@effect-auth/core 0.1.0-alpha.16 → 0.1.0-alpha.19

package/dist/HttpApi/Middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Middleware.js","sourceRoot":"","sources":["../../src/HttpApi/Middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAEvD,MAAM,OAAO,yBAA0B,SAAQ,iBAAiB,CAAC,OAAO,EAA6B,CACnG,gCAAgC,EAChC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CACpC;CAAG;AAEJ,MAAM,OAAO,sBAAuB,SAAQ,iBAAiB,CAAC,OAAO,EAA0B,CAC7F,6BAA6B,CAC9B;CAAG;AAEJ,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC,OAAO,CACrD,sBAAsB,EACtB,CAAC,UAAU,EAAE,EAAE,CACb,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAClC,kBAAkB,CAAC,UAAU,CAAC,QAAQ,EAAE;IACtC,eAAe,EAAE,UAAU;IAC3B,MAAM,EAAE,UAAU;CACnB,CAAC,CACH,CACJ,CAAC"}

package/dist/HttpApi/OAuth.d.ts

@@ -0,0 +1,4 @@
+export { oauthAccountUnlinkResolutionHttpBody, type OAuthAccountUnlinkAfterAllowHttpInput, type OAuthAccountUnlinkHttpOptions, type OAuthAccountUnlinkStepUpHttpInput, oauthAuthorizationCallbackFormPostPayload, type OAuthAuthorizationCallbackFields, type OAuthAuthorizationCallbackFieldValue, oauthAuthorizationCallbackInput, type OAuthAuthorizationCallbackHttpOptions, type OAuthAuthorizationCallbackPayloadInput, oauthAuthorizationCallbackQueryPayload, type OAuthAuthorizationCallbackSearchParams, type OAuthAuthorizationCodeVerifierStoreInput, oauthAuthorizationStartedHttpBody, oauthAuthorizationStartInput, type OAuthAuthorizationStartHttpOptions, OAuthHttpApi, OAuthHttpApiGroupLive, OAuthHttpApiLive, OAuthHttpConfig, OAuthHttpConfigLive, type OAuthHttpConfigValue, OAuthHttpOperationsLive, type OAuthLinkConfirmationAfterConfirmHttpInput, oauthLinkConfirmationConfirmedHttpBody, oauthLinkConfirmationConfirmInput, type OAuthLinkConfirmationConfirmHttpOptions, type OAuthLinkConfirmationCurrentUserHttpInput, oauthLinkConfirmationInspectInput, oauthLinkConfirmationPendingHttpBody, oauthLinkConfirmationStartedHttpBody, oauthLinkConfirmationStartInput, type OAuthLinkConfirmationStartedHttpInput, type OAuthLinkConfirmationStartHttpInput, type OAuthLinkConfirmationStartHttpOptions, } from "./Api.js";
+export { oauthAccountUnlinkEndpoint, oauthAuthorizationStartEndpoint, oauthLinkConfirmationConfirmEndpoint, oauthLinkConfirmationInspectEndpoint, oauthLinkConfirmationStartEndpoint, } from "./Endpoints.js";
+export * from "./Operations/OAuth.js";
+//# sourceMappingURL=OAuth.d.ts.map

package/dist/HttpApi/OAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuth.d.ts","sourceRoot":"","sources":["../../src/HttpApi/OAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,KAAK,qCAAqC,EAC1C,KAAK,6BAA6B,EAClC,KAAK,iCAAiC,EACtC,yCAAyC,EACzC,KAAK,gCAAgC,EACrC,KAAK,oCAAoC,EACzC,+BAA+B,EAC/B,KAAK,qCAAqC,EAC1C,KAAK,sCAAsC,EAC3C,sCAAsC,EACtC,KAAK,sCAAsC,EAC3C,KAAK,wCAAwC,EAC7C,iCAAiC,EACjC,4BAA4B,EAC5B,KAAK,kCAAkC,EACvC,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EACnB,KAAK,oBAAoB,EACzB,uBAAuB,EACvB,KAAK,0CAA0C,EAC/C,sCAAsC,EACtC,iCAAiC,EACjC,KAAK,uCAAuC,EAC5C,KAAK,yCAAyC,EAC9C,iCAAiC,EACjC,oCAAoC,EACpC,oCAAoC,EACpC,+BAA+B,EAC/B,KAAK,qCAAqC,EAC1C,KAAK,mCAAmC,EACxC,KAAK,qCAAqC,GAC3C,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,oCAAoC,EACpC,oCAAoC,EACpC,kCAAkC,GACnC,MAAM,gBAAgB,CAAC;AACxB,cAAc,uBAAuB,CAAC"}

package/dist/HttpApi/OAuth.js

@@ -0,0 +1,4 @@
+export { oauthAccountUnlinkResolutionHttpBody, oauthAuthorizationCallbackFormPostPayload, oauthAuthorizationCallbackInput, oauthAuthorizationCallbackQueryPayload, oauthAuthorizationStartedHttpBody, oauthAuthorizationStartInput, OAuthHttpApi, OAuthHttpApiGroupLive, OAuthHttpApiLive, OAuthHttpConfig, OAuthHttpConfigLive, OAuthHttpOperationsLive, oauthLinkConfirmationConfirmedHttpBody, oauthLinkConfirmationConfirmInput, oauthLinkConfirmationInspectInput, oauthLinkConfirmationPendingHttpBody, oauthLinkConfirmationStartedHttpBody, oauthLinkConfirmationStartInput, } from "./Api.js";
+export { oauthAccountUnlinkEndpoint, oauthAuthorizationStartEndpoint, oauthLinkConfirmationConfirmEndpoint, oauthLinkConfirmationInspectEndpoint, oauthLinkConfirmationStartEndpoint, } from "./Endpoints.js";
+export * from "./Operations/OAuth.js";
+//# sourceMappingURL=OAuth.js.map

package/dist/HttpApi/OAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuth.js","sourceRoot":"","sources":["../../src/HttpApi/OAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EAIpC,yCAAyC,EAGzC,+BAA+B,EAG/B,sCAAsC,EAGtC,iCAAiC,EACjC,4BAA4B,EAE5B,YAAY,EACZ,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,EACf,mBAAmB,EAEnB,uBAAuB,EAEvB,sCAAsC,EACtC,iCAAiC,EAGjC,iCAAiC,EACjC,oCAAoC,EACpC,oCAAoC,EACpC,+BAA+B,GAIhC,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,0BAA0B,EAC1B,+BAA+B,EAC/B,oCAAoC,EACpC,oCAAoC,EACpC,kCAAkC,GACnC,MAAM,gBAAgB,CAAC;AACxB,cAAc,uBAAuB,CAAC"}

