@effect-auth/core 0.1.0-alpha.2 → 0.1.0-alpha.4

package/dist/RefreshToken.d.ts

@@ -0,0 +1,222 @@
+import { Brand, Context, Effect, Layer, Redacted } from "effect";
+import type * as OptionTypes from "effect/Option";
+import { Crypto } from "./Crypto.js";
+import type { CryptoService } from "./Crypto.js";
+import type { UnixMillis, UserId } from "./Identifiers.js";
+export type RefreshTokenId = Brand.Branded<string, "auth/RefreshTokenId">;
+export declare const RefreshTokenId: Brand.Constructor<RefreshTokenId>;
+export type RefreshTokenFamilyId = Brand.Branded<string, "auth/RefreshTokenFamilyId">;
+export declare const RefreshTokenFamilyId: Brand.Constructor<RefreshTokenFamilyId>;
+export type RefreshTokenSecret = Brand.Branded<string, "auth/RefreshTokenSecret">;
+export declare const RefreshTokenSecret: Brand.Constructor<RefreshTokenSecret>;
+export type RefreshTokenSecretHash = Brand.Branded<string, "auth/RefreshTokenSecretHash">;
+export declare const RefreshTokenSecretHash: Brand.Constructor<RefreshTokenSecretHash>;
+export declare const defaultRefreshTokenSecretBytes = 48;
+export declare const defaultRefreshTokenIdBytes = 16;
+export declare const defaultRefreshTokenFamilyIdBytes = 16;
+export type RefreshTokenOperation = "generate" | "hash" | "verify";
+declare const RefreshTokenError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RefreshTokenError";
+} & Readonly<A>;
+export declare class RefreshTokenError extends RefreshTokenError_base<{
+    readonly operation: RefreshTokenOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface RefreshTokenGenerateInput {
+    readonly secretBytes?: number;
+}
+export interface RefreshTokenHashInput {
+    readonly token: Redacted.Redacted<string>;
+}
+export interface RefreshTokenVerifyInput extends RefreshTokenHashInput {
+    readonly hash: RefreshTokenSecretHash;
+}
+export interface RefreshTokensService {
+    readonly generate: (input?: RefreshTokenGenerateInput) => Effect.Effect<Redacted.Redacted<RefreshTokenSecret>, RefreshTokenError>;
+    readonly hash: (input: RefreshTokenHashInput) => Effect.Effect<RefreshTokenSecretHash, RefreshTokenError>;
+    readonly verify: (input: RefreshTokenVerifyInput) => Effect.Effect<boolean, RefreshTokenError>;
+}
+declare const RefreshTokens_base: Context.ServiceClass<RefreshTokens, "auth/RefreshTokens", RefreshTokensService>;
+export declare class RefreshTokens extends RefreshTokens_base {
+}
+export declare namespace RefreshTokens {
+    const make: (service: RefreshTokensService) => RefreshTokensService;
+}
+export interface RefreshTokensDependencies {
+    readonly crypto: CryptoService;
+}
+export declare const makeRefreshTokens: (dependencies: RefreshTokensDependencies) => RefreshTokensService;
+export declare const RefreshTokensLive: Layer.Layer<RefreshTokens, never, Crypto>;
+export interface RefreshTokenRecord {
+    readonly id: RefreshTokenId;
+    readonly familyId: RefreshTokenFamilyId;
+    readonly userId: UserId;
+    readonly secretHash: RefreshTokenSecretHash;
+    readonly createdAt: UnixMillis;
+    readonly expiresAt: UnixMillis;
+    readonly lastUsedAt?: UnixMillis;
+    readonly rotatedAt?: UnixMillis;
+    readonly replacedById?: RefreshTokenId;
+    readonly revokedAt?: UnixMillis;
+    readonly reuseDetectedAt?: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface RefreshTokenListByUserInput {
+    readonly userId: UserId;
+    readonly includeRevoked?: boolean;
+}
+export interface RefreshTokenListByFamilyInput {
+    readonly familyId: RefreshTokenFamilyId;
+    readonly includeRevoked?: boolean;
+}
+export interface RefreshTokenRotateStoreInput {
+    readonly id: RefreshTokenId;
+    readonly rotatedAt: UnixMillis;
+    readonly replacement: RefreshTokenRecord;
+}
+export interface RefreshTokenRotatedRecords {
+    readonly previous: RefreshTokenRecord;
+    readonly replacement: RefreshTokenRecord;
+}
+export interface RefreshTokenMarkReuseDetectedInput {
+    readonly id: RefreshTokenId;
+    readonly reuseDetectedAt: UnixMillis;
+}
+export interface RefreshTokenRevokeInput {
+    readonly id: RefreshTokenId;
+    readonly revokedAt: UnixMillis;
+    readonly reason?: string;
+}
+export interface RefreshTokenRevokeFamilyInput {
+    readonly familyId: RefreshTokenFamilyId;
+    readonly revokedAt: UnixMillis;
+    readonly reason?: string;
+}
+export type RefreshTokenStoreOperation = "insert" | "find" | "list" | "rotate" | "reuse" | "revoke";
+declare const RefreshTokenStoreError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RefreshTokenStoreError";
+} & Readonly<A>;
+export declare class RefreshTokenStoreError extends RefreshTokenStoreError_base<{
+    readonly operation: RefreshTokenStoreOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface RefreshTokenStoreService {
+    readonly insert: (row: RefreshTokenRecord) => Effect.Effect<void, RefreshTokenStoreError>;
+    readonly findById: (id: RefreshTokenId) => Effect.Effect<OptionTypes.Option<RefreshTokenRecord>, RefreshTokenStoreError>;
+    readonly findBySecretHash: (hash: RefreshTokenSecretHash) => Effect.Effect<OptionTypes.Option<RefreshTokenRecord>, RefreshTokenStoreError>;
+    readonly listByUser: (input: RefreshTokenListByUserInput) => Effect.Effect<readonly RefreshTokenRecord[], RefreshTokenStoreError>;
+    readonly listByFamily: (input: RefreshTokenListByFamilyInput) => Effect.Effect<readonly RefreshTokenRecord[], RefreshTokenStoreError>;
+    readonly rotate: (input: RefreshTokenRotateStoreInput) => Effect.Effect<OptionTypes.Option<RefreshTokenRotatedRecords>, RefreshTokenStoreError>;
+    readonly markReuseDetected: (input: RefreshTokenMarkReuseDetectedInput) => Effect.Effect<OptionTypes.Option<RefreshTokenRecord>, RefreshTokenStoreError>;
+    readonly revoke: (input: RefreshTokenRevokeInput) => Effect.Effect<void, RefreshTokenStoreError>;
+    readonly revokeFamily: (input: RefreshTokenRevokeFamilyInput) => Effect.Effect<void, RefreshTokenStoreError>;
+}
+declare const RefreshTokenStore_base: Context.ServiceClass<RefreshTokenStore, "auth/RefreshTokenStore", RefreshTokenStoreService>;
+export declare class RefreshTokenStore extends RefreshTokenStore_base {
+}
