@code-rag/core 0.1.0

package/dist/auth/saml-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"saml-provider.js","sourceRoot":"","sources":["../../src/auth/saml-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,GAAG,EAAe,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;GAKG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,OAAe;IAC9C,+CAA+C;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IAE9E,gDAAgD;IAChD,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG;YACf,6EAA6E;YAC7E,IAAI,MAAM,CAAC,uBAAuB,GAAG,oDAAoD,GAAG,GAAG,EAAE,GAAG,CAAC;YACrG,yBAAyB;YACzB,IAAI,MAAM,CAAC,IAAI,GAAG,iCAAiC,GAAG,GAAG,EAAE,GAAG,CAAC;SAChE,CAAC;QAEF,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC7B,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,UAAU,CAAC,GAAW,EAAE,OAAe,EAAE,QAAgB;IAChE,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IAE9E,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAC9B,qFAAqF;QACrF,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,uBAAuB,GAAG,oBAAoB,EAAE,GAAG,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;YAC7E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,KAAK,GAA2B,EAAE,CAAC;IAEzC,mGAAmG;IACnG,MAAM,MAAM,GAAG,oFAAoF,CAAC;IACpG,IAAI,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,OAAO,SAAS,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;YACjB,+BAA+B;YAC/B,MAAM,OAAO,GAAG,iEAAiE,CAAC;YAClF,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAClC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,CAAC;QACH,CAAC;QACD,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,MAAM,CAAC;IAEN,MAAM,CAAa;IAC5B,WAAW,CAA8B;IAEjD,4DAA4D;IAC3C,SAAS,GAAG,IAAI,GAAG,EAAgB,CAAC;IAErD,2CAA2C;IACnC,cAAc,GAAG,CAAC,CAAC;IAE3B;;OAEG;IACc,OAAO,CAAe;IAEvC,YAAY,MAAkB,EAAE,OAAsB;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC;IAC7C,CAAC;IAED,0EAA0E;IAC1E,iBAAiB;IACjB,0EAA0E;IAE1E;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAChE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,GAAG,CACR,IAAI,SAAS,CAAC,mCAAmC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAC5E,CAAC;YACJ,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,kBAAkB,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;YACvE,MAAM,MAAM,GACV,UAAU,CAAC,GAAG,EAAE,qBAAqB,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;YAC3D,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE,iBAAiB,CAAC,IAAI,EAAE,CAAC;YAC7D,MAAM,YAAY,GAChB,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC;gBAC/B,wDAAwD,CAAC;YAE3D,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzC,OAAO,GAAG,CACR,IAAI,SAAS,CAAC,0EAA0E,CAAC,CAC1F,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,WAAW,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;YACnE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,8BAA8B,OAAO,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,0BAA0B;IAC1B,0EAA0E;IAE1E;;;OAGG;IACH,mBAAmB;QACjB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;QACzB,MAAM,EAAE,GAAG,YAAY,IAAI,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACnE,MAAM,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE9C,MAAM,YAAY,GAAG;YACnB,qBAAqB;YACrB,qDAAqD;YACrD,qDAAqD;YACrD,QAAQ,EAAE,GAAG;YACb,gBAAgB;YAChB,kBAAkB,YAAY,GAAG;YACjC,iBAAiB,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG;YAC3C,iCAAiC,IAAI,CAAC,MAAM,CAAC,QAAQ,GAAG;YACxD,oEAAoE;YACpE,kBAAkB,IAAI,CAAC,MAAM,CAAC,UAAU,gBAAgB;YACxD,uBAAuB;YACvB,cAAc,IAAI,CAAC,WAAW,CAAC,YAAY,GAAG;YAC9C,0BAA0B;YAC1B,uBAAuB;SACxB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACpE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,SAAS,eAAe,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAE/F,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACzB,CAAC;IAED,0EAA0E;IAC1E,8BAA8B;IAC9B,0EAA0E;IAE1E,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAc;YAC3B,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,GAAG,GAAG,IAAI,EAAE,iBAAiB;YAClC,GAAG,EAAE,GAAG;SACT,CAAC;QACF,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAU,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAED,0EAA0E;IAC1E,2BAA2B;IAC3B,0EAA0E;IAE1E;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,eAAuB;QAC5C,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,mBAAmB;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,mBAAmB;QACnB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,eAAe;QACf,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAClC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;IAED,0EAA0E;IAC1E,oBAAoB;IACpB,0EAA0E;IAE1E;;OAEG;IACH,aAAa,CAAC,UAA4C,EAAE,GAAY;QACtE,MAAM,KAAK,GACT,UAAU,CAAC,oEAAoE,CAAC;YAChF,UAAU,CAAC,OAAO,CAAC;YACnB,UAAU,CAAC,OAAO,CAAC;YACnB,EAAE,CAAC;QAEL,MAAM,IAAI,GACR,UAAU,CAAC,4DAA4D,CAAC;YACxE,UAAU,CAAC,aAAa,CAAC;YACzB,UAAU,CAAC,MAAM,CAAC;YAClB,KAAK,CAAC;QAER,4BAA4B;QAC5B,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC3C,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC;QAE3B,YAAY;QACZ,MAAM,QAAQ,GACZ,UAAU,CAAC,8DAA8D,CAAC;YAC1E,UAAU,CAAC,MAAM,CAAC;YAClB,UAAU,CAAC,MAAM,CAAC;YAClB,EAAE,CAAC;QAEL,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,0EAA0E;IAC1E,kBAAkB;IAClB,0EAA0E;IAElE,aAAa,CAAC,SAAiB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,SAAS;aACrB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAQ,CAAC;QAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,MAAM,EAAE,CAAC;gBACX,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpB,CAAC;YACD,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;IACpB,CAAC;IAEO,kBAAkB,CAAC,GAAW;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC,CAAC;QAC9E,CAAC;QAED,4CAA4C;QAC5C,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACzD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACxE,CAAC;QAED,qDAAqD;QACrD,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,iDAAiD;QACjD,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,2DAA2D;QAC3D,MAAM,aAAa,GAAG,0DAA0D,UAAU,eAAe,CAAC;QAC1G,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QAE3E,uDAAuD;QACvD,MAAM,UAAU,GAAG;YACjB,gCAAgC,IAAI,CAAC,WAAW,CAAC,WAAW,6BAA6B;YACzF,+BAA+B,IAAI,CAAC,WAAW,CAAC,WAAW,4BAA4B;SACxF,CAAC;QAEF,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;gBAC5C,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;gBAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBACjD,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;gBACvB,CAAC;gBACD,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;gBAClB,SAAS;YACX,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC,CAAC;IACrF,CAAC;IAEO,eAAe,CAAC,GAAW;QACjC,iCAAiC;QACjC,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QAChE,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;YACzC,IAAI,GAAG,GAAG,SAAS,EAAE,CAAC;gBACpB,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC;YAC/C,IAAI,GAAG,IAAI,YAAY,EAAE,CAAC;gBACxB,OAAO,GAAG,CAAC,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,6BAA6B;QAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QAC7C,IAAI,QAAQ,IAAI,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACpD,OAAO,GAAG,CACR,IAAI,SAAS,CACX,oCAAoC,IAAI,CAAC,MAAM,CAAC,UAAU,SAAS,QAAQ,EAAE,CAC9E,CACF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;CACF"}

package/dist/auth/saml-provider.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/auth/saml-provider.test.js

@@ -0,0 +1,422 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { createSign, generateKeyPairSync } from 'node:crypto';
+import { SAMLProvider } from './saml-provider.js';
+import { AuthError } from './types.js';
+// ---------------------------------------------------------------------------
+// RSA key pair for SAML signature testing
+// ---------------------------------------------------------------------------
+const { publicKey, privateKey } = generateKeyPairSync('rsa', {
+    modulusLength: 2048,
+});
+// For test purposes, extract the base64 public key as a stand-in certificate
+const publicKeyDer = publicKey.export({ type: 'spki', format: 'der' });
+const certBase64 = publicKeyDer.toString('base64');
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function defaultConfig() {
+    return {
+        idpMetadataUrl: 'https://idp.example.com/metadata',
+        spEntityId: 'https://coderag.example.com',
+        spAcsUrl: 'https://coderag.example.com/sso/acs',
+        certificatePem: `-----BEGIN CERTIFICATE-----\n${certBase64}\n-----END CERTIFICATE-----`,
+        roleMapping: {
+            'coderag-admins': 'admin',
+            'coderag-devs': 'developer',
+            'coderag-readers': 'viewer',
+        },
+    };
+}
+function createIdpMetadataXml() {
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
+  entityID="https://idp.example.com">
+  <md:IDPSSODescriptor>
+    <md:KeyDescriptor use="signing">
+      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+        <ds:X509Data>
+          <ds:X509Certificate>${certBase64}</ds:X509Certificate>
+        </ds:X509Data>
+      </ds:KeyInfo>
+    </md:KeyDescriptor>
+    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
+    <md:SingleSignOnService
+      Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
+      Location="https://idp.example.com/sso" />
+  </md:IDPSSODescriptor>
+</md:EntityDescriptor>`;
+}
+function createSamlResponse(options) {
+    const nameId = options?.nameId ?? 'user@example.com';
+    const email = options?.email ?? 'user@example.com';
+    const role = options?.role ?? 'developer';
+    const audience = options?.audience ?? 'https://coderag.example.com';
