@tellescope/sdk 1.255.11 → 1.255.13

package/lib/esm/tests/api_tests/totp_mfa.test.js

@@ -0,0 +1,511 @@
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
+    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+require('source-map-support').install();
+import crypto from "crypto";
+import { Session } from "../../sdk";
+import { async_test, log_header, assert, wait, } from "@tellescope/testing";
+import { setup_tests } from "../setup";
+var host = process.env.API_URL || 'http://localhost:8080';
+var decode_jwt = function (token) {
+    try {
+        var part = token.split('.')[1];
+        var json = Buffer.from(part.replace(/-/g, '+').replace(/_/g, '/'), 'base64').toString('utf8');
+        return JSON.parse(json);
+    }
+    catch (_a) {
+        return null;
+    }
+};
+// Client-side TOTP mirror (RFC 6238, HMAC-SHA1, 6 digits, 30s period) so the test can
+// compute valid codes from the secret returned by begin_TOTP_configuration
+var TOTP_PERIOD_MS = 30000;
+var BASE32_ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
+var base32_decode = function (s) {
+    var bits = 0, value = 0;
+    var bytes = [];
+    for (var _i = 0, _a = s.toUpperCase().replace(/=+$/, ''); _i < _a.length; _i++) {
+        var char = _a[_i];
+        var index = BASE32_ALPHABET.indexOf(char);
+        if (index === -1)
+            throw new Error("Invalid base32 character");
+        value = (value << 5) | index;
+        bits += 5;
+        if (bits >= 8) {
+            bytes.push((value >>> (bits - 8)) & 255);
+            bits -= 8;
+        }
+    }
+    return Buffer.from(bytes);
+};
+var current_timestep = function () { return Math.floor(Date.now() / TOTP_PERIOD_MS); };
+var compute_totp_code = function (secret, timestep) {
+    if (timestep === void 0) { timestep = current_timestep(); }
+    var counter = Buffer.alloc(8);
+    counter.writeBigUInt64BE(BigInt(timestep));
+    var hmac = crypto.createHmac('sha1', base32_decode(secret)).update(counter).digest();
+    var offset = hmac[hmac.length - 1] & 0xf;
+    var binary = (((hmac[offset] & 0x7f) << 24)
+        | ((hmac[offset + 1] & 0xff) << 16)
+        | ((hmac[offset + 2] & 0xff) << 8)
+        | (hmac[offset + 3] & 0xff));
+    return (binary % 1000000).toString().padStart(6, '0');
+};
+// a syntactically-valid 6-digit code guaranteed not to match the current/adjacent timesteps
+var wrong_totp_code = function (secret) {
+    var step = current_timestep();
+    var valid = new Set([step - 1, step, step + 1].map(function (s) { return compute_totp_code(secret, s); }));
+    var candidate = (parseInt(compute_totp_code(secret, step)) + 1) % 1000000;
+    while (valid.has(candidate.toString().padStart(6, '0'))) {
+        candidate = (candidate + 1) % 1000000;
+    }
+    return candidate.toString().padStart(6, '0');
+};
+export var totp_mfa_tests = function (_a) {
+    var sdk = _a.sdk, sdkNonAdmin = _a.sdkNonAdmin;
+    return __awaiter(void 0, void 0, void 0, function () {
+        var NON_ADMIN_EMAIL, NON_ADMIN_PASSWORD, nonAdminId, businessId, totpSecret, lastVerifiedStep, wait_for_fresh_totp_step, set_allowed_mfa_methods, clear_allowed_mfa_methods, reset_mfa_state, otpauthURL_1, challengeSession_1, challengeCode_1, replaySession_1, saw429, i, e_1;
+        var _b;
+        return __generator(this, function (_c) {
+            switch (_c.label) {
+                case 0:
+                    log_header("TOTP MFA Tests");
+                    NON_ADMIN_EMAIL = process.env.NON_ADMIN_EMAIL;
+                    NON_ADMIN_PASSWORD = process.env.NON_ADMIN_PASSWORD;
+                    if (!(NON_ADMIN_EMAIL && NON_ADMIN_PASSWORD)) {
+                        throw new Error("NON_ADMIN_EMAIL and NON_ADMIN_PASSWORD must be set to run totp_mfa_tests");
+                    }
+                    nonAdminId = sdkNonAdmin.userInfo.id;
+                    businessId = sdk.userInfo.businessId;
+                    totpSecret = '';
+                    lastVerifiedStep = 0;
+                    wait_for_fresh_totp_step = function () { return __awaiter(void 0, void 0, void 0, function () {
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    if (!(current_timestep() <= lastVerifiedStep)) return [3 /*break*/, 2];
+                                    return [4 /*yield*/, wait(undefined, 1000)];
+                                case 1:
+                                    _a.sent();
+                                    return [3 /*break*/, 0];
+                                case 2: return [2 /*return*/];
+                            }
+                        });
+                    }); };
+                    set_allowed_mfa_methods = function (methods) { return __awaiter(void 0, void 0, void 0, function () {
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0: return [4 /*yield*/, sdk.api.users.updateOne(nonAdminId, { allowedMFAMethods: methods }, { replaceObjectFields: true })];
+                                case 1:
+                                    _a.sent();
+                                    return [4 /*yield*/, wait(undefined, 250)];
+                                case 2:
+                                    _a.sent();
+                                    return [2 /*return*/];
+                            }
+                        });
+                    }); };
+                    clear_allowed_mfa_methods = function () { return __awaiter(void 0, void 0, void 0, function () {
+                        var u;
+                        var _a;
+                        return __generator(this, function (_b) {
+                            switch (_b.label) {
+                                case 0: return [4 /*yield*/, sdk.api.users.getOne(nonAdminId)];
+                                case 1:
+                                    u = _b.sent();
+                                    if (!((_a = u.allowedMFAMethods) !== null && _a !== void 0 ? _a : []).length)
+                                        return [2 /*return*/];
+                                    return [4 /*yield*/, set_allowed_mfa_methods([])];
+                                case 2:
+                                    _b.sent();
+                                    return [2 /*return*/];
