@authup/server-core 1.0.0-beta.3 → 1.0.0-beta.30

package/dist/core/oauth2/grant-types/types.d.ts

@@ -0,0 +1,30 @@
+import type { ObjectLiteral } from '@authup/kit';
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { ISessionManager } from '../../authentication/index.ts';
+import type { IOAuth2TokenIssuer, IOAuth2TokenRevoker, IOAuth2TokenVerifier } from '../token/index.ts';
+export type BaseGrantContext = {
+    accessTokenIssuer: IOAuth2TokenIssuer;
+    sessionManager: ISessionManager;
+};
+export type OAuth2AuthorizeGrantContext = BaseGrantContext & {
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+};
+export type OAuth2IdentityGrantContext = BaseGrantContext & {
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+};
+export type OAuth2PasswordGrantContext = BaseGrantContext & {
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+};
+export type OAuth2RefreshTokenGrantContext = BaseGrantContext & {
+    refreshTokenIssuer: IOAuth2TokenIssuer;
+    tokenVerifier: IOAuth2TokenVerifier;
+    tokenRevoker: IOAuth2TokenRevoker;
+};
+export type OAuth2GrantRunWIthOptions = {
+    userAgent?: string;
+    ipAddress?: string;
+};
+export interface IOAuth2Grant<T = ObjectLiteral> {
+    runWith(data: T, base?: OAuth2GrantRunWIthOptions): Promise<OAuth2TokenGrantResponse>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/grant-types/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EACR,wBAAwB,EAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEvG,MAAM,MAAM,gBAAgB,GAAG;IAC3B,iBAAiB,EAAE,kBAAkB,CAAC;IACtC,cAAc,EAAE,eAAe,CAAA;CAClC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,gBAAgB,GAAG;IACzD,kBAAkB,EAAE,kBAAkB,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,gBAAgB,GAAG;IACxD,kBAAkB,EAAE,kBAAkB,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,gBAAgB,GAAG;IACxD,kBAAkB,EAAE,kBAAkB,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG,gBAAgB,GAAG;IAC5D,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,aAAa,EAAE,oBAAoB,CAAC;IACpC,YAAY,EAAE,mBAAmB,CAAA;CACpC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,aAAa;IAC3C,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,yBAAyB,GAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAC1F"}

package/dist/core/oauth2/grant-types/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/grant-types/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/oauth2/grant-types/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/helpers/erorr.d.ts

@@ -0,0 +1,9 @@
+import { OAuth2Error } from '@authup/specs';
+import { AuthupError } from '@authup/errors';
+/**
+ * Transforms an unknown error to an OAuth2Error.
+ *
+ * @param err
+ */
+export declare function toOAuth2Error(err: unknown): AuthupError | OAuth2Error;
+//# sourceMappingURL=erorr.d.ts.map

package/dist/core/oauth2/helpers/erorr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"erorr.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/helpers/erorr.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,WAAW,EAAmB,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAI7C;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAI,WAAW,GAAG,WAAW,CAmBtE"}

package/dist/core/oauth2/helpers/erorr.js

@@ -0,0 +1,34 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+import { OAuth2Error, OAuth2ErrorCode } from '@authup/specs';
+import { AuthupError } from '@authup/errors';
+import { isObject } from '@authup/kit';
+import { sanitizeError } from "../../../utils/index.js";
+/**
+ * Transforms an unknown error to an OAuth2Error.
+ *
+ * @param err
+ */
+export function toOAuth2Error(err) {
+    if (err instanceof OAuth2Error) {
+        return err;
+    }
+    let next;
+    if (err instanceof AuthupError) {
+        next = err;
+    }
+    else {
+        next = sanitizeError(err);
+    }
+    next.data = {
+        error: OAuth2ErrorCode.INVALID_REQUEST,
+        error_description: next.message,
+        ...(isObject(next.data) ? next.data : {}),
+    };
+    return next;
+}
+//# sourceMappingURL=erorr.js.map

package/dist/core/oauth2/helpers/erorr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erorr.js","sourceRoot":"","sources":["../../../../src/core/oauth2/helpers/erorr.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY;IACtC,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC7B,OAAO,GAAG,CAAC;IACf,CAAC;IAED,IAAI,IAAkB,CAAC;IACvB,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC7B,IAAI,GAAG,GAAG,CAAC;IACf,CAAC;SAAM,CAAC;QACJ,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI,CAAC,IAAI,GAAG;QACR,KAAK,EAAE,eAAe,CAAC,eAAe;QACtC,iBAAiB,EAAE,IAAI,CAAC,OAAO;QAC/B,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;IAEF,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/dist/core/oauth2/helpers/index.d.ts

