@adaptive-ds/zitadel-cli 0.1.0

package/dist/protocol/oauthTokenRequestConfigCreate.d.ts

@@ -0,0 +1,25 @@
+import * as v from "valibot";
+import { type PromiseResult } from "#result";
+declare const oauthTokenRequestConfigSchema: v.ObjectSchema<{
+    readonly clientAuth: v.OptionalSchema<v.PicklistSchema<["none", "client_secret_post", "client_secret_basic"], undefined>, undefined>;
+    readonly clientId: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>, undefined>;
+    readonly clientSecret: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>, undefined>;
+    readonly grantType: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>]>, undefined>;
+    readonly issuer: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>;
+}, undefined>;
+export type OauthTokenRequestClientAuthentication = "none" | "client_secret_basic" | "client_secret_post";
+export type OauthTokenRequestConfig = v.InferOutput<typeof oauthTokenRequestConfigSchema>;
+type OauthTokenRequestConfigCreateOptions = {
+    readonly baseUrl?: string;
+    readonly clientAuth?: OauthTokenRequestClientAuthentication;
+    readonly clientId?: string;
+    readonly clientSecret?: string;
+    readonly config?: unknown;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+    readonly envFile?: string;
+    readonly grantType?: string;
+    readonly issuer?: string;
+};
+export declare function oauthTokenRequestConfigCreate(options?: OauthTokenRequestConfigCreateOptions): PromiseResult<OauthTokenRequestConfig>;
+export {};
+//# sourceMappingURL=oauthTokenRequestConfigCreate.d.ts.map

package/dist/protocol/oauthTokenRequestConfigCreate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthTokenRequestConfigCreate.d.ts","sourceRoot":"","sources":["../../src/protocol/oauthTokenRequestConfigCreate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAE7E,QAAA,MAAM,6BAA6B;;;;;;aAMjC,CAAA;AAEF,MAAM,MAAM,qCAAqC,GAAG,MAAM,GAAG,qBAAqB,GAAG,oBAAoB,CAAA;AAEzG,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,6BAA6B,CAAC,CAAA;AAEzF,KAAK,oCAAoC,GAAG;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,qCAAqC,CAAA;IAC3D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB,CAAA;AAuCD,wBAAsB,6BAA6B,CACjD,OAAO,GAAE,oCAAyC,GACjD,aAAa,CAAC,uBAAuB,CAAC,CAkFxC"}

