@nauth-toolkit/mfa-passkey 0.1.3

package/dist/src/passkey.service.js

@@ -0,0 +1,222 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PasskeyService = void 0;
+const server_1 = require("@simplewebauthn/server");
+const core_1 = require("@nauth-toolkit/core");
+class PasskeyService {
+    config;
+    logger;
+    defaultConfig = {
+        timeout: 60000,
+        userVerification: 'preferred',
+    };
+    constructor(config, logger) {
+        this.config = config;
+        this.logger = logger;
+    }
+    getPasskeyConfig() {
+        const passkeyConfig = this.config.mfa?.passkey;
+        if (!passkeyConfig?.rpName || !passkeyConfig?.rpId) {
+            throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Passkey configuration (rpName, rpId) is required');
+        }
+        let origin = passkeyConfig.origin;
+        if (!origin) {
+            origin = passkeyConfig.rpId === 'localhost' ? 'http://localhost:4200' : `https://${passkeyConfig.rpId}`;
+        }
+        return {
+            ...this.defaultConfig,
+            ...passkeyConfig,
+            origin,
+        };
+    }
+    async generateRegistrationOptions(userId, userEmail, userName, existingDevices = []) {
+        this.logger?.log?.(`Generating passkey registration options for user: ${userEmail}`);
+        const passkeyConfig = this.getPasskeyConfig();
+        const excludeCredentials = existingDevices
+            .filter((device) => device.type === core_1.MFAMethod.PASSKEY && device.isActive && device.credentialId)
+            .map((device) => ({
+            id: device.credentialId,
+            type: 'public-key',
+            transports: device.transports || undefined,
+        }));
+        const options = await (0, server_1.generateRegistrationOptions)({
+            rpName: passkeyConfig.rpName,
+            rpID: passkeyConfig.rpId,
+            userID: new TextEncoder().encode(userId),
+            userName: userEmail,
+            userDisplayName: userName || userEmail,
+            timeout: passkeyConfig.timeout,
+            attestationType: 'none',
+            excludeCredentials: excludeCredentials.length > 0 ? excludeCredentials : undefined,
+            authenticatorSelection: {
+                authenticatorAttachment: passkeyConfig.authenticatorAttachment,
+                requireResidentKey: false,
+                userVerification: passkeyConfig.userVerification,
+            },
+            supportedAlgorithmIDs: [-7, -257],
+        });
+        this.logger?.log?.(`Passkey registration options generated for: ${userEmail}`);
+        return {
+            options: options,
+        };
+    }
+    async verifyRegistration(credential, expectedChallenge, transports) {
+        this.logger?.log?.('Verifying passkey registration');
+        const passkeyConfig = this.getPasskeyConfig();
+        let verification;
+        try {
+            verification = await (0, server_1.verifyRegistrationResponse)({
+                response: credential,
+                expectedChallenge,
+                expectedOrigin: Array.isArray(passkeyConfig.origin) ? passkeyConfig.origin : [passkeyConfig.origin],
+                expectedRPID: passkeyConfig.rpId,
+                requireUserVerification: passkeyConfig.userVerification === 'required',
+            });
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            this.logger?.error?.('Passkey registration verification failed', {
+                error: errorMessage,
+                expectedRPID: passkeyConfig.rpId,
+                expectedOrigins: Array.isArray(passkeyConfig.origin) ? passkeyConfig.origin : [passkeyConfig.origin],
+            });
+            throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, `Failed to verify passkey registration: ${errorMessage}`);
+        }
+        if (!verification.verified || !verification.registrationInfo) {
+            throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Passkey registration failed verification');
+        }
+        const { credentialID, credentialPublicKey, counter } = verification.registrationInfo;
+        let finalTransports = transports || [];