@@ -0,0 +1,2 @@
+export * from './erorr.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/helpers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/helpers/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/helpers/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export * from "./erorr.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/helpers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/helpers/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/index.d.ts

@@ -0,0 +1,9 @@
+export * from './authorization/index.ts';
+export * from './client/index.ts';
+export * from './grant-types/index.ts';
+export * from './key/index.ts';
+export * from './openid/index.ts';
+export * from './response/index.ts';
+export * from './scope/index.ts';
+export * from './token/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/oauth2/index.ts"],"names":[],"mappings":"AAOA,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/core/oauth2/index.js

@@ -0,0 +1,15 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./authorization/index.js";
+export * from "./client/index.js";
+export * from "./grant-types/index.js";
+export * from "./key/index.js";
+export * from "./openid/index.js";
+export * from "./response/index.js";
+export * from "./scope/index.js";
+export * from "./token/index.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/oauth2/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/core/oauth2/key/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/key/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/key/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/key/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/key/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/key/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/key/types.d.ts

@@ -0,0 +1,16 @@
+import type { Key } from '@authup/core-kit';
+export interface IOAuth2KeyRepository {
+    /**
+     * Find a key for signing and verifying tokens.
+     *
+     * @param realmId
+     */
+    findByRealmId(realmId: string): Promise<Key | null>;
+    /**
+     * Find a key by explicit id.
+     *
+     * @param id
+     */
+    findById(id: string): Promise<Key | null>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/oauth2/key/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/key/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACjC;;;;OAIG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IAErD;;;;OAIG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;CAE9C"}

package/dist/core/oauth2/key/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/oauth2/key/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/oauth2/key/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/openid/claims.d.ts

@@ -0,0 +1,24 @@
+import type { Client, Identity, Robot, User } from '@authup/core-kit';
+import type { OpenIDTokenPayload } from '@authup/specs';
+import type { ObjectLiteral } from 'validup';
+type AttributeMapTuple<T> = {
+    [K in keyof T]: [K, (value: unknown) => any];
+}[keyof T];
+type AttributeMap<T extends Record<string, any>> = Record<keyof OpenIDTokenPayload, keyof T | AttributeMapTuple<T>>;
+export declare class OAuth2OpenIDClaimsBuilder {
+    protected clientMap: AttributeMap<Client>;
+    protected robotMap: AttributeMap<Robot>;
+    protected userMap: AttributeMap<User>;
+    /**
+     * Build OpenID Claims form Oauth2 Identity.
+     *
+     * @param identity
+     */
+    fromIdentity(identity: Identity): OpenIDTokenPayload;
+    fromClient(input: Client): OpenIDTokenPayload;
+    fromRobot(input: Robot): OpenIDTokenPayload;
+    fromUser(input: User): OpenIDTokenPayload;
+    protected extract<T extends ObjectLiteral = ObjectLiteral>(attributeMap: AttributeMap<T>, attributes: T): OpenIDTokenPayload;
+}
+export {};
+//# sourceMappingURL=claims.d.ts.map

package/dist/core/oauth2/openid/claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/openid/claims.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACR,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAChC,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,iBAAiB,CAAC,CAAC,IAAI;KACvB,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,GAAG,CAAC;CAC/C,CAAC,MAAM,CAAC,CAAC,CAAC;AAEX,KAAK,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CACzD,MAAM,kBAAkB,EACxB,MAAM,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAC7B,CAAC;AAEF,qBAAa,yBAAyB;IAClC,SAAS,CAAC,SAAS,EAAG,YAAY,CAAC,MAAM,CAAC,CAkBxC;IAEF,SAAS,CAAC,QAAQ,EAAG,YAAY,CAAC,KAAK,CAAC,CAkBtC;IAEF,SAAS,CAAC,OAAO,EAAG,YAAY,CAAC,IAAI,CAAC,CAuBpC;IAEF;;;;OAIG;IACH,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAI,kBAAkB;IAYrD,UAAU,CAAC,KAAK,EAAE,MAAM,GAAI,kBAAkB;IAI9C,SAAS,CAAC,KAAK,EAAE,KAAK,GAAG,kBAAkB;IAI3C,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAI,kBAAkB;IAI1C,SAAS,CAAC,OAAO,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,EACrD,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,EAC7B,UAAU,EAAE,CAAC,GACb,kBAAkB;CAqBzB"}

