@vorionsys/platform-core 0.1.0

package/dist/security/mfa/mfa-store.js

@@ -0,0 +1,431 @@
+/**
+ * MFA Database Store
+ *
+ * Database operations for MFA using Drizzle ORM patterns.
+ * Handles persistence of user MFA settings, backup codes, and challenges.
+ *
+ * @packageDocumentation
+ */
+import { pgTable, uuid, text, boolean, timestamp, integer, pgEnum } from 'drizzle-orm/pg-core';
+import { eq, and, isNull, lt, desc } from 'drizzle-orm';
+import { getDatabase } from '../../common/db.js';
+import { createLogger } from '../../common/logger.js';
+import { secureRandomId } from '../../common/random.js';
+const logger = createLogger({ component: 'mfa-store' });
+// =============================================================================
+// Drizzle Schema Definitions
+// =============================================================================
+export const mfaMethodEnum = pgEnum('mfa_method', ['totp', 'backup_codes']);
+export const mfaStatusEnum = pgEnum('mfa_status', ['pending', 'active', 'disabled']);
+export const userMfa = pgTable('user_mfa', {
+    id: uuid('id').primaryKey().defaultRandom(),
+    userId: uuid('user_id').notNull(),
+    tenantId: uuid('tenant_id').notNull(),
+    totpSecret: text('totp_secret'),
+    totpSecretEncrypted: boolean('totp_secret_encrypted').default(true),
+    status: mfaStatusEnum('status').notNull().default('pending'),
+    enabledAt: timestamp('enabled_at', { withTimezone: true }),
+    enrollmentStartedAt: timestamp('enrollment_started_at', { withTimezone: true }),
+    enrollmentExpiresAt: timestamp('enrollment_expires_at', { withTimezone: true }),
+    gracePeriodEndsAt: timestamp('grace_period_ends_at', { withTimezone: true }),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+    updatedAt: timestamp('updated_at', { withTimezone: true }).notNull().defaultNow(),
+});
+export const mfaBackupCodes = pgTable('mfa_backup_codes', {
+    id: uuid('id').primaryKey().defaultRandom(),
+    userMfaId: uuid('user_mfa_id').notNull().references(() => userMfa.id, { onDelete: 'cascade' }),
+    codeHash: text('code_hash').notNull(),
+    usedAt: timestamp('used_at', { withTimezone: true }),
+    usedFromIp: text('used_from_ip'),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+});
+export const mfaChallenges = pgTable('mfa_challenges', {
+    id: uuid('id').primaryKey().defaultRandom(),
+    userId: uuid('user_id').notNull(),
+    sessionId: text('session_id').notNull(),
+    challengeToken: text('challenge_token').notNull().unique(),
+    verified: boolean('verified').default(false),
+    verifiedAt: timestamp('verified_at', { withTimezone: true }),
+    attempts: integer('attempts').default(0),
+    maxAttempts: integer('max_attempts').default(5),
+    expiresAt: timestamp('expires_at', { withTimezone: true }).notNull(),
+    createdAt: timestamp('created_at', { withTimezone: true }).notNull().defaultNow(),
+});
+// =============================================================================
+// MFA Store Class
+// =============================================================================
+/**
+ * Database store for MFA operations
+ */
+export class MfaStore {
+    db;
+    constructor(database) {
+        this.db = database ?? getDatabase();
+    }
+    // ---------------------------------------------------------------------------
+    // User MFA Operations
+    // ---------------------------------------------------------------------------
+    /**
+     * Create a new user MFA record
+     */
+    async createUserMfa(input) {
+        const now = new Date();
+        const enrollmentExpiresAt = new Date(now.getTime() + 15 * 60 * 1000); // 15 minutes
+        const [record] = await this.db
+            .insert(userMfa)
+            .values({
+            userId: input.userId,
+            tenantId: input.tenantId,
+            totpSecret: input.totpSecret,
+            totpSecretEncrypted: input.totpSecretEncrypted ?? true,
+            status: 'pending',
+            enrollmentStartedAt: now,
+            enrollmentExpiresAt,
+        })
+            .returning();
+        logger.info({ userId: input.userId, tenantId: input.tenantId }, 'Created user MFA record');
+        return this.mapUserMfaRecord(record);
+    }
+    /**
+     * Get user MFA record by user ID and tenant ID
+     */
+    async getUserMfa(userId, tenantId) {
+        const [record] = await this.db
+            .select()
+            .from(userMfa)
+            .where(and(eq(userMfa.userId, userId), eq(userMfa.tenantId, tenantId)))
+            .limit(1);
+        return record ? this.mapUserMfaRecord(record) : null;
+    }
+    /**
+     * Get user MFA record by ID
+     */
+    async getUserMfaById(id) {
+        const [record] = await this.db
+            .select()
+            .from(userMfa)
