@yielded/auth 0.1.0-beta.1

package/dist/oauth/connectedModels.mjs

@@ -0,0 +1,375 @@
+import { SecurityRevision } from "../sessions/models.mjs";
+import { OAuthProviderKey } from "./schema.mjs";
+import { RequestBindingFlowId } from "../operations/requestBindingModels.mjs";
+import { OAuthCallbackId, OAuthClaimId, OAuthCommandId, OAuthDisplayProfile, OAuthExternalIdentity, OAuthGeneration, OAuthInstant, OAuthModuleId, OAuthProtocolConfiguration, OAuthSealedTransaction, OAuthSignInComplete, OAuthSignInPolicy, OAuthSignInTransactionContext, OAuthTransactionSecrets } from "./signInModels.mjs";
+import { OAuthAccountRevision, OAuthActionAuthorization, OAuthActionDigest } from "./accountsModels.mjs";
+import { Schema } from "effect";
+//#region src/oauth/connectedModels.ts
+const label = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9._:/-]{1,256}$/));
+const duration = Schema.Int.check(Schema.isBetween({
+	minimum: 1e3,
+	maximum: 2592e6
+}));
+const revision = SecurityRevision.check(Schema.isMaxLength(256));
+const OAuthGrantId = label.pipe(Schema.brand("effect-auth/OAuthGrantId"));
+const OAuthPermissionProfileKey = label.pipe(Schema.brand("effect-auth/OAuthPermissionProfileKey"));
+/** Durable authority-issued total order, comparable with cohort cutoffs. Never caller time. */
+const OAuthConnectedOrder = Schema.String.check(Schema.isPattern(/^[0-9]{1,128}$/));
+const OAuthConnectedScopes = Schema.Array(Schema.String.check(Schema.isPattern(/^[\x21\x23-\x5b\x5d-\x7e]{1,256}$/))).check(Schema.isMaxLength(64));
+const OAuthConnectedResources = Schema.Array(Schema.NonEmptyString.check(Schema.isMaxLength(2048))).check(Schema.isMaxLength(16));
+const OAuthConnectedProfile = Schema.Struct({
+	key: OAuthPermissionProfileKey,
+	generation: OAuthGeneration,
+	issuance: Schema.Literals(["active", "retired"]),
+	provider: OAuthProviderKey,
+	clientRegistrationId: label,
+	scopes: OAuthConnectedScopes,
+	resources: OAuthConnectedResources,
+	retention: Schema.Literals(["access-only", "access-and-refresh"]),
+	maximumAccessLifetimeMillis: duration,
+	maximumRefreshLifetimeMillis: Schema.optionalKey(duration),
+	refreshAheadMillis: Schema.Int.check(Schema.isBetween({
+		minimum: 0,
+		maximum: 3e5
+	})),
+	refresh: Schema.Literals([
+		"unsupported",
+		"confidential",
+		"rotating"
+	]),
+	revocation: Schema.Literals(["unsupported", "cohort"])
+});
+const OAuthConnectedPolicy = Schema.Struct({
+	...OAuthSignInPolicy.fields,
+	maximumEvidenceAgeMillis: Schema.Int.check(Schema.isBetween({
+		minimum: 1e3,
+		maximum: 3e5
+	})),
+	refreshClaimLifetimeMillis: OAuthSignInPolicy.fields.claimLifetimeMillis,
+	useAdmissionLifetimeMillis: Schema.Int.check(Schema.isBetween({
+		minimum: 1,
+		maximum: 3e4
+	})),
+	profiles: Schema.NonEmptyArray(OAuthConnectedProfile).check(Schema.isMaxLength(64))
+});
+var OAuthConnectedBusy = class extends Schema.TaggedError()("OAuthConnectedBusy", {}) {};
+var OAuthConnectedReauthorizationRequired = class extends Schema.TaggedError()("OAuthConnectedReauthorizationRequired", {}) {};
+var OAuthConnectedActionRequired = class extends Schema.TaggedError()("OAuthConnectedActionRequired", {}) {};
+const OAuthConnectedConfiguration = Schema.Struct({
+	...OAuthProtocolConfiguration.fields,
+	profile: OAuthConnectedProfile
+});
+const OAuthConnectedIntent = Schema.Union([Schema.TaggedStruct("Connect", {
+	provider: OAuthProviderKey,
+	profileKey: OAuthPermissionProfileKey
+}), Schema.TaggedStruct("Reconnect", {
+	grantId: OAuthGrantId,
+	profileKey: OAuthPermissionProfileKey
+})]);
+const OAuthConnectedBegin = Schema.Struct({
+	flowId: RequestBindingFlowId,
+	commandId: OAuthCommandId,
+	callbackId: OAuthCallbackId,
+	intent: OAuthConnectedIntent,
+	returnTarget: Schema.String.check(Schema.isMaxLength(2048)),
+	actionProof: Schema.optionalKey(Schema.RedactedFromValue(Schema.NonEmptyString.check(Schema.isMaxLength(16384))))
+});
+const OAuthConnectedComplete = Schema.Struct({
+	...OAuthSignInComplete.fields,
+	actionProof: OAuthConnectedBegin.fields.actionProof
+});
+const OAuthConnectedDisconnect = Schema.Struct({
+	commandId: OAuthCommandId,
+	grantId: OAuthGrantId,
+	actionProof: OAuthConnectedBegin.fields.actionProof
+});
+const OAuthConnectedList = Schema.Struct({
+	limit: Schema.Int.check(Schema.isBetween({
+		minimum: 1,
+		maximum: 100
+	})),
+	cursor: Schema.optionalKey(Schema.NonEmptyString.check(Schema.isMaxLength(1024)))
+});
+const OAuthConnectedUse = Schema.Struct({
+	grantId: OAuthGrantId,
+	profileKey: OAuthPermissionProfileKey
+});
+const OAuthConnectedTarget = Schema.Struct({
+	grantId: OAuthGrantId,
+	grantVersion: revision,
+	tokenVersion: revision,
+	cohortGeneration: revision,
+	identity: OAuthExternalIdentity,
+	configuration: OAuthConnectedConfiguration
+});
+const OAuthConnectedTransactionContext = Schema.Struct({
+	...OAuthSignInTransactionContext.fields,
+	namespace: Schema.Literal("effect-auth/oauth-connected-context/v1"),
+	revision: OAuthAccountRevision,
+	profile: OAuthConnectedProfile,
+	grantId: OAuthGrantId,
+	reconnect: Schema.optionalKey(OAuthConnectedTarget),
+	maximumEvidenceAgeMillis: OAuthConnectedPolicy.fields.maximumEvidenceAgeMillis
+});
+const OAuthConnectedPendingFlow = Schema.Struct({
+	context: OAuthConnectedTransactionContext,
+	sealed: OAuthSealedTransaction,
+	retentionUntilMillis: OAuthInstant
+});
+const OAuthConnectedClaim = Schema.Struct({
