@adaptive-ds/zitadel-cli 0.1.0

package/dist/protocol/deviceAuthorizationConfigCreate.js

@@ -0,0 +1,147 @@
+import { readFile } from "node:fs/promises";
+import * as v from "valibot";
+import { createResult, createResultError } from "#result";
+import { deviceAuthorizationConfigSchema } from "./deviceAuthorizationConfig.js";
+const deviceAuthorizationDiscoverySchema = v.object({
+    device_authorization_endpoint: v.pipe(v.string(), v.minLength(1), v.url()),
+    issuer: v.pipe(v.string(), v.minLength(1), v.url()),
+});
+const deviceAuthorizationEnvFileParse = (text) => {
+    const op = "deviceAuthorizationEnvFileParse";
+    const values = {};
+    for (const [index, sourceLine] of text.split(/\r?\n/).entries()) {
+        const line = sourceLine.replace(/^\uFEFF/, "").trim();
+        if (line === "" || line.startsWith("#")) {
+            continue;
+        }
+        const match = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(line);
+        if (!match) {
+            return createResultError(op, `Invalid .env entry on line ${index + 1}`);
+        }
+        const key = match[1];
+        const rawValueSource = match[2];
+        if (key === undefined || rawValueSource === undefined) {
+            return createResultError(op, `Invalid .env entry on line ${index + 1}`);
+        }
+        const rawValue = rawValueSource.trim();
+        const quote = rawValue[0];
+        if (quote === "'" || quote === '"') {
+            if (rawValue.length < 2 || rawValue.at(-1) !== quote) {
+                return createResultError(op, `Unclosed quote on line ${index + 1}`);
+            }
+            values[key] = rawValue.slice(1, -1);
+            continue;
+        }
+        values[key] = rawValue.replace(/\s+#.*$/, "").trim();
+    }
+    return createResult(values);
+};
+const environmentValue = (environment, fileValues, ...names) => {
+    for (const name of names) {
+        const value = environment[name];
+        if (value !== undefined) {
+            return value;
+        }
+    }
+    for (const name of names) {
+        const value = fileValues[name];
+        if (value !== undefined) {
+            return value;
+        }
+    }
+    return undefined;
+};
+const resourceParse = (value) => {
+    if (value === undefined || value.trim() === "") {
+        return [];
+    }
+    return value
+        .split(/[\s,]+/)
+        .map((item) => item.trim())
+        .filter((item) => item.length > 0);
+};
+const parametersParse = (value) => {
+    const op = "parametersParse";
+    if (value === undefined || value.trim() === "") {
+        return createResult({});
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, message);
+    }
+    const result = v.safeParse(v.record(v.string(), v.string()), parsed);
+    if (!result.success) {
+        return createResultError(op, v.summarize(result.issues));
+    }
+    return createResult(result.output);
+};
+export async function deviceAuthorizationConfigCreate(options = {}) {
+    const op = "deviceAuthorizationConfigCreate";
+    let fileValues = {};
+    if (options.envFile !== undefined) {
+        let text;
+        try {
+            text = await readFile(options.envFile, "utf8");
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return createResultError(op, `Unable to read env file "${options.envFile}": ${message}`);
+        }
+        const fileResult = deviceAuthorizationEnvFileParse(text);
+        if (!fileResult.success) {
+            return createResultError(op, fileResult.errorMessage);
+        }
+        fileValues = fileResult.data;
+    }
+    const environment = options.env ?? process.env;
+    let discovery;
+    if (options.discovery !== undefined) {
+        const discoveryResult = v.safeParse(deviceAuthorizationDiscoverySchema, options.discovery);
+        if (!discoveryResult.success) {
+            return createResultError(op, `Invalid OIDC discovery metadata: ${v.summarize(discoveryResult.issues)}`);
+        }
+        discovery = discoveryResult.output;
+    }
+    let parameters = options.parameters ?? {};
+    if (options.parameters === undefined) {
+        const parametersResult = parametersParse(environmentValue(environment, fileValues, "ZITADEL_OIDC_PARAMETERS_JSON", "OIDC_PARAMETERS_JSON", "ZITADEL_PARAMETERS_JSON"));
+        if (!parametersResult.success) {
+            return createResultError(op, `Invalid device authorization parameters: ${parametersResult.errorMessage}`);
+        }
+        parameters = parametersResult.data;
+    }
+    const clientSecret = options.clientSecret ??
+        environmentValue(environment, fileValues, "ZITADEL_OIDC_CLIENT_SECRET", "OIDC_CLIENT_SECRET", "ZITADEL_CLIENT_SECRET");
+    const clientAuthentication = options.clientAuthentication ??
+        environmentValue(environment, fileValues, "ZITADEL_OIDC_CLIENT_AUTHENTICATION", "OIDC_CLIENT_AUTHENTICATION", "ZITADEL_CLIENT_AUTHENTICATION") ??
+        (clientSecret === undefined ? "none" : "client_secret_post");
+    const input = {
+        authorizationDetails: options.authorizationDetails ??
+            environmentValue(environment, fileValues, "ZITADEL_OIDC_AUTHORIZATION_DETAILS", "OIDC_AUTHORIZATION_DETAILS", "ZITADEL_AUTHORIZATION_DETAILS"),
+        clientAuthentication,
+        clientId: options.clientId ??
+            environmentValue(environment, fileValues, "ZITADEL_OIDC_CLIENT_ID", "OIDC_CLIENT_ID", "ZITADEL_CLIENT_ID"),
+        clientSecret,
+        deviceAuthorizationEndpoint: options.deviceAuthorizationEndpoint ??
+            discovery?.device_authorization_endpoint ??
+            environmentValue(environment, fileValues, "ZITADEL_OIDC_DEVICE_AUTHORIZATION_ENDPOINT", "OIDC_DEVICE_AUTHORIZATION_ENDPOINT", "ZITADEL_DEVICE_AUTHORIZATION_ENDPOINT"),
+        issuer: discovery?.issuer,
+        parameters,
+        resource: options.resource ??
+            resourceParse(environmentValue(environment, fileValues, "ZITADEL_OIDC_RESOURCE", "OIDC_RESOURCE", "ZITADEL_RESOURCE")),
+        scope: options.scope ?? environmentValue(environment, fileValues, "ZITADEL_OIDC_SCOPE", "OIDC_SCOPE", "ZITADEL_SCOPE"),
+    };
+    const parsed = v.safeParse(deviceAuthorizationConfigSchema, input);
+    if (!parsed.success) {
+        return createResultError(op, v.summarize(parsed.issues));
+    }
+    if (parsed.output.clientAuthentication !== "none" && parsed.output.clientSecret === undefined) {
+        return createResultError(op, `clientSecret is required for ${parsed.output.clientAuthentication}`);
+    }
+    return createResult(parsed.output);
+}
+//# sourceMappingURL=deviceAuthorizationConfigCreate.js.map