+        if (finalTransports.length === 0) {
+            const verifUnknown = verification;
+            const regInfo = verifUnknown.registrationInfo;
+            if (regInfo.transports && Array.isArray(regInfo.transports)) {
+                finalTransports = regInfo.transports;
+            }
+        }
+        const frontendCredentialId = credential.id || credential.rawId;
+        let storedCredentialId;
+        if (frontendCredentialId) {
+            storedCredentialId = frontendCredentialId;
+        }
+        else {
+            const credentialIdBuffer = Buffer.isBuffer(credentialID)
+                ? credentialID
+                : Buffer.from(credentialID);
+            storedCredentialId = credentialIdBuffer.toString('base64url');
+        }
+        this.logger?.log?.('Passkey registration verified successfully', {
+            hasTransports: finalTransports.length > 0,
+            transports: finalTransports,
+        });
+        return {
+            verified: true,
+            credentialId: storedCredentialId,
+            publicKey: Buffer.from(credentialPublicKey).toString('base64url'),
+            counter,
+            transports: finalTransports,
+        };
+    }
+    async generateAuthenticationOptions(userDevices) {
+        this.logger?.log?.('Generating passkey authentication options');
+        const passkeyConfig = this.getPasskeyConfig();
+        const allowCredentials = userDevices
+            .filter((device) => device.type === core_1.MFAMethod.PASSKEY && device.isActive && device.credentialId)
+            .map((device) => {
+            let credentialId = device.credentialId;
+            if (credentialId.includes('+') || credentialId.includes('/')) {
+                const decoded = Buffer.from(credentialId, 'base64');
+                credentialId = decoded.toString('base64url');
+            }
+            return {
+                id: credentialId,
+                type: 'public-key',
+                transports: device.transports || undefined,
+            };
+        });
+        if (allowCredentials.length === 0) {
+            throw new core_1.NAuthException(core_1.AuthErrorCode.NOT_FOUND, 'No passkey devices registered');
+        }
+        const options = await (0, server_1.generateAuthenticationOptions)({
+            rpID: passkeyConfig.rpId,
+            timeout: passkeyConfig.timeout,
+            allowCredentials: allowCredentials.length > 0 ? allowCredentials : undefined,
+            userVerification: passkeyConfig.userVerification,
+        });
+        this.logger?.log?.('Passkey authentication options generated');
+        return {
+            options: options,
+        };
+    }
+    async verifyAuthentication(credential, expectedChallenge, device) {
+        this.logger?.log?.(`Verifying passkey authentication for device: ${device.name}`);
+        if (!device.credentialId || !device.publicKey || device.counter === null || device.counter === undefined) {
+            throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Invalid passkey device data');
+        }
+        const passkeyConfig = this.getPasskeyConfig();
+        let verification;
+        try {
+            let credentialIDBuffer;
+            try {
+                credentialIDBuffer = Buffer.from(device.credentialId, 'base64url');
+            }
+            catch {
+                credentialIDBuffer = Buffer.from(device.credentialId, 'base64');
+            }
+            let publicKeyBuffer;
+            try {
+                publicKeyBuffer = Buffer.from(device.publicKey, 'base64url');
+            }
+            catch {
+                publicKeyBuffer = Buffer.from(device.publicKey, 'base64');
+            }
+            verification = await (0, server_1.verifyAuthenticationResponse)({
+                response: credential,
+                expectedChallenge,
+                expectedOrigin: Array.isArray(passkeyConfig.origin) ? passkeyConfig.origin : [passkeyConfig.origin],
+                expectedRPID: passkeyConfig.rpId,
+                authenticator: {
+                    credentialID: new Uint8Array(credentialIDBuffer),
+                    credentialPublicKey: new Uint8Array(publicKeyBuffer),
