@nauth-toolkit/core 0.1.87 → 0.1.89

package/dist/services/mfa.service.d.ts

@@ -7,7 +7,7 @@ import { NAuthLogger } from '../utils/nauth-logger';
 import { InternalAuthAuditService as AuthAuditService } from './auth-audit.service';
 import { ClientInfoService } from './client-info.service';
 import { HookRegistryService } from './hook-registry.service';
-import { GetAvailableMethodsDTO, GetAvailableMethodsResponseDTO, GetChallengeDataDTO, GetChallengeDataResponseDTO, GetMFAStatusDTO, GetMFAStatusResponseDTO, GetSetupDataDTO, GetSetupDataResponseDTO, GetUserDevicesDTO, GetUserDevicesResponseDTO, HasProviderDTO, HasProviderResponseDTO, ListProvidersResponseDTO, RemoveDevicesDTO, RemoveDevicesResponseDTO, SetMFAExemptionDTO, SetMFAExemptionResponseDTO, SetPreferredMethodDTO, SetPreferredMethodResponseDTO, SetupMFADTO, SetupMFAResponseDTO, VerifyMFACodeDTO, VerifyMFACodeResponseDTO } from '../dto';
+import { GetAvailableMethodsDTO, GetAvailableMethodsResponseDTO, GetChallengeDataDTO, GetChallengeDataResponseDTO, AdminGetMFAStatusDTO, GetMFAStatusResponseDTO, GetSetupDataDTO, GetSetupDataResponseDTO, GetUserDevicesDTO, GetUserDevicesResponseDTO, HasProviderDTO, HasProviderResponseDTO, ListProvidersResponseDTO, AdminRemoveDevicesDTO, AdminSetPreferredMethodDTO, RemoveDevicesDTO, RemoveDevicesResponseDTO, SetMFAExemptionDTO, SetMFAExemptionResponseDTO, SetPreferredMethodDTO, SetPreferredMethodResponseDTO, SetupMFADTO, SetupMFAResponseDTO, VerifyMFACodeDTO, VerifyMFACodeResponseDTO } from '../dto';
 /**
  * MFA Service Registry
  *
@@ -32,7 +32,7 @@ import { GetAvailableMethodsDTO, GetAvailableMethodsResponseDTO, GetChallengeDat
  *   @Post('mfa/verify')
  *   async verifyMFA(@Body() dto: { method: string; code: string }) {
  *     const provider = this.mfaService.getProvider(dto.method);
- *     return await provider.verify(user, dto.code);
+ *     return await provider.verify(dto.code);
  *   }
  * }
  * ```
@@ -47,6 +47,44 @@ export declare class MFAService {
     private readonly clientInfoService?;
     private readonly hookRegistry?;
     private readonly providers;
+    /**
+     * Shared implementation for retrieving MFA status by target user sub.
+     *
+     * @param sub - Target user sub (UUID v4)
+     * @returns Comprehensive MFA status
+     */
+    private getMfaStatusBySub;
+    /**
+     * Fetch active MFA devices for a given internal user ID.
+     *
+     * @param userId - Internal DB user ID
+     * @returns Active MFA devices
+     */
+    private getActiveDevicesForUserId;
+    /**
+     * Resolve a target user by `sub` (admin-style targeting).
+     *
+     * @param sub - Target user sub (UUID v4)
+     * @returns User entity
+     * @throws {NAuthException} NOT_FOUND when user is not found
+     */
+    private getUserBySubOrThrow;
+    /**
+     * Shared implementation for removing MFA devices.
+     *
+     * @param targetUser - Target user (self-service or admin target)
+     * @param methodType - MFA method to remove (normalized)
+     * @param removedBy - Actor performing the removal
+     */
+    private removeDevicesInternal;
+    /**
+     * Shared implementation for setting preferred MFA method.
+     *
+     * @param targetUser - Target user (self-service or admin target)
+     * @param methodType - Preferred method (normalized)
+     * @param updatedBy - Actor performing the update
+     */
+    private setPreferredMethodInternal;
     /**
      * Resolve a user entity by flexible identifier.