+            .where(eq(userMfa.id, id))
+            .limit(1);
+        return record ? this.mapUserMfaRecord(record) : null;
+    }
+    /**
+     * Update user MFA status to active
+     */
+    async activateUserMfa(id, gracePeriodEndsAt) {
+        const now = new Date();
+        const [record] = await this.db
+            .update(userMfa)
+            .set({
+            status: 'active',
+            enabledAt: now,
+            enrollmentExpiresAt: null,
+            gracePeriodEndsAt,
+            updatedAt: now,
+        })
+            .where(eq(userMfa.id, id))
+            .returning();
+        if (record) {
+            logger.info({ id, userId: record.userId }, 'Activated user MFA');
+        }
+        return record ? this.mapUserMfaRecord(record) : null;
+    }
+    /**
+     * Disable user MFA
+     */
+    async disableUserMfa(userId, tenantId) {
+        const now = new Date();
+        const [record] = await this.db
+            .update(userMfa)
+            .set({
+            status: 'disabled',
+            totpSecret: null,
+            enabledAt: null,
+            gracePeriodEndsAt: null,
+            updatedAt: now,
+        })
+            .where(and(eq(userMfa.userId, userId), eq(userMfa.tenantId, tenantId)))
+            .returning();
+        if (record) {
+            logger.info({ userId, tenantId }, 'Disabled user MFA');
+        }
+        return record ? this.mapUserMfaRecord(record) : null;
+    }
+    /**
+     * Delete user MFA record (and cascade to backup codes)
+     */
+    async deleteUserMfa(userId, tenantId) {
+        const result = await this.db
+            .delete(userMfa)
+            .where(and(eq(userMfa.userId, userId), eq(userMfa.tenantId, tenantId)))
+            .returning({ id: userMfa.id });
+        if (result.length > 0) {
+            logger.info({ userId, tenantId }, 'Deleted user MFA record');
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Update enrollment expiry time
+     */
+    async updateEnrollmentExpiry(id, expiresAt) {
+        await this.db
+            .update(userMfa)
+            .set({
+            enrollmentExpiresAt: expiresAt,
+            updatedAt: new Date(),
+        })
+            .where(eq(userMfa.id, id));
+    }
+    // ---------------------------------------------------------------------------
+    // Backup Code Operations
+    // ---------------------------------------------------------------------------
+    /**
+     * Create backup codes for a user MFA record
+     */
+    async createBackupCodes(userMfaId, codeHashes) {
+        const values = codeHashes.map((codeHash) => ({
+            userMfaId,
+            codeHash,
+        }));
+        const records = await this.db
+            .insert(mfaBackupCodes)
+            .values(values)
+            .returning();
+        logger.info({ userMfaId, count: records.length }, 'Created backup codes');
+        return records.map(this.mapBackupCodeRecord);
+    }
+    /**
+     * Get unused backup codes for a user MFA record
+     */
+    async getUnusedBackupCodes(userMfaId) {
+        const records = await this.db
+            .select()
+            .from(mfaBackupCodes)
+            .where(and(eq(mfaBackupCodes.userMfaId, userMfaId), isNull(mfaBackupCodes.usedAt)));
+        return records.map(this.mapBackupCodeRecord);
+    }
+    /**
+     * Get count of unused backup codes
+     */
+    async getUnusedBackupCodeCount(userMfaId) {
+        const codes = await this.getUnusedBackupCodes(userMfaId);
+        return codes.length;
+    }
+    /**
+     * Mark a backup code as used
+     */
+    async markBackupCodeUsed(id, usedFromIp) {
+        const [record] = await this.db
+            .update(mfaBackupCodes)
+            .set({
+            usedAt: new Date(),
+            usedFromIp,
+        })
+            .where(eq(mfaBackupCodes.id, id))
+            .returning();
+        if (record) {
+            logger.info({ id }, 'Marked backup code as used');
+        }
+        return record ? this.mapBackupCodeRecord(record) : null;
+    }
+    /**
+     * Delete all backup codes for a user MFA record
+     */
+    async deleteBackupCodes(userMfaId) {
+        const result = await this.db
+            .delete(mfaBackupCodes)
+            .where(eq(mfaBackupCodes.userMfaId, userMfaId))
+            .returning({ id: mfaBackupCodes.id });
+        logger.info({ userMfaId, count: result.length }, 'Deleted backup codes');
+        return result.length;
+    }
+    // ---------------------------------------------------------------------------
+    // Challenge Operations
+    // ---------------------------------------------------------------------------
+    /**
+     * Create a new MFA challenge
+     */
+    async createChallenge(input) {
+        const challengeToken = secureRandomId();
