@nauth-toolkit/mfa-totp 0.1.13 → 0.1.17

package/dist/src/totp.service.js

@@ -37,6 +37,28 @@ exports.TOTPService = void 0;
 const otplib_1 = require("otplib");
 const QRCode = __importStar(require("qrcode"));
 const core_1 = require("@nauth-toolkit/core");
+/**
+ * TOTP (Time-based One-Time Password) Service
+ *
+ * Handles authenticator app functionality including:
+ * - Secret generation for new TOTP devices
+ * - QR code generation for easy setup
+ * - TOTP code validation with time window
+ * - Compatible with Google Authenticator, Authy, 1Password, etc.
+ *
+ * Uses industry-standard TOTP (RFC 6238) with configurable parameters.
+ *
+ * @example
+ * ```typescript
+ * // Generate TOTP setup
+ * const setup = await totpService.generateSecret('user@example.com');
+ * // Returns: { secret, qrCode, manualEntryKey, issuer, accountName }
+ *
+ * // Verify TOTP code
+ * const isValid = totpService.verifyCode('base32secret', '123456');
+ * // Returns: true if code is valid
+ * ```
+ */
 class TOTPService {
     config;
     logger;
@@ -49,32 +71,80 @@ class TOTPService {
     constructor(config, logger) {
         this.config = config;
         this.logger = logger;
+        // Configure otplib with settings from config
         this.configureAuthenticator();
     }
+    // ============================================================================
+    // Configuration
+    // ============================================================================
+    /**
+     * Configure otplib authenticator with config settings
+     *
+     * Applies TOTP configuration from NAuthConfig or uses defaults.
+     * Called during service initialization.
+     *
+     * @private
+     */
     configureAuthenticator() {
         const totpConfig = this.getTOTPConfig();
         otplib_1.authenticator.options = {
             step: totpConfig.stepSeconds,
             window: totpConfig.window,
             digits: totpConfig.digits,
-            algorithm: totpConfig.algorithm,
+            algorithm: totpConfig.algorithm, // Type cast - otplib types don't match our config
         };
         this.logger?.debug?.(`TOTP configured: step=${totpConfig.stepSeconds}s, window=${totpConfig.window}, digits=${totpConfig.digits}`);
     }
+    /**
+     * Get TOTP configuration with defaults
+     *
+     * @returns Complete TOTP configuration
+     * @private
+     */
     getTOTPConfig() {
         return {
             ...this.defaultConfig,
             ...this.config.mfa?.totp,
         };
     }
+    /**
+     * Get issuer name for TOTP URIs
+     *
+     * @returns Issuer name from config or default
+     * @private
+     */
     getIssuer() {
         return this.config.mfa?.issuer || 'nauth-toolkit';
     }
+    // ============================================================================
+    // Secret Generation
+    // ============================================================================
+    /**
+     * Generate TOTP secret and QR code for user setup
+     *
+     * Creates a new TOTP secret, generates QR code and manual entry key.
+     * User must scan QR code with authenticator app to complete setup.
+     *
+     * @param accountName - User's email or username (displayed in authenticator app)
+     * @returns Setup information including QR code and secret
+     * @throws {BadRequestException} If QR code generation fails
+     *
+     * @example
+     * ```typescript
+     * const setup = await totpService.generateSecret('user@example.com');
+     * // Client displays QR code and manual entry key
+     * // User scans QR with Google Authenticator, Authy, etc.
+     * ```
+     */
     async generateSecret(accountName) {
         this.logger?.log?.(`Generating TOTP secret for: ${accountName}`);
+        // Generate base32-encoded secret
         const secret = otplib_1.authenticator.generateSecret();
+        // Get issuer name
         const issuer = this.getIssuer();
+        // Generate otpauth URI for QR code
         const otpauthUrl = otplib_1.authenticator.keyuri(accountName, issuer, secret);
+        // Generate QR code as data URL
         let qrCode;
         try {
             qrCode = await QRCode.toDataURL(otpauthUrl);
@@ -83,6 +153,7 @@ class TOTPService {
             this.logger?.error?.('Failed to generate QR code', error);
             throw new core_1.NAuthException(core_1.AuthErrorCode.INTERNAL_ERROR, 'Failed to generate QR code');
         }
+        // Format secret for manual entry (groups of 4 characters)
         const manualEntryKey = this.formatSecretForManualEntry(secret);
         this.logger?.log?.(`TOTP secret generated successfully for: ${accountName}`);
         return {
@@ -93,16 +164,58 @@ class TOTPService {
             accountName,
         };
     }
+    /**
+     * Format secret for manual entry
+     *
+     * Converts base32 secret into groups of 4 characters for easy manual input.