      *
@@ -58,6 +96,24 @@ export declare class MFAService {
      */
     private findUserByIdentifier;
     constructor(mfaDeviceRepository: Repository<BaseMFADevice>, userRepository: Repository<BaseUser>, challengeService?: ChallengeService | undefined, config?: NAuthConfig | undefined, logger?: NAuthLogger | undefined, auditService?: AuthAuditService | undefined, clientInfoService?: ClientInfoService | undefined, hookRegistry?: HookRegistryService | undefined);
+    /**
+     * Get current user from authenticated context
+     *
+     * @returns Current authenticated user
+     * @throws {NAuthException} If user not found in context
+     */
+    private getCurrentUserOrThrow;
+    /**
+     * Execute a callback with a specific user bound into CURRENT_USER context.
+     *
+     * This is required for flows where the user is resolved outside of request auth context
+     * (e.g., challenge sessions) but providers must still derive the user from context.
+     *
+     * @param user - User to bind into context
+     * @param callback - Callback to execute
+     * @returns Callback result
+     */
+    private withUserContext;
     /**
      * Register an MFA provider
      *
@@ -180,46 +236,36 @@ export declare class MFAService {
     /**
      * Get user's MFA devices
      *
-     * @param dto - Request DTO with user sub
+     * User self-service method: current user is derived from authenticated context.
+     *
+     * @param _dto - Optional (empty) DTO for validation consistency
      * @returns Response DTO with array of MFA devices
      *
      * @example
      * ```typescript
-     * const result = await this.mfaService.getUserDevices({ sub: user.sub });
+     * const result = await this.mfaService.getUserDevices();
      * // Returns: { devices: [...] }
      * ```
      */
-    getUserDevices(dto: GetUserDevicesDTO): Promise<GetUserDevicesResponseDTO>;
+    getUserDevices(_dto?: GetUserDevicesDTO): Promise<GetUserDevicesResponseDTO>;
     /**
-     * Get comprehensive MFA status for a user
+     * Get comprehensive MFA status for the current authenticated user (self-service).
      *
-     * Returns complete MFA configuration status including:
-     * - Whether MFA is enabled/required
-     * - Configured and available methods
-     * - Preferred method
-     * - Backup codes status
-     * - MFA exemption information
-     *
-     * This method encapsulates all business logic for MFA status,
-     * ensuring consumer apps don't need to query databases or build responses manually.
-     *
-     * @param dto - Request DTO with user sub
      * @returns Response DTO with complete MFA status
+     */
+    getMfaStatus(): Promise<GetMFAStatusResponseDTO>;
+    /**
+     * Get comprehensive MFA status for a target user (admin-only).
      *
-     * @example
-     * ```typescript
-     * @Get('mfa/status')
-     * async getMFAStatus(@CurrentUser() user: IUser) {
-     *   return await this.mfaService.getMFAStatus({ sub: user.sub });
-     * }
-     * ```
+     * @param dto - Admin request DTO with target user sub
+     * @returns Response DTO with complete MFA status
      */
-    getMFAStatus(dto: GetMFAStatusDTO): Promise<GetMFAStatusResponseDTO>;
+    adminGetMfaStatus(dto: AdminGetMFAStatusDTO): Promise<GetMFAStatusResponseDTO>;
     /**
      * Remove MFA devices by method type
      *
      * Comprehensive method that handles all aspects of MFA device removal:
-     * - Looks up user by sub (consumer apps should pass user.sub from @CurrentUser())
+     * - Uses the authenticated user context (self-service)
      * - Validates method type
      * - Removes all active devices of the specified method type
      * - Updates user's preferred method if the removed method was preferred
@@ -230,7 +276,7 @@ export declare class MFAService {
      * This method encapsulates all database operations related to MFA device removal,
      * ensuring the consumer app doesn't need to directly manipulate nauth_* tables.
      *
-     * @param dto - Request DTO with user sub and method type
+     * @param dto - Request DTO with method type
      * @returns Response DTO with deletedCount and whether MFA was disabled
      * @throws {NAuthException} If user not found, invalid method type, or no devices found
      *
@@ -239,12 +285,26 @@ export declare class MFAService {
      * // Consumer app controller
      * @Delete('mfa/devices/:method')
      * async removeMFAMethod(@CurrentUser() user: IUser, @Param('method') method: string) {
-     *   const result = await this.mfaService.removeDevices({ userSub: user.sub, methodType: method });
+     *   const result = await this.mfaService.removeDevices({ methodType: method });
      *   return { message: 'MFA method removed successfully', ...result };
      * }
      * ```
      */
     removeDevices(dto: RemoveDevicesDTO): Promise<RemoveDevicesResponseDTO>;
+    /**
+     * Admin: Remove MFA devices for a specific user by `sub`.