package/dist/protocol/oauthTokenRequestConfigCreate.js

@@ -0,0 +1,115 @@
+import { readFile } from "node:fs/promises";
+import * as v from "valibot";
+import { createResult, createResultError } from "#result";
+const oauthTokenRequestConfigSchema = v.object({
+    clientAuth: v.optional(v.picklist(["none", "client_secret_post", "client_secret_basic"])),
+    clientId: v.optional(v.pipe(v.string(), v.minLength(1))),
+    clientSecret: v.optional(v.pipe(v.string(), v.minLength(1))),
+    grantType: v.optional(v.pipe(v.string(), v.minLength(1))),
+    issuer: v.pipe(v.string(), v.minLength(1), v.url()),
+});
+const oauthTokenRequestEnvFileParse = (text) => {
+    const op = "oauthTokenRequestEnvFileParse";
+    const values = {};
+    for (const [index, sourceLine] of text.split(/\r?\n/).entries()) {
+        const line = sourceLine.replace(/^\uFEFF/, "").trim();
+        if (line === "" || line.startsWith("#")) {
+            continue;
+        }
+        const match = /^(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)$/.exec(line);
+        if (!match) {
+            return createResultError(op, `Invalid .env entry on line ${index + 1}`);
+        }
+        const key = match[1];
+        const rawValueSource = match[2];
+        if (key === undefined || rawValueSource === undefined) {
+            return createResultError(op, `Invalid .env entry on line ${index + 1}`);
+        }
+        const rawValue = rawValueSource.trim();
+        const quote = rawValue[0];
+        if (quote === "'" || quote === '"') {
+            if (rawValue.length < 2 || rawValue.at(-1) !== quote) {
+                return createResultError(op, `Unclosed quote on line ${index + 1}`);
+            }
+            values[key] = rawValue.slice(1, -1);
+            continue;
+        }
+        values[key] = rawValue.replace(/\s+#.*$/, "").trim();
+    }
+    return createResult(values);
+};
+export async function oauthTokenRequestConfigCreate(options = {}) {
+    const op = "oauthTokenRequestConfigCreate";
+    if (options.config !== undefined) {
+        const parsed = v.safeParse(oauthTokenRequestConfigSchema, options.config);
+        if (!parsed.success) {
+            return createResultError(op, v.summarize(parsed.issues));
+        }
+        return createResult(parsed.output);
+    }
+    let fileValues = {};
+    if (options.envFile !== undefined) {
+        let text;
+        try {
+            text = await readFile(options.envFile, "utf8");
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return createResultError(op, `Unable to read env file "${options.envFile}": ${message}`);
+        }
+        const fileResult = oauthTokenRequestEnvFileParse(text);
+        if (!fileResult.success) {
+            return createResultError(op, fileResult.errorMessage);
+        }
+        fileValues = fileResult.data;
+    }
+    const environment = options.env ?? process.env;
+    const clientSecret = options.clientSecret ??
+        environment.OIDC_CLIENT_SECRET ??
+        environment.ZITADEL_OIDC_CLIENT_SECRET ??
+        environment.ZITADEL_CLIENT_SECRET ??
+        fileValues.OIDC_CLIENT_SECRET ??
+        fileValues.ZITADEL_OIDC_CLIENT_SECRET ??
+        fileValues.ZITADEL_CLIENT_SECRET;
+    const input = {
+        clientAuth: options.clientAuth ??
+            environment.OIDC_CLIENT_AUTH ??
+            environment.OIDC_CLIENT_AUTHENTICATION ??
+            environment.ZITADEL_OIDC_CLIENT_AUTH ??
+            environment.ZITADEL_OIDC_CLIENT_AUTHENTICATION ??
+            environment.ZITADEL_CLIENT_AUTHENTICATION ??
+            fileValues.OIDC_CLIENT_AUTH ??
+            fileValues.OIDC_CLIENT_AUTHENTICATION ??
+            fileValues.ZITADEL_OIDC_CLIENT_AUTH ??
+            fileValues.ZITADEL_OIDC_CLIENT_AUTHENTICATION ??
+            fileValues.ZITADEL_CLIENT_AUTHENTICATION ??
+            (clientSecret === undefined ? "none" : "client_secret_post"),
+        clientId: options.clientId ??
+            environment.OIDC_CLIENT_ID ??
+            environment.ZITADEL_OIDC_CLIENT_ID ??
+            environment.ZITADEL_CLIENT_ID ??
+            fileValues.OIDC_CLIENT_ID ??
+            fileValues.ZITADEL_OIDC_CLIENT_ID ??
+            fileValues.ZITADEL_CLIENT_ID,
+        clientSecret,
+        grantType: options.grantType ??
+            environment.OIDC_GRANT_TYPE ??
+            environment.ZITADEL_OIDC_GRANT_TYPE ??
+            fileValues.OIDC_GRANT_TYPE ??
+            fileValues.ZITADEL_OIDC_GRANT_TYPE,
+        issuer: options.issuer ??
+            options.baseUrl ??
+            environment.OIDC_ISSUER ??
+            environment.ZITADEL_OIDC_ISSUER ??
+            environment.ZITADEL_BASE_URL ??
+            fileValues.OIDC_ISSUER ??
+            fileValues.ZITADEL_OIDC_ISSUER ??
+            fileValues.ZITADEL_BASE_URL,
+    };
+    const parsed = v.safeParse(oauthTokenRequestConfigSchema, input);
+    if (!parsed.success) {
+        return createResultError(op, v.summarize(parsed.issues));
+    }
+    return createResult(parsed.output);
+}
+//# sourceMappingURL=oauthTokenRequestConfigCreate.js.map

package/dist/protocol/oauthTokenRequestConfigCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthTokenRequestConfigCreate.js","sourceRoot":"","sources":["../../src/protocol/oauthTokenRequestConfigCreate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAE7E,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACzF,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;CACpD,CAAC,CAAA;AAkBF,MAAM,6BAA6B,GAAG,CAAC,IAAY,EAAE,EAAE;IACrD,MAAM,EAAE,GAAG,+BAA+B,CAAA;IAC1C,MAAM,MAAM,GAA2B,EAAE,CAAA;IAEzC,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QACrD,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,SAAQ;QACV,CAAC;QAED,MAAM,KAAK,GAAG,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9E,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACpB,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAC/B,IAAI,GAAG,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,CAAA;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBACrD,OAAO,iBAAiB,CAAC,EAAE,EAAE,0BAA0B,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;YACrE,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACnC,SAAQ;QACV,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;AAC7B,CAAC,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,UAAgD,EAAE;IAElD,MAAM,EAAE,GAAG,+BAA+B,CAAA;IAE1C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,6BAA6B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;QACzE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1D,CAAC;QACD,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC;IAED,IAAI,UAAU,GAA2B,EAAE,CAAA;IAC3C,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,IAAY,CAAA;QAChB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,4BAA4B,OAAO,CAAC,OAAO,MAAM,OAAO,EAAE,CAAC,CAAA;QAC1F,CAAC;QAED,MAAM,UAAU,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAA;QACtD,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,iBAAiB,CAAC,EAAE,EAAE,UAAU,CAAC,YAAY,CAAC,CAAA;QACvD,CAAC;QACD,UAAU,GAAG,UAAU,CAAC,IAAI,CAAA;IAC9B,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAA;IAC9C,MAAM,YAAY,GAChB,OAAO,CAAC,YAAY;QACpB,WAAW,CAAC,kBAAkB;QAC9B,WAAW,CAAC,0BAA0B;QACtC,WAAW,CAAC,qBAAqB;QACjC,UAAU,CAAC,kBAAkB;QAC7B,UAAU,CAAC,0BAA0B;QACrC,UAAU,CAAC,qBAAqB,CAAA;IAClC,MAAM,KAAK,GAAG;QACZ,UAAU,EACR,OAAO,CAAC,UAAU;YAClB,WAAW,CAAC,gBAAgB;YAC5B,WAAW,CAAC,0BAA0B;YACtC,WAAW,CAAC,wBAAwB;YACpC,WAAW,CAAC,kCAAkC;YAC9C,WAAW,CAAC,6BAA6B;YACzC,UAAU,CAAC,gBAAgB;YAC3B,UAAU,CAAC,0BAA0B;YACrC,UAAU,CAAC,wBAAwB;YACnC,UAAU,CAAC,kCAAkC;YAC7C,UAAU,CAAC,6BAA6B;YACxC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAC9D,QAAQ,EACN,OAAO,CAAC,QAAQ;YAChB,WAAW,CAAC,cAAc;YAC1B,WAAW,CAAC,sBAAsB;YAClC,WAAW,CAAC,iBAAiB;YAC7B,UAAU,CAAC,cAAc;YACzB,UAAU,CAAC,sBAAsB;YACjC,UAAU,CAAC,iBAAiB;QAC9B,YAAY;QACZ,SAAS,EACP,OAAO,CAAC,SAAS;YACjB,WAAW,CAAC,eAAe;YAC3B,WAAW,CAAC,uBAAuB;YACnC,UAAU,CAAC,eAAe;YAC1B,UAAU,CAAC,uBAAuB;QACpC,MAAM,EACJ,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,OAAO;YACf,WAAW,CAAC,WAAW;YACvB,WAAW,CAAC,mBAAmB;YAC/B,WAAW,CAAC,gBAAgB;YAC5B,UAAU,CAAC,WAAW;YACtB,UAAU,CAAC,mBAAmB;YAC9B,UAAU,CAAC,gBAAgB;KAC9B,CAAA;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAA;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAC1D,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC"}

