@ketvietlab/ketsuite 0.1.1

package/dist/modules/oauth_backend/menus.js

@@ -0,0 +1,17 @@
+export const menus = {
+    'admin.oauth-providers': {
+        parent: 'admin.config',
+        label: 'menu.providers',
+        path: '/admin/oauth/providers',
+        needs: 'oauth.manageOptions',
+        sequence: 28,
+    },
+    'admin.oauth-identities': {
+        parent: 'admin.config',
+        label: 'menu.identities',
+        path: '/admin/oauth/identities',
+        needs: 'oauth.manageOptions',
+        sequence: 29,
+    },
+};
+//# sourceMappingURL=menus.js.map

package/dist/modules/oauth_backend/menus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"menus.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/oauth_backend/menus.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,KAAK,GAA4B;IAC5C,uBAAuB,EAAE;QACvB,MAAM,EAAE,cAAc;QACtB,KAAK,EAAE,gBAAgB;QACvB,IAAI,EAAE,wBAAwB;QAC9B,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,EAAE;KACb;IACD,wBAAwB,EAAE;QACxB,MAAM,EAAE,cAAc;QACtB,KAAK,EAAE,iBAAiB;QACxB,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,qBAAqB;QAC5B,QAAQ,EAAE,EAAE;KACb;CACF,CAAA"}

package/dist/modules/oauth_backend/messages.d.ts

@@ -0,0 +1,169 @@
+export declare const messages: {
+    vi: {
+        'app.title': string;
+        'app.summary': string;
+        'app.category': string;
+        'menu.providers': string;
+        'menu.identities': string;
+        'providers.title': string;
+        'providers.create': string;
+        'providers.empty': string;
+        'providers.emptyHint': string;
+        'identities.title': string;
+        'identities.link': string;
+        'identities.verifiedSubject': string;
+        'identities.linkHint': string;
+        'identities.empty': string;
+        'identities.emptyHint': string;
+        'action.create': string;
+        'action.save': string;
+        'action.cancel': string;
+        'action.archive': string;
+        'action.restore': string;
+        'action.identities': string;
+        'action.providers': string;
+        'action.viewIdentities': string;
+        'action.linkIdentity': string;
+        'action.link': string;
+        'action.unlink': string;
+        'filter.includeArchived': string;
+        'filter.activeOnly': string;
+        'field.name': string;
+        'field.code': string;
+        'field.protocol': string;
+        'field.issuer': string;
+        'field.clientId': string;
+        'field.clientAuthMethod': string;
+        'field.clientSecretEnv': string;
+        'field.clientSecretEnvHint': string;
+        'field.scopes': string;
+        'field.redirectUri': string;
+        'field.redirectUriHint': string;
+        'field.algorithms': string;
+        'field.sequence': string;
+        'field.allowLinking': string;
+        'field.autoProvision': string;
+        'field.requireVerifiedEmail': string;
+        'field.defaultCompany': string;
+        'field.defaultRole': string;
+        'field.active': string;
+        'field.state': string;
+        'field.provider': string;
+        'field.user': string;
+        'field.subject': string;
+        'field.email': string;
+        'field.displayName': string;
+        'field.preferredUsername': string;
+        'field.lastLogin': string;