+        const [record] = await this.db
+            .insert(mfaChallenges)
+            .values({
+            userId: input.userId,
+            sessionId: input.sessionId,
+            challengeToken,
+            expiresAt: input.expiresAt,
+            maxAttempts: input.maxAttempts ?? 5,
+        })
+            .returning();
+        logger.info({ userId: input.userId, sessionId: input.sessionId }, 'Created MFA challenge');
+        return this.mapChallengeRecord(record);
+    }
+    /**
+     * Get challenge by token
+     */
+    async getChallengeByToken(challengeToken) {
+        const [record] = await this.db
+            .select()
+            .from(mfaChallenges)
+            .where(eq(mfaChallenges.challengeToken, challengeToken))
+            .limit(1);
+        return record ? this.mapChallengeRecord(record) : null;
+    }
+    /**
+     * Get active challenge for a user session
+     */
+    async getActiveChallenge(userId, sessionId) {
+        const now = new Date();
+        const [record] = await this.db
+            .select()
+            .from(mfaChallenges)
+            .where(and(eq(mfaChallenges.userId, userId), eq(mfaChallenges.sessionId, sessionId), eq(mfaChallenges.verified, false)))
+            .orderBy(desc(mfaChallenges.createdAt))
+            .limit(1);
+        if (record && new Date(record.expiresAt) > now) {
+            return this.mapChallengeRecord(record);
+        }
+        return null;
+    }
+    /**
+     * Increment challenge attempts
+     */
+    async incrementChallengeAttempts(id) {
+        // First get the current attempts count
+        const current = await this.getChallengeById(id);
+        if (!current) {
+            return null;
+        }
+        const [record] = await this.db
+            .update(mfaChallenges)
+            .set({
+            attempts: current.attempts + 1,
+        })
+            .where(eq(mfaChallenges.id, id))
+            .returning();
+        return record ? this.mapChallengeRecord(record) : null;
+    }
+    /**
+     * Get challenge by ID
+     */
+    async getChallengeById(id) {
+        const [record] = await this.db
+            .select()
+            .from(mfaChallenges)
+            .where(eq(mfaChallenges.id, id))
+            .limit(1);
+        return record ? this.mapChallengeRecord(record) : null;
+    }
+    /**
+     * Mark challenge as verified
+     */
+    async markChallengeVerified(id) {
+        const [record] = await this.db
+            .update(mfaChallenges)
+            .set({
+            verified: true,
+            verifiedAt: new Date(),
+        })
+            .where(eq(mfaChallenges.id, id))
+            .returning();
+        if (record) {
+            logger.info({ id }, 'Marked MFA challenge as verified');
+        }
+        return record ? this.mapChallengeRecord(record) : null;
+    }
+    /**
+     * Delete expired challenges
+     */
+    async deleteExpiredChallenges() {
+        const now = new Date();
+        const result = await this.db
+            .delete(mfaChallenges)
+            .where(lt(mfaChallenges.expiresAt, now))
+            .returning({ id: mfaChallenges.id });
+        if (result.length > 0) {
+            logger.info({ count: result.length }, 'Deleted expired MFA challenges');
+        }
+        return result.length;
+    }
+    /**
+     * Check if challenge is verified for a session
+     */
+    async isSessionVerified(userId, sessionId) {
+        const [record] = await this.db
+            .select()
+            .from(mfaChallenges)
+            .where(and(eq(mfaChallenges.userId, userId), eq(mfaChallenges.sessionId, sessionId), eq(mfaChallenges.verified, true)))
+            .orderBy(desc(mfaChallenges.verifiedAt))
+            .limit(1);
+        return record !== undefined;
+    }
+    // ---------------------------------------------------------------------------
+    // Mapping Functions
+    // ---------------------------------------------------------------------------
+    mapUserMfaRecord(record) {
+        return {
+            id: record.id,
+            userId: record.userId,
+            tenantId: record.tenantId,
+            totpSecret: record.totpSecret,
+            totpSecretEncrypted: record.totpSecretEncrypted ?? true,
+            status: record.status,
+            enabledAt: record.enabledAt,
+            enrollmentStartedAt: record.enrollmentStartedAt,
+            enrollmentExpiresAt: record.enrollmentExpiresAt,
+            gracePeriodEndsAt: record.gracePeriodEndsAt,
+            createdAt: record.createdAt,
+            updatedAt: record.updatedAt,
+        };
+    }
+    mapBackupCodeRecord(record) {
+        return {
+            id: record.id,
+            userMfaId: record.userMfaId,
+            codeHash: record.codeHash,
