@decaf-ts/integrations 0.1.1

package/lib/cjs/keycloak/services/KeycloakRealmService.cjs

@@ -0,0 +1,202 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeycloakRealmService = void 0;
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+const core_1 = require("@decaf-ts/core");
+const axios_1 = __importDefault(require("axios"));
+const https = __importStar(require("node:https"));
+class KeycloakRealmService extends core_1.ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async createRealm(realmName, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createRealm", true)).for(this.createRealm);
+        const adminAccessToken = await this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+        await this.request("POST", `/admin/realms`, adminAccessToken, { realm: realmName, enabled: true, ...payload }, 201, {}, ...ctxArgs);
+    }
+    async updateRealm(realmName, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "updateRealm", true)).for(this.updateRealm);
+        const adminAccessToken = await this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+        const currentRealm = await this.fetchRealm(realmName, adminAccessToken, ...ctxArgs);
+        await this.request("PUT", `/admin/realms/${realmName}`, adminAccessToken, { ...currentRealm, ...payload, realm: realmName }, 204, {}, ...ctxArgs);
+    }
+    async deleteRealm(realmName, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "deleteRealm", true)).for(this.deleteRealm);
+        const adminAccessToken = await this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+        await this.request("DELETE", `/admin/realms/${realmName}`, adminAccessToken, undefined, 204, {}, ...ctxArgs);
+    }
+    async addRealm(realmName, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "addRealm", true)).for(this.addRealm);
+        await this.createRealm(realmName, payload, ...ctxArgs);
+    }
+    async editRealm(realmName, payload, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "editRealm", true)).for(this.editRealm);
+        await this.updateRealm(realmName, payload, ...ctxArgs);
+    }
+    async removeRealm(realmName, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "removeRealm", true)).for(this.removeRealm);
+        await this.deleteRealm(realmName, ...ctxArgs);
+    }
+    async getRealm(realmName, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "getRealm", true)).for(this.getRealm);
+        const adminAccessToken = await this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+        return this.fetchRealm(realmName, adminAccessToken, ...ctxArgs);
+    }
+    createHttpClient(config) {
+        return axios_1.default.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(config),
+            }),
+        });
+    }
+    isProduction(config) {
+        return config.id === "production" || config.host.includes("prod");
+    }
+    async getAccessToken(keycloakUser, ...args) {
+        this.logCtx(args, this.getAccessToken);
+        const response = await this.client.request({
+            method: "POST",
+            url: `${this.config.protocol}://${this.config.host}/realms/${keycloakUser.realm}/protocol/openid-connect/token`,
+            data: new URLSearchParams({
+                client_id: keycloakUser.apiClientId,
+                username: keycloakUser.username,
+                password: keycloakUser.password,
+                grant_type: "password",
+            }).toString(),
+            headers: {
+                "content-type": "application/x-www-form-urlencoded",
+            },
+        });
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new db_decorators_1.BadRequestError(`Unable to get Keycloak access token for user ${keycloakUser.username}`);
+    }
+    async fetchRealm(realmName, accessToken, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.fetchRealm);
+        const response = await this.request("GET", `/admin/realms/${realmName}`, accessToken, undefined, 200, {}, ...ctxArgs);
+        return (this.parseJsonResponse(response.data) ?? {});
+    }
+    async request(method, path, accessToken, payload, successCode, headers, ...args) {
+        this.logCtx(args, this.request);
+        const response = await this.client.request({
+            method,
+            url: `${this.config.protocol}://${this.config.host}${path}`,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            headers: {
+                ...headers,
+                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
+                ...(payload !== undefined && typeof payload !== "string"
+                    ? { "Content-Type": "application/json" }
+                    : {}),
+            },
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(this.config),
+            }),
+            validateStatus: () => true,
+        });
+        if (response.status !== successCode) {
+            this.handleHttpResponse(response, successCode);
+        }
+        return response;
+    }
+    handleHttpResponse(response, successCode) {
+        const status = response.status;
+        const message = `Expected ${successCode}, received ${response.status}: ${response.statusText}`;
+        if (status === 404 || message.toLowerCase().includes("not found")) {
+            throw new db_decorators_1.NotFoundError(message);
+        }
+        if (status === 409 || message.toLowerCase().includes("conflict")) {
+            throw new db_decorators_1.ConflictError(message);
+        }
+        if (status === 400) {
+            throw new db_decorators_1.BadRequestError(message);
+        }
+        if (status === 401 || status === 403) {
+            throw new db_decorators_1.NotFoundError(message);
+        }
