@wildo-ai/saas-models 1.0.1

package/dist/esm/security/authentications/authentication.shared.dto.schemas.d.ts

@@ -0,0 +1,623 @@
+/**
+ * Authentication Shared Schemas
+ *
+ * Core authentication schemas shared between frontend and backend
+ */
+import { z } from 'zod';
+import { AuthMethod, AuthFactorLevel, AuthNextStep, AuthSessionPurpose } from './authentication.shared.schemas.js';
+import { SessionType } from '../../runtime/execution-context.shared.schemas.js';
+/**
+ * Step 1: User identification by email
+ * Returns available authentication methods for the user
+ */
+export declare const AuthIdentificationRequestSchema: z.ZodObject<{
+    email: z.ZodEmail;
+    organizationId: z.ZodOptional<z.ZodString>;
+    deviceInfo: z.ZodOptional<z.ZodObject<{
+        userAgent: z.ZodOptional<z.ZodString>;
+        ipAddress: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Step 1 Response: Available authentication methods with factor classification
+ */
+export declare const AuthIdentificationResponseSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    email: z.ZodEmail;
+    userExists: z.ZodBoolean;
+    firstFactorMethods: z.ZodArray<z.ZodObject<{
+        method: z.ZodEnum<typeof AuthMethod>;
+        factorType: z.ZodEnum<typeof import("./authentication.shared.schemas.js").AuthFactorType>;
+        category: z.ZodEnum<typeof import("./authentication.shared.schemas.js").AuthMethodCategory>;
+        canBeFirstFactor: z.ZodBoolean;
+        canBeSecondFactor: z.ZodBoolean;
+        required: z.ZodBoolean;
+        oauth2ProviderRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        ssoIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        organizationRestricted: z.ZodDefault<z.ZodBoolean>;
+        supportsIntegrations: z.ZodDefault<z.ZodBoolean>;
+        availableIntegrations: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    defaultFirstFactorMethod: z.ZodOptional<z.ZodEnum<typeof AuthMethod>>;
+    secondFactorMethods: z.ZodArray<z.ZodObject<{
+        method: z.ZodEnum<typeof AuthMethod>;
+        factorType: z.ZodEnum<typeof import("./authentication.shared.schemas.js").AuthFactorType>;
+        category: z.ZodEnum<typeof import("./authentication.shared.schemas.js").AuthMethodCategory>;
+        canBeFirstFactor: z.ZodBoolean;
+        canBeSecondFactor: z.ZodBoolean;
+        required: z.ZodBoolean;
+        oauth2ProviderRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        ssoIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        organizationRestricted: z.ZodDefault<z.ZodBoolean>;
+        supportsIntegrations: z.ZodDefault<z.ZodBoolean>;
+        availableIntegrations: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    requiresMFA: z.ZodBoolean;
+    mfaMethodsRequired: z.ZodDefault<z.ZodNumber>;
+    organizationBranding: z.ZodOptional<z.ZodObject<{
+        logoUrl: z.ZodOptional<z.ZodURL>;
+        primaryColor: z.ZodOptional<z.ZodString>;
+        organizationName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    availableIntegrations: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        integrationId: z.ZodString;
+        externalProviderId: z.ZodString;
+        iconUrl: z.ZodOptional<z.ZodURL>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    ssoMigrationRequired: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Base authentication request schema with factor context
+ */
+export declare const BaseAuthRequestSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    method: z.ZodEnum<typeof AuthMethod>;
+    factorLevel: z.ZodEnum<typeof AuthFactorLevel>;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Password Authentication (First factor only)
+ */
+export declare const PasswordAuthRequestSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.PASSWORD>;
+    factorLevel: z.ZodLiteral<AuthFactorLevel.FIRST>;
+    password: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Third-Party OAuth2 Authentication (Any factor, extensible)
+ */
+export declare const External_OAuth2_AuthRequestSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.EXTERNAL_OAUTH2>;
+    factorLevel: z.ZodEnum<typeof AuthFactorLevel>;