+    const now = new Date();
+    const notBefore = options?.notBefore ?? new Date(now.getTime() - 60000).toISOString();
+    const notOnOrAfter = options?.notOnOrAfter ?? new Date(now.getTime() + 3600000).toISOString();
+    // Create a simplified SAML assertion for testing
+    const assertion = `<saml:Assertion xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
+  <saml:Issuer>https://idp.example.com</saml:Issuer>
+  <saml:Subject>
+    <saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">${nameId}</saml:NameID>
+  </saml:Subject>
+  <saml:Conditions NotBefore="${notBefore}" NotOnOrAfter="${notOnOrAfter}">
+    <saml:AudienceRestriction>
+      <saml:Audience>${audience}</saml:Audience>
+    </saml:AudienceRestriction>
+  </saml:Conditions>
+  <saml:AttributeStatement>
+    <saml:Attribute Name="email">
+      <saml:AttributeValue>${email}</saml:AttributeValue>
+    </saml:Attribute>
+    <saml:Attribute Name="role">
+      <saml:AttributeValue>${role}</saml:AttributeValue>
+    </saml:Attribute>
+    <saml:Attribute Name="displayName">
+      <saml:AttributeValue>Test User</saml:AttributeValue>
+    </saml:Attribute>
+  </saml:AttributeStatement>
+</saml:Assertion>`;
+    // Create SignedInfo and sign it.
+    // The provider extracts text between <ds:SignedInfo>...</ds:SignedInfo>,
+    // trims it, and wraps it: <SignedInfo xmlns="...">{trimmed}</SignedInfo>.
+    // We must sign exactly that reconstructed string.
+    const digestValue = Buffer.from('test-digest').toString('base64');
+    const signedInfoInner = `<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256"/><ds:Reference URI=""><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256"/><ds:DigestValue>${digestValue}</ds:DigestValue></ds:Reference>`;
+    // This is what the provider will reconstruct and verify against
+    const signedInfoXml = `<SignedInfo xmlns="http://www.w3.org/2000/09/xmldsig#">${signedInfoInner}</SignedInfo>`;
+    const signer = createSign('RSA-SHA256');
+    signer.update(signedInfoXml);
+    const signatureValue = signer.sign(privateKey).toString('base64');
+    return `<samlp:Response xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
+  ${assertion}
+  <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+    <ds:SignedInfo>${signedInfoInner}</ds:SignedInfo>
+    <ds:SignatureValue>${signatureValue}</ds:SignatureValue>
+  </ds:Signature>
+</samlp:Response>`;
+}
+function createMockFetch(responses) {
+    return vi.fn(async (input) => {
+        const url = typeof input === 'string' ? input : input.toString();
+        const response = responses[url];
+        if (!response) {
+            return {
+                ok: false,
+                status: 404,
+                json: async () => ({}),
+                text: async () => '',
+            };
+        }
+        return {
+            ok: response.ok,
+            status: response.status,
+            json: async () => JSON.parse(response.body),
+            text: async () => response.body,
+        };
+    });
+}
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+describe('SAMLProvider', () => {
+    let config;
+    beforeEach(() => {
+        config = defaultConfig();
+    });
+    // -----------------------------------------------------------------------
+    // Constructor
+    // -----------------------------------------------------------------------
+    describe('constructor', () => {
+        it('should have name set to saml', () => {
+            const provider = new SAMLProvider(config);
+            expect(provider.name).toBe('saml');
+        });
+    });
+    // -----------------------------------------------------------------------
+    // initialize
+    // -----------------------------------------------------------------------
+    describe('initialize', () => {
+        it('should fetch and parse IdP metadata', async () => {
+            const mockFetch = createMockFetch({
+                'https://idp.example.com/metadata': {
+                    ok: true,
+                    status: 200,
+                    body: createIdpMetadataXml(),
+                },
+            });
+            const provider = new SAMLProvider(config, mockFetch);
+            const result = await provider.initialize();
+            expect(result.isOk()).toBe(true);
+        });
+        it('should return error when metadata fetch fails', async () => {
+            const mockFetch = createMockFetch({
+                'https://idp.example.com/metadata': {
+                    ok: false,
+                    status: 500,
+                    body: '',
+                },
+            });
+            const provider = new SAMLProvider(config, mockFetch);
