@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.19

package/dist/EmailVerification.js

@@ -1,9 +1,9 @@
 import { Context, Data, Duration, Effect, Layer, Option } from "effect";
 import { Challenge } from "./Challenge.js";
-import { Email, UserId, } from "./Identifiers.js";
+import { Email, } from "./Identifiers.js";
 import { currentUnixMillis } from "./Internal.js";
 import { AuthMailer } from "./Mailer.js";
-import { UserStore } from "./Storage.js";
+import { IdentityStore, UserStore, } from "./Storage.js";
 export class EmailVerificationIssueError extends Data.TaggedError("EmailVerificationIssueError") {
 }
 export class EmailVerificationVerifyError extends Data.TaggedError("EmailVerificationVerifyError") {
@@ -12,34 +12,44 @@ export class EmailDeliveryError extends Data.TaggedError("EmailDeliveryError") {
 }
 export class EmailDelivery extends Context.Service()("auth/EmailDelivery") {
 }
-(function (EmailDelivery) {
-    EmailDelivery.make = (service) => EmailDelivery.of(service);
-})(EmailDelivery || (EmailDelivery = {}));
 export class EmailVerificationFlowStartError extends Data.TaggedError("EmailVerificationFlowStartError") {
 }
 export class EmailVerificationFlow extends Context.Service()("auth/EmailVerificationFlow") {
 }
-(function (EmailVerificationFlow) {
-    EmailVerificationFlow.make = (service) => EmailVerificationFlow.of(service);
-})(EmailVerificationFlow || (EmailVerificationFlow = {}));
 export class EmailVerification extends Context.Service()("auth/EmailVerification") {
 }
-(function (EmailVerification) {
-    EmailVerification.make = (service) => EmailVerification.of(service);
-})(EmailVerification || (EmailVerification = {}));
 export const defaultEmailVerificationTtl = Duration.minutes(30);
-const userIdFromMetadata = (metadata) => {
-    const userId = metadata?.userId;
-    return typeof userId === "string" && userId.length > 0
-        ? UserId(userId)
-        : undefined;
+const stringFromMetadata = (key, metadata) => {
+    const value = metadata?.[key];
+    return typeof value === "string" && value.length > 0 ? value : undefined;
 };
 export const makeEmailVerification = (dependencies) => {
     const ttl = dependencies.ttl ?? defaultEmailVerificationTtl;
-    return EmailVerification.make({
+    return EmailVerification.of({
         issue: Effect.fn("auth.email_verification.issue")(function* (input) {
             yield* Effect.annotateCurrentSpan("auth.email_verification.operation", "issue");
-            const userOption = yield* dependencies.users.findById(input.userId).pipe(Effect.mapError((cause) => new EmailVerificationIssueError({
+            const identityOption = yield* dependencies.identities
+                .findById(input.identityId)
+                .pipe(Effect.mapError((cause) => new EmailVerificationIssueError({
+                message: "Failed to load identity for email verification",
+                cause,
+            })));
+            if (Option.isNone(identityOption)) {
+                return yield* new EmailVerificationIssueError({
+                    message: "Identity not found",
+                });
+            }
+            const identity = identityOption.value;
+            if (identity.kind !== "email" ||
+                identity.revokedAt !== undefined ||
+                identity.replacedById !== undefined) {
+                return yield* new EmailVerificationIssueError({
+                    message: "Identity is not an active email identity",
+                });
+            }
+            const userOption = yield* dependencies.users
+                .findById(identity.userId)
+                .pipe(Effect.mapError((cause) => new EmailVerificationIssueError({
                 message: "Failed to load user for email verification",
                 cause,
             })));
@@ -48,13 +58,12 @@ export const makeEmailVerification = (dependencies) => {
                     message: "User not found",
                 });
             }
-            const user = userOption.value;
-            if (user.email !== input.email) {
+            if (userOption.value.disabledAt !== undefined) {
                 return yield* new EmailVerificationIssueError({
-                    message: "Email does not match user",
+                    message: "User is disabled",
                 });
             }
-            if (user.emailVerified) {
+            if (identity.verifiedAt !== undefined) {
                 return yield* new EmailVerificationIssueError({
                     message: "Email is already verified",
                 });
@@ -62,12 +71,13 @@ export const makeEmailVerification = (dependencies) => {
             const issued = yield* dependencies.challenge
                 .issue({
                 type: "email-verification",
-                subject: input.email,
+                subject: input.identityId,
                 ttl: input.ttl ?? ttl,
                 secret: input.secret,
                 metadata: {
                     ...input.metadata,
-                    userId: input.userId,
+                    identityId: input.identityId,
+                    expectedNormalizedValue: identity.normalizedValue,
                 },
             })
                 .pipe(Effect.mapError((cause) => new EmailVerificationIssueError({
@@ -76,8 +86,9 @@ export const makeEmailVerification = (dependencies) => {
             })));
             return {
                 challengeId: issued.id,
-                userId: input.userId,
-                email: input.email,
+                identityId: identity.id,
+                userId: identity.userId,
+                email: Email(identity.value),
                 secret: issued.secret,
                 expiresAt: issued.expiresAt,
             };
@@ -94,13 +105,38 @@ export const makeEmailVerification = (dependencies) => {
                 message: "Invalid email verification challenge",
                 cause,
             })));
-            const userId = userIdFromMetadata(verified.metadata);
-            if (userId === undefined) {
+            const identityId = stringFromMetadata("identityId", verified.metadata);
