@effect-auth/core 0.1.0-alpha.2 → 0.1.0-alpha.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (149) hide show
  1. package/README.md +148 -13
  2. package/dist/ApiKey.d.ts +207 -0
  3. package/dist/ApiKey.d.ts.map +1 -0
  4. package/dist/ApiKey.js +275 -0
  5. package/dist/ApiKey.js.map +1 -0
  6. package/dist/AuditLog.d.ts +204 -1
  7. package/dist/AuditLog.d.ts.map +1 -1
  8. package/dist/AuditLog.js +170 -0
  9. package/dist/AuditLog.js.map +1 -1
  10. package/dist/AuthConfig.d.ts +0 -9
  11. package/dist/AuthConfig.d.ts.map +1 -1
  12. package/dist/AuthConfig.js +1 -14
  13. package/dist/AuthConfig.js.map +1 -1
  14. package/dist/AuthFlow.d.ts +220 -51
  15. package/dist/AuthFlow.d.ts.map +1 -1
  16. package/dist/AuthFlow.js +550 -22
  17. package/dist/AuthFlow.js.map +1 -1
  18. package/dist/AuthKernel.d.ts +1 -1
  19. package/dist/Challenge.d.ts +5 -1
  20. package/dist/Challenge.d.ts.map +1 -1
  21. package/dist/Challenge.js +58 -48
  22. package/dist/Challenge.js.map +1 -1
  23. package/dist/Client.d.ts +242 -1
  24. package/dist/Client.d.ts.map +1 -1
  25. package/dist/Client.js +489 -1
  26. package/dist/Client.js.map +1 -1
  27. package/dist/D1Kysely.d.ts +1 -1
  28. package/dist/D1Kysely.d.ts.map +1 -1
  29. package/dist/EffectQbSqliteStorage.d.ts +156 -41
  30. package/dist/EffectQbSqliteStorage.d.ts.map +1 -1
  31. package/dist/EffectQbSqliteStorage.js +336 -33
  32. package/dist/EffectQbSqliteStorage.js.map +1 -1
  33. package/dist/EmailOtp.d.ts +5 -2
  34. package/dist/EmailOtp.d.ts.map +1 -1
  35. package/dist/EmailOtp.js +11 -4
  36. package/dist/EmailOtp.js.map +1 -1
  37. package/dist/EmailVerification.d.ts +2 -2
  38. package/dist/EmailVerification.d.ts.map +1 -1
  39. package/dist/EmailVerification.js +2 -3
  40. package/dist/EmailVerification.js.map +1 -1
  41. package/dist/HttpApi/Api.d.ts +1161 -19
  42. package/dist/HttpApi/Api.d.ts.map +1 -1
  43. package/dist/HttpApi/Api.js +1433 -20
  44. package/dist/HttpApi/Api.js.map +1 -1
  45. package/dist/HttpApi/Endpoints.d.ts +611 -0
  46. package/dist/HttpApi/Endpoints.d.ts.map +1 -1
  47. package/dist/HttpApi/Endpoints.js +242 -1
  48. package/dist/HttpApi/Endpoints.js.map +1 -1
  49. package/dist/HttpApi/Schemas.d.ts +704 -0
  50. package/dist/HttpApi/Schemas.d.ts.map +1 -1
  51. package/dist/HttpApi/Schemas.js +435 -1
  52. package/dist/HttpApi/Schemas.js.map +1 -1
  53. package/dist/HttpApi/Security.d.ts +13 -1
  54. package/dist/HttpApi/Security.d.ts.map +1 -1
  55. package/dist/HttpApi/Security.js +107 -16
  56. package/dist/HttpApi/Security.js.map +1 -1
  57. package/dist/HttpApi/Transport.d.ts +36 -2
  58. package/dist/HttpApi/Transport.d.ts.map +1 -1
  59. package/dist/HttpApi/Transport.js +151 -9
  60. package/dist/HttpApi/Transport.js.map +1 -1
  61. package/dist/Jwt.d.ts +271 -0
  62. package/dist/Jwt.d.ts.map +1 -0
  63. package/dist/Jwt.js +512 -0
  64. package/dist/Jwt.js.map +1 -0
  65. package/dist/KyselyStorage.d.ts +134 -1
  66. package/dist/KyselyStorage.d.ts.map +1 -1
  67. package/dist/KyselyStorage.js +918 -4
  68. package/dist/KyselyStorage.js.map +1 -1
  69. package/dist/LoginApproval.d.ts +314 -0
  70. package/dist/LoginApproval.d.ts.map +1 -0
  71. package/dist/LoginApproval.js +551 -0
  72. package/dist/LoginApproval.js.map +1 -0
  73. package/dist/LoginNotification.d.ts +183 -0
  74. package/dist/LoginNotification.d.ts.map +1 -0
  75. package/dist/LoginNotification.js +329 -0
  76. package/dist/LoginNotification.js.map +1 -0
  77. package/dist/LoginRisk.d.ts +73 -0
  78. package/dist/LoginRisk.d.ts.map +1 -0
  79. package/dist/LoginRisk.js +57 -0
  80. package/dist/LoginRisk.js.map +1 -0
  81. package/dist/MagicLink.d.ts +85 -0
  82. package/dist/MagicLink.d.ts.map +1 -0
  83. package/dist/MagicLink.js +206 -0
  84. package/dist/MagicLink.js.map +1 -0
  85. package/dist/Mailer.d.ts +33 -2
  86. package/dist/Mailer.d.ts.map +1 -1
  87. package/dist/Mailer.js +107 -0
  88. package/dist/Mailer.js.map +1 -1
  89. package/dist/Passkey.d.ts +334 -0
  90. package/dist/Passkey.d.ts.map +1 -0
  91. package/dist/Passkey.js +422 -0
  92. package/dist/Passkey.js.map +1 -0
  93. package/dist/Password.d.ts +138 -8
  94. package/dist/Password.d.ts.map +1 -1
  95. package/dist/Password.js +397 -8
  96. package/dist/Password.js.map +1 -1
  97. package/dist/RecoveryCode.d.ts +169 -0
  98. package/dist/RecoveryCode.d.ts.map +1 -0
  99. package/dist/RecoveryCode.js +299 -0
  100. package/dist/RecoveryCode.js.map +1 -0
  101. package/dist/RefreshToken.d.ts +222 -0
  102. package/dist/RefreshToken.d.ts.map +1 -0
  103. package/dist/RefreshToken.js +342 -0
  104. package/dist/RefreshToken.js.map +1 -0
  105. package/dist/Sessions.d.ts +52 -2
  106. package/dist/Sessions.d.ts.map +1 -1
  107. package/dist/Sessions.js +123 -1
  108. package/dist/Sessions.js.map +1 -1
  109. package/dist/StepUp.d.ts +44 -0
  110. package/dist/StepUp.d.ts.map +1 -0
  111. package/dist/StepUp.js +82 -0
  112. package/dist/StepUp.js.map +1 -0
  113. package/dist/Storage.d.ts +14 -1
  114. package/dist/Storage.d.ts.map +1 -1
  115. package/dist/Storage.js.map +1 -1
  116. package/dist/StorageMigrations.d.ts +9 -1
  117. package/dist/StorageMigrations.d.ts.map +1 -1
  118. package/dist/StorageMigrations.js +159 -0
  119. package/dist/StorageMigrations.js.map +1 -1
  120. package/dist/Testing.d.ts +1 -1
  121. package/dist/Totp.d.ts +220 -0
  122. package/dist/Totp.d.ts.map +1 -0
  123. package/dist/Totp.js +477 -0
  124. package/dist/Totp.js.map +1 -0
  125. package/dist/TrustedDevice.d.ts +115 -0
  126. package/dist/TrustedDevice.d.ts.map +1 -0
  127. package/dist/TrustedDevice.js +222 -0
  128. package/dist/TrustedDevice.js.map +1 -0
  129. package/dist/alchemy/cloudflare/Email.d.ts +25 -0