+            const result = await provider.initialize();
+            expect(result.isErr()).toBe(true);
+            if (result.isErr()) {
+                expect(result.error).toBeInstanceOf(AuthError);
+                expect(result.error.message).toContain('metadata fetch failed');
+            }
+        });
+        it('should return error when metadata is missing required fields', async () => {
+            const mockFetch = createMockFetch({
+                'https://idp.example.com/metadata': {
+                    ok: true,
+                    status: 200,
+                    body: '<EntityDescriptor></EntityDescriptor>',
+                },
+            });
+            const provider = new SAMLProvider(config, mockFetch);
+            const result = await provider.initialize();
+            expect(result.isErr()).toBe(true);
+            if (result.isErr()) {
+                expect(result.error.message).toContain('missing required fields');
+            }
+        });
+        it('should return error on network failure', async () => {
+            const mockFetch = vi.fn(async () => {
+                throw new Error('DNS resolution failed');
+            });
+            const provider = new SAMLProvider(config, mockFetch);
+            const result = await provider.initialize();
+            expect(result.isErr()).toBe(true);
+            if (result.isErr()) {
+                expect(result.error.message).toContain('DNS resolution failed');
+            }
+        });
+    });
+    // -----------------------------------------------------------------------
+    // generateAuthRequest
+    // -----------------------------------------------------------------------
+    describe('generateAuthRequest', () => {
+        it('should generate a valid SAML AuthnRequest URL', async () => {
+            const mockFetch = createMockFetch({
+                'https://idp.example.com/metadata': {
+                    ok: true,
+                    status: 200,
+                    body: createIdpMetadataXml(),
+                },
+            });
+            const provider = new SAMLProvider(config, mockFetch);
+            await provider.initialize();
+            const result = provider.generateAuthRequest();
+            expect(result.isOk()).toBe(true);
+            if (result.isOk()) {
+                expect(result.value.url).toContain('https://idp.example.com/sso');
+                expect(result.value.url).toContain('SAMLRequest=');
+                expect(result.value.id).toContain('_coderag_');
+            }
+        });
+        it('should generate unique IDs for each request', async () => {
+            const mockFetch = createMockFetch({
+                'https://idp.example.com/metadata': {
+                    ok: true,
+                    status: 200,
+                    body: createIdpMetadataXml(),
+                },
+            });
+            const provider = new SAMLProvider(config, mockFetch);
+            await provider.initialize();
+            const result1 = provider.generateAuthRequest();
+            const result2 = provider.generateAuthRequest();
+            expect(result1.isOk() && result2.isOk()).toBe(true);
+            if (result1.isOk() && result2.isOk()) {
+                expect(result1.value.id).not.toBe(result2.value.id);
+            }
+        });
+        it('should return error when not initialized', () => {
+            const provider = new SAMLProvider(config);
+            const result = provider.generateAuthRequest();
+            expect(result.isErr()).toBe(true);
+            if (result.isErr()) {
+                expect(result.error.message).toContain('not initialized');
+            }
+        });
+    });
+    // -----------------------------------------------------------------------
+    // validateResponse
+    // -----------------------------------------------------------------------
+    describe('validateResponse', () => {
+        async function createInitializedProvider() {
+            const mockFetch = createMockFetch({
+                'https://idp.example.com/metadata': {
+                    ok: true,
+                    status: 200,
+                    body: createIdpMetadataXml(),
+                },
+            });
+            const provider = new SAMLProvider(config, mockFetch);
+            await provider.initialize();
+            return provider;
+        }
+        it('should validate a well-formed SAML response', async () => {
+            const provider = await createInitializedProvider();
+            const samlXml = createSamlResponse();
+            const samlB64 = Buffer.from(samlXml).toString('base64');