+                            }
+                        });
+                    }); };
+                    reset_mfa_state = function () { return __awaiter(void 0, void 0, void 0, function () {
+                        var _a, _b, _c, authToken, user, _d;
+                        return __generator(this, function (_e) {
+                            switch (_e.label) {
+                                case 0:
+                                    _e.trys.push([0, 2, , 3]);
+                                    return [4 /*yield*/, sdk.api.organizations.updateOne(businessId, { enforceMFA: false })];
+                                case 1:
+                                    _e.sent();
+                                    return [3 /*break*/, 3];
+                                case 2:
+                                    _a = _e.sent();
+                                    return [3 /*break*/, 3];
+                                case 3: return [4 /*yield*/, wait(undefined, 250)];
+                                case 4:
+                                    _e.sent();
+                                    _e.label = 5;
+                                case 5:
+                                    _e.trys.push([5, 7, , 8]);
+                                    return [4 /*yield*/, clear_allowed_mfa_methods()];
+                                case 6:
+                                    _e.sent();
+                                    return [3 /*break*/, 8];
+                                case 7:
+                                    _b = _e.sent();
+                                    return [3 /*break*/, 8];
+                                case 8:
+                                    _e.trys.push([8, 11, , 12]);
+                                    return [4 /*yield*/, sdkNonAdmin.api.users.configure_MFA({ disable: true })];
+                                case 9:
+                                    _c = _e.sent(), authToken = _c.authToken, user = _c.user;
+                                    return [4 /*yield*/, sdkNonAdmin.handle_new_session(__assign(__assign({}, user), { authToken: authToken }))];
+                                case 10:
+                                    _e.sent();
+                                    return [3 /*break*/, 12];
+                                case 11:
+                                    _d = _e.sent();
+                                    return [3 /*break*/, 12];
+                                case 12: return [4 /*yield*/, wait(undefined, 250)];
+                                case 13:
+                                    _e.sent();
+                                    return [2 /*return*/];
+                            }
+                        });
+                    }); };
+                    return [4 /*yield*/, reset_mfa_state()];
+                case 1:
+                    _c.sent();
+                    _c.label = 2;
+                case 2:
+                    _c.trys.push([2, , 49, 51]);
+                    // ============================================================
+                    // A. Enrollment
+                    // ============================================================
+                    log_header("A. TOTP Enrollment");
+                    otpauthURL_1 = '';
+                    return [4 /*yield*/, async_test('A1. begin_TOTP_configuration returns otpauthURL + secret', function () { return sdkNonAdmin.api.users.begin_TOTP_configuration({}); }, { shouldError: false, onResult: function (r) {
+                                totpSecret = r.secret;
+                                otpauthURL_1 = r.otpauthURL;
+                                return typeof r.secret === 'string' && r.secret.length >= 16 && /^[A-Z2-7]+$/.test(r.secret);
+                            } })];
+                case 3:
+                    _c.sent();
+                    assert(otpauthURL_1.includes(totpSecret), 'otpauthURL missing secret', 'A2. otpauthURL contains secret');
+                    assert(otpauthURL_1.startsWith('otpauth://totp/'), 'unexpected otpauth scheme', 'A3. otpauth scheme');
+                    assert(otpauthURL_1.includes('issuer=Tellescope'), 'otpauthURL missing issuer', 'A4. otpauthURL issuer');
+                    return [4 /*yield*/, async_test('A5. confirm with wrong code -> 401', function () { return sdkNonAdmin.api.users.confirm_TOTP_configuration({ code: wrong_totp_code(totpSecret) }); }, { shouldError: true, onError: function (e) { return e.statusCode === 401 || /invalid/i.test(e.message || ''); } })];
+                case 4:
+                    _c.sent();
+                    return [4 /*yield*/, wait(undefined, 600)]; // confirm rate limit is 1/500ms
+                case 5:
+                    _c.sent(); // confirm rate limit is 1/500ms
+                    return [4 /*yield*/, async_test('A6. confirm with correct code -> enabled, 10 recovery codes, requiresMFA false', function () { return sdkNonAdmin.api.users.confirm_TOTP_configuration({ code: compute_totp_code(totpSecret) }); }, { shouldError: false, onResult: function (r) {
+                                var _a, _b, _c, _d;
+                                if (r.authToken)
+                                    sdkNonAdmin.handle_new_session(__assign(__assign({}, r.user), { authToken: r.authToken }));
+                                return (((_a = r.recoveryCodes) === null || _a === void 0 ? void 0 : _a.length) === 10
+                                    && ((_c = (_b = r.user) === null || _b === void 0 ? void 0 : _b.mfa) === null || _c === void 0 ? void 0 : _c.authenticator) === true
+                                    && ((_d = decode_jwt(r.authToken)) === null || _d === void 0 ? void 0 : _d.requiresMFA) === false);
+                            } })];
+                case 6:
+                    _c.sent();
+                    lastVerifiedStep = current_timestep();
+                    return [4 /*yield*/, async_test('A7. user record has mfa.authenticator === true', function () { return sdk.api.users.getOne(nonAdminId); }, { shouldError: false, onResult: function (u) { var _a, _b; return ((_a = u.mfa) === null || _a === void 0 ? void 0 : _a.authenticator) === true && !((_b = u.mfa) === null || _b === void 0 ? void 0 : _b.email); } })];
