@metamask-previews/profile-sync-controller 32.1.1-preview-d43f7b9f4 → 32.1.1-preview-2731bd7

package/CHANGELOG.md

@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
+- Add validated MFA domain types and structured `MfaError` classes with a serialization-safe `mfaCode` ([#10264](https://github.com/MetaMask/core/pull/10264))
 - Add `rampsOrders` to `USER_STORAGE_FEATURE_NAMES` ([#10227](https://github.com/MetaMask/core/pull/10227))
 
 ## [32.1.1]

package/dist/sdk/authentication-jwt-bearer/mfa/schemas.d.ts

@@ -0,0 +1,691 @@
+import type { Struct } from '@metamask/superstruct';
+export declare const MFA_CREDENTIAL_TYPES: readonly ['passkey', 'email_otp'];
+export declare const MfaCredentialTypeStruct: Struct<"email_otp" | "passkey", {
+    email_otp: "email_otp";
+    passkey: "passkey";
+}>;
+export declare const PublicKeyCredentialCreationOptionsJSONStruct: Struct<{
+    rp: {
+        id: string;
+        name: string;
+    };
+    user: {
+        id: string;
+        name: string;
+        displayName: string;
+    };
+    challenge: string;
+    pubKeyCredParams: {
+        type: "public-key";
+        alg: number;
+    }[];
+    excludeCredentials?: {
+        type: "public-key";
+        id: string;
+        transports?: string[] | undefined;
+    }[] | undefined;
+    authenticatorSelection?: {
+        authenticatorAttachment?: string | undefined;
+        residentKey?: string | undefined;
+        requireResidentKey?: boolean | undefined;
+        userVerification?: string | undefined;
+    } | undefined;
+    attestation?: string | undefined;
+    timeout?: number | undefined;
+    extensions?: {} | undefined;
+}, {
+    rp: Struct<{
+        id: string;
+        name: string;
+    }, {
+        id: Struct<string, null>;
+        name: Struct<string, null>;
+    }>;
+    user: Struct<{
+        id: string;
+        name: string;
+        displayName: string;
+    }, {
+        id: Struct<string, null>;
+        name: Struct<string, null>;
+        displayName: Struct<string, null>;
+    }>;
+    challenge: Struct<string, null>;
+    pubKeyCredParams: Struct<{
+        type: "public-key";
+        alg: number;
+    }[], Struct<{
+        type: "public-key";
+        alg: number;
+    }, {
+        type: Struct<"public-key", "public-key">;
+        alg: Struct<number, null>;
+    }>>;
+    excludeCredentials: Struct<{
+        type: "public-key";
+        id: string;
+        transports?: string[] | undefined;
+    }[] | undefined, Struct<{
+        type: "public-key";
+        id: string;
+        transports?: string[] | undefined;
+    }, {
+        type: Struct<"public-key", "public-key">;
+        id: Struct<string, null>;
+        transports: Struct<string[] | undefined, Struct<string, null>>;
+    }>>;
+    authenticatorSelection: Struct<{
+        authenticatorAttachment?: string | undefined;
+        residentKey?: string | undefined;
+        requireResidentKey?: boolean | undefined;
+        userVerification?: string | undefined;
+    } | undefined, {
+        authenticatorAttachment: Struct<string | undefined, null>;
+        residentKey: Struct<string | undefined, null>;
+        requireResidentKey: Struct<boolean | undefined, null>;
+        userVerification: Struct<string | undefined, null>;
+    }>;
+    attestation: Struct<string | undefined, null>;
+    timeout: Struct<number | undefined, null>;
+    extensions: Struct<{} | undefined, {}>;
+}>;
+export declare const PublicKeyCredentialRequestOptionsJSONStruct: Struct<{
+    challenge: string;
+    rpId?: string | undefined;
+    allowCredentials?: {
+        type: "public-key";
+        id: string;
+        transports?: string[] | undefined;
+    }[] | undefined;
+    userVerification?: string | undefined;
+    timeout?: number | undefined;
+    extensions?: {} | undefined;
+}, {
+    challenge: Struct<string, null>;
+    rpId: Struct<string | undefined, null>;
+    allowCredentials: Struct<{
+        type: "public-key";
+        id: string;
+        transports?: string[] | undefined;
+    }[] | undefined, Struct<{
+        type: "public-key";
+        id: string;
+        transports?: string[] | undefined;
+    }, {
