@frontmcp/auth 1.3.0 → 1.4.0

package/jwks/jwks.service.d.ts

@@ -1,5 +1,5 @@
-import { JSONWebKeySet } from 'jose';
-import { JwksServiceOptions, ProviderVerifyRef, VerifyResult } from './jwks.types';
+import { type JSONWebKeySet } from 'jose';
+import { type JwksServiceOptions, type ProviderVerifyRef, type VerifyResult } from './jwks.types';
 export declare class JwksService {
     private readonly opts;
     private readonly logger;
@@ -17,8 +17,6 @@ export declare class JwksService {
     private getKeyPersistence;
     /** Gateway's public JWKS (publish at /.well-known/jwks.json when orchestrated). */
     getPublicJwks(): Promise<JSONWebKeySet>;
-    /** Verify a token issued by the gateway itself (orchestrated mode). */
-    verifyGatewayToken(token: string, expectedIssuer: string): Promise<VerifyResult>;
     /**
      * Verify a token against candidate transparent providers.
      * Ensures JWKS are available (cached/TTL/AS discovery) per provider.

package/jwks/jwks.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwks.service.d.ts","sourceRoot":"","sources":["../../src/jwks/jwks.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAuD,aAAa,EAAO,MAAM,MAAM,CAAC;AAS/F,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAanF,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA+C;IAEpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,eAAe,CAAqB;IAG5C,OAAO,CAAC,eAAe,CAKrB;IAGF,OAAO,CAAC,YAAY,CAAiE;IAGrF,OAAO,CAAC,cAAc,CAAS;IAE/B,OAAO,CAAC,cAAc,CAA4B;IAElD,OAAO,CAAC,cAAc,CAAC,CAAiB;gBAE5B,IAAI,CAAC,EAAE,kBAAkB;IAcrC;;;OAGG;YACW,iBAAiB;IAc/B,mFAAmF;IAC7E,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC;IAQ7C,uEAAuE;IACjE,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAsCtF;;;OAGG;IACG,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAqDnG;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;;OAGG;YACW,iBAAiB;IAiF/B;;OAEG;IACH,OAAO,CAAC,eAAe;IAqBvB,kEAAkE;IAClE,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa;IAIvD;;;;;;OAMG;IACG,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAmCpF,yEAAyE;IACnE,mBAAmB,IAAI,OAAO,CAAC,aAAa,CAAC;IAKnD,wEAAwE;IAClE,yBAAyB,IAAI,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,aAAa,EAAE,SAAS,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;YAShG,YAAY;YAaZ,cAAc;YAQd,SAAS;YAgBT,qBAAqB;YAyBrB,yBAAyB;IA+DvC,OAAO,CAAC,WAAW;CAgBpB"}
+{"version":3,"file":"jwks.service.d.ts","sourceRoot":"","sources":["../../src/jwks/jwks.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAuD,KAAK,aAAa,EAAY,MAAM,MAAM,CAAC;AAYzG,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAWlG,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA+C;IAEpE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,eAAe,CAAqB;IAG5C,OAAO,CAAC,eAAe,CAKrB;IAGF,OAAO,CAAC,YAAY,CAAiE;IAGrF,OAAO,CAAC,cAAc,CAAS;IAE/B,OAAO,CAAC,cAAc,CAA4B;IAElD,OAAO,CAAC,cAAc,CAAC,CAAiB;gBAE5B,IAAI,CAAC,EAAE,kBAAkB;IAcrC;;;OAGG;YACW,iBAAiB;IAc/B,mFAAmF;IAC7E,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC;IAQ7C;;;OAGG;IACG,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC;IAqDnG;;OAEG;IACH,OAAO,CAAC,cAAc;IAatB;;;OAGG;YACW,iBAAiB;IAiF/B;;OAEG;IACH,OAAO,CAAC,eAAe;IAqBvB,kEAAkE;IAClE,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa;IAIvD;;;;;;OAMG;IACG,kBAAkB,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAmCpF,yEAAyE;IACnE,mBAAmB,IAAI,OAAO,CAAC,aAAa,CAAC;IAKnD,wEAAwE;IAClE,yBAAyB,IAAI,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,OAAO,aAAa,EAAE,SAAS,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;YAShG,YAAY;YAaZ,cAAc;YAQd,SAAS;YAgBT,qBAAqB;YAyBrB,yBAAyB;IA+DvC,OAAO,CAAC,WAAW;CAgBpB"}

package/options/app-auth.schema.d.ts

@@ -46,6 +46,76 @@ export declare const appAuthOptionsSchema: import("@frontmcp/lazy-zod").ZodUnion
     standalone: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
     excludeFromParent: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
 }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+    requireEmail: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
+    anonymousSubject: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodString>;
+    login: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        title: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        subtitle: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        logoUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        fields: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("@frontmcp/lazy-zod").ZodObject<{
+            type: import("@frontmcp/lazy-zod").ZodEnum<{
+                text: "text";
+                password: "password";
+                email: "email";