+	flow: OAuthConnectedPendingFlow,
+	claimId: OAuthClaimId,
+	claimedAtMillis: OAuthInstant,
+	claimExpiresAtMillis: OAuthInstant,
+	order: OAuthConnectedOrder
+});
+const OAuthConnectedActionChallenge = Schema.Struct({
+	moduleId: OAuthModuleId,
+	action: Schema.Literals([
+		"connected-begin",
+		"connected-complete",
+		"connected-disconnect"
+	]),
+	flowId: RequestBindingFlowId,
+	commandId: OAuthCommandId,
+	revision: OAuthAccountRevision,
+	intentDigest: OAuthActionDigest,
+	bindingDigest: OAuthActionDigest
+});
+const OAuthConnectedActionAuthorization = Schema.Struct({
+	...OAuthActionAuthorization.fields,
+	challenge: OAuthConnectedActionChallenge
+});
+const OAuthConnectedUseAuthorization = Schema.Struct({
+	moduleId: OAuthModuleId,
+	revision: OAuthAccountRevision,
+	policyRevision: revision,
+	expiresAtMillis: OAuthInstant,
+	purpose: Schema.Literals(["metadata", "use"]),
+	grantId: Schema.optionalKey(OAuthGrantId),
+	profileKey: Schema.optionalKey(OAuthPermissionProfileKey)
+});
+const token = Schema.RedactedFromValue(Schema.NonEmptyString.check(Schema.isMaxLength(16384)));
+const numericDate = Schema.Finite.check(Schema.isBetween({
+	minimum: 0,
+	maximum: 864e10
+}));
+const OAuthConnectedContinuation = Schema.Union([Schema.TaggedStruct("Oidc", {
+	clientId: Schema.NonEmptyString.check(Schema.isMaxLength(1024)),
+	nonce: OAuthTransactionSecrets.fields.oidcNonce,
+	authTime: Schema.optionalKey(numericDate)
+}), Schema.TaggedStruct("OAuth", {})]);
+const OAuthConnectedTokenMaterial = Schema.Struct({
+	namespace: Schema.Literal("effect-auth/oauth-connected-token-material/v1"),
+	accessToken: token,
+	refreshToken: Schema.optionalKey(token),
+	continuation: OAuthConnectedContinuation
+});
+const OAuthConnectedGrantResponse = Schema.Struct({
+	identity: OAuthExternalIdentity,
+	profile: Schema.optionalKey(OAuthDisplayProfile),
+	scopes: OAuthConnectedScopes,
+	resources: OAuthConnectedResources,
+	accessExpiresAtMillis: Schema.optionalKey(OAuthInstant),
+	refreshExpiresAtMillis: Schema.optionalKey(OAuthInstant),
+	material: OAuthConnectedTokenMaterial
+});
+const OAuthConnectedTokenMetadata = Schema.Struct({
+	scopes: OAuthConnectedScopes,
+	resources: OAuthConnectedResources,
+	accessExpiresAtMillis: Schema.optionalKey(OAuthInstant),
+	refreshExpiresAtMillis: Schema.optionalKey(OAuthInstant),
+	useUntilMillis: OAuthInstant,
+	refreshUseUntilMillis: Schema.optionalKey(OAuthInstant),
+	obtainedAtMillis: OAuthInstant,
+	profile: Schema.optionalKey(OAuthDisplayProfile)
+});
+const OAuthConnectedTokenContext = Schema.Struct({
+	namespace: Schema.Literal("effect-auth/oauth-connected-token-context/v1"),
+	moduleId: OAuthModuleId,
+	subjectId: OAuthAccountRevision.fields.subjectId,
+	identity: OAuthExternalIdentity,
+	configuration: OAuthConnectedConfiguration,
+	grantId: OAuthGrantId,
+	grantVersion: revision,
+	tokenVersion: revision,
+	cohortGeneration: revision,
+	metadata: OAuthConnectedTokenMetadata
+});
+const OAuthConnectedRevocationContext = Schema.Struct({
+	namespace: Schema.Literal("effect-auth/oauth-connected-revocation-context/v1"),
+	jobId: OAuthClaimId,
+	token: OAuthConnectedTokenContext
+});
+const OAuthConnectedProtectionContext = Schema.Union([OAuthConnectedTokenContext, OAuthConnectedRevocationContext]);
+const OAuthConnectedSealedTokens = Schema.Struct({
+	format: Schema.Literal("oauth-connected-xchacha20poly1305-v1"),
+	keyId: OAuthSealedTransaction.fields.keyId,
+	nonce: OAuthSealedTransaction.fields.nonce,
+	ciphertext: Schema.RedactedFromValue(Schema.String.check(Schema.isMinLength(22), Schema.isMaxLength(131094), Schema.isPattern(/^[A-Za-z0-9_-]+$/)))
+});
+const OAuthConnectedStoredGrant = Schema.Struct({
+	context: OAuthConnectedTokenContext,
+	sealed: OAuthConnectedSealedTokens
+});
+const OAuthConnectedDisconnectGrant = Schema.Struct({
+	context: OAuthConnectedTokenContext,
+	sealed: Schema.optionalKey(OAuthConnectedSealedTokens)
+});
+const OAuthConnectedRevocationJob = Schema.Struct({
+	context: OAuthConnectedRevocationContext,
+	sealed: OAuthConnectedSealedTokens
+});
+const OAuthConnectedRefreshClaim = Schema.Struct({
+	grant: OAuthConnectedStoredGrant,
+	claimId: OAuthClaimId,
+	claimedAtMillis: OAuthInstant,
+	claimExpiresAtMillis: OAuthInstant,
+	nextTokenVersion: revision
+});
+const OAuthConnectedSummary = Schema.Struct({
+	grantId: OAuthGrantId,
+	provider: OAuthProviderKey,
+	issuer: OAuthExternalIdentity.fields.issuer,
+	profileKey: OAuthPermissionProfileKey,
+	status: Schema.Literals([
+		"Active",
+		"Refreshing",
+		"ReauthorizationRequired",
+		"Disconnected"
+	]),
+	scopes: OAuthConnectedScopes,
+	accessExpiresAtMillis: Schema.optionalKey(OAuthInstant),
+	useUntilMillis: OAuthInstant,
+	profile: Schema.optionalKey(OAuthDisplayProfile),
+	remoteRevocation: Schema.Literals([
+		"Pending",
+		"Confirmed",
+		"Unsupported",
+		"Unknown"
+	])
+});
+const OAuthConnectedListResult = Schema.Struct({
+	items: Schema.Array(OAuthConnectedSummary).check(Schema.isMaxLength(100)),
+	cursor: OAuthConnectedList.fields.cursor
+});
+const OAuthConnectedResult = Schema.Union([Schema.TaggedStruct("Connected", {
+	grantId: OAuthGrantId,
+	profileKey: OAuthPermissionProfileKey,
+	status: Schema.Literal("Active"),
+	returnTarget: OAuthConnectedTransactionContext.fields.returnTarget
+}), Schema.TaggedStruct("Cancelled", { returnTarget: OAuthConnectedTransactionContext.fields.returnTarget })]);