package/dist/core/oauth2/openid/claims.js

@@ -0,0 +1,108 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { hasOwnProperty } from '@authup/kit';
+import { OAuth2SubKind } from '@authup/specs';
+export class OAuth2OpenIDClaimsBuilder {
+    clientMap = {
+        name: 'name',
+        nickname: 'name',
+        preferred_username: 'name',
+        updated_at: [
+            'updated_at',
+            (value) => {
+                if (typeof value === 'string') {
+                    return new Date(value).getTime();
+                }
+                if (value instanceof Date) {
+                    return value.getTime();
+                }
+                return value;
+            },
+        ],
+    };
+    robotMap = {
+        name: 'name',
+        nickname: 'name',
+        preferred_username: 'name',
+        updated_at: [
+            'updated_at',
+            (value) => {
+                if (typeof value === 'string') {
+                    return new Date(value).getTime();
+                }
+                if (value instanceof Date) {
+                    return value.getTime();
+                }
+                return value;
+            },
+        ],
+    };
+    userMap = {
+        name: 'name',
+        family_name: 'last_name',
+        given_name: 'first_name',
+        nickname: 'display_name',
+        preferred_username: 'display_name',
+        updated_at: [
+            'updated_at',
+            (value) => {
+                if (typeof value === 'string') {
+                    return new Date(value).getTime();
+                }
+                if (value instanceof Date) {
+                    return value.getTime();
+                }
+                return value;
+            },
+        ],
+        email: 'email',
+        email_verified: 'active',
+    };
+    /**
+     * Build OpenID Claims form Oauth2 Identity.
+     *
+     * @param identity
+     */
+    fromIdentity(identity) {
+        if (identity.type === OAuth2SubKind.CLIENT) {
+            return this.fromClient(identity.data);
+        }
+        if (identity.type === OAuth2SubKind.ROBOT) {
+            return this.fromRobot(identity.data);
+        }
+        return this.fromUser(identity.data);
+    }
+    fromClient(input) {
+        return this.extract(this.clientMap, input);
+    }
+    fromRobot(input) {
+        return this.extract(this.robotMap, input);
+    }
+    fromUser(input) {
+        return this.extract(this.userMap, input);
+    }
+    extract(attributeMap, attributes) {
+        const result = {};
+        const keys = Object.keys(attributeMap);
+        for (let i = 0; i < keys.length; i++) {
+            const attribute = attributeMap[keys[i]];
+            if (typeof attribute === 'string') {
+                if (hasOwnProperty(attributes, attribute)) {
+                    result[keys[i]] = attributes[attribute];
+                }
+            }
+            else {
+                const [key, transformer] = attribute;
+                if (hasOwnProperty(attributes, key)) {
+                    result[keys[i]] = transformer(attributes[key]);
+                }
+            }
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=claims.js.map