+     *
+     * @param dto - Admin DTO containing target `sub` and method type
+     * @returns Removal result
+     * @throws {NAuthException} NOT_FOUND when user is not found
+     * @throws {NAuthException} VALIDATION_FAILED on invalid method type
+     *
+     * @example
+     * ```typescript
+     * await mfaService.adminRemoveDevices({ sub: 'user-uuid', methodType: 'totp' });
+     * ```
+     */
+    adminRemoveDevices(dto: AdminRemoveDevicesDTO): Promise<RemoveDevicesResponseDTO>;
     /**
      * Set preferred MFA method for a user
      *
@@ -254,7 +314,7 @@ export declare class MFAService {
      * This method encapsulates all database operations related to preferred method updates,
      * ensuring the consumer app doesn't need to directly manipulate nauth_* tables.
      *
-     * @param dto - Request DTO with user sub and method type
+     * @param dto - Request DTO with method type
      * @returns Response DTO with success message
      * @throws {NAuthException} If user not found, invalid method type, or method not configured
      *
@@ -263,18 +323,32 @@ export declare class MFAService {
      * // Consumer app controller
      * @Put('mfa/preferred')
      * async setPreferredMFAMethod(@CurrentUser() user: IUser, @Body() body: { method: string }) {
-     *   return await this.mfaService.setPreferredMethod({ userSub: user.sub, methodType: body.method });
+     *   return await this.mfaService.setPreferredMethod({ methodType: body.method });
      * }
      * ```
      */
     setPreferredMethod(dto: SetPreferredMethodDTO): Promise<SetPreferredMethodResponseDTO>;
+    /**
+     * Admin: Set preferred MFA method for a specific user by `sub`.
+     *
+     * @param dto - Admin DTO containing target `sub` and method type
+     * @returns Success response
+     * @throws {NAuthException} NOT_FOUND when user is not found
+     * @throws {NAuthException} VALIDATION_FAILED when method is invalid or not configured
+     *
+     * @example
+     * ```typescript
+     * await mfaService.adminSetPreferredMethod({ sub: 'user-uuid', methodType: 'sms' });
+     * ```
+     */
+    adminSetPreferredMethod(dto: AdminSetPreferredMethodDTO): Promise<SetPreferredMethodResponseDTO>;
     /**
      * Grant or revoke a user's exemption from multi-factor authentication (MFA) requirements.
      *
      * SECURITY: This admin-only operation updates the user's MFA exemption status, logs the action,
      * and records an audit event. MFA exemption bypasses MFA at login, but all other security controls remain enforced.
      *
-     * @param dto - Request DTO with identifier, exempt flag, reason, and grantedBy
+     * @param dto - Request DTO with sub, exempt flag, reason, and grantedBy
      * @returns Response DTO with updated exemption fields
      * @throws {NAuthException} If the user is not found
      *
@@ -282,7 +356,7 @@ export declare class MFAService {
      * ```typescript
      * // Grant MFA exemption
      * await mfaService.setMFAExemption({
-     *   identifier: 'user@example.com',
+     *   sub: 'a21b654c-2746-4168-acee-c175083a65cd',
      *   exempt: true,
      *   reason: 'Business partner requires MFA bypass',
      *   grantedBy: 'admin@example.com'
@@ -290,7 +364,7 @@ export declare class MFAService {
      *
      * // Revoke MFA exemption
      * await mfaService.setMFAExemption({
-     *   identifier: 'user@example.com',
+     *   sub: 'a21b654c-2746-4168-acee-c175083a65cd',
      *   exempt: false,
      *   reason: 'MFA now mandatory for this user',
      *   grantedBy: 'admin@example.com'

package/dist/services/mfa.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mfa.service.d.ts","sourceRoot":"","sources":["../../src/services/mfa.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAI3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,wBAAwB,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAG9D,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,mBAAmB,EACnB,2BAA2B,EAC3B,eAAe,EACf,uBAAuB,EACvB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,yBAAyB,EACzB,cAAc,EACd,sBAAsB,EACtB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,0BAA0B,EAC1B,qBAAqB,EACrB,6BAA6B,EAC7B,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,QAAQ,CAAC;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,UAAU;IAqDnB,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IA3DhC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IAEpE;;;;;;;;OAQG;YACW,oBAAoB;gBAyCf,