+export declare namespace RefreshTokenStore {
+    const make: (service: RefreshTokenStoreService) => RefreshTokenStoreService;
+}
+export declare const makeRefreshTokenStoreMemory: () => RefreshTokenStoreService;
+export declare const RefreshTokenStoreMemoryLive: Layer.Layer<RefreshTokenStore, never, never>;
+export interface RefreshTokenInfo {
+    readonly id: RefreshTokenId;
+    readonly familyId: RefreshTokenFamilyId;
+    readonly userId: UserId;
+    readonly createdAt: UnixMillis;
+    readonly expiresAt: UnixMillis;
+    readonly lastUsedAt?: UnixMillis;
+    readonly rotatedAt?: UnixMillis;
+    readonly replacedById?: RefreshTokenId;
+    readonly revokedAt?: UnixMillis;
+    readonly reuseDetectedAt?: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface CreatedRefreshToken {
+    readonly token: Redacted.Redacted<RefreshTokenSecret>;
+    readonly refreshToken: RefreshTokenInfo;
+}
+export interface RefreshTokenIssueForUserInput {
+    readonly userId: UserId;
+    readonly tokenId?: RefreshTokenId;
+    readonly familyId?: RefreshTokenFamilyId;
+    readonly now?: UnixMillis;
+    readonly expiresAt: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export interface RefreshTokenRotateInput {
+    readonly token: Redacted.Redacted<string>;
+    readonly tokenId?: RefreshTokenId;
+    readonly now?: UnixMillis;
+    readonly expiresAt: UnixMillis;
+    readonly metadata?: Readonly<Record<string, unknown>>;
+}
+export type RefreshTokenInvalidReason = "not_found" | "expired" | "revoked";
+export type RefreshTokenRotationResult = {
+    readonly _tag: "Rotated";
+    readonly token: Redacted.Redacted<RefreshTokenSecret>;
+    readonly refreshToken: RefreshTokenInfo;
+    readonly previousToken: RefreshTokenInfo;
+} | {
+    readonly _tag: "Invalid";
+    readonly reason: RefreshTokenInvalidReason;
+    readonly refreshToken?: RefreshTokenInfo;
+} | {
+    readonly _tag: "ReuseDetected";
+    readonly refreshToken: RefreshTokenInfo;
+    readonly revokedAt: UnixMillis;
+};
+export interface RefreshTokenManagementListInput {
+    readonly userId: UserId;
+    readonly includeRevoked?: boolean;
+}
+export interface RefreshTokenManagementRevokeInput {
+    readonly userId: UserId;
+    readonly tokenId: RefreshTokenId;
+    readonly revokedAt?: UnixMillis;
+    readonly reason?: string;
+}
+export interface RefreshTokenManagementRevokeFamilyInput {
+    readonly userId: UserId;
+    readonly familyId: RefreshTokenFamilyId;
+    readonly revokedAt?: UnixMillis;
+    readonly reason?: string;
+}
+export type RefreshTokenManagementOperation = "issue" | "rotate" | "list" | "revoke" | "revoke-family";
+declare const RefreshTokenManagementError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "RefreshTokenManagementError";
+} & Readonly<A>;
+export declare class RefreshTokenManagementError extends RefreshTokenManagementError_base<{
+    readonly operation: RefreshTokenManagementOperation;
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface RefreshTokenManagementService {
+    readonly issueForUser: (input: RefreshTokenIssueForUserInput) => Effect.Effect<CreatedRefreshToken, RefreshTokenManagementError>;
+    readonly rotate: (input: RefreshTokenRotateInput) => Effect.Effect<RefreshTokenRotationResult, RefreshTokenManagementError>;
+    readonly listForUser: (input: RefreshTokenManagementListInput) => Effect.Effect<readonly RefreshTokenInfo[], RefreshTokenManagementError>;
+    readonly revokeForUser: (input: RefreshTokenManagementRevokeInput) => Effect.Effect<void, RefreshTokenManagementError>;
+    readonly revokeFamilyForUser: (input: RefreshTokenManagementRevokeFamilyInput) => Effect.Effect<void, RefreshTokenManagementError>;
+}
+declare const RefreshTokenManagement_base: Context.ServiceClass<RefreshTokenManagement, "auth/RefreshTokenManagement", RefreshTokenManagementService>;
+export declare class RefreshTokenManagement extends RefreshTokenManagement_base {
+}
+export declare namespace RefreshTokenManagement {
+    const make: (service: RefreshTokenManagementService) => RefreshTokenManagementService;
+}
+export interface RefreshTokenManagementDependencies {
+    readonly refreshTokens: RefreshTokensService;
+    readonly crypto: CryptoService;
+    readonly tokenStore: RefreshTokenStoreService;
+    readonly tokenIdBytes?: number;
+    readonly familyIdBytes?: number;
+}
+export declare const makeRefreshTokenManagement: (dependencies: RefreshTokenManagementDependencies) => RefreshTokenManagementService;
+export declare const RefreshTokenManagementLive: Layer.Layer<RefreshTokenManagement, never, Crypto | RefreshTokens | RefreshTokenStore>;
+export {};
+//# sourceMappingURL=RefreshToken.d.ts.map

package/dist/RefreshToken.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RefreshToken.d.ts","sourceRoot":"","sources":["../src/RefreshToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAQ,MAAM,EAAE,KAAK,EAAU,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAC/E,OAAO,KAAK,KAAK,WAAW,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAG3D,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;AAC1E,eAAO,MAAM,cAAc,mCAAkC,CAAC;AAE9D,MAAM,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAC9C,MAAM,EACN,2BAA2B,CAC5B,CAAC;AACF,eAAO,MAAM,oBAAoB,yCAAwC,CAAC;AAE1E,MAAM,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;AAClF,eAAO,MAAM,kBAAkB,uCAAsC,CAAC;AAEtE,MAAM,MAAM,sBAAsB,GAAG,KAAK,CAAC,OAAO,CAChD,MAAM,EACN,6BAA6B,CAC9B,CAAC;AACF,eAAO,MAAM,sBAAsB,2CAA0C,CAAC;AAE9E,eAAO,MAAM,8BAA8B,KAAK,CAAC;AACjD,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAC7C,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;;;;AAEnE,qBAAa,iBAAkB,SAAQ,uBAAsC;IAC3E,QAAQ,CAAC,SAAS,EAAE,qBAAqB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,uBAAwB,SAAQ,qBAAqB;IACpE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,CACjB,KAAK,CAAC,EAAE,yBAAyB,KAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC7E,QAAQ,CAAC,IAAI,EAAE,CACb,KAAK,EAAE,qBAAqB,KACzB,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;IAC9D,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,uBAAuB,KAC3B,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;CAChD;;AAED,qBAAa,aAAc,SAAQ,kBAGV;CAAG;AAE5B,yBAAiB,aAAa,CAAC;IACtB,MAAM,IAAI,GAAI,SAAS,oBAAoB,KAAG,oBAC1B,CAAC;CAC7B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAoDD,eAAO,MAAM,iBAAiB,GAC5B,cAAc,yBAAyB,KACtC,oBAgDC,CAAC;AAEL,eAAO,MAAM,iBAAiB,2CAM7B,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;CAC1C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;CAC1C;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,0BAA0B,GAClC,QAAQ,GACR,MAAM,GACN,MAAM,GACN,QAAQ,GACR,OAAO,GACP,QAAQ,CAAC;;;;AAEb,qBAAa,sBAAuB,SAAQ,4BAE1C;IACA,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,CACf,GAAG,EAAE,kBAAkB,KACpB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IACjD,QAAQ,CAAC,QAAQ,EAAE,CACjB,EAAE,EAAE,cAAc,KACf,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACnF,QAAQ,CAAC,gBAAgB,EAAE,CACzB,IAAI,EAAE,sBAAsB,KACzB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACnF,QAAQ,CAAC,UAAU,EAAE,CACnB,KAAK,EAAE,2BAA2B,KAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,kBAAkB,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAC1E,QAAQ,CAAC,YAAY,EAAE,CACrB,KAAK,EAAE,6BAA6B,KACjC,MAAM,CAAC,MAAM,CAAC,SAAS,kBAAkB,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAC1E,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,4BAA4B,KAChC,MAAM,CAAC,MAAM,CAChB,WAAW,CAAC,MAAM,CAAC,0BAA0B,CAAC,EAC9C,sBAAsB,CACvB,CAAC;IACF,QAAQ,CAAC,iBAAiB,EAAE,CAC1B,KAAK,EAAE,kCAAkC,KACtC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC,CAAC;IACnF,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,uBAAuB,KAC3B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,CACrB,KAAK,EAAE,6BAA6B,KACjC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;CAClD;;AAED,qBAAa,iBAAkB,SAAQ,sBAGV;CAAG;AAEhC,yBAAiB,iBAAiB,CAAC;IAC1B,MAAM,IAAI,GACf,SAAS,wBAAwB,KAChC,wBAAyD,CAAC;CAC9D;AAmBD,eAAO,MAAM,2BAA2B,QAAO,wBAyH9C,CAAC;AAEF,eAAO,MAAM,2BAA2B,8CAEvC,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;CACzC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACvD;AAED,MAAM,MAAM,yBAAyB,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;AAE5E,MAAM,MAAM,0BAA0B,GAClC;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,gBAAgB,CAAC;CAC1C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC;CAC1C,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,gBAAgB,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEN,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,+BAA+B,GACvC,OAAO,GACP,QAAQ,GACR,MAAM,GACN,QAAQ,GACR,eAAe,CAAC;;;;AAEpB,qBAAa,2BAA4B,SAAQ,iCAE/C;IACA,QAAQ,CAAC,SAAS,EAAE,+BAA+B,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,YAAY,EAAE,CACrB,KAAK,EAAE,6BAA6B,KACjC,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,2BAA2B,CAAC,CAAC;IACrE,QAAQ,CAAC,MAAM,EAAE,CACf,KAAK,EAAE,uBAAuB,KAC3B,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,2BAA2B,CAAC,CAAC;IAC5E,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,+BAA+B,KACnC,MAAM,CAAC,MAAM,CAAC,SAAS,gBAAgB,EAAE,EAAE,2BAA2B,CAAC,CAAC;IAC7E,QAAQ,CAAC,aAAa,EAAE,CACtB,KAAK,EAAE,iCAAiC,KACrC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;IACtD,QAAQ,CAAC,mBAAmB,EAAE,CAC5B,KAAK,EAAE,uCAAuC,KAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;CACvD;;AAED,qBAAa,sBAAuB,SAAQ,2BAGV;CAAG;AAErC,yBAAiB,sBAAsB,CAAC;IAC/B,MAAM,IAAI,GACf,SAAS,6BAA6B,KACrC,6BAAmE,CAAC;CACxE;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AA+LD,eAAO,MAAM,0BAA0B,GACrC,cAAc,kCAAkC,KAC/C,6BA8KC,CAAC;AAEL,eAAO,MAAM,0BAA0B,wFAQtC,CAAC"}

package/dist/RefreshToken.js

@@ -0,0 +1,342 @@
+import { Brand, Context, Data, Effect, Layer, Option, Redacted } from "effect";
+import { Crypto } from "./Crypto.js";
+import { currentUnixMillis } from "./Internal.js";
+export const RefreshTokenId = Brand.nominal();
+export const RefreshTokenFamilyId = Brand.nominal();
+export const RefreshTokenSecret = Brand.nominal();
+export const RefreshTokenSecretHash = Brand.nominal();
+export const defaultRefreshTokenSecretBytes = 48;
+export const defaultRefreshTokenIdBytes = 16;
+export const defaultRefreshTokenFamilyIdBytes = 16;
+export class RefreshTokenError extends Data.TaggedError("RefreshTokenError") {
+}
+export class RefreshTokens extends Context.Service()("auth/RefreshTokens") {
+}
+(function (RefreshTokens) {
+    RefreshTokens.make = (service) => RefreshTokens.of(service);
+})(RefreshTokens || (RefreshTokens = {}));
+const textEncoder = new TextEncoder();
+const refreshTokenError = (operation, message, cause) => new RefreshTokenError({
+    operation,
+    message,
+    ...(cause === undefined ? {} : { cause }),
+});
+const validateByteLength = (byteLength, operation, label) => Number.isInteger(byteLength) && byteLength >= 16 && byteLength <= 256
+    ? Effect.succeed(byteLength)
+    : Effect.fail(refreshTokenError(operation, `${label} byte length must be an integer between 16 and 256`));
+const refreshTokenSecretValue = (token, operation) => {
+    const value = Redacted.value(token).trim();
+    return value.length === 0
+        ? Effect.fail(refreshTokenError(operation, "Refresh token must not be empty"))
+        : Effect.succeed(value);
+};
+const hashRefreshTokenSecretValue = (dependencies, token, operation) => dependencies.crypto.digestSha256({ data: `refresh-token:${token}` }).pipe(Effect.map((hash) => RefreshTokenSecretHash(`sha256:${hash}`)), Effect.mapError((cause) => refreshTokenError(operation, "Failed to hash refresh token", cause)));
+export const makeRefreshTokens = (dependencies) => RefreshTokens.make({
+    generate: Effect.fn("auth.refresh_token.generate")(function* (input) {
+        const secretBytes = yield* validateByteLength(input?.secretBytes ?? defaultRefreshTokenSecretBytes, "generate", "Refresh token secret");
+        const token = yield* dependencies.crypto.randomToken(secretBytes).pipe(Effect.map(RefreshTokenSecret), Effect.mapError((cause) => refreshTokenError("generate", "Failed to generate refresh token", cause)));
+        return Redacted.make(token);
+    }),
+    hash: Effect.fn("auth.refresh_token.hash")(function* (input) {
+        const token = yield* refreshTokenSecretValue(input.token, "hash");
+        return yield* hashRefreshTokenSecretValue(dependencies, token, "hash");
+    }),
+    verify: Effect.fn("auth.refresh_token.verify")(function* (input) {