+                select: "select";
+                hidden: "hidden";
+            }>;
+            label: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            required: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+            placeholder: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            options: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+                value: import("@frontmcp/lazy-zod").ZodString;
+                label: import("@frontmcp/lazy-zod").ZodString;
+            }, import("zod/v4/core").$strip>>>;
+        }, import("zod/v4/core").$strip>>>;
+        render: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodCustom<(ctx: import("./interfaces").LoginRenderContext) => string, (ctx: import("./interfaces").LoginRenderContext) => string>>;
+        subject: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            fromField: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            strategy: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
+                "per-session": "per-session";
+                "per-account": "per-account";
+            }>>;
+        }, import("zod/v4/core").$strip>>;
+    }, import("zod/v4/core").$strip>>;
+    authenticate: import("@frontmcp/lazy-zod").ZodOptional<import("zod").ZodCustom<import("./interfaces").AuthenticateFn, import("./interfaces").AuthenticateFn>>;
+    providers: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+        id: import("@frontmcp/lazy-zod").ZodString;
+        name: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        authorizationEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        authorizeUrl: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        tokenEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        tokenUrl: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        clientId: import("@frontmcp/lazy-zod").ZodString;
+        clientSecret: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        scopes: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+        userInfoEndpoint: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        jwksUri: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+    }, import("zod/v4/core").$strip>>>;
+    dcr: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+        enabled: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        allowedRedirectUris: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+        allowedClientIds: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
+        initialAccessToken: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        clients: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodObject<{
+            clientId: import("@frontmcp/lazy-zod").ZodString;
+            clientSecret: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            redirectUris: import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>;
+            clientName: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            tokenEndpointAuthMethod: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodEnum<{
+                none: "none";
+                client_secret_basic: "client_secret_basic";
+                client_secret_post: "client_secret_post";
+            }>>;
+            grantTypes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodEnum<{
+                authorization_code: "authorization_code";
+                refresh_token: "refresh_token";
+            }>>>;
+            responseTypes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodEnum<{
+                code: "code";
+            }>>>;
+            scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>>;
+    }, import("zod/v4/core").$strip>>;
     local: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
         signKey: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<[z.ZodType<import("..").JWK, unknown>, import("zod").ZodCustom<Uint8Array<ArrayBuffer>, Uint8Array<ArrayBuffer>>]>>;
         jwks: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
@@ -63,6 +133,74 @@ export declare const appAuthOptionsSchema: import("@frontmcp/lazy-zod").ZodUnion
             keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
             defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
         }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        sqlite: import("@frontmcp/lazy-zod").ZodObject<{
+            path: import("@frontmcp/lazy-zod").ZodString;
+            encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                secret: import("@frontmcp/lazy-zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            ttlCleanupIntervalMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+            walMode: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>]>>;