+            const expectedNormalizedValue = stringFromMetadata("expectedNormalizedValue", verified.metadata);
+            if (identityId === undefined ||
+                expectedNormalizedValue === undefined ||
+                verified.subject !== identityId) {
+                return yield* new EmailVerificationVerifyError({
+                    message: "Email verification challenge has invalid identity metadata",
+                });
+            }
+            const identityOption = yield* dependencies.identities
+                .findById(identityId)
+                .pipe(Effect.mapError((cause) => new EmailVerificationVerifyError({
+                message: "Failed to load identity for email verification",
+                cause,
+            })));
+            if (Option.isNone(identityOption)) {
                 return yield* new EmailVerificationVerifyError({
-                    message: "Email verification challenge is missing user metadata",
+                    message: "Identity not found",
                 });
             }
-            const userOption = yield* dependencies.users.findById(userId).pipe(Effect.mapError((cause) => new EmailVerificationVerifyError({
+            const identity = identityOption.value;
+            if (identity.kind !== "email" ||
+                identity.revokedAt !== undefined ||
+                identity.replacedById !== undefined ||
+                identity.normalizedValue !== expectedNormalizedValue) {
+                return yield* new EmailVerificationVerifyError({
+                    message: "Email identity is no longer valid for this challenge",
+                });
+            }
+            const userOption = yield* dependencies.users
+                .findById(identity.userId)
+                .pipe(Effect.mapError((cause) => new EmailVerificationVerifyError({
                 message: "Failed to load user for email verification",
                 cause,
             })));
@@ -109,47 +145,53 @@ export const makeEmailVerification = (dependencies) => {
                     message: "User not found",
                 });
             }
-            if (userOption.value.email !== Email(verified.subject)) {
+            if (userOption.value.disabledAt !== undefined) {
                 return yield* new EmailVerificationVerifyError({
-                    message: "Email verification challenge does not match user email",
+                    message: "User is disabled",
                 });
             }
             const updatedAt = yield* currentUnixMillis;
-            const updatedUser = yield* dependencies.users
-                .markEmailVerified({ userId, updatedAt })
+            const updatedIdentity = yield* dependencies.identities
+                .markVerified({
+                id: identity.id,
+                expectedNormalizedValue,
+                verifiedAt: updatedAt,
+            })
                 .pipe(Effect.mapError((cause) => new EmailVerificationVerifyError({
-                message: "Failed to mark email verified",
+                message: "Failed to mark email identity verified",
                 cause,
             })));
-            if (Option.isNone(updatedUser)) {
+            if (Option.isNone(updatedIdentity)) {
                 return yield* new EmailVerificationVerifyError({
-                    message: "User not found",
+                    message: "Email identity changed before it could be verified",
                 });
             }
             return {
                 challengeId: verified.id,
-                user: updatedUser.value,
+                identity: updatedIdentity.value,
             };
         }),
     });
 };
 export const EmailVerificationLive = (options) => Layer.effect(EmailVerification)(Effect.gen(function* () {
     const challenge = yield* Challenge;
+    const identities = yield* IdentityStore;
     const users = yield* UserStore;
     const resolvedOptions = options ?? {};
     return makeEmailVerification({
         ...resolvedOptions,
         challenge,
+        identities,
         users,
     });
 }));
-export const makeEmailDeliveryFromAuthMailer = (dependencies) => EmailDelivery.make({
+export const makeEmailDeliveryFromAuthMailer = (dependencies) => EmailDelivery.of({
     sendEmailVerification: Effect.fn("auth.email_verification.delivery.auth_mailer")(function* (input) {
         yield* dependencies.authMailer
             .send({
             _tag: "EmailVerification",
             to: input.email,
-            userId: input.userId,
+            identityId: input.identityId,
             challengeId: input.challengeId,
             secret: input.secret,
             expiresAt: input.expiresAt,
@@ -165,7 +207,7 @@ export const EmailDeliveryFromAuthMailerLive = Layer.effect(EmailDelivery)(Effec
     const authMailer = yield* AuthMailer;
     return makeEmailDeliveryFromAuthMailer({ authMailer });
 }));
-export const makeEmailVerificationFlow = (dependencies) => EmailVerificationFlow.make({
+export const makeEmailVerificationFlow = (dependencies) => EmailVerificationFlow.of({
     start: Effect.fn("auth.email_verification_flow.start")(function* (input) {
         yield* Effect.annotateCurrentSpan("auth.email_verification_flow.operation", "start");
         const issued = yield* dependencies.emailVerification.issue(input).pipe(Effect.mapError((cause) => new EmailVerificationFlowStartError({
@@ -174,6 +216,7 @@ export const makeEmailVerificationFlow = (dependencies) => EmailVerificationFlow
         })));
         yield* dependencies.emailDelivery
             .sendEmailVerification({
+            identityId: issued.identityId,
             userId: issued.userId,
             email: issued.email,
             challengeId: issued.challengeId,
@@ -196,5 +239,5 @@ export const EmailVerificationFlowLive = Layer.effect(EmailVerificationFlow)(Eff
         emailDelivery,
     });
 }));
-export const EmailVerificationFeatureLive = (options) => EmailVerificationFlowLive.pipe(Layer.provideMerge(EmailVerificationLive(options)));
+export const EmailVerificationDefaultLive = (options) => EmailVerificationFlowLive.pipe(Layer.provideMerge(EmailVerificationLive(options)));
 //# sourceMappingURL=EmailVerification.js.map