+            usedAt: record.usedAt,
+            usedFromIp: record.usedFromIp,
+            createdAt: record.createdAt,
+        };
+    }
+    mapChallengeRecord(record) {
+        return {
+            id: record.id,
+            userId: record.userId,
+            sessionId: record.sessionId,
+            challengeToken: record.challengeToken,
+            verified: record.verified ?? false,
+            verifiedAt: record.verifiedAt,
+            attempts: record.attempts ?? 0,
+            maxAttempts: record.maxAttempts ?? 5,
+            expiresAt: record.expiresAt,
+            createdAt: record.createdAt,
+        };
+    }
+}
+// =============================================================================
+// Singleton Instance
+// =============================================================================
+let mfaStoreInstance = null;
+/**
+ * Get the singleton MFA store instance
+ */
+export function getMfaStore() {
+    if (!mfaStoreInstance) {
+        mfaStoreInstance = new MfaStore();
+    }
+    return mfaStoreInstance;
+}
+/**
+ * Reset the singleton instance (for testing)
+ */
+export function resetMfaStore() {
+    mfaStoreInstance = null;
+}
+/**
+ * Create a new MFA store with custom database (for testing)
+ */
+export function createMfaStore(database) {
+    return new MfaStore(database);
+}
+//# sourceMappingURL=mfa-store.js.map

package/dist/security/mfa/mfa-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mfa-store.js","sourceRoot":"","sources":["../../../src/security/mfa/mfa-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,WAAW,EAAiB,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAWxD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;AAExD,gFAAgF;AAChF,6BAA6B;AAC7B,gFAAgF;AAEhF,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAC5E,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAErF,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,EAAE;IACzC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,mBAAmB,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACnE,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IAC5D,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,mBAAmB,EAAE,SAAS,CAAC,uBAAuB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC/E,mBAAmB,EAAE,SAAS,CAAC,uBAAuB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC/E,iBAAiB,EAAE,SAAS,CAAC,sBAAsB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5E,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,kBAAkB,EAAE;IACxD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC9F,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACpD,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC;IAChC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,EAAE;IACrD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IAC1D,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC5C,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5D,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,WAAW,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACpE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,UAAU,EAAE;CAClF,CAAC,CAAC;AAOH,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,QAAQ;IACX,EAAE,CAAW;IAErB,YAAY,QAAmB;QAC7B,IAAI,CAAC,EAAE,GAAG,QAAQ,IAAI,WAAW,EAAE,CAAC;IACtC,CAAC;IAED,8EAA8E;IAC9E,sBAAsB;IACtB,8EAA8E;IAE9E;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,KAAyB;QAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,mBAAmB,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa;QAEnF,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,CAAC,OAAO,CAAC;aACf,MAAM,CAAC;YACN,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,IAAI,IAAI;YACtD,MAAM,EAAE,SAAS;YACjB,mBAAmB,EAAE,GAAG;YACxB,mBAAmB;SACpB,CAAC;aACD,SAAS,EAAE,CAAC;QAEf,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,yBAAyB,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,QAAgB;QAC/C,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;aACtE,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,EAAE;aACR,IAAI,CAAC,OAAO,CAAC;aACb,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACzB,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,EAAU,EACV,iBAAuB;QAEvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC;YACH,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,GAAG;YACd,mBAAmB,EAAE,IAAI;YACzB,iBAAiB;YACjB,SAAS,EAAE,GAAG;SACf,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aACzB,SAAS,EAAE,CAAC;QAEf,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAgB;QACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC;YACH,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;YACf,iBAAiB,EAAE,IAAI;YACvB,SAAS,EAAE,GAAG;SACf,CAAC;aACD,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;aACtE,SAAS,EAAE,CAAC;QAEf,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,QAAgB;QAClD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