alchemy 2.0.0-beta.test-export-fix-4 → 2.0.0-cli-bundle-fix.1

package/lib/Cloudflare/Auth/AuthProvider.js

@@ -0,0 +1,385 @@
+import * as cfAccounts from "@distilled.cloud/cloudflare/accounts";
+import * as CfCredentialsModule from "@distilled.cloud/cloudflare/Credentials";
+import * as Console from "effect/Console";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Layer from "effect/Layer";
+import * as Match from "effect/Match";
+import * as Redacted from "effect/Redacted";
+import * as FetchHttpClient from "effect/unstable/http/FetchHttpClient";
+import * as HttpClient from "effect/unstable/http/HttpClient";
+import { AuthError, AuthProviderLayer, } from "../../Auth/AuthProvider.js";
+import { deleteCredentials, displayRedacted, readCredentials, writeCredentials, } from "../../Auth/Credentials.js";
+import { getEnv, getEnvRedacted, getEnvRequired, retryOnce, } from "../../Auth/Env.js";
+import * as Clank from "../../Util/Clank.js";
+import * as OAuthClient from "./OAuthClient.js";
+const options = [
+    {
+        value: "oauth",
+        label: "OAuth",
+        hint: "recommended — browser-based login with automatic token refresh",
+    },
+    {
+        value: "env",
+        label: "Environment Variables",
+        hint: "CLOUDFLARE_API_TOKEN or CLOUDFLARE_API_KEY + CLOUDFLARE_EMAIL",
+    },
+    {
+        value: "stored",
+        label: "Stored",
+        hint: "stored in ~/.alchemy/credentials",
+    },
+];
+export const CLOUDFLARE_AUTH_PROVIDER_NAME = "Cloudflare";
+/**
+ * Layer that registers the Cloudflare {@link AuthProvider} into the
+ * {@link AuthProviders} registry when built. Include this in the Cloudflare
+ * `providers()` layer so `alchemy login` can discover it.
+ */
+export const CloudflareAuth = AuthProviderLayer()(CLOUDFLARE_AUTH_PROVIDER_NAME, {
+    configure: (profileName, ctx) => configureCredentials(profileName, ctx),
+    logout: (profileName, config) => logout(profileName, config),
+    login: (profileName, config) => login(profileName, config),
+    prettyPrint: (profileName, config) => prettyPrint(profileName, config),
+    read: (profileName, config) => resolveCredentials(profileName, config),
+});
+const resolveCredentials = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, Effect.fnUntraced(function* () {
+    const accountId = yield* getEnvRequired("CLOUDFLARE_ACCOUNT_ID");
+    const apiToken = yield* getEnvRedacted("CLOUDFLARE_API_TOKEN");
+    if (apiToken) {
+        return {
+            type: "apiToken",
+            apiToken,
+            accountId,
+            source: { type: "env" },
+        };
+    }
+    const apiKey = yield* getEnvRedacted("CLOUDFLARE_API_KEY");
+    const email = yield* getEnvRedacted("CLOUDFLARE_EMAIL");
+    if (apiKey && email) {
+        return {
+            type: "apiKey",
+            apiKey,
+            email,
+            accountId,
+            source: { type: "env" },
+        };
+    }
+    return yield* new AuthError({
+        message: "Cloudflare env credentials not found. Set CLOUDFLARE_API_TOKEN or CLOUDFLARE_API_KEY + CLOUDFLARE_EMAIL.",
+    });
+})), Match.when({ method: "stored" }, () => readCredentials(profileName, "cf-stored").pipe(Effect.flatMap((creds) => creds == null
+    ? Effect.fail(new AuthError({
+        message: "Cloudflare stored credentials not found. Run: alchemy-effect login --configure",
+    }))
+    : Effect.succeed(Match.value(creds).pipe(Match.when({ type: "apiToken" }, (c) => ({
+        type: "apiToken",
+        apiToken: Redacted.make(c.apiToken),
+        accountId: c.accountId,
+        source: { type: "stored" },
+    })), Match.when({ type: "apiKey" }, (c) => ({
+        type: "apiKey",
+        apiKey: Redacted.make(c.apiKey),
+        email: Redacted.make(c.email),
+        accountId: c.accountId,
+        source: { type: "stored" },
+    })), Match.exhaustive))))), Match.when({ method: "oauth" }, (cfg) => Effect.gen(function* () {
+    const creds = yield* readCredentials(profileName, "cf-oauth");
+    if (creds == null || creds.type !== "oauth") {
+        return yield* Effect.fail(new AuthError({
+            message: "Cloudflare OAuth credentials not found. Run: alchemy login",
+        }));
+    }
+    // Refresh proactively if the token has expired (or is within
+    // 10s of expiring). Persist the refreshed creds so subsequent
+    // resolves don't repeat the round-trip.