package/dist/protocol/deviceAuthorizationConfigCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceAuthorizationConfigCreate.js","sourceRoot":"","sources":["../../src/protocol/deviceAuthorizationConfigCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAC7E,OAAO,EAAkC,+BAA+B,EAAE,MAAM,gCAAgC,CAAA;AAgBhH,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,6BAA6B,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAC1E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;CACpD,CAAC,CAAA;AAEF,MAAM,+BAA+B,GAAG,CAAC,IAAY,EAAE,EAAE;IACvD,MAAM,EAAE,GAAG,iCAAiC,CAAA;IAC5C,MAAM,MAAM,GAA2B,EAAE,CAAA;IAEzC,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACrD,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,SAAQ;QACV,CAAC;QAED,MAAM,KAAK,GAAG,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,GAAG,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBACrD,OAAO,iBAAiB,CAAC,EAAE,EAAE,0BAA0B,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACnC,SAAQ;QACV,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;AAC7B,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,CACvB,WAAyD,EACzD,UAA4C,EAC5C,GAAG,KAAe,EACE,EAAE;IACtB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,KAAyB,EAAY,EAAE;IAC5D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,KAAK;SACT,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;AACtC,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,CAAC,KAAyB,EAAE,EAAE;IACpD,MAAM,EAAE,GAAG,iBAAiB,CAAA;IAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/C,OAAO,YAAY,CAAC,EAAE,CAAC,CAAA;IACzB,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;IACpE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,UAAkD,EAAE;IAEpD,MAAM,EAAE,GAAG,iCAAiC,CAAA;IAC5C,IAAI,UAAU,GAA2B,EAAE,CAAA;IAE3C,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,4BAA4B,OAAO,CAAC,OAAO,MAAM,OAAO,EAAE,CAAC,CAAA;QAC1F,CAAC;QAED,MAAM,UAAU,GAAG,+BAA+B,CAAC,IAAI,CAAC,CAAA;QACxD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,iBAAiB,CAAC,EAAE,EAAE,UAAU,CAAC,YAAY,CAAC,CAAA;QACvD,CAAC;QACD,UAAU,GAAG,UAAU,CAAC,IAAI,CAAA;IAC9B,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IAC9C,IAAI,SAA+E,CAAA;IACnF,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,eAAe,GAAG,CAAC,CAAC,SAAS,CAAC,kCAAkC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;QAC1F,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACzG,CAAC;QACD,SAAS,GAAG,eAAe,CAAC,MAAM,CAAA;IACpC,CAAC;IAED,IAAI,UAAU,GAAqC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAA;IAC3E,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,gBAAgB,GAAG,eAAe,CACtC,gBAAgB,CACd,WAAW,EACX,UAAU,EACV,8BAA8B,EAC9B,sBAAsB,EACtB,yBAAyB,CAC1B,CACF,CAAA;QACD,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;YAC9B,OAAO,iBAAiB,CAAC,EAAE,EAAE,4CAA4C,gBAAgB,CAAC,YAAY,EAAE,CAAC,CAAA;QAC3G,CAAC;QACD,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAA;IACpC,CAAC;IAED,MAAM,YAAY,GAChB,OAAO,CAAC,YAAY;QACpB,gBAAgB,CACd,WAAW,EACX,UAAU,EACV,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,CACxB,CAAA;IACH,MAAM,oBAAoB,GACxB,OAAO,CAAC,oBAAoB;QAC5B,gBAAgB,CACd,WAAW,EACX,UAAU,EACV,oCAAoC,EACpC,4BAA4B,EAC5B,+BAA+B,CAChC;QACD,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAA;IAC9D,MAAM,KAAK,GAAG;QACZ,oBAAoB,EAClB,OAAO,CAAC,oBAAoB;YAC5B,gBAAgB,CACd,WAAW,EACX,UAAU,EACV,oCAAoC,EACpC,4BAA4B,EAC5B,+BAA+B,CAChC;QACH,oBAAoB;QACpB,QAAQ,EACN,OAAO,CAAC,QAAQ;YAChB,gBAAgB,CAAC,WAAW,EAAE,UAAU,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,mBAAmB,CAAC;QAC5G,YAAY;QACZ,2BAA2B,EACzB,OAAO,CAAC,2BAA2B;YACnC,SAAS,EAAE,6BAA6B;YACxC,gBAAgB,CACd,WAAW,EACX,UAAU,EACV,4CAA4C,EAC5C,oCAAoC,EACpC,uCAAuC,CACxC;QACH,MAAM,EAAE,SAAS,EAAE,MAAM;QACzB,UAAU;QACV,QAAQ,EACN,OAAO,CAAC,QAAQ;YAChB,aAAa,CACX,gBAAgB,CAAC,WAAW,EAAE,UAAU,EAAE,uBAAuB,EAAE,eAAe,EAAE,kBAAkB,CAAC,CACxG;QACH,KAAK,EACH,OAAO,CAAC,KAAK,IAAI,gBAAgB,CAAC,WAAW,EAAE,UAAU,EAAE,oBAAoB,EAAE,YAAY,EAAE,eAAe,CAAC;KAClH,CAAA;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAC1D,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,CAAC,oBAAoB,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QAC9F,OAAO,iBAAiB,CAAC,EAAE,EAAE,gCAAgC,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAA;IACpG,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC"}