+        type: Struct<"public-key", "public-key">;
+        id: Struct<string, null>;
+        transports: Struct<string[] | undefined, Struct<string, null>>;
+    }>>;
+    userVerification: Struct<string | undefined, null>;
+    timeout: Struct<number | undefined, null>;
+    extensions: Struct<{} | undefined, {}>;
+}>;
+export declare const PasskeyCreateDataStruct: Struct<{
+    publicKey: {
+        rp: {
+            id: string;
+            name: string;
+        };
+        user: {
+            id: string;
+            name: string;
+            displayName: string;
+        };
+        challenge: string;
+        pubKeyCredParams: {
+            type: "public-key";
+            alg: number;
+        }[];
+        excludeCredentials?: {
+            type: "public-key";
+            id: string;
+            transports?: string[] | undefined;
+        }[] | undefined;
+        authenticatorSelection?: {
+            authenticatorAttachment?: string | undefined;
+            residentKey?: string | undefined;
+            requireResidentKey?: boolean | undefined;
+            userVerification?: string | undefined;
+        } | undefined;
+        attestation?: string | undefined;
+        timeout?: number | undefined;
+        extensions?: {} | undefined;
+    };
+}, {
+    publicKey: Struct<{
+        rp: {
+            id: string;
+            name: string;
+        };
+        user: {
+            id: string;
+            name: string;
+            displayName: string;
+        };
+        challenge: string;
+        pubKeyCredParams: {
+            type: "public-key";
+            alg: number;
+        }[];
+        excludeCredentials?: {
+            type: "public-key";
+            id: string;
+            transports?: string[] | undefined;
+        }[] | undefined;
+        authenticatorSelection?: {
+            authenticatorAttachment?: string | undefined;
+            residentKey?: string | undefined;
+            requireResidentKey?: boolean | undefined;
+            userVerification?: string | undefined;
+        } | undefined;
+        attestation?: string | undefined;
+        timeout?: number | undefined;
+        extensions?: {} | undefined;
+    }, {
+        rp: Struct<{
+            id: string;
+            name: string;
+        }, {
+            id: Struct<string, null>;
+            name: Struct<string, null>;
+        }>;
+        user: Struct<{
+            id: string;
+            name: string;
+            displayName: string;
+        }, {
+            id: Struct<string, null>;
+            name: Struct<string, null>;
+            displayName: Struct<string, null>;
+        }>;
+        challenge: Struct<string, null>;
+        pubKeyCredParams: Struct<{
+            type: "public-key";
+            alg: number;
+        }[], Struct<{
+            type: "public-key";
+            alg: number;
+        }, {
+            type: Struct<"public-key", "public-key">;
+            alg: Struct<number, null>;
+        }>>;
+        excludeCredentials: Struct<{
+            type: "public-key";
+            id: string;
+            transports?: string[] | undefined;
+        }[] | undefined, Struct<{
+            type: "public-key";
+            id: string;
+            transports?: string[] | undefined;
+        }, {
+            type: Struct<"public-key", "public-key">;
+            id: Struct<string, null>;
+            transports: Struct<string[] | undefined, Struct<string, null>>;
+        }>>;
+        authenticatorSelection: Struct<{
+            authenticatorAttachment?: string | undefined;
+            residentKey?: string | undefined;
+            requireResidentKey?: boolean | undefined;
+            userVerification?: string | undefined;
+        } | undefined, {
+            authenticatorAttachment: Struct<string | undefined, null>;
+            residentKey: Struct<string | undefined, null>;
+            requireResidentKey: Struct<boolean | undefined, null>;
+            userVerification: Struct<string | undefined, null>;
+        }>;
+        attestation: Struct<string | undefined, null>;
+        timeout: Struct<number | undefined, null>;
+        extensions: Struct<{} | undefined, {}>;
+    }>;