+    externalProviderId: z.ZodString;
+    redirectUri: z.ZodURL;
+    state: z.ZodOptional<z.ZodString>;
+    additionalScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    integrationPermissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Organization SSO Authentication (First or second factor, organization-restricted)
+ */
+export declare const OrganizationSSOAuthRequestSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodEnum<{
+        ORG_SAML: AuthMethod.ORG_SAML;
+        ORG_OPENID_CONNECT: AuthMethod.ORG_OPENID_CONNECT;
+    }>;
+    factorLevel: z.ZodEnum<typeof AuthFactorLevel>;
+    ssoId: z.ZodString;
+    organizationId: z.ZodString;
+    samlResponse: z.ZodOptional<z.ZodString>;
+    idToken: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * OAuth2 Callback Schema (for both third-party and SSO)
+ */
+export declare const OAuth2CallbackSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    externalProviderId: z.ZodOptional<z.ZodString>;
+    ssoId: z.ZodOptional<z.ZodString>;
+    code: z.ZodString;
+    state: z.ZodOptional<z.ZodString>;
+    error: z.ZodOptional<z.ZodString>;
+    errorDescription: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * TOTP Authentication (Second factor only)
+ */
+export declare const TOTPAuthRequestSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.TOTP>;
+    factorLevel: z.ZodLiteral<AuthFactorLevel.SECOND>;
+    token: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * SMS OTP Authentication (First or second factor)
+ */
+export declare const SMSOTPAuthRequestSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.SMS_OTP>;
+    factorLevel: z.ZodUnion<readonly [z.ZodLiteral<AuthFactorLevel.FIRST>, z.ZodLiteral<AuthFactorLevel.SECOND>]>;
+    phoneNumber: z.ZodOptional<z.ZodString>;
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Email OTP Authentication (Second factor only)
+ */
+export declare const EmailOTPAuthRequestSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.EMAIL_OTP>;
+    factorLevel: z.ZodLiteral<AuthFactorLevel.SECOND>;
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Passkey (WebAuthn) Authentication (First or second factor)
+ */
+export declare const PasskeyAuthRequestSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.PASSKEY>;
+    factorLevel: z.ZodEnum<typeof AuthFactorLevel>;
+    response: z.ZodObject<{
+        id: z.ZodString;
+        rawId: z.ZodString;
+        response: z.ZodObject<{
+            authenticatorData: z.ZodString;
+            clientDataJSON: z.ZodString;
+            signature: z.ZodString;
+            userHandle: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        authenticatorAttachment: z.ZodOptional<z.ZodString>;
+        clientExtensionResults: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        type: z.ZodLiteral<"public-key">;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Magic Link Send Request — triggers a magic link email to the user.
+ * Separate from the main AuthenticationRequestSchema because it doesn't
+ * go through the standard authenticate() dispatch.
+ */
+export declare const MagicLinkSendRequestSchema: z.ZodObject<{
+    email: z.ZodEmail;
+    organizationId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Magic Link Verify Request — verifies the token from the magic link.
+ * Used by POST /auth/magic-link/verify for programmatic verification.
+ * Intentionally NOT added to AuthenticationRequestSchema discriminated union
+ * because magic link verification follows a separate flow (GET from email click
+ * → exchange code → POST verify).
+ */
+export declare const MagicLinkVerifyRequestSchema: z.ZodObject<{
+    token: z.ZodString;
+    email: z.ZodEmail;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Phone Verification Send Request — triggers a verification code to a phone number.
+ * Used for phone number ownership verification, separate from SMS OTP auth.
+ */
+export declare const PhoneVerifySendRequestSchema: z.ZodObject<{
+    phoneNumber: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Phone Verification Confirm Request — confirms the verification code.