package/dist/HttpApi/OAuthDeviceAuthorization.d.ts

@@ -0,0 +1,106 @@
+import { Context, Effect, Layer, Redacted } from "effect";
+import type { Schema } from "effect";
+import { HttpClient, HttpServerRequest } from "effect/unstable/http";
+import { HttpApi, HttpApiClient, HttpApiGroup } from "effect/unstable/httpapi";
+import type { OAuthClientId, UnixMillis } from "../Identifiers.js";
+import { OAuthClientRegistry } from "../OAuth.js";
+import { OAuthDeviceAuthorization, OAuthDeviceAuthorizationStore } from "../OAuthDeviceAuthorization.js";
+import { SessionCookie, Sessions } from "../Sessions.js";
+import type { ValidatedSession } from "../Sessions.js";
+import { AuthBadRequestError, AuthConflictError, AuthInternalError, AuthPolicyDeniedError, AuthRateLimitedError, AuthRequestRejectedError, AuthSchemaErrorMiddleware, AuthStepUpRequiredError, OAuthDeviceAuthorizationEndpointError } from "./Errors.js";
+import { AuthOriginCheckMiddleware, OAuthNoStoreMiddleware } from "./Middleware.js";
+import { OAuthDeviceApprovalHttpOperations, OAuthDeviceAuthorizationHttpOperations } from "./Operations/OAuthDeviceAuthorization.js";
+export { oauthDeviceAuthorizationApproveEndpoint, oauthDeviceAuthorizationDenyEndpoint, oauthDeviceAuthorizationEndpoint, oauthDeviceAuthorizationInspectEndpoint, } from "./Endpoints.js";
+export * from "./Operations/OAuthDeviceAuthorization.js";
+export type OAuthDeviceAuthorizationHttpPolicyAction = "inspect" | "approve" | "deny";
+export interface OAuthDeviceAuthorizationSafeAuthorization {
+    readonly authorizationId: string;
+    readonly client: {
+        readonly id: OAuthClientId;
+        readonly name?: string;
+    };
+    readonly requestedScopes: readonly string[];
+    readonly expiresAt: UnixMillis;
+}
+export type OAuthDeviceAuthorizationHttpPolicyError = AuthPolicyDeniedError | AuthStepUpRequiredError | AuthRateLimitedError | AuthRequestRejectedError | AuthInternalError;
+export interface OAuthDeviceAuthorizationHttpPolicyInput {
+    readonly action: OAuthDeviceAuthorizationHttpPolicyAction;
+    readonly current: ValidatedSession;
+    readonly authorization: OAuthDeviceAuthorizationSafeAuthorization;
+    readonly request: HttpServerRequest.HttpServerRequest;
+}
+export interface OAuthDeviceAuthorizationInspectAttemptPolicyInput {
+    readonly current: ValidatedSession;
+    readonly request: HttpServerRequest.HttpServerRequest;
+}
+export interface OAuthDeviceAuthorizationClientAuthenticationInput {
+    readonly clientId: OAuthClientId;
+    readonly method: "client_secret_basic" | "client_secret_post";
+    readonly clientSecret: Redacted.Redacted<string>;
+    readonly request: HttpServerRequest.HttpServerRequest;
+}
+export interface OAuthDeviceAuthorizationHttpConfigValue {
+    readonly verificationUri: string;
+    readonly allowInsecureHttp?: boolean;
+}
+export interface OAuthDeviceApprovalPolicyService {
+    readonly authorize: (input: OAuthDeviceAuthorizationHttpPolicyInput) => Effect.Effect<void, OAuthDeviceAuthorizationHttpPolicyError>;
+    readonly inspectAttempt: (input: OAuthDeviceAuthorizationInspectAttemptPolicyInput) => Effect.Effect<void, OAuthDeviceAuthorizationHttpPolicyError>;
+}
+declare const OAuthDeviceApprovalPolicy_base: Context.ServiceClass<OAuthDeviceApprovalPolicy, "auth/http/policy/OAuthDeviceApproval", OAuthDeviceApprovalPolicyService>;
+export declare class OAuthDeviceApprovalPolicy extends OAuthDeviceApprovalPolicy_base {
+}
+export declare const OAuthDeviceApprovalPolicyAllowLive: Layer.Layer<OAuthDeviceApprovalPolicy, never, never>;
+declare const OAuthDeviceAuthorizationHttpConfig_base: Context.ServiceClass<OAuthDeviceAuthorizationHttpConfig, "auth/http/config/OAuthDeviceAuthorization", OAuthDeviceAuthorizationHttpConfigValue> & {
+    readonly make: (config: OAuthDeviceAuthorizationHttpConfigValue) => Effect.Effect<OAuthDeviceAuthorizationHttpConfigValue, OAuthDeviceAuthorizationEndpointError>;
+};
+export declare class OAuthDeviceAuthorizationHttpConfig extends OAuthDeviceAuthorizationHttpConfig_base {
+}
+export declare const OAuthDeviceAuthorizationHttpConfigLive: (config: OAuthDeviceAuthorizationHttpConfigValue) => Layer.Layer<OAuthDeviceAuthorizationHttpConfig, OAuthDeviceAuthorizationEndpointError, never>;
+export declare const OAuthDeviceAuthorizationHttpOperationsLive: Layer.Layer<OAuthDeviceAuthorizationHttpOperations, never, OAuthClientRegistry | OAuthDeviceAuthorization | OAuthDeviceAuthorizationHttpConfig>;
+export declare const OAuthDeviceApprovalHttpOperationsLive: Layer.Layer<OAuthDeviceApprovalHttpOperations, never, OAuthClientRegistry | OAuthDeviceApprovalPolicy | OAuthDeviceAuthorization | OAuthDeviceAuthorizationStore | SessionCookie | Sessions>;
+declare const OAuthDeviceAuthorizationHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"oauthDeviceAuthorization", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"authorizeDevice", "POST", "/auth/oauth/device_authorization", never, never, never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly device_code: Schema.String;
+    readonly user_code: Schema.String;
+    readonly verification_uri: Schema.String;
+    readonly verification_uri_complete: Schema.optional<Schema.String>;
+    readonly expires_in: Schema.Number;
+    readonly interval: Schema.Number;
+}>>, Schema.toCodecJson<typeof OAuthDeviceAuthorizationEndpointError>, AuthSchemaErrorMiddleware | OAuthNoStoreMiddleware, never>, false>;
+export declare class OAuthDeviceAuthorizationHttpApiGroup extends OAuthDeviceAuthorizationHttpApiGroup_base {
+}
+declare const OAuthDeviceApprovalHttpApiGroup_base: HttpApiGroup.HttpApiGroup<"oauthDeviceApproval", import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"inspect", "POST", "/auth/oauth/device/inspect", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly userCode: Schema.String;
+}>>, never, Schema.toCodecJson<Schema.Struct<{
+    readonly authorizationId: Schema.String;
+    readonly client: Schema.Struct<{
+        readonly id: Schema.brand<Schema.String, "auth/OAuthClientId">;
+        readonly name: Schema.optional<Schema.String>;
+    }>;
+    readonly requestedScopes: Schema.$Array<Schema.String>;
+    readonly expiresAt: Schema.brand<Schema.Number, "auth/UnixMillis">;
+    readonly userCode: Schema.String;
+}>>, Schema.toCodecJson<typeof AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthConflictError | typeof AuthRequestRejectedError | typeof AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware | OAuthNoStoreMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"approve", "POST", "/auth/oauth/device/approve", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly authorizationId: Schema.String;
+    readonly scopes: Schema.optional<Schema.$Array<Schema.String>>;
+    readonly userId: Schema.optional<Schema.Never>;
+    readonly subject: Schema.optional<Schema.Never>;
+}>>, never, Schema.toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, Schema.toCodecJson<typeof AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthConflictError | typeof AuthRequestRejectedError | typeof AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware | OAuthNoStoreMiddleware, never> | import("effect/unstable/httpapi/HttpApiEndpoint").HttpApiEndpoint<"deny", "POST", "/auth/oauth/device/deny", never, never, Schema.toCodecJson<Schema.Struct<{
+    readonly authorizationId: Schema.String;
+    readonly userId: Schema.optional<Schema.Never>;
+    readonly subject: Schema.optional<Schema.Never>;
+}>>, never, Schema.toCodecJson<import("effect/unstable/httpapi/HttpApiSchema").NoContent>, Schema.toCodecJson<typeof AuthBadRequestError | typeof import("./Errors.js").AuthUnauthenticatedError | typeof AuthPolicyDeniedError | typeof AuthStepUpRequiredError | typeof AuthRateLimitedError | typeof AuthConflictError | typeof AuthRequestRejectedError | typeof AuthInternalError>, AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware | OAuthNoStoreMiddleware, never>, false>;
+export declare class OAuthDeviceApprovalHttpApiGroup extends OAuthDeviceApprovalHttpApiGroup_base {
+}
+declare const OAuthDeviceAuthorizationHttpApi_base: HttpApi.HttpApi<"OAuthDeviceAuthorizationHttpApi", typeof OAuthDeviceAuthorizationHttpApiGroup | typeof OAuthDeviceApprovalHttpApiGroup>;
+export declare class OAuthDeviceAuthorizationHttpApi extends OAuthDeviceAuthorizationHttpApi_base {
+}
+export interface OAuthDeviceAuthorizationHttpClientOptions {
+    readonly baseUrl?: URL | string;
+}
+export type OAuthDeviceAuthorizationHttpClient = HttpApiClient.ForApi<typeof OAuthDeviceAuthorizationHttpApi>;
+export declare const makeOAuthDeviceAuthorizationHttpClient: (options?: OAuthDeviceAuthorizationHttpClientOptions) => Effect.Effect<OAuthDeviceAuthorizationHttpClient, never, HttpClient.HttpClient>;
+export declare const OAuthDeviceAuthorizationHttpApiGroupLive: Layer.Layer<HttpApiGroup.Service<"OAuthDeviceAuthorizationHttpApi", "oauthDeviceAuthorization">, never, OAuthDeviceAuthorizationHttpOperations | (AuthSchemaErrorMiddleware | OAuthNoStoreMiddleware)>;
+export declare const OAuthDeviceApprovalHttpApiGroupLive: Layer.Layer<HttpApiGroup.Service<"OAuthDeviceAuthorizationHttpApi", "oauthDeviceApproval">, never, OAuthDeviceApprovalHttpOperations | (AuthOriginCheckMiddleware | AuthSchemaErrorMiddleware | OAuthNoStoreMiddleware)>;
+export declare const OAuthDeviceAuthorizationHttpApiLive: Layer.Layer<never, never, AuthOriginCheckMiddleware | import("effect/FileSystem").FileSystem | import("effect/unstable/http/Etag").Generator | import("effect/unstable/http/HttpPlatform").HttpPlatform | import("effect/unstable/http/HttpRouter").HttpRouter | OAuthClientRegistry | OAuthDeviceApprovalPolicy | OAuthDeviceAuthorization | OAuthDeviceAuthorizationHttpConfig | OAuthDeviceAuthorizationStore | import("effect/Path").Path | SessionCookie | Sessions>;
+//# sourceMappingURL=OAuthDeviceAuthorization.d.ts.map