package/dist/protocol/deviceAuthorizationOutputFormat.d.ts

@@ -0,0 +1,2 @@
+export type DeviceAuthorizationOutputFormat = "json" | "yaml";
+//# sourceMappingURL=deviceAuthorizationOutputFormat.d.ts.map

package/dist/protocol/deviceAuthorizationOutputFormat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceAuthorizationOutputFormat.d.ts","sourceRoot":"","sources":["../../src/protocol/deviceAuthorizationOutputFormat.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,MAAM,CAAA"}

package/dist/protocol/deviceAuthorizationOutputFormat.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=deviceAuthorizationOutputFormat.js.map

package/dist/protocol/deviceAuthorizationOutputFormat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceAuthorizationOutputFormat.js","sourceRoot":"","sources":["../../src/protocol/deviceAuthorizationOutputFormat.ts"],"names":[],"mappings":""}

package/dist/protocol/deviceAuthorizationRequest.d.ts

@@ -0,0 +1,10 @@
+import { type DeviceAuthorizationResponse } from "oauth4webapi";
+import { type PromiseResult } from "#result";
+import { type DeviceAuthorizationConfigCreateOptions } from "./deviceAuthorizationConfigCreate.js";
+type DeviceAuthorizationFetch = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+type DeviceAuthorizationRequestOptions = DeviceAuthorizationConfigCreateOptions & {
+    readonly fetch?: DeviceAuthorizationFetch;
+};
+export declare function deviceAuthorizationRequest(options?: DeviceAuthorizationRequestOptions): PromiseResult<DeviceAuthorizationResponse>;
+export type { DeviceAuthorizationFetch, DeviceAuthorizationRequestOptions };
+//# sourceMappingURL=deviceAuthorizationRequest.d.ts.map

package/dist/protocol/deviceAuthorizationRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceAuthorizationRequest.d.ts","sourceRoot":"","sources":["../../src/protocol/deviceAuthorizationRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,2BAA2B,EAIjC,MAAM,cAAc,CAAA;AACrB,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,EACL,KAAK,sCAAsC,EAE5C,MAAM,sCAAsC,CAAA;AAE7C,KAAK,wBAAwB,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAExG,KAAK,iCAAiC,GAAG,sCAAsC,GAAG;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAA;CAC1C,CAAA;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,GAAE,iCAAsC,GAC9C,aAAa,CAAC,2BAA2B,CAAC,CA0D5C;AAED,YAAY,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,CAAA"}

package/dist/protocol/deviceAuthorizationRequest.js

@@ -0,0 +1,55 @@
+import { ClientSecretBasic, ClientSecretPost, customFetch, None, deviceAuthorizationRequest as oauthDeviceAuthorizationRequest, processDeviceAuthorizationResponse, } from "oauth4webapi";
+import { createResult, createResultError } from "#result";
+import { deviceAuthorizationConfigCreate, } from "./deviceAuthorizationConfigCreate.js";
+export async function deviceAuthorizationRequest(options = {}) {
+    const op = "deviceAuthorizationRequest";
+    const configResult = await deviceAuthorizationConfigCreate(options);
+    if (!configResult.success) {
+        return configResult;
+    }
+    const config = configResult.data;
+    let endpoint;
+    try {
+        endpoint = new URL(config.deviceAuthorizationEndpoint);
+    }
+    catch {
+        return createResultError(op, "deviceAuthorizationEndpoint must be a valid URL");
+    }
+    const parameters = new URLSearchParams(config.parameters);
+    parameters.set("client_id", config.clientId);
+    if (config.scope !== undefined) {
+        parameters.set("scope", config.scope);
+    }
+    if (config.resource.length > 0) {
+        parameters.delete("resource");
+        for (const resource of config.resource) {
+            parameters.append("resource", resource);
+        }
+    }
+    if (config.authorizationDetails !== undefined) {
+        parameters.set("authorization_details", config.authorizationDetails);
+    }
+    const client = { client_id: config.clientId };
+    const authorizationServer = {
+        device_authorization_endpoint: endpoint.href,
+        issuer: config.issuer ?? endpoint.origin,
+    };
+    const clientAuthentication = config.clientAuthentication === "client_secret_basic"
+        ? ClientSecretBasic(config.clientSecret)
+        : config.clientAuthentication === "client_secret_post"
+            ? ClientSecretPost(config.clientSecret)
+            : None();
+    const fetchImplementation = options.fetch ?? globalThis.fetch;
+    try {
+        const response = await oauthDeviceAuthorizationRequest(authorizationServer, client, clientAuthentication, parameters, {
+            [customFetch]: async (url, requestOptions) => fetchImplementation(url, requestOptions),
+        });
+        const parsed = await processDeviceAuthorizationResponse(authorizationServer, client, response);
+        return createResult(parsed);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, message);
+    }
+}
+//# sourceMappingURL=deviceAuthorizationRequest.js.map