package/dist/core/oauth2/openid/claims.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claims.js","sourceRoot":"","sources":["../../../../src/core/oauth2/openid/claims.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAY9C,MAAM,OAAO,yBAAyB;IACxB,SAAS,GAA0B;QACzC,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,MAAM;QAChB,kBAAkB,EAAE,MAAM;QAC1B,UAAU,EAAE;YACR,YAAY;YACZ,CAAC,KAAc,EAAE,EAAE;gBACf,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5B,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBACrC,CAAC;gBAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;oBACxB,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO,KAAK,CAAC;YACjB,CAAC;SACJ;KACJ,CAAC;IAEQ,QAAQ,GAAyB;QACvC,IAAI,EAAE,MAAM;QACZ,QAAQ,EAAE,MAAM;QAChB,kBAAkB,EAAE,MAAM;QAC1B,UAAU,EAAE;YACR,YAAY;YACZ,CAAC,KAAc,EAAE,EAAE;gBACf,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5B,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBACrC,CAAC;gBAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;oBACxB,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO,KAAK,CAAC;YACjB,CAAC;SACJ;KACJ,CAAC;IAEQ,OAAO,GAAwB;QACrC,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,WAAW;QACxB,UAAU,EAAE,YAAY;QACxB,QAAQ,EAAE,cAAc;QACxB,kBAAkB,EAAE,cAAc;QAClC,UAAU,EAAE;YACR,YAAY;YACZ,CAAC,KAAc,EAAE,EAAE;gBACf,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBAC5B,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;gBACrC,CAAC;gBAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;oBACxB,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBAED,OAAO,KAAK,CAAC;YACjB,CAAC;SACJ;QAED,KAAK,EAAE,OAAO;QACd,cAAc,EAAE,QAAQ;KAC3B,CAAC;IAEF;;;;OAIG;IACH,YAAY,CAAC,QAAkB;QAC3B,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,KAAK,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,UAAU,CAAC,KAAa;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,SAAS,CAAC,KAAY;QAClB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,QAAQ,CAAC,KAAW;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IAES,OAAO,CACb,YAA6B,EAC7B,UAAa;QAEb,MAAM,MAAM,GAAG,EAAwB,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAChC,IAAI,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;oBACxC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;gBAC5C,CAAC;YACL,CAAC;iBAAM,CAAC;gBACJ,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,GAAG,SAAiC,CAAC;gBAE7D,IAAI,cAAc,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC;oBAClC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;gBACnD,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;CACJ"}

package/dist/core/oauth2/openid/index.d.ts

@@ -0,0 +1,2 @@
+export * from './claims.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/openid/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/openid/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/core/oauth2/openid/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./claims.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/openid/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/openid/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC"}

package/dist/core/oauth2/response/bearer.d.ts

@@ -0,0 +1,4 @@
+import type { OAuth2TokenGrantResponse } from '@authup/specs';
+import type { OAuth2BearerResponseBuildContext } from './type.ts';
+export declare function buildOAuth2BearerTokenResponse(context: OAuth2BearerResponseBuildContext): OAuth2TokenGrantResponse;
+//# sourceMappingURL=bearer.d.ts.map

package/dist/core/oauth2/response/bearer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/response/bearer.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAsB,MAAM,eAAe,CAAC;AAClF,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,WAAW,CAAC;AAUlE,wBAAgB,8BAA8B,CAC1C,OAAO,EAAE,gCAAgC,GACzC,wBAAwB,CAuB3B"}

package/dist/core/oauth2/response/bearer.js

@@ -0,0 +1,34 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+function resolveExpiresIn(payload, fallbackValue) {
+    if (payload && payload.exp) {
+        return payload.exp - Math.floor(new Date().getTime() / 1000);
+    }
+    return fallbackValue || 3_600;
+}
+export function buildOAuth2BearerTokenResponse(context) {
+    const response = {
+        access_token: context.accessToken,
+        expires_in: resolveExpiresIn(context.accessTokenPayload),
+        token_type: 'Bearer',
+    };
+    if (context.accessTokenPayload) {
+        response.scope = context.accessTokenPayload.scope;
+    }
+    else if (context.scope) {
+        response.scope = context.scope;
+    }
+    if (context.refreshToken) {
+        response.refresh_token = context.refreshToken;
+        response.refresh_token_expires_in = resolveExpiresIn(context.refreshTokenPayload);
+    }
+    if (context.idToken) {
+        response.id_token = context.idToken;
+    }
+    return response;
+}
+//# sourceMappingURL=bearer.js.map

package/dist/core/oauth2/response/bearer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bearer.js","sourceRoot":"","sources":["../../../../src/core/oauth2/response/bearer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,SAAS,gBAAgB,CAAC,OAA4B,EAAE,aAAsB;IAC1E,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACzB,OAAO,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,aAAa,IAAI,KAAK,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAC1C,OAAyC;IAEzC,MAAM,QAAQ,GAA8B;QACxC,YAAY,EAAE,OAAO,CAAC,WAAW;QACjC,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,kBAAkB,CAAC;QACxD,UAAU,EAAE,QAAQ;KACvB,CAAC;IAEF,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC7B,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC;IACtD,CAAC;SAAM,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACvB,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACnC,CAAC;IAED,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,QAAQ,CAAC,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;QAC9C,QAAQ,CAAC,wBAAwB,GAAG,gBAAgB,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAClB,QAAQ,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IACxC,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC"}