  130. package/dist/alchemy/cloudflare/Email.d.ts.map +1 -0
  131. package/dist/alchemy/cloudflare/Email.js +117 -0
  132. package/dist/alchemy/cloudflare/Email.js.map +1 -0
  133. package/dist/cloudflare/Email.d.ts +25 -0
  134. package/dist/cloudflare/Email.d.ts.map +1 -0
  135. package/dist/cloudflare/Email.js +153 -0
  136. package/dist/cloudflare/Email.js.map +1 -0
  137. package/dist/index.d.ts +12 -0
  138. package/dist/index.d.ts.map +1 -1
  139. package/dist/index.js +12 -0
  140. package/dist/index.js.map +1 -1
  141. package/migrations/0003_auth_login_approval_review.sql +22 -0
  142. package/migrations/0004_auth_trusted_device.sql +12 -0
  143. package/migrations/0005_auth_passkey.sql +17 -0
  144. package/migrations/0006_auth_totp_factor.sql +17 -0
  145. package/migrations/0007_auth_recovery_code.sql +13 -0
  146. package/migrations/0008_auth_api_key.sql +17 -0
  147. package/migrations/0009_auth_refresh_token.sql +21 -0
  148. package/migrations/0010_auth_jwt_revocation.sql +8 -0
  149. package/package.json +57 -1
package/dist/Jwt.js ADDED
@@ -0,0 +1,512 @@
1
+ import { Brand, Context, Data, Duration, Effect, Encoding, Layer, Option, Redacted, Result, } from "effect";
2
+ import { Crypto } from "./Crypto.js";
3
+ import { UnixMillis } from "./Identifiers.js";
4
+ import { currentUnixMillis, timingSafeEqualString } from "./Internal.js";
5
+ export const JwtKeyId = Brand.nominal();
6
+ export const JwtToken = Brand.nominal();
7
+ export const JwtAlgorithms = ["HS256", "RS256", "ES256", "EdDSA"];
8
+ export class JwtError extends Data.TaggedError("JwtError") {
9
+ }
10
+ export class JwtKeys extends Context.Service()("auth/JwtKeys") {
11
+ }
12
+ (function (JwtKeys) {
13
+ JwtKeys.make = (service) => JwtKeys.of(service);
14
+ })(JwtKeys || (JwtKeys = {}));
15
+ export class JwtIssuer extends Context.Service()("auth/JwtIssuer") {
16
+ }
17
+ (function (JwtIssuer) {
18
+ JwtIssuer.make = (service) => JwtIssuer.of(service);
19
+ })(JwtIssuer || (JwtIssuer = {}));
20
+ export class JwtVerifier extends Context.Service()("auth/JwtVerifier") {
21
+ }
22
+ (function (JwtVerifier) {
23
+ JwtVerifier.make = (service) => JwtVerifier.of(service);
24
+ })(JwtVerifier || (JwtVerifier = {}));
25
+ export class JwtSignature extends Context.Service()("auth/JwtSignature") {
26
+ }
27
+ (function (JwtSignature) {
28
+ JwtSignature.make = (service) => JwtSignature.of(service);
29
+ })(JwtSignature || (JwtSignature = {}));
30
+ export class Jwks extends Context.Service()("auth/Jwks") {
31
+ }
32
+ (function (Jwks) {
33
+ Jwks.make = (service) => Jwks.of(service);
34
+ })(Jwks || (Jwks = {}));
35
+ export class JwtRevocationStore extends Context.Service()("auth/JwtRevocationStore") {
36
+ }
37
+ (function (JwtRevocationStore) {
38
+ JwtRevocationStore.make = (service) => JwtRevocationStore.of(service);
39
+ })(JwtRevocationStore || (JwtRevocationStore = {}));
40
+ export class JwtRevocation extends Context.Service()("auth/JwtRevocation") {
41
+ }
42
+ (function (JwtRevocation) {
43
+ JwtRevocation.make = (service) => JwtRevocation.of(service);
44
+ })(JwtRevocation || (JwtRevocation = {}));
45
+ const textEncoder = new TextEncoder();
46
+ const textDecoder = new TextDecoder();
47
+ const jwtError = (operation, message, cause) => new JwtError({
48
+ operation,
49
+ message,
50
+ ...(cause === undefined ? {} : { cause }),
51
+ });
52
+ const isJwtAlgorithm = (value) => typeof value === "string" && JwtAlgorithms.includes(value);
53
+ const signatureService = (dependencies) => {
54
+ if (dependencies.signature !== undefined) {
55
+ return dependencies.signature;
56
+ }
57
+ if (dependencies.crypto !== undefined) {
58
+ return makeJwtSignature({ crypto: dependencies.crypto });
59
+ }
60
+ throw jwtError("signature", "JWT signature service is not available");
61
+ };
62
+ const keyInfo = (key) => ({
63
+ id: key.id,
64
+ alg: key.alg,
65
+ status: key.status,
66
+ ...(key.createdAt === undefined ? {} : { createdAt: key.createdAt }),
67
+ ...(key.expiresAt === undefined ? {} : { expiresAt: key.expiresAt }),
68
+ ...(key.metadata === undefined ? {} : { metadata: key.metadata }),
69
+ });
70
+ const numericDate = (millis) => Math.floor(Number(millis) / 1000);
71
+ const addDuration = (millis, duration) => UnixMillis(Number(millis) + Duration.toMillis(duration));
72
+ const isUsableAt = (key, now) => now === undefined || key.expiresAt === undefined || Number(now) < Number(key.expiresAt);
73
+ const isSigningKey = (key, alg, now) => key.alg === alg &&
74
+ key.status === "active" &&
75
+ (key.alg !== "HS256" || key.secret !== undefined) &&
76
+ isUsableAt(key, now);
77
+ const isVerificationKey = (key, input) => key.id === input.kid &&
78
+ key.status !== "disabled" &&
79
+ (key.alg !== "HS256" || key.secret !== undefined) &&
80
+ (input.alg === undefined || key.alg === input.alg) &&
81
+ isUsableAt(key, input.now);
82
+ const privateJwkMembers = new Set([
83
+ "d",
84
+ "p",
85
+ "q",
86
+ "dp",
87
+ "dq",
88
+ "qi",
89
+ "oth",
90
+ "k",
91
+ ]);
92
+ const publicJwkFromKey = (key) => {
93
+ if (key.status === "disabled" || key.publicJwk === undefined) {
94
+ return undefined;
95
+ }
96
+ const jwk = {};
97
+ for (const [name, value] of Object.entries(key.publicJwk)) {
98
+ if (!privateJwkMembers.has(name) && value !== undefined) {
99
+ jwk[name] = value;
100
+ }
101
+ }
102
+ return {
103
+ ...jwk,
104
+ kty: String(jwk.kty ?? key.publicJwk.kty),
105
+ kid: String(jwk.kid ?? key.id),
106
+ alg: String(jwk.alg ?? key.alg),
107
+ use: String(jwk.use ?? "sig"),
108
+ };
109
+ };
110
+ export const makeJwtKeysMemory = (records) => {
111
+ const keys = records.map((record) => ({ ...record }));
112
+ return JwtKeys.make({