+            const result = await provider.validateResponse(samlB64);
+            expect(result.isOk()).toBe(true);
+            if (result.isOk()) {
+                expect(result.value.email).toBe('user@example.com');
+                expect(result.value.name).toBe('Test User');
+                expect(result.value.roles).toContain('developer');
+            }
+        });
+        it('should reject an expired SAML assertion', async () => {
+            const provider = await createInitializedProvider();
+            const pastDate = new Date(Date.now() - 7200000).toISOString();
+            const samlXml = createSamlResponse({
+                notBefore: new Date(Date.now() - 14400000).toISOString(),
+                notOnOrAfter: pastDate,
+            });
+            const samlB64 = Buffer.from(samlXml).toString('base64');
+            const result = await provider.validateResponse(samlB64);
+            expect(result.isErr()).toBe(true);
+            if (result.isErr()) {
+                expect(result.error.message).toContain('expired');
+            }
+        });
+        it('should reject a SAML assertion not yet valid', async () => {
+            const provider = await createInitializedProvider();
+            const futureDate = new Date(Date.now() + 7200000).toISOString();
+            const farFuture = new Date(Date.now() + 14400000).toISOString();
+            const samlXml = createSamlResponse({
+                notBefore: futureDate,
+                notOnOrAfter: farFuture,
+            });
+            const samlB64 = Buffer.from(samlXml).toString('base64');
+            const result = await provider.validateResponse(samlB64);
+            expect(result.isErr()).toBe(true);
+            if (result.isErr()) {
+                expect(result.error.message).toContain('not yet valid');
+            }
+        });
+        it('should reject a SAML assertion with wrong audience', async () => {
+            const provider = await createInitializedProvider();
+            const samlXml = createSamlResponse({
+                audience: 'https://wrong-audience.com',
+            });
+            const samlB64 = Buffer.from(samlXml).toString('base64');
+            const result = await provider.validateResponse(samlB64);
+            expect(result.isErr()).toBe(true);
+            if (result.isErr()) {
+                expect(result.error.message).toContain('audience mismatch');
+            }
+        });
+        it('should reject invalid Base64 input', async () => {
+            const provider = await createInitializedProvider();
+            // Provide valid base64 that decodes to non-XML
+            const result = await provider.validateResponse(Buffer.from('not-xml-at-all').toString('base64'));
+            expect(result.isErr()).toBe(true);
+        });
+    });
+    // -----------------------------------------------------------------------
+    // authenticate
+    // -----------------------------------------------------------------------
+    describe('authenticate', () => {
+        it('should return AuthToken for valid SAML response', async () => {
+            const mockFetch = createMockFetch({
+                'https://idp.example.com/metadata': {
+                    ok: true,
+                    status: 200,
+                    body: createIdpMetadataXml(),
+                },
+            });
+            const provider = new SAMLProvider(config, mockFetch);
+            await provider.initialize();
+            const samlXml = createSamlResponse();
+            const samlB64 = Buffer.from(samlXml).toString('base64');
+            const result = await provider.authenticate(samlB64);
+            expect(result.isOk()).toBe(true);
+            if (result.isOk()) {
+                expect(result.value.email).toBe('user@example.com');
+                expect(result.value.roles).toContain('developer');
+                expect(result.value.exp).toBeGreaterThan(result.value.iat);
+            }
+        });
+    });
+    // -----------------------------------------------------------------------
+    // mapAttributes
+    // -----------------------------------------------------------------------
+    describe('mapAttributes', () => {
+        it('should map standard email attribute', () => {
+            const provider = new SAMLProvider(config);
+            const user = provider.mapAttributes({
+                email: 'test@example.com',
+                displayName: 'Test User',
+                role: 'admin',
+            });
+            expect(user.email).toBe('test@example.com');
+            expect(user.name).toBe('Test User');