package/dist/protocol/oauthTokenRequestSerialize.d.ts

@@ -0,0 +1,5 @@
+import type { TokenEndpointResponse } from "oauth4webapi";
+import { type Result } from "#result";
+export type OauthTokenRequestOutputFormat = "json" | "yaml";
+export declare function oauthTokenRequestSerialize(response: TokenEndpointResponse, format?: OauthTokenRequestOutputFormat): Result<string>;
+//# sourceMappingURL=oauthTokenRequestSerialize.d.ts.map

package/dist/protocol/oauthTokenRequestSerialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthTokenRequestSerialize.d.ts","sourceRoot":"","sources":["../../src/protocol/oauthTokenRequestSerialize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAEzD,OAAO,EAAmC,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AAEtE,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG,MAAM,CAAA;AAE3D,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,qBAAqB,EAC/B,MAAM,GAAE,6BAAsC,GAC7C,MAAM,CAAC,MAAM,CAAC,CAehB"}

package/dist/protocol/oauthTokenRequestSerialize.js

@@ -0,0 +1,19 @@
+import { stringify } from "yaml";
+import { createResult, createResultError } from "#result";
+export function oauthTokenRequestSerialize(response, format = "json") {
+    const op = "oauthTokenRequestSerialize";
+    try {
+        if (format === "json") {
+            return createResult(JSON.stringify(response, null, 2));
+        }
+        if (format === "yaml") {
+            return createResult(stringify(response));
+        }
+        return createResultError(op, `Unsupported output format: ${format}`);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, message);
+    }
+}
+//# sourceMappingURL=oauthTokenRequestSerialize.js.map

package/dist/protocol/oauthTokenRequestSerialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauthTokenRequestSerialize.js","sourceRoot":"","sources":["../../src/protocol/oauthTokenRequestSerialize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAe,MAAM,SAAS,CAAA;AAItE,MAAM,UAAU,0BAA0B,CACxC,QAA+B,EAC/B,SAAwC,MAAM;IAE9C,MAAM,EAAE,GAAG,4BAA4B,CAAA;IAEvC,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QACxD,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC1C,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,MAAM,EAAE,CAAC,CAAA;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;AACH,CAAC"}

package/dist/protocol/oidcDiscovery.d.ts

@@ -0,0 +1,17 @@
+import { type PromiseResult } from "#result";
+import type { ZitadelConfig } from "../config/zitadelConfig.js";
+import { type OidcDiscoveryResponse } from "./oidcDiscoveryResponseSchema.js";
+export type OidcDiscoveryOptions = {
+    readonly baseUrl?: string;
+    readonly config?: Pick<ZitadelConfig, "baseUrl">;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+    readonly envFile?: string;
+    readonly fetch?: (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+};
+/**
+ * Retrieves and validates the OpenID Connect provider configuration.
+ *
+ * @see https://openid.net/specs/openid-connect-discovery-1_0-errata2.html#ProviderConfig
+ */
+export declare function oidcDiscovery(options?: OidcDiscoveryOptions): PromiseResult<OidcDiscoveryResponse>;
+//# sourceMappingURL=oidcDiscovery.d.ts.map