+        'field.actions': string;
+        'option.none': string;
+        'clientAuth.none': string;
+        'state.active': string;
+        'state.archived': string;
+        'state.enabled': string;
+        'state.disabled': string;
+        'state.never': string;
+        'status.title': string;
+        'configuration.title': string;
+        'configuration.hint': string;
+        'integration.title': string;
+        'integration.hint': string;
+        'integration.values': string;
+        'error.title': string;
+        'error.notFound': string;
+        'error.unauthorized': string;
+        'link.title': string;
+        'link.choose': string;
+        'link.hint': string;
+        'link.empty': string;
+        'link.emptyHint': string;
+        'link.ready': string;
+        'link.alreadyLinked': string;
+        'link.action': string;
+        'link.linkAnother': string;
+    };
+    en: {
+        'app.title': string;
+        'app.summary': string;
+        'app.category': string;
+        'menu.providers': string;
+        'menu.identities': string;
+        'providers.title': string;
+        'providers.create': string;
+        'providers.empty': string;
+        'providers.emptyHint': string;
+        'identities.title': string;
+        'identities.link': string;
+        'identities.verifiedSubject': string;
+        'identities.linkHint': string;
+        'identities.empty': string;
+        'identities.emptyHint': string;
+        'action.create': string;
+        'action.save': string;
+        'action.cancel': string;
+        'action.archive': string;
+        'action.restore': string;
+        'action.identities': string;
+        'action.providers': string;
+        'action.viewIdentities': string;
+        'action.linkIdentity': string;
+        'action.link': string;
+        'action.unlink': string;
+        'filter.includeArchived': string;
+        'filter.activeOnly': string;
+        'field.name': string;
+        'field.code': string;
+        'field.protocol': string;
+        'field.issuer': string;
+        'field.clientId': string;
+        'field.clientAuthMethod': string;
+        'field.clientSecretEnv': string;
+        'field.clientSecretEnvHint': string;
+        'field.scopes': string;
+        'field.redirectUri': string;
+        'field.redirectUriHint': string;
+        'field.algorithms': string;
+        'field.sequence': string;
+        'field.allowLinking': string;
+        'field.autoProvision': string;
+        'field.requireVerifiedEmail': string;
+        'field.defaultCompany': string;
+        'field.defaultRole': string;
+        'field.active': string;
+        'field.state': string;
+        'field.provider': string;
+        'field.user': string;
+        'field.subject': string;
+        'field.email': string;
+        'field.displayName': string;
+        'field.preferredUsername': string;
+        'field.lastLogin': string;
+        'field.actions': string;
+        'option.none': string;
+        'clientAuth.none': string;
+        'state.active': string;
+        'state.archived': string;
+        'state.enabled': string;
+        'state.disabled': string;
+        'state.never': string;
+        'status.title': string;
+        'configuration.title': string;