+        const token = yield* refreshTokenSecretValue(input.token, "verify").pipe(Effect.catchTag("RefreshTokenError", () => Effect.succeed(undefined)));
+        if (token === undefined) {
+            return false;
+        }
+        const hash = yield* hashRefreshTokenSecretValue(dependencies, token, "verify");
+        return yield* dependencies.crypto
+            .timingSafeEqual({
+            left: textEncoder.encode(hash),
+            right: textEncoder.encode(input.hash),
+        })
+            .pipe(Effect.mapError((cause) => refreshTokenError("verify", "Failed to compare refresh token hashes", cause)));
+    }),
+});
+export const RefreshTokensLive = Layer.effect(RefreshTokens)(Effect.gen(function* () {
+    const crypto = yield* Crypto;
+    return makeRefreshTokens({ crypto });
+}));
+export class RefreshTokenStoreError extends Data.TaggedError("RefreshTokenStoreError") {
+}
+export class RefreshTokenStore extends Context.Service()("auth/RefreshTokenStore") {
+}
+(function (RefreshTokenStore) {
+    RefreshTokenStore.make = (service) => RefreshTokenStore.of(service);
+})(RefreshTokenStore || (RefreshTokenStore = {}));
+const cloneMetadata = (metadata) => metadata === undefined ? undefined : structuredClone(metadata);
+const cloneRefreshTokenRecord = (record) => ({
+    ...record,
+    ...(record.metadata === undefined ? {} : { metadata: cloneMetadata(record.metadata) }),
+});
+const metadataWithReason = (metadata, key, reason) => reason === undefined ? metadata : { ...metadata, [key]: reason };
+export const makeRefreshTokenStoreMemory = () => {
+    const tokensById = new Map();
+    const idByHash = new Map();
+    return RefreshTokenStore.make({
+        insert: (row) => Effect.sync(() => {
+            tokensById.set(row.id, cloneRefreshTokenRecord(row));
+            idByHash.set(row.secretHash, row.id);
+        }),
+        findById: (id) => Effect.sync(() => {
+            const row = tokensById.get(id);
+            return row === undefined
+                ? Option.none()
+                : Option.some(cloneRefreshTokenRecord(row));
+        }),
+        findBySecretHash: (hash) => Effect.sync(() => {
+            const id = idByHash.get(hash);
+            const row = id === undefined ? undefined : tokensById.get(id);
+            return row === undefined
+                ? Option.none()
+                : Option.some(cloneRefreshTokenRecord(row));
+        }),
+        listByUser: (input) => Effect.sync(() => [...tokensById.values()]
+            .filter((row) => row.userId === input.userId &&
+            (input.includeRevoked === true || row.revokedAt === undefined))
+            .map(cloneRefreshTokenRecord)),
+        listByFamily: (input) => Effect.sync(() => [...tokensById.values()]
+            .filter((row) => row.familyId === input.familyId &&
+            (input.includeRevoked === true || row.revokedAt === undefined))
+            .map(cloneRefreshTokenRecord)),
+        rotate: (input) => Effect.sync(() => {
+            const current = tokensById.get(input.id);
+            if (current === undefined ||
+                current.rotatedAt !== undefined ||
+                current.revokedAt !== undefined) {
+                return Option.none();
+            }
+            const previous = {
+                ...current,
+                lastUsedAt: input.rotatedAt,
+                rotatedAt: input.rotatedAt,
+                replacedById: input.replacement.id,
+            };
+            tokensById.set(previous.id, previous);
+            tokensById.set(input.replacement.id, cloneRefreshTokenRecord(input.replacement));
+            idByHash.set(input.replacement.secretHash, input.replacement.id);
+            return Option.some({
+                previous: cloneRefreshTokenRecord(previous),
+                replacement: cloneRefreshTokenRecord(input.replacement),
+            });
+        }),
+        markReuseDetected: (input) => Effect.sync(() => {
+            const row = tokensById.get(input.id);
+            if (row === undefined) {
+                return Option.none();
+            }
+            const updated = {
+                ...row,
+                reuseDetectedAt: input.reuseDetectedAt,
+            };
+            tokensById.set(input.id, updated);
+            return Option.some(cloneRefreshTokenRecord(updated));
+        }),
+        revoke: (input) => Effect.sync(() => {
+            const row = tokensById.get(input.id);
+            if (row !== undefined) {
+                tokensById.set(input.id, {
+                    ...row,
+                    revokedAt: input.revokedAt,
+                    metadata: metadataWithReason(row.metadata, "revokeReason", input.reason),
+                });
+            }
+        }),
+        revokeFamily: (input) => Effect.sync(() => {
+            for (const row of tokensById.values()) {
+                if (row.familyId === input.familyId) {
+                    tokensById.set(row.id, {
+                        ...row,
+                        revokedAt: input.revokedAt,
+                        metadata: metadataWithReason(row.metadata, "familyRevokeReason", input.reason),
+                    });
+                }
+            }
+        }),
+    });
+};
+export const RefreshTokenStoreMemoryLive = Layer.sync(RefreshTokenStore)(makeRefreshTokenStoreMemory);
+export class RefreshTokenManagementError extends Data.TaggedError("RefreshTokenManagementError") {
+}
+export class RefreshTokenManagement extends Context.Service()("auth/RefreshTokenManagement") {
+}
+(function (RefreshTokenManagement) {
+    RefreshTokenManagement.make = (service) => RefreshTokenManagement.of(service);
+})(RefreshTokenManagement || (RefreshTokenManagement = {}));
+const refreshTokenInfo = (record) => ({
+    id: record.id,
+    familyId: record.familyId,
+    userId: record.userId,
+    createdAt: record.createdAt,
+    expiresAt: record.expiresAt,
+    ...(record.lastUsedAt === undefined ? {} : { lastUsedAt: record.lastUsedAt }),
+    ...(record.rotatedAt === undefined ? {} : { rotatedAt: record.rotatedAt }),
+    ...(record.replacedById === undefined ? {} : { replacedById: record.replacedById }),
