@enterprisestandard/esv 0.0.5-beta.20260115.1 → 0.0.5-beta.20260115.2

package/dist/server/crypto.js

@@ -0,0 +1,134 @@
+/**
+ * Cryptographic utilities for the ESV mock server
+ *
+ * Generates ephemeral RSA keys on startup for signing JWTs.
+ * Uses only Node.js built-in crypto module.
+ */
+import * as crypto from 'node:crypto';
+// Key pair generated on module load
+let privateKey;
+let publicKey;
+let keyId;
+/**
+ * Initialize the cryptographic keys
+ * Called on server startup
+ */
+export function initializeKeys() {
+    const { publicKey: pubKey, privateKey: privKey } = crypto.generateKeyPairSync('rsa', {
+        modulusLength: 2048,
+    });
+    privateKey = privKey;
+    publicKey = pubKey;
+    keyId = crypto.randomBytes(8).toString('hex');
+}
+/**
+ * Get the key ID
+ */
+export function getKeyId() {
+    return keyId;
+}
+/**
+ * Base64URL encode a buffer or string
+ */
+function base64UrlEncode(data) {
+    const buffer = typeof data === 'string' ? Buffer.from(data) : data;
+    return buffer.toString('base64url');
+}
+/**
+ * Base64URL decode a string
+ */
+function base64UrlDecode(data) {
+    return Buffer.from(data, 'base64url');
+}
+/**
+ * Sign a JWT with the private key
+ */
+export function signJwt(payload, expiresInSeconds = 3600) {
+    const now = Math.floor(Date.now() / 1000);
+    const header = {
+        alg: 'RS256',
+        typ: 'JWT',
+        kid: keyId,
+    };
+    const claims = {
+        ...payload,
+        iat: now,
+        exp: now + expiresInSeconds,
+    };
+    const encodedHeader = base64UrlEncode(JSON.stringify(header));
+    const encodedPayload = base64UrlEncode(JSON.stringify(claims));
+    const signatureInput = `${encodedHeader}.${encodedPayload}`;
+    const sign = crypto.createSign('RSA-SHA256');
+    sign.update(signatureInput);
+    const signature = sign.sign(privateKey);
+    return `${signatureInput}.${base64UrlEncode(signature)}`;
+}
+/**
+ * Verify a JWT signature
+ */
+export function verifyJwt(token) {
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3) {
+            return { valid: false, error: 'Invalid JWT format' };
+        }
+        const [encodedHeader, encodedPayload, encodedSignature] = parts;
+        const signatureInput = `${encodedHeader}.${encodedPayload}`;
+        const signature = base64UrlDecode(encodedSignature);
+        const verify = crypto.createVerify('RSA-SHA256');
+        verify.update(signatureInput);
+        const isValid = verify.verify(publicKey, signature);
+        if (!isValid) {
+            return { valid: false, error: 'Invalid signature' };
+        }
+        const payload = JSON.parse(base64UrlDecode(encodedPayload).toString('utf-8'));
+        // Check expiration
+        const now = Math.floor(Date.now() / 1000);
+        if (payload.exp && payload.exp < now) {
+            return { valid: false, error: 'Token expired' };
+        }
+        return { valid: true, payload };
+    }
+    catch (error) {
+        return { valid: false, error: error instanceof Error ? error.message : 'Unknown error' };
+    }
+}
+/**
+ * Get the JWKS (JSON Web Key Set) for the public key
+ */
+export function getJwks() {
+    const jwk = publicKey.export({ format: 'jwk' });
+    return {
+        keys: [
+            {
+                kty: jwk.kty,
+                n: jwk.n,
+                e: jwk.e,
+                kid: keyId,
+                use: 'sig',
+                alg: 'RS256',
+            },
+        ],
+    };
+}
+/**
+ * Generate a random string for codes, states, etc.