+const OAuthConnectedDisconnected = Schema.TaggedStruct("Disconnected", {
+	grantId: OAuthGrantId,
+	remoteRevocation: OAuthConnectedSummary.fields.remoteRevocation,
+	affectedGrantCount: Schema.Int.check(Schema.isBetween({
+		minimum: 0,
+		maximum: Number.MAX_SAFE_INTEGER
+	})),
+	replayed: Schema.Boolean
+});
+const OAuthConnectedAccess = Schema.Struct({
+	moduleId: OAuthModuleId,
+	generation: OAuthGeneration,
+	subjectId: OAuthAccountRevision.fields.subjectId,
+	flowId: RequestBindingFlowId,
+	provider: OAuthProviderKey,
+	callbackId: OAuthCallbackId,
+	stateDigest: OAuthConnectedTransactionContext.fields.stateDigest,
+	requestBindingVerifier: OAuthConnectedTransactionContext.fields.requestBindingVerifier,
+	requestBindingExpiresAtMillis: OAuthInstant,
+	responseIssuer: Schema.optionalKey(OAuthExternalIdentity.fields.issuer),
+	nowMillis: OAuthInstant
+});
+const OAuthConnectedIssueDecision = Schema.Union([Schema.TaggedStruct("Issued", { flow: OAuthConnectedPendingFlow }), Schema.TaggedStruct("Rejected", {})]);
+const OAuthConnectedClaimDecision = Schema.Union([Schema.TaggedStruct("Claimed", { claim: OAuthConnectedClaim }), Schema.TaggedStruct("Rejected", {})]);
+const OAuthConnectedGrantInspection = Schema.Union([
+	Schema.TaggedStruct("Target", { cohortGeneration: revision }),
+	Schema.TaggedStruct("Quarantine", { cohortGeneration: revision }),
+	Schema.TaggedStruct("Rejected", {}),
+	Schema.TaggedStruct("Conflict", {})
+]);
+const OAuthConnectedOutcome = Schema.Union([
+	Schema.TaggedStruct("Verified", {
+		grant: OAuthConnectedStoredGrant,
+		cleanup: Schema.optionalKey(OAuthConnectedRevocationJob)
+	}),
+	Schema.TaggedStruct("Quarantined", {
+		grant: OAuthConnectedStoredGrant,
+		cleanup: Schema.optionalKey(OAuthConnectedRevocationJob)
+	}),
+	Schema.TaggedStruct("Cancelled", {}),
+	Schema.TaggedStruct("Rejected", {}),
+	Schema.TaggedStruct("Conflict", {}),
+	Schema.TaggedStruct("Ambiguous", {})
+]);
+const OAuthConnectedSettlementDecision = Schema.Union([
+	Schema.TaggedStruct("Connected", { grant: OAuthConnectedStoredGrant }),
+	Schema.TaggedStruct("Cancelled", {}),
+	Schema.TaggedStruct("Rejected", {}),
+	Schema.TaggedStruct("Conflict", {}),
+	Schema.TaggedStruct("Busy", {}),
+	Schema.TaggedStruct("Ambiguous", {})
+]);
+const OAuthConnectedDisconnectInspection = Schema.Union([
+	Schema.TaggedStruct("Target", {
+		grant: OAuthConnectedDisconnectGrant,
+		revision: OAuthAccountRevision
+	}),
+	Schema.TaggedStruct("Replay", { result: OAuthConnectedDisconnected }),
+	Schema.TaggedStruct("Rejected", {}),
+	Schema.TaggedStruct("Conflict", {})
+]);
+const OAuthConnectedDisconnectDecision = Schema.Union([
+	OAuthConnectedDisconnected,
+	Schema.TaggedStruct("Rejected", {}),
+	Schema.TaggedStruct("Conflict", {})
+]);
+const OAuthConnectedAccessInspection = Schema.Union([
+	Schema.TaggedStruct("Target", { grant: OAuthConnectedStoredGrant }),
+	Schema.TaggedStruct("Busy", {}),
+	Schema.TaggedStruct("ReauthorizationRequired", {}),
+	Schema.TaggedStruct("Rejected", {})
+]);
+const OAuthConnectedRefreshDecision = Schema.Union([
+	Schema.TaggedStruct("Claimed", { claim: OAuthConnectedRefreshClaim }),
+	Schema.TaggedStruct("Busy", {}),
+	Schema.TaggedStruct("ReauthorizationRequired", {}),
+	Schema.TaggedStruct("Rejected", {})
+]);
+const OAuthConnectedRefreshOutcome = Schema.Union([Schema.TaggedStruct("Refreshed", {
+	grant: OAuthConnectedStoredGrant,
+	cleanup: Schema.optionalKey(OAuthConnectedRevocationJob)
+}), Schema.TaggedStruct("ReauthorizationRequired", {})]);
+const OAuthConnectedRefreshSettlement = Schema.Union([
+	Schema.TaggedStruct("Refreshed", { grant: OAuthConnectedStoredGrant }),
+	Schema.TaggedStruct("ReauthorizationRequired", {}),
+	Schema.TaggedStruct("Rejected", {})
+]);
+const OAuthConnectedUseAdmission = Schema.Union([
+	Schema.TaggedStruct("Admitted", {
+		admissionId: OAuthClaimId,
+		grantId: OAuthGrantId,
+		tokenVersion: revision,
+		admittedAtMillis: OAuthInstant,
+		expiresAtMillis: OAuthInstant
+	}),
+	Schema.TaggedStruct("Rejected", {}),
+	Schema.TaggedStruct("Busy", {}),
+	Schema.TaggedStruct("ReauthorizationRequired", {})
+]);
+const OAuthConnectedCleanupResult = Schema.Struct({
+	terminalized: Schema.Int.check(Schema.isBetween({
+		minimum: 0,
+		maximum: 1e3
+	})),
+	removed: Schema.Int.check(Schema.isBetween({
+		minimum: 0,
+		maximum: 1e3
+	})),
+	hasMore: Schema.Boolean
+});
+//#endregion
+export { OAuthConnectedAccess, OAuthConnectedAccessInspection, OAuthConnectedActionAuthorization, OAuthConnectedActionChallenge, OAuthConnectedActionRequired, OAuthConnectedBegin, OAuthConnectedBusy, OAuthConnectedClaim, OAuthConnectedClaimDecision, OAuthConnectedCleanupResult, OAuthConnectedComplete, OAuthConnectedConfiguration, OAuthConnectedContinuation, OAuthConnectedDisconnect, OAuthConnectedDisconnectDecision, OAuthConnectedDisconnectGrant, OAuthConnectedDisconnectInspection, OAuthConnectedDisconnected, OAuthConnectedGrantInspection, OAuthConnectedGrantResponse, OAuthConnectedIntent, OAuthConnectedIssueDecision, OAuthConnectedList, OAuthConnectedListResult, OAuthConnectedOrder, OAuthConnectedOutcome, OAuthConnectedPendingFlow, OAuthConnectedPolicy, OAuthConnectedProfile, OAuthConnectedProtectionContext, OAuthConnectedReauthorizationRequired, OAuthConnectedRefreshClaim, OAuthConnectedRefreshDecision, OAuthConnectedRefreshOutcome, OAuthConnectedRefreshSettlement, OAuthConnectedResources, OAuthConnectedResult, OAuthConnectedRevocationContext, OAuthConnectedRevocationJob, OAuthConnectedScopes, OAuthConnectedSealedTokens, OAuthConnectedSettlementDecision, OAuthConnectedStoredGrant, OAuthConnectedSummary, OAuthConnectedTarget, OAuthConnectedTokenContext, OAuthConnectedTokenMaterial, OAuthConnectedTokenMetadata, OAuthConnectedTransactionContext, OAuthConnectedUse, OAuthConnectedUseAdmission, OAuthConnectedUseAuthorization, OAuthGrantId, OAuthPermissionProfileKey };