package/dist/HttpApi/OAuthDeviceAuthorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthDeviceAuthorization.d.ts","sourceRoot":"","sources":["../../src/HttpApi/OAuthDeviceAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,MAAM,EAEN,KAAK,EAEL,QAAQ,EAET,MAAM,QAAQ,CAAC;AAChB,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EACL,UAAU,EACV,iBAAiB,EAElB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,OAAO,EAEP,aAAa,EACb,YAAY,EACb,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAOnE,OAAO,EACL,mBAAmB,EAEpB,MAAM,aAAa,CAAC;AAKrB,OAAO,EAEL,wBAAwB,EAExB,6BAA6B,EAC9B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAOvD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EAEzB,uBAAuB,EACvB,qCAAqC,EACtC,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EAEvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iCAAiC,EACjC,sCAAsC,EACvC,MAAM,0CAA0C,CAAC;AAUlD,OAAO,EACL,uCAAuC,EACvC,oCAAoC,EACpC,gCAAgC,EAChC,uCAAuC,GACxC,MAAM,gBAAgB,CAAC;AACxB,cAAc,0CAA0C,CAAC;AAEzD,MAAM,MAAM,wCAAwC,GAChD,SAAS,GACT,SAAS,GACT,MAAM,CAAC;AAEX,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,EAAE,EAAE,aAAa,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,MAAM,uCAAuC,GAC/C,qBAAqB,GACrB,uBAAuB,GACvB,oBAAoB,GACpB,wBAAwB,GACxB,iBAAiB,CAAC;AAEtB,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,MAAM,EAAE,wCAAwC,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,yCAAyC,CAAC;IAClE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;CACvD;AAED,MAAM,WAAW,iDAAiD;IAChE,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;CACvD;AAED,MAAM,WAAW,iDAAiD;IAChE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,GAAG,oBAAoB,CAAC;IAC9D,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;CACvD;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,SAAS,EAAE,CAClB,KAAK,EAAE,uCAAuC,KAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;IAClE,QAAQ,CAAC,cAAc,EAAE,CACvB,KAAK,EAAE,iDAAiD,KACrD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,uCAAuC,CAAC,CAAC;CACnE;;AAED,qBAAa,yBAA0B,SAAQ,8BAGJ;CAAG;AAE9C,eAAO,MAAM,kCAAkC,sDAO9C,CAAC;;4BAMY,uCAAuC,KAC9C,MAAM,CAAC,MAAM,CACd,uCAAuC,EACvC,qCAAqC,CACtC;;AARL,qBAAa,kCAAmC,SAAQ,uCAmBvD;CAAG;AAEJ,eAAO,MAAM,sCAAsC,WACzC,uCAAuC,kGAK9C,CAAC;AAmiBJ,eAAO,MAAM,0CAA0C,iJAKtD,CAAC;AAEF,eAAO,MAAM,qCAAqC,8LAOjD,CAAC;;;;;;;;;AAEF,qBAAa,oCAAqC,SAAQ,yCAKlB;CAAG;;;;;;;;;;;;;;;;;;;;;;AAE3C,qBAAa,+BAAgC,SAAQ,oCAWb;CAAG;;AAE3C,qBAAa,+BAAgC,SAAQ,oCAId;CAAG;AAE1C,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC;CACjC;AAED,MAAM,MAAM,kCAAkC,GAAG,aAAa,CAAC,MAAM,CACnE,OAAO,+BAA+B,CACvC,CAAC;AAEF,eAAO,MAAM,sCAAsC,aACxC,yCAAyC,KACjD,MAAM,CAAC,MAAM,CACd,kCAAkC,EAClC,KAAK,EACL,UAAU,CAAC,UAAU,CAInB,CAAC;AAEL,eAAO,MAAM,wCAAwC,wMAOpD,CAAC;AAEF,eAAO,MAAM,mCAAmC,0NAU/C,CAAC;AAEF,eAAO,MAAM,mCAAmC,2cAS/C,CAAC"}