113
+ selectSigningKey: (input) => {
114
+ const alg = input?.alg ?? "HS256";
115
+ const key = keys.find((record) => isSigningKey(record, alg, input?.now));
116
+ return Effect.succeed(key === undefined ? Option.none() : Option.some(key));
117
+ },
118
+ findVerificationKey: (input) => {
119
+ const key = keys.find((record) => isVerificationKey(record, input));
120
+ return Effect.succeed(key === undefined ? Option.none() : Option.some(key));
121
+ },
122
+ listPublicJwks: (input) => Effect.succeed(keys
123
+ .filter((key) => isUsableAt(key, input?.now))
124
+ .flatMap((key) => {
125
+ const publicJwk = publicJwkFromKey(key);
126
+ return publicJwk === undefined ? [] : [publicJwk];
127
+ })),
128
+ });
129
+ };
130
+ export const JwtKeysMemoryLive = (records) => Layer.succeed(JwtKeys)(makeJwtKeysMemory(records));
131
+ const cloneRevocationRecord = (record) => ({ ...record });
132
+ export const makeJwtRevocationStoreMemory = () => {
133
+ const records = new Map();
134
+ return JwtRevocationStore.make({
135
+ revoke: (record) => Effect.sync(() => {
136
+ records.set(record.jwtId, cloneRevocationRecord(record));
137
+ }),
138
+ find: (jwtId) => Effect.sync(() => {
139
+ const record = records.get(jwtId);
140
+ return record === undefined
141
+ ? Option.none()
142
+ : Option.some(cloneRevocationRecord(record));
143
+ }),
144
+ });
145
+ };
146
+ export const JwtRevocationStoreMemoryLive = Layer.sync(JwtRevocationStore)(makeJwtRevocationStoreMemory);
147
+ const normalizedJwtId = (jwtId) => {
148
+ const value = jwtId.trim();
149
+ return value.length === 0
150
+ ? Effect.fail(jwtError("revocation", "JWT ID must not be empty"))
151
+ : Effect.succeed(value);
152
+ };
153
+ const revocationRecordActiveAt = (record, now) => record.expiresAt === undefined || Number(now) < Number(record.expiresAt);
154
+ const jwtIdFromClaims = (claims) => {
155
+ const jwtId = typeof claims.jti === "string" ? claims.jti.trim() : "";
156
+ return jwtId.length === 0 ? undefined : jwtId;
157
+ };
158
+ const expiresAtFromClaims = (claims) => typeof claims.exp === "number" ? UnixMillis(claims.exp * 1000) : undefined;
159
+ export const makeJwtRevocation = (dependencies) => JwtRevocation.make({
160
+ revokeJwtId: Effect.fn("auth.jwt.revocation.revoke_jwt_id")(function* (input) {
161
+ const jwtId = yield* normalizedJwtId(input.jwtId);
162
+ const revokedAt = input.revokedAt ?? (yield* currentUnixMillis);
163
+ const record = {
164
+ jwtId,
165
+ revokedAt,
166
+ ...(input.expiresAt === undefined ? {} : { expiresAt: input.expiresAt }),
167
+ ...(input.reason === undefined ? {} : { reason: input.reason }),
168
+ };
169
+ yield* dependencies.store.revoke(record);
170
+ return record;
171
+ }),
172
+ isRevoked: Effect.fn("auth.jwt.revocation.is_revoked")(function* (input) {
173
+ const jwtId = yield* normalizedJwtId(input.jwtId);
174
+ const now = input.now ?? (yield* currentUnixMillis);
175
+ const record = yield* dependencies.store.find(jwtId);
176
+ return Option.isSome(record) && revocationRecordActiveAt(record.value, now);
177
+ }),
178
+ introspect: Effect.fn("auth.jwt.revocation.introspect")(function* (input) {
179
+ const verified = yield* dependencies.verifier.verify(input);
180
+ if (!verified.valid) {
181
+ return {
182
+ active: false,
183
+ reason: verified.reason,
184
+ };
185
+ }
186
+ const jwtId = jwtIdFromClaims(verified.claims);
187
+ const expiresAt = expiresAtFromClaims(verified.claims);
188
+ if (jwtId !== undefined) {
189
+ const now = input.now ?? (yield* currentUnixMillis);
190
+ const record = yield* dependencies.store.find(jwtId);
191
+ if (Option.isSome(record) && revocationRecordActiveAt(record.value, now)) {
192
+ return {
193
+ active: false,
194
+ reason: "revoked",
195
+ jwtId,
196
+ ...(expiresAt === undefined ? {} : { expiresAt }),
197
+ revokedAt: record.value.revokedAt,
198
+ ...(record.value.reason === undefined
199
+ ? {}
200
+ : { revokedReason: record.value.reason }),
201
+ };
202
+ }
203
+ }
204
+ return {
205
+ active: true,
206
+ header: verified.header,
207
+ claims: verified.claims,
208
+ key: verified.key,
209
+ ...(jwtId === undefined ? {} : { jwtId }),
210
+ ...(expiresAt === undefined ? {} : { expiresAt }),
211
+ revoked: false,
212
+ };
213
+ }),
214
+ });
215
+ const encodeJson = (value) => Encoding.encodeBase64Url(textEncoder.encode(JSON.stringify(value)));
216
+ const decodeJsonObject = (value) => {
217
+ const bytes = Result.match(Encoding.decodeBase64Url(value), {
218
+ onSuccess: (decoded) => decoded,
219
+ onFailure: () => undefined,
220
+ });
221
+ if (bytes === undefined) {
222
+ return undefined;
223
+ }
224
+ try {
225
+ const parsed = JSON.parse(textDecoder.decode(bytes));
226
+ return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)
227
+ ? parsed
228
+ : undefined;
229
+ }
230
+ catch {
231
+ return undefined;
232
+ }
233
+ };
234
+ const decodeHeader = (part) => {
235
+ const value = decodeJsonObject(part);
236
+ if (value === undefined || typeof value.kid !== "string") {
237
+ return "malformed";
238
+ }
239
+ if (!isJwtAlgorithm(value.alg)) {
240
+ return "unsupported_alg";
241
+ }
242
+ return {
243
+ typ: "JWT",
244
+ alg: value.alg,
245
+ kid: JwtKeyId(value.kid),
246
+ };
247
+ };
248
+ const decodeClaims = (part) => {
249
+ const value = decodeJsonObject(part);
250
+ return value === undefined ? undefined : value;
251
+ };
252
+ const signHs256 = (crypto, key, data, operation) => crypto.hmacSha256({ key, data }).pipe(Effect.mapError((cause) => jwtError(operation, "Failed to calculate JWT signature", cause)));
253
+ const getJwtWebCrypto = (options) => {
254
+ const crypto = options?.crypto ?? globalThis.crypto;
255
+ if (crypto === undefined) {
256
+ throw jwtError("signature", "Web Crypto is not available");