+
+//# sourceMappingURL=connectedModels.mjs.map

package/dist/oauth/connectedModels.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectedModels.mjs","names":[],"sources":["../../src/oauth/connectedModels.ts"],"sourcesContent":["import { Schema } from \"effect\";\n\nimport { RequestBindingFlowId } from \"../operations/requestBinding\";\nimport { SecurityRevision } from \"../sessions/models\";\nimport {\n  OAuthAccountRevision,\n  OAuthActionAuthorization,\n  OAuthActionDigest,\n} from \"./accountsModels\";\nimport { OAuthProviderKey } from \"./schema\";\nimport {\n  OAuthCallbackId,\n  OAuthClaimId,\n  OAuthCommandId,\n  OAuthDisplayProfile,\n  OAuthExternalIdentity,\n  OAuthGeneration,\n  OAuthInstant,\n  OAuthModuleId,\n  OAuthProtocolConfiguration,\n  OAuthSealedTransaction,\n  OAuthSignInComplete,\n  OAuthSignInPolicy,\n  OAuthSignInTransactionContext,\n  OAuthTransactionSecrets,\n} from \"./signInModels\";\n\nconst label = Schema.String.check(Schema.isPattern(/^[A-Za-z0-9._:/-]{1,256}$/));\nconst duration = Schema.Int.check(Schema.isBetween({ minimum: 1000, maximum: 2592000000 }));\nconst revision = SecurityRevision.check(Schema.isMaxLength(256));\n\nexport const OAuthGrantId = label.pipe(Schema.brand(\"effect-auth/OAuthGrantId\"));\n\nexport const OAuthPermissionProfileKey = label.pipe(\n  Schema.brand(\"effect-auth/OAuthPermissionProfileKey\"),\n);\n\n/** Durable authority-issued total order, comparable with cohort cutoffs. Never caller time. */\nexport const OAuthConnectedOrder = Schema.String.check(Schema.isPattern(/^[0-9]{1,128}$/));\n\nexport const OAuthConnectedScopes = Schema.Array(\n  Schema.String.check(Schema.isPattern(/^[\\x21\\x23-\\x5b\\x5d-\\x7e]{1,256}$/)),\n).check(Schema.isMaxLength(64));\n\nexport const OAuthConnectedResources = Schema.Array(\n  Schema.NonEmptyString.check(Schema.isMaxLength(2048)),\n).check(Schema.isMaxLength(16));\n\nexport const OAuthConnectedProfile = Schema.Struct({\n  key: OAuthPermissionProfileKey,\n  generation: OAuthGeneration,\n  issuance: Schema.Literals([\"active\", \"retired\"]),\n  provider: OAuthProviderKey,\n  clientRegistrationId: label,\n  scopes: OAuthConnectedScopes,\n  resources: OAuthConnectedResources,\n  retention: Schema.Literals([\"access-only\", \"access-and-refresh\"]),\n  maximumAccessLifetimeMillis: duration,\n  maximumRefreshLifetimeMillis: Schema.optionalKey(duration),\n  refreshAheadMillis: Schema.Int.check(Schema.isBetween({ minimum: 0, maximum: 300000 })),\n  refresh: Schema.Literals([\"unsupported\", \"confidential\", \"rotating\"]),\n  revocation: Schema.Literals([\"unsupported\", \"cohort\"]),\n});\n\nexport type OAuthConnectedProfile = typeof OAuthConnectedProfile.Type;\n\nexport const OAuthConnectedPolicy = Schema.Struct({\n  ...OAuthSignInPolicy.fields,\n  maximumEvidenceAgeMillis: Schema.Int.check(Schema.isBetween({ minimum: 1000, maximum: 300000 })),\n  refreshClaimLifetimeMillis: OAuthSignInPolicy.fields.claimLifetimeMillis,\n  useAdmissionLifetimeMillis: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 30000 })),\n  profiles: Schema.NonEmptyArray(OAuthConnectedProfile).check(Schema.isMaxLength(64)),\n});\n\nexport type OAuthConnectedPolicy = typeof OAuthConnectedPolicy.Type;\n\nexport class OAuthConnectedBusy extends Schema.TaggedError<OAuthConnectedBusy>()(\n  \"OAuthConnectedBusy\",\n  {},\n) {}\n\nexport class OAuthConnectedReauthorizationRequired extends Schema.TaggedError<OAuthConnectedReauthorizationRequired>()(\n  \"OAuthConnectedReauthorizationRequired\",\n  {},\n) {}\n\nexport class OAuthConnectedActionRequired extends Schema.TaggedError<OAuthConnectedActionRequired>()(\n  \"OAuthConnectedActionRequired\",\n  {},\n) {}\n\nexport const OAuthConnectedConfiguration = Schema.Struct({\n  ...OAuthProtocolConfiguration.fields,\n  profile: OAuthConnectedProfile,\n});\n\nexport type OAuthConnectedConfiguration = typeof OAuthConnectedConfiguration.Type;\n\nexport const OAuthConnectedIntent = Schema.Union([\n  Schema.TaggedStruct(\"Connect\", {\n    provider: OAuthProviderKey,\n    profileKey: OAuthPermissionProfileKey,\n  }),\n  Schema.TaggedStruct(\"Reconnect\", {\n    grantId: OAuthGrantId,\n    profileKey: OAuthPermissionProfileKey,\n  }),\n]);\n\nexport const OAuthConnectedBegin = Schema.Struct({\n  flowId: RequestBindingFlowId,\n  commandId: OAuthCommandId,\n  callbackId: OAuthCallbackId,\n  intent: OAuthConnectedIntent,\n  returnTarget: Schema.String.check(Schema.isMaxLength(2048)),\n  actionProof: Schema.optionalKey(\n    Schema.RedactedFromValue(Schema.NonEmptyString.check(Schema.isMaxLength(16384))),\n  ),\n});\n\nexport const OAuthConnectedComplete = Schema.Struct({\n  ...OAuthSignInComplete.fields,\n  actionProof: OAuthConnectedBegin.fields.actionProof,\n});\n\nexport const OAuthConnectedDisconnect = Schema.Struct({\n  commandId: OAuthCommandId,\n  grantId: OAuthGrantId,\n  actionProof: OAuthConnectedBegin.fields.actionProof,\n});\n\nexport