+ */
+export declare const PhoneVerifyConfirmRequestSchema: z.ZodObject<{
+    phoneNumber: z.ZodString;
+    code: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Union of all authentication request types
+ */
+export declare const AuthenticationRequestSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.PASSWORD>;
+    factorLevel: z.ZodLiteral<AuthFactorLevel.FIRST>;
+    password: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.EXTERNAL_OAUTH2>;
+    factorLevel: z.ZodEnum<typeof AuthFactorLevel>;
+    externalProviderId: z.ZodString;
+    redirectUri: z.ZodURL;
+    state: z.ZodOptional<z.ZodString>;
+    additionalScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    integrationPermissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodEnum<{
+        ORG_SAML: AuthMethod.ORG_SAML;
+        ORG_OPENID_CONNECT: AuthMethod.ORG_OPENID_CONNECT;
+    }>;
+    factorLevel: z.ZodEnum<typeof AuthFactorLevel>;
+    ssoId: z.ZodString;
+    organizationId: z.ZodString;
+    samlResponse: z.ZodOptional<z.ZodString>;
+    idToken: z.ZodOptional<z.ZodString>;
+    state: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.TOTP>;
+    factorLevel: z.ZodLiteral<AuthFactorLevel.SECOND>;
+    token: z.ZodString;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.SMS_OTP>;
+    factorLevel: z.ZodUnion<readonly [z.ZodLiteral<AuthFactorLevel.FIRST>, z.ZodLiteral<AuthFactorLevel.SECOND>]>;
+    phoneNumber: z.ZodOptional<z.ZodString>;
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.EMAIL_OTP>;
+    factorLevel: z.ZodLiteral<AuthFactorLevel.SECOND>;
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>, z.ZodObject<{
+    sessionId: z.ZodString;
+    rememberMe: z.ZodDefault<z.ZodBoolean>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    method: z.ZodLiteral<AuthMethod.PASSKEY>;
+    factorLevel: z.ZodEnum<typeof AuthFactorLevel>;
+    response: z.ZodObject<{
+        id: z.ZodString;
+        rawId: z.ZodString;
+        response: z.ZodObject<{
+            authenticatorData: z.ZodString;
+            clientDataJSON: z.ZodString;
+            signature: z.ZodString;
+            userHandle: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>;
+        authenticatorAttachment: z.ZodOptional<z.ZodString>;
+        clientExtensionResults: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodAny>>;
+        type: z.ZodLiteral<"public-key">;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip, core.$ZodObjectExtra>], "method">;
+/**
+ * Authentication Response Schema with Factor Context and Integration Access
+ */
+export declare const AuthenticationResponseSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    sessionId: z.ZodString;
+    userExists: z.ZodBoolean;
+    factorLevel: z.ZodEnum<typeof AuthFactorLevel>;
+    authMethod: z.ZodOptional<z.ZodEnum<typeof AuthMethod>>;
+    accessToken: z.ZodOptional<z.ZodString>;
+    refreshToken: z.ZodOptional<z.ZodString>;
+    expiresIn: z.ZodOptional<z.ZodNumber>;
+    user: z.ZodOptional<z.ZodObject<{
+        _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+        email: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEmail>>>;
+        status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodEnum<typeof import("../../index.js").UserStatus>>>>;
+        appRoles: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof import("../../index.js").CORE_APP_ROLES>, z.ZodString]>>>>;
+        userTypes: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>>;
+        updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>>;
+        userSelfProfile: z.ZodOptional<z.ZodObject<{
+            _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+            userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+            firstName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+            lastName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+            displayName: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
+            avatar: z.ZodOptional<z.ZodURL>;
+            bio: z.ZodOptional<z.ZodString>;
+            phoneNumber: z.ZodOptional<z.ZodString>;
+            title: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        userSelfPreference: z.ZodOptional<z.ZodObject<{