257
+ }
258
+ return crypto;
259
+ };
260
+ const rs256ImportAlgorithm = {
261
+ name: "RSASSA-PKCS1-v1_5",
262
+ hash: "SHA-256",
263
+ };
264
+ const jwkForImport = (jwk) => ({ ...jwk });
265
+ const decodeBase64UrlBytes = (value) => Result.match(Encoding.decodeBase64Url(value), {
266
+ onSuccess: (bytes) => bytes,
267
+ onFailure: () => undefined,
268
+ });
269
+ export const makeJwtSignature = (dependencies) => JwtSignature.make({
270
+ supports: (alg) => alg === "HS256",
271
+ canSign: (input) => input.alg === "HS256" && input.key.secret !== undefined,
272
+ canVerify: (input) => input.alg === "HS256" && input.key.secret !== undefined,
273
+ sign: Effect.fn("auth.jwt.signature.sign")(function* (input) {
274
+ if (input.alg !== "HS256" || input.key.secret === undefined) {
275
+ return yield* jwtError("signature", "JWT signature algorithm is not supported");
276
+ }
277
+ return yield* signHs256(dependencies.crypto, input.key.secret, input.signingInput, "signature");
278
+ }),
279
+ verify: Effect.fn("auth.jwt.signature.verify")(function* (input) {
280
+ if (input.alg !== "HS256" || input.key.secret === undefined) {
281
+ return false;
282
+ }
283
+ const expectedSignature = yield* signHs256(dependencies.crypto, input.key.secret, input.signingInput, "signature");
284
+ return yield* timingSafeEqualString(dependencies.crypto, expectedSignature, input.signature).pipe(Effect.mapError((cause) => jwtError("signature", "Failed to compare JWT signature", cause)));
285
+ }),
286
+ });
287
+ export const makeJwtWebCryptoRs256Signature = (options) => JwtSignature.make({
288
+ supports: (alg) => alg === "RS256",
289
+ canSign: (input) => input.alg === "RS256" && input.key.privateJwk !== undefined,
290
+ canVerify: (input) => input.alg === "RS256" && input.key.publicJwk !== undefined,
291
+ sign: Effect.fn("auth.jwt.signature.webcrypto_rs256.sign")(function* (input) {
292
+ const { privateJwk } = input.key;
293
+ if (input.alg !== "RS256" || privateJwk === undefined) {
294
+ return yield* jwtError("signature", "JWT RS256 private key is not available");
295
+ }
296
+ return yield* Effect.tryPromise({
297
+ try: async () => {
298
+ const crypto = getJwtWebCrypto(options);
299
+ const key = await crypto.subtle.importKey("jwk", jwkForImport(privateJwk), rs256ImportAlgorithm, false, ["sign"]);
300
+ const signature = await crypto.subtle.sign(rs256ImportAlgorithm, key, textEncoder.encode(input.signingInput));
301
+ return Encoding.encodeBase64Url(new Uint8Array(signature));
302
+ },
303
+ catch: (cause) => jwtError("signature", "Failed to sign RS256 JWT", cause),
304
+ });
305
+ }),
306
+ verify: Effect.fn("auth.jwt.signature.webcrypto_rs256.verify")(function* (input) {
307
+ const { publicJwk } = input.key;
308
+ if (input.alg !== "RS256" || publicJwk === undefined) {
309
+ return false;
310
+ }
311
+ const signature = decodeBase64UrlBytes(input.signature);
312
+ if (signature === undefined) {
313
+ return false;
314
+ }
315
+ return yield* Effect.tryPromise({
316
+ try: async () => {
317
+ const crypto = getJwtWebCrypto(options);
318
+ const key = await crypto.subtle.importKey("jwk", jwkForImport(publicJwk), rs256ImportAlgorithm, false, ["verify"]);
319
+ return await crypto.subtle.verify(rs256ImportAlgorithm, key, signature, textEncoder.encode(input.signingInput));
320
+ },
321
+ catch: (cause) => jwtError("signature", "Failed to verify RS256 JWT", cause),
322
+ });
323
+ }),
324
+ });
325
+ const audienceValues = (value) => {
326
+ if (typeof value === "string") {
327
+ return [value];
328
+ }
329
+ if (Array.isArray(value) && value.every((item) => typeof item === "string")) {
330
+ return value;
331
+ }
332
+ return [];
333
+ };
334
+ const clockToleranceSeconds = (input) => input.clockTolerance === undefined
335
+ ? 0
336
+ : Math.ceil(Duration.toMillis(input.clockTolerance) / 1000);
337
+ const validateClaims = (claims, input, now) => {
338
+ const nowSeconds = numericDate(now);
339
+ const toleranceSeconds = clockToleranceSeconds(input);
340
+ if (claims.exp !== undefined &&
341
+ (typeof claims.exp !== "number" || nowSeconds - toleranceSeconds >= claims.exp)) {
342
+ return "expired";
343
+ }
344
+ if (claims.nbf !== undefined &&
345
+ (typeof claims.nbf !== "number" || nowSeconds + toleranceSeconds < claims.nbf)) {
346
+ return "not_yet_valid";
347
+ }
348
+ if (input.issuer !== undefined && claims.iss !== input.issuer) {
349
+ return "issuer_mismatch";
350
+ }
351
+ if (input.audience !== undefined) {
352
+ const expected = audienceValues(input.audience);
353
+ const actual = audienceValues(claims.aud);
354
+ if (expected.length === 0 ||
355
+ actual.length === 0 ||
356
+ !expected.some((audience) => actual.includes(audience))) {
357
+ return "audience_mismatch";
358
+ }
359
+ }
360
+ return undefined;
361
+ };
362
+ const issuedClaims = (input, issuedAt) => {
363
+ const expiresAt = input.expiresAt ??
364
+ (input.expiresIn === undefined ? undefined : addDuration(issuedAt, input.expiresIn));
365
+ return {
366
+ ...input.claims,
367
+ ...(input.issuer === undefined ? {} : { iss: input.issuer }),
368
+ ...(input.subject === undefined ? {} : { sub: input.subject }),
369
+ ...(input.audience === undefined ? {} : { aud: input.audience }),
370
+ ...(expiresAt === undefined ? {} : { exp: numericDate(expiresAt) }),
371
+ ...(input.notBefore === undefined ? {} : { nbf: numericDate(input.notBefore) }),
372
+ iat: numericDate(issuedAt),
373
+ ...(input.jwtId === undefined ? {} : { jti: input.jwtId }),
374
+ };
375
+ };
376
+ export const makeJwtIssuer = (dependencies) => {
377
+ const signature = signatureService(dependencies);
378
+ return JwtIssuer.make({
379
+ issue: Effect.fn("auth.jwt.issue")(function* (input) {