+                case 7:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('A8. begin again while enrolled -> 400', function () { return sdkNonAdmin.api.users.begin_TOTP_configuration({}); }, { shouldError: true, onError: function (e) { return e.statusCode === 400 || /already configured/i.test(e.message || ''); } })
+                        // ============================================================
+                        // B. Login challenge + replay protection
+                        // ============================================================
+                    ];
+                case 8:
+                    _c.sent();
+                    // ============================================================
+                    // B. Login challenge + replay protection
+                    // ============================================================
+                    log_header("B. TOTP Challenge + Replay");
+                    challengeSession_1 = new Session({ host: host });
+                    return [4 /*yield*/, challengeSession_1.authenticate(NON_ADMIN_EMAIL, NON_ADMIN_PASSWORD)];
+                case 9:
+                    _c.sent();
+                    assert(!!challengeSession_1.userInfo.requiresMFA || ((_b = decode_jwt(challengeSession_1.authToken)) === null || _b === void 0 ? void 0 : _b.requiresMFA) === true, 'expected requiresMFA session after password login with TOTP enabled', 'B1. password login yields requiresMFA session');
+                    return [4 /*yield*/, wait_for_fresh_totp_step()];
+                case 10:
+                    _c.sent();
+                    challengeCode_1 = compute_totp_code(totpSecret);
+                    return [4 /*yield*/, async_test('B2. submit_MFA_challenge with TOTP code -> full session', function () { return challengeSession_1.api.users.submit_MFA_challenge({ code: challengeCode_1 }); }, { shouldError: false, onResult: function (r) { var _a; return ((_a = decode_jwt(r.authToken)) === null || _a === void 0 ? void 0 : _a.requiresMFA) === false; } })];
+                case 11:
+                    _c.sent();
+                    lastVerifiedStep = current_timestep();
+                    replaySession_1 = new Session({ host: host });
+                    return [4 /*yield*/, replaySession_1.authenticate(NON_ADMIN_EMAIL, NON_ADMIN_PASSWORD)];
+                case 12:
+                    _c.sent();
+                    return [4 /*yield*/, wait(undefined, 600)]; // submit rate limit is 1/500ms
+                case 13:
+                    _c.sent(); // submit rate limit is 1/500ms
+                    return [4 /*yield*/, async_test('B3. replaying the same TOTP code -> 401', function () { return replaySession_1.api.users.submit_MFA_challenge({ code: challengeCode_1 }); }, { shouldError: true, onError: function (e) { return e.statusCode === 401 || /invalid/i.test(e.message || ''); } })
+                        // ============================================================
+                        // C. Recovery-code interplay with a second method
+                        // ============================================================
+                    ];
+                case 14:
+                    _c.sent();
+                    // ============================================================
+                    // C. Recovery-code interplay with a second method
+                    // ============================================================
+                    log_header("C. Recovery-code interplay");
+                    return [4 /*yield*/, async_test('C1. enabling email MFA when TOTP already configured -> recoveryCodes []', function () { return sdkNonAdmin.api.users.configure_MFA({}); }, { shouldError: false, onResult: function (r) {
+                                var _a, _b, _c, _d, _e;
+                                if (r.authToken)
+                                    sdkNonAdmin.handle_new_session(__assign(__assign({}, r.user), { authToken: r.authToken }));
+                                return ((_a = r.recoveryCodes) === null || _a === void 0 ? void 0 : _a.length) === 0 && ((_c = (_b = r.user) === null || _b === void 0 ? void 0 : _b.mfa) === null || _c === void 0 ? void 0 : _c.email) === true && ((_e = (_d = r.user) === null || _d === void 0 ? void 0 : _d.mfa) === null || _e === void 0 ? void 0 : _e.authenticator) === true;
+                            } })
+                        // ============================================================
+                        // D. Method-scoped disable + enforceMFA last-method rule
+                        // ============================================================
+                    ];
+                case 15:
+                    _c.sent();
+                    // ============================================================
+                    // D. Method-scoped disable + enforceMFA last-method rule
+                    // ============================================================
+                    log_header("D. Method-scoped disable");
+                    return [4 /*yield*/, sdk.api.organizations.updateOne(businessId, { enforceMFA: true })];
+                case 16:
+                    _c.sent();
+                    return [4 /*yield*/, wait(undefined, 250)];
+                case 17:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('D1. disable email (other method remains) succeeds under enforceMFA', function () { return sdkNonAdmin.api.users.configure_MFA({ disable: true, method: 'email' }); }, { shouldError: false, onResult: function (r) {
+                                var _a, _b, _c, _d;
+                                if (r.authToken)
+                                    sdkNonAdmin.handle_new_session(__assign(__assign({}, r.user), { authToken: r.authToken }));
+                                return !((_b = (_a = r.user) === null || _a === void 0 ? void 0 : _a.mfa) === null || _b === void 0 ? void 0 : _b.email) && ((_d = (_c = r.user) === null || _c === void 0 ? void 0 : _c.mfa) === null || _d === void 0 ? void 0 : _d.authenticator) === true;