package/dist/HttpApi/OAuthDeviceAuthorization.js

@@ -0,0 +1,415 @@
+import { Context, Effect, Encoding, Layer, Option, Redacted, Result, } from "effect";
+import { HttpClient, HttpServerRequest, HttpServerResponse, } from "effect/unstable/http";
+import { HttpApi, HttpApiBuilder, HttpApiClient, HttpApiGroup, } from "effect/unstable/httpapi";
+import { OAuthClientId as makeOAuthClientId } from "../Identifiers.js";
+import { OAuthClientRegistry, OAuthClientSecretVerification, } from "../OAuth.js";
+import { normalizeOAuthDeviceUserCode, OAuthDeviceAuthorization, OAuthDeviceAuthorizationId, OAuthDeviceAuthorizationStore, } from "../OAuthDeviceAuthorization.js";
+import { SessionCookie, Sessions } from "../Sessions.js";
+import { oauthDeviceAuthorizationApproveEndpoint, oauthDeviceAuthorizationDenyEndpoint, oauthDeviceAuthorizationEndpoint, oauthDeviceAuthorizationInspectEndpoint, } from "./Endpoints.js";
+import { AuthBadRequestError, AuthConflictError, AuthInternalError, AuthPolicyDeniedError, AuthRateLimitedError, AuthRequestRejectedError, AuthSchemaErrorMiddleware, AuthSchemaErrorMiddlewareLive, AuthStepUpRequiredError, OAuthDeviceAuthorizationEndpointError, } from "./Errors.js";
+import { AuthOriginCheckMiddleware, OAuthNoStoreMiddleware, OAuthNoStoreMiddlewareLive, } from "./Middleware.js";
+import { OAuthDeviceApprovalHttpOperations, OAuthDeviceAuthorizationHttpOperations, } from "./Operations/OAuthDeviceAuthorization.js";
+import { OAuthDeviceAuthorizationApproveBody, OAuthDeviceAuthorizationDenyBody, OAuthDeviceAuthorizationInspectBody, OAuthDeviceAuthorizationResponseBody, OAuthDeviceAuthorizationSafeHttpBody, } from "./Schemas.js";
+import { readRequiredSession } from "./SessionGuards.js";
+export { oauthDeviceAuthorizationApproveEndpoint, oauthDeviceAuthorizationDenyEndpoint, oauthDeviceAuthorizationEndpoint, oauthDeviceAuthorizationInspectEndpoint, } from "./Endpoints.js";
+export * from "./Operations/OAuthDeviceAuthorization.js";
+export class OAuthDeviceApprovalPolicy extends Context.Service()("auth/http/policy/OAuthDeviceApproval") {
+}
+export const OAuthDeviceApprovalPolicyAllowLive = Layer.succeed(OAuthDeviceApprovalPolicy)(OAuthDeviceApprovalPolicy.of({
+    authorize: () => Effect.void,
+    inspectAttempt: () => Effect.void,
+}));
+export class OAuthDeviceAuthorizationHttpConfig extends Context.Service()("auth/http/config/OAuthDeviceAuthorization", {
+    make: (config) => parseVerificationUri(config.verificationUri, config.allowInsecureHttp === true).pipe(Effect.map((verificationUri) => ({
+        ...config,
+        verificationUri: verificationUri.toString(),
+    }))),
+}) {
+}
+export const OAuthDeviceAuthorizationHttpConfigLive = (config) => Layer.effect(OAuthDeviceAuthorizationHttpConfig, OAuthDeviceAuthorizationHttpConfig.make(config));
+const deviceAuthorizationError = (error, errorDescription) => new OAuthDeviceAuthorizationEndpointError({
+    error,
+    ...(errorDescription === undefined ? {} : { errorDescription }),
+});
+const deviceAuthorizationInternalError = () => deviceAuthorizationError("server_error", "Device authorization failed");
+const nonEmpty = (value) => {
+    const trimmed = value?.trim();
+    return trimmed === undefined || trimmed === "" ? undefined : trimmed;
+};
+const decodeFormComponent = (value) => {
+    try {
+        return new URLSearchParams(`value=${value}`).get("value") ?? value;
+    }
+    catch {
+        return value;
+    }
+};
+const decodeBasicAuthentication = (request) => {
+    const { authorization } = request.headers;
+    if (authorization === undefined || authorization.trim() === "") {
+        return Effect.succeed(Option.none());
+    }
+    if (!authorization.toLowerCase().startsWith("basic ")) {
+        return Effect.fail(deviceAuthorizationError("invalid_client"));
+    }
+    const encoded = authorization.slice("Basic ".length).trim();
+    if (encoded === "") {
+        return Effect.fail(deviceAuthorizationError("invalid_client"));
+    }
+    return Result.match(Encoding.decodeBase64(encoded), {
+        onFailure: () => Effect.fail(deviceAuthorizationError("invalid_client")),
+        onSuccess: (bytes) => {
+            const decoded = new TextDecoder().decode(bytes);
+            const separator = decoded.indexOf(":");
+            const clientId = nonEmpty(separator === -1
+                ? undefined
+                : decodeFormComponent(decoded.slice(0, separator)));
+            const clientSecret = separator === -1
+                ? ""
+                : decodeFormComponent(decoded.slice(separator + 1));
+            return separator <= 0 || clientId === undefined || clientSecret === ""
+                ? Effect.fail(deviceAuthorizationError("invalid_client"))
+                : Effect.succeed(Option.some({
+                    clientId: makeOAuthClientId(clientId),
+                    method: "client_secret_basic",
+                    clientSecret: Redacted.make(clientSecret),
+                }));
+        },
+    });
+};
+const parseDeviceAuthorizationBody = (request) => Effect.gen(function* () {
+    const contentType = request.headers["content-type"]?.toLowerCase() ?? "";
+    const [mediaType, ...parameters] = contentType
+        .split(";")
+        .map((part) => part.trim());
+    const charset = parameters
+        .map((parameter) => parameter.split("=", 2))
+        .find(([name]) => name === "charset")?.[1]
+        ?.replaceAll('"', "");
+    if (mediaType !== "application/x-www-form-urlencoded" ||
+        (charset !== undefined && charset !== "utf-8")) {
+        return yield* deviceAuthorizationError("invalid_request");
+    }
+    const text = yield* request.text.pipe(Effect.mapError(() => deviceAuthorizationError("invalid_request")));
+    const params = new URLSearchParams(text);
+    const recognized = ["client_id", "client_secret", "scope"];
+    for (const name of recognized) {
+        if (params.getAll(name).length > 1) {
+            return yield* deviceAuthorizationError("invalid_request");
+        }
+    }
+    const clientId = nonEmpty(params.get("client_id") ?? undefined);
+    const clientSecret = nonEmpty(params.get("client_secret") ?? undefined);
+    const scope = nonEmpty(params.get("scope") ?? undefined);
+    return {
+        ...(clientId === undefined ? {} : { client_id: clientId }),
+        ...(clientSecret === undefined ? {} : { client_secret: clientSecret }),
+        ...(scope === undefined ? {} : { scope }),
+    };
+});
+const authenticateDeviceClient = (input) => Effect.gen(function* () {
+    const basic = yield* decodeBasicAuthentication(input.request);
+    const post = input.payload.client_secret === undefined ||
+        input.payload.client_id === undefined
+        ? undefined
+        : {
+            clientId: makeOAuthClientId(input.payload.client_id),
+            method: "client_secret_post",
+            clientSecret: Redacted.make(input.payload.client_secret),
+        };
+    if (Option.isSome(basic) && input.payload.client_secret !== undefined) {
+        return yield* deviceAuthorizationError("invalid_request");
+    }
+    if (input.payload.client_secret !== undefined && post === undefined) {
+        return yield* deviceAuthorizationError("invalid_request");
+    }
+    const authentication = Option.isSome(basic) ? basic.value : post;
+    if (authentication !== undefined &&
+        input.payload.client_id !== undefined &&
+        authentication.clientId !== input.payload.client_id) {
+        return yield* deviceAuthorizationError("invalid_request");
+    }
+    if (authentication === undefined) {
+        return {
+            ...(input.payload.client_id === undefined
+                ? {}
+                : { clientId: makeOAuthClientId(input.payload.client_id) }),
+            clientAuthenticated: false,
+        };
+    }
+    if (Option.isNone(input.clientSecretVerification)) {
+        return yield* deviceAuthorizationError("invalid_client");
+    }
+    const authenticated = yield* input.clientSecretVerification.value
+        .authenticateClient(authentication)
+        .pipe(Effect.mapError(deviceAuthorizationInternalError));
+    if (!authenticated) {
+        return yield* deviceAuthorizationError("invalid_client");
+    }
+    return { clientId: authentication.clientId, clientAuthenticated: true };
+});
+const loadClient = (clients, clientId) => clients.find({ clientId }).pipe(Effect.mapError(() => new AuthInternalError({
+    code: "internal_error",
+    message: "Failed to load OAuth client",
+})), Effect.flatMap((client) => Option.isSome(client)
+    ? Effect.succeed(client.value)
+    : Effect.fail(new AuthInternalError({
+        code: "internal_error",
+        message: "Failed to load OAuth client",
+    }))));
+const safeAuthorization = (authorization, client) => ({
+    authorizationId: authorization.id,
+    client: {
+        id: client.id,
+        ...(client.name === undefined ? {} : { name: client.name }),
+    },
+    requestedScopes: [...authorization.requestedScopes],
+    expiresAt: authorization.expiresAt,
+});
+const safeAuthorizationFromRecord = (authorization, client) => ({
+    authorizationId: authorization.id,
+    client: {
+        id: client.id,
+        ...(client.name === undefined ? {} : { name: client.name }),
+    },
+    requestedScopes: [...authorization.requestedScopes],
+    expiresAt: authorization.expiresAt,
+});
+const browserInternalError = (message) => new AuthInternalError({ code: "internal_error", message });
+const browserBadRequest = (message) => new AuthBadRequestError({ code: "bad_request", message });
+const parseVerificationUri = (value, allowInsecureHttp) => Effect.try({
+    try: () => {
+        const url = new URL(value);
+        const isLoopback = url.hostname === "localhost" ||
+            url.hostname === "127.0.0.1" ||
+            url.hostname === "[::1]";
+        if ((url.protocol !== "https:" &&
+            !(allowInsecureHttp && url.protocol === "http:" && isLoopback)) ||
+            url.username !== "" ||
+            url.password !== "" ||
+            url.hash !== "") {
+            throw new Error("Unsafe OAuth device verification URI");
+        }
+        return url;
+    },
+    catch: deviceAuthorizationInternalError,
+});
+const loadDecisionAuthorization = (dependencies) => Effect.gen(function* () {
+    const record = yield* dependencies.store
+        .findById(OAuthDeviceAuthorizationId(dependencies.authorizationId))
+        .pipe(Effect.mapError(() => browserInternalError("Failed to load device authorization")));
+    if (Option.isNone(record)) {
+        return yield* browserBadRequest("Invalid device authorization");