+        throw new db_decorators_1.InternalError(message);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new db_decorators_1.ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new db_decorators_1.BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        return new db_decorators_1.InternalError(message);
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+}
+exports.KeycloakRealmService = KeycloakRealmService;
+//# sourceMappingURL=KeycloakRealmService.js.map
+//# sourceMappingURL=KeycloakRealmService.js.map

package/lib/cjs/keycloak/services/KeycloakRealmService.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakRealmService.js","sourceRoot":"","sources":["KeycloakRealmService.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2DAAwG;AACxG,yCAAoD;AACpD,kDAA0B;AAC1B,kDAAoC;AACpC,MAAa,oBAAqB,SAAQ,yBAAkB;IACxD,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI;QACpB,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI;QACzC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;IACxI,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI;QACzC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,CAAC;QACpF,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,SAAS,EAAE,EAAE,gBAAgB,EAAE,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;IACtJ,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,IAAI;QAChC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,SAAS,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;IACjH,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI;QACtC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnF,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IAC3D,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI;QACvC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC;IAC3D,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,IAAI;QAChC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzF,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,IAAI;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,CAAC;IACpE,CAAC;IACD,gBAAgB,CAAC,MAAM;QACnB,OAAO,eAAK,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBACxB,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;aAChD,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IACD,YAAY,CAAC,MAAM;QACf,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,IAAI;QACtC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACvC,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,YAAY,CAAC,KAAK,gCAAgC;YAC/G,IAAI,EAAE,IAAI,eAAe,CAAC;gBACtB,SAAS,EAAE,YAAY,CAAC,WAAW;gBACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;gBAC/B,UAAU,EAAE,UAAU;aACzB,CAAC,CAAC,QAAQ,EAAE;YACb,OAAO,EAAE;gBACL,cAAc,EAAE,mCAAmC;aACtD;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,YAAY;YAClB,OAAO,IAAI,CAAC,YAAY,CAAC;QAC7B,MAAM,IAAI,+BAAe,CAAC,gDAAgD,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI;QAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,SAAS,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACtH,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI;QAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACvC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE;YAC3D,IAAI,EAAE,OAAO,KAAK,SAAS;gBACvB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBACzB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACjC,OAAO,EAAE;gBACL,GAAG,OAAO;gBACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACpD,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACZ;YACD,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBACxB,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;aACrD,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC7B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,kBAAkB,CAAC,QAAQ,EAAE,WAAW;QACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,MAAM,OAAO,GAAG,YAAY,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC/F,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,+BAAe,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnC,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,UAAU,CAAC,KAAK;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/G,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3G,OAAO,IAAI,+BAAe,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,iBAAiB,CAAC,IAAI;QAClB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,CAAC;gBACH,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AA3JD,oDA2JC;AACD,gDAAgD"}

package/lib/cjs/keycloak/services/KeycloakRoleService.cjs

@@ -0,0 +1,249 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeycloakRoleService = void 0;
+const db_decorators_1 = require("@decaf-ts/db-decorators");
+const core_1 = require("@decaf-ts/core");
+const axios_1 = __importDefault(require("axios"));
+const https = __importStar(require("node:https"));
+class KeycloakRoleService extends core_1.ClientBasedService {
+    async initialize(...args) {
+        const { ctxArgs } = (await this.logCtx(args, "initialize", true)).for(this.initialize);
+        const config = ctxArgs[0];
+        this._config = config;
+        const client = this.createHttpClient(config);
+        this._client = client;
+        return { config, client };
+    }
+    async createClientRoles(keycloakSetupConfig, roleConfigs, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "createClientRoles", true)).for(this.createClientRoles);
+        const roles = roleConfigs ?? keycloakSetupConfig.client.roles ?? [];
+        const realmAccessToken = await this.getRealmAccessToken(keycloakSetupConfig, ...ctxArgs);
+        for (const role of roles) {
+            await this.request("POST", `/admin/realms/${keycloakSetupConfig.realmApiUser?.realm}/clients/${keycloakSetupConfig.client.clientUUID}/roles`, realmAccessToken, {
+                name: role.roleName,
+                description: role.description ?? `Auto-created role ${role.roleName}`,