package/dist/protocol/deviceAuthorizationRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceAuthorizationRequest.js","sourceRoot":"","sources":["../../src/protocol/deviceAuthorizationRequest.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,WAAW,EAEX,IAAI,EACJ,0BAA0B,IAAI,+BAA+B,EAC7D,kCAAkC,GACnC,MAAM,cAAc,CAAA;AACrB,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAC7E,OAAO,EAEL,+BAA+B,GAChC,MAAM,sCAAsC,CAAA;AAQ7C,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,UAA6C,EAAE;IAE/C,MAAM,EAAE,GAAG,4BAA4B,CAAA;IACvC,MAAM,YAAY,GAAG,MAAM,+BAA+B,CAAC,OAAO,CAAC,CAAA;IACnE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAA;IAChC,IAAI,QAAa,CAAA;IACjB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAA;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CAAC,EAAE,EAAE,iDAAiD,CAAC,CAAA;IACjF,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACzD,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;QAC7B,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QACzC,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC9C,UAAU,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAA;IACtE,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAA;IAC7C,MAAM,mBAAmB,GAAG;QAC1B,6BAA6B,EAAE,QAAQ,CAAC,IAAI;QAC5C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;KACzC,CAAA;IACD,MAAM,oBAAoB,GACxB,MAAM,CAAC,oBAAoB,KAAK,qBAAqB;QACnD,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAsB,CAAC;QAClD,CAAC,CAAC,MAAM,CAAC,oBAAoB,KAAK,oBAAoB;YACpD,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAsB,CAAC;YACjD,CAAC,CAAC,IAAI,EAAE,CAAA;IACd,MAAM,mBAAmB,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IAE7D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,+BAA+B,CACpD,mBAAmB,EACnB,MAAM,EACN,oBAAoB,EACpB,UAAU,EACV;YACE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,cAA6B,CAAC;SACtG,CACF,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,kCAAkC,CAAC,mBAAmB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QAC9F,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;AACH,CAAC"}

package/dist/protocol/deviceAuthorizationSerialize.d.ts

@@ -0,0 +1,4 @@
+import { type Result } from "#result";
+import type { DeviceAuthorizationOutputFormat } from "./deviceAuthorizationOutputFormat.js";
+export declare function deviceAuthorizationSerialize(value: unknown, format?: DeviceAuthorizationOutputFormat): Result<string>;
+//# sourceMappingURL=deviceAuthorizationSerialize.d.ts.map

package/dist/protocol/deviceAuthorizationSerialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceAuthorizationSerialize.d.ts","sourceRoot":"","sources":["../../src/protocol/deviceAuthorizationSerialize.ts"],"names":[],"mappings":"AACA,OAAO,EAAmC,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AACtE,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,sCAAsC,CAAA;AAE3F,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,OAAO,EACd,MAAM,GAAE,+BAAwC,GAC/C,MAAM,CAAC,MAAM,CAAC,CAehB"}

package/dist/protocol/deviceAuthorizationSerialize.js

@@ -0,0 +1,19 @@
+import { stringify } from "yaml";
+import { createResult, createResultError } from "#result";
+export function deviceAuthorizationSerialize(value, format = "json") {
+    const op = "deviceAuthorizationSerialize";
+    try {
+        if (format === "json") {
+            return createResult(JSON.stringify(value, null, 2));
+        }
+        if (format === "yaml") {
+            return createResult(stringify(value));
+        }
+        return createResultError(op, `Unsupported output format: ${format}`);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, message);
+    }
+}
+//# sourceMappingURL=deviceAuthorizationSerialize.js.map

package/dist/protocol/deviceAuthorizationSerialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceAuthorizationSerialize.js","sourceRoot":"","sources":["../../src/protocol/deviceAuthorizationSerialize.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAe,MAAM,SAAS,CAAA;AAGtE,MAAM,UAAU,4BAA4B,CAC1C,KAAc,EACd,SAA0C,MAAM;IAEhD,MAAM,EAAE,GAAG,8BAA8B,CAAA;IAEzC,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QACrD,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;QACvC,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,MAAM,EAAE,CAAC,CAAA;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;AACH,CAAC"}

package/dist/protocol/index.d.ts

@@ -0,0 +1,12 @@
+export { deviceAuthorizationRequest } from "./deviceAuthorizationRequest.js";
+export type { DeviceAuthorizationFetch, DeviceAuthorizationRequestOptions, } from "./deviceAuthorizationRequest.js";
+export { oidcDiscovery } from "./oidcDiscovery.js";
+export type { OidcDiscoveryOptions } from "./oidcDiscovery.js";
+export { oidcDiscoveryResponseSchema } from "./oidcDiscoveryResponseSchema.js";
+export type { OidcDiscoveryResponse } from "./oidcDiscoveryResponseSchema.js";
+export { oidcUserInfo } from "./oidcUserInfo.js";
+export type { OidcUserInfoFetch, OidcUserInfoOptions } from "./oidcUserInfo.js";
+export { oauthTokenRequest } from "./oauthTokenRequest.js";
+export type { OauthTokenRequestOptions, OauthTokenRequestParameters, } from "./oauthTokenRequest.js";
+export type { OauthTokenRequestClientAuthentication, OauthTokenRequestConfig, } from "./oauthTokenRequestConfigCreate.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/protocol/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/protocol/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAC5E,YAAY,EACV,wBAAwB,EACxB,iCAAiC,GAClC,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAA;AAC9E,YAAY,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAA;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,YAAY,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,YAAY,EACV,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,qCAAqC,EACrC,uBAAuB,GACxB,MAAM,oCAAoC,CAAA"}