package/dist/core/oauth2/response/index.d.ts

@@ -0,0 +1,3 @@
+export * from './bearer.ts';
+export * from './type.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/response/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/response/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}

package/dist/core/oauth2/response/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./bearer.js";
+export * from "./type.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/response/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/response/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC"}

package/dist/core/oauth2/response/type.d.ts

@@ -0,0 +1,10 @@
+import type { OAuth2TokenPayload } from '@authup/specs';
+export type OAuth2BearerResponseBuildContext = {
+    accessToken: string;
+    accessTokenPayload?: OAuth2TokenPayload;
+    refreshToken?: string;
+    refreshTokenPayload?: OAuth2TokenPayload;
+    idToken?: string;
+    scope?: string;
+};
+//# sourceMappingURL=type.d.ts.map

package/dist/core/oauth2/response/type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/response/type.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExD,MAAM,MAAM,gCAAgC,GAAG;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IAExC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IAEzC,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,KAAK,CAAC,EAAE,MAAM,CAAA;CACjB,CAAC"}

package/dist/core/oauth2/response/type.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=type.js.map

package/dist/core/oauth2/response/type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.js","sourceRoot":"","sources":["../../../../src/core/oauth2/response/type.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/oauth2/scope/index.d.ts

@@ -0,0 +1,3 @@
+export * from './resolver.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/oauth2/scope/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/scope/index.ts"],"names":[],"mappings":"AAOA,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/scope/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./resolver.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/oauth2/scope/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/oauth2/scope/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC"}

package/dist/core/oauth2/scope/resolver.d.ts

@@ -0,0 +1,23 @@
+import type { Client, Robot, User } from '@authup/core-kit';
+import { OAuth2SubKind } from '@authup/specs';
+import type { ObjectLiteral } from 'validup';
+type ScopeFields<T extends ObjectLiteral = ObjectLiteral> = {
+    [key: string]: (keyof T & string)[];
+};
+export declare class OAuth2ScopeAttributesResolver {
+    protected clientAttributes: ScopeFields<Client>;
+    protected robotAttributes: ScopeFields<Robot>;
+    protected userAttributes: ScopeFields<User>;
+    /**
+     * Resolve attributes for sub kind.
+     *
+     * @param type
+     * @param scope
+     */
+    resolveFor(type: OAuth2SubKind, scope: string | string[]): string[];
+    resolveForClient(scope: string | string[]): string[];
+    resolveForRobot(scope: string | string[]): string[];
+    resolveForUser(scope: string | string[]): string[];
+}
+export {};
+//# sourceMappingURL=resolver.d.ts.map

package/dist/core/oauth2/scope/resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../../src/core/oauth2/scope/resolver.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAG5D,OAAO,EAAE,aAAa,EAAqB,MAAM,eAAe,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,KAAK,WAAW,CAAC,CAAC,SAAS,aAAa,GAAG,aAAa,IAAI;IACxD,CAAC,GAAG,EAAE,MAAM,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,EAAE,CAAA;CACtC,CAAC;AAEF,qBAAa,6BAA6B;IACtC,SAAS,CAAC,gBAAgB,EAAG,WAAW,CAAC,MAAM,CAAC,CAG9C;IAEF,SAAS,CAAC,eAAe,EAAG,WAAW,CAAC,KAAK,CAAC,CAG5C;IAEF,SAAS,CAAC,cAAc,EAAG,WAAW,CAAC,IAAI,CAAC,CAI1C;IAEF;;;;;OAKG;IACH,UAAU,CAAC,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE;IAYxD,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAI,MAAM,EAAE;IAmBrD,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAI,MAAM,EAAE;IAmBpD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAI,MAAM,EAAE;CAkBtD"}