package/dist/protocol/oidcDiscovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcDiscovery.d.ts","sourceRoot":"","sources":["../../src/protocol/oidcDiscovery.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAE/D,OAAO,EAAE,KAAK,qBAAqB,EAA+B,MAAM,kCAAkC,CAAA;AAE1G,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAA;IAChD,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CAC1F,CAAA;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAAC,qBAAqB,CAAC,CAkD5G"}

package/dist/protocol/oidcDiscovery.js

@@ -0,0 +1,58 @@
+import { allowInsecureRequests, customFetch, discoveryRequest } from "oauth4webapi";
+import * as v from "valibot";
+import { createResult, createResultError } from "#result";
+import { zitadelConfigCreate } from "../config/zitadelConfigCreate.js";
+import { oidcDiscoveryResponseSchema } from "./oidcDiscoveryResponseSchema.js";
+/**
+ * Retrieves and validates the OpenID Connect provider configuration.
+ *
+ * @see https://openid.net/specs/openid-connect-discovery-1_0-errata2.html#ProviderConfig
+ */
+export async function oidcDiscovery(options = {}) {
+    const op = "oidcDiscovery";
+    const configResult = await zitadelConfigCreate({
+        baseUrl: options.config?.baseUrl ?? options.baseUrl,
+        env: options.env,
+        envFile: options.envFile,
+        token: "oidc-discovery",
+    });
+    if (!configResult.success) {
+        return configResult;
+    }
+    const issuer = new URL(configResult.data.baseUrl);
+    const fetchImplementation = options.fetch ?? globalThis.fetch;
+    let response;
+    try {
+        response = await discoveryRequest(issuer, {
+            ...(issuer.protocol === "http:" ? { [allowInsecureRequests]: true } : {}),
+            [customFetch]: (url, init) => fetchImplementation(url, init),
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, `OIDC discovery request failed: ${message}`);
+    }
+    if (!response.ok) {
+        const statusText = response.statusText === "" ? "" : ` ${response.statusText}`;
+        return createResultError(op, `OIDC discovery request failed: HTTP ${response.status}${statusText}`);
+    }
+    let body;
+    try {
+        body = await response.json();
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, `Invalid OIDC discovery response: ${message}`);
+    }
+    const parsed = v.safeParse(oidcDiscoveryResponseSchema, body);
+    if (!parsed.success) {
+        return createResultError(op, `Invalid OIDC discovery response: ${v.summarize(parsed.issues)}`);
+    }
+    const expectedIssuer = issuer.href.replace(/\/+$/, "");
+    const receivedIssuer = parsed.output.issuer.replace(/\/+$/, "");
+    if (receivedIssuer !== expectedIssuer) {
+        return createResultError(op, "Invalid OIDC discovery response: issuer does not match the requested base URL");
+    }
+    return createResult(parsed.output);
+}
+//# sourceMappingURL=oidcDiscovery.js.map

package/dist/protocol/oidcDiscovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcDiscovery.js","sourceRoot":"","sources":["../../src/protocol/oidcDiscovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACnF,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAE7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AACtE,OAAO,EAA8B,2BAA2B,EAAE,MAAM,kCAAkC,CAAA;AAU1G;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,UAAgC,EAAE;IACpE,MAAM,EAAE,GAAG,eAAe,CAAA;IAC1B,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC;QAC7C,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO;QACnD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,gBAAgB;KACxB,CAAC,CAAA;IACF,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjD,MAAM,mBAAmB,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAA;IAE7D,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE;YACxC,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,CAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC;SAC7D,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,kCAAkC,OAAO,EAAE,CAAC,CAAA;IAC3E,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAA;QAC9E,OAAO,iBAAiB,CAAC,EAAE,EAAE,uCAAuC,QAAQ,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC,CAAA;IACrG,CAAC;IAED,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,OAAO,EAAE,CAAC,CAAA;IAC7E,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAA;IAC7D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,iBAAiB,CAAC,EAAE,EAAE,oCAAoC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACtD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC/D,IAAI,cAAc,KAAK,cAAc,EAAE,CAAC;QACtC,OAAO,iBAAiB,CAAC,EAAE,EAAE,+EAA+E,CAAC,CAAA;IAC/G,CAAC;IAED,OAAO,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;AACpC,CAAC"}