+    const fresh = creds.expires > Date.now() + 10_000
+        ? creds
+        : yield* OAuthClient.refresh(creds).pipe(Effect.tap((refreshed) => writeCredentials(profileName, "cf-oauth", refreshed)), Effect.mapError((e) => new AuthError({
+            message: "Cloudflare OAuth refresh failed. Run: alchemy login",
+            cause: e,
+        })));
+    return {
+        type: "oauth",
+        accessToken: Redacted.make(fresh.access),
+        expires: fresh.expires,
+        accountId: cfg.accountId,
+        source: { type: "oauth" },
+    };
+})), Match.exhaustive);
+const logout = (profileName, config) => Match.value(config).pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "stored" }, () => deleteCredentials(profileName, "cf-stored").pipe(Effect.andThen(Clank.success("Cloudflare: stored credentials removed")))), Match.when({ method: "oauth" }, () => readCredentials(profileName, "cf-oauth").pipe(Effect.tap((creds) => creds?.type === "oauth"
+    ? OAuthClient.revoke(creds).pipe(Effect.catchTag("OAuthError", (err) => Clank.warn(`Cloudflare: could not revoke OAuth token: ${err.errorDescription}`)))
+    : Effect.void), Effect.andThen(deleteCredentials(profileName, "cf-oauth")), Effect.andThen(Clank.success("Cloudflare: OAuth credentials removed.")))), Match.exhaustive);
+const login = (profileName, config) => Match.value(config)
+    .pipe(Match.when({ method: "env" }, () => Effect.void), Match.when({ method: "stored" }, () => readCredentials(profileName, "cf-stored").pipe(Effect.flatMap((creds) => creds == null ? loginStored(profileName) : Effect.void))), Match.when({ method: "oauth" }, (c) => Effect.gen(function* () {
+    const creds = yield* readCredentials(profileName, "cf-oauth");
+    if (creds?.type === "oauth" && creds.expires > Date.now() + 10_000) {
+        yield* Clank.info("Cloudflare: OAuth credentials are still valid.");
+        return;
+    }
+    if (creds?.type === "oauth") {
+        yield* Clank.info("Cloudflare: refreshing OAuth credentials...");
+        yield* OAuthClient.refresh(creds).pipe(Effect.flatMap((refreshed) => writeCredentials(profileName, "cf-oauth", refreshed).pipe(Effect.andThen(Clank.success("Cloudflare: OAuth credentials refreshed.")))), Effect.catchTag("OAuthError", () => oauthLogin(profileName, c.scopes).pipe(Effect.asVoid)));
+        return;
+    }
+    yield* oauthLogin(profileName, c.scopes);
+})), Match.exhaustive)
+    .pipe(Effect.mapError((e) => new AuthError({ message: "login failed", cause: e })));
+const configureCredentials = (profileName, ctx) => Effect.gen(function* () {
+    if (ctx.ci) {
+        return { method: "env" };
+    }
+    return yield* configureInteractive(profileName);
+}).pipe(Effect.mapError((e) => new AuthError({
+    message: "failed to configure credentials",
+    cause: e,
+})));
+const configureInteractive = (profileName) => Clank.select({
+    message: "Cloudflare authentication method",
+    options,
+}).pipe(Effect.flatMap((method) => Match.value(method).pipe(Match.when("env", () => Effect.succeed({ method: "env" })), Match.when("oauth", () => configureOAuth(profileName)), Match.when("stored", () => loginStored(profileName)), Match.exhaustive)));
+const configureOAuth = Effect.fnUntraced(function* (profileName) {
+    const scopes = yield* promptOAuthScopes();
+    const oauthCreds = yield* oauthLogin(profileName, scopes);
+    const accountId = yield* selectAccount(oauthCreds.access).pipe(Effect.mapError((e) => new AuthError({
+        message: "Cloudflare: could not list accounts",
+        cause: e,
+    })));
+    return {
+        method: "oauth",
+        scopes,
+        accountId,
+    };
+});
+const loginStored = Effect.fnUntraced(function* (profileName) {
+    const credentialType = yield* Clank.select({
+        message: "Cloudflare credential type",
+        options: [
+            { value: "apiToken", label: "API Token", hint: "recommended" },
+            { value: "apiKey", label: "API Key + Email" },
+        ],
+    }).pipe(retryOnce);
+    return yield* Match.value(credentialType).pipe(Match.when("apiToken", () => Effect.gen(function* () {
+        const apiToken = yield* Clank.password({
+            message: "Cloudflare API Token",
+            validate: (v) => (v.length === 0 ? "Required" : undefined),
+        }).pipe(retryOnce);
+        const accountId = yield* promptAccountId();
+        yield* writeCredentials(profileName, "cf-stored", { type: "apiToken", apiToken, accountId });
+        yield* Clank.success("Cloudflare: credentials saved.");
+        return {
+            method: "stored",
+            credentialType: "apiToken",
+        };
+    })), Match.when("apiKey", () => Effect.gen(function* () {
+        const apiKey = yield* Clank.text({
+            message: "Cloudflare API Key",
+            validate: (v) => (v.length === 0 ? "Required" : undefined),