+        'configuration.hint': string;
+        'integration.title': string;
+        'integration.hint': string;
+        'integration.values': string;
+        'error.title': string;
+        'error.notFound': string;
+        'error.unauthorized': string;
+        'link.title': string;
+        'link.choose': string;
+        'link.hint': string;
+        'link.empty': string;
+        'link.emptyHint': string;
+        'link.ready': string;
+        'link.alreadyLinked': string;
+        'link.action': string;
+        'link.linkAnother': string;
+    };
+};
+//# sourceMappingURL=messages.d.ts.map

package/dist/modules/oauth_backend/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/oauth_backend/messages.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ;IACnB,EAAE;QACA,WAAW;QACX,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,iBAAiB;QACjB,iBAAiB;QACjB,kBAAkB;QAClB,iBAAiB;QACjB,qBAAqB;QACrB,kBAAkB;QAClB,iBAAiB;QACjB,4BAA4B;QAC5B,qBAAqB;QACrB,kBAAkB;QAClB,sBAAsB;QAEtB,eAAe;QACf,aAAa;QACb,eAAe;QACf,gBAAgB;QAChB,gBAAgB;QAChB,mBAAmB;QACnB,kBAAkB;QAClB,uBAAuB;QACvB,qBAAqB;QACrB,aAAa;QACb,eAAe;QACf,wBAAwB;QACxB,mBAAmB;QACnB,YAAY;QACZ,YAAY;QACZ,gBAAgB;QAChB,cAAc;QACd,gBAAgB;QAChB,wBAAwB;QACxB,uBAAuB;QACvB,2BAA2B;QAC3B,cAAc;QACd,mBAAmB;QACnB,uBAAuB;QACvB,kBAAkB;QAClB,gBAAgB;QAChB,oBAAoB;QACpB,qBAAqB;QACrB,4BAA4B;QAC5B,sBAAsB;QACtB,mBAAmB;QACnB,cAAc;QACd,aAAa;QACb,gBAAgB;QAChB,YAAY;QACZ,eAAe;QACf,aAAa;QACb,mBAAmB;QACnB,yBAAyB;QACzB,iBAAiB;QACjB,eAAe;QACf,aAAa;QACb,iBAAiB;QACjB,cAAc;QACd,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,aAAa;QACb,cAAc;QACd,qBAAqB;QACrB,oBAAoB;QAEpB,mBAAmB;QACnB,kBAAkB;QAClB,oBAAoB;QACpB,aAAa;QACb,gBAAgB;QAChB,oBAAoB;QACpB,YAAY;QACZ,aAAa;QACb,WAAW;QAEX,YAAY;QACZ,gBAAgB;QAChB,YAAY;QACZ,oBAAoB;QACpB,aAAa;QACb,kBAAkB;;IAEpB,EAAE;QACA,WAAW;QACX,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,iBAAiB;QACjB,iBAAiB;QACjB,kBAAkB;QAClB,iBAAiB;QACjB,qBAAqB;QACrB,kBAAkB;QAClB,iBAAiB;QACjB,4BAA4B;QAC5B,qBAAqB;QACrB,kBAAkB;QAClB,sBAAsB;QAEtB,eAAe;QACf,aAAa;QACb,eAAe;QACf,gBAAgB;QAChB,gBAAgB;QAChB,mBAAmB;QACnB,kBAAkB;QAClB,uBAAuB;QACvB,qBAAqB;QACrB,aAAa;QACb,eAAe;QACf,wBAAwB;QACxB,mBAAmB;QACnB,YAAY;QACZ,YAAY;QACZ,gBAAgB;QAChB,cAAc;QACd,gBAAgB;QAChB,wBAAwB;QACxB,uBAAuB;QACvB,2BAA2B;QAE3B,cAAc;QACd,mBAAmB;QACnB,uBAAuB;QACvB,kBAAkB;QAClB,gBAAgB;QAChB,oBAAoB;QACpB,qBAAqB;QACrB,4BAA4B;QAC5B,sBAAsB;QACtB,mBAAmB;QACnB,cAAc;QACd,aAAa;QACb,gBAAgB;QAChB,YAAY;QACZ,eAAe;QACf,aAAa;QACb,mBAAmB;QACnB,yBAAyB;QACzB,iBAAiB;QACjB,eAAe;QACf,aAAa;QACb,iBAAiB;QACjB,cAAc;QACd,gBAAgB;QAChB,eAAe;QACf,gBAAgB;QAChB,aAAa;QACb,cAAc;QACd,qBAAqB;QACrB,oBAAoB;QAEpB,mBAAmB;QACnB,kBAAkB;QAClB,oBAAoB;QACpB,aAAa;QACb,gBAAgB;QAChB,oBAAoB;QACpB,YAAY;QACZ,aAAa;QACb,WAAW;QAEX,YAAY;QACZ,gBAAgB;QAChB,YAAY;QACZ,oBAAoB;QACpB,aAAa;QACb,kBAAkB;;CAErB,CAAA"}

package/dist/modules/oauth_backend/messages.js

@@ -0,0 +1,169 @@
+export const messages = {
+    vi: {
+        'app.title': 'OAuth trong quản trị',
+        'app.summary': 'Cấu hình đăng nhập OIDC và quản lý danh tính đã liên kết.',
+        'app.category': 'Hệ thống',
+        'menu.providers': 'Nhà cung cấp đăng nhập',
+        'menu.identities': 'Danh tính ngoài',
+        'providers.title': 'Nhà cung cấp đăng nhập',
+        'providers.create': 'Thêm nhà cung cấp',