package/dist/protocol/oidcDiscoveryResponseSchema.d.ts

@@ -0,0 +1,43 @@
+import * as v from "valibot";
+export declare const oidcDiscoveryResponseSchema: v.LooseObjectSchema<{
+    readonly authorization_endpoint: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>;
+    readonly id_token_signing_alg_values_supported: v.SchemaWithPipe<readonly [v.ArraySchema<v.StringSchema<undefined>, undefined>, v.MinLengthAction<string[], 1, undefined>]>;
+    readonly issuer: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>;
+    readonly jwks_uri: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>;
+    readonly response_types_supported: v.SchemaWithPipe<readonly [v.ArraySchema<v.StringSchema<undefined>, undefined>, v.MinLengthAction<string[], 1, undefined>]>;
+    readonly subject_types_supported: v.SchemaWithPipe<readonly [v.ArraySchema<v.StringSchema<undefined>, undefined>, v.MinLengthAction<string[], 1, undefined>]>;
+    readonly acr_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly claims_locales_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly claims_parameter_supported: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+    readonly claims_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly code_challenge_methods_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly display_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly grant_types_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly id_token_encryption_alg_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly id_token_encryption_enc_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly introspection_endpoint: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>, undefined>;
+    readonly introspection_endpoint_auth_methods_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly op_policy_uri: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>, undefined>;
+    readonly op_tos_uri: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>, undefined>;
+    readonly registration_endpoint: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>, undefined>;
+    readonly request_object_encryption_alg_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly request_object_encryption_enc_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly request_object_signing_alg_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly request_parameter_supported: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+    readonly request_uri_parameter_supported: v.OptionalSchema<v.BooleanSchema<undefined>, undefined>;
+    readonly response_modes_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly revocation_endpoint: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>, undefined>;
+    readonly revocation_endpoint_auth_methods_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly scopes_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly service_documentation: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>, undefined>;
+    readonly token_endpoint: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>, undefined>;
+    readonly token_endpoint_auth_methods_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly token_endpoint_auth_signing_alg_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly ui_locales_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly userinfo_endpoint: v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.UrlAction<string, undefined>]>, undefined>;
+    readonly userinfo_encryption_alg_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly userinfo_encryption_enc_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+    readonly userinfo_signing_alg_values_supported: v.OptionalSchema<v.ArraySchema<v.StringSchema<undefined>, undefined>, undefined>;
+}, undefined>;
+export type OidcDiscoveryResponse = v.InferOutput<typeof oidcDiscoveryResponseSchema>;
+//# sourceMappingURL=oidcDiscoveryResponseSchema.d.ts.map

package/dist/protocol/oidcDiscoveryResponseSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcDiscoveryResponseSchema.d.ts","sourceRoot":"","sources":["../../src/protocol/oidcDiscoveryResponseSchema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAK5B,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAuCtC,CAAA;AAEF,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,2BAA2B,CAAC,CAAA"}

package/dist/protocol/oidcDiscoveryResponseSchema.js

@@ -0,0 +1,44 @@
+import * as v from "valibot";
+const oidcDiscoveryEndpointSchema = v.pipe(v.string(), v.minLength(1), v.url());
+const oidcDiscoveryStringArraySchema = v.pipe(v.array(v.string()), v.minLength(1));
+export const oidcDiscoveryResponseSchema = v.looseObject({
+    authorization_endpoint: oidcDiscoveryEndpointSchema,
+    id_token_signing_alg_values_supported: oidcDiscoveryStringArraySchema,
+    issuer: oidcDiscoveryEndpointSchema,
+    jwks_uri: oidcDiscoveryEndpointSchema,
+    response_types_supported: oidcDiscoveryStringArraySchema,
+    subject_types_supported: oidcDiscoveryStringArraySchema,
+    acr_values_supported: v.optional(v.array(v.string())),
+    claims_locales_supported: v.optional(v.array(v.string())),
+    claims_parameter_supported: v.optional(v.boolean()),
+    claims_supported: v.optional(v.array(v.string())),
+    code_challenge_methods_supported: v.optional(v.array(v.string())),
+    display_values_supported: v.optional(v.array(v.string())),
+    grant_types_supported: v.optional(v.array(v.string())),
+    id_token_encryption_alg_values_supported: v.optional(v.array(v.string())),
+    id_token_encryption_enc_values_supported: v.optional(v.array(v.string())),
+    introspection_endpoint: v.optional(oidcDiscoveryEndpointSchema),
+    introspection_endpoint_auth_methods_supported: v.optional(v.array(v.string())),
+    op_policy_uri: v.optional(oidcDiscoveryEndpointSchema),
+    op_tos_uri: v.optional(oidcDiscoveryEndpointSchema),
+    registration_endpoint: v.optional(oidcDiscoveryEndpointSchema),
+    request_object_encryption_alg_values_supported: v.optional(v.array(v.string())),
+    request_object_encryption_enc_values_supported: v.optional(v.array(v.string())),
+    request_object_signing_alg_values_supported: v.optional(v.array(v.string())),
+    request_parameter_supported: v.optional(v.boolean()),
+    request_uri_parameter_supported: v.optional(v.boolean()),
+    response_modes_supported: v.optional(v.array(v.string())),
+    revocation_endpoint: v.optional(oidcDiscoveryEndpointSchema),
+    revocation_endpoint_auth_methods_supported: v.optional(v.array(v.string())),
+    scopes_supported: v.optional(v.array(v.string())),
+    service_documentation: v.optional(oidcDiscoveryEndpointSchema),
+    token_endpoint: v.optional(oidcDiscoveryEndpointSchema),
+    token_endpoint_auth_methods_supported: v.optional(v.array(v.string())),
+    token_endpoint_auth_signing_alg_values_supported: v.optional(v.array(v.string())),
+    ui_locales_supported: v.optional(v.array(v.string())),
+    userinfo_endpoint: v.optional(oidcDiscoveryEndpointSchema),
+    userinfo_encryption_alg_values_supported: v.optional(v.array(v.string())),
+    userinfo_encryption_enc_values_supported: v.optional(v.array(v.string())),
+    userinfo_signing_alg_values_supported: v.optional(v.array(v.string())),
+});
+//# sourceMappingURL=oidcDiscoveryResponseSchema.js.map