+    }
+    if (record.value.status !== "pending") {
+        return yield* new AuthConflictError({
+            code: "conflict",
+            message: "Device authorization was already decided",
+        });
+    }
+    const client = yield* loadClient(dependencies.clients, record.value.clientId);
+    return safeAuthorizationFromRecord(record.value, client);
+});
+const decisionError = (reason) => {
+    switch (reason) {
+        case "already_decided": {
+            return new AuthConflictError({
+                code: "conflict",
+                message: "Device authorization was already decided",
+            });
+        }
+        case "invalid_scope": {
+            return browserBadRequest("Invalid device authorization scope");
+        }
+        case "expired_token": {
+            return browserBadRequest("Device authorization expired");
+        }
+        default: {
+            return browserBadRequest("Invalid device authorization");
+        }
+    }
+};
+const OAuthDeviceAuthorizationStartOperation = Effect.gen(function* () {
+    const authorization = yield* OAuthDeviceAuthorization;
+    const clients = yield* OAuthClientRegistry;
+    const clientSecretVerification = yield* Effect.serviceOption(OAuthClientSecretVerification);
+    const config = yield* OAuthDeviceAuthorizationHttpConfig;
+    return Effect.fn("auth.http.oauth.device_authorization.start")(function* ({ request, }) {
+        yield* Effect.annotateCurrentSpan("auth.http.endpoint", "oauth.device_authorization.start");
+        const payload = yield* parseDeviceAuthorizationBody(request);
+        const authenticated = yield* authenticateDeviceClient({
+            request,
+            payload,
+            clientSecretVerification,
+        });
+        if (authenticated.clientId === undefined) {
+            return yield* deviceAuthorizationError("invalid_request");
+        }
+        const clientOption = yield* clients
+            .find({ clientId: authenticated.clientId })
+            .pipe(Effect.mapError(deviceAuthorizationInternalError));
+        if (Option.isNone(clientOption) || clientOption.value.status !== "active") {
+            return yield* deviceAuthorizationError("invalid_client");
+        }
+        if (clientOption.value.type === "confidential" &&
+            !authenticated.clientAuthenticated) {
+            return yield* deviceAuthorizationError("invalid_client");
+        }
+        const result = yield* authorization
+            .start({
+            clientId: authenticated.clientId,
+            ...(payload.scope === undefined ? {} : { scopes: payload.scope }),
+        })
+            .pipe(Effect.mapError(deviceAuthorizationInternalError));
+        if (!result.valid) {
+            return yield* deviceAuthorizationError(result.reason);
+        }
+        const verificationUriComplete = new URL(config.verificationUri);
+        verificationUriComplete.searchParams.set("user_code", result.userCode);
+        return {
+            device_code: Redacted.value(result.deviceCode),
+            user_code: result.userCode,
+            verification_uri: config.verificationUri,
+            verification_uri_complete: verificationUriComplete.toString(),
+            expires_in: result.expiresIn,
+            interval: result.interval,
+        };
+    });
+});
+const OAuthDeviceAuthorizationInspectOperation = Effect.gen(function* () {
+    const authorizationService = yield* OAuthDeviceAuthorization;
+    const clients = yield* OAuthClientRegistry;
+    const sessions = yield* Sessions;
+    const sessionCookie = yield* SessionCookie;
+    const policy = yield* OAuthDeviceApprovalPolicy;
+    return Effect.fn("auth.http.oauth.device_authorization.inspect")(function* ({ payload, request, }) {
+        const current = yield* readRequiredSession({ sessions, sessionCookie }, request);
+        yield* policy.inspectAttempt({ current, request });
+        const result = yield* authorizationService
+            .inspect({ userCode: payload.userCode })
+            .pipe(Effect.mapError(() => browserInternalError("Failed to inspect device authorization")));
+        if (!result.valid) {
+            return yield* browserBadRequest(result.reason === "expired_token"
+                ? "Device authorization expired"
+                : "Invalid device user code");
+        }
+        const client = yield* loadClient(clients, result.authorization.clientId);
+        const authorization = safeAuthorization(result.authorization, client);
+        yield* policy.authorize({
+            action: "inspect",
+            current,
+            authorization,
+            request,
+        });
+        const userCode = normalizeOAuthDeviceUserCode(payload.userCode);
+        if (userCode === undefined) {
+            return yield* browserBadRequest("Invalid device user code");
+        }
+        return {
+            ...authorization,
+            userCode,
+        };
+    });
+});
+const OAuthDeviceAuthorizationApproveOperation = Effect.gen(function* () {
+    const authorizationService = yield* OAuthDeviceAuthorization;
+    const store = yield* OAuthDeviceAuthorizationStore;
+    const clients = yield* OAuthClientRegistry;
+    const sessions = yield* Sessions;
+    const sessionCookie = yield* SessionCookie;
+    const policy = yield* OAuthDeviceApprovalPolicy;
+    return Effect.fn("auth.http.oauth.device_authorization.approve")(function* ({ payload, request, }) {
+        const current = yield* readRequiredSession({ sessions, sessionCookie }, request);
+        const authorization = yield* loadDecisionAuthorization({
+            store,
+            clients,
+            authorizationId: payload.authorizationId,
+        });
+        yield* policy.authorize({
+            action: "approve",
+            current,
+            authorization,
+            request,
+        });
+        const result = yield* authorizationService
+            .approve({
+            authorizationId: OAuthDeviceAuthorizationId(payload.authorizationId),
+            subject: current.currentSession.userId,
+            ...(payload.scopes === undefined ? {} : { scopes: payload.scopes }),
+        })
+            .pipe(Effect.mapError(() => browserInternalError("Failed to approve device authorization")));
+        if (!result.valid) {
+            return yield* decisionError(result.reason);
+        }
+        return HttpServerResponse.empty({ status: 204 });
+    });
+});
+const OAuthDeviceAuthorizationDenyOperation = Effect.gen(function* () {
+    const authorizationService = yield* OAuthDeviceAuthorization;
+    const store = yield* OAuthDeviceAuthorizationStore;
+    const clients = yield* OAuthClientRegistry;
+    const sessions = yield* Sessions;
+    const sessionCookie = yield* SessionCookie;
+    const policy = yield* OAuthDeviceApprovalPolicy;
+    return Effect.fn("auth.http.oauth.device_authorization.deny")(function* ({ payload, request, }) {
+        const current = yield* readRequiredSession({ sessions, sessionCookie }, request);
+        const authorization = yield* loadDecisionAuthorization({
+            store,
+            clients,
+            authorizationId: payload.authorizationId,
+        });
+        yield* policy.authorize({
+            action: "deny",
+            current,
+            authorization,
+            request,
+        });
+        const result = yield* authorizationService
+            .deny({
+            authorizationId: OAuthDeviceAuthorizationId(payload.authorizationId),
+        })
+            .pipe(Effect.mapError(() => browserInternalError("Failed to deny device authorization")));
+        if (!result.valid) {
+            return yield* decisionError(result.reason);
+        }
+        return HttpServerResponse.empty({ status: 204 });
+    });
+});
+export const OAuthDeviceAuthorizationHttpOperationsLive = Layer.effect(OAuthDeviceAuthorizationHttpOperations, Effect.map(OAuthDeviceAuthorizationStartOperation, (start) => OAuthDeviceAuthorizationHttpOperations.of({ start })));
+export const OAuthDeviceApprovalHttpOperationsLive = Layer.effect(OAuthDeviceApprovalHttpOperations, Effect.all({
+    inspect: OAuthDeviceAuthorizationInspectOperation,
+    approve: OAuthDeviceAuthorizationApproveOperation,
+    deny: OAuthDeviceAuthorizationDenyOperation,
+}).pipe(Effect.map(OAuthDeviceApprovalHttpOperations.of)));
+export class OAuthDeviceAuthorizationHttpApiGroup extends HttpApiGroup.make("oauthDeviceAuthorization")
+    .add(oauthDeviceAuthorizationEndpoint.middleware(OAuthNoStoreMiddleware))
+    .prefix("/auth/oauth")
+    .middleware(AuthSchemaErrorMiddleware) {
+}
+export class OAuthDeviceApprovalHttpApiGroup extends HttpApiGroup.make("oauthDeviceApproval")
+    .add(oauthDeviceAuthorizationInspectEndpoint, oauthDeviceAuthorizationApproveEndpoint, oauthDeviceAuthorizationDenyEndpoint)
+    .prefix("/auth/oauth/device")
+    .middleware(OAuthNoStoreMiddleware)
+    .middleware(AuthSchemaErrorMiddleware)
+    .middleware(AuthOriginCheckMiddleware) {
+}
+export class OAuthDeviceAuthorizationHttpApi extends HttpApi.make("OAuthDeviceAuthorizationHttpApi")
+    .add(OAuthDeviceAuthorizationHttpApiGroup)
+    .add(OAuthDeviceApprovalHttpApiGroup) {
+}
+export const makeOAuthDeviceAuthorizationHttpClient = (options = {}) => HttpApiClient.make(OAuthDeviceAuthorizationHttpApi, {
+    baseUrl: options.baseUrl,
+});
+export const OAuthDeviceAuthorizationHttpApiGroupLive = HttpApiBuilder.group(OAuthDeviceAuthorizationHttpApi, "oauthDeviceAuthorization", Effect.fn("auth.http.oauth.device_authorization.group")(function* (handlers) {
+    const operations = yield* OAuthDeviceAuthorizationHttpOperations;
+    return handlers.handle("authorizeDevice", operations.start);
+}));
+export const OAuthDeviceApprovalHttpApiGroupLive = HttpApiBuilder.group(OAuthDeviceAuthorizationHttpApi, "oauthDeviceApproval", Effect.fn("auth.http.oauth.device_approval.group")(function* (handlers) {
+    const operations = yield* OAuthDeviceApprovalHttpOperations;
+    return handlers
+        .handle("inspect", operations.inspect)
+        .handle("approve", operations.approve)
+        .handle("deny", operations.deny);
+}));
+export const OAuthDeviceAuthorizationHttpApiLive = HttpApiBuilder.layer(OAuthDeviceAuthorizationHttpApi).pipe(Layer.provide(OAuthDeviceAuthorizationHttpApiGroupLive), Layer.provide(OAuthDeviceApprovalHttpApiGroupLive), Layer.provide(OAuthDeviceAuthorizationHttpOperationsLive), Layer.provide(OAuthDeviceApprovalHttpOperationsLive), Layer.provide(OAuthNoStoreMiddlewareLive), Layer.provide(AuthSchemaErrorMiddlewareLive));
+//# sourceMappingURL=OAuthDeviceAuthorization.js.map