+        }).pipe(retryOnce);
+        const email = yield* Clank.text({
+            message: "Cloudflare Email",
+            validate: (v) => (v.length === 0 ? "Required" : undefined),
+        }).pipe(retryOnce);
+        const accountId = yield* promptAccountId();
+        yield* writeCredentials(profileName, "cf-stored", { type: "apiKey", apiKey, email, accountId });
+        yield* Clank.success("Cloudflare: credentials saved.");
+        return {
+            method: "stored",
+            credentialType: "apiKey",
+        };
+    })), Match.exhaustive);
+});
+const oauthLogin = (profileName, scopes) => Effect.gen(function* () {
+    const authorization = OAuthClient.authorize([...scopes, "offline_access"]);
+    yield* Clank.info("Cloudflare: opening browser for OAuth login...");
+    yield* Clank.info(authorization.url);
+    yield* Clank.openUrl(authorization.url).pipe(Effect.catch(() => Clank.warn("Cloudflare: could not open browser automatically. Please open the URL above manually.")));
+    yield* Clank.info("Cloudflare: waiting for authorization (up to 5 minutes)...");
+    const credentials = yield* OAuthClient.callback(authorization);
+    yield* writeCredentials(profileName, "cf-oauth", credentials);
+    yield* Clank.success("Cloudflare: OAuth credentials saved.");
+    return credentials;
+});
+const promptAccountId = () => getEnv("CLOUDFLARE_ACCOUNT_ID").pipe(Effect.flatMap((envAccountId) => Clank.text({
+    message: "Cloudflare Account ID (Enter to skip)",
+    placeholder: envAccountId ?? "",
+    defaultValue: envAccountId ?? "",
+}).pipe(retryOnce)));
+const promptOAuthScopes = () => Clank.confirm({
+    message: "Customize OAuth scopes? (default covers typical use cases)",
+    initialValue: false,
+}).pipe(retryOnce, Effect.flatMap((customize) => {
+    if (!customize)
+        return Effect.succeed([...DEFAULT_SCOPES]);
+    return Clank.multiselect({
+        message: "Select OAuth scopes",
+        initialValues: DEFAULT_SCOPES,
+        options: Object.entries(ALL_SCOPES).map(([value, hint]) => ({
+            value: value,
+            label: value,
+            hint,
+        })),
+        required: true,
+    }).pipe(Effect.map((s) => s), retryOnce);
+}));
+const withOAuthCredentials = (accessToken, effect) => Effect.provide(effect, Layer.mergeAll(CfCredentialsModule.fromOAuth({
+    load: Effect.succeed({ accessToken }),
+    refresh: () => Effect.die("refresh not expected during account selection"),
+}), FetchHttpClient.layer));
+const selectAccount = (accessToken) => Effect.gen(function* () {
+    const list = yield* cfAccounts.listAccounts;
+    const response = yield* list({});
+    const accounts = response.result;
+    if (accounts.length === 0) {
+        yield* new AuthError({
+            message: "Cloudflare: no accounts found for this credential.",
+        });
+    }
+    if (accounts.length === 1) {
+        const account = accounts[0];
+        yield* Clank.info(`Cloudflare: using account: ${account.name} (${account.id})`);
+        return account.id;
+    }
+    return yield* Clank.select({
+        message: "Select a Cloudflare account",
+        options: accounts.map((a) => ({
+            value: a.id,
+            label: a.name,
+            hint: a.id,
+        })),
+    }).pipe(retryOnce);
+}).pipe((e) => withOAuthCredentials(accessToken, e));
+const prettyPrint = (profileName, config) => resolveCredentials(profileName, config).pipe(Effect.tap((creds) => {
+    const sourceStr = creds.source.details
+        ? `${creds.source.type} - ${creds.source.details}`
+        : creds.source.type;
+    return Match.value(creds).pipe(Match.when({ type: "apiToken" }, (c) => Effect.all([
+        Console.log(`  apiToken: ${displayRedacted(c.apiToken, 9)}`),
+        Console.log(`  accountId: ${c.accountId}`),
+        Console.log(`  source: ${sourceStr}`),
+    ])), Match.when({ type: "apiKey" }, (c) => Effect.all([
+        Console.log(`  apiKey: ${displayRedacted(c.apiKey)}`),
+        Console.log(`  email:  ${displayRedacted(c.email)}`),
+        Console.log(`  accountId: ${c.accountId}`),
+        Console.log(`  source: ${sourceStr}`),
+    ])), Match.when({ type: "oauth" }, (c) => {
+        const remainingMs = c.expires - Date.now();
+        const expiresAt = new Date(c.expires).toISOString();
+        const expiresStr = remainingMs <= 0
+            ? `expired (${expiresAt})`
+            : `in ${Duration.format(Duration.millis(remainingMs))} (${expiresAt})`;
+        return Effect.all([
+            Console.log(`  accessToken: ${displayRedacted(c.accessToken)}`),
+            Console.log(`  expires: ${expiresStr}`),
+            Console.log(`  accountId: ${c.accountId}`),
+            Console.log(`  source: ${sourceStr}`),
+        ]);
+    }), Match.exhaustive);