+            _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+            userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+            notifications: z.ZodDefault<z.ZodObject<{
+                email: z.ZodDefault<z.ZodBoolean>;
+                push: z.ZodDefault<z.ZodBoolean>;
+                sms: z.ZodDefault<z.ZodBoolean>;
+                inApp: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            privacy: z.ZodDefault<z.ZodObject<{
+                dataProcessingConsent: z.ZodDefault<z.ZodEnum<typeof import("../../index.js").DataProcessingConsent>>;
+                privacyLevel: z.ZodDefault<z.ZodEnum<typeof import("../../index.js").PrivacyLevel>>;
+                termsOfUseApproval: z.ZodDefault<z.ZodObject<{
+                    accepted: z.ZodDefault<z.ZodBoolean>;
+                    acceptedAt: z.ZodOptional<z.ZodISODateTime>;
+                    acceptedVersion: z.ZodOptional<z.ZodString>;
+                    ipAddress: z.ZodOptional<z.ZodIPv4>;
+                }, z.core.$strip, core.$ZodObjectExtra>>;
+                privacyPolicyApproval: z.ZodDefault<z.ZodObject<{
+                    accepted: z.ZodDefault<z.ZodBoolean>;
+                    acceptedAt: z.ZodOptional<z.ZodISODateTime>;
+                    acceptedVersion: z.ZodOptional<z.ZodString>;
+                    ipAddress: z.ZodOptional<z.ZodIPv4>;
+                }, z.core.$strip, core.$ZodObjectExtra>>;
+                dataProcessingAgreementApproval: z.ZodDefault<z.ZodObject<{
+                    accepted: z.ZodDefault<z.ZodBoolean>;
+                    acceptedAt: z.ZodOptional<z.ZodISODateTime>;
+                    acceptedVersion: z.ZodOptional<z.ZodString>;
+                    ipAddress: z.ZodOptional<z.ZodIPv4>;
+                }, z.core.$strip, core.$ZodObjectExtra>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>;
+            ui: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodObject<{
+                theme: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodEnum<typeof import("../../index.js").UserTheme>>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>>;
+            regional: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodObject<{
+                timezone: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodUnion<[z.ZodEnum<typeof import("@wildo-ai/presets-components-models").CommonTimezone>, z.ZodString]>>>;
+                dateFormat: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").DateFormat>>>;
+                timeFormat: z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").TimeFormat>>>;
+                locale: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
+            }, z.core.$strip, core.$ZodObjectExtra>>>;
+            languagePreferences: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodObject<{
+                primaryLanguage: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
+                fallbackLanguages: z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/presets-components-models").AvailableLanguage>>>>;
+                autoDetect: z.ZodDefault<z.ZodBoolean>;
+                useOrganizationDefault: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip, core.$ZodObjectExtra>>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        organizationMembers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+            userId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+            organizationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>;
+            organizationUnitsMembership: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                organizationUnitId: z.ZodString;
+                role: z.ZodUnion<readonly [z.ZodEnum<typeof import("../../index.js").CORE_ORG_ROLES>, z.ZodString]>;
+            }, z.core.$strip, core.$ZodObjectExtra>>>;
+            roles: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof import("../../index.js").CORE_ORG_ROLES>, z.ZodString]>>>>>;
+            status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodEnum<typeof import("../../index.js").OrganizationMemberStatus>>>>;
+            userTitle: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