+}>;
+export declare const PasskeyRequestDataStruct: Struct<{
+    publicKey: {
+        challenge: string;
+        rpId?: string | undefined;
+        allowCredentials?: {
+            type: "public-key";
+            id: string;
+            transports?: string[] | undefined;
+        }[] | undefined;
+        userVerification?: string | undefined;
+        timeout?: number | undefined;
+        extensions?: {} | undefined;
+    };
+}, {
+    publicKey: Struct<{
+        challenge: string;
+        rpId?: string | undefined;
+        allowCredentials?: {
+            type: "public-key";
+            id: string;
+            transports?: string[] | undefined;
+        }[] | undefined;
+        userVerification?: string | undefined;
+        timeout?: number | undefined;
+        extensions?: {} | undefined;
+    }, {
+        challenge: Struct<string, null>;
+        rpId: Struct<string | undefined, null>;
+        allowCredentials: Struct<{
+            type: "public-key";
+            id: string;
+            transports?: string[] | undefined;
+        }[] | undefined, Struct<{
+            type: "public-key";
+            id: string;
+            transports?: string[] | undefined;
+        }, {
+            type: Struct<"public-key", "public-key">;
+            id: Struct<string, null>;
+            transports: Struct<string[] | undefined, Struct<string, null>>;
+        }>>;
+        userVerification: Struct<string | undefined, null>;
+        timeout: Struct<number | undefined, null>;
+        extensions: Struct<{} | undefined, {}>;
+    }>;
+}>;
+export declare const RegistrationResponseJSONStruct: Struct<{
+    id: string;
+    rawId: string;
+    type: "public-key";
+    response: {
+        attestationObject: string;
+        clientDataJSON: string;
+        transports?: string[] | undefined;
+        publicKeyAlgorithm?: number | undefined;
+        publicKey?: string | undefined;
+        authenticatorData?: string | undefined;
+    };
+    authenticatorAttachment?: string | null | undefined;
+    clientExtensionResults?: {} | undefined;
+}, {
+    id: Struct<string, null>;
+    rawId: Struct<string, null>;
+    type: Struct<"public-key", "public-key">;
+    response: Struct<{
+        attestationObject: string;
+        clientDataJSON: string;
+        transports?: string[] | undefined;
+        publicKeyAlgorithm?: number | undefined;
+        publicKey?: string | undefined;
+        authenticatorData?: string | undefined;
+    }, {
+        attestationObject: Struct<string, null>;
+        clientDataJSON: Struct<string, null>;
+        transports: Struct<string[] | undefined, Struct<string, null>>;
+        publicKeyAlgorithm: Struct<number | undefined, null>;
+        publicKey: Struct<string | undefined, null>;
+        authenticatorData: Struct<string | undefined, null>;
+    }>;
+    authenticatorAttachment: Struct<string | null | undefined, null>;
+    clientExtensionResults: Struct<{} | undefined, {}>;
+}>;
+export declare const AuthenticationResponseJSONStruct: Struct<{
+    id: string;
+    rawId: string;
+    type: "public-key";
+    response: {
+        authenticatorData: string;
+        clientDataJSON: string;
+        signature: string;
+        userHandle?: string | null | undefined;
+    };
+    authenticatorAttachment?: string | null | undefined;
+    clientExtensionResults?: {} | undefined;
+}, {
+    id: Struct<string, null>;
+    rawId: Struct<string, null>;
+    type: Struct<"public-key", "public-key">;
+    response: Struct<{
+        authenticatorData: string;
+        clientDataJSON: string;
+        signature: string;
+        userHandle?: string | null | undefined;
+    }, {
+        authenticatorData: Struct<string, null>;
+        clientDataJSON: Struct<string, null>;
+        signature: Struct<string, null>;
+        userHandle: Struct<string | null | undefined, null>;
+    }>;
+    authenticatorAttachment: Struct<string | null | undefined, null>;
+    clientExtensionResults: Struct<{} | undefined, {}>;
+}>;
+/**
+ * Only the assertion JWT is consumed from the verification response; the
+ * profile fields on the wire duplicate what the login flow already resolved.