package/dist/protocol/index.js

@@ -0,0 +1,6 @@
+export { deviceAuthorizationRequest } from "./deviceAuthorizationRequest.js";
+export { oidcDiscovery } from "./oidcDiscovery.js";
+export { oidcDiscoveryResponseSchema } from "./oidcDiscoveryResponseSchema.js";
+export { oidcUserInfo } from "./oidcUserInfo.js";
+export { oauthTokenRequest } from "./oauthTokenRequest.js";
+//# sourceMappingURL=index.js.map

package/dist/protocol/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/protocol/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAK5E,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAA;AAE9E,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA"}

package/dist/protocol/oauthTokenRequest.d.ts

@@ -0,0 +1,25 @@
+import type { TokenEndpointResponse } from "oauth4webapi";
+import * as oauth from "oauth4webapi";
+import { type PromiseResult } from "#result";
+import { type OauthTokenRequestClientAuthentication, type OauthTokenRequestConfig } from "./oauthTokenRequestConfigCreate.js";
+export type OauthTokenRequestParameters = Readonly<Record<string, string>> | ReadonlyArray<readonly [string, string]> | URLSearchParams;
+export type OauthTokenRequestOptions = {
+    readonly allowInsecureRequests?: boolean;
+    readonly baseUrl?: string;
+    readonly clientAuth?: OauthTokenRequestClientAuthentication;
+    readonly clientAuthentication?: oauth.ClientAuth;
+    readonly clientId?: string;
+    readonly clientSecret?: string;
+    readonly config?: OauthTokenRequestConfig;
+    readonly discovery?: unknown;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+    readonly envFile?: string;
+    readonly fetch?: (input: string | URL, init?: RequestInit) => Promise<Response>;
+    readonly grantType?: string;
+    readonly headers?: RequestInit["headers"];
+    readonly issuer?: string;
+    readonly parameters?: OauthTokenRequestParameters;
+    readonly signal?: AbortSignal;
+};
+export declare function oauthTokenRequest(options?: OauthTokenRequestOptions): PromiseResult<TokenEndpointResponse>;
+//# sourceMappingURL=oauthTokenRequest.d.ts.map

package/dist/protocol/oauthTokenRequest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthTokenRequest.d.ts","sourceRoot":"","sources":["../../src/protocol/oauthTokenRequest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AAErC,OAAO,EAAmC,KAAK,aAAa,EAAe,MAAM,SAAS,CAAA;AAC1F,OAAO,EACL,KAAK,qCAAqC,EAC1C,KAAK,uBAAuB,EAE7B,MAAM,oCAAoC,CAAA;AAO3C,MAAM,MAAM,2BAA2B,GACnC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAChC,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACxC,eAAe,CAAA;AAEnB,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAA;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,qCAAqC,CAAA;IAC3D,QAAQ,CAAC,oBAAoB,CAAC,EAAE,KAAK,CAAC,UAAU,CAAA;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,uBAAuB,CAAA;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAA;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,2BAA2B,CAAA;IACjD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAC9B,CAAA;AA+DD,wBAAsB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,aAAa,CAAC,qBAAqB,CAAC,CAkFpH"}