package/dist/HttpApi/OAuthDeviceAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthDeviceAuthorization.js","sourceRoot":"","sources":["../../src/HttpApi/OAuthDeviceAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,MAAM,EACN,QAAQ,EACR,KAAK,EACL,MAAM,EACN,QAAQ,EACR,MAAM,GACP,MAAM,QAAQ,CAAC;AAEhB,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,OAAO,EACP,cAAc,EACd,aAAa,EACb,YAAY,GACb,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAMvE,OAAO,EACL,mBAAmB,EACnB,6BAA6B,GAC9B,MAAM,aAAa,CAAC;AAKrB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,EACL,uCAAuC,EACvC,oCAAoC,EACpC,gCAAgC,EAChC,uCAAuC,GACxC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,yBAAyB,EACzB,6BAA6B,EAC7B,uBAAuB,EACvB,qCAAqC,GACtC,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,iCAAiC,EACjC,sCAAsC,GACvC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,mCAAmC,EACnC,gCAAgC,EAChC,mCAAmC,EACnC,oCAAoC,EACpC,oCAAoC,GACrC,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EACL,uCAAuC,EACvC,oCAAoC,EACpC,gCAAgC,EAChC,uCAAuC,GACxC,MAAM,gBAAgB,CAAC;AACxB,cAAc,0CAA0C,CAAC;AAyDzD,MAAM,OAAO,yBAA0B,SAAQ,OAAO,CAAC,OAAO,EAG3D,CAAC,sCAAsC,CAAC;CAAG;AAE9C,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAK,CAAC,OAAO,CAC7D,yBAAyB,CAC1B,CACC,yBAAyB,CAAC,EAAE,CAAC;IAC3B,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;IAC5B,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI;CAClC,CAAC,CACH,CAAC;AAEF,MAAM,OAAO,kCAAmC,SAAQ,OAAO,CAAC,OAAO,EAAsC,CAC3G,2CAA2C,EAC3C;IACE,IAAI,EAAE,CACJ,MAA+C,EAI/C,EAAE,CACF,oBAAoB,CAClB,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,iBAAiB,KAAK,IAAI,CAClC,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC/B,GAAG,MAAM;QACT,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;KAC5C,CAAC,CAAC,CACJ;CACJ,CACF;CAAG;AAEJ,MAAM,CAAC,MAAM,sCAAsC,GAAG,CACpD,MAA+C,EAC/C,EAAE,CACF,KAAK,CAAC,MAAM,CACV,kCAAkC,EAClC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,CAChD,CAAC;AAcJ,MAAM,wBAAwB,GAAG,CAC/B,KAAgD,EAChD,gBAAyB,EACzB,EAAE,CACF,IAAI,qCAAqC,CAAC;IACxC,KAAK;IACL,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;CAChE,CAAC,CAAC;AAEL,MAAM,gCAAgC,GAAG,GAAG,EAAE,CAC5C,wBAAwB,CAAC,cAAc,EAAE,6BAA6B,CAAC,CAAC;AAE1E,MAAM,QAAQ,GAAG,CAAC,KAAyB,EAAsB,EAAE;IACjE,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAU,EAAE;IACpD,IAAI,CAAC;QACH,OAAO,IAAI,eAAe,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAChC,OAA4C,EAI5C,EAAE;IACF,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAE1C,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,OAAO,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE;QAClD,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QACxE,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;YACnB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,QAAQ,CACvB,SAAS,KAAK,CAAC,CAAC;gBACd,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CACrD,CAAC;YACF,MAAM,YAAY,GAChB,SAAS,KAAK,CAAC,CAAC;gBACd,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;YAExD,OAAO,SAAS,IAAI,CAAC,IAAI,QAAQ,KAAK,SAAS,IAAI,YAAY,KAAK,EAAE;gBACpE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;gBACzD,CAAC,CAAC,MAAM,CAAC,OAAO,CACZ,MAAM,CAAC,IAAI,CAAC;oBACV,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,CAAC;oBACrC,MAAM,EAAE,qBAA8B;oBACtC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC;iBAC1C,CAAC,CACH,CAAC;QACR,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,4BAA4B,GAAG,CACnC,OAA4C,EAI5C,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACzE,MAAM,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC,GAAG,WAAW;SAC3C,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,UAAU;SACvB,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;SAC3C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,EAAE,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAExB,IACE,SAAS,KAAK,mCAAmC;QACjD,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,OAAO,CAAC,EAC9C,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CACnC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC,CACnE,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,CAAU,CAAC;IAEpE,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,CAAC;IAEzD,OAAO;QACL,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAC1D,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE,CAAC;QACtE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,wBAAwB,GAAG,CAAC,KAIjC,EAAE,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,IAAI,GACR,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;QACzC,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;QACnC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC;YACE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YACpD,MAAM,EAAE,oBAA6B;YACrC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;SACzD,CAAC;IAER,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtE,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACpE,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,IACE,cAAc,KAAK,SAAS;QAC5B,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;QACrC,cAAc,CAAC,QAAQ,KAAK,KAAK,CAAC,OAAO,CAAC,SAAS,EACnD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO;YACL,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;gBACvC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,mBAAmB,EAAE,KAAK;SAC3B,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,KAAK;SAC9D,kBAAkB,CAAC,cAAc,CAAC;SAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;AAC1E,CAAC,CAAC,CAAC;AAEL,MAAM,UAAU,GAAG,CACjB,OAAmC,EACnC,QAAuB,EAC8B,EAAE,CACvD,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAC7B,MAAM,CAAC,QAAQ,CACb,GAAG,EAAE,CACH,IAAI,iBAAiB,CAAC;IACpB,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,6BAA6B;CACvC,CAAC,CACL,EACD,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IACnB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;IAC9B,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,iBAAiB,CAAC;QACpB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,6BAA6B;KACvC,CAAC,CACH,CACN,CACF,CAAC;AAEJ,MAAM,iBAAiB,GAAG,CACxB,aAA8C,EAC9C,MAAyB,EACkB,EAAE,CAAC,CAAC;IAC/C,eAAe,EAAE,aAAa,CAAC,EAAE;IACjC,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;KAC5D;IACD,eAAe,EAAE,CAAC,GAAG,aAAa,CAAC,eAAe,CAAC;IACnD,SAAS,EAAE,aAAa,CAAC,SAAS;CACnC,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAClC,aAKC,EACD,MAAyB,EACkB,EAAE,CAAC,CAAC;IAC/C,eAAe,EAAE,aAAa,CAAC,EAAE;IACjC,MAAM,EAAE;QACN,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;KAC5D;IACD,eAAe,EAAE,CAAC,GAAG,aAAa,CAAC,eAAe,CAAC;IACnD,SAAS,EAAE,aAAa,CAAC,SAAS;CACnC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,OAAe,EAAE,EAAE,CAC/C,IAAI,iBAAiB,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;AAE7D,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAE,EAAE,CAC5C,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC;AAE5D,MAAM,oBAAoB,GAAG,CAC3B,KAAa,EACb,iBAA0B,EACiC,EAAE,CAC7D,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE;QACR,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,UAAU,GACd,GAAG,CAAC,QAAQ,KAAK,WAAW;YAC5B,GAAG,CAAC,QAAQ,KAAK,WAAW;YAC5B,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC3B,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACxB,CAAC,CAAC,iBAAiB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,CAAC,CAAC;YACjE,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;YACnB,GAAG,CAAC,IAAI,KAAK,EAAE,EACf,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,EAAE,gCAAgC;CACxC,CAAC,CAAC;AAEL,MAAM,yBAAyB,GAAG,CAAC,YAIlC,EAAE,EAAE,CACH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK;SACrC,QAAQ,CAAC,0BAA0B,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;SAClE,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CACnB,oBAAoB,CAAC,qCAAqC,CAAC,CAC5D,CACF,CAAC;IACJ,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAAC,8BAA8B,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