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC,EAC9C,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,EACpC,gBAAgB,CAAC,EAAE,gBAAgB,YAAA,EACnC,MAAM,CAAC,EAAE,WAAW,YAAA,EACpB,MAAM,CAAC,EAAE,WAAW,YAAA,EACpB,YAAY,CAAC,EAAE,gBAAgB,YAAA,EAC/B,iBAAiB,CAAC,EAAE,iBAAiB,YAAA,EACrC,YAAY,CAAC,EAAE,mBAAmB,YAAA;IAGrD;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAQrD;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB;IAWpD;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,sBAAsB;IAOxD;;;;;;;;;OASG;IACH,aAAa,IAAI,wBAAwB;IAMzC;;;;;;;;;;;;;;;;;;OAkBG;IACG,mBAAmB,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAyB/F;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,UAAU,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA8B1E;;;;;;;;;;;;;;OAcG;IACG,KAAK,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgB3D;;;;;;;;;;;OAWG;IACG,cAAc,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAmBhF;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA2D1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAuM7E;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAuF5F;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,eAAe,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAqFnF;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAyC1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACG,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,2BAA2B,CAAC;CAsDvF"}
+{"version":3,"file":"mfa.service.d.ts","sourceRoot":"","sources":["../../src/services/mfa.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAI3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,wBAAwB,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAI9D,OAAO,EACL,sBAAsB,EACtB,8BAA8B,EAC9B,mBAAmB,EACnB,2BAA2B,EAC3B,oBAAoB,EACpB,uBAAuB,EACvB,eAAe,EACf,uBAAuB,EACvB,iBAAiB,EACjB,yBAAyB,EACzB,cAAc,EACd,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,0BAA0B,EAC1B,gBAAgB,EAChB,wBAAwB,EACxB,kBAAkB,EAClB,0BAA0B,EAC1B,qBAAqB,EACrB,6BAA6B,EAC7B,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,QAAQ,CAAC;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,UAAU;IAibnB,OAAO,CAAC,QAAQ,CAAC,mBAAmB;IACpC,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;IACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;IAvbhC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0C;IAMpE;;;;;OAKG;YACW,iBAAiB;IAsE/B;;;;;OAKG;YACW,yBAAyB;IASvC;;;;;;OAMG;YACW,mBAAmB;IAYjC;;;;;;OAMG;YACW,qBAAqB;IA6LnC;;;;;;OAMG;YACW,0BAA0B;IA+DxC;;;;;;;;OAQG;YACW,oBAAoB;gBAyCf,mBAAmB,EAAE,UAAU,CAAC,aAAa,CAAC,EAC9C,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,EACpC,gBAAgB,CAAC,EAAE,gBAAgB,YAAA,EACnC,MAAM,CAAC,EAAE,WAAW,YAAA,EACpB,MAAM,CAAC,EAAE,WAAW,YAAA,EACpB,YAAY,CAAC,EAAE,gBAAgB,YAAA,EAC/B,iBAAiB,CAAC,EAAE,iBAAiB,YAAA,EACrC,YAAY,CAAC,EAAE,mBAAmB,YAAA;IAGrD;;;;;OAKG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;;;;;;;;OASG;YACW,eAAe;IAsB7B;;;;;;;;;;;;;;OAcG;IACH,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAQrD;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB;IAWpD;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,GAAG,EAAE,cAAc,GAAG,sBAAsB;IAOxD;;;;;;;;;OASG;IACH,aAAa,IAAI,wBAAwB;IAMzC;;;;;;;;;;;;;;;;;;OAkBG;IACG,mBAAmB,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAyB/F;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACG,UAAU,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAgC1E;;;;;;;;;;;;;;OAcG;IACG,KAAK,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAU3D;;;;;;;;;;;;;OAaG;IACG,cAAc,CAAC,IAAI,GAAE,iBAAsB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAUtF;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,uBAAuB,CAAC;IAKtD;;;;;OAKG;IACG,iBAAiB,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAKpF;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,aAAa,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAe7E;;;;;;;;;;;;OAYG;IACG,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAevF;;;;;;;;;;;;;;;;;;;;;OAqBG;IACG,kBAAkB,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAgB5F;;;;;;;;;;;;OAYG;IACG,uBAAuB,CAAC,GAAG,EAAE,0BAA0B,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAetG;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,eAAe,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAqFnF;;;;;;;;;;;;;;;;;;;;;;;;;;;OA2BG;IACG,YAAY,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,uBAAuB,CAAC;IA2C1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACG,gBAAgB,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,2BAA2B,CAAC;CAwDvF"}