package/dist/protocol/oidcDiscoveryResponseSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcDiscoveryResponseSchema.js","sourceRoot":"","sources":["../../src/protocol/oidcDiscoveryResponseSchema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAE5B,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAA;AAC/E,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AAElF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,WAAW,CAAC;IACvD,sBAAsB,EAAE,2BAA2B;IACnD,qCAAqC,EAAE,8BAA8B;IACrE,MAAM,EAAE,2BAA2B;IACnC,QAAQ,EAAE,2BAA2B;IACrC,wBAAwB,EAAE,8BAA8B;IACxD,uBAAuB,EAAE,8BAA8B;IACvD,oBAAoB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,wBAAwB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,0BAA0B,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACnD,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,gCAAgC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,wBAAwB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,qBAAqB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,wCAAwC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,wCAAwC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,sBAAsB,EAAE,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC/D,6CAA6C,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,aAAa,EAAE,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACtD,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACnD,qBAAqB,EAAE,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC9D,8CAA8C,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,8CAA8C,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,2CAA2C,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E,2BAA2B,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACpD,+BAA+B,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACxD,wBAAwB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC5D,0CAA0C,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3E,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACjD,qBAAqB,EAAE,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC9D,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IACvD,qCAAqC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,gDAAgD,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACjF,oBAAoB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,iBAAiB,EAAE,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC1D,wCAAwC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,wCAAwC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,qCAAqC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;CACvE,CAAC,CAAA"}

package/dist/protocol/oidcUserInfo.d.ts

@@ -0,0 +1,23 @@
+import type { AuthorizationServer, Client, UserInfoRequestOptions, UserInfoResponse } from "oauth4webapi";
+import { customFetch } from "oauth4webapi";
+import { type PromiseResult } from "#result";
+import type { ZitadelConfig } from "../config/zitadelConfig.js";
+export type OidcUserInfoFetch = NonNullable<UserInfoRequestOptions[typeof customFetch]>;
+export type OidcUserInfoOptions = {
+    readonly baseUrl?: string;
+    readonly client?: Client;
+    readonly config?: ZitadelConfig;
+    readonly discovery: AuthorizationServer;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+    readonly envFile?: string;
+    readonly expectedSubject?: string;
+    readonly fetch?: OidcUserInfoFetch;
+    readonly token?: string;
+};
+/**
+ * Requests and validates OIDC UserInfo claims from the endpoint in validated discovery metadata.
+ *
+ * @see https://openid.net/specs/openid-connect-core-1_0-errata2.html#UserInfo
+ */
+export declare function oidcUserInfo(options: OidcUserInfoOptions): PromiseResult<UserInfoResponse>;
+//# sourceMappingURL=oidcUserInfo.d.ts.map

package/dist/protocol/oidcUserInfo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcUserInfo.d.ts","sourceRoot":"","sources":["../../src/protocol/oidcUserInfo.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACzG,OAAO,EAAE,WAAW,EAA8D,MAAM,cAAc,CAAA;AAEtG,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAQ/D,MAAM,MAAM,iBAAiB,GAAG,WAAW,CAAC,sBAAsB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAA;AAEvF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAA;IAC3D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB,CAAA;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAuChG"}

package/dist/protocol/oidcUserInfo.js

@@ -0,0 +1,46 @@
+import { customFetch, processUserInfoResponse, skipSubjectCheck, userInfoRequest } from "oauth4webapi";
+import * as v from "valibot";
+import { createResult, createResultError } from "#result";
+import { zitadelConfigCreate } from "../config/zitadelConfigCreate.js";
+const oidcUserInfoDiscoverySchema = v.object({
+    issuer: v.pipe(v.string(), v.minLength(1), v.url()),
+    userinfo_endpoint: v.pipe(v.string(), v.minLength(1), v.url()),
+});
+/**
+ * Requests and validates OIDC UserInfo claims from the endpoint in validated discovery metadata.
+ *
+ * @see https://openid.net/specs/openid-connect-core-1_0-errata2.html#UserInfo
+ */
+export async function oidcUserInfo(options) {
+    const op = "oidcUserInfo";
+    const discoveryResult = v.safeParse(oidcUserInfoDiscoverySchema, options.discovery);
+    if (!discoveryResult.success) {
+        return createResultError(op, v.summarize(discoveryResult.issues));
+    }
+    const configResult = options.config !== undefined
+        ? createResult(options.config)
+        : await zitadelConfigCreate({
+            baseUrl: options.baseUrl ?? discoveryResult.output.issuer,
+            env: options.env,
+            envFile: options.envFile,
+            token: options.token,
+        });
+    if (!configResult.success) {
+        return configResult;
+    }
+    const client = options.client ?? { client_id: "zitadel-cli" };
+    const requestOptions = {};
+    if (options.fetch !== undefined) {
+        requestOptions[customFetch] = options.fetch;
+    }
+    try {
+        const response = await userInfoRequest(options.discovery, client, configResult.data.token, requestOptions);
+        const claims = await processUserInfoResponse(options.discovery, client, options.expectedSubject ?? skipSubjectCheck, response);
+        return createResult(claims);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, message);
+    }
+}
+//# sourceMappingURL=oidcUserInfo.js.map