380
+ const issuedAt = input.issuedAt ?? (yield* currentUnixMillis);
381
+ const alg = input.alg ?? "HS256";
382
+ if (!signature.supports(alg)) {
383
+ return yield* jwtError("issue", "JWT algorithm is not supported");
384
+ }
385
+ const key = yield* dependencies.keys.selectSigningKey({
386
+ alg,
387
+ now: issuedAt,
388
+ });
389
+ if (Option.isNone(key)) {
390
+ return yield* jwtError("issue", "No active JWT signing key is available");
391
+ }
392
+ if (!signature.canSign({ alg: key.value.alg, key: key.value })) {
393
+ return yield* jwtError("issue", "Selected JWT signing key is not supported by the signature service");
394
+ }
395
+ const header = {
396
+ typ: "JWT",
397
+ alg: key.value.alg,
398
+ kid: key.value.id,
399
+ };
400
+ const claims = issuedClaims(input, issuedAt);
401
+ const signingInput = `${encodeJson(header)}.${encodeJson(claims)}`;
402
+ const tokenSignature = yield* signature.sign({
403
+ alg: key.value.alg,
404
+ key: key.value,
405
+ signingInput,
406
+ });
407
+ return {
408
+ token: Redacted.make(JwtToken(`${signingInput}.${tokenSignature}`)),
409
+ header,
410
+ claims,
411
+ key: keyInfo(key.value),
412
+ };
413
+ }),
414
+ });
415
+ };
416
+ export const makeJwtVerifier = (dependencies) => {
417
+ const signature = signatureService(dependencies);
418
+ return JwtVerifier.make({
419
+ verify: Effect.fn("auth.jwt.verify")(function* (input) {
420
+ const token = Redacted.value(input.token).trim();
421
+ const parts = token.split(".");
422
+ if (parts.length !== 3) {
423
+ return { valid: false, reason: "malformed" };
424
+ }
425
+ const [headerPart, payloadPart, signaturePart] = parts;
426
+ const header = decodeHeader(headerPart);
427
+ if (typeof header === "string") {
428
+ return { valid: false, reason: header };
429
+ }
430
+ if (!signature.supports(header.alg)) {
431
+ return {
432
+ valid: false,
433
+ reason: "unsupported_alg",
434
+ };
435
+ }
436
+ const now = input.now ?? (yield* currentUnixMillis);
437
+ const key = yield* dependencies.keys.findVerificationKey({
438
+ kid: header.kid,
439
+ alg: header.alg,
440
+ now,
441
+ });
442
+ if (Option.isNone(key)) {
443
+ return { valid: false, reason: "unknown_key" };
444
+ }
445
+ if (!signature.canVerify({ alg: header.alg, key: key.value })) {
446
+ return { valid: false, reason: "unknown_key" };
447
+ }
448
+ const signatureMatches = yield* signature.verify({
449
+ alg: header.alg,
450
+ key: key.value,
451
+ signingInput: `${headerPart}.${payloadPart}`,
452
+ signature: signaturePart,
453
+ });
454
+ if (!signatureMatches) {
455
+ return {
456
+ valid: false,
457
+ reason: "invalid_signature",
458
+ };
459
+ }
460
+ const claims = decodeClaims(payloadPart);
461
+ if (claims === undefined) {
462
+ return { valid: false, reason: "malformed" };
463
+ }
464
+ const invalidReason = validateClaims(claims, input, now);
465
+ if (invalidReason !== undefined) {
466
+ return { valid: false, reason: invalidReason };
467
+ }
468
+ return {
469
+ valid: true,
470
+ header,
471
+ claims,
472
+ key: keyInfo(key.value),
473
+ };
474
+ }),
475
+ });
476
+ };
477
+ export const makeJwks = (dependencies) => Jwks.make({
478
+ document: Effect.fn("auth.jwks.document")(function* (input) {
479
+ const now = input?.now ?? (yield* currentUnixMillis);
480
+ const keys = yield* dependencies.keys.listPublicJwks({ now });
481
+ return { keys };
482
+ }),
483
+ });
484
+ export const JwtSignatureLive = Layer.effect(JwtSignature)(Effect.gen(function* () {
485
+ const crypto = yield* Crypto;
486
+ return makeJwtSignature({ crypto });
487
+ }));
488
+ export const JwtWebCryptoRs256SignatureLive = (options) => Layer.succeed(JwtSignature)(makeJwtWebCryptoRs256Signature(options));
489
+ export const JwtIssuerWithSignatureLive = Layer.effect(JwtIssuer)(Effect.gen(function* () {
490
+ const keys = yield* JwtKeys;
491
+ const signature = yield* JwtSignature;
492
+ return makeJwtIssuer({ keys, signature });
493
+ }));
494
+ export const JwtVerifierWithSignatureLive = Layer.effect(JwtVerifier)(Effect.gen(function* () {
495
+ const keys = yield* JwtKeys;
496
+ const signature = yield* JwtSignature;
497
+ return makeJwtVerifier({ keys, signature });
498
+ }));
499
+ export const JwtIssuerLive = JwtIssuerWithSignatureLive.pipe(Layer.provide(JwtSignatureLive));
500
+ export const JwtVerifierLive = JwtVerifierWithSignatureLive.pipe(Layer.provide(JwtSignatureLive));
501
+ export const JwksLive = Layer.effect(Jwks)(Effect.gen(function* () {
502
+ const keys = yield* JwtKeys;
503
+ return makeJwks({ keys });
504
+ }));
505
+ export const JwtRevocationLive = Layer.effect(JwtRevocation)(Effect.gen(function* () {
506
+ const verifier = yield* JwtVerifier;
507
+ const store = yield* JwtRevocationStore;
508
+ return makeJwtRevocation({ verifier, store });
509
+ }));
510
+ export const JwtWithSignatureLive = Layer.mergeAll(JwtIssuerWithSignatureLive, JwtVerifierWithSignatureLive, JwksLive);
511
+ export const JwtLive = JwtWithSignatureLive.pipe(Layer.provide(JwtSignatureLive));
512