+}), Effect.catch((e) => Console.error(`  Failed to retrieve credentials: ${e}`)));
+export const ALL_SCOPES = {
+    "access:read": "See Cloudflare Access data such as zones, applications, certificates, device postures, groups, identity providers, login counts, organizations, policies, service tokens, and users",
+    "access:write": "See and change Cloudflare Access data such as zones, applications, certificates, device postures, groups, identity providers, login counts, organizations, policies, service tokens, and users",
+    "account:read": "See your account info such as account details, analytics, and memberships",
+    "agw:read": "Grants read level access to Agents Gateway",
+    "agw:run": "Grants run level access to Agents Gateway",
+    "agw:write": "Grants read and write level access to Agents Gateway",
+    "ai:read": "Grants read level access to Workers AI",
+    "ai:write": "Grants write level access to Workers AI",
+    "aiaudit:read": "Grants read level access to AI Audit",
+    "aiaudit:write": "Grants write level access to AI Audit",
+    "aig:read": "Grants read level access to AI Gateway",
+    "aig:write": "Grants write level access to AI Gateway",
+    "auditlogs:read": "View Cloudflare Account Audit Logs",
+    "browser:read": "Grants read level access to Browser Rendering",
+    "browser:write": "Grants write level access to Browser Rendering",
+    "cfone:read": "Grants read level access to Cloudforce One data",
+    "cfone:write": "Grants write level access to Cloudforce One data",
+    "cloudchamber:write": "See and make changes to Cloudchamber",
+    "connectivity:admin": "See, change, and bind to Connectivity Directory services, including creating services targeting Cloudflare Tunnel",
+    "connectivity:bind": "read, list, and bind to Connectivity Directory services, as well as read and list Cloudflare Tunnels",
+    "connectivity:read": "See Connectivity Directory services and Cloudflare Tunnels",
+    "constellation:write": "Grants write access to Constellation configuration and models",
+    "containers:write": "See and make changes to Workers Containers",
+    "d1:write": "See and make changes to D1",
+    "dex:read": "Grants read level access to Cloudflare DEX",
+    "dex:write": "Grants write level access to Cloudflare DEX",
+    "dns_analytics:read": "Grants read level access to Cloudflare DNS Analytics",
+    "dns_records:edit": "Grants edit level access to dns records",
+    "dns_records:read": "Grants read level access to dns records",
+    "dns_settings:read": "Grants read level access to Cloudflare DNS Settings",
+    "firstpartytags:write": "Can see, edit and publish Google tag gateway configuration.",
+    "lb:edit": "Grants edit level access to lb and lb pools",
+    "lb:read": "Grants read level access to lb and lb pools",
+    "logpush:read": "See Cloudflare Logpush data",
+    "logpush:write": "See and change Cloudflare Logpush data",
+    "notification:read": "View Cloudflare Notifications",
+    "notification:write": "View and Modify Cloudflare Notifications",
+    "pages:read": "See Cloudflare Pages projects, settings and deployments",
+    "pages:write": "See and change Cloudflare Pages projects, settings and deployments",
+    "pipelines:read": "Grants read level access to Cloudflare Pipelines",
+    "pipelines:setup": "Grants permission to generate R2 tokens for Workers Pipelines",
+    "pipelines:write": "Grants write level access to Cloudflare Pipelines",
+    "query_cache:write": "See and make changes to Hyperdrive",
+    "queues:write": "See and change Cloudflare Queues settings and data",
+    "r2_catalog:write": "Grants write level access to R2 Data Catalog",
+    "radar:read": "Grants access to read Cloudflare Radar data",
+    "ai-search:read": "Grants read level access to AI Search",
+    "ai-search:write": "Grants write level access to AI Search",
+    "ai-search:run": "Grants run level access to AI Search",
+    "secrets_store:read": "Grants read level access to Secrets Store",
+    "secrets_store:write": "Grants write level access to Secrets Store",
+    "ssl_certs:write": "Grants read and write access to SSL MTLS certificates or Certificate Store",
+    "sso-connector:read": "See Cloudflare SSO connectors",
+    "sso-connector:write": "See Cloudflare SSO connectors to toggle activation and deactivation of SSO",
+    "teams:pii": "See personally identifiable Cloudflare Teams data",
+    "teams:read": "See Cloudflare Teams data such as zones, gateway, and argo tunnel details",
+    "teams:secure_location": "See all DNS Location data but can only change secure DNS Locations",
+    "teams:write": "See and change Cloudflare Teams data such as zones, gateway, and argo tunnel details",
+    "url_scanner:read": "Grants read level access to URL Scanner",
+    "url_scanner:write": "Grants write level access to URL Scanner",
