
159
|
export interface DomainVerificationService {
|
|
166
160
|
readonly start: (input: DomainVerificationStartInput) => Effect.Effect<StartedDomainVerification, DomainVerificationError>;
|
|
167
161
|
readonly verify: (input: DomainVerificationVerifyInput) => Effect.Effect<DomainVerificationVerifyResult, DomainVerificationError>;
|
|
@@ -171,9 +165,6 @@ export interface DomainVerificationService {
|
|
|
171
165
|
declare const DomainVerification_base: Context.ServiceClass<DomainVerification, "auth/DomainVerification", DomainVerificationService>;
|
|
172
166
|
export declare class DomainVerification extends DomainVerification_base {
|
|
173
167
|
}
|
|
174
|
-
export declare namespace DomainVerification {
|
|
175
|
-
const make: (service: DomainVerificationService) => DomainVerificationService;
|
|
176
|
-
}
|
|
177
168
|
export interface DomainVerificationOptions {
|
|
178
169
|
readonly ttl?: Duration.Duration;
|
|
179
170
|
readonly idBytes?: number;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"DomainVerification.d.ts","sourceRoot":"","sources":["../src/DomainVerification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAQ,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAU,MAAM,QAAQ,CAAC;AAC/E,OAAO,KAAK,KAAK,WAAW,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAC9C,MAAM,EACN,2BAA2B,CAC5B,CAAC;AACF,eAAO,MAAM,oBAAoB,yCAAwC,CAAC;AAE1E,MAAM,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAClE,eAAO,MAAM,UAAU,+BAA8B,CAAC;AAEtD,MAAM,MAAM,4BAA4B,GAAG,KAAK,CAAC,OAAO,CACtD,MAAM,EACN,mCAAmC,CACpC,CAAC;AACF,eAAO,MAAM,4BAA4B,iDACM,CAAC;AAEhD,MAAM,MAAM,6BAA6B,
|
|
1
|
+
{"version":3,"file":"DomainVerification.d.ts","sourceRoot":"","sources":["../src/DomainVerification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAQ,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAU,MAAM,QAAQ,CAAC;AAC/E,OAAO,KAAK,KAAK,WAAW,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAC9C,MAAM,EACN,2BAA2B,CAC5B,CAAC;AACF,eAAO,MAAM,oBAAoB,yCAAwC,CAAC;AAE1E,MAAM,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAClE,eAAO,MAAM,UAAU,+BAA8B,CAAC;AAEtD,MAAM,MAAM,4BAA4B,GAAG,KAAK,CAAC,OAAO,CACtD,MAAM,EACN,mCAAmC,CACpC,CAAC;AACF,eAAO,MAAM,4BAA4B,iDACM,CAAC;AAEhD,MAAM,MAAM,6BAA6B,GACrC,SAAS,GACT,WAAW,GACX,UAAU,CAAC;AAEf,MAAM,MAAM,wBAAwB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAE1E,eAAO,MAAM,gCAAgC,KAAK,CAAC;AACnD,eAAO,MAAM,mCAAmC,KAAK,CAAC;AACtD,eAAO,MAAM,4BAA4B,mBAAmB,CAAC;AAC7D,eAAO,MAAM,6BAA6B,qCAAqC,CAAC;AAChF,eAAO,MAAM,mCAAmC,qCACZ,CAAC;AACrC,eAAO,MAAM,0BAA0B,qDACa,CAAC;AACrD,eAAO,MAAM,0BAA0B,oCAAoC,CAAC;AAE5E,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,4BAA4B,CAAC;IAClD,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,uBAAuB,GAC/B;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEN,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,6BAA6B,CAAC;IAChD,QAAQ,CAAC,EAAE,CAAC,EAAE,oBAAoB,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,4BAA4B,CAAC;IACnD,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;CACzC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,kCAAkC,CAAC;CACrD;