+            expect(user.roles).toContain('admin');
+        });
+        it('should map Microsoft claims-style attributes', () => {
+            const provider = new SAMLProvider(config);
+            const user = provider.mapAttributes({
+                'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress': 'ms@example.com',
+                'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name': 'MS User',
+                'http://schemas.microsoft.com/ws/2008/06/identity/claims/role': 'coderag-admins',
+            });
+            expect(user.email).toBe('ms@example.com');
+            expect(user.name).toBe('MS User');
+            expect(user.roles).toContain('admin');
+        });
+        it('should default to viewer when no role matches', () => {
+            const provider = new SAMLProvider(config);
+            const user = provider.mapAttributes({
+                email: 'test@example.com',
+            });
+            expect(user.roles).toEqual(['viewer']);
+        });
+        it('should use email as fallback for name', () => {
+            const provider = new SAMLProvider(config);
+            const user = provider.mapAttributes({
+                email: 'test@example.com',
+            });
+            expect(user.name).toBe('test@example.com');
+        });
+        it('should extract NameID from XML as user id', () => {
+            const provider = new SAMLProvider(config);
+            const xml = '<saml:NameID>unique-id-123</saml:NameID>';
+            const user = provider.mapAttributes({ email: 'test@example.com' }, xml);
+            expect(user.id).toBe('unique-id-123');
+        });
+        it('should use email as fallback for id when no NameID', () => {
+            const provider = new SAMLProvider(config);
+            const user = provider.mapAttributes({
+                email: 'fallback@example.com',
+            });
+            expect(user.id).toBe('fallback@example.com');
+        });
+    });
+    // -----------------------------------------------------------------------
+    // getUserRoles / getUserRepos (cache)
+    // -----------------------------------------------------------------------
+    describe('getUserRoles', () => {
+        it('should return viewer for unknown user', async () => {
+            const provider = new SAMLProvider(config);
+            const result = await provider.getUserRoles('unknown');
+            expect(result.isOk()).toBe(true);
+            if (result.isOk()) {
+                expect(result.value).toEqual(['viewer']);
+            }
+        });
+    });
+    describe('getUserRepos', () => {
+        it('should return empty array for unknown user', async () => {
+            const provider = new SAMLProvider(config);
+            const result = await provider.getUserRepos('unknown');
+            expect(result.isOk()).toBe(true);
+            if (result.isOk()) {
+                expect(result.value).toEqual([]);
+            }
+        });
+    });
+});
+//# sourceMappingURL=saml-provider.test.js.map

package/dist/auth/saml-provider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"saml-provider.test.js","sourceRoot":"","sources":["../../src/auth/saml-provider.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAGvC,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,KAAK,EAAE;IAC3D,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;AACjF,MAAM,UAAU,GAAG,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAEnD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,aAAa;IACpB,OAAO;QACL,cAAc,EAAE,kCAAkC;QAClD,UAAU,EAAE,6BAA6B;QACzC,QAAQ,EAAE,qCAAqC;QAC/C,cAAc,EAAE,gCAAgC,UAAU,6BAA6B;QACvF,WAAW,EAAE;YACX,gBAAgB,EAAE,OAAO;YACzB,cAAc,EAAE,WAAW;YAC3B,iBAAiB,EAAE,QAAQ;SAC5B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB;IAC3B,OAAO;;;;;;;gCAOuB,UAAU;;;;;;;;;uBASnB,CAAC;AACxB,CAAC;AAED,SAAS,kBAAkB,CAAC,OAO3B;IACC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,kBAAkB,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,kBAAkB,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,WAAW,CAAC;IAC1C,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,IAAI,6BAA6B,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACtF,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IAE9F,iDAAiD;IACjD,MAAM,SAAS,GAAG;;;mFAG+D,MAAM;;gCAEzD,SAAS,mBAAmB,YAAY;;uBAEjD,QAAQ;;;;;6BAKF,KAAK;;;6BAGL,IAAI;;;;;;kBAMf,CAAC;IAEjB,iCAAiC;IACjC,yEAAyE;IACzE,0EAA0E;IAC1E,kDAAkD;IAClD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,iRAAiR,WAAW,kCAAkC,CAAC;IAEvV,gEAAgE;IAChE,MAAM,aAAa,GAAG,0DAA0D,eAAe,eAAe,CAAC;IAE/G,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC7B,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAElE,OAAO;IACL,SAAS;;qBAEQ,eAAe;yBACX,cAAc;;kBAErB,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CACtB,SAAwE;IAExE,OAAO,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,KAAwB,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBACtB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;aACT,CAAC;QAChB,CAAC;QACD,OAAO;YACL,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC3C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI;SACpB,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,MAAkB,CAAC;IAEvB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,GAAG,aAAa,EAAE,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,cAAc;IACd,0EAA0E;IAE1E,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;YACtC,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,aAAa;IACb,0EAA0E;IAE1E,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,SAAS,GAAG,eAAe,CAAC;gBAChC,kCAAkC,EAAE;oBAClC,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,oBAAoB,EAAE;iBAC7B;aACF,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,SAAS,GAAG,eAAe,CAAC;gBAChC,kCAAkC,EAAE;oBAClC,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,EAAE;iBACT;aACF,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC/C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,SAAS,GAAG,eAAe,CAAC;gBAChC,kCAAkC,EAAE;oBAClC,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,uCAAuC;iBAC9C;aACF,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;YACpE,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;gBACjC,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC,CAA4B,CAAC;YAE9B,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,sBAAsB;IACtB,0EAA0E;IAE1E,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACnC,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,SAAS,GAAG,eAAe,CAAC;gBAChC,kCAAkC,EAAE;oBAClC,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,oBAAoB,EAAE;iBAC7B;aACF,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,MAAM,GAAG,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,6BAA6B,CAAC,CAAC;gBAClE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;gBACnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACjD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,SAAS,GAAG,eAAe,CAAC;gBAChC,kCAAkC,EAAE;oBAClC,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,oBAAoB,EAAE;iBAC7B;aACF,CAAC,CAAC;YAEH,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,OAAO,GAAG,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAE/C,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,mBAAmB,EAAE,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,KAAK,UAAU,yBAAyB;YACtC,MAAM,SAAS,GAAG,eAAe,CAAC;gBAChC,kCAAkC,EAAE;oBAClC,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,oBAAoB,EAAE;iBAC7B;aACF,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5B,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,QAAQ,GAAG,MAAM,yBAAyB,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAExD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACpD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC5C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,QAAQ,GAAG,MAAM,yBAAyB,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9D,MAAM,OAAO,GAAG,kBAAkB,CAAC;gBACjC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE;gBACxD,YAAY,EAAE,QAAQ;aACvB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAExD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,QAAQ,GAAG,MAAM,yBAAyB,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YAChE,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;YAChE,MAAM,OAAO,GAAG,kBAAkB,CAAC;gBACjC,SAAS,EAAE,UAAU;gBACrB,YAAY,EAAE,SAAS;aACxB,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAExD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,QAAQ,GAAG,MAAM,yBAAyB,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,kBAAkB,CAAC;gBACjC,QAAQ,EAAE,4BAA4B;aACvC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAExD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,QAAQ,GAAG,MAAM,yBAAyB,EAAE,CAAC;YACnD,+CAA+C;YAC/C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,eAAe;IACf,0EAA0E;IAE1E,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,SAAS,GAAG,eAAe,CAAC;gBAChC,kCAAkC,EAAE;oBAClC,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE,GAAG;oBACX,IAAI,EAAE,oBAAoB,EAAE;iBAC7B;aACF,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACrD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAE5B,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAEpD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBACpD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBAClD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,gBAAgB;IAChB,0EAA0E;IAE1E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;gBAClC,KAAK,EAAE,kBAAkB;gBACzB,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;gBAClC,oEAAoE,EAAE,gBAAgB;gBACtF,4DAA4D,EAAE,SAAS;gBACvE,8DAA8D,EAAE,gBAAgB;aACjF,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;YACvD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;gBAClC,KAAK,EAAE,kBAAkB;aAC1B,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;gBAClC,KAAK,EAAE,kBAAkB;aAC1B,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,0CAA0C,CAAC;YACvD,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CACjC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAC7B,GAAG,CACJ,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC;gBAClC,KAAK,EAAE,sBAAsB;aAC9B,CAAC,CAAC;YAEH,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,0EAA0E;IAC1E,sCAAsC;IACtC,0EAA0E;IAE1E,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,QAAQ,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;gBAClB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/auth/types.d.ts

@@ -0,0 +1,81 @@
+import type { Result } from 'neverthrow';
+/** CodeRAG role hierarchy: Admin > Developer > Viewer */
+export type Role = 'admin' | 'developer' | 'viewer';
+/** Ordered role hierarchy (index = privilege level, higher = more access). */
+export declare const ROLE_HIERARCHY: readonly Role[];
+/** Actions that can be gated by RBAC. */
+export type Action = 'search' | 'context' | 'status' | 'explain' | 'docs' | 'index' | 'configure';
+/** Per-repo access level. */
+export type RepoAccessLevel = 'read' | 'write' | 'admin';
+export interface RepoPermission {
+    readonly repoName: string;
+    readonly access: RepoAccessLevel;
+}
+export interface User {
+    readonly id: string;
+    readonly email: string;
+    readonly name: string;
+    readonly roles: readonly Role[];
+    readonly allowedRepos: readonly string[];
+}
+export interface AuthToken {
+    readonly userId: string;
+    readonly email: string;
+    readonly roles: readonly Role[];
+    readonly exp: number;
+    readonly iat: number;
+}
+export interface AuditEntry {
+    readonly timestamp: Date;
+    readonly userId: string;
+    readonly action: string;
+    readonly resource: string;
+    readonly details: string;
+    readonly ip: string;
+}
+export interface AuditQuery {
+    readonly userId?: string;
+    readonly action?: string;
+    readonly startDate?: Date;
+    readonly endDate?: Date;
+    readonly limit?: number;
+}
+export declare class AuthError extends Error {
+    constructor(message: string);
+}
+export interface AuthProvider {
+    readonly name: string;
+    authenticate(token: string): Promise<Result<AuthToken, AuthError>>;
+    getUserRoles(userId: string): Promise<Result<readonly Role[], AuthError>>;
+    getUserRepos(userId: string): Promise<Result<readonly string[], AuthError>>;
+}
+export interface OIDCConfig {
+    readonly issuerUrl: string;
+    readonly clientId: string;
+    readonly clientSecret: string;
+    readonly audience: string;
+    /** Optional mapping from OIDC group claim values to CodeRAG roles. */
+    readonly roleMapping?: Readonly<Record<string, Role>>;
+}
+/** Subset of the OpenID Connect Discovery document we use. */
+export interface OIDCDiscoveryDocument {
+    readonly issuer: string;
+    readonly authorization_endpoint: string;
+    readonly token_endpoint: string;
+    readonly userinfo_endpoint: string;
+    readonly jwks_uri: string;
+}
+export interface SAMLConfig {
+    readonly idpMetadataUrl: string;
+    readonly spEntityId: string;
+    readonly spAcsUrl: string;
+    readonly certificatePem: string;
+    /** Optional mapping from SAML attribute values to CodeRAG roles. */
+    readonly roleMapping?: Readonly<Record<string, Role>>;
+}
+export interface SAMLIdPMetadata {
+    readonly entityId: string;
+    readonly ssoUrl: string;
+    readonly certificate: string;
+    readonly nameIdFormat: string;
+}

package/dist/auth/types.js

@@ -0,0 +1,11 @@
+/** Ordered role hierarchy (index = privilege level, higher = more access). */
+export const ROLE_HIERARCHY = ['viewer', 'developer', 'admin'];
+// ---------------------------------------------------------------------------
+// Auth Provider interface
+// ---------------------------------------------------------------------------
+export class AuthError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'AuthError';
+    }
+}

package/dist/auth/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/auth/types.ts"],"names":[],"mappings":"AASA,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAoB,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAU,CAAC;AA6DzF,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF"}

package/dist/auth/types.test.d.ts

@@ -0,0 +1 @@
+export {};