+ //# sourceMappingURL=Jwt.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"Jwt.js","sourceRoot":"","sources":["../src/Jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,KAAK,EACL,MAAM,EACN,QAAQ,EACR,MAAM,GACP,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGzE,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAY,CAAC;AAGlD,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,EAAY,CAAC;AAElD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAU,CAAC;AA8E3E,MAAM,OAAO,QAAS,SAAQ,IAAI,CAAC,WAAW,CAAC,UAAU,CAIvD;CAAG;AAcL,MAAM,OAAO,OAAQ,SAAQ,OAAO,CAAC,OAAO,EAA2B,CACrE,cAAc,CACf;CAAG;AAEJ,WAAiB,OAAO;IACT,YAAI,GAAG,CAAC,OAAuB,EAAkB,EAAE,CAC9D,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC,EAHgB,OAAO,KAAP,OAAO,QAGvB;AA0BD,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,OAAO,EAA+B,CAC3E,gBAAgB,CACjB;CAAG;AAEJ,WAAiB,SAAS;IACX,cAAI,GAAG,CAAC,OAAyB,EAAoB,EAAE,CAClE,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC,EAHgB,SAAS,KAAT,SAAS,QAGzB;AAsCD,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAAmC,CACjF,kBAAkB,CACnB;CAAG;AAEJ,WAAiB,WAAW;IACb,gBAAI,GAAG,CAAC,OAA2B,EAAsB,EAAE,CACtE,WAAW,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC,EAHgB,WAAW,KAAX,WAAW,QAG3B;AAyBD,MAAM,OAAO,YAAa,SAAQ,OAAO,CAAC,OAAO,EAG9C,CAAC,mBAAmB,CAAC;CAAG;AAE3B,WAAiB,YAAY;IACd,iBAAI,GAAG,CAAC,OAA4B,EAAuB,EAAE,CACxE,YAAY,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC,EAHgB,YAAY,KAAZ,YAAY,QAG5B;AAQD,MAAM,OAAO,IAAK,SAAQ,OAAO,CAAC,OAAO,EAAqB,CAAC,WAAW,CAAC;CAAG;AAE9E,WAAiB,IAAI;IACN,SAAI,GAAG,CAAC,OAAoB,EAAe,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9E,CAAC,EAFgB,IAAI,KAAJ,IAAI,QAEpB;AAgBD,MAAM,OAAO,kBAAmB,SAAQ,OAAO,CAAC,OAAO,EAGpD,CAAC,yBAAyB,CAAC;CAAG;AAEjC,WAAiB,kBAAkB;IACpB,uBAAI,GAAG,CAClB,OAAkC,EACP,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACjE,CAAC,EAJgB,kBAAkB,KAAlB,kBAAkB,QAIlC;AAiDD,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AA4BD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,QAAQ,GAAG,CACf,SAAuB,EACvB,OAAe,EACf,KAAe,EACL,EAAE,CACZ,IAAI,QAAQ,CAAC;IACX,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,CAAC,KAAc,EAAyB,EAAE,CAC/D,OAAO,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAqB,CAAC,CAAC;AAE7E,MAAM,gBAAgB,GAAG,CACvB,YAAoC,EACf,EAAE;IACvB,IAAI,YAAY,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,OAAO,YAAY,CAAC,SAAS,CAAC;IAChC,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,gBAAgB,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,QAAQ,CAAC,WAAW,EAAE,wCAAwC,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,GAAiB,EAAc,EAAE,CAAC,CAAC;IAClD,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;CAClE,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,MAAkB,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;AAEtF,MAAM,WAAW,GAAG,CAAC,MAAkB,EAAE,QAA2B,EAAc,EAAE,CAClF,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE3D,MAAM,UAAU,GAAG,CAAC,GAAiB,EAAE,GAA2B,EAAW,EAAE,CAC7E,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAE1F,MAAM,YAAY,GAAG,CACnB,GAAiB,EACjB,GAAiB,EACjB,GAA2B,EAClB,EAAE,CACX,GAAG,CAAC,GAAG,KAAK,GAAG;IACf,GAAG,CAAC,MAAM,KAAK,QAAQ;IACvB,CAAC,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;IACjD,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAEvB,MAAM,iBAAiB,GAAG,CACxB,GAAiB,EACjB,KAAkC,EACzB,EAAE,CACX,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,GAAG;IACpB,GAAG,CAAC,MAAM,KAAK,UAAU;IACzB,CAAC,GAAG,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;IACjD,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;IAClD,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;AAE7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,GAAG;IACH,GAAG;IACH,GAAG;IACH,IAAI;IACJ,IAAI;IACJ,IAAI;IACJ,KAAK;IACL,GAAG;CACJ,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,GAAiB,EAA4B,EAAE;IACvE,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAA4B,EAAE,CAAC;IAExC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG,GAAG;QACN,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;QACzC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC;QAC/B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,KAAK,CAAC;KACP,CAAC;AAC3B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAgC,EAChB,EAAE;IAClB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IAEtD,OAAO,OAAO,CAAC,IAAI,CAAC;QAClB,gBAAgB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,IAAI,OAAO,CAAC;YAElC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YAEzE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;YAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;YAEpE,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,CAAC;QACD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CACxB,MAAM,CAAC,OAAO,CACZ,IAAI;aACD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;aAC5C,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAExC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC,CAAC,CACL;KACJ,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAgC,EAAE,EAAE,CACpE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;AAErD,MAAM,qBAAqB,GAAG,CAC5B,MAA2B,EACN,EAAE,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAE1C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAA8B,EAAE;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,EAA+B,CAAC;IAEvD,OAAO,kBAAkB,CAAC,IAAI,CAAC;QAC7B,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC;QACJ,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAElC,OAAO,MAAM,KAAK,SAAS;gBACzB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC;QACjD,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CACxE,4BAA4B,CAC7B,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,KAAa,EAAmC,EAAE;IACzE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE3B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;QACjE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,wBAAwB,GAAG,CAC/B,MAA2B,EAC3B,GAAe,EACN,EAAE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAEvF,MAAM,eAAe,GAAG,CAAC,MAAiB,EAAsB,EAAE;IAChE,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,MAAiB,EAA0B,EAAE,CACxE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE7E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,YAAuC,EACjB,EAAE,CACxB,aAAa,CAAC,IAAI,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,mCAAmC,CAAC,CAAC,QAAQ,CAAC,EACnE,KAAK;QAEL,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG;YACb,KAAK;YACL,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;YACxE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAClC,CAAC