+        'providers.empty': 'Chưa có nhà cung cấp',
+        'providers.emptyHint': 'Thêm một OIDC provider để hiện lựa chọn trên màn hình đăng nhập.',
+        'identities.title': 'Danh tính ngoài',
+        'identities.link': 'Liên kết danh tính',
+        'identities.verifiedSubject': 'Issuer và subject đã xác minh',
+        'identities.linkHint': 'Email chỉ là hồ sơ; cặp provider và subject mới là khóa đăng nhập.',
+        'identities.empty': 'Chưa có danh tính liên kết',
+        'identities.emptyHint': 'Danh tính xuất hiện sau khi quản trị viên liên kết hoặc auto-provision thành công.',
+        'action.create': 'Thêm nhà cung cấp',
+        'action.save': 'Lưu',
+        'action.cancel': 'Hủy',
+        'action.archive': 'Lưu trữ',
+        'action.restore': 'Khôi phục',
+        'action.identities': 'Xem danh tính',
+        'action.providers': 'Nhà cung cấp',
+        'action.viewIdentities': 'Danh tính của nhà cung cấp',
+        'action.linkIdentity': 'Liên kết danh tính',
+        'action.link': 'Liên kết',
+        'action.unlink': 'Gỡ liên kết',
+        'filter.includeArchived': 'Gồm đã lưu trữ',
+        'filter.activeOnly': 'Chỉ đang hoạt động',
+        'field.name': 'Tên hiển thị',
+        'field.code': 'Mã',
+        'field.protocol': 'Giao thức',
+        'field.issuer': 'Issuer',
+        'field.clientId': 'Client ID',
+        'field.clientAuthMethod': 'Xác thực client',
+        'field.clientSecretEnv': 'Biến môi trường client secret',
+        'field.clientSecretEnvHint': 'KetSuite chỉ lưu tên biến; secret không vào database hoặc HTML.',
+        'field.scopes': 'Scopes',
+        'field.redirectUri': 'Redirect URI',
+        'field.redirectUriHint': 'Để trống khi tạo để dùng origin hiện tại và callback theo mã provider.',
+        'field.algorithms': 'Thuật toán chữ ký cho phép',
+        'field.sequence': 'Thứ tự',
+        'field.allowLinking': 'Cho phép người dùng liên kết',
+        'field.autoProvision': 'Tự tạo người dùng',
+        'field.requireVerifiedEmail': 'Yêu cầu email đã xác minh khi tự tạo',
+        'field.defaultCompany': 'Công ty mặc định',
+        'field.defaultRole': 'Vai trò mặc định',
+        'field.active': 'Hoạt động',
+        'field.state': 'Trạng thái',
+        'field.provider': 'Nhà cung cấp',
+        'field.user': 'Người dùng KetSuite',
+        'field.subject': 'Subject',
+        'field.email': 'Email hồ sơ',
+        'field.displayName': 'Tên hồ sơ',
+        'field.preferredUsername': 'Tên đăng nhập gợi ý',
+        'field.lastLogin': 'Lần đăng nhập cuối',
+        'field.actions': 'Thao tác',
+        'option.none': '— Không chọn —',
+        'clientAuth.none': 'Public client (không secret)',
+        'state.active': 'Đang hoạt động',
+        'state.archived': 'Đã lưu trữ',
+        'state.enabled': 'Bật',
+        'state.disabled': 'Tắt',
+        'state.never': 'Chưa đăng nhập',
+        'status.title': 'Trạng thái nhà cung cấp',
+        'configuration.title': 'Cấu hình OpenID Connect',
+        'configuration.hint': 'Discovery, PKCE và kiểm tra ID token dùng chuẩn chung, không có logic riêng ZITADEL.',
+        'integration.title': 'Điểm tích hợp',
+        'integration.hint': 'Đăng ký chính xác redirect URI này tại nhà cung cấp.',