+                            } })];
+                case 18:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('D2. disabling last method under enforceMFA -> 400', function () { return sdkNonAdmin.api.users.configure_MFA({ disable: true, method: 'authenticator' }); }, { shouldError: true, onError: function (e) { return e.statusCode === 400 || /at least one/i.test(e.message || ''); } })];
+                case 19:
+                    _c.sent();
+                    return [4 /*yield*/, sdk.api.organizations.updateOne(businessId, { enforceMFA: false })];
+                case 20:
+                    _c.sent();
+                    return [4 /*yield*/, wait(undefined, 250)];
+                case 21:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('D3. disable authenticator (enforceMFA off) succeeds', function () { return sdkNonAdmin.api.users.configure_MFA({ disable: true, method: 'authenticator' }); }, { shouldError: false, onResult: function (r) {
+                                var _a, _b, _c, _d;
+                                if (r.authToken)
+                                    sdkNonAdmin.handle_new_session(__assign(__assign({}, r.user), { authToken: r.authToken }));
+                                return !((_b = (_a = r.user) === null || _a === void 0 ? void 0 : _a.mfa) === null || _b === void 0 ? void 0 : _b.authenticator) && !((_d = (_c = r.user) === null || _c === void 0 ? void 0 : _c.mfa) === null || _d === void 0 ? void 0 : _d.email);
+                            } })];
+                case 22:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('D4. user record mfa cleared', function () { return sdk.api.users.getOne(nonAdminId); }, { shouldError: false, onResult: function (u) { var _a, _b; return !((_a = u.mfa) === null || _a === void 0 ? void 0 : _a.authenticator) && !((_b = u.mfa) === null || _b === void 0 ? void 0 : _b.email); } })
+                        // TOTP secret deleted with the method: a still-valid-looking code must no longer verify
+                    ];
+                case 23:
+                    _c.sent();
+                    // TOTP secret deleted with the method: a still-valid-looking code must no longer verify
+                    return [4 /*yield*/, wait_for_fresh_totp_step()];
+                case 24:
+                    // TOTP secret deleted with the method: a still-valid-looking code must no longer verify
+                    _c.sent();
+                    return [4 /*yield*/, wait(undefined, 600)]; // submit rate limit is 1/500ms
+                case 25:
+                    _c.sent(); // submit rate limit is 1/500ms
+                    return [4 /*yield*/, async_test('D5. TOTP submit after disable -> 401 (secret deleted)', function () { return sdkNonAdmin.api.users.submit_MFA_challenge({ code: compute_totp_code(totpSecret) }); }, { shouldError: true, onError: function (e) { return e.statusCode === 401 || /invalid/i.test(e.message || ''); } })
+                        // ============================================================
+                        // E. allowedMFAMethods restriction gating + grace
+                        // ============================================================
+                    ];
+                case 26:
+                    _c.sent();
+                    // ============================================================
+                    // E. allowedMFAMethods restriction gating + grace
+                    // ============================================================
+                    log_header("E. allowedMFAMethods gating");
+                    return [4 /*yield*/, set_allowed_mfa_methods(['authenticator'])];
+                case 27:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('E1. restricted to authenticator: enabling email MFA -> 403', function () { return sdkNonAdmin.api.users.configure_MFA({}); }, { shouldError: true, onError: function (e) { return e.statusCode === 403 || /not permitted/i.test(e.message || ''); } })];
+                case 28:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('E2. restricted to authenticator + email unconfigured: email challenge -> 403', function () { return sdkNonAdmin.api.users.generate_MFA_challenge({ method: 'email' }); }, { shouldError: true, onError: function (e) { return e.statusCode === 403 || /not permitted/i.test(e.message || ''); } })];
+                case 29:
+                    _c.sent();
+                    return [4 /*yield*/, set_allowed_mfa_methods(['email'])];
+                case 30:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('E3. restricted to email: begin_TOTP_configuration -> 403', function () { return sdkNonAdmin.api.users.begin_TOTP_configuration({}); }, { shouldError: true, onError: function (e) { return e.statusCode === 403 || /not permitted/i.test(e.message || ''); } })];
+                case 31:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('E4. restricted to email: enabling email MFA succeeds (first method -> 10 recovery codes)', function () { return sdkNonAdmin.api.users.configure_MFA({}); }, { shouldError: false, onResult: function (r) {
+                                var _a, _b, _c;
+                                if (r.authToken)
+                                    sdkNonAdmin.handle_new_session(__assign(__assign({}, r.user), { authToken: r.authToken }));
+                                return ((_a = r.recoveryCodes) === null || _a === void 0 ? void 0 : _a.length) === 10 && ((_c = (_b = r.user) === null || _b === void 0 ? void 0 : _b.mfa) === null || _c === void 0 ? void 0 : _c.email) === true;
+                            } })
+                        // grace: email is configured, then the user is restricted to authenticator-only —
+                        // the already-configured email method must keep working (no lockout)
+                    ];
+                case 32:
+                    _c.sent();
+                    // grace: email is configured, then the user is restricted to authenticator-only —
+                    // the already-configured email method must keep working (no lockout)