+            createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodDefault<z.ZodDate>>>>>;
+            updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodDefault<z.ZodDate>>>>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    integrationTokens: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        integrationId: z.ZodString;
+        accessToken: z.ZodString;
+        refreshToken: z.ZodOptional<z.ZodString>;
+        expiresIn: z.ZodOptional<z.ZodNumber>;
+        scopes: z.ZodArray<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    requiresMFA: z.ZodDefault<z.ZodBoolean>;
+    availableMFAMethods: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        method: z.ZodEnum<typeof AuthMethod>;
+        factorType: z.ZodEnum<typeof import("./authentication.shared.schemas.js").AuthFactorType>;
+        category: z.ZodEnum<typeof import("./authentication.shared.schemas.js").AuthMethodCategory>;
+        canBeFirstFactor: z.ZodBoolean;
+        canBeSecondFactor: z.ZodBoolean;
+        required: z.ZodBoolean;
+        oauth2ProviderRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        ssoIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        organizationRestricted: z.ZodDefault<z.ZodBoolean>;
+        supportsIntegrations: z.ZodDefault<z.ZodBoolean>;
+        availableIntegrations: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    mfaMethodsRequired: z.ZodOptional<z.ZodNumber>;
+    completedFactors: z.ZodOptional<z.ZodArray<z.ZodEnum<typeof AuthMethod>>>;
+    enrolledSecondFactorMethods: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodEnum<typeof AuthMethod>>>>;
+    usableSecondFactorMethods: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodEnum<typeof AuthMethod>>>>;
+    nextStep: z.ZodOptional<z.ZodEnum<typeof AuthNextStep>>;
+    availableEnrollmentMethods: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodEnum<typeof AuthMethod>>>>;
+    error: z.ZodOptional<z.ZodString>;
+    errorCode: z.ZodOptional<z.ZodString>;
+    retryAllowed: z.ZodDefault<z.ZodBoolean>;
+    remainingAttempts: z.ZodOptional<z.ZodNumber>;
+    lockoutUntil: z.ZodOptional<z.ZodDate>;
+    challengeData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    redirectUrl: z.ZodOptional<z.ZodURL>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * MFA Setup Request
+ */
+export declare const MFASetupRequestSchema: z.ZodObject<{
+    method: z.ZodEnum<typeof AuthMethod>;
+    phoneNumber: z.ZodOptional<z.ZodString>;
+    deviceName: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * MFA Setup Response
+ */
+export declare const MFASetupResponseSchema: z.ZodObject<{
+    method: z.ZodEnum<typeof AuthMethod>;
+    setupToken: z.ZodString;
+    qrCodeUrl: z.ZodOptional<z.ZodURL>;
+    secret: z.ZodOptional<z.ZodString>;
+    challenge: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    recoveryCodes: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Authentication Session State
+ */
+export declare enum AuthenticationSessionState {
+    CREATED = "CREATED",// Session created, waiting for identification
+    IDENTIFIED = "IDENTIFIED",// User identified, methods available
+    FIRST_FACTOR_IN_PROGRESS = "FIRST_FACTOR_IN_PROGRESS",// First factor authentication in progress
+    FIRST_FACTOR_COMPLETED = "FIRST_FACTOR_COMPLETED",// First factor completed
+    MFA_REQUIRED = "MFA_REQUIRED",// MFA required, waiting for second factor
+    SECOND_FACTOR_IN_PROGRESS = "SECOND_FACTOR_IN_PROGRESS",// Second factor in progress
+    COMPLETED = "COMPLETED",// Authentication completed successfully
+    PASSWORD_EXPIRED = "PASSWORD_EXPIRED",// W2.2: Password expired, must change before token issuance
+    REGISTERED = "REGISTERED",// Account created, email verification pending/deferred
+    EMAIL_VERIFIED = "EMAIL_VERIFIED",// Email confirmed, checking MFA requirements
+    MFA_ENROLLMENT_REQUIRED = "MFA_ENROLLMENT_REQUIRED",// MFA enrollment needed before tokens can be issued
+    MFA_ENROLLMENT_GRACE = "MFA_ENROLLMENT_GRACE",// Within grace period — tokens issued with mfaGraceExpiresAt claim
+    ONBOARDING_PENDING = "ONBOARDING_PENDING",// Auth complete, guidance/onboarding steps remain
+    FAILED = "FAILED",// Authentication failed
+    EXPIRED = "EXPIRED",// Session expired