+        'integration.values': 'Giá trị triển khai',
+        'error.title': 'Không thể hoàn tất thao tác',
+        'error.notFound': 'Không tìm thấy nhà cung cấp.',
+        'error.unauthorized': 'Cần đăng nhập để tiếp tục.',
+        'link.title': 'Danh tính đăng nhập ngoài',
+        'link.choose': 'Chọn nhà cung cấp',
+        'link.hint': 'KetSuite sẽ xác minh issuer, subject và nonce trước khi gắn danh tính vào tài khoản hiện tại.',
+        'link.empty': 'Không có nhà cung cấp hoạt động',
+        'link.emptyHint': 'Quản trị viên cần bật ít nhất một OIDC provider.',
+        'link.ready': 'Có thể liên kết với tài khoản hiện tại.',
+        'link.alreadyLinked': 'Tài khoản đã có danh tính từ nhà cung cấp này.',
+        'link.action': 'Liên kết danh tính ngoài',
+        'link.linkAnother': 'Liên kết danh tính khác',
+    },
+    en: {
+        'app.title': 'OAuth administration',
+        'app.summary': 'Configure OIDC sign-in and manage linked identities.',
+        'app.category': 'System',
+        'menu.providers': 'Sign-in providers',
+        'menu.identities': 'External identities',
+        'providers.title': 'Sign-in providers',
+        'providers.create': 'Add provider',
+        'providers.empty': 'No providers yet',
+        'providers.emptyHint': 'Add an OIDC provider to show it on the sign-in screen.',
+        'identities.title': 'External identities',
+        'identities.link': 'Link identity',
+        'identities.verifiedSubject': 'Verified issuer and subject',
+        'identities.linkHint': 'Email is profile data; provider and subject form the sign-in key.',
+        'identities.empty': 'No linked identities',
+        'identities.emptyHint': 'Identities appear after an administrator links one or auto-provisioning succeeds.',
+        'action.create': 'Add provider',
+        'action.save': 'Save',
+        'action.cancel': 'Cancel',
+        'action.archive': 'Archive',
+        'action.restore': 'Restore',
+        'action.identities': 'View identities',
+        'action.providers': 'Providers',
+        'action.viewIdentities': 'Provider identities',
+        'action.linkIdentity': 'Link identity',
+        'action.link': 'Link',
+        'action.unlink': 'Unlink',
+        'filter.includeArchived': 'Include archived',
+        'filter.activeOnly': 'Active only',
+        'field.name': 'Display name',
+        'field.code': 'Code',
+        'field.protocol': 'Protocol',
+        'field.issuer': 'Issuer',
+        'field.clientId': 'Client ID',
+        'field.clientAuthMethod': 'Client authentication',
+        'field.clientSecretEnv': 'Client secret environment variable',
+        'field.clientSecretEnvHint': 'KetSuite stores only the variable name; the secret never enters the database or HTML.',
+        'field.scopes': 'Scopes',
+        'field.redirectUri': 'Redirect URI',
+        'field.redirectUriHint': 'Leave blank when creating to use the current origin and provider callback.',
+        'field.algorithms': 'Allowed signature algorithms',
+        'field.sequence': 'Sequence',
+        'field.allowLinking': 'Allow user linking',
+        'field.autoProvision': 'Auto-provision users',
+        'field.requireVerifiedEmail': 'Require verified email for auto-provisioning',