package/dist/EmailVerification.js.map

@@ -1 +1 @@
-{"version":3,"file":"EmailVerification.js","sourceRoot":"","sources":["../src/EmailVerification.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExE,OAAO,EAAE,SAAS,EAAyB,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAEL,KAAK,EAEL,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,UAAU,EAA0B,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,SAAS,EAAuC,MAAM,cAAc,CAAC;AA4B9E,MAAM,OAAO,2BAA4B,SAAQ,IAAI,CAAC,WAAW,CAC/D,6BAA6B,CAI7B;CAAG;AAEL,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,8BAA8B,CAI9B;CAAG;AAeL,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAG3E;CAAG;AAQL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AAED,MAAM,OAAO,+BAAgC,SAAQ,IAAI,CAAC,WAAW,CACnE,iCAAiC,CAIjC;CAAG;AAQL,MAAM,OAAO,qBAAsB,SAAQ,OAAO,CAAC,OAAO,EAGvD,CAAC,4BAA4B,CAAC;CAAG;AAEpC,WAAiB,qBAAqB;IACvB,0BAAI,GAAG,CAClB,OAAqC,EACP,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC,EAJgB,qBAAqB,KAArB,qBAAqB,QAIrC;AAWD,MAAM,OAAO,iBAAkB,SAAQ,OAAO,CAAC,OAAO,EAGnD,CAAC,wBAAwB,CAAC;CAAG;AAEhC,WAAiB,iBAAiB;IACnB,sBAAI,GAAG,CAClB,OAAiC,EACP,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC,EAJgB,iBAAiB,KAAjB,iBAAiB,QAIjC;AAoBD,MAAM,CAAC,MAAM,2BAA2B,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAEhE,MAAM,kBAAkB,GAAG,CACzB,QAAuD,EACnC,EAAE;IACtB,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;IAEhC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QACpD,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QAChB,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,YAA2C,EACjB,EAAE;IAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,2BAA2B,CAAC;IAE5D,OAAO,iBAAiB,CAAC,IAAI,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EACzD,KAAkC;YAElC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,mCAAmC,EACnC,OAAO,CACR,CAAC;YAEF,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,2BAA2B,CAAC;gBAC9B,OAAO,EAAE,4CAA4C;gBACrD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEF,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,gBAAgB;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC;YAE9B,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,2BAA2B;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,2BAA2B;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBACzC,KAAK,CAAC;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,KAAK,CAAC,KAAK;gBACpB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG;gBACrB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE;oBACR,GAAG,KAAK,CAAC,QAAQ;oBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB;aACF,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,2BAA2B,CAAC;gBAC9B,OAAO,EAAE,8CAA8C;gBACvD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,OAAO;gBACL,WAAW,EAAE,MAAM,CAAC,EAAE;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAC3D,KAAmC;YAEnC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,mCAAmC,EACnC,QAAQ,CACT,CAAC;YAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBAC3C,MAAM,CAAC;gBACN,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;gBAC/B,OAAO,EAAE,sCAAsC;gBAC/C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YACJ,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAErD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,uDAAuD;iBACjE,CAAC,CAAC;YACL,CAAC;YAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAChE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;gBAC/B,OAAO,EAAE,4CAA4C;gBACrD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEF,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,gBAAgB;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvD,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,wDAAwD;iBAClE,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK;iBAC1C,iBAAiB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;iBACxC,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;gBAC/B,OAAO,EAAE,+BAA+B;gBACxC,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,gBAAgB;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,IAAI,EAAE,WAAW,CAAC,KAAK;aACxB,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAkC,EAAE,EAAE,CAC1E,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC7B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IAC/B,MAAM,eAAe,GAAG,OAAO,IAAI,EAAE,CAAC;IAEtC,OAAO,qBAAqB,CAAC;QAC3B,GAAG,eAAe;QAClB,SAAS;QACT,KAAK;KACN,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,YAAqD,EAC/B,EAAE,CACxB,aAAa,CAAC,IAAI,CAAC;IACjB,qBAAqB,EAAE,MAAM,CAAC,EAAE,CAC9B,8CAA8C,CAC/C,CAAC,QAAQ,CAAC,EAAE,KAAqC;QAChD,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;aAC3B,IAAI,CAAC;YACJ,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;YACrB,OAAO,EAAE,mCAAmC;YAC5C,KAAK;SACN,CAAC,CACL,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CACxE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAErC,OAAO,+BAA+B,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;AACzD,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,YAA+C,EACjB,EAAE,CAChC,qBAAqB,CAAC,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAC9D,KAAkC;QAElC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,wCAAwC,EACxC,OAAO,CACR,CAAC;QAEF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,+BAA+B,CAAC;YAClC,OAAO,EAAE,8CAA8C;YACvD,KAAK;SACN,CAAC,CACL,CACF,CAAC;QAEF,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;aAC9B,qBAAqB,CAAC;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,+BAA+B,CAAC;YAClC,OAAO,EAAE,mCAAmC;YAC5C,KAAK;SACN,CAAC,CACL,CACF,CAAC;QAEJ,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACnD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAE3C,OAAO,yBAAyB,CAAC;QAC/B,iBAAiB;QACjB,aAAa;KACd,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,OAAkC,EAClC,EAAE,CACF,yBAAyB,CAAC,IAAI,CAC5B,KAAK,CAAC,YAAY,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CACnD,CAAC"}