+                    return [4 /*yield*/, set_allowed_mfa_methods(['authenticator'])];
+                case 33:
+                    // grace: email is configured, then the user is restricted to authenticator-only —
+                    // the already-configured email method must keep working (no lockout)
+                    _c.sent();
+                    return [4 /*yield*/, async_test('E5. grace: configured email challenge still works after restriction', function () { return sdkNonAdmin.api.users.generate_MFA_challenge({ method: 'email' }); }, { shouldError: false, onResult: function () { return true; } })
+                        // cleanup E: clear restriction + disable email
+                    ];
+                case 34:
+                    _c.sent();
+                    // cleanup E: clear restriction + disable email
+                    return [4 /*yield*/, clear_allowed_mfa_methods()];
+                case 35:
+                    // cleanup E: clear restriction + disable email
+                    _c.sent();
+                    return [4 /*yield*/, async_test('E6. cleanup: disable email', function () { return sdkNonAdmin.api.users.configure_MFA({ disable: true, method: 'email' }); }, { shouldError: false, onResult: function (r) {
+                                if (r.authToken)
+                                    sdkNonAdmin.handle_new_session(__assign(__assign({}, r.user), { authToken: r.authToken }));
+                                return true;
+                            } })
+                        // ============================================================
+                        // F. allowedMFAMethods is admin-only
+                        // ============================================================
+                    ];
+                case 36:
+                    _c.sent();
+                    // ============================================================
+                    // F. allowedMFAMethods is admin-only
+                    // ============================================================
+                    log_header("F. allowedMFAMethods admin gate");
+                    return [4 /*yield*/, async_test('F1. non-admin cannot update allowedMFAMethods', function () { return sdkNonAdmin.api.users.updateOne(nonAdminId, { allowedMFAMethods: ['email'] }, { replaceObjectFields: true }); }, { shouldError: true, onError: function (e) { return /admin/i.test(e.message || '') || e.statusCode === 400 || e.statusCode === 403; } })];
+                case 37:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('F2. admin can update allowedMFAMethods', function () { return sdk.api.users.updateOne(nonAdminId, { allowedMFAMethods: ['email'] }, { replaceObjectFields: true }); }, { shouldError: false, onResult: function () { return true; } })];
+                case 38:
+                    _c.sent();
+                    return [4 /*yield*/, wait(undefined, 250)];
+                case 39:
+                    _c.sent();
+                    return [4 /*yield*/, async_test('F3. allowedMFAMethods persisted', function () { return sdk.api.users.getOne(nonAdminId); }, { shouldError: false, onResult: function (u) { return JSON.stringify(u.allowedMFAMethods) === JSON.stringify(['email']); } })];
+                case 40:
+                    _c.sent();
+                    return [4 /*yield*/, clear_allowed_mfa_methods()
+                        // ============================================================
+                        // G. Brute-force rate limit (runs last: exhausts the 10/10min submit bucket)
+                        // ============================================================
+                    ];
+                case 41:
+                    _c.sent();
+                    // ============================================================
+                    // G. Brute-force rate limit (runs last: exhausts the 10/10min submit bucket)
+                    // ============================================================
+                    log_header("G. Brute-force rate limit");
+                    saw429 = false;
+                    i = 0;
+                    _c.label = 42;
+                case 42:
+                    if (!(i < 12 && !saw429)) return [3 /*break*/, 48];
+                    return [4 /*yield*/, wait(undefined, 600)]; // stay under the 1/500ms bucket so only the 10/10min bucket trips
+                case 43:
+                    _c.sent(); // stay under the 1/500ms bucket so only the 10/10min bucket trips
+                    _c.label = 44;
+                case 44:
+                    _c.trys.push([44, 46, , 47]);
+                    return [4 /*yield*/, sdkNonAdmin.api.users.submit_MFA_challenge({ code: '123456' })];
+                case 45:
+                    _c.sent();
+                    return [3 /*break*/, 47];
+                case 46:
+                    e_1 = _c.sent();
+                    if (e_1.statusCode === 429 || /rate limit/i.test(e_1.message || ''))
+                        saw429 = true;
+                    return [3 /*break*/, 47];
+                case 47:
+                    i++;
+                    return [3 /*break*/, 42];
+                case 48:
+                    assert(saw429, 'expected 429 from repeated bad MFA submissions', 'G1. repeated bad codes hit 10/10min rate limit');
+                    return [3 /*break*/, 51];
+                case 49: return [4 /*yield*/, reset_mfa_state()];
+                case 50:
+                    _c.sent();
+                    return [7 /*endfinally*/];
+                case 51: return [2 /*return*/];
+            }
+        });
+    });
+};
+// Allow running this test file independently
+if (require.main === module) {
+    var sdk_1 = new Session({ host: host });
+    var sdkNonAdmin_1 = new Session({ host: host });
+    var runTests = function () { return __awaiter(void 0, void 0, void 0, function () {
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0: return [4 /*yield*/, setup_tests(sdk_1, sdkNonAdmin_1)];
+                case 1:
+                    _a.sent();
+                    return [4 /*yield*/, totp_mfa_tests({ sdk: sdk_1, sdkNonAdmin: sdkNonAdmin_1 })];