+ */
+export declare const MfaVerifyCompleteResponseStruct: Struct<{
+    token: string;
+    expires_in: number;
+}, {
+    token: Struct<string, null>;
+    expires_in: Struct<number, null>;
+}>;
+export declare const MfaEnrollResponseStruct: Struct<{
+    flow_id: string;
+    expires_at: string;
+    passkey_create_data?: string | undefined;
+}, {
+    flow_id: Struct<string, null>;
+    expires_at: Struct<string, null>;
+    passkey_create_data: Struct<string | undefined, null>;
+}>;
+export declare const MfaEnrollCompleteResponseStruct: Struct<{
+    status: "enrolled";
+}, {
+    status: Struct<"enrolled", "enrolled">;
+}>;
+export declare const MfaVerifyResponseStruct: Struct<{
+    flow_id: string;
+    expires_at: string;
+    passkey_request_data?: string | undefined;
+}, {
+    flow_id: Struct<string, null>;
+    expires_at: Struct<string, null>;
+    passkey_request_data: Struct<string | undefined, null>;
+}>;
+export declare const MfaPasskeyDetailStruct: Struct<{
+    display_name?: string | undefined;
+    added_at?: string | undefined;
+}, {
+    display_name: Struct<string | undefined, null>;
+    added_at: Struct<string | undefined, null>;
+}>;
+export declare const MfaEmailDetailStruct: Struct<{
+    address?: string | undefined;
+    verified?: boolean | undefined;
+}, {
+    address: Struct<string | undefined, null>;
+    verified: Struct<boolean | undefined, null>;
+}>;
+export declare const MfaCredentialStruct: Struct<{
+    credential_type: string;
+    status: string;
+    enrolled_at?: string | undefined;
+    passkey?: {
+        display_name?: string | undefined;
+        added_at?: string | undefined;
+    } | undefined;
+    email?: {
+        address?: string | undefined;
+        verified?: boolean | undefined;
+    } | undefined;
+}, {
+    credential_type: Struct<string, null>;
+    status: Struct<string, null>;
+    enrolled_at: Struct<string | undefined, null>;
+    passkey: Struct<{
+        display_name?: string | undefined;
+        added_at?: string | undefined;
+    } | undefined, {
+        display_name: Struct<string | undefined, null>;
+        added_at: Struct<string | undefined, null>;
+    }>;
+    email: Struct<{
+        address?: string | undefined;
+        verified?: boolean | undefined;
+    } | undefined, {
+        address: Struct<string | undefined, null>;
+        verified: Struct<boolean | undefined, null>;
+    }>;
+}>;
+export declare const MfaCredentialsResponseStruct: Struct<{
+    credentials: {
+        credential_type: string;
+        status: string;
+        enrolled_at?: string | undefined;
+        passkey?: {
+            display_name?: string | undefined;
+            added_at?: string | undefined;
+        } | undefined;
+        email?: {
+            address?: string | undefined;
+            verified?: boolean | undefined;
+        } | undefined;
+    }[];
+}, {
+    credentials: Struct<{
+        credential_type: string;
+        status: string;
+        enrolled_at?: string | undefined;
+        passkey?: {
+            display_name?: string | undefined;
+            added_at?: string | undefined;
+        } | undefined;
+        email?: {
+            address?: string | undefined;
+            verified?: boolean | undefined;
+        } | undefined;
+    }[], Struct<{
+        credential_type: string;
+        status: string;
+        enrolled_at?: string | undefined;
+        passkey?: {
+            display_name?: string | undefined;
+            added_at?: string | undefined;
+        } | undefined;
+        email?: {
+            address?: string | undefined;
+            verified?: boolean | undefined;
+        } | undefined;
+    }, {
+        credential_type: Struct<string, null>;
+        status: Struct<string, null>;
+        enrolled_at: Struct<string | undefined, null>;
+        passkey: Struct<{
+            display_name?: string | undefined;
+            added_at?: string | undefined;
+        } | undefined, {
+            display_name: Struct<string | undefined, null>;
+            added_at: Struct<string | undefined, null>;
+        }>;
+        email: Struct<{
+            address?: string | undefined;
+            verified?: boolean | undefined;
+        } | undefined, {