+    ...(record.revokedAt === undefined ? {} : { revokedAt: record.revokedAt }),
+    ...(record.reuseDetectedAt === undefined
+        ? {}
+        : { reuseDetectedAt: record.reuseDetectedAt }),
+    ...(record.metadata === undefined ? {} : { metadata: record.metadata }),
+});
+const refreshTokenManagementError = (operation, message, cause) => new RefreshTokenManagementError({
+    operation,
+    message,
+    ...(cause === undefined ? {} : { cause }),
+});
+const makeRefreshTokenId = (dependencies, operation) => dependencies.crypto
+    .randomToken(dependencies.tokenIdBytes ?? defaultRefreshTokenIdBytes)
+    .pipe(Effect.map(RefreshTokenId), Effect.mapError((cause) => refreshTokenManagementError(operation, "Failed to generate refresh token id", cause)));
+const makeRefreshTokenFamilyId = (dependencies) => dependencies.crypto
+    .randomToken(dependencies.familyIdBytes ?? defaultRefreshTokenFamilyIdBytes)
+    .pipe(Effect.map(RefreshTokenFamilyId), Effect.mapError((cause) => refreshTokenManagementError("issue", "Failed to generate refresh token family id", cause)));
+const generateRefreshToken = (dependencies, operation) => dependencies.refreshTokens.generate().pipe(Effect.mapError((cause) => refreshTokenManagementError(operation, "Failed to generate refresh token", cause)));
+const hashRefreshToken = (dependencies, operation, token) => dependencies.refreshTokens.hash({ token }).pipe(Effect.mapError((cause) => refreshTokenManagementError(operation, "Failed to hash refresh token", cause)));
+const isExpired = (record, now) => Number(record.expiresAt) <= Number(now);
+const invalidRotation = (reason, record) => ({
+    _tag: "Invalid",
+    reason,
+    ...(record === undefined ? {} : { refreshToken: refreshTokenInfo(record) }),
+});
+const loadOwnedRefreshToken = (dependencies, operation, input) => Effect.gen(function* () {
+    const token = yield* dependencies.tokenStore.findById(input.tokenId).pipe(Effect.mapError((cause) => refreshTokenManagementError(operation, "Failed to load refresh token", cause)));
+    if (Option.isNone(token) || token.value.userId !== input.userId) {
+        return yield* refreshTokenManagementError(operation, "Refresh token not found");
+    }
+    return token.value;
+});
+const loadOwnedRefreshTokenFamily = (dependencies, input) => Effect.gen(function* () {
+    const tokens = yield* dependencies.tokenStore
+        .listByFamily({ familyId: input.familyId, includeRevoked: true })
+        .pipe(Effect.mapError((cause) => refreshTokenManagementError("revoke-family", "Failed to load refresh token family", cause)));
+    if (tokens.length === 0 || tokens.some((token) => token.userId !== input.userId)) {
+        return yield* refreshTokenManagementError("revoke-family", "Refresh token family not found");
+    }
+    return tokens;
+});
+const markReuseDetected = (dependencies, record, now) => Effect.gen(function* () {
+    yield* dependencies.tokenStore
+        .markReuseDetected({ id: record.id, reuseDetectedAt: now })
+        .pipe(Effect.mapError((cause) => refreshTokenManagementError("rotate", "Failed to mark refresh token reuse", cause)));
+    yield* dependencies.tokenStore
+        .revokeFamily({
+        familyId: record.familyId,
+        revokedAt: now,
+        reason: "reuse_detected",
+    })
+        .pipe(Effect.mapError((cause) => refreshTokenManagementError("rotate", "Failed to revoke refresh token family after reuse", cause)));
+    const updated = yield* dependencies.tokenStore.findById(record.id).pipe(Effect.mapError((cause) => refreshTokenManagementError("rotate", "Failed to reload reused refresh token", cause)));
+    return {
+        _tag: "ReuseDetected",
+        refreshToken: refreshTokenInfo(Option.isSome(updated) ? updated.value : record),
+        revokedAt: now,
+    };
+});
+export const makeRefreshTokenManagement = (dependencies) => RefreshTokenManagement.make({
+    issueForUser: Effect.fn("auth.refresh_token.management.issue")(function* (input) {
+        const now = input.now ?? (yield* currentUnixMillis);
+        const id = input.tokenId ?? (yield* makeRefreshTokenId(dependencies, "issue"));
+        const familyId = input.familyId ?? (yield* makeRefreshTokenFamilyId(dependencies));
+        const token = yield* generateRefreshToken(dependencies, "issue");
+        const secretHash = yield* hashRefreshToken(dependencies, "issue", Redacted.make(Redacted.value(token)));
+        const row = {
+            id,
+            familyId,
+            userId: input.userId,
+            secretHash,
+            createdAt: now,
+            expiresAt: input.expiresAt,
+            ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+        };
+        yield* dependencies.tokenStore.insert(row).pipe(Effect.mapError((cause) => refreshTokenManagementError("issue", "Failed to store refresh token", cause)));
+        return {
+            token,
+            refreshToken: refreshTokenInfo(row),
+        };
+    }),
+    rotate: Effect.fn("auth.refresh_token.management.rotate")(function* (input) {
+        const secretHash = yield* hashRefreshToken(dependencies, "rotate", input.token);
+        const existing = yield* dependencies.tokenStore.findBySecretHash(secretHash).pipe(Effect.mapError((cause) => refreshTokenManagementError("rotate", "Failed to load refresh token", cause)));
+        if (Option.isNone(existing)) {
+            return invalidRotation("not_found");
+        }
+        const record = existing.value;
+        const now = input.now ?? (yield* currentUnixMillis);
+        if (record.revokedAt !== undefined) {
+            return invalidRotation("revoked", record);
+        }
+        if (record.rotatedAt !== undefined) {
+            return yield* markReuseDetected(dependencies, record, now);
+        }
+        if (isExpired(record, now)) {
+            return invalidRotation("expired", record);
+        }
+        const nextToken = yield* generateRefreshToken(dependencies, "rotate");
+        const nextSecretHash = yield* hashRefreshToken(dependencies, "rotate", Redacted.make(Redacted.value(nextToken)));
+        const replacement = {
+            id: input.tokenId ?? (yield* makeRefreshTokenId(dependencies, "rotate")),