+    LOCKED = "LOCKED"
+}
+/** W4.2: Session purpose — drives UI rendering and valid state transitions. */
+export declare const AuthSessionPurposeSchema: z.ZodEnum<typeof AuthSessionPurpose>;
+/**
+ * Authentication Session Schema
+ * Tracks the complete state of an authentication session
+ */
+export declare const AuthenticationSessionSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    state: z.ZodEnum<typeof AuthenticationSessionState>;
+    email: z.ZodOptional<z.ZodEmail>;
+    userExists: z.ZodOptional<z.ZodBoolean>;
+    userId: z.ZodOptional<z.ZodString>;
+    organizationId: z.ZodOptional<z.ZodString>;
+    scopeType: z.ZodOptional<z.ZodEnum<{
+        organization: "organization";
+        application: "application";
+    }>>;
+    activeUserType: z.ZodOptional<z.ZodString>;
+    purpose: z.ZodOptional<z.ZodEnum<typeof AuthSessionPurpose>>;
+    nextStep: z.ZodOptional<z.ZodEnum<typeof AuthNextStep>>;
+    mfaGraceExpiresAt: z.ZodOptional<z.ZodString>;
+    pendingOrgType: z.ZodOptional<z.ZodString>;
+    availableEnrollmentMethods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof AuthMethod>>>;
+    completedFactors: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof AuthMethod>>>;
+    currentFactor: z.ZodOptional<z.ZodEnum<typeof AuthFactorLevel>>;
+    availableFirstFactorMethods: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        method: z.ZodEnum<typeof AuthMethod>;
+        factorType: z.ZodEnum<typeof import("./authentication.shared.schemas.js").AuthFactorType>;
+        category: z.ZodEnum<typeof import("./authentication.shared.schemas.js").AuthMethodCategory>;
+        canBeFirstFactor: z.ZodBoolean;
+        canBeSecondFactor: z.ZodBoolean;
+        required: z.ZodBoolean;
+        oauth2ProviderRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        ssoIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        organizationRestricted: z.ZodDefault<z.ZodBoolean>;
+        supportsIntegrations: z.ZodDefault<z.ZodBoolean>;
+        availableIntegrations: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    availableSecondFactorMethods: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        method: z.ZodEnum<typeof AuthMethod>;
+        factorType: z.ZodEnum<typeof import("./authentication.shared.schemas.js").AuthFactorType>;
+        category: z.ZodEnum<typeof import("./authentication.shared.schemas.js").AuthMethodCategory>;
+        canBeFirstFactor: z.ZodBoolean;
+        canBeSecondFactor: z.ZodBoolean;
+        required: z.ZodBoolean;
+        oauth2ProviderRefs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        ssoIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        organizationRestricted: z.ZodDefault<z.ZodBoolean>;
+        supportsIntegrations: z.ZodDefault<z.ZodBoolean>;
+        availableIntegrations: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    }, z.core.$strip, core.$ZodObjectExtra>>>;
+    requiresMFA: z.ZodDefault<z.ZodBoolean>;
+    mfaMethodsRequired: z.ZodDefault<z.ZodNumber>;
+    enrolledSecondFactorMethods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof AuthMethod>>>;
+    usableSecondFactorMethods: z.ZodDefault<z.ZodArray<z.ZodEnum<typeof AuthMethod>>>;
+    requireStrongMFA: z.ZodDefault<z.ZodBoolean>;
+    createdAt: z.ZodDate;
+    expiresAt: z.ZodDate;
+    lastActivity: z.ZodDate;
+    attempts: z.ZodDefault<z.ZodNumber>;
+    maxAttempts: z.ZodDefault<z.ZodNumber>;
+    lockoutUntil: z.ZodOptional<z.ZodDate>;
+    deviceInfo: z.ZodOptional<z.ZodObject<{
+        userAgent: z.ZodOptional<z.ZodString>;
+        ipAddress: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    requestedIntegrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    challengeData: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodAny>>;
+    pendingRedirectUrl: z.ZodOptional<z.ZodURL>;
+    organizationBranding: z.ZodOptional<z.ZodObject<{
+        logoUrl: z.ZodOptional<z.ZodURL>;
+        primaryColor: z.ZodOptional<z.ZodString>;
+        organizationName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip, core.$ZodObjectExtra>>;
+    version: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Identify step form DTO — user enters email to discover auth methods.