+ */
+export function generateRandomString(length = 32) {
+    return crypto.randomBytes(length).toString('hex').substring(0, length);
+}
+/**
+ * Generate a UUID
+ */
+export function generateUUID() {
+    return crypto.randomUUID();
+}
+/**
+ * Verify PKCE code challenge
+ */
+export function verifyCodeChallenge(codeVerifier, codeChallenge) {
+    const hash = crypto.createHash('sha256').update(codeVerifier).digest();
+    const computed = base64UrlEncode(hash);
+    return computed === codeChallenge;
+}
+//# sourceMappingURL=crypto.js.map

package/dist/server/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/server/crypto.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAEtC,oCAAoC;AACpC,IAAI,UAA4B,CAAC;AACjC,IAAI,SAA2B,CAAC;AAChC,IAAI,KAAa,CAAC;AAElB;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE;QACnF,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IAEH,UAAU,GAAG,OAAO,CAAC;IACrB,SAAS,GAAG,MAAM,CAAC;IACnB,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ;IACtB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAqB;IAC5C,MAAM,MAAM,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnE,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,OAAgC,EAAE,mBAA2B,IAAI;IACvF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAE1C,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK;KACX,CAAC;IAEF,MAAM,MAAM,GAAG;QACb,GAAG,OAAO;QACV,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,gBAAgB;KAC5B,CAAC;IAEF,MAAM,aAAa,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;IAE5D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAExC,OAAO,GAAG,cAAc,IAAI,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,KAAK,CAAC;QAChE,MAAM,cAAc,GAAG,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;QAC5D,MAAM,SAAS,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAEpD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;QACtD,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAE9E,mBAAmB;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC;YACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAClD,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;IAC3F,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO;IACrB,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAEhD,OAAO;QACL,IAAI,EAAE;YACJ;gBACE,GAAG,EAAE,GAAG,CAAC,GAAa;gBACtB,CAAC,EAAE,GAAG,CAAC,CAAW;gBAClB,CAAC,EAAE,GAAG,CAAC,CAAW;gBAClB,GAAG,EAAE,KAAK;gBACV,GAAG,EAAE,KAAK;gBACV,GAAG,EAAE,OAAO;aACb;SACF;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAiB,EAAE;IACtD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB,EAAE,aAAqB;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,QAAQ,KAAK,aAAa,CAAC;AACpC,CAAC"}

package/dist/server/iam.js

@@ -0,0 +1,402 @@
+/**
+ * IAM/SCIM endpoint handlers for the ESV mock server
+ *
+ * Implements SCIM 2.0 endpoints for user and group management.
+ */
+import { generateUUID } from './crypto.js';
+import { createGroup, createUser, deleteGroup, deleteUser, getGroup, getGroups, getUser, getUsers, updateGroup, updateUser, } from './state.js';
+const SCIM_CONTENT_TYPE = 'application/scim+json';
+/**
+ * Parse JSON request body
+ */
+async function parseJsonBody(req) {
+    return new Promise((resolve, reject) => {
+        let body = '';
+        req.on('data', (chunk) => {
+            body += chunk.toString();
+        });
+        req.on('end', () => {
+            try {
+                resolve(body ? JSON.parse(body) : {});
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+        req.on('error', reject);
+    });
+}
+/**
+ * Validate authorization header
+ */
+function validateAuth(req, res) {
+    const auth = req.headers.authorization;
+    if (!auth || !auth.startsWith('Bearer ')) {
+        res.writeHead(401, { 'Content-Type': SCIM_CONTENT_TYPE });
+        res.end(JSON.stringify({
+            schemas: ['urn:ietf:params:scim:api:messages:2.0:Error'],
+            status: '401',
+            detail: 'Authorization required',
+        }));
+        return false;
+    }
+    // We accept any bearer token for testing
+    return true;
+}
+/**
+ * Send SCIM error response
+ */
+function sendScimError(res, status, detail, scimType) {
+    res.writeHead(status, { 'Content-Type': SCIM_CONTENT_TYPE });
+    res.end(JSON.stringify({
+        schemas: ['urn:ietf:params:scim:api:messages:2.0:Error'],
+        status: String(status),
+        scimType,
+        detail,
+    }));
+}
+/**
+ * Send SCIM list response
+ */
+function sendListResponse(res, resources, totalResults) {
+    res.writeHead(200, { 'Content-Type': SCIM_CONTENT_TYPE });
+    res.end(JSON.stringify({
+        schemas: ['urn:ietf:params:scim:api:messages:2.0:ListResponse'],
+        totalResults: totalResults ?? resources.length,