+     *
+     * @param secret - Base32-encoded secret
+     * @returns Formatted secret (e.g., 'ABCD EFGH IJKL MNOP')
+     * @private
+     *
+     * @example
+     * ```typescript
+     * formatSecretForManualEntry('ABCDEFGHIJKLMNOP')
+     * // Returns: 'ABCD EFGH IJKL MNOP'
+     * ```
+     */
     formatSecretForManualEntry(secret) {
         return secret.match(/.{1,4}/g)?.join(' ') || secret;
     }
+    // ============================================================================
+    // Code Verification
+    // ============================================================================
+    /**
+     * Verify TOTP code against secret
+     *
+     * Validates a 6-digit TOTP code using time-based verification.
+     * Checks current time step plus configured window (before/after).
+     *
+     * SECURITY: Uses time window to account for clock drift and user delay.
+     * Default window of 1 checks 3 time steps (current, ±1).
+     *
+     * @param secret - Base32-encoded TOTP secret
+     * @param code - 6-digit TOTP code from authenticator app
+     * @returns True if code is valid within time window
+     *
+     * @example
+     * ```typescript
+     * // User enters code from Google Authenticator
+     * const isValid = totpService.verifyCode(user.totpSecret, '123456');
+     * if (isValid) {
+     *   // Grant access
+     * }
+     * ```
+     */
     verifyCode(secret, code) {
         try {
+            // Remove spaces and validate format
             const cleanCode = code.replace(/\s/g, '');
             if (!/^\d{6}$/.test(cleanCode)) {
                 this.logger?.warn?.('Invalid TOTP code format');
                 return false;
             }
+            // Verify code using otplib
             const isValid = otplib_1.authenticator.verify({
                 token: cleanCode,
                 secret,
@@ -120,7 +233,25 @@ class TOTPService {
             return false;
         }
     }
+    /**
+     * Verify TOTP code with additional validation
+     *
+     * Extended verification that checks code format and provides detailed error messages.
+     *
+     * @param secret - Base32-encoded TOTP secret
+     * @param code - TOTP code to verify
+     * @returns Verification result with error message if invalid
+     *
+     * @example
+     * ```typescript
+     * const result = totpService.verifyCodeWithDetails(secret, '123456');
+     * if (!result.valid) {
+     *   throw new BadRequestException(result.error);
+     * }
+     * ```
+     */
     verifyCodeWithDetails(secret, code) {
+        // Validate code format
         const cleanCode = code.replace(/\s/g, '');
         if (!cleanCode) {
             return { valid: false, error: 'Code is required' };
@@ -128,30 +259,82 @@ class TOTPService {
         if (!/^\d{6}$/.test(cleanCode)) {
             return { valid: false, error: 'Code must be 6 digits' };
         }
+        // Verify secret format
         if (!secret || secret.length < 16) {
             return { valid: false, error: 'Invalid secret' };
         }
+        // Verify code
         const isValid = this.verifyCode(secret, cleanCode);
         if (!isValid) {
             return { valid: false, error: 'Invalid or expired code' };
         }
         return { valid: true };
     }
+    // ============================================================================
+    // Utility Methods
+    // ============================================================================
+    /**
+     * Generate current TOTP code for secret
+     *
+     * FOR TESTING ONLY - Do not use in production authentication flow.
+     * This method generates the current valid code for a secret.
+     *
+     * @param secret - Base32-encoded TOTP secret
+     * @returns Current 6-digit TOTP code
+     *
+     * @example
+     * ```typescript
+     * // Testing only
+     * const code = totpService.generateCode(secret);
+     * // Returns: '123456'
+     * ```
+     */
     generateCode(secret) {
         return otplib_1.authenticator.generate(secret);
     }
+    /**
+     * Validate secret format
+     *
+     * Checks if a secret is valid base32 and has sufficient length.