+ * Used by the public auth page's first step.
+ */
+export declare const AuthIdentifyFormDtoSchema: z.ZodObject<{
+    email: z.ZodEmail;
+}, z.core.$strip, core.$ZodObjectExtra>;
+/**
+ * Login step form DTO — user enters email + password.
+ * Used by the public auth page when password auth is shown.
+ * The .isPassword() decorator tells FormField to render a password input.
+ */
+export declare const AuthLoginFormDtoSchema: z.ZodObject<{
+    email: z.ZodEmail;
+    password: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const NativeTokenExchangeRequestSchema: z.ZodObject<{
+    provider: z.ZodEnum<{
+        apple: "apple";
+        google: "google";
+    }>;
+    identityToken: z.ZodString;
+    nonce: z.ZodOptional<z.ZodString>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const NativeTokenExchangeResponseSchema: z.ZodObject<{
+    accessToken: z.ZodString;
+    refreshToken: z.ZodOptional<z.ZodString>;
+    expiresIn: z.ZodOptional<z.ZodNumber>;
+    isNewUser: z.ZodBoolean;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export declare const OneOffTokenExchangeResponseSchema: z.ZodObject<{
+    accessToken: z.ZodString;
+    refreshToken: z.ZodString;
+    sessionType: z.ZodEnum<typeof SessionType>;
+    consumableTokenValue: z.ZodOptional<z.ZodString>;
+    tokenExpiresAt: z.ZodOptional<z.ZodString>;
+    context: z.ZodObject<{
+        tokenId: z.ZodString;
+        tokenType: z.ZodString;
+        targeting: z.ZodOptional<z.ZodObject<{
+            initiatorIds: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strip, core.$ZodObjectExtra>>;
+        organizationId: z.ZodOptional<z.ZodString>;
+        applicationId: z.ZodOptional<z.ZodString>;
+        userId: z.ZodString;
+    }, z.core.$strip, core.$ZodObjectExtra>;
+}, z.core.$strip, core.$ZodObjectExtra>;
+export type AuthIdentificationRequest = z.infer<typeof AuthIdentificationRequestSchema>;
+export type AuthIdentificationResponse = z.infer<typeof AuthIdentificationResponseSchema>;
+export type AuthenticationRequest = z.infer<typeof AuthenticationRequestSchema>;
+export type AuthenticationResponse = z.infer<typeof AuthenticationResponseSchema>;
+export type PasswordAuthRequest = z.infer<typeof PasswordAuthRequestSchema>;
+export type External_OAuth2_AuthRequest = z.infer<typeof External_OAuth2_AuthRequestSchema>;
+export type OrganizationSSOAuthRequest = z.infer<typeof OrganizationSSOAuthRequestSchema>;
+export type OAuth2Callback = z.infer<typeof OAuth2CallbackSchema>;
+export type TOTPAuthRequest = z.infer<typeof TOTPAuthRequestSchema>;
+export type SMSOTPAuthRequest = z.infer<typeof SMSOTPAuthRequestSchema>;
+export type EmailOTPAuthRequest = z.infer<typeof EmailOTPAuthRequestSchema>;
+export type PasskeyAuthRequest = z.infer<typeof PasskeyAuthRequestSchema>;
+export type MagicLinkSendRequest = z.infer<typeof MagicLinkSendRequestSchema>;
+export type MagicLinkVerifyRequest = z.infer<typeof MagicLinkVerifyRequestSchema>;
+export type PhoneVerifySendRequest = z.infer<typeof PhoneVerifySendRequestSchema>;
+export type PhoneVerifyConfirmRequest = z.infer<typeof PhoneVerifyConfirmRequestSchema>;
+export type MFASetupRequest = z.infer<typeof MFASetupRequestSchema>;
+export type MFASetupResponse = z.infer<typeof MFASetupResponseSchema>;