+            address: Struct<string | undefined, null>;
+            verified: Struct<boolean | undefined, null>;
+        }>;
+    }>>;
+}>;
+export declare const MfaErrorResponseStruct: Struct<{
+    code?: string | undefined;
+    message: string;
+}, {
+    code: Struct<string | undefined, null>;
+    message: Struct<string, null>;
+}>;
+export declare const TokenReasonStruct: Struct<{
+    operation: string;
+}, {
+    operation: Struct<string, null>;
+}>;
+export declare const BeginEnrollmentRequestStruct: Struct<{
+    type: "email_otp" | "passkey";
+    email?: string | undefined;
+    reason: {
+        operation: string;
+    };
+}, {
+    type: Struct<"email_otp" | "passkey", {
+        email_otp: "email_otp";
+        passkey: "passkey";
+    }>;
+    email: Struct<string | undefined, null>;
+    reason: Struct<{
+        operation: string;
+    }, {
+        operation: Struct<string, null>;
+    }>;
+}>;
+export declare const CompleteEnrollmentRequestStruct: Struct<{
+    flowId: string;
+    proof: {
+        type: "passkey";
+        attestation: {
+            id: string;
+            rawId: string;
+            type: "public-key";
+            response: {
+                attestationObject: string;
+                clientDataJSON: string;
+                transports?: string[] | undefined;
+                publicKeyAlgorithm?: number | undefined;
+                publicKey?: string | undefined;
+                authenticatorData?: string | undefined;
+            };
+            authenticatorAttachment?: string | null | undefined;
+            clientExtensionResults?: {} | undefined;
+        };
+    } | {
+        type: "email_otp";
+        code: string;
+    };
+    reason: {
+        operation: string;
+    };
+}, {
+    flowId: Struct<string, null>;
+    proof: Struct<{
+        type: "passkey";
+        attestation: {
+            id: string;
+            rawId: string;
+            type: "public-key";
+            response: {
+                attestationObject: string;
+                clientDataJSON: string;
+                transports?: string[] | undefined;
+                publicKeyAlgorithm?: number | undefined;
+                publicKey?: string | undefined;
+                authenticatorData?: string | undefined;
+            };
+            authenticatorAttachment?: string | null | undefined;
+            clientExtensionResults?: {} | undefined;
+        };
+    } | {
+        type: "email_otp";
+        code: string;
+    }, null>;
+    reason: Struct<{
+        operation: string;
+    }, {
+        operation: Struct<string, null>;
+    }>;
+}>;
+export declare const BeginStepUpRequestStruct: Struct<{
+    type: "email_otp" | "passkey";
+    reason: {
+        operation: string;
+    };
+}, {
+    type: Struct<"email_otp" | "passkey", {
+        email_otp: "email_otp";
+        passkey: "passkey";
+    }>;
+    reason: Struct<{
+        operation: string;
+    }, {
+        operation: Struct<string, null>;
+    }>;
+}>;
+export declare const CompleteStepUpRequestStruct: Struct<{
+    flowId: string;
+    proof: {
+        type: "passkey";
+        assertion: {
+            id: string;
+            rawId: string;
+            type: "public-key";
+            response: {
+                authenticatorData: string;
+                clientDataJSON: string;
+                signature: string;
+                userHandle?: string | null | undefined;
+            };
+            authenticatorAttachment?: string | null | undefined;
+            clientExtensionResults?: {} | undefined;
+        };
+    } | {
+        type: "email_otp";
+        code: string;
+    };
+    reason: {
+        operation: string;
+    };
+}, {
+    flowId: Struct<string, null>;
+    proof: Struct<{
+        type: "passkey";
+        assertion: {
+            id: string;
+            rawId: string;
+            type: "public-key";
+            response: {
+                authenticatorData: string;
+                clientDataJSON: string;
+                signature: string;
+                userHandle?: string | null | undefined;
+            };
+            authenticatorAttachment?: string | null | undefined;
+            clientExtensionResults?: {} | undefined;
+        };
+    } | {