+    "user:read": "See your user info such as name, email address, and account memberships",
+    "vectorize:write": "See and make changes to Vectorize",
+    "workers:read": "See Cloudflare Workers data such as zones, KV storage, R2 storage, scripts, and routes",
+    "workers:write": "See and change Cloudflare Workers data such as zones, KV storage, R2 storage, scripts, and routes",
+    "workers_builds:read": "See Cloudflare Workers Builds data such as builds, build configuration, and build logs",
+    "workers_builds:write": "See and change Cloudflare Workers Builds data such as builds, build configuration, and build logs",
+    "workers_kv:write": "See and change Cloudflare Workers KV Storage data such as keys and namespaces",
+    "workers_observability:read": "Grants read access to Cloudflare Workers Observability",
+    "workers_observability_telemetry:write": "Grants write access to Cloudflare Workers Observability Telemetry API",
+    "workers_routes:write": "See and change Cloudflare Workers data such as filters and routes",
+    "workers_scripts:write": "See and change Cloudflare Workers scripts, durable objects, subdomains, triggers, and tail data",
+    "workers_tail:read": "See Cloudflare Workers tail and script data",
+    "zone:read": "Grants read level access to account zone",
+};
+export const DEFAULT_SCOPES = [
+    "account:read",
+    "ai-search:write",
+    "ai-search:run",
+    "ai:write",
+    "cloudchamber:write",
+    "connectivity:admin",
+    "containers:write",
+    "d1:write",
+    "pages:write",
+    "pipelines:write",
+    "queues:write",
+    "secrets_store:write",
+    "ssl_certs:write",
+    "user:read",
+    "vectorize:write",
+    "workers_kv:write",
+    "workers_routes:write",
+    "workers_scripts:write",
+    "workers_tail:read",
+    "workers:write",
+    "zone:read",
+];
+export const OAUTH_CLIENT_ID = "6d8c2255-0773-45f6-b376-2914632e6f91";
+export const OAUTH_REDIRECT_URI = "http://localhost:9976/auth/callback";
+export const OAUTH_ENDPOINTS = {
+    authorize: "https://dash.cloudflare.com/oauth2/authorize",
+    token: "https://dash.cloudflare.com/oauth2/token",
+    revoke: "https://dash.cloudflare.com/oauth2/revoke",
+};
+//# sourceMappingURL=AuthProvider.js.map

package/lib/Cloudflare/Auth/AuthProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthProvider.js","sourceRoot":"","sources":["../../../src/Cloudflare/Auth/AuthProvider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,UAAU,MAAM,sCAAsC,CAAC;AACnE,OAAO,KAAK,mBAAmB,MAAM,yCAAyC,CAAC;AAC/E,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,eAAe,MAAM,sCAAsC,CAAC;AACxE,OAAO,KAAK,UAAU,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EACL,SAAS,EACT,iBAAiB,GAElB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,MAAM,EACN,cAAc,EACd,cAAc,EACd,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,KAAK,MAAM,qBAAqB,CAAC;AAC7C,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAEhD,MAAM,OAAO,GAIR;IACH;QACE,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,gEAAgE;KACvE;IACD;QACE,KAAK,EAAE,KAAK;QACZ,KAAK,EAAE,uBAAuB;QAC9B,IAAI,EAAE,+DAA+D;KACtE;IACD;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,kCAAkC;KACzC;CACF,CAAC;AAkCF,MAAM,CAAC,MAAM,6BAA6B,GAAG,YAAY,CAAC;AAE1D;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,EAG5C,CAAC,6BAA6B,EAAE;IACjC,SAAS,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,GAAG,CAAC;IACvE,MAAM,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC;IAC5D,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC;IAC1D,WAAW,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC;IACtE,IAAI,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC;CACvE,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,WAAmB,EACnB,MAA4B,EAK5B,EAAE,CACF,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CACR,EAAE,MAAM,EAAE,KAAK,EAAE,EACjB,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC;IACzB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;IAC/D,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,UAAmB;YACzB,QAAQ;YACR,SAAS;YACT,MAAM,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE;SACjC,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IACxD,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,QAAiB;YACvB,MAAM;YACN,KAAK;YACL,SAAS;YACT,MAAM,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE;SACjC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;QAC1B,OAAO,EACL,0GAA0G;KAC7G,CAAC,CAAC;AACL,CAAC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,eAAe,CACb,WAAW,EACX,WAAW,CACZ,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI;IACX,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,SAAS,CAAC;QACZ,OAAO,EACL,gFAAgF;KACnF,CAAC,CACH;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CACrB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,IAAI,EAAE,UAAmB;QACzB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnC,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;KACpC,CAAC,CAAC,EACH,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,IAAI,EAAE,QAAiB;QACvB,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/B,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7B,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;KACpC,CAAC,CAAC,EACH,KAAK,CAAC,UAAU,CACjB,CACF,CACN,CACF,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CACtC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAClC,WAAW,EACX,UAAU,CACX,CAAC;IACF,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,SAAS,CAAC;YACZ,OAAO,EACL,4DAA4D;SAC/D,CAAC,CACH,CAAC;IACJ,CAAC;IACD,6DAA6D;IAC7D,8DAA8D;IAC9D,wCAAwC;IACxC,MAAM,KAAK,GACT,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM;QACjC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CACpC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CACvB,gBAAgB,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CACrD,EACD,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;YACZ,OAAO,EACL,qDAAqD;YACvD,KAAK,EAAE,CAAC;SACT,CAAC,CACL,CACF,CAAC;IACR,OAAO;QACL,IAAI,EAAE,OAAgB;QACtB,WAAW,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACxC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,EAAE,IAAI,EAAE,OAAgB,EAAE;KACnC,CAAC;AACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AAEJ,MAAM,MAAM,GAAG,CAAC,WAAmB,EAAE,MAA4B,EAAE,EAAE,CACnE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,IAAI,CAC9C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,CACxE,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CACnC,eAAe,CACb,WAAW,EACX,UAAU,CACX,CAAC,IAAI,CACJ,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACnB,KAAK,EAAE,IAAI,KAAK,OAAO;IACrB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAC5B,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,CACpC,KAAK,CAAC,IAAI,CACR,6CAA6C,GAAG,CAAC,gBAAgB,EAAE,CACpE,CACF,CACF;IACH,CAAC,CAAC,MAAM,CAAC,IAAI,CAChB,EACD,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,EAC1D,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,CACxE,CACF,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AAEJ,MAAM,KAAK,GAAG,CAAC,WAAmB,EAAE,MAA4B,EAAE,EAAE,CAClE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;KAChB,IAAI,CACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAChD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,CACpC,eAAe,CACb,WAAW,EACX,WAAW,CACZ,CAAC,IAAI,CACJ,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CACvD,CACF,CACF,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAClC,WAAW,EACX,UAAU,CACX,CAAC;IAEF,IAAI,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QACnE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,IAAI,KAAK,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QACjE,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CACpC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3B,gBAAgB,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,CACvD,MAAM,CAAC,OAAO,CACZ,KAAK,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAC1D,CACF,CACF,EACD,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,CACjC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CACtD,CACF,CAAC;QACF,OAAO;IACT,CAAC;IAED,KAAK,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC,CAAC,CACH,EACD,KAAK,CAAC,UAAU,CACjB;KACA,IAAI,CACH,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC5D,CACF,CAAC;AAEN,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,GAAqB,EAAE,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;QACX,OAAO,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;IACZ,OAAO,EAAE,iCAAiC;IAC1C,KAAK,EAAE,CAAC;CACT,CAAC,CACL,CACF,CAAC;AAEJ,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,EAAE,CACnD,KAAK,CAAC,MAAM,CAAC;IACX,OAAO,EAAE,kCAAkC;IAC3C,OAAO;CACR,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC,CAAC,EACnE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,EACtD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,EACpD,KAAK,CAAC,UAAU,CACjB,CACF,CACF,CAAC;AAEJ,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAmB;IACrE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,iBAAiB,EAAE,CAAC;IAE1C,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAE1D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,QAAQ,CACb,CAAC,CAAC,EAAE,EAAE,CACJ,IAAI,SAAS,CAAC;QACZ,OAAO,EAAE,qCAAqC;QAC9C,KAAK,EAAE,CAAC;KACT,CAAC,CACL,CACF,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,OAAgB;QACxB,MAAM;QACN,SAAS;KACV,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAmB;IAClE,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACzC,OAAO,EAAE,4BAA4B;QACrC,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,UAAmB,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE;YACvE,EAAE,KAAK,EAAE,QAAiB,EAAE,KAAK,EAAE,iBAAiB,EAAE;SACvD;KACF,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnB,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,CAC5C,