+    secureStore: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"memory">, import("@frontmcp/lazy-zod").ZodObject<{
+        scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
+            user: "user";
+            session: "session";
+            global: "global";
+        }>>;
+        ttlMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            pepper: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        sqlite: import("@frontmcp/lazy-zod").ZodObject<{
+            path: import("@frontmcp/lazy-zod").ZodString;
+            encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                secret: import("@frontmcp/lazy-zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            ttlCleanupIntervalMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+            walMode: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
+            user: "user";
+            session: "session";
+            global: "global";
+        }>>;
+        ttlMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            pepper: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        redis: import("@frontmcp/lazy-zod").ZodObject<{
+            host: import("@frontmcp/lazy-zod").ZodString;
+            port: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+            password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            db: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+            tls: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
+            keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
+            defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
+            user: "user";
+            session: "session";
+            global: "global";
+        }>>;
+        ttlMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            pepper: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        backend: import("zod").ZodCustom<import("./interfaces").SecureStoreCustomBackend, import("./interfaces").SecureStoreCustomBackend>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
+            user: "user";
+            session: "session";
+            global: "global";
+        }>>;
+        ttlMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            pepper: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>]>>;
     allowDefaultPublic: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
     anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
@@ -87,6 +225,8 @@ export declare const appAuthOptionsSchema: import("@frontmcp/lazy-zod").ZodUnion
             format: "format";
             strict: "strict";
         }>>;
+        minProviders: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        requiredProviders: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
     }, import("zod/v4/core").$strip>>;
     refresh: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
         enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
@@ -140,6 +280,14 @@ export declare const appAuthOptionsSchema: import("@frontmcp/lazy-zod").ZodUnion
             maxRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>>;
+    ui: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodEnum<{
+        error: "error";
+        login: "login";
+        consent: "consent";
+        incremental: "incremental";
+        federated: "federated";
+    }> & import("zod/v4/core").$partial, import("@frontmcp/lazy-zod").ZodString>>;
+    extras: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<import("./interfaces").AuthExtraHandler, import("./interfaces").AuthExtraHandler>>>;
     mode: import("@frontmcp/lazy-zod").ZodLiteral<"local">;
     standalone: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
     excludeFromParent: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
@@ -161,6 +309,74 @@ export declare const appAuthOptionsSchema: import("@frontmcp/lazy-zod").ZodUnion
             keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
             defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
         }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        sqlite: import("@frontmcp/lazy-zod").ZodObject<{
+            path: import("@frontmcp/lazy-zod").ZodString;
+            encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                secret: import("@frontmcp/lazy-zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            ttlCleanupIntervalMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+            walMode: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>]>>;