+     *
+     * @param secret - Secret to validate
+     * @returns True if secret is valid
+     *
+     * @example
+     * ```typescript
+     * if (!totpService.isValidSecret(secret)) {
+     *   throw new BadRequestException('Invalid TOTP secret');
+     * }
+     * ```
+     */
     isValidSecret(secret) {
         if (!secret || typeof secret !== 'string') {
             return false;
         }
+        // Check minimum length (16 characters for 80 bits of entropy)
         if (secret.length < 16) {
             return false;
         }
+        // Check if valid base32 (A-Z, 2-7, no padding for otplib)
         if (!/^[A-Z2-7]+$/.test(secret)) {
             return false;
         }
         return true;
     }
+    /**
+     * Get time remaining until next code
+     *
+     * Returns seconds until the current TOTP code expires.
+     * Useful for UI countdowns.
+     *
+     * @returns Seconds remaining (0-30 for default 30s step)
+     *
+     * @example
+     * ```typescript
+     * const remaining = totpService.getTimeRemaining();
+     * // Returns: 15 (seconds until code changes)
+     * ```
+     */
     getTimeRemaining() {
         const totpConfig = this.getTOTPConfig();
         const now = Math.floor(Date.now() / 1000);

package/dist/src/totp.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"totp.service.js","sourceRoot":"","sources":["../../src/totp.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAuC;AACvC,+CAAiC;AACjC,8CAA0G;AA0B1G,MAAa,WAAW;IASH;IACA;IATF,aAAa,GAAyB;QACrD,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,MAAM;KAClB,CAAC;IAEF,YACmB,MAAmB,EACnB,MAAmB;QADnB,WAAM,GAAN,MAAM,CAAa;QACnB,WAAM,GAAN,MAAM,CAAa;QAGpC,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAcO,sBAAsB;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAExC,sBAAa,CAAC,OAAO,GAAG;YACtB,IAAI,EAAE,UAAU,CAAC,WAAW;YAC5B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,SAAS,EAAE,UAAU,CAAC,SAAgB;SACvC,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAClB,yBAAyB,UAAU,CAAC,WAAW,aAAa,UAAU,CAAC,MAAM,YAAY,UAAU,CAAC,MAAM,EAAE,CAC7G,CAAC;IACJ,CAAC;IAQO,aAAa;QACnB,OAAO;YACL,GAAG,IAAI,CAAC,aAAa;YACrB,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI;SACzB,CAAC;IACJ,CAAC;IAQO,SAAS;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,eAAe,CAAC;IACpD,CAAC;IAuBD,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;QAGjE,MAAM,MAAM,GAAG,sBAAa,CAAC,cAAc,EAAE,CAAC;QAG9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAGhC,MAAM,UAAU,GAAG,sBAAa,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAGrE,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;QACvF,CAAC;QAGD,MAAM,cAAc,GAAG,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAE/D,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,2CAA2C,WAAW,EAAE,CAAC,CAAC;QAE7E,OAAO;YACL,MAAM;YACN,MAAM;YACN,cAAc;YACd,MAAM;YACN,WAAW;SACZ,CAAC;IACJ,CAAC;IAiBO,0BAA0B,CAAC,MAAc;QAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;IACtD,CAAC;IA4BD,UAAU,CAAC,MAAc,EAAE,IAAY;QACrC,IAAI,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAE1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,CAAC;gBAChD,OAAO,KAAK,CAAC;YACf,CAAC;YAGD,MAAM,OAAO,GAAG,sBAAa,CAAC,MAAM,CAAC;gBACnC,KAAK,EAAE,SAAS;gBAChB,MAAM;aACP,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,iCAAiC,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,+BAA+B,CAAC,CAAC;YACvD,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAmBD,qBAAqB,CAAC,MAAc,EAAE,IAAY;QAEhD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC1D,CAAC;QAGD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACnD,CAAC;QAGD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC5D,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAsBD,YAAY,CAAC,MAAc;QACzB,OAAO,sBAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAiBD,aAAa,CAAC,MAAc;QAC1B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAgBD,gBAAgB;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC;QAC7C,OAAO,UAAU,CAAC,WAAW,GAAG,OAAO,CAAC;IAC1C,CAAC;CACF;AA7TD,kCA6TC"}