+            familyId: record.familyId,
+            userId: record.userId,
+            secretHash: nextSecretHash,
+            createdAt: now,
+            expiresAt: input.expiresAt,
+            ...(input.metadata === undefined ? {} : { metadata: input.metadata }),
+        };
+        const rotated = yield* dependencies.tokenStore
+            .rotate({ id: record.id, rotatedAt: now, replacement })
+            .pipe(Effect.mapError((cause) => refreshTokenManagementError("rotate", "Failed to rotate refresh token", cause)));
+        if (Option.isNone(rotated)) {
+            return invalidRotation("revoked", record);
+        }
+        return {
+            _tag: "Rotated",
+            token: nextToken,
+            refreshToken: refreshTokenInfo(rotated.value.replacement),
+            previousToken: refreshTokenInfo(rotated.value.previous),
+        };
+    }),
+    listForUser: Effect.fn("auth.refresh_token.management.list")(function* (input) {
+        const tokens = yield* dependencies.tokenStore
+            .listByUser({
+            userId: input.userId,
+            ...(input.includeRevoked === undefined
+                ? {}
+                : { includeRevoked: input.includeRevoked }),
+        })
+            .pipe(Effect.mapError((cause) => refreshTokenManagementError("list", "Failed to list refresh tokens", cause)));
+        return tokens.map(refreshTokenInfo);
+    }),
+    revokeForUser: Effect.fn("auth.refresh_token.management.revoke")(function* (input) {
+        const token = yield* loadOwnedRefreshToken(dependencies, "revoke", input);
+        if (token.revokedAt !== undefined) {
+            return;
+        }
+        const revokedAt = input.revokedAt ?? (yield* currentUnixMillis);
+        yield* dependencies.tokenStore
+            .revoke({
+            id: input.tokenId,
+            revokedAt,
+            ...(input.reason === undefined ? {} : { reason: input.reason }),
+        })
+            .pipe(Effect.mapError((cause) => refreshTokenManagementError("revoke", "Failed to revoke refresh token", cause)));
+    }),
+    revokeFamilyForUser: Effect.fn("auth.refresh_token.management.revoke_family")(function* (input) {
+        yield* loadOwnedRefreshTokenFamily(dependencies, input);
+        const revokedAt = input.revokedAt ?? (yield* currentUnixMillis);
+        yield* dependencies.tokenStore
+            .revokeFamily({
+            familyId: input.familyId,
+            revokedAt,
+            ...(input.reason === undefined ? {} : { reason: input.reason }),
+        })
+            .pipe(Effect.mapError((cause) => refreshTokenManagementError("revoke-family", "Failed to revoke refresh token family", cause)));
+    }),
+});
+export const RefreshTokenManagementLive = Layer.effect(RefreshTokenManagement)(Effect.gen(function* () {
+    const refreshTokens = yield* RefreshTokens;
+    const crypto = yield* Crypto;
+    const tokenStore = yield* RefreshTokenStore;
+    return makeRefreshTokenManagement({ refreshTokens, crypto, tokenStore });
+}));
+//# sourceMappingURL=RefreshToken.js.map

package/dist/RefreshToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RefreshToken.js","sourceRoot":"","sources":["../src/RefreshToken.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAG/E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAGlD,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,EAAkB,CAAC;AAM9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,EAAwB,CAAC;AAG1E,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,EAAsB,CAAC;AAMtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC,OAAO,EAA0B,CAAC;AAE9E,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,CAAC;AACjD,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAC7C,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAInD,MAAM,OAAO,iBAAkB,SAAQ,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAIzE;CAAG;AA0BL,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAG/C,CAAC,oBAAoB,CAAC;CAAG;AAE5B,WAAiB,aAAa;IACf,kBAAI,GAAG,CAAC,OAA6B,EAAwB,EAAE,CAC1E,aAAa,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC,EAHgB,aAAa,KAAb,aAAa,QAG7B;AAMD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,iBAAiB,GAAG,CACxB,SAAgC,EAChC,OAAe,EACf,KAAe,EACI,EAAE,CACrB,IAAI,iBAAiB,CAAC;IACpB,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,UAAkB,EAClB,SAAgC,EAChC,KAAa,EAC6B,EAAE,CAC5C,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,EAAE,IAAI,UAAU,IAAI,GAAG;IACnE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;IAC5B,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,iBAAiB,CACf,SAAS,EACT,GAAG,KAAK,oDAAoD,CAC7D,CACF,CAAC;AAER,MAAM,uBAAuB,GAAG,CAC9B,KAAgC,EAChC,SAAgC,EACU,EAAE;IAC5C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IAE3C,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;QAC9E,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,YAAuC,EACvC,KAAa,EACb,SAAgC,EAC0B,EAAE,CAC5D,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,iBAAiB,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CACvE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,sBAAsB,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,EAC9D,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,iBAAiB,CAAC,SAAS,EAAE,8BAA8B,EAAE,KAAK,CAAC,CACpE,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,YAAuC,EACjB,EAAE,CACxB,aAAa,CAAC,IAAI,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACjE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAC3C,KAAK,EAAE,WAAW,IAAI,8BAA8B,EACpD,UAAU,EACV,sBAAsB,CACvB,CAAC;QACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAC9B,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,iBAAiB,CAAC,UAAU,EAAE,kCAAkC,EAAE,KAAK,CAAC,CACzE,CACF,CAAC;QAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,yBAAyB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACzD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAElE,OAAO,KAAK,CAAC,CAAC,2BAA2B,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACzE,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACtE,CAAC;QAEF,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,2BAA2B,CAAC,YAAY,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAE/E,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM;aAC9B,eAAe,CAAC;YACf,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SACtC,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,iBAAiB,CACf,QAAQ,EACR,wCAAwC,EACxC,KAAK,CACN,CACF,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAC1D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAE7B,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC,CAAC,CACH,CAAC;AA+DF,MAAM,OAAO,sBAAuB,SAAQ,IAAI,CAAC,WAAW,CAC1D,wBAAwB,CAKxB;CAAG;AAmCL,MAAM,OAAO,iBAAkB,SAAQ,OAAO,CAAC,OAAO,EAGnD,CAAC,wBAAwB,CAAC;CAAG;AAEhC,WAAiB,iBAAiB;IACnB,sBAAI,GAAG,CAClB,OAAiC,EACP,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AAC/D,CAAC,EAJgB,iBAAiB,KAAjB,iBAAiB,QAIjC;AAED,MAAM,aAAa,GAAG,CACpB,QAAuB,EACR,EAAE,CACjB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,eAAe,CAAC,QAAQ,CAAO,CAAC;AAExE,MAAM,uBAAuB,GAAG,CAAC,MAA0B,EAAsB,EAAE,CAAC,CAAC;IACnF,GAAG,MAAM;IACT,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;CACvF,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,QAAuD,EACvD,GAAW,EACX,MAA0B,EACqB,EAAE,CACjD,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;AAEnE,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAA6B,EAAE;IACxE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0C,CAAC;IAEnE,OAAO,iBAAiB,CAAC,IAAI,CAAC;QAC5B,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;YACrD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC;QACJ,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,CACf,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAE/B,OAAO,GAAG,KAAK,SAAS;gBACtB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC;QACJ,gBAAgB,EAAE,CAAC,IAAI,EAAE,EAAE,CACzB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9B,MAAM,GAAG,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAE9D,OAAO,GAAG,KAAK,SAAS;gBACtB,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;gBACf,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;QAChD,CAAC,CAAC;QACJ,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACf,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;aACrB,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC3B,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CACjE;aACA,GAAG,CAAC,uBAAuB,CAAC,CAChC;QACH,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CACtB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CACf,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;aACrB,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAC/B,CAAC,KAAK,CAAC,cAAc,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CACjE;aACA,GAAG,CAAC,uBAAuB,CAAC,CAChC;QACH,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAEzC,IACE,OAAO,KAAK,SAAS;gBACrB,OAAO,CAAC,SAAS,KAAK,SAAS;gBAC/B,OAAO,CAAC,SAAS,KAAK,SAAS,EAC/B,CAAC;gBACD,OAAO,MAAM,CAAC,IAAI,EAA8B,CAAC;YACnD,CAAC;YAED,MAAM,QAAQ,GAAG;gBACf,GAAG,OAAO;gBACV,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,YAAY,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE;aACN,CAAC;YAE/B,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YACtC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YACjF,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAEjE,OAAO,MAAM,CAAC,IAAI,CAAC;gBACjB,QAAQ,EAAE,uBAAuB,CAAC,QAAQ,CAAC;gBAC3C,WAAW,EAAE,uBAAuB,CAAC,KAAK,CAAC,WAAW,CAAC;aACxD,CAAC,CAAC;QACL,CAAC,CAAC;QACJ,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAErC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,OAAO,MAAM,CAAC,IAAI,EAAsB,CAAC;YAC3C,CAAC;YAED,MAAM,OAAO,GAAG;gBACd,GAAG,GAAG;gBACN,eAAe,EAAE,KAAK,CAAC,eAAe;aACV,CAAC;YAE/B,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAElC,OAAO,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAErC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE;oBACvB,GAAG,GAAG;oBACN,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC;iBACzE,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QACJ,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE,CACtB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACf,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;gBACtC,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACpC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE;wBACrB,GAAG,GAAG;wBACN,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,QAAQ,EAAE,kBAAkB,CAC1B,GAAG,CAAC,QAAQ,EACZ,oBAAoB,EACpB,KAAK,CAAC,MAAM,CACb;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC,CAAC;KACL,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CACtE,2BAA2B,CAC5B,CAAC;AAoFF,MAAM,OAAO,2BAA4B,SAAQ,IAAI,CAAC,WAAW,CAC/D,6BAA6B,CAK7B;CAAG;AAoBL,MAAM,OAAO,sBAAuB,SAAQ,OAAO,CAAC,OAAO,EAGxD,CAAC,6BAA6B,CAAC;CAAG;AAErC,WAAiB,sBAAsB;IACxB,2BAAI,GAAG,CAClB,OAAsC,EACP,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;AACzE,CAAC,EAJgB,sBAAsB,KAAtB,sBAAsB,QAItC;AAUD,MAAM,gBAAgB,GAAG,CAAC,MAA0B,EAAoB,EAAE,CAAC,CAAC;IAC1E,EAAE,EAAE,MAAM,CAAC,EAAE;IACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;IAC3B,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;IAC7E,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1E,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;IACnF,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC1E,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS;QACtC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;IAChD,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;CACxE,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,CAClC,SAA0C,EAC1C,OAAe,EACf,KAAe,EACc,EAAE,CAC/B,IAAI,2BAA2B,CAAC;IAC9B,SAAS;IACT,OAAO;IACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,kBAAkB,GAAG,CACzB,YAAgD,EAChD,SAA0C,EACkB,EAAE,CAC9D,YAAY,CAAC,MAAM;KAChB,WAAW,CAAC,YAAY,CAAC,YAAY,IAAI,0BAA0B,CAAC;KACpE,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAC1B,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,SAAS,EACT,qCAAqC,EACrC,KAAK,CACN,CACF,CACF,CAAC;AAEN,MAAM,wBAAwB,GAAG,CAC/B,YAAgD,EACkB,EAAE,CACpE,YAAY,CAAC,MAAM;KAChB,WAAW,CAAC,YAAY,CAAC,aAAa,IAAI,gCAAgC,CAAC;KAC3E,IAAI,CACH,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAChC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,OAAO,EACP,4CAA4C,EAC5C,KAAK,CACN,CACF,CACF,CAAC;AAEN,MAAM,oBAAoB,GAAG,CAC3B,YAAgD,EAChD,SAA0C,EACyC,EAAE,CACrF,YAAY,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,CACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CAAC,SAAS,EAAE,kCAAkC,EAAE,KAAK,CAAC,CAClF,CACF,CAAC;AAEJ,MAAM,gBAAgB,GAAG,CACvB,YAAgD,EAChD,SAA0C,EAC1C,KAAgC,EACoC,EAAE,CACtE,YAAY,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CAAC,SAAS,EAAE,8BAA8B,EAAE,KAAK,CAAC,CAC9E,CACF,CAAC;AAEJ,MAAM,SAAS,GAAG,CAAC,MAA0B,EAAE,GAAe,EAAW,EAAE,CACzE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AAE1C,MAAM,eAAe,GAAG,CACtB,MAAiC,EACjC,MAA2B,EACC,EAAE,CAAC,CAAC;IAChC,IAAI,EAAE,SAAS;IACf,MAAM;IACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;CAC5E,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,CAC5B,YAAgD,EAChD,SAA0C,EAC1C,KAAoE,EACJ,EAAE,CAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CACvE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CAAC,SAAS,EAAE,8BAA8B,EAAE,KAAK,CAAC,CAC9E,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC,CAAC,2BAA2B,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IAClF,CAAC;IAED,OAAO,KAAK,CAAC,KAAK,CAAC;AACrB,CAAC,CAAC,CAAC;AAEL,MAAM,2BAA2B,GAAG,CAClC,YAAgD,EAChD,KAA8C,EAC6B,EAAE,CAC7E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;SAC1C,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;SAChE,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,eAAe,EACf,qCAAqC,EACrC,KAAK,CACN,CACF,CACF,CAAC;IAEJ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACjF,OAAO,KAAK,CAAC,CAAC,2BAA2B,CACvC,eAAe,EACf,gCAAgC,CACjC,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CAAC;AAEL,MAAM,iBAAiB,GAAG,CACxB,YAAgD,EAChD,MAA0B,EAC1B,GAAe,EACyD,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;SAC3B,iBAAiB,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC;SAC1D,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,QAAQ,EACR,oCAAoC,EACpC,KAAK,CACN,CACF,CACF,CAAC;IACJ,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;SAC3B,YAAY,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,GAAG;QACd,MAAM,EAAE,gBAAgB;KACzB,CAAC;SACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,QAAQ,EACR,mDAAmD,EACnD,KAAK,CACN,CACF,CACF,CAAC;IAEJ,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CACrE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,QAAQ,EACR,uCAAuC,EACvC,KAAK,CACN,CACF,CACF,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,YAAY,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/E,SAAS,EAAE,GAAG;KACsB,CAAC;AACzC,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG,CACxC,YAAgD,EACjB,EAAE,CACjC,sBAAsB,CAAC,IAAI,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,qCAAqC,CAAC,CAAC,QAAQ,CAAC,EACtE,KAAK;QAEL,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,wBAAwB,CAAC,YAAY,CAAC,CAAC,CAAC;QACnF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACjE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,gBAAgB,CACxC,YAAY,EACZ,OAAO,EACP,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CACrC,CAAC;QACF,MAAM,GAAG,GAAG;YACV,EAAE;YACF,QAAQ;YACR,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU;YACV,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACzC,CAAC;QAE/B,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CAAC,OAAO,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAC7E,CACF,CAAC;QAEF,OAAO;YACL,KAAK;YACL,YAAY,EAAE,gBAAgB,CAAC,GAAG,CAAC;SACN,CAAC;IAClC,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QACxE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,gBAAgB,CACxC,YAAY,EACZ,QAAQ,EACR,KAAK,CAAC,KAAK,CACZ,CAAC;QACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC,IAAI,CAC/E,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CAAC,QAAQ,EAAE,8BAA8B,EAAE,KAAK,CAAC,CAC7E,CACF,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC,CAAC,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAC5C,YAAY,EACZ,QAAQ,EACR,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CACzC,CAAC;QACF,MAAM,WAAW,GAAG;YAClB,EAAE,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YACxE,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,cAAc;YAC1B,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;SACzC,CAAC;QAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;aAC3C,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC;aACtD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,QAAQ,EACR,gCAAgC,EAChC,KAAK,CACN,CACF,CACF,CAAC;QAEJ,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC5C,CAAC;QAED,OAAO;YACL,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,SAAS;YAChB,YAAY,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;YACzD,aAAa,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;SACnB,CAAC;IACzC,CAAC,CAAC;IACF,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC,oCAAoC,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;QAC3E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;aAC1C,UAAU,CAAC;YACV,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;gBACpC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;SAC9C,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,MAAM,EACN,+BAA+B,EAC/B,KAAK,CACN,CACF,CACF,CAAC;QAEJ,OAAO,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,aAAa,EAAE,MAAM,CAAC,EAAE,CAAC,sCAAsC,CAAC,CAAC,QAAQ,CAAC,EACxE,KAAK;QAEL,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,qBAAqB,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAE1E,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEhE,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;aAC3B,MAAM,CAAC;YACN,EAAE,EAAE,KAAK,CAAC,OAAO;YACjB,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAChE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,QAAQ,EACR,gCAAgC,EAChC,KAAK,CACN,CACF,CACF,CAAC;IACN,CAAC,CAAC;IACF,mBAAmB,EAAE,MAAM,CAAC,EAAE,CAC5B,6CAA6C,CAC9C,CAAC,QAAQ,CAAC,EAAE,KAAK;QAChB,KAAK,CAAC,CAAC,2BAA2B,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAExD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAEhE,KAAK,CAAC,CAAC,YAAY,CAAC,UAAU;aAC3B,YAAY,CAAC;YACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS;YACT,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SAChE,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,2BAA2B,CACzB,eAAe,EACf,uCAAuC,EACvC,KAAK,CACN,CACF,CACF,CAAC;IACN,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAC5E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC;IAC7B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;IAE5C,OAAO,0BAA0B,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;AAC3E,CAAC,CAAC,CACH,CAAC"}