+        startIndex: 1,
+        itemsPerPage: resources.length,
+        Resources: resources,
+    }));
+}
+/**
+ * Handle IAM/SCIM requests
+ */
+export async function handleIamRequest(req, res, pathname) {
+    // Remove /iam prefix
+    const iamPath = pathname.replace(/^\/iam/, '');
+    // Validate auth for all requests
+    if (!validateAuth(req, res)) {
+        return;
+    }
+    // Parse path to determine resource and ID
+    const usersMatch = iamPath.match(/^\/Users(?:\/([^/]+))?$/);
+    const groupsMatch = iamPath.match(/^\/Groups(?:\/([^/]+))?$/);
+    if (usersMatch) {
+        const userId = usersMatch[1];
+        await handleUsersRequest(req, res, userId);
+        return;
+    }
+    if (groupsMatch) {
+        const groupId = groupsMatch[1];
+        await handleGroupsRequest(req, res, groupId);
+        return;
+    }
+    sendScimError(res, 404, 'Resource not found');
+}
+/**
+ * Handle /Users requests
+ */
+async function handleUsersRequest(req, res, userId) {
+    if (userId) {
+        // Operations on a specific user
+        switch (req.method) {
+            case 'GET':
+                handleGetUser(res, userId);
+                break;
+            case 'PUT':
+                await handleReplaceUser(req, res, userId);
+                break;
+            case 'PATCH':
+                await handlePatchUser(req, res, userId);
+                break;
+            case 'DELETE':
+                handleDeleteUser(res, userId);
+                break;
+            default:
+                sendScimError(res, 405, 'Method not allowed');
+        }
+    }
+    else {
+        // Operations on users collection
+        switch (req.method) {
+            case 'GET':
+                handleListUsers(res);
+                break;
+            case 'POST':
+                await handleCreateUser(req, res);
+                break;
+            default:
+                sendScimError(res, 405, 'Method not allowed');
+        }
+    }
+}
+/**
+ * Handle /Groups requests
+ */
+async function handleGroupsRequest(req, res, groupId) {
+    if (groupId) {
+        // Operations on a specific group
+        switch (req.method) {
+            case 'GET':
+                handleGetGroup(res, groupId);
+                break;
+            case 'PUT':
+                await handleReplaceGroup(req, res, groupId);
+                break;
+            case 'PATCH':
+                await handlePatchGroup(req, res, groupId);
+                break;
+            case 'DELETE':
+                handleDeleteGroup(res, groupId);
+                break;
+            default:
+                sendScimError(res, 405, 'Method not allowed');
+        }
+    }
+    else {
+        // Operations on groups collection
+        switch (req.method) {
+            case 'GET':
+                handleListGroups(res);
+                break;
+            case 'POST':
+                await handleCreateGroup(req, res);
+                break;
+            default:
+                sendScimError(res, 405, 'Method not allowed');
+        }
+    }
+}
+// ========== User Handlers ==========
+function handleListUsers(res) {
+    const users = getUsers();
+    sendListResponse(res, users);
+}
+function handleGetUser(res, id) {
+    const user = getUser(id);
+    if (!user) {
+        sendScimError(res, 404, `User ${id} not found`, 'invalidValue');
+        return;
+    }
+    res.writeHead(200, { 'Content-Type': SCIM_CONTENT_TYPE });
+    res.end(JSON.stringify(user));
+}
+async function handleCreateUser(req, res) {
+    try {
+        const body = (await parseJsonBody(req));
+        if (!body.userName) {
+            sendScimError(res, 400, 'userName is required', 'invalidValue');
+            return;
+        }
+        const user = {
+            id: generateUUID(),
+            schemas: body.schemas || [
+                'urn:ietf:params:scim:schemas:core:2.0:User',
+                'urn:ietf:params:scim:schemas:extension:enterprise:2.0:User',
+            ],
+            userName: body.userName,
+            displayName: body.displayName,
+            name: body.name,
+            emails: body.emails,
+            active: body.active ?? true,
+            externalId: body.externalId,
+            groups: [],
+            'urn:ietf:params:scim:schemas:extension:enterprise:2.0:User': body['urn:ietf:params:scim:schemas:extension:enterprise:2.0:User'],
+        };
+        const created = createUser(user);
+        res.writeHead(201, { 'Content-Type': SCIM_CONTENT_TYPE });
+        res.end(JSON.stringify(created));
+    }
+    catch (_error) {
+        sendScimError(res, 400, 'Invalid request body');
+    }
+}
+async function handleReplaceUser(req, res, id) {