;QAEhC,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEzC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACrE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAErD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC,CAAC;IACF,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC,gCAAgC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE5D,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpB,OAAO;gBACL,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,QAAQ,CAAC,MAAM;aACS,CAAC;QACrC,CAAC;QAED,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAEvD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAErD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;gBACzE,OAAO;oBACL,MAAM,EAAE,KAAK;oBACb,MAAM,EAAE,SAAS;oBACjB,KAAK;oBACL,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;oBACjD,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;oBACjC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;wBACnC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;iBACX,CAAC;YACrC,CAAC;QACH,CAAC;QAED,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YACzC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;YACjD,OAAO,EAAE,KAAK;SACkB,CAAC;IACrC,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,UAAU,GAAG,CAAC,KAAc,EAAU,EAAE,CAC5C,QAAQ,CAAC,eAAe,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtE,MAAM,gBAAgB,GAAG,CACvB,KAAa,EACkC,EAAE;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE;QAC1D,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO;QAC/B,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;KAC3B,CAAC,CAAC;IAEH,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAE9D,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAA4C;YAC/C,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAA4C,EAAE;IAC9E,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAErC,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC;KACL,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAyB,EAAE;IAC3D,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAErC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,KAAmB,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAChB,MAAqB,EACrB,GAAc,EACd,IAAY,EACZ,SAAuB,EACU,EAAE,CACnC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACnC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,QAAQ,CAAC,SAAS,EAAE,mCAAmC,EAAE,KAAK,CAAC,CAChE,CACF,CAAC;AAEJ,MAAM,eAAe,GAAG,CACtB,OAAsD,EAC5B,EAAE;IAC5B,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;IAEpD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG;IAC3B,IAAI,EAAE,mBAAmB;IACzB,IAAI,EAAE,SAAS;CACP,CAAC;AAEX,MAAM,YAAY,GAAG,CAAC,GAAiC,EAAc,EAAE,CACrE,CAAC,EAAE,GAAG,GAAG,EAAE,CAAe,CAAC;AAE7B,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAA0B,EAAE,CACrE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE;IAC5C,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;IAC3B,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS;CAC3B,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,YAAsC,EACjB,EAAE,CACvB,YAAY,CAAC,IAAI,CAAC;IAChB,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO;IAClC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;IAC3E,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS;IAC7E,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACzD,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC,CAAC,QAAQ,CACpB,WAAW,EACX,0CAA0C,CAC3C,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,SAAS,CACrB,YAAY,CAAC,MAAM,EACnB,KAAK,CAAC,GAAG,CAAC,MAAM,EAChB,KAAK,CAAC,YAAY,EAClB,WAAW,CACZ,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC7D,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,SAAS,CACxC,YAAY,CAAC,MAAM,EACnB,KAAK,CAAC,GAAG,CAAC,MAAM,EAChB,KAAK,CAAC,YAAY,EAClB,WAAW,CACZ,CAAC;QAEF,OAAO,KAAK,CAAC,CAAC,qBAAqB,CACjC,YAAY,CAAC,MAAM,EACnB,iBAAiB,EACjB,KAAK,CAAC,SAAS,CAChB,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,QAAQ,CAAC,WAAW,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAChE,CACF,CAAC;IACJ,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,OAA2C,EACtB,EAAE,CACvB,YAAY,CAAC,IAAI,CAAC;IAChB,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO;IAClC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS;IAC/E,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS;IAChF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,yCAAyC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACzE,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC;QAEjC,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC,CAAC,QAAQ,CACpB,WAAW,EACX,wCAAwC,CACzC,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YAC9B,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,YAAY,CAAC,UAAU,CAAC,EACxB,oBAAoB,EACpB,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;gBACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,oBAAoB,EACpB,GAAG,EACH,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CACvC,CAAC;gBAEF,OAAO,QAAQ,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,CAAC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,0BAA0B,EAAE,KAAK,CAAC;SAC3E,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,2CAA2C,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC7E,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC;QAEhC,IAAI,KAAK,CAAC,GAAG,KAAK,OAAO,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAExD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;YAC9B,GAAG,EAAE,KAAK,IAAI,EAAE;gBACd,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,YAAY,CAAC,SAAS,CAAC,EACvB,oBAAoB,EACpB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;gBAEF,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,oBAAoB,EACpB,GAAG,EACH,SAAS,EACT,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CACvC,CAAC;YACJ,CAAC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,4BAA4B,