+                case 2:
+                    _a.sent();
+                    return [2 /*return*/];
+            }
+        });
+    }); };
+    runTests()
+        .then(function () {
+        console.log("✅ TOTP MFA test suite completed successfully");
+        process.exit(0);
+    })
+        .catch(function (error) {
+        console.error("❌ TOTP MFA test suite failed:", error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=totp_mfa.test.js.map

package/lib/esm/tests/api_tests/totp_mfa.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"totp_mfa.test.js","sourceRoot":"","sources":["../../../../src/tests/api_tests/totp_mfa.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC;AAExC,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EACL,UAAU,EACV,UAAU,EACV,MAAM,EACN,IAAI,GACL,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AAEtC,IAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,uBAAgC,CAAA;AAEpE,IAAM,UAAU,GAAG,UAAC,KAAa;IAC/B,IAAI;QACF,IAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAChC,IAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAC/F,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;KACxB;IAAC,WAAM;QAAE,OAAO,IAAI,CAAA;KAAE;AACzB,CAAC,CAAA;AAED,sFAAsF;AACtF,2EAA2E;AAC3E,IAAM,cAAc,GAAG,KAAM,CAAA;AAC7B,IAAM,eAAe,GAAG,kCAAkC,CAAA;AAC1D,IAAM,aAAa,GAAG,UAAC,CAAS;IAC9B,IAAI,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAA;IACvB,IAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAmB,UAAkC,EAAlC,KAAA,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAlC,cAAkC,EAAlC,IAAkC,EAAE;QAAlD,IAAM,IAAI,SAAA;QACb,IAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QAC3C,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC7D,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAA;QAC5B,IAAI,IAAI,CAAC,CAAA;QACT,IAAI,IAAI,IAAI,CAAC,EAAE;YACb,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAA;YACxC,IAAI,IAAI,CAAC,CAAA;SACV;KACF;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAC3B,CAAC,CAAA;AACD,IAAM,gBAAgB,GAAG,cAAM,OAAA,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,EAAvC,CAAuC,CAAA;AACtE,IAAM,iBAAiB,GAAG,UAAC,MAAc,EAAE,QAA2B;IAA3B,yBAAA,EAAA,WAAS,gBAAgB,EAAE;IACpE,IAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC/B,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC1C,IAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAA;IACtF,IAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAA;IAC1C,IAAM,MAAM,GAAG,CACX,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;UAC7B,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;UACjC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;UAChC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAC5B,CAAA;IACD,OAAO,CAAC,MAAM,GAAG,OAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACzD,CAAC,CAAA;AACD,4FAA4F;AAC5F,IAAM,eAAe,GAAG,UAAC,MAAc;IACrC,IAAM,IAAI,GAAG,gBAAgB,EAAE,CAAA;IAC/B,IAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAA,CAAC,IAAI,OAAA,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,EAA5B,CAA4B,CAAC,CAAC,CAAA;IAExF,IAAI,SAAS,GAAG,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,OAAS,CAAA;IAC3E,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;QACvD,SAAS,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,OAAS,CAAA;KACxC;IACD,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAC9C,CAAC,CAAA;AAED,MAAM,CAAC,IAAM,cAAc,GAAG,UAAO,EAA6D;QAA3D,GAAG,SAAA,EAAE,WAAW,iBAAA;;;;;;;oBACrD,UAAU,CAAC,gBAAgB,CAAC,CAAA;oBAEtB,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;oBAC7C,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAA;oBACzD,IAAI,CAAC,CAAC,eAAe,IAAI,kBAAkB,CAAC,EAAE;wBAC5C,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;qBAC5F;oBAEK,UAAU,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAA;oBACpC,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAA;oBAGtC,UAAU,GAAG,EAAE,CAAA;oBAGf,gBAAgB,GAAG,CAAC,CAAA;oBAClB,wBAAwB,GAAG;;;;yCACxB,CAAA,gBAAgB,EAAE,IAAI,gBAAgB,CAAA;oCAC3C,qBAAM,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAA;;oCAA3B,SAA2B,CAAA;;;;;yBAE9B,CAAA;oBAEK,uBAAuB,GAAG,UAAO,OAAiB;;;wCACtD,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAS,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAA;;oCAA/G,SAA+G,CAAA;oCAC/G,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oCAA1B,SAA0B,CAAA;;;;yBAC3B,CAAA;oBAEK,yBAAyB,GAAG;;;;;wCACjB,qBAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAA;;oCAA/C,CAAC,GAAQ,SAAsC;oCACrD,IAAI,CAAC,CAAC,MAAA,CAAC,CAAC,iBAAiB,mCAAI,EAAE,CAAC,CAAC,MAAM;wCAAE,sBAAM;oCAC/C,qBAAM,uBAAuB,CAAC,EAAE,CAAC,EAAA;;oCAAjC,SAAiC,CAAA;;;;yBAClC,CAAA;oBAGK,eAAe,GAAG;;;;;;oCAChB,qBAAM,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,EAAS,CAAC,EAAA;;oCAA/E,SAA+E,CAAA;;;;;wCACrF,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oCAA1B,SAA0B,CAAA;;;;oCACpB,qBAAM,yBAAyB,EAAE,EAAA;;oCAAjC,SAAiC,CAAA;;;;;;;oCAET,qBAAM,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAA;;oCAAlF,KAAsB,SAA4D,EAAhF,SAAS,eAAA,EAAE,IAAI,UAAA;oCACvB,qBAAM,WAAW,CAAC,kBAAkB,CAAC,sBAAK,IAAI,KAAE,SAAS,WAAA,GAAS,CAAC,EAAA;;oCAAnE,SAAmE,CAAA;;;;;yCAErE,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oCAA1B,SAA0B,CAAA;;;;yBAC3B,CAAA;oBAED,qBAAM,eAAe,EAAE,EAAA;;oBAAvB,SAAuB,CAAA;;;;oBAGrB,+DAA+D;oBAC/D,gBAAgB;oBAChB,+DAA+D;oBAC/D,UAAU,CAAC,oBAAoB,CAAC,CAAA;oBAE5B,eAAa,EAAE,CAAA;oBACnB,qBAAM,UAAU,CACd,0DAA0D,EAC1D,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,EAAlD,CAAkD,EACxD,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM;gCACrC,UAAU,GAAG,CAAC,CAAC,MAAM,CAAA;gCACrB,YAAU,GAAG,CAAC,CAAC,UAAU,CAAA;gCACzB,OAAO,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;4BAC9F,CAAC,EAAC,CACH,EAAA;;oBARD,SAQC,CAAA;oBACD,MAAM,CAAC,YAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,2BAA2B,EAAE,gCAAgC,CAAC,CAAA;oBACtG,MAAM,CAAC,YAAU,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,2BAA2B,EAAE,oBAAoB,CAAC,CAAA;oBACnG,MAAM,CAAC,YAAU,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,2BAA2B,EAAE,uBAAuB,CAAC,CAAA;oBAEtG,qBAAM,UAAU,CACd,oCAAoC,EACpC,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC,EAAvF,CAAuF,EAC7F,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAxD,CAAwD,EAAE,CACrG,EAAA;;oBAJD,SAIC,CAAA;oBAED,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,gCAAgC;;oBAA3D,SAA0