+    const existing = getUser(id);
+    if (!existing) {
+        sendScimError(res, 404, `User ${id} not found`, 'invalidValue');
+        return;
+    }
+    try {
+        const body = (await parseJsonBody(req));
+        const updated = updateUser(id, { ...body, id });
+        if (updated) {
+            res.writeHead(200, { 'Content-Type': SCIM_CONTENT_TYPE });
+            res.end(JSON.stringify(updated));
+        }
+        else {
+            sendScimError(res, 404, `User ${id} not found`);
+        }
+    }
+    catch (_error) {
+        sendScimError(res, 400, 'Invalid request body');
+    }
+}
+async function handlePatchUser(req, res, id) {
+    const existing = getUser(id);
+    if (!existing) {
+        sendScimError(res, 404, `User ${id} not found`, 'invalidValue');
+        return;
+    }
+    try {
+        const body = (await parseJsonBody(req));
+        const operations = body.Operations || [];
+        const updated = { ...existing };
+        for (const op of operations) {
+            if (op.op === 'replace' && op.path && op.value !== undefined) {
+                // Simple path handling for common cases
+                if (op.path === 'displayName') {
+                    updated.displayName = op.value;
+                }
+                else if (op.path === 'active') {
+                    updated.active = op.value;
+                }
+                else if (op.path.startsWith('name.')) {
+                    const namePart = op.path.split('.')[1];
+                    updated.name = { ...updated.name, [namePart]: op.value };
+                }
+            }
+            else if (op.op === 'add' && op.path && op.value !== undefined) {
+                if (op.path === 'emails') {
+                    updated.emails = [...(updated.emails || []), ...(op.value || [])];
+                }
+            }
+            else if (op.op === 'remove' && op.path) {
+                if (op.path === 'displayName') {
+                    updated.displayName = undefined;
+                }
+            }
+        }
+        const result = updateUser(id, updated);
+        if (result) {
+            res.writeHead(200, { 'Content-Type': SCIM_CONTENT_TYPE });
+            res.end(JSON.stringify(result));
+        }
+        else {
+            sendScimError(res, 404, `User ${id} not found`);
+        }
+    }
+    catch (_error) {
+        sendScimError(res, 400, 'Invalid request body');
+    }
+}
+function handleDeleteUser(res, id) {
+    const deleted = deleteUser(id);
+    if (!deleted) {
+        sendScimError(res, 404, `User ${id} not found`, 'invalidValue');
+        return;
+    }
+    res.writeHead(204);
+    res.end();
+}
+// ========== Group Handlers ==========
+function handleListGroups(res) {
+    const groups = getGroups();
+    sendListResponse(res, groups);
+}
+function handleGetGroup(res, id) {
+    const group = getGroup(id);
+    if (!group) {
+        sendScimError(res, 404, `Group ${id} not found`, 'invalidValue');
+        return;
+    }
+    res.writeHead(200, { 'Content-Type': SCIM_CONTENT_TYPE });
+    res.end(JSON.stringify(group));
+}
+async function handleCreateGroup(req, res) {
+    try {
+        const body = (await parseJsonBody(req));
+        if (!body.displayName) {
+            sendScimError(res, 400, 'displayName is required', 'invalidValue');
+            return;
+        }
+        const group = {
+            id: generateUUID(),
+            schemas: body.schemas || ['urn:ietf:params:scim:schemas:core:2.0:Group'],
+            displayName: body.displayName,
+            externalId: body.externalId,
+            members: body.members || [],
+        };
+        const created = createGroup(group);
+        res.writeHead(201, { 'Content-Type': SCIM_CONTENT_TYPE });
+        res.end(JSON.stringify(created));
+    }
+    catch (_error) {
+        sendScimError(res, 400, 'Invalid request body');
+    }
+}
+async function handleReplaceGroup(req, res, id) {
+    const existing = getGroup(id);
+    if (!existing) {
+        sendScimError(res, 404, `Group ${id} not found`, 'invalidValue');
+        return;
+    }
+    try {
+        const body = (await parseJsonBody(req));
+        const updated = updateGroup(id, { ...body, id });
+        if (updated) {
+            res.writeHead(200, { 'Content-Type': SCIM_CONTENT_TYPE });
+            res.end(JSON.stringify(updated));
+        }
+        else {
+            sendScimError(res, 404, `Group ${id} not found`);
+        }
+    }
+    catch (_error) {
+        sendScimError(res, 400, 'Invalid request body');
+    }
+}
+async function handlePatchGroup(req, res, id) {
+    const existing = getGroup(id);
+    if (!existing) {