,IAAI,iBAAiB,CAAC;YAClC,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,0CAA0C;SACpD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAC9B,YAAY,CAAC,OAAO,EACpB,MAAM,CAAC,KAAK,CAAC,QAAQ,CACtB,CAAC;IACF,OAAO,2BAA2B,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,EAAE;IACvC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,iBAAiB,EAAE,CAAC;YACvB,OAAO,IAAI,iBAAiB,CAAC;gBAC3B,IAAI,EAAE,UAAU;gBAChB,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAC;QACL,CAAC;QACD,KAAK,eAAe,EAAE,CAAC;YACrB,OAAO,iBAAiB,CAAC,oCAAoC,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,eAAe,EAAE,CAAC;YACrB,OAAO,iBAAiB,CAAC,8BAA8B,CAAC,CAAC;QAC3D,CAAC;QACD,SAAS,CAAC;YACR,OAAO,iBAAiB,CAAC,8BAA8B,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,sCAAsC,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACjE,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC;IACtD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC;IAC3C,MAAM,wBAAwB,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,CAC1D,6BAA6B,CAC9B,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,kCAAkC,CAAC;IAEzD,OAAO,MAAM,CAAC,EAAE,CAAC,4CAA4C,CAAC,CAAC,QAAQ,CAAC,EAAE,EACxE,OAAO,GAGR;QACC,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAC/B,oBAAoB,EACpB,kCAAkC,CACnC,CAAC;QAEF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC;YACpD,OAAO;YACP,OAAO;YACP,wBAAwB;SACzB,CAAC,CAAC;QACH,IAAI,aAAa,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,OAAO;aAChC,IAAI,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC;aAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QAC3D,CAAC;QACD,IACE,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,cAAc;YAC1C,CAAC,aAAa,CAAC,mBAAmB,EAClC,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,aAAa;aAChC,KAAK,CAAC;YACL,QAAQ,EAAE,aAAa,CAAC,QAAQ;YAChC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;SAClE,CAAC;aACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,wBAAwB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAChE,uBAAuB,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEvE,OAAO;YACL,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;YAC9C,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,gBAAgB,EAAE,MAAM,CAAC,eAAe;YACxC,yBAAyB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;YAC7D,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SACgD,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,wCAAwC,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACnE,MAAM,oBAAoB,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC;IAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC;IAEhD,OAAO,MAAM,CAAC,EAAE,CAAC,8CAA8C,CAAC,CAAC,QAAQ,CAAC,EAAE,EAC1E,OAAO,EACP,OAAO,GAMR;QACC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACxC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAC3B,OAAO,CACR,CAAC;QACF,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,oBAAoB;aACvC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;aACvC,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CACnB,oBAAoB,CAAC,wCAAwC,CAAC,CAC/D,CACF,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAC7B,MAAM,CAAC,MAAM,KAAK,eAAe;gBAC/B,CAAC,CAAC,8BAA8B;gBAChC,CAAC,CAAC,0BAA0B,CAC/B,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACtE,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;YACtB,MAAM,EAAE,SAAS;YACjB,OAAO;YACP,aAAa;YACb,OAAO;SACR,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,4BAA4B,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAAC,0BAA0B,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO;YACL,GAAG,aAAa;YAChB,QAAQ;SACiE,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,wCAAwC,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACnE,MAAM,oBAAoB,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,6BAA6B,CAAC;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC;IAEhD,OAAO,MAAM,CAAC,EAAE,CAAC,8CAA8C,CAAC,CAAC,QAAQ,CAAC,EAAE,EAC1E,OAAO,EACP,OAAO,GAMR;QACC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACxC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAC3B,OAAO,CACR,CAAC;QACF,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC;YACrD,KAAK;YACL,OAAO;YACP,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;YACtB,MAAM,EAAE,SAAS;YACjB,OAAO;YACP,aAAa;YACb,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,oBAAoB;aACvC,OAAO,CAAC;YACP,eAAe,EAAE,0BAA0B,CAAC,OAAO,CAAC,eAAe,CAAC;YACpE,OAAO,EAAE,OAAO,CAAC,cAAc,CAAC,MAAM;YACtC,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;SACpE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CACnB,oBAAoB,CAAC,wCAAwC,CAAC,CAC/D,CACF,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,qCAAqC,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAChE,MAAM,oBAAoB,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,6BAA6B,CAAC;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC;IAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IACjC,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC;IAEhD,OAAO,MAAM,CAAC,EAAE,CAAC,2CAA2C,CAAC,CAAC,QAAQ,CAAC,EAAE,EACvE,OAAO,EACP,OAAO,GAMR;QACC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CACxC,EAAE,QAAQ,EAAE,aAAa,EAAE,EAC3B,OAAO,CACR,CAAC;QACF,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,yBAAyB,CAAC;YACrD,KAAK;YACL,OAAO;YACP,eAAe,EAAE,OAAO,CAAC,eAAe;SACzC,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;YACtB,MAAM,EAAE,MAAM;YACd,OAAO;YACP,aAAa;YACb,OAAO;SACR,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,oBAAoB;aACvC,IAAI,CAAC;YACJ,eAAe,EAAE,0BAA0B,CAAC,OAAO,CAAC,eAAe,CAAC;SACrE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CACnB,oBAAoB,CAAC,qCAAqC,CAAC,CAC5D,CACF,CAAC;QACJ,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0CAA0C,GAAG,KAAK,CAAC,MAAM,CACpE,sCAAsC,EACtC,MAAM,CAAC,GAAG,CAAC,sCAAsC,EAAE,CAAC,KAAK,EAAE,EAAE,CAC3D,sCAAsC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CACrD,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAAG,KAAK,CAAC,MAAM,CAC/D,iCAAiC,EACjC,MAAM,CAAC,GAAG,CAAC;IACT,OAAO,EAAE,wCAAwC;IACjD,OAAO,EAAE,wCAAwC;IACjD,IAAI,EAAE,qCAAqC;CAC5C,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,EAAE,CAAC,CAAC,CAC1D,CAAC;AAEF,MAAM,OAAO,oCAAqC,SAAQ,YAAY,CAAC,IAAI,CACzE,0BAA0B,CAC3B;KACE,GAAG,CAAC,gCAAgC,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;KACxE,MAAM,CAAC,aAAa,CAAC;KACrB,UAAU,CAAC,yBAAyB,CAAC;CAAG;AAE3C,MAAM,OAAO,+BAAgC,SAAQ,YAAY,CAAC,IAAI,CACpE,qBAAqB,CACtB;KACE,GAAG,CACF,uCAAuC,EACvC,uCAAuC,EACvC,oCAAoC,CACrC;KACA,MAAM,CAAC,oBAAoB,CAAC;KAC5B,UAAU,CAAC,sBAAsB,CAAC;KAClC,UAAU,CAAC,yBAAyB,CAAC;KACrC,UAAU,CAAC,yBAAyB,CAAC;CAAG;AAE3C,MAAM,OAAO,+BAAgC,SAAQ,OAAO,CAAC,IAAI,CAC/D,iCAAiC,CAClC;KACE,GAAG,CAAC,oCAAoC,CAAC;KACzC,GAAG,CAAC,+BAA+B,CAAC;CAAG;AAU1C,MAAM,CAAC,MAAM,sCAAsC,GAAG,CACpD,OAAO,GAA8C,EAAE,EAKvD,EAAE,CACF,aAAa,CAAC,IAAI,CAAC,+BAA+B,EAAE;IAClD,OAAO,EAAE,OAAO,CAAC,OAAO;CACzB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,wCAAwC,GAAG,cAAc,CAAC,KAAK,CAC1E,+BAA+B,EAC/B,0BAA0B,EAC1B,MAAM,CAAC,EAAE,CAAC,4CAA4C,CAAC,CAAC,QAAQ,CAAC,EAAE,QAAQ;IACzE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,sCAAsC,CAAC;IACjE,OAAO,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,cAAc,CAAC,KAAK,CACrE,+BAA+B,EAC/B,qBAAqB,EACrB,MAAM,CAAC,EAAE,CAAC,uCAAuC,CAAC,CAAC,QAAQ,CAAC,EAAE,QAAQ;IACpE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,iCAAiC,CAAC;IAC5D,OAAO,QAAQ;SACZ,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC;SACrC,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC;SACrC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,mCAAmC,GAAG,cAAc,CAAC,KAAK,CACrE,+BAA+B,CAChC,CAAC,IAAI,CACJ,KAAK,CAAC,OAAO,CAAC,wCAAwC,CAAC,EACvD,KAAK,CAAC,OAAO,CAAC,mCAAmC,CAAC,EAClD,KAAK,CAAC,OAAO,CAAC,0CAA0C,CAAC,EACzD,KAAK,CAAC,OAAO,CAAC,qCAAqC,CAAC,EACpD,KAAK,CAAC,OAAO,CAAC,0BAA0B,CAAC,EACzC,KAAK,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAC7C,CAAC"}