package/dist/protocol/oidcUserInfo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcUserInfo.js","sourceRoot":"","sources":["../../src/protocol/oidcUserInfo.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AACtG,OAAO,KAAK,CAAC,MAAM,SAAS,CAAA;AAC5B,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAE7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AAEtE,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IACnD,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;CAC/D,CAAC,CAAA;AAgBF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B;IAC7D,MAAM,EAAE,GAAG,cAAc,CAAA;IACzB,MAAM,eAAe,GAAG,CAAC,CAAC,SAAS,CAAC,2BAA2B,EAAE,OAAO,CAAC,SAAS,CAAC,CAAA;IACnF,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QAC7B,OAAO,iBAAiB,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAA;IACnE,CAAC;IAED,MAAM,YAAY,GAChB,OAAO,CAAC,MAAM,KAAK,SAAS;QAC1B,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC;QAC9B,CAAC,CAAC,MAAM,mBAAmB,CAAC;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM;YACzD,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC,CAAA;IACR,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAA;IACrB,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAA;IAC7D,MAAM,cAAc,GAA2B,EAAE,CAAA;IACjD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,cAAc,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,KAAK,CAAA;IAC7C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;QAC1G,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAC1C,OAAO,CAAC,SAAS,EACjB,MAAM,EACN,OAAO,CAAC,eAAe,IAAI,gBAAgB,EAC3C,QAAQ,CACT,CAAA;QACD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAA;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;AACH,CAAC"}

package/dist/protocol/oidcUserInfoDiscoveryParse.d.ts

@@ -0,0 +1,9 @@
+import type { AuthorizationServer } from "oauth4webapi";
+import { type PromiseResult } from "#result";
+type OidcUserInfoDiscoveryParseOptions = {
+    readonly file?: string;
+    readonly json?: string;
+};
+export declare function oidcUserInfoDiscoveryParse(options?: OidcUserInfoDiscoveryParseOptions): PromiseResult<AuthorizationServer>;
+export {};
+//# sourceMappingURL=oidcUserInfoDiscoveryParse.d.ts.map

package/dist/protocol/oidcUserInfoDiscoveryParse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcUserInfoDiscoveryParse.d.ts","sourceRoot":"","sources":["../../src/protocol/oidcUserInfoDiscoveryParse.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACvD,OAAO,EAAmC,KAAK,aAAa,EAAE,MAAM,SAAS,CAAA;AAE7E,KAAK,iCAAiC,GAAG;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB,CAAA;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,GAAE,iCAAsC,GAC9C,aAAa,CAAC,mBAAmB,CAAC,CAgCpC"}

package/dist/protocol/oidcUserInfoDiscoveryParse.js

@@ -0,0 +1,36 @@
+import { readFile } from "node:fs/promises";
+import { createResult, createResultError } from "#result";
+export async function oidcUserInfoDiscoveryParse(options = {}) {
+    const op = "oidcUserInfoDiscoveryParse";
+    if (options.json !== undefined && options.file !== undefined) {
+        return createResultError(op, "Use either --discovery-json or --discovery-file, not both");
+    }
+    if (options.json === undefined && options.file === undefined) {
+        return createResultError(op, "A validated discovery JSON value is required");
+    }
+    let json = options.json;
+    if (options.file !== undefined) {
+        try {
+            json = await readFile(options.file, "utf8");
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return createResultError(op, `Unable to read discovery file "${options.file}": ${message}`);
+        }
+    }
+    if (json === undefined) {
+        return createResultError(op, "A validated discovery JSON value is required");
+    }
+    try {
+        const parsed = JSON.parse(json);
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            return createResultError(op, "Discovery JSON must be an object");
+        }
+        return createResult(parsed);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, `Invalid discovery JSON: ${message}`);
+    }
+}
+//# sourceMappingURL=oidcUserInfoDiscoveryParse.js.map