+{"version":3,"file":"EmailVerification.js","sourceRoot":"","sources":["../src/EmailVerification.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExE,OAAO,EAAE,SAAS,EAAyB,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAEL,KAAK,GAIN,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,UAAU,EAA0B,MAAM,aAAa,CAAC;AACjE,OAAO,EACL,aAAa,EAEb,SAAS,GAEV,MAAM,cAAc,CAAC;AA4BtB,MAAM,OAAO,2BAA4B,SAAQ,IAAI,CAAC,WAAW,CAC/D,6BAA6B,CAI7B;CAAG;AAEL,MAAM,OAAO,4BAA6B,SAAQ,IAAI,CAAC,WAAW,CAChE,8BAA8B,CAI9B;CAAG;AAgBL,MAAM,OAAO,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAG3E;CAAG;AAQL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,MAAM,OAAO,+BAAgC,SAAQ,IAAI,CAAC,WAAW,CACnE,iCAAiC,CAIjC;CAAG;AAQL,MAAM,OAAO,qBAAsB,SAAQ,OAAO,CAAC,OAAO,EAGvD,CAAC,4BAA4B,CAAC;CAAG;AAWpC,MAAM,OAAO,iBAAkB,SAAQ,OAAO,CAAC,OAAO,EAGnD,CAAC,wBAAwB,CAAC;CAAG;AAqBhC,MAAM,CAAC,MAAM,2BAA2B,GAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAEhE,MAAM,kBAAkB,GAAG,CACzB,GAAW,EACX,QAAuD,EACnC,EAAE;IACtB,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAE9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,YAA2C,EACjB,EAAE;IAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,2BAA2B,CAAC;IAE5D,OAAO,iBAAiB,CAAC,EAAE,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EACzD,KAAkC;YAElC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,mCAAmC,EACnC,OAAO,CACR,CAAC;YAEF,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;iBAClD,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;iBAC1B,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,2BAA2B,CAAC;gBAC9B,OAAO,EAAE,gDAAgD;gBACzD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,oBAAoB;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC;YAEtC,IACE,QAAQ,CAAC,IAAI,KAAK,OAAO;gBACzB,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAChC,QAAQ,CAAC,YAAY,KAAK,SAAS,EACnC,CAAC;gBACD,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,0CAA0C;iBACpD,CAAC,CAAC;YACL,CAAC;YAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK;iBACzC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;iBACzB,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,2BAA2B,CAAC;gBAC9B,OAAO,EAAE,4CAA4C;gBACrD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,gBAAgB;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,kBAAkB;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC,CAAC,IAAI,2BAA2B,CAAC;oBAC5C,OAAO,EAAE,2BAA2B;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBACzC,KAAK,CAAC;gBACL,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,KAAK,CAAC,UAAU;gBACzB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,GAAG;gBACrB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE;oBACR,GAAG,KAAK,CAAC,QAAQ;oBACjB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,uBAAuB,EAAE,QAAQ,CAAC,eAAe;iBAClD;aACF,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,2BAA2B,CAAC;gBAC9B,OAAO,EAAE,8CAA8C;gBACvD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,OAAO;gBACL,WAAW,EAAE,MAAM,CAAC,EAAE;gBACtB,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAC3D,KAAmC;YAEnC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,mCAAmC,EACnC,QAAQ,CACT,CAAC;YAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,SAAS;iBAC3C,MAAM,CAAC;gBACN,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,oBAAoB;gBAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;gBAC/B,OAAO,EAAE,sCAAsC;gBAC/C,KAAK;aACN,CAAC,CACL,CACF,CAAC;YACJ,MAAM,UAAU,GAAG,kBAAkB,CAAC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACvE,MAAM,uBAAuB,GAAG,kBAAkB,CAChD,yBAAyB,EACzB,QAAQ,CAAC,QAAQ,CAClB,CAAC;YAEF,IACE,UAAU,KAAK,SAAS;gBACxB,uBAAuB,KAAK,SAAS;gBACrC,QAAQ,CAAC,OAAO,KAAK,UAAU,EAC/B,CAAC;gBACD,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,4DAA4D;iBACtE,CAAC,CAAC;YACL,CAAC;YAED,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;iBAClD,QAAQ,CAAC,UAAwB,CAAC;iBAClC,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;gBAC/B,OAAO,EAAE,gDAAgD;gBACzD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,oBAAoB;iBAC9B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC;YAEtC,IACE,QAAQ,CAAC,IAAI,KAAK,OAAO;gBACzB,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAChC,QAAQ,CAAC,YAAY,KAAK,SAAS;gBACnC,QAAQ,CAAC,eAAe,KAAK,uBAAuB,EACpD,CAAC;gBACD,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,sDAAsD;iBAChE,CAAC,CAAC;YACL,CAAC;YAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK;iBACzC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;iBACzB,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;gBAC/B,OAAO,EAAE,4CAA4C;gBACrD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,gBAAgB;iBAC1B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC9C,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,kBAAkB;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;YAC3C,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;iBACnD,YAAY,CAAC;gBACZ,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,uBAAuB;gBACvB,UAAU,EAAE,SAAS;aACtB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,4BAA4B,CAAC;gBAC/B,OAAO,EAAE,wCAAwC;gBACjD,KAAK;aACN,CAAC,CACL,CACF,CAAC;YAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;oBAC7C,OAAO,EAAE,oDAAoD;iBAC9D,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,WAAW,EAAE,QAAQ,CAAC,EAAE;gBACxB,QAAQ,EAAE,eAAe,CAAC,KAAK;aAChC,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAkC,EAAE,EAAE,CAC1E,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAC7B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IACnC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC;IAC/B,MAAM,eAAe,GAAG,OAAO,IAAI,EAAE,CAAC;IAEtC,OAAO,qBAAqB,CAAC;QAC3B,GAAG,eAAe;QAClB,SAAS;QACT,UAAU;QACV,KAAK;KACN,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAC7C,YAAqD,EAC/B,EAAE,CACxB,aAAa,CAAC,EAAE,CAAC;IACf,qBAAqB,EAAE,MAAM,CAAC,EAAE,CAC9B,8CAA8C,CAC/C,CAAC,QAAQ,CAAC,EAAE,KAAqC;QAChD,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;aAC3B,IAAI,CAAC;YACJ,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,KAAK,CAAC,KAAK;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,kBAAkB,CAAC;YACrB,OAAO,EAAE,mCAAmC;YAC5C,KAAK;SACN,CAAC,CACL,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CACxE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAErC,OAAO,+BAA+B,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;AACzD,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CACvC,YAA+C,EACjB,EAAE,CAChC,qBAAqB,CAAC,EAAE,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAC9D,KAAkC;QAElC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,wCAAwC,EACxC,OAAO,CACR,CAAC;QAEF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,+BAA+B,CAAC;YAClC,OAAO,EAAE,8CAA8C;YACvD,KAAK;SACN,CAAC,CACL,CACF,CAAC;QAEF,KAAK,CAAC,CAAC,YAAY,CAAC,aAAa;aAC9B,qBAAqB,CAAC;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,+BAA+B,CAAC;YAClC,OAAO,EAAE,mCAAmC;YAC5C,KAAK;SACN,CAAC,CACL,CACF,CAAC;QAEJ,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IACnD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAE3C,OAAO,yBAAyB,CAAC;QAC/B,iBAAiB;QACjB,aAAa;KACd,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,OAAkC,EAClC,EAAE,CACF,yBAAyB,CAAC,IAAI,CAC5B,KAAK,CAAC,YAAY,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CACnD,CAAC"}