B,CAAA,CAAC,gCAAgC;oBAC3D,qBAAM,UAAU,CACd,gFAAgF,EAChF,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC,EAAzF,CAAyF,EAC/F,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM;;gCACrC,IAAI,CAAC,CAAC,SAAS;oCAAE,WAAW,CAAC,kBAAkB,CAAC,sBAAK,CAAC,CAAC,IAAI,KAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAS,CAAC,CAAA;gCAC7F,OAAO,CACL,CAAA,MAAA,CAAC,CAAC,aAAa,0CAAE,MAAM,MAAK,EAAE;uCAC3B,CAAA,MAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,GAAG,0CAAE,aAAa,MAAK,IAAI;uCACnC,CAAA,MAAA,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,0CAAE,WAAW,MAAK,KAAK,CAClD,CAAA;4BACH,CAAC,EAAC,CACH,EAAA;;oBAXD,SAWC,CAAA;oBACD,gBAAgB,GAAG,gBAAgB,EAAE,CAAA;oBAErC,qBAAM,UAAU,CACd,gDAAgD,EAChD,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAhC,CAAgC,EACtC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM,gBAAK,OAAA,CAAA,MAAA,CAAC,CAAC,GAAG,0CAAE,aAAa,MAAK,IAAI,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,GAAG,0CAAE,KAAK,CAAA,CAAA,EAAA,EAAE,CAC7F,EAAA;;oBAJD,SAIC,CAAA;oBAED,qBAAM,UAAU,CACd,uCAAuC,EACvC,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,EAAlD,CAAkD,EACxD,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAnE,CAAmE,EAAE,CAChH;wBAED,+DAA+D;wBAC/D,yCAAyC;wBACzC,+DAA+D;sBAJ9D;;oBAJD,SAIC,CAAA;oBAED,+DAA+D;oBAC/D,yCAAyC;oBACzC,+DAA+D;oBAC/D,UAAU,CAAC,4BAA4B,CAAC,CAAA;oBAElC,qBAAmB,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;oBAC9C,qBAAM,kBAAgB,CAAC,YAAY,CAAC,eAAe,EAAE,kBAAkB,CAAC,EAAA;;oBAAxE,SAAwE,CAAA;oBACxE,MAAM,CACJ,CAAC,CAAC,kBAAgB,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAA,MAAA,UAAU,CAAE,kBAAwB,CAAC,SAAS,CAAC,0CAAE,WAAW,MAAK,IAAI,EAChH,qEAAqE,EACrE,+CAA+C,CAChD,CAAA;oBAED,qBAAM,wBAAwB,EAAE,EAAA;;oBAAhC,SAAgC,CAAA;oBAC1B,kBAAgB,iBAAiB,CAAC,UAAU,CAAC,CAAA;oBACnD,qBAAM,UAAU,CACd,yDAAyD,EACzD,cAAM,OAAA,kBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,eAAa,EAAE,CAAC,EAAxE,CAAwE,EAC9E,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM,YAAK,OAAA,CAAA,MAAA,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,0CAAE,WAAW,MAAK,KAAK,CAAA,EAAA,EAAE,CAC7F,EAAA;;oBAJD,SAIC,CAAA;oBACD,gBAAgB,GAAG,gBAAgB,EAAE,CAAA;oBAG/B,kBAAgB,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;oBAC3C,qBAAM,eAAa,CAAC,YAAY,CAAC,eAAe,EAAE,kBAAkB,CAAC,EAAA;;oBAArE,SAAqE,CAAA;oBACrE,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,+BAA+B;;oBAA1D,SAA0B,CAAA,CAAC,+BAA+B;oBAC1D,qBAAM,UAAU,CACd,yCAAyC,EACzC,cAAM,OAAA,eAAa,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,eAAa,EAAE,CAAC,EAArE,CAAqE,EAC3E,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAxD,CAAwD,EAAE,CACrG;wBAED,+DAA+D;wBAC/D,kDAAkD;wBAClD,+DAA+D;sBAJ9D;;oBAJD,SAIC,CAAA;oBAED,+DAA+D;oBAC/D,kDAAkD;oBAClD,+DAA+D;oBAC/D,UAAU,CAAC,4BAA4B,CAAC,CAAA;oBAExC,qBAAM,UAAU,CACd,yEAAyE,EACzE,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,EAAvC,CAAuC,EAC7C,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM;;gCACrC,IAAI,CAAC,CAAC,SAAS;oCAAE,WAAW,CAAC,kBAAkB,CAAC,sBAAK,CAAC,CAAC,IAAI,KAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAS,CAAC,CAAA;gCAC7F,OAAO,CAAA,MAAA,CAAC,CAAC,aAAa,0CAAE,MAAM,MAAK,CAAC,IAAI,CAAA,MAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,GAAG,0CAAE,KAAK,MAAK,IAAI,IAAI,CAAA,MAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,GAAG,0CAAE,aAAa,MAAK,IAAI,CAAA;4BAC5G,CAAC,EAAC,CACH;wBAED,+DAA+D;wBAC/D,yDAAyD;wBACzD,+DAA+D;sBAJ9D;;oBAPD,SAOC,CAAA;oBAED,+DAA+D;oBAC/D,yDAAyD;oBACzD,+DAA+D;oBAC/D,UAAU,CAAC,0BAA0B,CAAC,CAAA;oBAEtC,qBAAM,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,IAAI,EAAS,CAAC,EAAA;;oBAA9E,SAA8E,CAAA;oBAC9E,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAE1B,qBAAM,UAAU,CACd,oEAAoE,EACpE,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAvE,CAAuE,EAC7E,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM;;gCACrC,IAAI,CAAC,CAAC,SAAS;oCAAE,WAAW,CAAC,kBAAkB,CAAC,sBAAK,CAAC,CAAC,IAAI,KAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAS,CAAC,CAAA;gCAC7F,OAAO,CAAC,CAAA,MAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,GAAG,0CAAE,KAAK,CAAA,IAAI,CAAA,MAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,GAAG,0CAAE,aAAa,MAAK,IAAI,CAAA;4BACnE,CAAC,EAAC,CACH,EAAA;;oBAPD,SAOC,CAAA;oBAED,qBAAM,UAAU,CACd,mDAAmD,EACnD,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,EAA/E,CAA+E,EACrF,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAA7D,CAA6D,EAAE,CAC1G,EAAA;;oBAJD,SAIC,CAAA;oBAED,qBAAM,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,EAAS,CAAC,EAAA;;oBAA/E,SAA+E,CAAA;oBAC/E,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAE1B,qBAAM,UAAU,CACd,qDAAqD,EACrD,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,EAA/E,CAA+E,EACrF,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM;;gCACrC,IAAI,CAAC,CAAC,SAAS;oCAAE,WAAW,CAAC,kBAAkB,CAAC,sBAAK,CAAC,CAAC,IAAI,KAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAS,CAAC,CAAA;gCAC7F,OAAO,CAAC,CAAA,MAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,GAAG,0CAAE,aAAa,CAAA,IAAI,CAAC,CAAA,MAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,GAAG,0CAAE,KAAK,CAAA,CAAA;4BAC3D,CAAC,EAAC,CACH,EAAA;;oBAPD,SAOC,CAAA;oBAED,qBAAM,UAAU,CACd,6BAA6B,EAC7B,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAhC,CAAgC,EACtC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM,gBAAK,OAAA,CAAC,CAAA,MAAA,CAAC,CAAC,GAAG,0CAAE,aAAa,CAAA,IAAI,CAAC,CAAA,MAAA,CAAC,CAAC,GAAG,0CAAE,KAAK,CAAA,CAAA,EAAA,EAAE,CACrF;wBAED,wFAAwF;sBAFvF;;oBAJD,SAIC,CAAA;oBAED,wFAAwF;oBACxF,qBAAM,wBAAwB,EAAE,EAAA;;oBADhC,wFAAwF;oBACxF,SAAgC,CAAA;oBAChC,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,+BAA+B;;oBAA1D,SAA0B,CAAA,CAAC,+BAA+B;oBAC1D,qBAAM,UAAU,CACd,uDAAuD,EACvD,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC,EAAnF,CAAmF,EACzF,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAAxD,CAAwD,EAAE,CACrG;wBAED,+DAA+D;wBAC/D,kDAAkD;wBAClD,+DAA+D;sBAJ9D;;oBAJD,SAIC,CAAA;oBAED,+DAA+D;oBAC/D,kDAAkD;oBAClD,+DAA+D;oBAC/D,UAAU,CAAC,6BAA6B,CAAC,CAAA;oBAEzC,qBAAM,uBAAuB,CAAC,CAAC,eAAe,CAAC,CAAC,EAAA;;oBAAhD,SAAgD,CAAA;oBAEhD,qBAAM,UAAU,CACd,4DAA4D,EAC5D,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,EAAvC,CAAuC,EAC7C,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAA9D,CAA8D,EAAE,CAC3G,EAAA;;oBAJD,SAIC,CAAA;oBAED,qBAAM,UAAU,CACd,8EAA8E,EAC9E,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAjE,CAAiE,EACvE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAA9D,CAA8D,EAAE,CAC3G,EAAA;;oBAJD,SAIC,CAAA;oBAED,qBAAM,uBAAuB,CAAC,CAAC,OAAO,CAAC,CAAC,EAAA;;oBAAxC,SAAwC,CAAA;oBAExC,qBAAM,UAAU,CACd,0DAA0D,EAC1D,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,EAAlD,CAAkD,EACxD,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,EAA9D,CAA8D,EAAE,CAC3G,EAAA;;oBAJD,SAIC,CAAA;oBAED,qBAAM,UAAU,CACd,0FAA0F,EAC1F,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,EAAvC,CAAuC,EAC7C,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM;;gCACrC,IAAI,CAAC,CAAC,SAAS;oCAAE,WAAW,CAAC,kBAAkB,CAAC,sBAAK,CAAC,CAAC,IAAI,KAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAS,CAAC,CAAA;gCAC7F,OAAO,CAAA,MAAA,CAAC,CAAC,aAAa,0CAAE,MAAM,MAAK,EAAE,IAAI,CAAA,MAAA,MAAA,CAAC,CAAC,IAAI,0CAAE,GAAG,0CAAE,KAAK,MAAK,IAAI,CAAA;4BACtE,CAAC,EAAC,CACH;wBAED,kFAAkF;wBAClF,qEAAqE;sBAHpE;;oBAPD,SAOC,CAAA;oBAED,kFAAkF;oBAClF,qEAAqE;oBACrE,qBAAM,uBAAuB,CAAC,CAAC,eAAe,CAAC,CAAC,EAAA;;oBAFhD,kFAAkF;oBAClF,qEAAqE;oBACrE,SAAgD,CAAA;oBAEhD,qBAAM,UAAU,CACd,qEAAqE,EACrE,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAjE,CAAiE,EACvE,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC7C;wBAED,+CAA+C;sBAF9C;;oBAJD,SAIC,CAAA;oBAED,+CAA+C;oBAC/C,qBAAM,yBAAyB,EAAE,EAAA;;oBADjC,+CAA+C;oBAC/C,SAAiC,CAAA;oBACjC,qBAAM,UAAU,CACd,4BAA4B,EAC5B,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAvE,CAAuE,EAC7E,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM;gCACrC,IAAI,CAAC,CAAC,SAAS;oCAAE,WAAW,CAAC,kBAAkB,CAAC,sBAAK,CAAC,CAAC,IAAI,KAAE,SAAS,EAAE,CAAC,CAAC,SAAS,GAAS,CAAC,CAAA;gCAC7F,OAAO,IAAI,CAAA;4BACb,CAAC,EAAC,CACH;wBAED,+DAA+D;wBAC/D,qCAAqC;wBACrC,+DAA+D;sBAJ9D;;oBAPD,SAOC,CAAA;oBAED,+DAA+D;oBAC/D,qCAAqC;oBACrC,+DAA+D;oBAC/D,UAAU,CAAC,iCAAiC,CAAC,CAAA;oBAE7C,qBAAM,UAAU,CACd,+CAA+C,EAC/C,cAAM,OAAA,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,CAAC,OAAO,CAAC,EAAS,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAAnH,CAAmH,EACzH,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,UAAC,CAAM,IAAK,OAAA,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,KAAK,GAAG,IAAI,CAAC,CAAC,UAAU,KAAK,GAAG,EAA9E,CAA8E,EAAE,CAC3H,EAAA;;oBAJD,SAIC,CAAA;oBAED,qBAAM,UAAU,CACd,wCAAwC,EACxC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,iBAAiB,EAAE,CAAC,OAAO,CAAC,EAAS,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,EAA3G,CAA2G,EACjH,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAM,OAAA,IAAI,EAAJ,CAAI,EAAE,CAC7C,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA;;oBAA1B,SAA0B,CAAA;oBAC1B,qBAAM,UAAU,CACd,iCAAiC,EACjC,cAAM,OAAA,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAhC,CAAgC,EACtC,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAC,CAAM,IAAK,OAAA,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,EAAjE,CAAiE,EAAE,CAChH,EAAA;;oBAJD,SAIC,CAAA;oBACD,qBAAM,yBAAyB,EAAE;wBAEjC,+DAA+D;wBAC/D,6EAA6E;wBAC7E,+DAA+D;sBAJ9B;;oBAAjC,SAAiC,CAAA;oBAEjC,+DAA+D;oBAC/D,6EAA6E;oBAC7E,+DAA+D;oBAC/D,UAAU,CAAC,2BAA2B,CAAC,CAAA;oBAEnC,MAAM,GAAG,KAAK,CAAA;oBACT,CAAC,GAAG,CAAC;;;yBAAE,CAAA,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAA;oBAC/B,qBAAM,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,EAAA,CAAC,kEAAkE;;oBAA7F,SAA0B,CAAA,CAAC,kEAAkE;;;;oBAE3F,qBAAM,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAA;;oBAApE,SAAoE,CAAA;;;;oBAEpE,IAAI,GAAC,CAAC,UAAU,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,GAAC,CAAC,OAAO,IAAI,EAAE,CAAC;wBAAE,MAAM,GAAG,IAAI,CAAA;;;oBAL/C,CAAC,EAAE,CAAA;;;oBAQtC,MAAM,CAAC,MAAM,EAAE,gDAAgD,EAAE,gDAAgD,CAAC,CAAA;;yBAElH,qBAAM,eAAe,EAAE,EAAA;;oBAAvB,SAAuB,CAAA;;;;;;CAE1B,CAAA;AAED,6CAA6C;AAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE;IAC3B,IAAM,KAAG,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IACjC,IAAM,aAAW,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,MAAA,EAAE,CAAC,CAAA;IAEzC,IAAM,QAAQ,GAAG;;;wBACf,qBAAM,WAAW,CAAC,KAAG,EAAE,aAAW,CAAC,EAAA;;oBAAnC,SAAmC,CAAA;oBACnC,qBAAM,cAAc,CAAC,EAAE,GAAG,OAAA,EAAE,WAAW,eAAA,EAAE,CAAC,EAAA;;oBAA1C,SAA0C,CAAA;;;;SAC3C,CAAA;IAED,QAAQ,EAAE;SACP,IAAI,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAA;QAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC;SACD,KAAK,CAAC,UAAC,KAAK;QACX,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;QACrD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;CACL"}

package/lib/esm/tests/tests.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tests.d.ts","sourceRoot":"","sources":["../../../src/tests/tests.ts"],"names":[],"mappings":"AAw0EA,eAAO,MAAM,kCAAkC,qBAgJ9C,CAAA;AAED,eAAO,MAAM,mCAAmC,qBA2K/C,CAAA;AAGD,eAAO,MAAM,oBAAoB,qBAoHhC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBAsF3C,CAAA;AAID,eAAO,MAAM,0BAA0B,qBAqCtC,CAAA;AAu1FD,eAAO,MAAM,cAAc,qBAqC1B,CAAA;AAotBD,eAAO,MAAM,0BAA0B,qBAmFtC,CAAA;AAqED,eAAO,MAAM,eAAe,qBAmD3B,CAAA;AAED,eAAO,MAAM,oBAAoB,6BAsBhC,CAAA;AAED,eAAO,MAAM,oCAAoC,qBA4pBhD,CAAA;AAED,eAAO,MAAM,mCAAmC,qBAkE/C,CAAA;AAw7CD,eAAO,MAAM,yBAAyB,qBA0DrC,CAAA;AAED,eAAO,MAAM,kBAAkB,qBAmK9B,CAAA;AAED,eAAO,MAAM,sBAAsB,qBA0BlC,CAAA;AAGD,eAAO,MAAM,mBAAmB,qBAmC/B,CAAA;AAED,eAAO,MAAM,gCAAgC,mCA8C5C,CAAA;AAED,eAAO,MAAM,cAAc,qBAwb1B,CAAA;AAGD,eAAO,MAAM,oBAAoB,uBAuBhC,CAAA;AA4wBD,eAAO,MAAM,4BAA4B,qBAoExC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBA4U3C,CAAA;AAED,eAAO,MAAM,gDAAgD,qBAwC5D,CAAA;AAED,eAAO,MAAM,qBAAqB,qBAwIjC,CAAA"}
+{"version":3,"file":"tests.d.ts","sourceRoot":"","sources":["../../../src/tests/tests.ts"],"names":[],"mappings":"AAy0EA,eAAO,MAAM,kCAAkC,qBAgJ9C,CAAA;AAED,eAAO,MAAM,mCAAmC,qBA2K/C,CAAA;AAGD,eAAO,MAAM,oBAAoB,qBAoHhC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBAsF3C,CAAA;AAID,eAAO,MAAM,0BAA0B,qBAqCtC,CAAA;AAu1FD,eAAO,MAAM,cAAc,qBAqC1B,CAAA;AAotBD,eAAO,MAAM,0BAA0B,qBAmFtC,CAAA;AAqED,eAAO,MAAM,eAAe,qBAmD3B,CAAA;AAED,eAAO,MAAM,oBAAoB,6BAsBhC,CAAA;AAED,eAAO,MAAM,oCAAoC,qBA4pBhD,CAAA;AAED,eAAO,MAAM,mCAAmC,qBAkE/C,CAAA;AAw7CD,eAAO,MAAM,yBAAyB,qBA0DrC,CAAA;AAED,eAAO,MAAM,kBAAkB,qBAmK9B,CAAA;AAED,eAAO,MAAM,sBAAsB,qBA0BlC,CAAA;AAGD,eAAO,MAAM,mBAAmB,qBAmC/B,CAAA;AAED,eAAO,MAAM,gCAAgC,mCA8C5C,CAAA;AAED,eAAO,MAAM,cAAc,qBAwb1B,CAAA;AAGD,eAAO,MAAM,oBAAoB,uBAuBhC,CAAA;AA4wBD,eAAO,MAAM,4BAA4B,qBAoExC,CAAA;AAED,eAAO,MAAM,+BAA+B,qBA4U3C,CAAA;AAED,eAAO,MAAM,gDAAgD,qBAwC5D,CAAA;AAED,eAAO,MAAM,qBAAqB,qBAwIjC,CAAA"}