package/dist/protocol/oauthTokenRequest.js

@@ -0,0 +1,126 @@
+import * as oauth from "oauth4webapi";
+import * as v from "valibot";
+import { createResult, createResultError } from "#result";
+import { oauthTokenRequestConfigCreate, } from "./oauthTokenRequestConfigCreate.js";
+const oauthTokenRequestDiscoverySchema = v.object({
+    issuer: v.pipe(v.string(), v.minLength(1), v.url()),
+    token_endpoint: v.pipe(v.string(), v.minLength(1), v.url()),
+});
+const oauthTokenRequestParametersCreate = (parameters) => {
+    if (parameters === undefined) {
+        return new URLSearchParams();
+    }
+    if (parameters instanceof URLSearchParams) {
+        return new URLSearchParams(parameters);
+    }
+    if (Array.isArray(parameters)) {
+        return new URLSearchParams(parameters.map(([key, value]) => [key, value]));
+    }
+    return new URLSearchParams(parameters);
+};
+const oauthTokenRequestFetchCreate = (fetcher) => {
+    if (fetcher === undefined) {
+        return undefined;
+    }
+    return async (url, options) => fetcher(url, options);
+};
+const oauthTokenRequestClientAuthenticationCreate = (config, options) => {
+    const op = "oauthTokenRequestClientAuthenticationCreate";
+    if (options.clientAuthentication !== undefined) {
+        return createResult(options.clientAuthentication);
+    }
+    switch (config.clientAuth ?? "none") {
+        case "none":
+            return createResult(oauth.None());
+        case "client_secret_basic":
+            if (config.clientSecret === undefined) {
+                return createResultError(op, "clientSecret is required for client_secret_basic authentication");
+            }
+            return createResult(oauth.ClientSecretBasic(config.clientSecret));
+        case "client_secret_post":
+            if (config.clientSecret === undefined) {
+                return createResultError(op, "clientSecret is required for client_secret_post authentication");
+            }
+            return createResult(oauth.ClientSecretPost(config.clientSecret));
+    }
+};
+const oauthTokenRequestDiscoveryParse = (discovery) => {
+    const op = "oauthTokenRequestDiscoveryParse";
+    const parsed = v.safeParse(oauthTokenRequestDiscoverySchema, discovery);
+    if (!parsed.success) {
+        return createResultError(op, `Invalid validated OIDC discovery metadata: ${v.summarize(parsed.issues)}`);
+    }
+    return createResult(parsed.output);
+};
+export async function oauthTokenRequest(options = {}) {
+    const op = "oauthTokenRequest";
+    let validatedDiscovery;
+    if (options.discovery !== undefined) {
+        const discoveryResult = oauthTokenRequestDiscoveryParse(options.discovery);
+        if (!discoveryResult.success) {
+            return discoveryResult;
+        }
+        validatedDiscovery = discoveryResult.data;
+    }
+    const configResult = await oauthTokenRequestConfigCreate({
+        baseUrl: options.baseUrl,
+        clientAuth: options.clientAuth,
+        clientId: options.clientId,
+        clientSecret: options.clientSecret,
+        config: options.config,
+        env: options.env,
+        envFile: options.envFile,
+        grantType: options.grantType,
+        issuer: options.issuer ?? validatedDiscovery?.issuer,
+    });
+    if (!configResult.success) {
+        return configResult;
+    }
+    const parameters = oauthTokenRequestParametersCreate(options.parameters);
+    const clientId = configResult.data.clientId ?? parameters.get("client_id");
+    if (clientId === null || clientId === undefined || clientId.length === 0) {
+        return createResultError(op, "clientId is required");
+    }
+    const grantType = configResult.data.grantType ?? parameters.get("grant_type");
+    if (grantType === null || grantType === undefined || grantType.length === 0) {
+        return createResultError(op, "grantType is required");
+    }
+    const authResult = oauthTokenRequestClientAuthenticationCreate(configResult.data, options);
+    if (!authResult.success) {
+        return authResult;
+    }
+    const fetcher = oauthTokenRequestFetchCreate(options.fetch);
+    const discoveryOptions = {};
+    const requestOptions = {};
+    if (options.headers !== undefined) {
+        requestOptions.headers = new Headers(options.headers);
+    }
+    if (options.signal !== undefined) {
+        requestOptions.signal = options.signal;
+    }
+    if (options.allowInsecureRequests === true) {
+        requestOptions[oauth.allowInsecureRequests] = true;
+        discoveryOptions[oauth.allowInsecureRequests] = true;
+    }
+    if (fetcher !== undefined) {
+        discoveryOptions[oauth.customFetch] = fetcher;
+        requestOptions[oauth.customFetch] = fetcher;
+    }
+    try {
+        let authorizationServer = validatedDiscovery;
+        if (authorizationServer === undefined) {
+            const issuer = new URL(configResult.data.issuer);
+            const discoveryResponse = await oauth.discoveryRequest(issuer, discoveryOptions);
+            authorizationServer = await oauth.processDiscoveryResponse(issuer, discoveryResponse);
+        }
+        const client = { client_id: clientId };
+        const tokenResponse = await oauth.genericTokenEndpointRequest(authorizationServer, client, authResult.data, grantType, parameters, requestOptions);
+        const response = await oauth.processGenericTokenEndpointResponse(authorizationServer, client, tokenResponse);
+        return createResult(response);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, message);
+    }
+}
+//# sourceMappingURL=oauthTokenRequest.js.map