,OAAO,CAAC;aACf,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;aACtE,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QAEjC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,yBAAyB,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sBAAsB,CAAC,EAAU,EAAE,SAAe;QACtD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC;YACH,mBAAmB,EAAE,SAAS;YAC9B,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,8EAA8E;IAC9E,yBAAyB;IACzB,8EAA8E;IAE9E;;OAEG;IACH,KAAK,CAAC,iBAAiB,CACrB,SAAiB,EACjB,UAAoB;QAEpB,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC3C,SAAS;YACT,QAAQ;SACT,CAAC,CAAC,CAAC;QAEJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;aAC1B,MAAM,CAAC,cAAc,CAAC;aACtB,MAAM,CAAC,MAAM,CAAC;aACd,SAAS,EAAE,CAAC;QAEf,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CAAC,SAAiB;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE;aAC1B,MAAM,EAAE;aACR,IAAI,CAAC,cAAc,CAAC;aACpB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAEtF,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAAC,SAAiB;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,EAAU,EACV,UAAyB;QAEzB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,CAAC,cAAc,CAAC;aACtB,GAAG,CAAC;YACH,MAAM,EAAE,IAAI,IAAI,EAAE;YAClB,UAAU;SACX,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aAChC,SAAS,EAAE,CAAC;QAEf,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,cAAc,CAAC;aACtB,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aAC9C,SAAS,CAAC,EAAE,EAAE,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;QAExC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED,8EAA8E;IAC9E,uBAAuB;IACvB,8EAA8E;IAE9E;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,KAA2B;QAC/C,MAAM,cAAc,GAAG,cAAc,EAAE,CAAC;QAExC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,CAAC,aAAa,CAAC;aACrB,MAAM,CAAC;YACN,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,cAAc;YACd,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,CAAC;SACpC,CAAC;aACD,SAAS,EAAE,CAAC;QAEf,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAC3F,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,cAAsB;QAC9C,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;aACvD,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,kBAAkB,CACtB,MAAc,EACd,SAAiB;QAEjB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,EACtC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAClC,CACF;aACA,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;aACtC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,0BAA0B,CAAC,EAAU;QACzC,uCAAuC;QACvC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,CAAC,aAAa,CAAC;aACrB,GAAG,CAAC;YACH,QAAQ,EAAE,OAAO,CAAC,QAAQ,GAAG,CAAC;SAC/B,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aAC/B,SAAS,EAAE,CAAC;QAEf,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,gBAAgB,CAAC,EAAU;QAC/B,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aAC/B,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,qBAAqB,CAAC,EAAU;QACpC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,CAAC,aAAa,CAAC;aACrB,GAAG,CAAC;YACH,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC;aACD,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;aAC/B,SAAS,EAAE,CAAC;QAEf,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,kCAAkC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,uBAAuB;QAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,MAAM,CAAC,aAAa,CAAC;aACrB,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;aACvC,SAAS,CAAC,EAAE,EAAE,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;QAEvC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,SAAiB;QACvD,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE;aAC3B,MAAM,EAAE;aACR,IAAI,CAAC,aAAa,CAAC;aACnB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,EACtC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CACjC,CACF;aACA,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;aACvC,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,OAAO,MAAM,KAAK,SAAS,CAAC;IAC9B,CAAC;IAED,8EAA8E;IAC9E,oBAAoB;IACpB,8EAA8E;IAEtE,gBAAgB,CAAC,MAAqB;QAC5C,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,IAAI;YACvD,MAAM,EAAE,MAAM,CAAC,MAAmB;YAClC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;IAEO,mBAAmB,CAAC,MAA2B;QACrD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,MAA0B;QACnD,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,KAAK;YAClC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;YAC9B,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC;YACpC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;IACJ,CAAC;CACF;AAED,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,IAAI,gBAAgB,GAAoB,IAAI,CAAC;AAE7C;;GAEG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,gBAAgB,GAAG,IAAI,QAAQ,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,gBAAgB,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC"}