+    secureStore: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodUnion<readonly [import("@frontmcp/lazy-zod").ZodLiteral<"memory">, import("@frontmcp/lazy-zod").ZodObject<{
+        scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
+            user: "user";
+            session: "session";
+            global: "global";
+        }>>;
+        ttlMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            pepper: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        sqlite: import("@frontmcp/lazy-zod").ZodObject<{
+            path: import("@frontmcp/lazy-zod").ZodString;
+            encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+                secret: import("@frontmcp/lazy-zod").ZodString;
+            }, import("zod/v4/core").$strip>>;
+            ttlCleanupIntervalMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+            walMode: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
+            user: "user";
+            session: "session";
+            global: "global";
+        }>>;
+        ttlMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            pepper: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        redis: import("@frontmcp/lazy-zod").ZodObject<{
+            host: import("@frontmcp/lazy-zod").ZodString;
+            port: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+            password: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+            db: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+            tls: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodBoolean>>;
+            keyPrefix: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>>;
+            defaultTtlMs: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>>;
+        }, import("zod/v4/core").$strip>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
+            user: "user";
+            session: "session";
+            global: "global";
+        }>>;
+        ttlMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            pepper: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
+        backend: import("zod").ZodCustom<import("./interfaces").SecureStoreCustomBackend, import("./interfaces").SecureStoreCustomBackend>;
+    }, import("zod/v4/core").$strip>, import("@frontmcp/lazy-zod").ZodObject<{
+        scope: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodEnum<{
+            user: "user";
+            session: "session";
+            global: "global";
+        }>>;
+        ttlMs: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        encryption: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
+            pepper: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
+        }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>]>>;
     allowDefaultPublic: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
     anonymousScopes: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
@@ -185,6 +401,8 @@ export declare const appAuthOptionsSchema: import("@frontmcp/lazy-zod").ZodUnion
             format: "format";
             strict: "strict";
         }>>;
+        minProviders: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodNumber>;
+        requiredProviders: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodArray<import("@frontmcp/lazy-zod").ZodString>>;
     }, import("zod/v4/core").$strip>>;
     refresh: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodObject<{
         enabled: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodBoolean>;
@@ -238,6 +456,14 @@ export declare const appAuthOptionsSchema: import("@frontmcp/lazy-zod").ZodUnion
             maxRedirects: import("@frontmcp/lazy-zod").ZodDefault<import("@frontmcp/lazy-zod").ZodNumber>;
         }, import("zod/v4/core").$strip>>;
     }, import("zod/v4/core").$strip>>;
+    ui: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodEnum<{
+        error: "error";
+        login: "login";
+        consent: "consent";
+        incremental: "incremental";
+        federated: "federated";
+    }> & import("zod/v4/core").$partial, import("@frontmcp/lazy-zod").ZodString>>;
+    extras: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodRecord<import("@frontmcp/lazy-zod").ZodString, import("zod").ZodCustom<import("./interfaces").AuthExtraHandler, import("./interfaces").AuthExtraHandler>>>;
     provider: import("@frontmcp/lazy-zod").ZodString;
     clientId: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;
     clientSecret: import("@frontmcp/lazy-zod").ZodOptional<import("@frontmcp/lazy-zod").ZodString>;