package/dist/protocol/oidcUserInfoDiscoveryParse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcUserInfoDiscoveryParse.js","sourceRoot":"","sources":["../../src/protocol/oidcUserInfoDiscoveryParse.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAE3C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAsB,MAAM,SAAS,CAAA;AAO7E,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,UAA6C,EAAE;IAE/C,MAAM,EAAE,GAAG,4BAA4B,CAAA;IACvC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,iBAAiB,CAAC,EAAE,EAAE,2DAA2D,CAAC,CAAA;IAC3F,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,iBAAiB,CAAC,EAAE,EAAE,8CAA8C,CAAC,CAAA;IAC9E,CAAC;IAED,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;IACvB,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,kCAAkC,OAAO,CAAC,IAAI,MAAM,OAAO,EAAE,CAAC,CAAA;QAC7F,CAAC;IACH,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,iBAAiB,CAAC,EAAE,EAAE,8CAA8C,CAAC,CAAA;IAC9E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,iBAAiB,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAA;QAClE,CAAC;QACD,OAAO,YAAY,CAAC,MAA6B,CAAC,CAAA;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,2BAA2B,OAAO,EAAE,CAAC,CAAA;IACpE,CAAC;AACH,CAAC"}

package/dist/protocol/oidcUserInfoSerialize.d.ts

@@ -0,0 +1,5 @@
+import type { UserInfoResponse } from "oauth4webapi";
+import { type Result } from "#result";
+export type OidcUserInfoOutputFormat = "json" | "yaml";
+export declare function oidcUserInfoSerialize(claims: UserInfoResponse, format?: OidcUserInfoOutputFormat): Result<string>;
+//# sourceMappingURL=oidcUserInfoSerialize.d.ts.map

package/dist/protocol/oidcUserInfoSerialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcUserInfoSerialize.d.ts","sourceRoot":"","sources":["../../src/protocol/oidcUserInfoSerialize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAEpD,OAAO,EAAmC,KAAK,MAAM,EAAE,MAAM,SAAS,CAAA;AAEtE,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,MAAM,CAAA;AAEtD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,gBAAgB,EACxB,MAAM,GAAE,wBAAiC,GACxC,MAAM,CAAC,MAAM,CAAC,CAehB"}

package/dist/protocol/oidcUserInfoSerialize.js

@@ -0,0 +1,19 @@
+import { stringify } from "yaml";
+import { createResult, createResultError } from "#result";
+export function oidcUserInfoSerialize(claims, format = "json") {
+    const op = "oidcUserInfoSerialize";
+    try {
+        if (format === "json") {
+            return createResult(JSON.stringify(claims, null, 2));
+        }
+        if (format === "yaml") {
+            return createResult(stringify(claims));
+        }
+        return createResultError(op, `Unsupported output format: ${format}`);
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, message);
+    }
+}
+//# sourceMappingURL=oidcUserInfoSerialize.js.map

package/dist/protocol/oidcUserInfoSerialize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidcUserInfoSerialize.js","sourceRoot":"","sources":["../../src/protocol/oidcUserInfoSerialize.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAe,MAAM,SAAS,CAAA;AAItE,MAAM,UAAU,qBAAqB,CACnC,MAAwB,EACxB,SAAmC,MAAM;IAEzC,MAAM,EAAE,GAAG,uBAAuB,CAAA;IAElC,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;QACxC,CAAC;QACD,OAAO,iBAAiB,CAAC,EAAE,EAAE,8BAA8B,MAAM,EAAE,CAAC,CAAA;IACtE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;AACH,CAAC"}

package/dist/request/index.d.ts

@@ -0,0 +1,2 @@
+export { messageRequestParse } from "./messageRequestParse.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/request/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/request/index.js

@@ -0,0 +1,2 @@
+export { messageRequestParse } from "./messageRequestParse.js";
+//# sourceMappingURL=index.js.map

package/dist/request/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/request/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/request/messageRequestParse.d.ts

@@ -0,0 +1,4 @@
+import type { Result } from "#result";
+import { type DescMessage, type MessageShape } from "@bufbuild/protobuf";
+export declare function messageRequestParse<Desc extends DescMessage>(schema: Desc, json: string): Result<MessageShape<Desc>>;
+//# sourceMappingURL=messageRequestParse.d.ts.map

package/dist/request/messageRequestParse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageRequestParse.d.ts","sourceRoot":"","sources":["../../src/request/messageRequestParse.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAErC,OAAO,EAAkB,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAExF,wBAAgB,mBAAmB,CAAC,IAAI,SAAS,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CASpH"}

package/dist/request/messageRequestParse.js

@@ -0,0 +1,13 @@
+import { createResult, createResultError } from "#result";
+import { fromJsonString } from "@bufbuild/protobuf";
+export function messageRequestParse(schema, json) {
+    const op = "messageRequestParse";
+    try {
+        return createResult(fromJsonString(schema, json));
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return createResultError(op, message);
+    }
+}
+//# sourceMappingURL=messageRequestParse.js.map

package/dist/request/messageRequestParse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageRequestParse.js","sourceRoot":"","sources":["../../src/request/messageRequestParse.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,cAAc,EAAuC,MAAM,oBAAoB,CAAA;AAExF,MAAM,UAAU,mBAAmB,CAA2B,MAAY,EAAE,IAAY;IACtF,MAAM,EAAE,GAAG,qBAAqB,CAAA;IAEhC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACtE,OAAO,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;AACH,CAAC"}

package/dist/transport/index.d.ts

@@ -0,0 +1,2 @@
+export { zitadelTransportCreate } from "./zitadelTransportCreate.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/transport/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/transport/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA"}