+                composite: false,
+                clientRole: true,
+            }, 201, {}, ...ctxArgs);
+        }
+    }
+    async getRealmRoles(realmName, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "getRealmRoles", true)).for(this.getRealmRoles);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const response = await this.request("GET", `/admin/realms/${realmName}/roles`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        return this.parseJsonResponse(response.data) ?? [];
+    }
+    async getClientRoles(realmName, clientUUID, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "getClientRoles", true)).for(this.getClientRoles);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const response = await this.request("GET", `/admin/realms/${realmName}/clients/${clientUUID}/roles`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        return this.parseJsonResponse(response.data) ?? [];
+    }
+    async grantRealmRolesToUser(realmName, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "grantRealmRolesToUser", true)).for(this.grantRealmRolesToUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        await this.assignRolesToUser(`/admin/realms/${realmName}/roles`, `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, roleNames, adminAccessToken, ...ctxArgs);
+    }
+    async grantClientRolesToUser(realmName, clientUUID, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "grantClientRolesToUser", true)).for(this.grantClientRolesToUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        await this.assignRolesToUser(`/admin/realms/${realmName}/clients/${clientUUID}/roles`, `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, roleNames, adminAccessToken, ...ctxArgs);
+    }
+    async revokeRealmRolesFromUser(realmName, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "revokeRealmRolesFromUser", true)).for(this.revokeRealmRolesFromUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const rolesResponse = await this.request("GET", `/admin/realms/${realmName}/roles`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const roles = this.parseJsonResponse(rolesResponse.data) ?? [];
+        const selectedRoles = roles.filter((role) => roleNames.includes(role.name));
+        await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, adminAccessToken, selectedRoles, 204, {}, ...ctxArgs);
+    }
+    async replaceRealmRolesForUser(realmName, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "replaceRealmRolesForUser", true)).for(this.replaceRealmRolesForUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const currentRolesResponse = await this.request("GET", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const currentRoles = this.parseJsonResponse(currentRolesResponse.data) ?? [];
+        if (currentRoles.length > 0) {
+            await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/realm`, adminAccessToken, currentRoles, 204, {}, ...ctxArgs);
+        }
+        await this.grantRealmRolesToUser(realmName, userUUID, roleNames, ...ctxArgs);
+    }
+    async revokeClientRolesFromUser(realmName, clientUUID, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "revokeClientRolesFromUser", true)).for(this.revokeClientRolesFromUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const rolesResponse = await this.request("GET", `/admin/realms/${realmName}/clients/${clientUUID}/roles`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const roles = this.parseJsonResponse(rolesResponse.data) ?? [];
+        const selectedRoles = roles.filter((role) => roleNames.includes(role.name));
+        await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, adminAccessToken, selectedRoles, 204, {}, ...ctxArgs);
+    }
+    async replaceClientRolesForUser(realmName, clientUUID, userUUID, roleNames, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "replaceClientRolesForUser", true)).for(this.replaceClientRolesForUser);
+        const adminAccessToken = await this.getAdminAccessToken(...ctxArgs);
+        const currentRolesResponse = await this.request("GET", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, adminAccessToken, undefined, 200, {}, ...ctxArgs);
+        const currentRoles = this.parseJsonResponse(currentRolesResponse.data) ?? [];
+        if (currentRoles.length > 0) {
+            await this.request("DELETE", `/admin/realms/${realmName}/users/${userUUID}/role-mappings/clients/${clientUUID}`, adminAccessToken, currentRoles, 204, {}, ...ctxArgs);
+        }
+        await this.grantClientRolesToUser(realmName, clientUUID, userUUID, roleNames, ...ctxArgs);
+    }
+    createHttpClient(config) {
+        return axios_1.default.create({
+            baseURL: `${config.protocol}://${config.host}`,
+            headers: { "Content-Type": "application/json" },
+            validateStatus: () => true,
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(config),
+            }),
+        });
+    }
+    isProduction(config) {
+        return config.id === "production" || config.host.includes("prod");
+    }
+    async getAdminAccessToken(...args) {
+        const { ctxArgs } = this.logCtx(args, this.getAdminAccessToken);
+        return this.getAccessToken(this.config.adminApiUser, ...ctxArgs);
+    }
+    async getRealmAccessToken(keycloakSetupConfig, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getRealmAccessToken);
+        return this.getAccessToken(keycloakSetupConfig.realmApiUser, ...ctxArgs);
+    }
+    async getAccessToken(keycloakUser, ...args) {
+        const { ctxArgs } = this.logCtx(args, this.getAccessToken);
+        const response = await this.request("POST", `/realms/${keycloakUser.realm}/protocol/openid-connect/token`, undefined, new URLSearchParams({