package/options/app-auth.schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-auth.schema.d.ts","sourceRoot":"","sources":["../../src/options/app-auth.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAqCvC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAK/B,CAAC;AAMH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}
+{"version":3,"file":"app-auth.schema.d.ts","sourceRoot":"","sources":["../../src/options/app-auth.schema.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,oBAAoB,CAAC;AAqCvC,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCAK/B,CAAC;AAMH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/options/index.d.ts

@@ -1,11 +1,11 @@
-export type { PublicAccessConfig, LocalSigningConfig, ProviderConfig, RemoteProviderConfig, TokenStorageConfig, TokenRefreshConfig, SkippedAppBehavior, ConsentConfig, FederatedAuthConfig, IncrementalAuthConfig, PublicAuthOptionsInterface, TransparentAuthOptionsInterface, LocalAuthOptionsInterface, RemoteAuthOptionsInterface, LocalOrRemoteAuthOptionsInterface, AuthOptionsInterface, AuthMode, OrchestratedLocalOptionsInterface, OrchestratedRemoteOptionsInterface, OrchestratedAuthOptionsInterface, OrchestratedType, } from './interfaces';
-export { publicAccessConfigSchema, localSigningConfigSchema, providerConfigSchema, remoteProviderConfigSchema, flatRemoteProviderFields, tokenStorageConfigSchema, tokenRefreshConfigSchema, skippedAppBehaviorSchema, consentConfigSchema, federatedAuthConfigSchema, incrementalAuthConfigSchema, } from './shared.schemas';
-export type { PublicAccessConfig as PublicAccessConfigZod, PublicAccessConfigInput, LocalSigningConfig as LocalSigningConfigZod, LocalSigningConfigInput, ProviderConfig as ProviderConfigZod, ProviderConfigInput, RemoteProviderConfig as RemoteProviderConfigZod, RemoteProviderConfigInput, TokenStorageConfig as TokenStorageConfigZod, TokenStorageConfigInput, TokenRefreshConfig as TokenRefreshConfigZod, TokenRefreshConfigInput, SkippedAppBehavior as SkippedAppBehaviorZod, ConsentConfig as ConsentConfigZod, ConsentConfigInput, FederatedAuthConfig as FederatedAuthConfigZod, FederatedAuthConfigInput, IncrementalAuthConfig as IncrementalAuthConfigZod, IncrementalAuthConfigInput, RedisConfig, } from './shared.schemas';
+export type { PublicAccessConfig, LocalSigningConfig, ProviderConfig, RemoteProviderConfig, TokenStorageConfig, TokenStorageSqliteConfig, SecureStoreConfig, SecureStoreScope as SecureStoreScopeType, SecureStoreEncryptionConfig, SecureStoreCustomBackend, TokenRefreshConfig, SkippedAppBehavior, ConsentConfig, FederatedAuthConfig, IncrementalAuthConfig, UpstreamProviderOptions, LocalDcrConfig, LocalDcrClient, PublicAuthOptionsInterface, TransparentAuthOptionsInterface, LocalAuthOptionsInterface, RemoteAuthOptionsInterface, LocalOrRemoteAuthOptionsInterface, AuthOptionsInterface, AuthMode, LoginFieldConfig, LoginSubjectConfig, LoginConfig, LoginRenderContext, AuthenticateInput, AuthenticateContext, AuthenticateCredential, AuthenticateSuccess, AuthenticateFailure, AuthenticateResult, AuthenticateFn, AuthSlot, AuthUiMap, AuthExtraContext, AuthExtraResult, AuthExtraHandler, AuthExtrasMap, OrchestratedLocalOptionsInterface, OrchestratedRemoteOptionsInterface, OrchestratedAuthOptionsInterface, OrchestratedType, } from './interfaces';
+export { publicAccessConfigSchema, localSigningConfigSchema, providerConfigSchema, remoteProviderConfigSchema, flatRemoteProviderFields, tokenStorageConfigSchema, tokenStorageSqliteSchema, secureStoreConfigSchema, secureStoreScopeSchema, secureStoreEncryptionSchema, secureStoreCustomBackendSchema, tokenRefreshConfigSchema, skippedAppBehaviorSchema, consentConfigSchema, federatedAuthConfigSchema, incrementalAuthConfigSchema, upstreamProviderSchema, localDcrClientSchema, localDcrConfigSchema, } from './shared.schemas';
+export type { PublicAccessConfig as PublicAccessConfigZod, PublicAccessConfigInput, LocalSigningConfig as LocalSigningConfigZod, LocalSigningConfigInput, ProviderConfig as ProviderConfigZod, ProviderConfigInput, RemoteProviderConfig as RemoteProviderConfigZod, RemoteProviderConfigInput, TokenStorageConfig as TokenStorageConfigZod, TokenStorageConfigInput, SecureStoreConfig as SecureStoreConfigZod, SecureStoreConfigInput, SecureStoreScope as SecureStoreScopeZod, SecureStoreEncryptionConfig as SecureStoreEncryptionConfigZod, TokenRefreshConfig as TokenRefreshConfigZod, TokenRefreshConfigInput, SkippedAppBehavior as SkippedAppBehaviorZod, ConsentConfig as ConsentConfigZod, ConsentConfigInput, FederatedAuthConfig as FederatedAuthConfigZod, FederatedAuthConfigInput, IncrementalAuthConfig as IncrementalAuthConfigZod, IncrementalAuthConfigInput, UpstreamProviderOptions as UpstreamProviderOptionsZod, UpstreamProviderOptionsInput, LocalDcrClientConfig as LocalDcrClientConfigZod, LocalDcrClientConfigInput, LocalDcrConfig as LocalDcrConfigZod, LocalDcrConfigInput, RedisConfig, } from './shared.schemas';