package/dist/core/oauth2/scope/resolver.js

@@ -0,0 +1,86 @@
+/*
+ * Copyright (c) 2022.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { ScopeName } from '@authup/core-kit';
+import { hasOwnProperty } from '@authup/kit';
+import { OAuth2SubKind, unwrapOAuth2Scope } from '@authup/specs';
+import { distinctArray } from 'smob';
+export class OAuth2ScopeAttributesResolver {
+    clientAttributes = {
+        [ScopeName.IDENTITY]: ['name'],
+        [ScopeName.OPEN_ID]: ['name', 'display_name', 'updated_at', 'active'],
+    };
+    robotAttributes = {
+        [ScopeName.IDENTITY]: ['name'],
+        [ScopeName.OPEN_ID]: ['name', 'display_name', 'updated_at', 'active'],
+    };
+    userAttributes = {
+        [ScopeName.IDENTITY]: ['name', 'display_name', 'last_name', 'first_name'],
+        [ScopeName.EMAIL]: ['email'],
+        [ScopeName.OPEN_ID]: ['name', 'updated_at', 'first_name', 'last_name', 'display_name', 'active', 'email'],
+    };
+    /**
+     * Resolve attributes for sub kind.
+     *
+     * @param type
+     * @param scope
+     */
+    resolveFor(type, scope) {
+        if (type === OAuth2SubKind.CLIENT) {
+            return this.resolveForClient(scope);
+        }
+        if (type === OAuth2SubKind.ROBOT) {
+            return this.resolveForRobot(scope);
+        }
+        return this.resolveForUser(scope);
+    }
+    resolveForClient(scope) {
+        const attributes = [];
+        const scopes = unwrapOAuth2Scope(scope);
+        for (let i = 0; i < scopes.length; i++) {
+            const scope = scopes[i];
+            if (hasOwnProperty(this.clientAttributes, scope)) {
+                attributes.push(...this.clientAttributes[scope]);
+            }
+            if (scope === ScopeName.GLOBAL) {
+                attributes.push(...Object.values(this.clientAttributes).flat());
+                break;
+            }
+        }
+        return distinctArray(attributes);
+    }
+    resolveForRobot(scope) {
+        const attributes = [];
+        const scopes = unwrapOAuth2Scope(scope);
+        for (let i = 0; i < scopes.length; i++) {
+            const scope = scopes[i];
+            if (hasOwnProperty(this.robotAttributes, scope)) {
+                attributes.push(...this.robotAttributes[scope]);
+            }
+            if (scope === ScopeName.GLOBAL) {
+                attributes.push(...Object.values(this.robotAttributes).flat());
+                break;
+            }
+        }
+        return distinctArray(attributes);
+    }
+    resolveForUser(scope) {
+        const attributes = [];
+        const scopes = unwrapOAuth2Scope(scope);
+        for (let i = 0; i < scopes.length; i++) {
+            const scope = scopes[i];
+            if (hasOwnProperty(this.userAttributes, scope)) {
+                attributes.push(...this.userAttributes[scope]);
+            }
+            if (scope === ScopeName.GLOBAL) {
+                attributes.push(...Object.values(this.userAttributes).flat());
+                break;
+            }
+        }
+        return distinctArray(attributes);
+    }
+}
+//# sourceMappingURL=resolver.js.map

package/dist/core/oauth2/scope/resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../../src/core/oauth2/scope/resolver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAOrC,MAAM,OAAO,6BAA6B;IAC5B,gBAAgB,GAAyB;QAC/C,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC;QAC9B,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC;KACxE,CAAC;IAEQ,eAAe,GAAwB;QAC7C,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC;QAC9B,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,QAAQ,CAAC;KACxE,CAAC;IAEQ,cAAc,GAAuB;QAC3C,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,CAAC;QACzE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC;QAC5B,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC;KAC5G,CAAC;IAEF;;;;;OAKG;IACH,UAAU,CAAC,IAAmB,EAAE,KAAwB;QACpD,IAAI,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,IAAI,IAAI,KAAK,aAAa,CAAC,KAAK,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QAED,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAED,gBAAgB,CAAC,KAAwB;QACrC,MAAM,UAAU,GAAc,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/C,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;YACrD,CAAC;YAED,IAAI,KAAK,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;gBAC7B,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChE,MAAM;YACV,CAAC;QACL,CAAC;QAED,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,eAAe,CAAC,KAAwB;QACpC,MAAM,UAAU,GAAc,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,cAAc,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC9C,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YACpD,CAAC;YAED,IAAI,KAAK,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;gBAC7B,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC/D,MAAM;YACV,CAAC;QACL,CAAC;QAED,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,cAAc,CAAC,KAAwB;QACnC,MAAM,UAAU,GAAc,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAExC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,cAAc,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC7C,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;YACnD,CAAC;YAED,IAAI,KAAK,KAAK,SAAS,CAAC,MAAM,EAAE,CAAC;gBAC7B,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9D,MAAM;YACV,CAAC;QACL,CAAC;QAED,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;CACJ"}