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,2BAA2B,GACnC,OAAO,GACP,QAAQ,GACR,MAAM,GACN,QAAQ,CAAC;;;;AAEb,qBAAa,uBAAwB,SAAQ,6BAE3C;IACA,QAAQ,CAAC,SAAS,EAAE,2BAA2B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,qCAAqC,GAAG,OAAO,CAAC;;;;AAE5D,qBAAa,iCAAkC,SAAQ,uCAErD;IACA,QAAQ,CAAC,SAAS,EAAE,qCAAqC,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,KAAK,EAAE,CACd,KAAK,EAAE,iCAAiC,KACrC,MAAM,CAAC,MAAM,CAChB,kCAAkC,EAClC,iCAAiC,CAClC,CAAC;CACH;;AAED,qBAAa,8BAA+B,SAAQ,mCAGV;CAAG;AAE7C,MAAM,WAAW,gDAAgD;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,EAAE,EAAE,oBAAoB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,gCAAgC,GACxC,QAAQ,GACR,MAAM,GACN,MAAM,GACN,eAAe,GACf,QAAQ,CAAC;;;;AAEb,qBAAa,4BAA6B,SAAQ,kCAEhD;IACA,QAAQ,CAAC,SAAS,EAAE,gCAAgC,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,EAAE,CACf,MAAM,EAAE,wBAAwB,KAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,CACjB,EAAE,EAAE,oBAAoB,KACrB,MAAM,CAAC,MAAM,CAChB,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAC5C,4BAA4B,CAC7B,CAAC;IACF,QAAQ,CAAC,oBAAoB,EAAE,CAC7B,KAAK,EAAE,gDAAgD,KACpD,MAAM,CAAC,MAAM,CAChB,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAC5C,4BAA4B,CAC7B,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,2BAA2B,KAC/B,MAAM,CAAC,MAAM,CAChB,SAAS,wBAAwB,EAAE,EACnC,4BAA4B,CAC7B,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE,CACrB,KAAK,EAAE,wCAAwC,KAC5C,MAAM,CAAC,MAAM,CAChB,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,EAC5C,4BAA4B,CAC7B,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,kCAAkC,KACtC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,4BAA4B,CAAC,CAAC;CACxD;;AAED,qBAAa,uBAAwB,SAAQ,4BAGV;CAAG;AAEtC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,KAAK,EAAE,CACd,KAAK,EAAE,4BAA4B,KAChC,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE,uBAAuB,CAAC,CAAC;IACvE,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,6BAA6B,KACjC,MAAM,CAAC,MAAM,CAAC,8BAA8B,EAAE,uBAAuB,CAAC,CAAC;IAC5E,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,2BAA2B,KAC/B,MAAM,CAAC,MAAM,CAChB,SAAS,wBAAwB,EAAE,EACnC,uBAAuB,CACxB,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,6BAA6B,KACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;CACnD;;AAED,qBAAa,kBAAmB,SAAQ,uBAGV;CAAG;AAEjC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,8BAA+B,SAAQ,yBAAyB;IAC/E,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,8BAA8B,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAE,qCAAqC,CAAC;CAC9D;AAiDD,eAAO,MAAM,mBAAmB,UACvB,MAAM,KACZ,WAAW,CAAC,MAAM,CAAC,UAAU,CAc/B,CAAC;AAEF,eAAO,MAAM,4BAA4B,WAAY,UAAU,KAAG,MACpB,CAAC;AAE/C,eAAO,MAAM,6BAA6B,UACjC,4BAA4B,KAClC,MAA0D,CAAC;AAE9D,eAAO,MAAM,2BAA2B,WAC9B,IAAI,CACV,wBAAwB,EACxB,QAAQ,GAAG,aAAa,GAAG,YAAY,CACxC,KACA,uBA2BF,CAAC;AAmEF,eAAO,MAAM,iCAAiC,QACxC,8BAsFH,CAAC;AAEJ,eAAO,MAAM,iCAAiC,oDAEV,CAAC;AAErC,eAAO,MAAM,sBAAsB,iBACnB,8BAA8B,KAC3C,yBA8OC,CAAC;AAEL,eAAO,MAAM,sBAAsB,aAAc,yBAAyB,8GAcvE,CAAC;AAEJ,eAAO,MAAM,uBAAuB,UAAW,4BAA4B,0FACJ,CAAC;AAExE,eAAO,MAAM,wBAAwB,UAC5B,6BAA6B,+FACqC,CAAC;AAE5E,eAAO,MAAM,8BAA8B,UAClC,2BAA2B,oGAEyC,CAAC;AAE9E,eAAO,MAAM,wBAAwB,UAC5B,6BAA6B,qEACqC,CAAC"}
|