+{"version":3,"file":"totp.service.js","sourceRoot":"","sources":["../../src/totp.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,mCAAuC;AACvC,+CAAiC;AACjC,8CAA0G;AAG1G;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,MAAa,WAAW;IASH;IACA;IATF,aAAa,GAAyB;QACrD,MAAM,EAAE,CAAC;QACT,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,CAAC;QACT,SAAS,EAAE,MAAM;KAClB,CAAC;IAEF,YACmB,MAAmB,EACnB,MAAmB;QADnB,WAAM,GAAN,MAAM,CAAa;QACnB,WAAM,GAAN,MAAM,CAAa;QAEpC,6CAA6C;QAC7C,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAChC,CAAC;IAED,+EAA+E;IAC/E,gBAAgB;IAChB,+EAA+E;IAE/E;;;;;;;OAOG;IACK,sBAAsB;QAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAExC,sBAAa,CAAC,OAAO,GAAG;YACtB,IAAI,EAAE,UAAU,CAAC,WAAW;YAC5B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,SAAS,EAAE,UAAU,CAAC,SAAgB,EAAE,kDAAkD;SAC3F,CAAC;QAEF,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAClB,yBAAyB,UAAU,CAAC,WAAW,aAAa,UAAU,CAAC,MAAM,YAAY,UAAU,CAAC,MAAM,EAAE,CAC7G,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,aAAa;QACnB,OAAO;YACL,GAAG,IAAI,CAAC,aAAa;YACrB,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI;SACzB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACK,SAAS;QACf,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,eAAe,CAAC;IACpD,CAAC;IAED,+EAA+E;IAC/E,oBAAoB;IACpB,+EAA+E;IAE/E;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,+BAA+B,WAAW,EAAE,CAAC,CAAC;QAEjE,iCAAiC;QACjC,MAAM,MAAM,GAAG,sBAAa,CAAC,cAAc,EAAE,CAAC;QAE9C,kBAAkB;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAEhC,mCAAmC;QACnC,MAAM,UAAU,GAAG,sBAAa,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAErE,+BAA+B;QAC/B,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM,IAAI,qBAAc,CAAC,oBAAa,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;QACvF,CAAC;QAED,0DAA0D;QAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAE/D,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,2CAA2C,WAAW,EAAE,CAAC,CAAC;QAE7E,OAAO;YACL,MAAM;YACN,MAAM;YACN,cAAc;YACd,MAAM;YACN,WAAW;SACZ,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,0BAA0B,CAAC,MAAc;QAC/C,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;IACtD,CAAC;IAED,+EAA+E;IAC/E,oBAAoB;IACpB,+EAA+E;IAE/E;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,UAAU,CAAC,MAAc,EAAE,IAAY;QACrC,IAAI,CAAC;YACH,oCAAoC;YACpC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAE1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,0BAA0B,CAAC,CAAC;gBAChD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,2BAA2B;YAC3B,MAAM,OAAO,GAAG,sBAAa,CAAC,MAAM,CAAC;gBACnC,KAAK,EAAE,SAAS;gBAChB,MAAM;aACP,CAAC,CAAC;YAEH,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,iCAAiC,CAAC,CAAC;YAC1D,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,+BAA+B,CAAC,CAAC;YACvD,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;YACvD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,qBAAqB,CAAC,MAAc,EAAE,IAAY;QAChD,uBAAuB;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAE1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QACrD,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;QAC1D,CAAC;QAED,uBAAuB;QACvB,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACnD,CAAC;QAED,cAAc;QACd,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAEnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC5D,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,+EAA+E;IAC/E,kBAAkB;IAClB,+EAA+E;IAE/E;;;;;;;;;;;;;;;OAeG;IACH,YAAY,CAAC,MAAc;QACzB,OAAO,sBAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,aAAa,CAAC,MAAc;QAC1B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,8DAA8D;QAC9D,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,0DAA0D;QAC1D,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,gBAAgB;QACd,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC;QAC7C,OAAO,UAAU,CAAC,WAAW,GAAG,OAAO,CAAC;IAC1C,CAAC;CACF;AA7TD,kCA6TC"}