package/dist/HttpApi/OAuthProviderAuthorization.d.ts

@@ -0,0 +1,4 @@
+export { OAuthProviderAuthorizationHttpApi, OAuthProviderAuthorizationHttpApiGroup, OAuthProviderAuthorizationHttpApiGroupLive, OAuthProviderAuthorizationHttpApiLive, OAuthProviderAuthorizationHttpOperationsLive, } from "./Api.js";
+export { oauthProviderAuthorizeEndpoint } from "./Endpoints.js";
+export * from "./Operations/OAuthProviderAuthorization.js";
+//# sourceMappingURL=OAuthProviderAuthorization.d.ts.map

package/dist/HttpApi/OAuthProviderAuthorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthProviderAuthorization.d.ts","sourceRoot":"","sources":["../../src/HttpApi/OAuthProviderAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,sCAAsC,EACtC,0CAA0C,EAC1C,qCAAqC,EACrC,4CAA4C,GAC7C,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAChE,cAAc,4CAA4C,CAAC"}

package/dist/HttpApi/OAuthProviderAuthorization.js

@@ -0,0 +1,4 @@
+export { OAuthProviderAuthorizationHttpApi, OAuthProviderAuthorizationHttpApiGroup, OAuthProviderAuthorizationHttpApiGroupLive, OAuthProviderAuthorizationHttpApiLive, OAuthProviderAuthorizationHttpOperationsLive, } from "./Api.js";
+export { oauthProviderAuthorizeEndpoint } from "./Endpoints.js";
+export * from "./Operations/OAuthProviderAuthorization.js";
+//# sourceMappingURL=OAuthProviderAuthorization.js.map

package/dist/HttpApi/OAuthProviderAuthorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthProviderAuthorization.js","sourceRoot":"","sources":["../../src/HttpApi/OAuthProviderAuthorization.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iCAAiC,EACjC,sCAAsC,EACtC,0CAA0C,EAC1C,qCAAqC,EACrC,4CAA4C,GAC7C,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAChE,cAAc,4CAA4C,CAAC"}

package/dist/HttpApi/OAuthToken.d.ts

@@ -0,0 +1,4 @@
+export { type OAuthTokenHttpOptions, type OAuthTokenGrantHandler, type OAuthTokenGrantHandlerInput, type OAuthTokenGrantRegistration, OAuthTokenGrantRegistry, type OAuthTokenGrantRegistryService, OAuthTokenGrantRegistryDuplicateError, OAuthTokenGrantRegistryLive, oauthAuthorizationCodeTokenGrantRegistration, oauthRefreshTokenGrantRegistration, oauthClientCredentialsGrantRegistration, oauthDeviceCodeTokenGrantRegistration, makeOAuthTokenHandler, OAuthTokenHttpApi, OAuthTokenHttpApiGroup, OAuthTokenHttpApiGroupLive, OAuthTokenHttpApiLive, OAuthTokenHttpConfig, OAuthTokenHttpConfigLive, type OAuthTokenClientAuthenticationHttpOptions, type OAuthTokenClientAuthenticationInput, OAuthTokenHttpOperationsLive, OAuthTokenIntrospectionHttpApi, OAuthTokenIntrospectionHttpApiGroup, OAuthTokenIntrospectionHttpApiGroupLive, OAuthTokenIntrospectionHttpApiLive, OAuthTokenIntrospectionHttpOperationsLive, type OAuthTokenIntrospectionHttpOptions, OAuthTokenRevocationHttpApi, OAuthTokenRevocationHttpApiGroup, OAuthTokenRevocationHttpApiGroupLive, OAuthTokenRevocationHttpApiLive, OAuthTokenRevocationHttpOperationsLive, type OAuthTokenRevocationHttpOptions, } from "./Api.js";
+export { oauthTokenEndpoint, oauthTokenIntrospectionEndpoint, oauthTokenRevocationEndpoint, } from "./Endpoints.js";
+export * from "./Operations/OAuthToken.js";
+//# sourceMappingURL=OAuthToken.d.ts.map

package/dist/HttpApi/OAuthToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthToken.d.ts","sourceRoot":"","sources":["../../src/HttpApi/OAuthToken.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,KAAK,2BAA2B,EAChC,uBAAuB,EACvB,KAAK,8BAA8B,EACnC,qCAAqC,EACrC,2BAA2B,EAC3B,4CAA4C,EAC5C,kCAAkC,EAClC,uCAAuC,EACvC,qCAAqC,EACrC,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,KAAK,yCAAyC,EAC9C,KAAK,mCAAmC,EACxC,4BAA4B,EAC5B,8BAA8B,EAC9B,mCAAmC,EACnC,uCAAuC,EACvC,kCAAkC,EAClC,yCAAyC,EACzC,KAAK,kCAAkC,EACvC,2BAA2B,EAC3B,gCAAgC,EAChC,oCAAoC,EACpC,+BAA+B,EAC/B,sCAAsC,EACtC,KAAK,+BAA+B,GACrC,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,kBAAkB,EAClB,+BAA+B,EAC/B,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AACxB,cAAc,4BAA4B,CAAC"}