 export { publicAuthOptionsSchema } from './public.schema';
 export type { PublicAuthOptions, PublicAuthOptionsInput } from './public.schema';
 export { transparentAuthOptionsSchema } from './transparent.schema';
 export type { TransparentAuthOptions, TransparentAuthOptionsInput } from './transparent.schema';
-export { localAuthSchema, remoteAuthSchema, orchestratedLocalSchema, orchestratedRemoteSchema, } from './orchestrated.schema';
+export { localAuthSchema, remoteAuthSchema, loginConfigSchema, authenticateFnSchema, orchestratedLocalSchema, orchestratedRemoteSchema, } from './orchestrated.schema';
 export type { LocalAuthOptions, LocalAuthOptionsInput, RemoteAuthOptions, RemoteAuthOptionsInput, LocalOrRemoteAuthOptions, LocalOrRemoteAuthOptionsInput, OrchestratedLocalOptions, OrchestratedLocalOptionsInput, OrchestratedRemoteOptions, OrchestratedRemoteOptionsInput, OrchestratedAuthOptions, OrchestratedAuthOptionsInput, } from './orchestrated.schema';
 export { authOptionsSchema } from './schema';
 export type { AuthOptions, AuthOptionsInput, AuthMode as AuthModeZod } from './schema';

package/options/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/options/index.ts"],"names":[],"mappings":"AAMA,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,0BAA0B,EAC1B,+BAA+B,EAC/B,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,EACjC,oBAAoB,EACpB,QAAQ,EAER,iCAAiC,EACjC,kCAAkC,EAClC,gCAAgC,EAChC,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAKtB,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,kBAAkB,IAAI,qBAAqB,EAC3C,uBAAuB,EACvB,kBAAkB,IAAI,qBAAqB,EAC3C,uBAAuB,EACvB,cAAc,IAAI,iBAAiB,EACnC,mBAAmB,EACnB,oBAAoB,IAAI,uBAAuB,EAC/C,yBAAyB,EACzB,kBAAkB,IAAI,qBAAqB,EAC3C,uBAAuB,EACvB,kBAAkB,IAAI,qBAAqB,EAC3C,uBAAuB,EACvB,kBAAkB,IAAI,qBAAqB,EAC3C,aAAa,IAAI,gBAAgB,EACjC,kBAAkB,EAClB,mBAAmB,IAAI,sBAAsB,EAC7C,wBAAwB,EACxB,qBAAqB,IAAI,wBAAwB,EACjD,0BAA0B,EAC1B,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAKjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,YAAY,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAKhG,OAAO,EACL,eAAe,EACf,gBAAgB,EAEhB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAE7B,wBAAwB,EACxB,6BAA6B,EAC7B,yBAAyB,EACzB,8BAA8B,EAC9B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,UAAU,CAAC;AAKvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAK7E,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/options/index.ts"],"names":[],"mappings":"AAMA,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EAExB,iBAAiB,EACjB,gBAAgB,IAAI,oBAAoB,EACxC,2BAA2B,EAC3B,wBAAwB,EACxB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EAEvB,cAAc,EACd,cAAc,EACd,0BAA0B,EAC1B,+BAA+B,EAC/B,yBAAyB,EACzB,0BAA0B,EAC1B,iCAAiC,EACjC,oBAAoB,EACpB,QAAQ,EAER,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EAEd,QAAQ,EACR,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,aAAa,EAEb,iCAAiC,EACjC,kCAAkC,EAClC,gCAAgC,EAChC,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAKtB,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EAExB,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,EAC3B,8BAA8B,EAC9B,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,kBAAkB,IAAI,qBAAqB,EAC3C,uBAAuB,EACvB,kBAAkB,IAAI,qBAAqB,EAC3C,uBAAuB,EACvB,cAAc,IAAI,iBAAiB,EACnC,mBAAmB,EACnB,oBAAoB,IAAI,uBAAuB,EAC/C,yBAAyB,EACzB,kBAAkB,IAAI,qBAAqB,EAC3C,uBAAuB,EAEvB,iBAAiB,IAAI,oBAAoB,EACzC,sBAAsB,EACtB,gBAAgB,IAAI,mBAAmB,EACvC,2BAA2B,IAAI,8BAA8B,EAC7D,kBAAkB,IAAI,qBAAqB,EAC3C,uBAAuB,EACvB,kBAAkB,IAAI,qBAAqB,EAC3C,aAAa,IAAI,gBAAgB,EACjC,kBAAkB,EAClB,mBAAmB,IAAI,sBAAsB,EAC7C,wBAAwB,EACxB,qBAAqB,IAAI,wBAAwB,EACjD,0BAA0B,EAC1B,uBAAuB,IAAI,0BAA0B,EACrD,4BAA4B,EAC5B,oBAAoB,IAAI,uBAAuB,EAC/C,yBAAyB,EACzB,cAAc,IAAI,iBAAiB,EACnC,mBAAmB,EACnB,WAAW,GACZ,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAKjF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,YAAY,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAKhG,OAAO,EACL,eAAe,EACf,gBAAgB,EAEhB,iBAAiB,EACjB,oBAAoB,EAEpB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,EAE7B,wBAAwB,EACxB,6BAA6B,EAC7B,yBAAyB,EACzB,8BAA8B,EAC9B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAK/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,UAAU,CAAC;AAKvF,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAK7E,OAAO,EACL,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,SAAS,CAAC"}