package/dist/Guard.d.ts

@@ -0,0 +1,11 @@
+import { Effect } from "effect";
+type EffectError<T> = T extends Effect.Effect<unknown, infer E, unknown> ? E : never;
+type EffectContext<T> = T extends Effect.Effect<unknown, unknown, infer R> ? R : never;
+export type Guard<A = void, E = never, R = never> = Effect.Effect<A, E, R>;
+export declare const allow: Guard;
+export declare const fromEffect: <A, E, R>(effect: Effect.Effect<A, E, R>) => Guard<A, E, R>;
+export declare const all: <const Guards extends readonly Effect.Effect<unknown, unknown, unknown>[]>(...guards: Guards) => Effect.Effect<void, EffectError<Guards[number]>, EffectContext<Guards[number]>>;
+export declare const require: <A, E, R>(guard: Effect.Effect<A, E, R>) => <B, E2, R2>(effect: Effect.Effect<B, E2, R2>) => Effect.Effect<B, E | E2, R | R2>;
+export declare const requireAll: <const Guards extends readonly Effect.Effect<unknown, unknown, unknown>[]>(...guards: Guards) => <A, E, R>(effect: Effect.Effect<A, E, R>) => Effect.Effect<A, E | EffectError<Guards[number]>, R | EffectContext<Guards[number]>>;
+export {};
+//# sourceMappingURL=Guard.d.ts.map

package/dist/Guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Guard.d.ts","sourceRoot":"","sources":["../src/Guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,KAAK,WAAW,CAAC,CAAC,IAChB,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AACjE,KAAK,aAAa,CAAC,CAAC,IAClB,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;AAEjE,MAAM,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAE3E,eAAO,MAAM,KAAK,EAAE,KAAmB,CAAC;AAExC,eAAO,MAAM,UAAU,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAG,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAC1E,CAAC;AAET,eAAO,MAAM,GAAG,GACd,KAAK,CAAC,MAAM,SAAS,SAAS,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,aAE7D,MAAM,KAChB,MAAM,CAAC,MAAM,CACd,IAAI,EACJ,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAC3B,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAU5B,CAAC;AAEJ,eAAO,MAAM,OAAO,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAC3D,CAAC,EAAE,EAAE,EAAE,EAAE,UAAU,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CACzC,CAAC;AAExC,eAAO,MAAM,UAAU,GACrB,KAAK,CAAC,MAAM,SAAS,SAAS,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,aAE7D,MAAM,MAEhB,CAAC,EAAE,CAAC,EAAE,CAAC,UACE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAC7B,MAAM,CAAC,MAAM,CACd,CAAC,EACD,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAC/B,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAMhC,CAAC"}

package/dist/Guard.js

@@ -0,0 +1,11 @@
+import { Effect } from "effect";
+export const allow = Effect.void;
+export const fromEffect = (effect) => effect;
+export const all = (...guards) => Effect.gen(function* () {
+    for (const guard of guards) {
+        yield* guard;
+    }
+});
+export const require = (guard) => (effect) => Effect.flatMap(guard, () => effect);
+export const requireAll = (...guards) => (effect) => Effect.flatMap(all(...guards), () => effect);
+//# sourceMappingURL=Guard.js.map

package/dist/Guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Guard.js","sourceRoot":"","sources":["../src/Guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAShC,MAAM,CAAC,MAAM,KAAK,GAAU,MAAM,CAAC,IAAI,CAAC;AAExC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAU,MAA8B,EAAkB,EAAE,CACpF,MAAM,CAAC;AAET,MAAM,CAAC,MAAM,GAAG,GAAG,CAGjB,GAAG,MAAc,EAKjB,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,CAAC,CAAC,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAIA,CAAC;AAEJ,MAAM,CAAC,MAAM,OAAO,GAAG,CAAU,KAA6B,EAAE,EAAE,CAChE,CAAY,MAAgC,EAAoC,EAAE,CAChF,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;AAExC,MAAM,CAAC,MAAM,UAAU,GAAG,CAGxB,GAAG,MAAc,EACjB,EAAE,CACF,CACE,MAA8B,EAK9B,EAAE,CACF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAI1C,CAAC"}

package/dist/HibpPwnedPasswords.d.ts

@@ -0,0 +1,56 @@
+import { Effect, Layer } from "effect";
+import { BreachedPasswordProvider, type BreachedPasswordCheckInput, type BreachedPasswordProviderService, type BreachedPasswordResult } from "./PasswordRisk.js";
+export type HibpPwnedPasswordsErrorKind = "configuration" | "network" | "timeout" | "rate-limited" | "service-unavailable" | "http" | "invalid-response" | "oversized-response";
+declare const HibpPwnedPasswordsError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "BreachedPasswordProviderError";
+} & Readonly<A>;
+export declare class HibpPwnedPasswordsError extends HibpPwnedPasswordsError_base<{
+    readonly message: string;
+    readonly kind: HibpPwnedPasswordsErrorKind;
+    readonly retryable: boolean;
+}> {
+}
+export interface HibpRangeEntry {
+    readonly suffix: string;
+    readonly count: number;
+}
+export interface HibpRangeCacheValue {
+    readonly entries: readonly HibpRangeEntry[];
+    readonly expiresAt: number;
+    readonly staleUntil: number;
+}
+/** Cache implementations must treat the five-character prefix as the complete key. */
+export interface HibpRangeCache {
+    readonly get: (prefix: string, now?: number) => Effect.Effect<HibpRangeCacheValue | undefined>;
+    readonly set: (prefix: string, value: HibpRangeCacheValue) => Effect.Effect<void>;
+}
+export interface HibpRangeCacheMemoryOptions {
+    readonly maxPrefixes?: number;
+    readonly maxEntryBytes?: number;
+}
+export declare const makeHibpRangeCacheMemory: (options?: HibpRangeCacheMemoryOptions | undefined) => Effect.Effect<{
+    get: (prefix: string, now?: number | undefined) => Effect.Effect<HibpRangeCacheValue | undefined, never, never>;
+    set: (prefix: string, value: HibpRangeCacheValue) => Effect.Effect<void, never, never>;
+}, HibpPwnedPasswordsError, never>;
+export interface HibpPwnedPasswordsOptions {
+    /** Public application identifier sent as User-Agent. Must not contain secrets. */
+    readonly applicationId: string;
+    readonly fetch?: (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+    readonly timeoutMs?: number;
+    readonly maxResponseBytes?: number;
+    readonly maxEntries?: number;
+    readonly cache?: HibpRangeCache;
+    /** Cache TTL, constrained to 6 through 24 hours. Defaults to 12 hours. */
+    readonly cacheTtlMs?: number;
+    /** Use an expired cache entry only when a retryable provider error occurs. */
+    readonly staleOnError?: boolean;
+    /** Maximum time after expiry that stale data may be used. Defaults to 24 hours. */
+    readonly maxStaleAgeMs?: number;
+}
+export interface HibpPwnedPasswordsService extends BreachedPasswordProviderService {
+    readonly check: (input: BreachedPasswordCheckInput) => Effect.Effect<BreachedPasswordResult, HibpPwnedPasswordsError>;
+}
+export declare const makeHibpPwnedPasswords: (options: HibpPwnedPasswordsOptions) => Effect.Effect<HibpPwnedPasswordsService, HibpPwnedPasswordsError>;
+export declare const HibpPwnedPasswordsLive: (options: HibpPwnedPasswordsOptions) => Layer.Layer<BreachedPasswordProvider, HibpPwnedPasswordsError, never>;
+export {};
+//# sourceMappingURL=HibpPwnedPasswords.d.ts.map