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;YACrC,OAAO,EAAE,sBAAsB;YAC/B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;QAE3C,KAAK,CAAC,CAAC,gBAAgB,CACrB,WAAW,EACX,WAAW,EACX,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,CAC1C,CAAC;QACF,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACvD,OAAO;YACL,MAAM,EAAE,QAAiB;YACzB,cAAc,EAAE,UAAmB;SACpC,CAAC;IACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CACxB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC/B,OAAO,EAAE,oBAAoB;YAC7B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEnB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;QAE3C,KAAK,CAAC,CAAC,gBAAgB,CACrB,WAAW,EACX,WAAW,EACX,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAC7C,CAAC;QACF,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC;QACvD,OAAO;YACL,MAAM,EAAE,QAAiB;YACzB,cAAc,EAAE,QAAiB;SAClC,CAAC;IACJ,CAAC,CAAC,CACH,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,CAAC,WAAmB,EAAE,MAAgB,EAAE,EAAE,CAC3D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,aAAa,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,GAAG,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAE3E,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACpE,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAChB,KAAK,CAAC,IAAI,CACR,uFAAuF,CACxF,CACF,CACF,CAAC;IACF,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CACf,4DAA4D,CAC7D,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC/D,KAAK,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC9D,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC;IAC7D,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC,CAAC;AAEL,MAAM,eAAe,GAAG,GAAG,EAAE,CAC3B,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAClC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,EAAE,CAC9B,KAAK,CAAC,IAAI,CAAC;IACT,OAAO,EAAE,uCAAuC;IAChD,WAAW,EAAE,YAAY,IAAI,EAAE;IAC/B,YAAY,EAAE,YAAY,IAAI,EAAE;CACjC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CACnB,CACF,CAAC;AAEJ,MAAM,iBAAiB,GAAG,GAAG,EAAE,CAC7B,KAAK,CAAC,OAAO,CAAC;IACZ,OAAO,EAAE,4DAA4D;IACrE,YAAY,EAAE,KAAK;CACpB,CAAC,CAAC,IAAI,CACL,SAAS,EACT,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE;IAC3B,IAAI,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC;IAC3D,OAAO,KAAK,CAAC,WAAW,CAAC;QACvB,OAAO,EAAE,qBAAqB;QAC9B,aAAa,EAAE,cAA0B;QACzC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1D,KAAK,EAAE,KAAe;YACtB,KAAK,EAAE,KAAK;YACZ,IAAI;SACL,CAAC,CAAC;QACH,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAa,CAAC,EAChC,SAAS,CACV,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,oBAAoB,GAAG,CAC3B,WAAmB,EACnB,MAIC,EACoB,EAAE,CACvB,MAAM,CAAC,OAAO,CACZ,MAAM,EACN,KAAK,CAAC,QAAQ,CACZ,mBAAmB,CAAC,SAAS,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC;IACrC,OAAO,EAAE,GAAG,EAAE,CACZ,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC;CAC9D,CAAC,EACF,eAAe,CAAC,KAAK,CACtB,CACF,CAAC;AAEJ,MAAM,aAAa,GAAG,CAAC,WAAmB,EAAE,EAAE,CAC5C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC;IAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;YACnB,OAAO,EAAE,oDAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC7B,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CACf,8BAA8B,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,EAAE,GAAG,CAC7D,CAAC;QACF,OAAO,OAAO,CAAC,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;QACzB,OAAO,EAAE,6BAA6B;QACtC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5B,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,IAAI;YACb,IAAI,EAAE,CAAC,CAAC,EAAE;SACX,CAAC,CAAC;KACJ,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACrB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AAEvD,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAE,MAA4B,EAAE,EAAE,CACxE,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;IACnB,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO;QACpC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE;QAClD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;IACtB,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,eAAe,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,EAAE,CAAC;KACtC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CACnC,MAAM,CAAC,GAAG,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,aAAa,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,aAAa,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,EAAE,CAAC;KACtC,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,UAAU,GACd,WAAW,IAAI,CAAC;YACd,CAAC,CAAC,YAAY,SAAS,GAAG;YAC1B,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,SAAS,GAAG,CAAC;QAC3E,OAAO,MAAM,CAAC,GAAG,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,kBAAkB,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,aAAa,SAAS,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,EACF,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC,CAAC,EACF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,EAAE,CAAC,CACxD,CACF,CAAC;AAEJ,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,aAAa,EACX,qLAAqL;IACvL,cAAc,EACZ,gMAAgM;IAClM,cAAc,EACZ,2EAA2E;IAC7E,UAAU,EAAE,4CAA4C;IACxD,SAAS,EAAE,2CAA2C;IACtD,WAAW,EAAE,sDAAsD;IACnE,SAAS,EAAE,wCAAwC;IACnD,UAAU,EAAE,yCAAyC;IACrD,cAAc,EAAE,sCAAsC;IACtD,eAAe,EAAE,uCAAuC;IACxD,UAAU,EAAE,wCAAwC;IACpD,WAAW,EAAE,yCAAyC;IACtD,gBAAgB,EAAE,oCAAoC;IACtD,cAAc,EAAE,+CAA+C;IAC/D,eAAe,EAAE,gDAAgD;IACjE,YAAY,EAAE,iDAAiD;IAC/D,aAAa,EAAE,kDAAkD;IACjE,oBAAoB,EAAE,sCAAsC;IAC5D,oBAAoB,EAClB,mHAAmH;IACrH,mBAAmB,EACjB,sGAAsG;IACxG,mBAAmB,EACjB,4DAA4D;IAC9D,qBAAqB,EACnB,+DAA+D;IACjE,kBAAkB,EAAE,4CAA4C;IAChE,UAAU,EAAE,4BAA4B;IACxC,UAAU,EAAE,4CAA4C;IACxD,WAAW,EAAE,6CAA6C;IAC1D,oBAAoB,EAAE,sDAAsD;IAC5E,kBAAkB,EAAE,yCAAyC;IAC7D,kBAAkB,EAAE,yCAAyC;IAC7D,mBAAmB,EAAE,qDAAqD;IAC1E,sBAAsB,EACpB,6DAA6D;IAC/D,SAAS,EAAE,6CAA6C;IACxD,SAAS,EAAE,6CAA6C;IACxD,cAAc,EAAE,6BAA6B;IAC7C,eAAe,EAAE,wCAAwC;IACzD,mBAAmB,EAAE,+BAA+B;IACpD,oBAAoB,EAAE,0CAA0C;IAChE,YAAY,EAAE,yDAAyD;IACvE,aAAa,EACX,oEAAoE;IACtE,gBAAgB,EAAE,kDAAkD;IACpE,iBAAiB,EACf,+DAA+D;IACjE,iBAAiB,EAAE,mDAAmD;IACtE,mBAAmB,EAAE,oCAAoC;IACzD,cAAc,EAAE,oDAAoD;IACpE,kBAAkB,EAAE,8CAA8C;IAClE,YAAY,EAAE,6CAA6C;IAC3D,gBAAgB,EAAE,uCAAuC;IACzD,iBAAiB,EAAE,wCAAwC;IAC3D,eAAe,EAAE,sCAAsC;IACvD,oBAAoB,EAAE,2CAA2C;IACjE,qBAAqB,EAAE,4CAA4C;IACnE,iBAAiB,EACf,4EAA4E;IAC9E,oBAAoB,EAAE,+BAA+B;IACrD,qBAAqB,EACnB,4EAA4E;IAC9E,WAAW,EAAE,mDAAmD;IAChE,YAAY,EACV,2EAA2E;IAC7E,uBAAuB,EACrB,oEAAoE;IACtE,aAAa,EACX,sFAAsF;IACxF,kBAAkB,EAAE,yCAAyC;IAC7D,mBAAmB,EAAE,0CAA0C;IAC/D,WAAW,EACT,yEAAyE;IAC3E,iBAAiB,EAAE,mCAAmC;IACtD,cAAc,EACZ,wFAAwF;IAC1F,eAAe,EACb,mGAAmG;IACrG,qBAAqB,EACnB,wFAAwF;IAC1F,sBAAsB,EACpB,mGAAmG;IACrG,kBAAkB,EAChB,+EAA+E;IACjF,4BAA4B,EAC1B,wDAAwD;IAC1D,uCAAuC,EACrC,uEAAuE;IACzE,sBAAsB,EACpB,mEAAmE;IACrE,uBAAuB,EACrB,iGAAiG;IACnG,mBAAmB,EAAE,6CAA6C;IAClE,WAAW,EAAE,0CAA0C;CACxD,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,UAAU;IACV,oBAAoB;IACpB,oBAAoB;IACpB,kBAAkB;IAClB,UAAU;IACV,aAAa;IACb,iBAAiB;IACjB,cAAc;IACd,qBAAqB;IACrB,iBAAiB;IACjB,WAAW;IACX,iBAAiB;IACjB,kBAAkB;IAClB,sBAAsB;IACtB,uBAAuB;IACvB,mBAAmB;IACnB,eAAe;IACf,WAAW;CACZ,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,sCAAsC,CAAC;AACtE,MAAM,CAAC,MAAM,kBAAkB,GAAG,qCAAqC,CAAC;AACxE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,0CAA0C;IACjD,MAAM,EAAE,2CAA2C;CACpD,CAAC"}

package/lib/Cloudflare/Auth/OAuthClient.d.ts

@@ -0,0 +1,46 @@
+import * as Effect from "effect/Effect";
+declare const OAuthError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "OAuthError";
+} & Readonly<A>;
+export declare class OAuthError extends OAuthError_base<{
+    error: string;
+    errorDescription: string;
+}> {
+}
+export interface OAuthCredentials {
+    type: "oauth";
+    access: string;
+    refresh: string;
+    expires: number;
+    scopes: string[];
+}
+export interface Authorization {
+    url: string;
+    state: string;
+    verifier: string;
+}
+/**
+ * Generate an authorization URL with PKCE for the given scopes.
+ */
+export declare function authorize(scopes: string[]): Authorization;
+/**
+ * Exchange an authorization code for OAuth credentials.
+ */
+export declare const exchange: (code: string, verifier: string) => Effect.Effect<OAuthCredentials, OAuthError>;
+/**
+ * Refresh expired OAuth credentials.
+ */
+export declare const refresh: (credentials: OAuthCredentials) => Effect.Effect<OAuthCredentials, OAuthError>;
+/**
+ * Revoke OAuth credentials.
+ */
+export declare const revoke: (credentials: OAuthCredentials) => Effect.Effect<void, OAuthError>;
+/**
+ * Start a local HTTP server to listen for the OAuth callback, exchange
+ * the authorization code, and return the credentials.
+ *
+ * Times out after 5 minutes.
+ */
+export declare const callback: (authorization: Authorization) => Effect.Effect<OAuthCredentials, OAuthError>;
+export {};
+//# sourceMappingURL=OAuthClient.d.ts.map

package/lib/Cloudflare/Auth/OAuthClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OAuthClient.d.ts","sourceRoot":"","sources":["../../../src/Cloudflare/Auth/OAuthClient.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;;;;AASxC,qBAAa,UAAW,SAAQ,gBAA+B;IAC7D,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;CAAG;AAEL,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAuFD;;GAEG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAYzD;AAED;;GAEG;AACH,eAAO,MAAM,QAAQ,GACnB,MAAM,MAAM,EACZ,UAAU,MAAM,KACf,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAOzC,CAAC;AAEL;;GAEG;AACH,eAAO,MAAM,OAAO,GAClB,aAAa,gBAAgB,KAC5B,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAMzC,CAAC;AAEL;;GAEG;AACH,eAAO,MAAM,MAAM,GACjB,aAAa,gBAAgB,KAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAsB7B,CAAC;AAEL;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,GACnB,eAAe,aAAa,KAC3B,MAAM,CAAC,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAUzC,CAAC"}