+        type: "email_otp";
+        code: string;
+    }, null>;
+    reason: Struct<{
+        operation: string;
+    }, {
+        operation: Struct<string, null>;
+    }>;
+}>;
+export declare const GetElevatedTokenRequestStruct: Struct<{
+    maxSessionAgeMs?: number | undefined;
+}, {
+    maxSessionAgeMs: Struct<number | undefined, null>;
+}>;
+export declare const ElevatedTokenClaimsStruct: Struct<{
+    sub: string;
+    aal: 2;
+    exp: number;
+    amr: "email_otp" | "passkey" | ("email_otp" | "passkey")[];
+}, {
+    sub: Struct<string, null>;
+    aal: Struct<2, 2>;
+    exp: Struct<number, null>;
+    amr: Struct<"email_otp" | "passkey" | ("email_otp" | "passkey")[], null>;
+}>;
+/**
+ * Validates data received from the authentication service.
+ *
+ * @param value - Untrusted response data.
+ * @param struct - Expected response structure.
+ * @throws MfaError if the response does not match the structure.
+ */
+export declare function assertValidMfaResponse<Value>(value: unknown, struct: Struct<Value>): asserts value is Value;
+/**
+ * Validates data received from an untyped controller boundary.
+ *
+ * @param value - Untrusted request data.
+ * @param struct - Expected request structure.
+ * @throws MfaError if the request does not match the structure.
+ */
+export declare function assertValidMfaRequest<Value>(value: unknown, struct: Struct<Value>): asserts value is Value;
+/**
+ * Validates and normalizes claims from an elevated access token.
+ *
+ * Hydra places hook-supplied claims under `ext` unless they are promoted to
+ * the top level, so `aal` and `amr` are read from either location.
+ *
+ * @param payload - Decoded JWT payload.
+ * @returns Validated claims with `amr` represented as an array.
+ * @throws ElevatedTokenInvalidError if claims are missing or invalid.
+ */
+export declare function parseElevatedTokenClaims(payload: unknown): {
+    sub: string;
+    aal: 2;
+    exp: number;
+    amr: ('passkey' | 'email_otp')[];
+};
+//# sourceMappingURL=schemas.d.ts.map

package/dist/sdk/authentication-jwt-bearer/mfa/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../../src/sdk/authentication-jwt-bearer/mfa/schemas.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAIpD,eAAO,MAAM,oBAAoB,YAAI,SAAS,EAAE,WAAW,CAAU,CAAC;AAEtE,eAAO,MAAM,uBAAuB;;;EAA8B,CAAC;AAUnE,eAAO,MAAM,4CAA4C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6BvD,CAAC;AAEH,eAAO,MAAM,2CAA2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOtD,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAElC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEnC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAczC,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY3C,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,+BAA+B;;;;;;EAI1C,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;EAMlC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;EAE1C,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;EAMlC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;EAIjC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;EAG/B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU9B,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEvC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;EAGjC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;EAE5B,CAAC;AAEH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;EAgBxC,CAAC;AAeF,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI1C,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;EAGnC,CAAC;AAaH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAItC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;EAExC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;;;;;EAKpC,CAAC;AASH;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAC1C,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GACpB,OAAO,CAAC,KAAK,IAAI,KAAK,CAUxB;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EACzC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GACpB,OAAO,CAAC,KAAK,IAAI,KAAK,CAUxB;AAQD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG;IAC1D,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,CAAC,CAAC;IACP,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,CAAC,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC;CAClC,CA0BA"}