package/dist/HibpPwnedPasswords.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HibpPwnedPasswords.d.ts","sourceRoot":"","sources":["../src/HibpPwnedPasswords.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,MAAM,EAAE,KAAK,EAAiB,MAAM,QAAQ,CAAC;AAEnE,OAAO,EACL,wBAAwB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAC;AAQ3B,MAAM,MAAM,2BAA2B,GACnC,eAAe,GACf,SAAS,GACT,SAAS,GACT,cAAc,GACd,qBAAqB,GACrB,MAAM,GACN,kBAAkB,GAClB,oBAAoB,CAAC;;;;AAEzB,qBAAa,uBAAwB,SAAQ,6BAE3C;IACA,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,2BAA2B,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B,CAAC;CAAG;AAEL,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,sFAAsF;AACtF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,CACZ,MAAM,EAAE,MAAM,EACd,GAAG,CAAC,EAAE,MAAM,KACT,MAAM,CAAC,MAAM,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,EAAE,CACZ,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,mBAAmB,KACvB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,eAAO,MAAM,wBAAwB;;;kCA0CpC,CAAC;AAEF,MAAM,WAAW,yBAAyB;IACxC,kFAAkF;IAClF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,CACf,KAAK,EAAE,WAAW,GAAG,GAAG,EACxB,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,mFAAmF;IACnF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,yBAA0B,SAAQ,+BAA+B;IAChF,QAAQ,CAAC,KAAK,EAAE,CACd,KAAK,EAAE,0BAA0B,KAC9B,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC;CACrE;AAgFD,eAAO,MAAM,sBAAsB,YACxB,yBAAyB,KACjC,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE,uBAAuB,CA4I/D,CAAC;AAEL,eAAO,MAAM,sBAAsB,YAAa,yBAAyB,0EACA,CAAC"}