package/dist/protocol/oauthTokenRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthTokenRequest.js","sourceRoot":"","sources":["../../src/protocol/oauthTokenRequest.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAmC,MAAM,SAAS,CAAA;AAC1F,OAAO,EAGL,6BAA6B,GAC9B,MAAM,oCAAoC,CAAA;AAE3C,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACnD,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;CAC5D,CAAC,CAAA;AA+BF,MAAM,iCAAiC,GAAG,CAAC,UAAmD,EAAmB,EAAE;IACjH,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,IAAI,eAAe,EAAE,CAAA;IAC9B,CAAC;IACD,IAAI,UAAU,YAAY,eAAe,EAAE,CAAC;QAC1C,OAAO,IAAI,eAAe,CAAC,UAAU,CAAC,CAAA;IACxC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAqB,CAAC,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,IAAI,eAAe,CAAC,UAAoC,CAAC,CAAA;AAClE,CAAC,CAAA;AAED,MAAM,4BAA4B,GAAG,CACnC,OAA0C,EACN,EAAE;IACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,OAAsB,CAAC,CAAA;AACrE,CAAC,CAAA;AAED,MAAM,2CAA2C,GAAG,CAClD,MAA+B,EAC/B,OAAiC,EACP,EAAE;IAC5B,MAAM,EAAE,GAAG,6CAA6C,CAAA;IACxD,IAAI,OAAO,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QAC/C,OAAO,YAAY,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACnD,CAAC;IAED,QAAQ,MAAM,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC;QACpC,KAAK,MAAM;YACT,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;QACnC,KAAK,qBAAqB;YACxB,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,iBAAiB,CAAC,EAAE,EAAE,iEAAiE,CAAC,CAAA;YACjG,CAAC;YACD,OAAO,YAAY,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;QACnE,KAAK,oBAAoB;YACvB,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACtC,OAAO,iBAAiB,CAAC,EAAE,EAAE,gEAAgE,CAAC,CAAA;YAChG,CAAC;YACD,OAAO,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;IACpE,CAAC;AACH,CAAC,CAAA;AAED,MAAM,+BAA+B,GAAG,CAAC,SAAkB,EAAqC,EAAE;IAChG,MAAM,EAAE,GAAG,iCAAiC,CAAA;IAC5C,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,gCAAgC,EAAE,SAAS,CAAC,CAAA;IACvE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,iBAAiB,CAAC,EAAE,EAAE,8CAA8C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC1G,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAoC,EAAE;IAC5E,MAAM,EAAE,GAAG,mBAAmB,CAAA;IAC9B,IAAI,kBAAyD,CAAA;IAC7D,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,eAAe,GAAG,+BAA+B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC1E,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;YAC7B,OAAO,eAAe,CAAA;QACxB,CAAC;QACD,kBAAkB,GAAG,eAAe,CAAC,IAAI,CAAA;IAC3C,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,6BAA6B,CAAC;QACvD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,kBAAkB,EAAE,MAAM;KACrD,CAAC,CAAA;IACF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,MAAM,UAAU,GAAG,iCAAiC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACxE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAC1E,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,iBAAiB,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAC7E,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,iBAAiB,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,UAAU,GAAG,2CAA2C,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IAC1F,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QACxB,OAAO,UAAU,CAAA;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,4BAA4B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC3D,MAAM,gBAAgB,GAAkC,EAAE,CAAA;IAC1D,MAAM,cAAc,GAAoE,EAAE,CAAA;IAC1F,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,cAAc,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,cAAc,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IACxC,CAAC;IACD,IAAI,OAAO,CAAC,qBAAqB,KAAK,IAAI,EAAE,CAAC;QAC3C,cAAc,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAA;QAClD,gBAAgB,CAAC,KAAK,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAA;IACtD,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,OAAO,CAAA;QAC7C,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,OAAO,CAAA;IAC7C,CAAC;IAED,IAAI,CAAC;QACH,IAAI,mBAAmB,GAAG,kBAAkB,CAAA;QAC5C,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;YAChD,MAAM,iBAAiB,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;YAChF,mBAAmB,GAAG,MAAM,KAAK,CAAC,wBAAwB,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;QACvF,CAAC;QACD,MAAM,MAAM,GAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAA;QACpD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,2BAA2B,CAC3D,mBAAmB,EACnB,MAAM,EACN,UAAU,CAAC,IAAI,EACf,SAAS,EACT,UAAU,EACV,cAAc,CACf,CAAA;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,mCAAmC,CAAC,mBAAmB,EAAE,MAAM,EAAE,aAAa,CAAC,CAAA;QAC5G,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;AACH,CAAC"}

package/dist/protocol/oauthTokenRequestCommand.d.ts

@@ -0,0 +1,3 @@
+import type { ApplicationContext, Command } from "@stricli/core";
+export declare const oauthTokenRequestCommand: Command<ApplicationContext>;
+//# sourceMappingURL=oauthTokenRequestCommand.d.ts.map

package/dist/protocol/oauthTokenRequestCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthTokenRequestCommand.d.ts","sourceRoot":"","sources":["../../src/protocol/oauthTokenRequestCommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AAqChE,eAAO,MAAM,wBAAwB,EAAE,OAAO,CAAC,kBAAkB,CAqH/D,CAAA"}