+export type AuthIdentifyFormDto = z.infer<typeof AuthIdentifyFormDtoSchema>;
+export type AuthLoginFormDto = z.infer<typeof AuthLoginFormDtoSchema>;
+export type AuthenticationSession = z.infer<typeof AuthenticationSessionSchema>;
+export type NativeTokenExchangeRequest = z.infer<typeof NativeTokenExchangeRequestSchema>;
+export type NativeTokenExchangeResponse = z.infer<typeof NativeTokenExchangeResponseSchema>;
+export type OneOffTokenExchangeResponse = z.infer<typeof OneOffTokenExchangeResponseSchema>;
+//# sourceMappingURL=authentication.shared.dto.schemas.d.ts.map

package/dist/esm/security/authentications/authentication.shared.dto.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication.shared.dto.schemas.d.ts","sourceRoot":"","sources":["../../../../src/security/authentications/authentication.shared.dto.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,kBAAkB,EAAyB,MAAM,iCAAiC,CAAC;AAEvI,OAAO,EAAE,WAAW,EAAE,MAAM,gDAAgD,CAAC;AAG7E;;;GAGG;AACH,eAAO,MAAM,+BAA+B;;;;;;;uCAO1C,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCA6B3C,CAAC;AAQH;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;uCAQhC,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;;;uCAIpC,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;uCAU5C,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;uCAU3C,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;uCAQ/B,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;uCAIhC,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;uCAKlC,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;;;;uCAIpC,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;uCAiBnC,CAAC;AAQH;;;;GAIG;AACH,eAAO,MAAM,0BAA0B;;;uCAGrC,CAAC;AAKH;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B;;;uCAGvC,CAAC;AASH;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;uCAEvC,CAAC;AAKH;;GAEG;AACH,eAAO,MAAM,+BAA+B;;;uCAG1C,CAAC;AAKH;;GAEG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mDAQtC,CAAC;AAIH;;GAEG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCA4CvC,CAAC;AAQH;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;uCAI2B,CAAC;AAG9D;;GAEG;AACH,eAAO,MAAM,sBAAsB;;;;;;;uCAOjC,CAAC;AAKH;;GAEG;AACH,oBAAY,0BAA0B;IAEpC,OAAO,YAAY,CAA4B,8CAA8C;IAC7F,UAAU,eAAe,CAAsB,qCAAqC;IACpF,wBAAwB,6BAA6B,CAAE,0CAA0C;IACjG,sBAAsB,2BAA2B,CAAM,yBAAyB;IAChF,YAAY,iBAAiB,CAAkB,0CAA0C;IACzF,yBAAyB,8BAA8B,CAAE,4BAA4B;IACrF,SAAS,cAAc,CAAwB,wCAAwC;IACvF,gBAAgB,qBAAqB,CAAU,4DAA4D;IAG3G,UAAU,eAAe,CAAsB,uDAAuD;IACtG,cAAc,mBAAmB,CAAc,6CAA6C;IAC5F,uBAAuB,4BAA4B,CAAE,oDAAoD;IACzG,oBAAoB,yBAAyB,CAAE,mEAAmE;IAClH,kBAAkB,uBAAuB,CAAM,kDAAkD;IAGjG,MAAM,WAAW,CAA8B,wBAAwB;IACvE,OAAO,YAAY,CAA4B,kBAAkB;IACjE,MAAM,WAAW;CAClB;AAED,+EAA+E;AAC/E,eAAO,MAAM,wBAAwB,sCAA6B,CAAC;AAEnE;;;GAGG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uCA8EtC,CAAC;AAWH;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;uCAEpC,CAAC;AAKH;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;uCAGjC,CAAC;AASH,eAAO,MAAM,gCAAgC;;;;;;;uCAK3C,CAAC;AAIH,eAAO,MAAM,iCAAiC;;;;;uCAK5C,CAAC;AAEH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;uCAgB5C,CAAC;AAOH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAK1F,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAGxF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAC5F,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC"}