package/dist/HibpPwnedPasswords.js

@@ -0,0 +1,232 @@
+import { Clock, Data, Effect, Layer, Redacted, Ref } from "effect";
+import { BreachedPasswordProvider, } from "./PasswordRisk.js";
+const rangeEndpoint = "https://api.pwnedpasswords.com/range/";
+const defaultTimeoutMs = 2000;
+const defaultMaxResponseBytes = 2 * 1024 * 1024;
+const defaultMaxEntries = 100_000;
+const hourMs = 60 * 60 * 1000;
+export class HibpPwnedPasswordsError extends Data.TaggedError("BreachedPasswordProviderError") {
+}
+export const makeHibpRangeCacheMemory = Effect.fn("auth.hibp.memory_cache")(function* (options = {}) {
+    const maxPrefixes = options.maxPrefixes ?? 1024;
+    const maxEntryBytes = options.maxEntryBytes ?? defaultMaxResponseBytes;
+    if (!Number.isSafeInteger(maxPrefixes) ||
+        maxPrefixes <= 0 ||
+        !Number.isSafeInteger(maxEntryBytes) ||
+        maxEntryBytes <= 0) {
+        return yield* Effect.fail(providerError("configuration", false));
+    }
+    const values = yield* Ref.make(new Map());
+    return {
+        get: (prefix, now = Date.now()) => Ref.modify(values, (cache) => {
+            const live = new Map([...cache].filter(([, value]) => value.staleUntil > now));
+            const found = live.get(prefix);
+            if (found !== undefined) {
+                live.delete(prefix);
+                live.set(prefix, found);
+            }
+            return [found, live];
+        }),
+        set: (prefix, value) => Ref.update(values, (cache) => {
+            const estimatedBytes = value.entries.length * 48;
+            const next = new Map(cache);
+            next.delete(prefix);
+            if (estimatedBytes > maxEntryBytes) {
+                return next;
+            }
+            next.set(prefix, value);
+            while (next.size > maxPrefixes) {
+                next.delete(next.keys().next().value);
+            }
+            return next;
+        }),
+    };
+});
+const providerError = (kind, retryable) => new HibpPwnedPasswordsError({
+    message: "Breached password check failed",
+    kind,
+    retryable,
+});
+const readBounded = async (response, limit) => {
+    if (response.body === null) {
+        return "";
+    }
+    const reader = response.body.getReader();
+    const decoder = new TextDecoder("utf-8", { fatal: true });
+    let bytes = 0;
+    let text = "";
+    try {
+        while (true) {
+            const chunk = await reader.read();
+            if (chunk.done) {
+                break;
+            }
+            bytes += chunk.value.byteLength;
+            if (bytes > limit) {
+                throw providerError("oversized-response", false);
+            }
+            text += decoder.decode(chunk.value, { stream: true });
+        }
+        return text + decoder.decode();
+    }
+    finally {
+        await reader.cancel().catch(() => undefined);
+    }
+};
+const parseRange = (body, maxEntries) => {
+    const lines = body.split(/\r?\n/);
+    if (lines.at(-1) === "") {
+        lines.pop();
+    }
+    if (lines.length === 0 || lines.length > maxEntries) {
+        throw providerError("invalid-response", false);
+    }
+    const entries = [];
+    const seen = new Set();
+    for (const line of lines) {
+        const match = /^([0-9a-fA-F]{35}):([0-9]+)$/.exec(line);
+        if (match === null) {
+            throw providerError("invalid-response", false);
+        }
+        const suffix = match[1].toUpperCase();
+        const count = Number(match[2]);
+        if (!Number.isSafeInteger(count) || seen.has(suffix)) {
+            throw providerError("invalid-response", false);
+        }
+        seen.add(suffix);
+        entries.push({ suffix, count });
+    }
+    return entries;
+};
+const resultFor = (entries, suffix) => {
+    const found = entries.find((entry) => entry.suffix === suffix);
+    return found === undefined || found.count === 0
+        ? { breached: false }
+        : { breached: true, occurrences: found.count };
+};
+export const makeHibpPwnedPasswords = (options) => Effect.gen(function* () {
+    const ttl = options.cacheTtlMs ?? 12 * hourMs;
+    const timeoutMs = options.timeoutMs ?? defaultTimeoutMs;
+    const maxBytes = options.maxResponseBytes ?? defaultMaxResponseBytes;
+    const maxEntries = options.maxEntries ?? defaultMaxEntries;
+    const maxStaleAgeMs = options.maxStaleAgeMs ?? 24 * hourMs;
+    if (!/^[\u0020-\u007E]+$/.test(options.applicationId) ||
+        ttl < 6 * hourMs ||
+        ttl > 24 * hourMs ||
+        !Number.isSafeInteger(timeoutMs) ||
+        timeoutMs <= 0 ||
+        !Number.isSafeInteger(maxBytes) ||
+        maxBytes <= 0 ||
+        !Number.isSafeInteger(maxEntries) ||
+        maxEntries <= 0 ||
+        !Number.isSafeInteger(maxStaleAgeMs) ||
+        maxStaleAgeMs < 0) {
+        return yield* Effect.fail(providerError("configuration", false));
+    }
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    const inFlight = new Map();
+    return {
+        check: (input) => Effect.gen(function* () {
+            const digest = yield* Effect.tryPromise({
+                try: () => globalThis.crypto.subtle.digest("SHA-1", new TextEncoder().encode(Redacted.value(input.password))),
+                catch: () => providerError("configuration", false),
+            });
+            const hash = Array.from(new Uint8Array(digest), (byte) => byte.toString(16).padStart(2, "0"))
+                .join("")
+                .toUpperCase();
+            const prefix = hash.slice(0, 5);
+            const suffix = hash.slice(5);
+            const now = yield* Clock.currentTimeMillis;
+            const cached = options.cache === undefined
+                ? undefined
+                : yield* options.cache.get(prefix, now);
+            if (cached !== undefined && cached.expiresAt > now) {
+                return resultFor(cached.entries, suffix);
+            }
+            const lookup = Effect.tryPromise({
+                try: () => {
+                    const existing = inFlight.get(prefix);
+                    if (existing !== undefined) {
+                        return existing;
+                    }
+                    const request = (async () => {
+                        const controller = new AbortController();
+                        const timer = setTimeout(() => controller.abort(), timeoutMs);
+                        try {
+                            const response = await fetchImpl(`${rangeEndpoint}${prefix}`, {
+                                method: "GET",
+                                headers: {
+                                    "Add-Padding": "true",
+                                    "User-Agent": options.applicationId,
+                                },
+                                redirect: "error",
+                                signal: controller.signal,
+                            });
+                            if (response.status === 429) {
+                                throw providerError("rate-limited", true);
+                            }
+                            if (response.status >= 500) {
+                                throw providerError("service-unavailable", true);
+                            }
+                            if (!response.ok) {
+                                throw providerError("http", false);
+                            }
+                            let body;
+                            try {
+                                body = await readBounded(response, maxBytes);
+                            }
+                            catch (error) {
+                                if (error instanceof HibpPwnedPasswordsError) {
+                                    throw error;
+                                }
+                                throw providerError("invalid-response", false);
+                            }
+                            return parseRange(body, maxEntries);
+                        }
+                        catch (error) {
+                            if (error instanceof HibpPwnedPasswordsError) {
+                                throw error;
+                            }
+                            if (controller.signal.aborted) {
+                                throw providerError("timeout", true);
+                            }
+                            throw providerError("network", true);
+                        }
+                        finally {
+                            clearTimeout(timer);
+                        }
+                    })();
+                    const tracked = (async () => {
+                        try {
+                            return await request;
+                        }
+                        finally {
+                            inFlight.delete(prefix);
+                        }
+                    })();
+                    inFlight.set(prefix, tracked);
+                    return tracked;
+                },
+                catch: (error) => error instanceof HibpPwnedPasswordsError
+                    ? error
+                    : providerError("network", true),
+            });
+            const entries = yield* lookup.pipe(Effect.catchTag("BreachedPasswordProviderError", (error) => options.staleOnError &&
+                error.retryable &&
+                cached !== undefined &&
+                cached.staleUntil > now
+                ? Effect.succeed(cached.entries)
+                : Effect.fail(error)));
+            if (entries !== cached?.entries && options.cache !== undefined) {
+                yield* options.cache.set(prefix, {
+                    entries,
+                    expiresAt: now + ttl,
+                    staleUntil: now + ttl + maxStaleAgeMs,
+                });
+            }
+            return resultFor(entries, suffix);
+        }),
+    };
+});
+export const HibpPwnedPasswordsLive = (options) => Layer.effect(BreachedPasswordProvider, makeHibpPwnedPasswords(options));
+//# sourceMappingURL=HibpPwnedPasswords.js.map

package/dist/HibpPwnedPasswords.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HibpPwnedPasswords.js","sourceRoot":"","sources":["../src/HibpPwnedPasswords.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAEnE,OAAO,EACL,wBAAwB,GAIzB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,aAAa,GAAG,uCAAuC,CAAC;AAC9D,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,uBAAuB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAY9B,MAAM,OAAO,uBAAwB,SAAQ,IAAI,CAAC,WAAW,CAC3D,+BAA+B,CAK/B;CAAG;AA8BL,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CACzE,QAAQ,CAAC,EAAE,OAAO,GAAgC,EAAE;IAClD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC;IAChD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACvE,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC;QAClC,WAAW,IAAI,CAAC;QAChB,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC;QACpC,aAAa,IAAI,CAAC,EAClB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAA+B,CAAC,CAAC;IACvE,OAAO;QACL,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAChC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,CACzD,CAAC;YACF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACpB,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC1B,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,IAAI,CAAU,CAAC;QAChC,CAAC,CAAC;QACJ,GAAG,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CACrB,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3B,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC;YACjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpB,IAAI,cAAc,GAAG,aAAa,EAAE,CAAC;gBACnC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;YACzC,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;KACoB,CAAC;AAC7B,CAAC,CACF,CAAC;AA2BF,MAAM,aAAa,GAAG,CACpB,IAAiC,EACjC,SAAkB,EACO,EAAE,CAC3B,IAAI,uBAAuB,CAAC;IAC1B,OAAO,EAAE,gCAAgC;IACzC,IAAI;IACJ,SAAS;CACV,CAAC,CAAC;AAEL,MAAM,WAAW,GAAG,KAAK,EACvB,QAAkB,EAClB,KAAa,EACI,EAAE;IACnB,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,MAAM;YACR,CAAC;YACD,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;YAChC,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;gBAClB,MAAM,aAAa,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;YACnD,CAAC;YACD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CACjB,IAAY,EACZ,UAAkB,EACS,EAAE;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACxB,KAAK,CAAC,GAAG,EAAE,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;QACpD,MAAM,aAAa,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,aAAa,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,MAAM,aAAa,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAChB,OAAkC,EAClC,MAAc,EACU,EAAE;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC/D,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC;QAC7C,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;QACrB,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,OAAkC,EACiC,EAAE,CACrE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,GAAG,MAAM,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAC3D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,GAAG,MAAM,CAAC;IAC3D,IACE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,GAAG,GAAG,CAAC,GAAG,MAAM;QAChB,GAAG,GAAG,EAAE,GAAG,MAAM;QACjB,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;QAChC,SAAS,IAAI,CAAC;QACd,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;QAC/B,QAAQ,IAAI,CAAC;QACb,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;QACjC,UAAU,IAAI,CAAC;QACf,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC;QACpC,aAAa,GAAG,CAAC,EACjB,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEvE,OAAO;QACL,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;gBACtC,GAAG,EAAE,GAAG,EAAE,CACR,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAC7B,OAAO,EACP,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CACzD;gBACH,KAAK,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,KAAK,CAAC;aACnD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CACvD,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CACnC;iBACE,IAAI,CAAC,EAAE,CAAC;iBACR,WAAW,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;YAC3C,MAAM,MAAM,GACV,OAAO,CAAC,KAAK,KAAK,SAAS;gBACzB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC;gBACnD,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC/B,GAAG,EAAE,GAAG,EAAE;oBACR,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAC3B,OAAO,QAAQ,CAAC;oBAClB,CAAC;oBACD,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;wBAC1B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;wBACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;wBAC9D,IAAI,CAAC;4BACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,GAAG,aAAa,GAAG,MAAM,EAAE,EAC3B;gCACE,MAAM,EAAE,KAAK;gCACb,OAAO,EAAE;oCACP,aAAa,EAAE,MAAM;oCACrB,YAAY,EAAE,OAAO,CAAC,aAAa;iCACpC;gCACD,QAAQ,EAAE,OAAO;gCACjB,MAAM,EAAE,UAAU,CAAC,MAAM;6BAC1B,CACF,CAAC;4BACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gCAC5B,MAAM,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;4BAC5C,CAAC;4BACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gCAC3B,MAAM,aAAa,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;4BACnD,CAAC;4BACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gCACjB,MAAM,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;4BACrC,CAAC;4BACD,IAAI,IAAY,CAAC;4BACjB,IAAI,CAAC;gCACH,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;4BAC/C,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;oCAC7C,MAAM,KAAK,CAAC;gCACd,CAAC;gCACD,MAAM,aAAa,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;4BACjD,CAAC;4BACD,OAAO,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;wBACtC,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,IAAI,KAAK,YAAY,uBAAuB,EAAE,CAAC;gCAC7C,MAAM,KAAK,CAAC;4BACd,CAAC;4BACD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gCAC9B,MAAM,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;4BACvC,CAAC;4BACD,MAAM,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;wBACvC,CAAC;gCAAS,CAAC;4BACT,YAAY,CAAC,KAAK,CAAC,CAAC;wBACtB,CAAC;oBACH,CAAC,CAAC,EAAE,CAAC;oBACL,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;wBAC1B,IAAI,CAAC;4BACH,OAAO,MAAM,OAAO,CAAC;wBACvB,CAAC;gCAAS,CAAC;4BACT,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;wBAC1B,CAAC;oBACH,CAAC,CAAC,EAAE,CAAC;oBACL,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;oBAC9B,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,uBAAuB;oBACtC,CAAC,CAAC,KAAK;oBACP,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC;aACrC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAChC,MAAM,CAAC,QAAQ,CAAC,+BAA+B,EAAE,CAAC,KAAK,EAAE,EAAE,CACzD,OAAO,CAAC,YAAY;gBACpB,KAAK,CAAC,SAAS;gBACf,MAAM,KAAK,SAAS;gBACpB,MAAM,CAAC,UAAU,GAAG,GAAG;gBACrB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;gBAChC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CACvB,CACF,CAAC;YACF,IAAI,OAAO,KAAK,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC/D,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE;oBAC/B,OAAO;oBACP,SAAS,EAAE,GAAG,GAAG,GAAG;oBACpB,UAAU,EAAE,GAAG,GAAG,GAAG,GAAG,aAAa;iBACtC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC;KACL,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,OAAkC,EAAE,EAAE,CAC3E,KAAK,CAAC,MAAM,CAAC,wBAAwB,EAAE,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC"}