const OAuthConnectedList = Schema.Struct({\n  limit: Schema.Int.check(Schema.isBetween({ minimum: 1, maximum: 100 })),\n  cursor: Schema.optionalKey(Schema.NonEmptyString.check(Schema.isMaxLength(1024))),\n});\n\nexport const OAuthConnectedUse = Schema.Struct({\n  grantId: OAuthGrantId,\n  profileKey: OAuthPermissionProfileKey,\n});\n\nexport const OAuthConnectedTarget = Schema.Struct({\n  grantId: OAuthGrantId,\n  grantVersion: revision,\n  tokenVersion: revision,\n  cohortGeneration: revision,\n  identity: OAuthExternalIdentity,\n  configuration: OAuthConnectedConfiguration,\n});\n\nexport type OAuthConnectedTarget = typeof OAuthConnectedTarget.Type;\n\nexport const OAuthConnectedTransactionContext = Schema.Struct({\n  ...OAuthSignInTransactionContext.fields,\n  namespace: Schema.Literal(\"effect-auth/oauth-connected-context/v1\"),\n  revision: OAuthAccountRevision,\n  profile: OAuthConnectedProfile,\n  grantId: OAuthGrantId,\n  reconnect: Schema.optionalKey(OAuthConnectedTarget),\n  maximumEvidenceAgeMillis: OAuthConnectedPolicy.fields.maximumEvidenceAgeMillis,\n});\n\nexport type OAuthConnectedTransactionContext = typeof OAuthConnectedTransactionContext.Type;\n\nexport const OAuthConnectedPendingFlow = Schema.Struct({\n  context: OAuthConnectedTransactionContext,\n  sealed: OAuthSealedTransaction,\n  retentionUntilMillis: OAuthInstant,\n});\n\nexport type OAuthConnectedPendingFlow = typeof OAuthConnectedPendingFlow.Type;\n\nexport const OAuthConnectedClaim = Schema.Struct({\n  flow: OAuthConnectedPendingFlow,\n  claimId: OAuthClaimId,\n  claimedAtMillis: OAuthInstant,\n  claimExpiresAtMillis: OAuthInstant,\n  order: OAuthConnectedOrder,\n});\n\nexport type OAuthConnectedClaim = typeof OAuthConnectedClaim.Type;\n\nexport const OAuthConnectedActionChallenge = Schema.Struct({\n  moduleId: OAuthModuleId,\n  action: Schema.Literals([\"connected-begin\", \"connected-complete\", \"connected-disconnect\"]),\n  flowId: RequestBindingFlowId,\n  commandId: OAuthCommandId,\n  revision: OAuthAccountRevision,\n  intentDigest: OAuthActionDigest,\n  bindingDigest: OAuthActionDigest,\n});\n\nexport type OAuthConnectedActionChallenge = typeof OAuthConnectedActionChallenge.Type;\n\nexport const OAuthConnectedActionAuthorization = Schema.Struct({\n  ...OAuthActionAuthorization.fields,\n  challenge: OAuthConnectedActionChallenge,\n});\n\nexport type OAuthConnectedActionAuthorization = typeof OAuthConnectedActionAuthorization.Type;\n\nexport const OAuthConnectedUseAuthorization = Schema.Struct({\n  moduleId: OAuthModuleId,\n  revision: OAuthAccountRevision,\n  policyRevision: revision,\n  expiresAtMillis: OAuthInstant,\n  purpose: Schema.Literals([\"metadata\", \"use\"]),\n  grantId: Schema.optionalKey(OAuthGrantId),\n  profileKey: Schema.optionalKey(OAuthPermissionProfileKey),\n});\n\nexport type OAuthConnectedUseAuthorization = typeof OAuthConnectedUseAuthorization.Type;\n\nconst token = Schema.RedactedFromValue(Schema.NonEmptyString.check(Schema.isMaxLength(16384)));\nconst numericDate = Schema.Finite.check(Schema.isBetween({ minimum: 0, maximum: 8640000000000 }));\n\nexport const OAuthConnectedContinuation = Schema.Union([\n  Schema.TaggedStruct(\"Oidc\", {\n    clientId: Schema.NonEmptyString.check(Schema.isMaxLength(1024)),\n    nonce: OAuthTransactionSecrets.fields.oidcNonce,\n    authTime: Schema.optionalKey(numericDate),\n  }),\n  Schema.TaggedStruct(\"OAuth\", {}),\n]);\n\nexport const OAuthConnectedTokenMaterial = Schema.Struct({\n  namespace: Schema.Literal(\"effect-auth/oauth-connected-token-material/v1\"),\n  accessToken: token,\n  refreshToken: Schema.optionalKey(token),\n  continuation: OAuthConnectedContinuation,\n});\n\nexport type OAuthConnectedTokenMaterial = typeof OAuthConnectedTokenMaterial.Type;\n\nexport const OAuthConnectedGrantResponse = Schema.Struct({\n  identity: OAuthExternalIdentity,\n  profile: Schema.optionalKey(OAuthDisplayProfile),\n  scopes: OAuthConnectedScopes,\n  resources: OAuthConnectedResources,\n  accessExpiresAtMillis: Schema.optionalKey(OAuthInstant),\n  refreshExpiresAtMillis: Schema.optionalKey(OAuthInstant),\n  material: OAuthConnectedTokenMaterial,\n});\n\nexport type OAuthConnectedGrantResponse = typeof OAuthConnectedGrantResponse.Type;\n\nexport const OAuthConnectedTokenMetadata = Schema.Struct({\n  scopes: OAuthConnectedScopes,\n  resources: OAuthConnectedResources,\n  accessExpiresAtMillis: Schema.optionalKey(OAuthInstant),\n  refreshExpiresAtMillis: Schema.optionalKey(OAuthInstant),\n  useUntilMillis: OAuthInstant,\n  refreshUseUntilMillis: Schema.optionalKey(OAuthInstant),\n  obtainedAtMillis: OAuthInstant,\n  profile: Schema.optionalKey(OAuthDisplayProfile),\n});\n\nexport const OAuthConnectedTokenContext = Schema.Struct({\n  namespace: Schema.Literal(\"effect-auth/oauth-connected-token-context/v1\"),\n  moduleId: OAuthModuleId,\n  subjectId: OAuthAccountRevision.fields.subjectId,\n  identity: OAuthExternalIdentity,\n  configuration: OAuthConnectedConfiguration,\n  grantId: OAuthGrantId,\n  grantVersion: revision,\n  tokenVersion: revision,\n  cohortGeneration: revision,\n  metadata: OAuthConnectedTokenMetadata,\n});\n\nexport type OAuthConnectedTokenContext = typeof OAuthConnectedTokenContext.Type;\n\nexport const OAuthConnectedRevocationContext = Schema.Struct({\n  namespace: Schema.Literal(\"effect-auth/oauth-connected-revocation-context/v1\"),\n  jobId: OAuthClaimId,\n  