+                    counter: device.counter,
+                    transports: device.transports || undefined,
+                },
+                requireUserVerification: passkeyConfig.userVerification === 'required',
+            });
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            this.logger?.error?.('Passkey authentication verification failed', {
+                error: errorMessage,
+                expectedRPID: passkeyConfig.rpId,
+                credentialId: `${credential.id.substring(0, 8)}...`,
+            });
+            throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, `Failed to verify passkey authentication: ${errorMessage}`);
+        }
+        if (!verification.verified) {
+            throw new core_1.NAuthException(core_1.AuthErrorCode.VALIDATION_FAILED, 'Passkey authentication failed verification');
+        }
+        this.logger?.log?.('Passkey authentication verified successfully');
+        return {
+            verified: true,
+            newCounter: verification.authenticationInfo.newCounter,
+        };
+    }
+    isSupported() {
+        try {
+            this.getPasskeyConfig();
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    maskCredentialId(credentialId) {
+        if (credentialId.length <= 8) {
+            return credentialId;
+        }
+        return `${credentialId.slice(0, 4)}...${credentialId.slice(-4)}`;
+    }
+}
+exports.PasskeyService = PasskeyService;
+//# sourceMappingURL=passkey.service.js.map

package/dist/src/passkey.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.service.js","sourceRoot":"","sources":["../../src/passkey.service.ts"],"names":[],"mappings":";;;AAAA,mDAOgC;AAMhC,8CAQ6B;AAe7B,MAAa,cAAc;IAON;IACA;IAPF,aAAa,GAA2B;QACvD,OAAO,EAAE,KAAK;QACd,gBAAgB,EAAE,WAAW;KAC9B,CAAC;IAEF,YACmB,MAAmB,EACnB,MAAmB;QADnB,WAAM,GAAN,MAAM,CAAa;QACnB,WAAM,GAAN,MAAM,CAAa;IACnC,CAAC;IASI,gBAAgB;QACtB,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;QAE/C,IAAI,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;YACnD,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,kDAAkD,CAAC,CAAC;QAChH,CAAC;QAGD,IAAI,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,aAAa,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,WAAW,aAAa,CAAC,IAAI,EAAE,CAAC;QAC1G,CAAC;QAED,OAAO;YACL,GAAG,IAAI,CAAC,aAAa;YACrB,GAAG,aAAa;YAChB,MAAM;SACoB,CAAC;IAC/B,CAAC;IAWD,KAAK,CAAC,2BAA2B,CAC/B,MAAc,EACd,SAAiB,EACjB,QAAgB,EAChB,kBAAgC,EAAE;QAElC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,qDAAqD,SAAS,EAAE,CAAC,CAAC;QAErF,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAG9C,MAAM,kBAAkB,GAAG,eAAe;aACvC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAS,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC;aAC/F,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,EAAE,EAAE,MAAM,CAAC,YAAa;YACxB,IAAI,EAAE,YAAqB;YAC3B,UAAU,EAAG,MAAM,CAAC,UAA6C,IAAI,SAAS;SAC/E,CAAC,CAAC,CAAC;QAEN,MAAM,OAAO,GAAG,MAAM,IAAA,oCAA2B,EAAC;YAChD,MAAM,EAAE,aAAa,CAAC,MAAM;YAC5B,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACxC,QAAQ,EAAE,SAAS;YACnB,eAAe,EAAE,QAAQ,IAAI,SAAS;YACtC,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,eAAe,EAAE,MAAM;YACvB,kBAAkB,EAAE,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;YAClF,sBAAsB,EAAE;gBACtB,uBAAuB,EAAE,aAAa,CAAC,uBAAuB;gBAC9D,kBAAkB,EAAE,KAAK;gBACzB,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;aACjD;YACD,qBAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,+CAA+C,SAAS,EAAE,CAAC,CAAC;QAE/E,OAAO;YACL,OAAO,EAAE,OAAc;SACxB,CAAC;IACJ,CAAC;IAWD,KAAK,CAAC,kBAAkB,CACtB,UAAoC,EACpC,iBAAyB,EACzB,UAAqB;QAQrB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gCAAgC,CAAC,CAAC;QAErD,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9C,IAAI,YAA0C,CAAC;QAC/C,IAAI,CAAC;YACH,YAAY,GAAG,MAAM,IAAA,mCAA0B,EAAC;gBAC9C,QAAQ,EAAE,UAAU;gBACpB,iBAAiB;gBACjB,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;gBACnG,YAAY,EAAE,aAAa,CAAC,IAAI;gBAChC,uBAAuB,EAAE,aAAa,CAAC,gBAAgB,KAAK,UAAU;aACvE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,0CAA0C,EAAE;gBAC/D,KAAK,EAAE,YAAY;gBACnB,YAAY,EAAE,aAAa,CAAC,IAAI;gBAChC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;aACrG,CAAC,CAAC;YACH,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,0CAA0C,YAAY,EAAE,CACzD,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;YAC7D,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,0CAA0C,CAAC,CAAC;QACxG,CAAC;QAED,MAAM,EAAE,YAAY,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,gBAAgB,CAAC;QAGrF,IAAI,eAAe,GAAa,UAAU,IAAI,EAAE,CAAC;QACjD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,YAAY,GAAG,YAAkD,CAAC;YACxE,MAAM,OAAO,GAAG,YAAY,CAAC,gBAA2C,CAAC;YACzE,IAAI,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5D,eAAe,GAAG,OAAO,CAAC,UAAsB,CAAC;YACnD,CAAC;QACH,CAAC;QAID,MAAM,oBAAoB,GAAI,UAAkB,CAAC,EAAE,IAAK,UAAkB,CAAC,KAAK,CAAC;QAGjF,IAAI,kBAA0B,CAAC;QAC/B,IAAI,oBAAoB,EAAE,CAAC;YACzB,kBAAkB,GAAG,oBAAoB,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACtD,CAAC,CAAC,YAAY;gBACd,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAA4C,CAAC,CAAC;YAC9D,kBAAkB,GAAG,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,4CAA4C,EAAE;YAC/D,aAAa,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC;YACzC,UAAU,EAAE,eAAe;SAC5B,CAAC,CAAC;QAEH,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,kBAAkB;YAChC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAW;YAC3E,OAAO;YACP,UAAU,EAAE,eAAe;SAC5B,CAAC;IACJ,CAAC;IAQD,KAAK,CAAC,6BAA6B,CAAC,WAAyB;QAC3D,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,2CAA2C,CAAC,CAAC;QAEhE,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAM9C,MAAM,gBAAgB,GAAG,WAAW;aACjC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAS,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC;aAC/F,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACd,IAAI,YAAY,GAAG,MAAM,CAAC,YAAa,CAAC;YAGxC,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAE7D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;gBACpD,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/C,CAAC;YAGD,OAAO;gBACL,EAAE,EAAE,YAAY;gBAChB,IAAI,EAAE,YAAqB;gBAC3B,UAAU,EAAG,MAAM,CAAC,UAA6C,IAAI,SAAS;aAC/E,CAAC;QACJ,CAAC,CAAC,CAAC;QAEL,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAA,sCAA6B,EAAC;YAClD,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,OAAO,EAAE,aAAa,CAAC,OAAO;YAC9B,gBAAgB,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;YAC5E,gBAAgB,EAAE,aAAa,CAAC,gBAAgB;SACjD,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,0CAA0C,CAAC,CAAC;QAE/D,OAAO;YACL,OAAO,EAAE,OAAc;SACxB,CAAC;IACJ,CAAC;IAWD,KAAK,CAAC,oBAAoB,CACxB,UAAsC,EACtC,iBAAyB,EACzB,MAAkB;QAKlB,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,gDAAgD,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAElF,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACzG,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE9C,IAAI,YAA4C,CAAC;QACjD,IAAI,CAAC;YAGH,IAAI,kBAA0B,CAAC;YAC/B,IAAI,CAAC;gBAEH,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBAEP,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAClE,CAAC;YAED,IAAI,eAAuB,CAAC;YAC5B,IAAI,CAAC;gBAEH,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBAEP,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC5D,CAAC;YAED,YAAY,GAAG,MAAM,IAAA,qCAA4B,EAAC;gBAChD,QAAQ,EAAE,UAAU;gBACpB,iBAAiB;gBACjB,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC;gBACnG,YAAY,EAAE,aAAa,CAAC,IAAI;gBAChC,aAAa,EAAE;oBACb,YAAY,EAAE,IAAI,UAAU,CAAC,kBAAkB,CAAC;oBAChD,mBAAmB,EAAE,IAAI,UAAU,CAAC,eAAe,CAAC;oBACpD,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,UAAU,EAAG,MAAM,CAAC,UAA6C,IAAI,SAAS;iBACxE;gBACR,uBAAuB,EAAE,aAAa,CAAC,gBAAgB,KAAK,UAAU;aACvE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,4CAA4C,EAAE;gBACjE,KAAK,EAAE,YAAY;gBACnB,YAAY,EAAE,aAAa,CAAC,IAAI;gBAChC,YAAY,EAAE,GAAG,UAAU,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK;aACpD,CAAC,CAAC;YAEH,MAAM,IAAI,qBAAc,CACtB,oBAAa,CAAC,iBAAiB,EAC/B,4CAA4C,YAAY,EAAE,CAC3D,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;QAC1G,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,8CAA8C,CAAC,CAAC;QAEnE,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,YAAY,CAAC,kBAAkB,CAAC,UAAU;SACvD,CAAC;IACJ,CAAC;IAOD,WAAW;QACT,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAQD,gBAAgB,CAAC,YAAoB;QACnC,IAAI,YAAY,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,CAAC;CACF;AA1VD,wCA0VC"}