package/dist/protocol/oauthTokenRequestCommand.js

@@ -0,0 +1,129 @@
+import { buildCommand } from "@stricli/core";
+import { oauthTokenRequest } from "./oauthTokenRequest.js";
+import {} from "./oauthTokenRequestConfigCreate.js";
+import { oauthTokenRequestSerialize } from "./oauthTokenRequestSerialize.js";
+const oauthTokenRequestCommandFieldsCreate = (fields, deviceCode) => {
+    const parameters = new URLSearchParams();
+    for (const field of fields) {
+        const separator = field.indexOf("=");
+        if (separator < 1) {
+            return `Invalid --field value "${field}"; use name=value`;
+        }
+        parameters.append(field.slice(0, separator), field.slice(separator + 1));
+    }
+    if (deviceCode !== undefined) {
+        parameters.set("device_code", deviceCode);
+    }
+    return parameters;
+};
+export const oauthTokenRequestCommand = buildCommand({
+    func: async function (flags) {
+        const parameters = oauthTokenRequestCommandFieldsCreate(flags.field ?? [], flags.deviceCode);
+        if (typeof parameters === "string") {
+            this.process.stderr.write(`${parameters}\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        const result = await oauthTokenRequest({
+            clientAuth: flags.clientAuth,
+            clientId: flags.clientId,
+            clientSecret: flags.clientSecret,
+            baseUrl: flags.baseUrl,
+            env: this.process.env,
+            envFile: flags.envFile,
+            grantType: flags.grantType,
+            issuer: flags.issuer,
+            parameters,
+        });
+        if (!result.success) {
+            this.process.stderr.write(`${result.errorMessage}\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        const serialized = oauthTokenRequestSerialize(result.data, flags.output);
+        if (!serialized.success) {
+            this.process.stderr.write(`${serialized.errorMessage}\n`);
+            this.process.exitCode = 1;
+            return;
+        }
+        this.process.stdout.write(`${serialized.data}\n`);
+    },
+    parameters: {
+        flags: {
+            baseUrl: {
+                brief: "OIDC issuer/base URL (overrides environment and env file)",
+                kind: "parsed",
+                optional: true,
+                parse: (input) => input,
+                placeholder: "URL",
+            },
+            clientAuth: {
+                brief: "Token endpoint client authentication method",
+                kind: "enum",
+                optional: true,
+                values: ["none", "client_secret_basic", "client_secret_post"],
+            },
+            clientId: {
+                brief: "OAuth client ID",
+                kind: "parsed",
+                optional: true,
+                parse: (input) => input,
+                placeholder: "CLIENT_ID",
+            },
+            clientSecret: {
+                brief: "OAuth client secret",
+                kind: "parsed",
+                optional: true,
+                parse: (input) => input,
+                placeholder: "CLIENT_SECRET",
+            },
+            deviceCode: {
+                brief: "Device code (equivalent to --field device_code=...)",
+                kind: "parsed",
+                optional: true,
+                parse: (input) => input,
+                placeholder: "DEVICE_CODE",
+            },
+            envFile: {
+                brief: "Explicit .env file path",
+                kind: "parsed",
+                optional: true,
+                parse: (input) => input,
+                placeholder: "PATH",
+            },
+            field: {
+                brief: "Additional form field; repeat for every OAuth parameter (name=value)",
+                kind: "parsed",
+                optional: true,
+                parse: (input) => input,
+                placeholder: "NAME=VALUE",
+                variadic: true,
+            },
+            grantType: {
+                brief: "OAuth grant_type (also accepted as a form field)",
+                kind: "parsed",
+                optional: true,
+                parse: (input) => input,
+                placeholder: "GRANT_TYPE",
+            },
+            issuer: {
+                brief: "OIDC issuer used for validated discovery",
+                kind: "parsed",
+                optional: true,
+                parse: (input) => input,
+                placeholder: "URL",
+            },
+            output: {
+                brief: "Output format",
+                default: "json",
+                kind: "enum",
+                values: ["json", "yaml"],
+            },
+        },
+    },
+    docs: {
+        brief: "Request an OAuth token at the token endpoint from validated OIDC discovery",
+        fullDescription: "The issuer is discovered through its OIDC well-known document and the returned token_endpoint is used verbatim. Supply any OAuth form field with --field; device-code requests use --grant-type urn:ietf:params:oauth:grant-type:device_code and --device-code.",
+    },
+});
+//# sourceMappingURL=oauthTokenRequestCommand.js.map

package/dist/protocol/oauthTokenRequestCommand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthTokenRequestCommand.js","sourceRoot":"","sources":["../../src/protocol/oauthTokenRequestCommand.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC1D,OAAO,EAA8C,MAAM,oCAAoC,CAAA;AAC/F,OAAO,EAAsC,0BAA0B,EAAE,MAAM,iCAAiC,CAAA;AAehH,MAAM,oCAAoC,GAAG,CAC3C,MAAyB,EACzB,UAAmB,EACO,EAAE;IAC5B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,0BAA0B,KAAK,mBAAmB,CAAA;QAC3D,CAAC;QACD,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAA;IAC1E,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAgC,YAAY,CAI/E;IACA,IAAI,EAAE,KAAK,WAAqC,KAAoC;QAClF,MAAM,UAAU,GAAG,oCAAoC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;QAC5F,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,IAAI,CAAC,CAAA;YAC5C,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU;SACX,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,YAAY,IAAI,CAAC,CAAA;YACrD,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QACxE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,YAAY,IAAI,CAAC,CAAA;YACzD,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;YACzB,OAAM;QACR,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,IAAI,IAAI,CAAC,CAAA;IACnD,CAAC;IACD,UAAU,EAAE;QACV,KAAK,EAAE;YACL,OAAO,EAAE;gBACP,KAAK,EAAE,2DAA2D;gBAClE,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;gBAC/B,WAAW,EAAE,KAAK;aACnB;YACD,UAAU,EAAE;gBACV,KAAK,EAAE,6CAA6C;gBACpD,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,CAAC,MAAM,EAAE,qBAAqB,EAAE,oBAAoB,CAAC;aAC9D;YACD,QAAQ,EAAE;gBACR,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;gBAC/B,WAAW,EAAE,WAAW;aACzB;YACD,YAAY,EAAE;gBACZ,KAAK,EAAE,qBAAqB;gBAC5B,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;gBAC/B,WAAW,EAAE,eAAe;aAC7B;YACD,UAAU,EAAE;gBACV,KAAK,EAAE,qDAAqD;gBAC5D,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;gBAC/B,WAAW,EAAE,aAAa;aAC3B;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,yBAAyB;gBAChC,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;gBAC/B,WAAW,EAAE,MAAM;aACpB;YACD,KAAK,EAAE;gBACL,KAAK,EAAE,sEAAsE;gBAC7E,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;gBAC/B,WAAW,EAAE,YAAY;gBACzB,QAAQ,EAAE,IAAI;aACf;YACD,SAAS,EAAE;gBACT,KAAK,EAAE,kDAAkD;gBACzD,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;gBAC/B,WAAW,EAAE,YAAY;aAC1B;YACD,MAAM,EAAE;gBACN,KAAK,EAAE,0CAA0C;gBACjD,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK;gBAC/B,WAAW,EAAE,KAAK;aACnB;YACD,MAAM,EAAE;gBACN,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;aACzB;SACF;KACF;IACD,IAAI,EAAE;QACJ,KAAK,EAAE,4EAA4E;QACnF,eAAe,EACb,iQAAiQ;KACpQ;CACF,CAAC,CAAA"}