token: OAuthConnectedTokenContext,\n});\n\nexport type OAuthConnectedRevocationContext = typeof OAuthConnectedRevocationContext.Type;\n\nexport const OAuthConnectedProtectionContext = Schema.Union([\n  OAuthConnectedTokenContext,\n  OAuthConnectedRevocationContext,\n]);\n\nexport type OAuthConnectedProtectionContext = typeof OAuthConnectedProtectionContext.Type;\n\nexport const OAuthConnectedSealedTokens = Schema.Struct({\n  format: Schema.Literal(\"oauth-connected-xchacha20poly1305-v1\"),\n  keyId: OAuthSealedTransaction.fields.keyId,\n  nonce: OAuthSealedTransaction.fields.nonce,\n  ciphertext: Schema.RedactedFromValue(\n    Schema.String.check(\n      Schema.isMinLength(22),\n      Schema.isMaxLength(131094),\n      Schema.isPattern(/^[A-Za-z0-9_-]+$/),\n    ),\n  ),\n});\n\nexport type OAuthConnectedSealedTokens = typeof OAuthConnectedSealedTokens.Type;\n\nexport const OAuthConnectedStoredGrant = Schema.Struct({\n  context: OAuthConnectedTokenContext,\n  sealed: OAuthConnectedSealedTokens,\n});\n\nexport type OAuthConnectedStoredGrant = typeof OAuthConnectedStoredGrant.Type;\n\nexport const OAuthConnectedDisconnectGrant = Schema.Struct({\n  context: OAuthConnectedTokenContext,\n  sealed: Schema.optionalKey(OAuthConnectedSealedTokens),\n});\n\nexport type OAuthConnectedDisconnectGrant = typeof OAuthConnectedDisconnectGrant.Type;\n\nexport const OAuthConnectedRevocationJob = Schema.Struct({\n  context: OAuthConnectedRevocationContext,\n  sealed: OAuthConnectedSealedTokens,\n});\n\nexport type OAuthConnectedRevocationJob = typeof OAuthConnectedRevocationJob.Type;\n\nexport const OAuthConnectedRefreshClaim = Schema.Struct({\n  grant: OAuthConnectedStoredGrant,\n  claimId: OAuthClaimId,\n  claimedAtMillis: OAuthInstant,\n  claimExpiresAtMillis: OAuthInstant,\n  nextTokenVersion: revision,\n});\n\nexport type OAuthConnectedRefreshClaim = typeof OAuthConnectedRefreshClaim.Type;\n\nexport const OAuthConnectedSummary = Schema.Struct({\n  grantId: OAuthGrantId,\n  provider: OAuthProviderKey,\n  issuer: OAuthExternalIdentity.fields.issuer,\n  profileKey: OAuthPermissionProfileKey,\n  status: Schema.Literals([\"Active\", \"Refreshing\", \"ReauthorizationRequired\", \"Disconnected\"]),\n  scopes: OAuthConnectedScopes,\n  accessExpiresAtMillis: Schema.optionalKey(OAuthInstant),\n  useUntilMillis: OAuthInstant,\n  profile: Schema.optionalKey(OAuthDisplayProfile),\n  remoteRevocation: Schema.Literals([\"Pending\", \"Confirmed\", \"Unsupported\", \"Unknown\"]),\n});\n\nexport const OAuthConnectedListResult = Schema.Struct({\n  items: Schema.Array(OAuthConnectedSummary).check(Schema.isMaxLength(100)),\n  cursor: OAuthConnectedList.fields.cursor,\n});\n\nexport const OAuthConnectedResult = Schema.Union([\n  Schema.TaggedStruct(\"Connected\", {\n    grantId: OAuthGrantId,\n    profileKey: OAuthPermissionProfileKey,\n    status: Schema.Literal(\"Active\"),\n    returnTarget: OAuthConnectedTransactionContext.fields.returnTarget,\n  }),\n  Schema.TaggedStruct(\"Cancelled\", {\n    returnTarget: OAuthConnectedTransactionContext.fields.returnTarget,\n  }),\n]);\n\nexport const OAuthConnectedDisconnected = Schema.TaggedStruct(\"Disconnected\", {\n  grantId: OAuthGrantId,\n  remoteRevocation: OAuthConnectedSummary.fields.remoteRevocation,\n  affectedGrantCount: Schema.Int.check(\n    Schema.isBetween({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER }),\n  ),\n  replayed: Schema.Boolean,\n});\n\nexport const OAuthConnectedAccess = Schema.Struct({\n  moduleId: OAuthModuleId,\n  generation: OAuthGeneration,\n  subjectId: OAuthAccountRevision.fields.subjectId,\n  flowId: RequestBindingFlowId,\n  provider: OAuthProviderKey,\n  callbackId: OAuthCallbackId,\n  stateDigest: OAuthConnectedTransactionContext.fields.stateDigest,\n  requestBindingVerifier: OAuthConnectedTransactionContext.fields.requestBindingVerifier,\n  requestBindingExpiresAtMillis: OAuthInstant,\n  responseIssuer: Schema.optionalKey(OAuthExternalIdentity.fields.issuer),\n  nowMillis: OAuthInstant,\n});\n\nexport type OAuthConnectedAccess = typeof OAuthConnectedAccess.Type;\n\nexport const OAuthConnectedIssueDecision = Schema.Union([\n  Schema.TaggedStruct(\"Issued\", { flow: OAuthConnectedPendingFlow }),\n  Schema.TaggedStruct(\"Rejected\", {}),\n]);\n\nexport const OAuthConnectedClaimDecision = Schema.Union([\n  Schema.TaggedStruct(\"Claimed\", { claim: OAuthConnectedClaim }),\n  Schema.TaggedStruct(\"Rejected\", {}),\n]);\n\nexport const OAuthConnectedGrantInspection = Schema.Union([\n  Schema.TaggedStruct(\"Target\", { cohortGeneration: revision }),\n  Schema.TaggedStruct(\"Quarantine\", { cohortGeneration: revision }),\n  Schema.TaggedStruct(\"Rejected\", {}),\n  Schema.TaggedStruct(\"Conflict\", {}),\n]);\n\nexport const OAuthConnectedOutcome = Schema.Union([\n  Schema.TaggedStruct(\"Verified\", {\n    grant: OAuthConnectedStoredGrant,\n    cleanup: Schema.optionalKey(OAuthConnectedRevocationJob),\n  }),\n  Schema.TaggedStruct(\"Quarantined\", {\n    grant: OAuthConnectedStoredGrant,\n    cleanup: Schema.optionalKey(OAuthConnectedRevocationJob),\n  }),\n  Schema.TaggedStruct(\"Cancelled\", {}),\n  Schema.TaggedStruct(\"Rejected\", {}),\n  Schema.TaggedStruct(\"Conflict\", {}),\n  Schema.TaggedStruct(\"Ambiguous\", {}),\n]);\n\nexport type OAuthConnectedOutcome = typeof OAuthConnectedOutcome.Type;\n\nexport const OAuthConnectedSettlementDecision = Schema.Union([\n  