EAAE,KAAK,CAAC;SAC7E,CAAC,CAAC;IACL,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,CAAC,KAAc,EAAqB,EAAE;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,KAAqB,EAAU,EAAE,CAC9D,KAAK,CAAC,cAAc,KAAK,SAAS;IAChC,CAAC,CAAC,CAAC;IACH,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC;AAEhE,MAAM,cAAc,GAAG,CACrB,MAAiB,EACjB,KAAqB,EACrB,GAAe,EAC2B,EAAE;IAC5C,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAEtD,IACE,MAAM,CAAC,GAAG,KAAK,SAAS;QACxB,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,UAAU,GAAG,gBAAgB,IAAI,MAAM,CAAC,GAAG,CAAC,EAC/E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IACE,MAAM,CAAC,GAAG,KAAK,SAAS;QACxB,CAAC,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,UAAU,GAAG,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,EAC9E,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9D,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAE1C,IACE,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,MAAM,CAAC,MAAM,KAAK,CAAC;YACnB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EACvD,CAAC;YACD,OAAO,mBAAmB,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAoB,EAAE,QAAoB,EAAa,EAAE;IAC7E,MAAM,SAAS,GACb,KAAK,CAAC,SAAS;QACf,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IAEvF,OAAO;QACL,GAAG,KAAK,CAAC,MAAM;QACf,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5D,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9D,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/E,GAAG,EAAE,WAAW,CAAC,QAAQ,CAAC;QAC1B,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;KACvC,CAAC;AACxB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,YAAoC,EAClB,EAAE;IACpB,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAEjD,OAAO,SAAS,CAAC,IAAI,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;YACjD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC;YAEjC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC;gBACpD,GAAG;gBACH,GAAG,EAAE,QAAQ;aACd,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC;YAC5E,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC/D,OAAO,KAAK,CAAC,CAAC,QAAQ,CACpB,OAAO,EACP,oEAAoE,CACrE,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAG;gBACb,GAAG,EAAE,KAAK;gBACV,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG;gBAClB,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE;aACE,CAAC;YACtB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC3C,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG;gBAClB,GAAG,EAAE,GAAG,CAAC,KAAK;gBACd,YAAY;aACb,CAAC,CAAC;YAEH,OAAO;gBACL,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,YAAY,IAAI,cAAc,EAAE,CAAC,CAAC;gBACnE,MAAM;gBACN,MAAM;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;aACJ,CAAC;QACxB,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,YAAoC,EAChB,EAAE;IACtB,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAEjD,OAAO,WAAW,CAAC,IAAI,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;YACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAkC,CAAC;YAC/E,CAAC;YAED,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,GAAG,KAAiC,CAAC;YACnF,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAExC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAkC,CAAC;YAC1E,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpC,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,iBAAiB;iBACM,CAAC;YACpC,CAAC;YAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC;gBACvD,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG;aACJ,CAAC,CAAC;YAEH,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAkC,CAAC;YACjF,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAkC,CAAC;YACjF,CAAC;YAED,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;gBAC/C,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,GAAG,EAAE,GAAG,CAAC,KAAK;gBACd,YAAY,EAAE,GAAG,UAAU,IAAI,WAAW,EAAE;gBAC5C,SAAS,EAAE,aAAa;aACzB,CAAC,CAAC;YAEH,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,mBAAmB;iBACI,CAAC;YACpC,CAAC;YAED,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YAEzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAkC,CAAC;YAC/E,CAAC;YAED,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAEzD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAkC,CAAC;YACjF,CAAC;YAED,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,MAAM;gBACN,MAAM;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;aACQ,CAAC;QACpC,CAAC,CAAC;KACH,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,YAA+C,EAAe,EAAE,CACvF,IAAI,CAAC,IAAI,CAAC;IACR,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACxD,MAAM,GAAG,GAAG,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAE9D,OAAO,EAAE,IAAI,EAAyB,CAAC;IACzC,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CACxD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAE7B,OAAO,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAC5C,OAA2C,EAC3C,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;IAEtC,OAAO,aAAa,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAC5C,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CACnE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC;IAEtC,OAAO,eAAe,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAC9C,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,0BAA0B,CAAC,IAAI,CAC1D,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,4BAA4B,CAAC,IAAI,CAC9D,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CACxC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAE5B,OAAO,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5B,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;IAExC,OAAO,iBAAiB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAChD,CAAC,CAAC,CACH,CAAC;AAEF,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC,QAAQ,CAChD,0BAA0B,EAC1B,4BAA4B,EAC5B,QAAQ,CACT,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC"}