+        sendScimError(res, 404, `Group ${id} not found`, 'invalidValue');
+        return;
+    }
+    try {
+        const body = (await parseJsonBody(req));
+        const operations = body.Operations || [];
+        const updated = { ...existing };
+        for (const op of operations) {
+            if (op.op === 'replace' && op.path && op.value !== undefined) {
+                if (op.path === 'displayName') {
+                    updated.displayName = op.value;
+                }
+            }
+            else if (op.op === 'add' && op.path && op.value !== undefined) {
+                if (op.path === 'members') {
+                    updated.members = [...(updated.members || []), ...(op.value || [])];
+                }
+            }
+            else if (op.op === 'remove' && op.path) {
+                if (op.path.startsWith('members[')) {
+                    // Parse member filter like members[value eq "user-id"]
+                    const match = op.path.match(/members\[value eq "([^"]+)"\]/);
+                    if (match) {
+                        updated.members = (updated.members || []).filter((m) => m.value !== match[1]);
+                    }
+                }
+            }
+        }
+        const result = updateGroup(id, updated);
+        if (result) {
+            res.writeHead(200, { 'Content-Type': SCIM_CONTENT_TYPE });
+            res.end(JSON.stringify(result));
+        }
+        else {
+            sendScimError(res, 404, `Group ${id} not found`);
+        }
+    }
+    catch (_error) {
+        sendScimError(res, 400, 'Invalid request body');
+    }
+}
+function handleDeleteGroup(res, id) {
+    const deleted = deleteGroup(id);
+    if (!deleted) {
+        sendScimError(res, 404, `Group ${id} not found`, 'invalidValue');
+        return;
+    }
+    res.writeHead(204);
+    res.end();
+}
+//# sourceMappingURL=iam.js.map

package/dist/server/iam.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam.js","sourceRoot":"","sources":["../../src/server/iam.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACV,QAAQ,EACR,SAAS,EACT,OAAO,EACP,QAAQ,EAGR,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAElD;;GAEG;AACH,KAAK,UAAU,aAAa,CAAC,GAAoB;IAC/C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACvB,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,GAAoB,EAAE,GAAmB;IAC7D,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;YACb,OAAO,EAAE,CAAC,6CAA6C,CAAC;YACxD,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,wBAAwB;SACjC,CAAC,CACH,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,yCAAyC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,GAAmB,EAAE,MAAc,EAAE,MAAc,EAAE,QAAiB;IAC3F,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC7D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,CAAC,6CAA6C,CAAC;QACxD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,QAAQ;QACR,MAAM;KACP,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,gBAAgB,CAAI,GAAmB,EAAE,SAAc,EAAE,YAAqB;IACrF,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1D,GAAG,CAAC,GAAG,CACL,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,CAAC,oDAAoD,CAAC;QAC/D,YAAY,EAAE,YAAY,IAAI,SAAS,CAAC,MAAM;QAC9C,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,SAAS,CAAC,MAAM;QAC9B,SAAS,EAAE,SAAS;KACrB,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAoB,EAAE,GAAmB,EAAE,QAAgB;IAChG,qBAAqB;IACrB,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAE/C,iCAAiC;IACjC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO;IACT,CAAC;IAED,0CAA0C;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAE9D,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;AAChD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB,CAAC,GAAoB,EAAE,GAAmB,EAAE,MAAe;IAC1F,IAAI,MAAM,EAAE,CAAC;QACX,gCAAgC;QAChC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,KAAK;gBACR,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC3B,MAAM;YACR,KAAK,KAAK;gBACR,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC1C,MAAM;YACR,KAAK,OAAO;gBACV,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBACxC,MAAM;YACR,KAAK,QAAQ;gBACX,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC9B,MAAM;YACR;gBACE,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,iCAAiC;QACjC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,KAAK;gBACR,eAAe,CAAC,GAAG,CAAC,CAAC;gBACrB,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACjC,MAAM;YACR;gBACE,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAAC,GAAoB,EAAE,GAAmB,EAAE,OAAgB;IAC5F,IAAI,OAAO,EAAE,CAAC;QACZ,iCAAiC;QACjC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,KAAK;gBACR,cAAc,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC7B,MAAM;YACR,KAAK,KAAK;gBACR,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC5C,MAAM;YACR,KAAK,OAAO;gBACV,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC1C,MAAM;YACR,KAAK,QAAQ;gBACX,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;gBAChC,MAAM;YACR;gBACE,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,kCAAkC;QAClC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,KAAK,KAAK;gBACR,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBACtB,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAClC,MAAM;YACR;gBACE,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;AACH,CAAC;AAED,sCAAsC;AAEtC,SAAS,eAAe,CAAC,GAAmB;IAC1C,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,GAAmB,EAAE,EAAU;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAoB,EAAE,GAAmB;IACvE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAsB,CAAC;QAE7D,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,EAAE,cAAc,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAa;YACrB,EAAE,EAAE,YAAY,EAAE;YAClB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI;gBACvB,4CAA4C;gBAC5C,4DAA4D;aAC7D;YACD,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,EAAE;YACV,4DAA4D,EAC1D,IAAI,CAAC,4DAA4D,CAAC;SACrE,CAAC;QAEF,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAU;IACpF,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAsB,CAAC;QAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAU;IAClF,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAA2E,CAAC;QAClH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QAEzC,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAChC,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,EAAE,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7D,wCAAwC;gBACxC,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC9B,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,KAAe,CAAC;gBAC3C,CAAC;qBAAM,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAChC,OAAO,CAAC,MAAM,GAAG,EAAE,CAAC,KAAgB,CAAC;gBACvC,CAAC;qBAAM,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvC,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAwC,CAAC;oBAC9E,OAAO,CAAC,IAAI,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,KAAe,EAAE,CAAC;gBACrE,CAAC;YACH,CAAC;iBAAM,IAAI,EAAE,CAAC,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChE,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACzB,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,GAAG,CAAE,EAAE,CAAC,KAA4B,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;iBAAM,IAAI,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;gBACzC,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC9B,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAmB,EAAE,EAAU;IACvD,MAAM,OAAO,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC;AAED,uCAAuC;AAEvC,SAAS,gBAAgB,CAAC,GAAmB;IAC3C,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,cAAc,CAAC,GAAmB,EAAE,EAAU;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAoB,EAAE,GAAmB;IACxE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAuB,CAAC;QAE9D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,EAAE,cAAc,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAc;YACvB,EAAE,EAAE,YAAY,EAAE;YAClB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,6CAA6C,CAAC;YACxE,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE;SAC5B,CAAC;QAEF,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACnC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAU;IACrF,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAuB,CAAC;QAC9D,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAU;IACnF,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAA2E,CAAC;QAClH,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;QAEzC,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAChC,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,EAAE,CAAC,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7D,IAAI,EAAE,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;oBAC9B,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,KAAe,CAAC;gBAC3C,CAAC;YACH,CAAC;iBAAM,IAAI,EAAE,CAAC,EAAE,KAAK,KAAK,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChE,IAAI,EAAE,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC1B,OAAO,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,GAAG,CAAE,EAAE,CAAC,KAA8B,IAAI,EAAE,CAAC,CAAC,CAAC;gBAChG,CAAC;YACH,CAAC;iBAAM,IAAI,EAAE,CAAC,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;gBACzC,IAAI,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBACnC,uDAAuD;oBACvD,MAAM,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;oBAC7D,IAAI,KAAK,EAAE,CAAC;wBACV,OAAO,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChF,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC1D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAmB,EAAE,EAAU;IACxD,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC"}