Schema.TaggedStruct(\"Connected\", { grant: OAuthConnectedStoredGrant }),\n  Schema.TaggedStruct(\"Cancelled\", {}),\n  Schema.TaggedStruct(\"Rejected\", {}),\n  Schema.TaggedStruct(\"Conflict\", {}),\n  Schema.TaggedStruct(\"Busy\", {}),\n  Schema.TaggedStruct(\"Ambiguous\", {}),\n]);\n\nexport const OAuthConnectedDisconnectInspection = Schema.Union([\n  Schema.TaggedStruct(\"Target\", {\n    grant: OAuthConnectedDisconnectGrant,\n    revision: OAuthAccountRevision,\n  }),\n  Schema.TaggedStruct(\"Replay\", { result: OAuthConnectedDisconnected }),\n  Schema.TaggedStruct(\"Rejected\", {}),\n  Schema.TaggedStruct(\"Conflict\", {}),\n]);\n\nexport const OAuthConnectedDisconnectDecision = Schema.Union([\n  OAuthConnectedDisconnected,\n  Schema.TaggedStruct(\"Rejected\", {}),\n  Schema.TaggedStruct(\"Conflict\", {}),\n]);\n\nexport const OAuthConnectedAccessInspection = Schema.Union([\n  Schema.TaggedStruct(\"Target\", { grant: OAuthConnectedStoredGrant }),\n  Schema.TaggedStruct(\"Busy\", {}),\n  Schema.TaggedStruct(\"ReauthorizationRequired\", {}),\n  Schema.TaggedStruct(\"Rejected\", {}),\n]);\n\nexport const OAuthConnectedRefreshDecision = Schema.Union([\n  Schema.TaggedStruct(\"Claimed\", { claim: OAuthConnectedRefreshClaim }),\n  Schema.TaggedStruct(\"Busy\", {}),\n  Schema.TaggedStruct(\"ReauthorizationRequired\", {}),\n  Schema.TaggedStruct(\"Rejected\", {}),\n]);\n\nexport const OAuthConnectedRefreshOutcome = Schema.Union([\n  Schema.TaggedStruct(\"Refreshed\", {\n    grant: OAuthConnectedStoredGrant,\n    cleanup: Schema.optionalKey(OAuthConnectedRevocationJob),\n  }),\n  Schema.TaggedStruct(\"ReauthorizationRequired\", {}),\n]);\n\nexport type OAuthConnectedRefreshOutcome = typeof OAuthConnectedRefreshOutcome.Type;\n\nexport const OAuthConnectedRefreshSettlement = Schema.Union([\n  Schema.TaggedStruct(\"Refreshed\", { grant: OAuthConnectedStoredGrant }),\n  Schema.TaggedStruct(\"ReauthorizationRequired\", {}),\n  Schema.TaggedStruct(\"Rejected\", {}),\n]);\n\nexport const OAuthConnectedUseAdmission = Schema.Union([\n  Schema.TaggedStruct(\"Admitted\", {\n    admissionId: OAuthClaimId,\n    grantId: OAuthGrantId,\n    tokenVersion: revision,\n    admittedAtMillis: OAuthInstant,\n    expiresAtMillis: OAuthInstant,\n  }),\n  Schema.TaggedStruct(\"Rejected\", {}),\n  Schema.TaggedStruct(\"Busy\", {}),\n  Schema.TaggedStruct(\"ReauthorizationRequired\", {}),\n]);\n\nexport const OAuthConnectedCleanupResult = Schema.Struct({\n  terminalized: Schema.Int.check(Schema.isBetween({ minimum: 0, maximum: 1000 })),\n  removed: Schema.Int.check(Schema.isBetween({ minimum: 0, maximum: 1000 })),\n  hasMore: Schema.Boolean,\n});\n"],"mappings":";;;;;;;AA2BA,MAAM,QAAQ,OAAO,OAAO,MAAM,OAAO,UAAU,2BAA2B,CAAC;AAC/E,MAAM,WAAW,OAAO,IAAI,MAAM,OAAO,UAAU;CAAE,SAAS;CAAM,SAAS;AAAW,CAAC,CAAC;AAC1F,MAAM,WAAW,iBAAiB,MAAM,OAAO,YAAY,GAAG,CAAC;AAE/D,MAAa,eAAe,MAAM,KAAK,OAAO,MAAM,0BAA0B,CAAC;AAE/E,MAAa,4BAA4B,MAAM,KAC7C,OAAO,MAAM,uCAAuC,CACtD;;AAGA,MAAa,sBAAsB,OAAO,OAAO,MAAM,OAAO,UAAU,gBAAgB,CAAC;AAEzF,MAAa,uBAAuB,OAAO,MACzC,OAAO,OAAO,MAAM,OAAO,UAAU,mCAAmC,CAAC,CAC3E,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;AAE9B,MAAa,0BAA0B,OAAO,MAC5C,OAAO,eAAe,MAAM,OAAO,YAAY,IAAI,CAAC,CACtD,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;AAE9B,MAAa,wBAAwB,OAAO,OAAO;CACjD,KAAK;CACL,YAAY;CACZ,UAAU,OAAO,SAAS,CAAC,UAAU,SAAS,CAAC;CAC/C,UAAU;CACV,sBAAsB;CACtB,QAAQ;CACR,WAAW;CACX,WAAW,OAAO,SAAS,CAAC,eAAe,oBAAoB,CAAC;CAChE,6BAA6B;CAC7B,8BAA8B,OAAO,YAAY,QAAQ;CACzD,oBAAoB,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAO,CAAC,CAAC;CACtF,SAAS,OAAO,SAAS;EAAC;EAAe;EAAgB;CAAU,CAAC;CACpE,YAAY,OAAO,SAAS,CAAC,eAAe,QAAQ,CAAC;AACvD,CAAC;AAID,MAAa,uBAAuB,OAAO,OAAO;CAChD,GAAG,kBAAkB;CACrB,0BAA0B,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAM,SAAS;CAAO,CAAC,CAAC;CAC/F,4BAA4B,kBAAkB,OAAO;CACrD,4BAA4B,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAM,CAAC,CAAC;CAC7F,UAAU,OAAO,cAAc,qBAAqB,CAAC,CAAC,MAAM,OAAO,YAAY,EAAE,CAAC;AACpF,CAAC;AAID,IAAa,qBAAb,cAAwC,OAAO,YAAgC,CAAC,CAC9E,sBACA,CAAC,CACH,CAAC,CAAC,CAAC;AAEH,IAAa,wCAAb,cAA2D,OAAO,YAAmD,CAAC,CACpH,yCACA,CAAC,CACH,CAAC,CAAC,CAAC;AAEH,IAAa,+BAAb,cAAkD,OAAO,YAA0C,CAAC,CAClG,gCACA,CAAC,CACH,CAAC,CAAC,CAAC;AAEH,MAAa,8BAA8B,OAAO,OAAO;CACvD,GAAG,2BAA2B;CAC9B,SAAS;AACX,CAAC;AAID,MAAa,uBAAuB,OAAO,MAAM,CAC/C,OAAO,aAAa,WAAW;CAC7B,UAAU;CACV,YAAY;AACd,CAAC,GACD,OAAO,aAAa,aAAa;CAC/B,SAAS;CACT,YAAY;AACd,CAAC,CACH,CAAC;AAED,MAAa,sBAAsB,OAAO,OAAO;CAC/C,QAAQ;CACR,WAAW;CACX,YAAY;CACZ,QAAQ;CACR,cAAc,OAAO,OAAO,MAAM,OAAO,YAAY,IAAI,CAAC;CAC1D,aAAa,OAAO,YAClB,OAAO,kBAAkB,OAAO,eAAe,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC,CACjF;AACF,CAAC;AAED,MAAa,yBAAyB,OAAO,OAAO;CAClD,GAAG,oBAAoB;CACvB,aAAa,oBAAoB,OAAO;AAC1C,CAAC;AAED,MAAa,2BAA2B,OAAO,OAAO;CACpD,WAAW;CACX,SAAS;CACT,aAAa,oBAAoB,OAAO;AAC1C,CAAC;AAED,MAAa,qBAAqB,OAAO,OAAO;CAC9C,OAAO,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAI,CAAC,CAAC;CACtE,QAAQ,OAAO,YAAY,OAAO,eAAe,MAAM,OAAO,YAAY,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,MAAa,oBAAoB,OAAO,OAAO;CAC7C,SAAS;CACT,YAAY;AACd,CAAC;AAED,MAAa,uBAAuB,OAAO,OAAO;CAChD,SAAS;CACT,cAAc;CACd,cAAc;CACd,kBAAkB;CAClB,UAAU;CACV,eAAe;AACjB,CAAC;AAID,MAAa,mCAAmC,OAAO,OAAO;CAC5D,GAAG,8BAA8B;CACjC,WAAW,OAAO,QAAQ,wCAAwC;CAClE,UAAU;CACV,SAAS;CACT,SAAS;CACT,WAAW,OAAO,YAAY,oBAAoB;CAClD,0BAA0B,qBAAqB,OAAO;AACxD,CAAC;AAID,MAAa,4BAA4B,OAAO,OAAO;CACrD,SAAS;CACT,QAAQ;CACR,sBAAsB;AACxB,CAAC;AAID,MAAa,sBAAsB,OAAO,OAAO;CAC/C,MAAM;CACN,SAAS;CACT,iBAAiB;CACjB,sBAAsB;CACtB,OAAO;AACT,CAAC;AAID,MAAa,gCAAgC,OAAO,OAAO;CACzD,UAAU;CACV,QAAQ,OAAO,SAAS;EAAC;EAAmB;EAAsB;CAAsB,CAAC;CACzF,QAAQ;CACR,WAAW;CACX,UAAU;CACV,cAAc;CACd,eAAe;AACjB,CAAC;AAID,MAAa,oCAAoC,OAAO,OAAO;CAC7D,GAAG,yBAAyB;CAC5B,WAAW;AACb,CAAC;AAID,MAAa,iCAAiC,OAAO,OAAO;CAC1D,UAAU;CACV,UAAU;CACV,gBAAgB;CAChB,iBAAiB;CACjB,SAAS,OAAO,SAAS,CAAC,YAAY,KAAK,CAAC;CAC5C,SAAS,OAAO,YAAY,YAAY;CACxC,YAAY,OAAO,YAAY,yBAAyB;AAC1D,CAAC;AAID,MAAM,QAAQ,OAAO,kBAAkB,OAAO,eAAe,MAAM,OAAO,YAAY,KAAK,CAAC,CAAC;AAC7F,MAAM,cAAc,OAAO,OAAO,MAAM,OAAO,UAAU;CAAE,SAAS;CAAG,SAAS;AAAc,CAAC,CAAC;AAEhG,MAAa,6BAA6B,OAAO,MAAM,CACrD,OAAO,aAAa,QAAQ;CAC1B,UAAU,OAAO,eAAe,MAAM,OAAO,YAAY,IAAI,CAAC;CAC9D,OAAO,wBAAwB,OAAO;CACtC,UAAU,OAAO,YAAY,WAAW;AAC1C,CAAC,GACD,OAAO,aAAa,SAAS,CAAC,CAAC,CACjC,CAAC;AAED,MAAa,8BAA8B,OAAO,OAAO;CACvD,WAAW,OAAO,QAAQ,+CAA+C;CACzE,aAAa;CACb,cAAc,OAAO,YAAY,KAAK;CACtC,cAAc;AAChB,CAAC;AAID,MAAa,8BAA8B,OAAO,OAAO;CACvD,UAAU;CACV,SAAS,OAAO,YAAY,mBAAmB;CAC/C,QAAQ;CACR,WAAW;CACX,uBAAuB,OAAO,YAAY,YAAY;CACtD,wBAAwB,OAAO,YAAY,YAAY;CACvD,UAAU;AACZ,CAAC;AAID,MAAa,8BAA8B,OAAO,OAAO;CACvD,QAAQ;CACR,WAAW;CACX,uBAAuB,OAAO,YAAY,YAAY;CACtD,wBAAwB,OAAO,YAAY,YAAY;CACvD,gBAAgB;CAChB,uBAAuB,OAAO,YAAY,YAAY;CACtD,kBAAkB;CAClB,SAAS,OAAO,YAAY,mBAAmB;AACjD,CAAC;AAED,MAAa,6BAA6B,OAAO,OAAO;CACtD,WAAW,OAAO,QAAQ,8CAA8C;CACxE,UAAU;CACV,WAAW,qBAAqB,OAAO;CACvC,UAAU;CACV,eAAe;CACf,SAAS;CACT,cAAc;CACd,cAAc;CACd,kBAAkB;CAClB,UAAU;AACZ,CAAC;AAID,MAAa,kCAAkC,OAAO,OAAO;CAC3D,WAAW,OAAO,QAAQ,mDAAmD;CAC7E,OAAO;CACP,OAAO;AACT,CAAC;AAID,MAAa,kCAAkC,OAAO,MAAM,CAC1D,4BACA,+BACF,CAAC;AAID,MAAa,6BAA6B,OAAO,OAAO;CACtD,QAAQ,OAAO,QAAQ,sCAAsC;CAC7D,OAAO,uBAAuB,OAAO;CACrC,OAAO,uBAAuB,OAAO;CACrC,YAAY,OAAO,kBACjB,OAAO,OAAO,MACZ,OAAO,YAAY,EAAE,GACrB,OAAO,YAAY,MAAM,GACzB,OAAO,UAAU,kBAAkB,CACrC,CACF;AACF,CAAC;AAID,MAAa,4BAA4B,OAAO,OAAO;CACrD,SAAS;CACT,QAAQ;AACV,CAAC;AAID,MAAa,gCAAgC,OAAO,OAAO;CACzD,SAAS;CACT,QAAQ,OAAO,YAAY,0BAA0B;AACvD,CAAC;AAID,MAAa,8BAA8B,OAAO,OAAO;CACvD,SAAS;CACT,QAAQ;AACV,CAAC;AAID,MAAa,6BAA6B,OAAO,OAAO;CACtD,OAAO;CACP,SAAS;CACT,iBAAiB;CACjB,sBAAsB;CACtB,kBAAkB;AACpB,CAAC;AAID,MAAa,wBAAwB,OAAO,OAAO;CACjD,SAAS;CACT,UAAU;CACV,QAAQ,sBAAsB,OAAO;CACrC,YAAY;CACZ,QAAQ,OAAO,SAAS;EAAC;EAAU;EAAc;EAA2B;CAAc,CAAC;CAC3F,QAAQ;CACR,uBAAuB,OAAO,YAAY,YAAY;CACtD,gBAAgB;CAChB,SAAS,OAAO,YAAY,mBAAmB;CAC/C,kBAAkB,OAAO,SAAS;EAAC;EAAW;EAAa;EAAe;CAAS,CAAC;AACtF,CAAC;AAED,MAAa,2BAA2B,OAAO,OAAO;CACpD,OAAO,OAAO,MAAM,qBAAqB,CAAC,CAAC,MAAM,OAAO,YAAY,GAAG,CAAC;CACxE,QAAQ,mBAAmB,OAAO;AACpC,CAAC;AAED,MAAa,uBAAuB,OAAO,MAAM,CAC/C,OAAO,aAAa,aAAa;CAC/B,SAAS;CACT,YAAY;CACZ,QAAQ,OAAO,QAAQ,QAAQ;CAC/B,cAAc,iCAAiC,OAAO;AACxD,CAAC,GACD,OAAO,aAAa,aAAa,EAC/B,cAAc,iCAAiC,OAAO,aACxD,CAAC,CACH,CAAC;AAED,MAAa,6BAA6B,OAAO,aAAa,gBAAgB;CAC5E,SAAS;CACT,kBAAkB,sBAAsB,OAAO;CAC/C,oBAAoB,OAAO,IAAI,MAC7B,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS,OAAO;CAAiB,CAAC,CACnE;CACA,UAAU,OAAO;AACnB,CAAC;AAED,MAAa,uBAAuB,OAAO,OAAO;CAChD,UAAU;CACV,YAAY;CACZ,WAAW,qBAAqB,OAAO;CACvC,QAAQ;CACR,UAAU;CACV,YAAY;CACZ,aAAa,iCAAiC,OAAO;CACrD,wBAAwB,iCAAiC,OAAO;CAChE,+BAA+B;CAC/B,gBAAgB,OAAO,YAAY,sBAAsB,OAAO,MAAM;CACtE,WAAW;AACb,CAAC;AAID,MAAa,8BAA8B,OAAO,MAAM,CACtD,OAAO,aAAa,UAAU,EAAE,MAAM,0BAA0B,CAAC,GACjE,OAAO,aAAa,YAAY,CAAC,CAAC,CACpC,CAAC;AAED,MAAa,8BAA8B,OAAO,MAAM,CACtD,OAAO,aAAa,WAAW,EAAE,OAAO,oBAAoB,CAAC,GAC7D,OAAO,aAAa,YAAY,CAAC,CAAC,CACpC,CAAC;AAED,MAAa,gCAAgC,OAAO,MAAM;CACxD,OAAO,aAAa,UAAU,EAAE,kBAAkB,SAAS,CAAC;CAC5D,OAAO,aAAa,cAAc,EAAE,kBAAkB,SAAS,CAAC;CAChE,OAAO,aAAa,YAAY,CAAC,CAAC;CAClC,OAAO,aAAa,YAAY,CAAC,CAAC;AACpC,CAAC;AAED,MAAa,wBAAwB,OAAO,MAAM;CAChD,OAAO,aAAa,YAAY;EAC9B,OAAO;EACP,SAAS,OAAO,YAAY,2BAA2B;CACzD,CAAC;CACD,OAAO,aAAa,eAAe;EACjC,OAAO;EACP,SAAS,OAAO,YAAY,2BAA2B;CACzD,CAAC;CACD,OAAO,aAAa,aAAa,CAAC,CAAC;CACnC,OAAO,aAAa,YAAY,CAAC,CAAC;CAClC,OAAO,aAAa,YAAY,CAAC,CAAC;CAClC,OAAO,aAAa,aAAa,CAAC,CAAC;AACrC,CAAC;AAID,MAAa,mCAAmC,OAAO,MAAM;CAC3D,OAAO,aAAa,aAAa,EAAE,OAAO,0BAA0B,CAAC;CACrE,OAAO,aAAa,aAAa,CAAC,CAAC;CACnC,OAAO,aAAa,YAAY,CAAC,CAAC;CAClC,OAAO,aAAa,YAAY,CAAC,CAAC;CAClC,OAAO,aAAa,QAAQ,CAAC,CAAC;CAC9B,OAAO,aAAa,aAAa,CAAC,CAAC;AACrC,CAAC;AAED,MAAa,qCAAqC,OAAO,MAAM;CAC7D,OAAO,aAAa,UAAU;EAC5B,OAAO;EACP,UAAU;CACZ,CAAC;CACD,OAAO,aAAa,UAAU,EAAE,QAAQ,2BAA2B,CAAC;CACpE,OAAO,aAAa,YAAY,CAAC,CAAC;CAClC,OAAO,aAAa,YAAY,CAAC,CAAC;AACpC,CAAC;AAED,MAAa,mCAAmC,OAAO,MAAM;CAC3D;CACA,OAAO,aAAa,YAAY,CAAC,CAAC;CAClC,OAAO,aAAa,YAAY,CAAC,CAAC;AACpC,CAAC;AAED,MAAa,iCAAiC,OAAO,MAAM;CACzD,OAAO,aAAa,UAAU,EAAE,OAAO,0BAA0B,CAAC;CAClE,OAAO,aAAa,QAAQ,CAAC,CAAC;CAC9B,OAAO,aAAa,2BAA2B,CAAC,CAAC;CACjD,OAAO,aAAa,YAAY,CAAC,CAAC;AACpC,CAAC;AAED,MAAa,gCAAgC,OAAO,MAAM;CACxD,OAAO,aAAa,WAAW,EAAE,OAAO,2BAA2B,CAAC;CACpE,OAAO,aAAa,QAAQ,CAAC,CAAC;CAC9B,OAAO,aAAa,2BAA2B,CAAC,CAAC;CACjD,OAAO,aAAa,YAAY,CAAC,CAAC;AACpC,CAAC;AAED,MAAa,+BAA+B,OAAO,MAAM,CACvD,OAAO,aAAa,aAAa;CAC/B,OAAO;CACP,SAAS,OAAO,YAAY,2BAA2B;AACzD,CAAC,GACD,OAAO,aAAa,2BAA2B,CAAC,CAAC,CACnD,CAAC;AAID,MAAa,kCAAkC,OAAO,MAAM;CAC1D,OAAO,aAAa,aAAa,EAAE,OAAO,0BAA0B,CAAC;CACrE,OAAO,aAAa,2BAA2B,CAAC,CAAC;CACjD,OAAO,aAAa,YAAY,CAAC,CAAC;AACpC,CAAC;AAED,MAAa,6BAA6B,OAAO,MAAM;CACrD,OAAO,aAAa,YAAY;EAC9B,aAAa;EACb,SAAS;EACT,cAAc;EACd,kBAAkB;EAClB,iBAAiB;CACnB,CAAC;CACD,OAAO,aAAa,YAAY,CAAC,CAAC;CAClC,OAAO,aAAa,QAAQ,CAAC,CAAC;CAC9B,OAAO,aAAa,2BAA2B,CAAC,CAAC;AACnD,CAAC;AAED,MAAa,8BAA8B,OAAO,OAAO;CACvD,cAAc,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAK,CAAC,CAAC;CAC9E,SAAS,OAAO,IAAI,MAAM,OAAO,UAAU;EAAE,SAAS;EAAG,SAAS;CAAK,CAAC,CAAC;CACzE,SAAS,OAAO;AAClB,CAAC"}