+            client_id: keycloakUser.apiClientId,
+            username: keycloakUser.username,
+            password: keycloakUser.password,
+            grant_type: "password",
+        }).toString(), 200, { "content-type": "application/x-www-form-urlencoded" }, ...ctxArgs);
+        const data = this.parseJsonResponse(response.data);
+        if (data?.access_token)
+            return data.access_token;
+        throw new db_decorators_1.BadRequestError(`Unable to get Keycloak access token for user ${keycloakUser.username}`);
+    }
+    async assignRolesToUser(rolesUrl, setRolesUrl, roleNames, accessToken, ...args) {
+        const { ctxArgs } = (await this.logCtx(args, "assignRolesToUser", true)).for(this.assignRolesToUser);
+        const response = await this.request("GET", rolesUrl, accessToken, undefined, 200, {}, ...ctxArgs);
+        const roles = this.parseJsonResponse(response.data) ?? [];
+        const selectedRoles = roles.filter((role) => roleNames.includes(role.name));
+        if (selectedRoles.length === 0) {
+            throw new db_decorators_1.NotFoundError(`No roles matched ${roleNames.join(", ")}`);
+        }
+        const promises = selectedRoles.map((role) => this.request("POST", setRolesUrl, accessToken, [role], 204, {}, ...ctxArgs));
+        await Promise.all(promises);
+    }
+    async request(method, path, accessToken, payload, successCode, headers, ...args) {
+        this.logCtx(args, this.request);
+        const response = await this.client.request({
+            method,
+            url: `${this.config.protocol}://${this.config.host}${path}`,
+            data: payload === undefined
+                ? undefined
+                : typeof payload === "string"
+                    ? payload
+                    : JSON.stringify(payload),
+            headers: {
+                ...headers,
+                ...(accessToken ? { Authorization: `Bearer ${accessToken}` } : {}),
+                ...(payload !== undefined && typeof payload !== "string"
+                    ? { "Content-Type": "application/json" }
+                    : {}),
+            },
+            httpsAgent: new https.Agent({
+                rejectUnauthorized: this.isProduction(this.config),
+            }),
+            validateStatus: () => true,
+        });
+        if (response.status !== successCode) {
+            this.handleHttpResponse(response, successCode);
+        }
+        return response;
+    }
+    handleHttpResponse(response, successCode, errorMsg) {
+        const status = response.status;
+        const message = errorMsg
+            ? `${errorMsg}: Expected ${successCode}, received ${response.status}: ${response.statusText}.`
+            : `Expected ${successCode}, received ${response.status}: ${response.statusText}`;
+        if (status === 404 || message.toLowerCase().includes("not found")) {
+            throw new db_decorators_1.NotFoundError(message);
+        }
+        if (status === 409 || message.toLowerCase().includes("conflict")) {
+            throw new db_decorators_1.ConflictError(message);
+        }
+        if (status === 400) {
+            throw new db_decorators_1.BadRequestError(message);
+        }
+        if (status === 401 || status === 403) {
+            throw new db_decorators_1.NotFoundError(message);
+        }
+        throw new db_decorators_1.InternalError(message);
+    }
+    parseError(error) {
+        const message = error.message || error.name || "Unknown error";
+        const lowerMessage = message.toLowerCase();
+        if (lowerMessage.includes("not found") || lowerMessage.includes("404")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("already exists") || lowerMessage.includes("conflict") || lowerMessage.includes("409")) {
+            return new db_decorators_1.ConflictError(message);
+        }
+        if (lowerMessage.includes("invalid") || lowerMessage.includes("bad request") || lowerMessage.includes("400")) {
+            return new db_decorators_1.BadRequestError(message);
+        }
+        if (lowerMessage.includes("unauthorized") || lowerMessage.includes("401")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        if (lowerMessage.includes("forbidden") || lowerMessage.includes("403")) {
+            return new db_decorators_1.NotFoundError(message);
+        }
+        return new db_decorators_1.InternalError(message);
+    }
+    parseJsonResponse(data) {
+        if (typeof data === "string") {
+            try {
+                return JSON.parse(data);
+            }
+            catch {
+                return undefined;
+            }
+        }
+        return data;
+    }
+}
+exports.KeycloakRoleService = KeycloakRoleService;
+//# sourceMappingURL=KeycloakRoleService.js.map
+//# sourceMappingURL=KeycloakRoleService.js.map

package/lib/cjs/keycloak/services/KeycloakRoleService.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeycloakRoleService.js","sourceRoot":"","sources":["KeycloakRoleService.js"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2DAAwG;AACxG,yCAAoD;AACpD,kDAA0B;AAC1B,kDAAoC;AACpC,MAAa,mBAAoB,SAAQ,yBAAkB;IACvD,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI;QACpB,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,mBAAmB,EAAE,WAAW,EAAE,GAAG,IAAI;QAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrG,MAAM,KAAK,GAAG,WAAW,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACpE,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,iBAAiB,mBAAmB,CAAC,YAAY,EAAE,KAAK,YAAY,mBAAmB,CAAC,MAAM,CAAC,UAAU,QAAQ,EAAE,gBAAgB,EAAE;gBAC5J,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACnB,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,qBAAqB,IAAI,CAAC,QAAQ,EAAE;gBACrE,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,IAAI;aACnB,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAC5B,CAAC;IACL,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7F,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,SAAS,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACjI,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI;QAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/F,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,SAAS,YAAY,UAAU,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACvJ,OAAO,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI;QAC/D,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,uBAAuB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC7G,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,SAAS,QAAQ,EAAE,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,CAAC;IAClL,CAAC;IACD,KAAK,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI;QAC5E,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC/G,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,SAAS,YAAY,UAAU,QAAQ,EAAE,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC,CAAC;IACxN,CAAC;IACD,KAAK,CAAC,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACnH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,SAAS,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACtI,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;IAC3J,CAAC;IACD,KAAK,CAAC,wBAAwB,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI;QAClE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACnH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAC7K,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,SAAS,UAAU,QAAQ,sBAAsB,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAC1J,CAAC;QACD,MAAM,IAAI,CAAC,qBAAqB,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC;IACjF,CAAC;IACD,KAAK,CAAC,yBAAyB,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI;QAC/E,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACrH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,SAAS,YAAY,UAAU,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAC5J,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;IAC3K,CAAC;IACD,KAAK,CAAC,yBAAyB,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI;QAC/E,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACrH,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,GAAG,OAAO,CAAC,CAAC;QACpE,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAC7L,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,iBAAiB,SAAS,UAAU,QAAQ,0BAA0B,UAAU,EAAE,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAC1K,CAAC;QACD,MAAM,IAAI,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,CAAC;IAC9F,CAAC;IACD,gBAAgB,CAAC,MAAM;QACnB,OAAO,eAAK,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,GAAG,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,IAAI,EAAE;YAC9C,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBACxB,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;aAChD,CAAC;SACL,CAAC,CAAC;IACP,CAAC;IACD,YAAY,CAAC,MAAM;QACf,OAAO,MAAM,CAAC,EAAE,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC;IACD,KAAK,CAAC,mBAAmB,CAAC,GAAG,IAAI;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,GAAG,IAAI;QAClD,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,GAAG,IAAI;QACtC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,YAAY,CAAC,KAAK,gCAAgC,EAAE,SAAS,EAAE,IAAI,eAAe,CAAC;YACtI,SAAS,EAAE,YAAY,CAAC,WAAW;YACnC,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,UAAU,EAAE,UAAU;SACzB,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACzF,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,YAAY;YAClB,OAAO,IAAI,CAAC,YAAY,CAAC;QAC7B,MAAM,IAAI,+BAAe,CAAC,gDAAgD,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI;QAC1E,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACrG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QAClG,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1D,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,6BAAa,CAAC,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;QAC1H,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI;QAC3E,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACvC,MAAM;YACN,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE;YAC3D,IAAI,EAAE,OAAO,KAAK,SAAS;gBACvB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;oBACzB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACjC,OAAO,EAAE;gBACL,GAAG,OAAO;gBACV,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;oBACpD,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBACxC,CAAC,CAAC,EAAE,CAAC;aACZ;YACD,UAAU,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC;gBACxB,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;aACrD,CAAC;YACF,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC7B,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,QAAQ,CAAC;IACpB,CAAC;IACD,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ;QAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,MAAM,OAAO,GAAG,QAAQ;YACpB,CAAC,CAAC,GAAG,QAAQ,cAAc,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,GAAG;YAC9F,CAAC,CAAC,YAAY,WAAW,cAAc,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QACrF,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,+BAAe,CAAC,OAAO,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnC,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,UAAU,CAAC,KAAK;QACZ,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;QAC/D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/G,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3G,OAAO,IAAI,+BAAe,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,6BAAa,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,iBAAiB,CAAC,IAAI;QAClB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,CAAC;gBACH,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;CACJ;AA1MD,kDA0MC;AACD,+CAA+C"}