+        'field.defaultCompany': 'Default company',
+        'field.defaultRole': 'Default role',
+        'field.active': 'Active',
+        'field.state': 'Status',
+        'field.provider': 'Provider',
+        'field.user': 'KetSuite user',
+        'field.subject': 'Subject',
+        'field.email': 'Profile email',
+        'field.displayName': 'Profile name',
+        'field.preferredUsername': 'Preferred username',
+        'field.lastLogin': 'Last sign-in',
+        'field.actions': 'Actions',
+        'option.none': '— None —',
+        'clientAuth.none': 'Public client (no secret)',
+        'state.active': 'Active',
+        'state.archived': 'Archived',
+        'state.enabled': 'Enabled',
+        'state.disabled': 'Disabled',
+        'state.never': 'Never signed in',
+        'status.title': 'Provider status',
+        'configuration.title': 'OpenID Connect configuration',
+        'configuration.hint': 'Discovery, PKCE and ID token verification are standard and contain no ZITADEL-specific logic.',
+        'integration.title': 'Integration point',
+        'integration.hint': 'Register this exact redirect URI with the provider.',
+        'integration.values': 'Deployment values',
+        'error.title': 'The operation could not be completed',
+        'error.notFound': 'Provider not found.',
+        'error.unauthorized': 'Sign in to continue.',
+        'link.title': 'External sign-in identities',
+        'link.choose': 'Choose a provider',
+        'link.hint': 'KetSuite verifies issuer, subject and nonce before linking an identity to the current account.',
+        'link.empty': 'No active providers',
+        'link.emptyHint': 'An administrator must enable at least one OIDC provider.',
+        'link.ready': 'Ready to link with the current account.',
+        'link.alreadyLinked': 'This account already has an identity from the provider.',
+        'link.action': 'Link external identity',
+        'link.linkAnother': 'Link another identity',
+    },
+};
+//# sourceMappingURL=messages.js.map

package/dist/modules/oauth_backend/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/oauth_backend/messages.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,EAAE,EAAE;QACF,WAAW,EAAE,sBAAsB;QACnC,aAAa,EAAE,2DAA2D;QAC1E,cAAc,EAAE,UAAU;QAC1B,gBAAgB,EAAE,wBAAwB;QAC1C,iBAAiB,EAAE,iBAAiB;QACpC,iBAAiB,EAAE,wBAAwB;QAC3C,kBAAkB,EAAE,mBAAmB;QACvC,iBAAiB,EAAE,sBAAsB;QACzC,qBAAqB,EAAE,kEAAkE;QACzF,kBAAkB,EAAE,iBAAiB;QACrC,iBAAiB,EAAE,oBAAoB;QACvC,4BAA4B,EAAE,+BAA+B;QAC7D,qBAAqB,EAAE,oEAAoE;QAC3F,kBAAkB,EAAE,4BAA4B;QAChD,sBAAsB,EACpB,oFAAoF;QACtF,eAAe,EAAE,mBAAmB;QACpC,aAAa,EAAE,KAAK;QACpB,eAAe,EAAE,KAAK;QACtB,gBAAgB,EAAE,SAAS;QAC3B,gBAAgB,EAAE,WAAW;QAC7B,mBAAmB,EAAE,eAAe;QACpC,kBAAkB,EAAE,cAAc;QAClC,uBAAuB,EAAE,4BAA4B;QACrD,qBAAqB,EAAE,oBAAoB;QAC3C,aAAa,EAAE,UAAU;QACzB,eAAe,EAAE,aAAa;QAC9B,wBAAwB,EAAE,gBAAgB;QAC1C,mBAAmB,EAAE,oBAAoB;QACzC,YAAY,EAAE,cAAc;QAC5B,YAAY,EAAE,IAAI;QAClB,gBAAgB,EAAE,WAAW;QAC7B,cAAc,EAAE,QAAQ;QACxB,gBAAgB,EAAE,WAAW;QAC7B,wBAAwB,EAAE,iBAAiB;QAC3C,uBAAuB,EAAE,+BAA+B;QACxD,2BAA2B,EAAE,iEAAiE;QAC9F,cAAc,EAAE,QAAQ;QACxB,mBAAmB,EAAE,cAAc;QACnC,uBAAuB,EAAE,wEAAwE;QACjG,kBAAkB,EAAE,4BAA4B;QAChD,gBAAgB,EAAE,QAAQ;QAC1B,oBAAoB,EAAE,8BAA8B;QACpD,qBAAqB,EAAE,mBAAmB;QAC1C,4BAA4B,EAAE,sCAAsC;QACpE,sBAAsB,EAAE,kBAAkB;QAC1C,mBAAmB,EAAE,kBAAkB;QACvC,cAAc,EAAE,WAAW;QAC3B,aAAa,EAAE,YAAY;QAC3B,gBAAgB,EAAE,cAAc;QAChC,YAAY,EAAE,qBAAqB;QACnC,eAAe,EAAE,SAAS;QAC1B,aAAa,EAAE,aAAa;QAC5B,mBAAmB,EAAE,WAAW;QAChC,yBAAyB,EAAE,qBAAqB;QAChD,iBAAiB,EAAE,oBAAoB;QACvC,eAAe,EAAE,UAAU;QAC3B,aAAa,EAAE,gBAAgB;QAC/B,iBAAiB,EAAE,8BAA8B;QACjD,cAAc,EAAE,gBAAgB;QAChC,gBAAgB,EAAE,YAAY;QAC9B,eAAe,EAAE,KAAK;QACtB,gBAAgB,EAAE,KAAK;QACvB,aAAa,EAAE,gBAAgB;QAC/B,cAAc,EAAE,yBAAyB;QACzC,qBAAqB,EAAE,yBAAyB;QAChD,oBAAoB,EAClB,sFAAsF;QACxF,mBAAmB,EAAE,eAAe;QACpC,kBAAkB,EAAE,sDAAsD;QAC1E,oBAAoB,EAAE,oBAAoB;QAC1C,aAAa,EAAE,6BAA6B;QAC5C,gBAAgB,EAAE,8BAA8B;QAChD,oBAAoB,EAAE,4BAA4B;QAClD,YAAY,EAAE,2BAA2B;QACzC,aAAa,EAAE,mBAAmB;QAClC,WAAW,EACT,+FAA+F;QACjG,YAAY,EAAE,iCAAiC;QAC/C,gBAAgB,EAAE,kDAAkD;QACpE,YAAY,EAAE,yCAAyC;QACvD,oBAAoB,EAAE,gDAAgD;QACtE,aAAa,EAAE,0BAA0B;QACzC,kBAAkB,EAAE,yBAAyB;KAC9C;IACD,EAAE,EAAE;QACF,WAAW,EAAE,sBAAsB;QACnC,aAAa,EAAE,sDAAsD;QACrE,cAAc,EAAE,QAAQ;QACxB,gBAAgB,EAAE,mBAAmB;QACrC,iBAAiB,EAAE,qBAAqB;QACxC,iBAAiB,EAAE,mBAAmB;QACtC,kBAAkB,EAAE,cAAc;QAClC,iBAAiB,EAAE,kBAAkB;QACrC,qBAAqB,EAAE,wDAAwD;QAC/E,kBAAkB,EAAE,qBAAqB;QACzC,iBAAiB,EAAE,eAAe;QAClC,4BAA4B,EAAE,6BAA6B;QAC3D,qBAAqB,EAAE,mEAAmE;QAC1F,kBAAkB,EAAE,sBAAsB;QAC1C,sBAAsB,EACpB,mFAAmF;QACrF,eAAe,EAAE,cAAc;QAC/B,aAAa,EAAE,MAAM;QACrB,eAAe,EAAE,QAAQ;QACzB,gBAAgB,EAAE,SAAS;QAC3B,gBAAgB,EAAE,SAAS;QAC3B,mBAAmB,EAAE,iBAAiB;QACtC,kBAAkB,EAAE,WAAW;QAC/B,uBAAuB,EAAE,qBAAqB;QAC9C,qBAAqB,EAAE,eAAe;QACtC,aAAa,EAAE,MAAM;QACrB,eAAe,EAAE,QAAQ;QACzB,wBAAwB,EAAE,kBAAkB;QAC5C,mBAAmB,EAAE,aAAa;QAClC,YAAY,EAAE,cAAc;QAC5B,YAAY,EAAE,MAAM;QACpB,gBAAgB,EAAE,UAAU;QAC5B,cAAc,EAAE,QAAQ;QACxB,gBAAgB,EAAE,WAAW;QAC7B,wBAAwB,EAAE,uBAAuB;QACjD,uBAAuB,EAAE,oCAAoC;QAC7D,2BAA2B,EACzB,uFAAuF;QACzF,cAAc,EAAE,QAAQ;QACxB,mBAAmB,EAAE,cAAc;QACnC,uBAAuB,EAAE,4EAA4E;QACrG,kBAAkB,EAAE,8BAA8B;QAClD,gBAAgB,EAAE,UAAU;QAC5B,oBAAoB,EAAE,oBAAoB;QAC1C,qBAAqB,EAAE,sBAAsB;QAC7C,4BAA4B,EAAE,8CAA8C;QAC5E,sBAAsB,EAAE,iBAAiB;QACzC,mBAAmB,EAAE,cAAc;QACnC,cAAc,EAAE,QAAQ;QACxB,aAAa,EAAE,QAAQ;QACvB,gBAAgB,EAAE,UAAU;QAC5B,YAAY,EAAE,eAAe;QAC7B,eAAe,EAAE,SAAS;QAC1B,aAAa,EAAE,eAAe;QAC9B,mBAAmB,EAAE,cAAc;QACnC,yBAAyB,EAAE,oBAAoB;QAC/C,iBAAiB,EAAE,cAAc;QACjC,eAAe,EAAE,SAAS;QAC1B,aAAa,EAAE,UAAU;QACzB,iBAAiB,EAAE,2BAA2B;QAC9C,cAAc,EAAE,QAAQ;QACxB,gBAAgB,EAAE,UAAU;QAC5B,eAAe,EAAE,SAAS;QAC1B,gBAAgB,EAAE,UAAU;QAC5B,aAAa,EAAE,iBAAiB;QAChC,cAAc,EAAE,iBAAiB;QACjC,qBAAqB,EAAE,8BAA8B;QACrD,oBAAoB,EAClB,+FAA+F;QACjG,mBAAmB,EAAE,mBAAmB;QACxC,kBAAkB,EAAE,qDAAqD;QACzE,oBAAoB,EAAE,mBAAmB;QACzC,aAAa,EAAE,sCAAsC;QACrD,gBAAgB,EAAE,qBAAqB;QACvC,oBAAoB,EAAE,sBAAsB;QAC5C,YAAY,EAAE,6BAA6B;QAC3C,aAAa,EAAE,mBAAmB;QAClC,WAAW,EACT,gGAAgG;QAClG,YAAY,EAAE,qBAAqB;QACnC,gBAAgB,EAAE,0DAA0D;QAC5E,YAAY,EAAE,yCAAyC;QACvD,oBAAoB,EAAE,yDAAyD;QAC/E,aAAa,EAAE,wBAAwB;QACvC,kBAAkB,EAAE,uBAAuB;KAC5C;CACF,CAAA"}

package/dist/modules/oauth_backend/routes.d.ts

@@ -0,0 +1,3 @@
+import type { RouteEntry } from '@ketvietlab/ketjs';
+export declare const routes: Record<string, RouteEntry>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/modules/oauth_backend/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../../../packages/ketsuite/src/modules/oauth_backend/routes.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAS,UAAU,EAAgB,MAAM,mBAAmB,CAAA;AA4JxE,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAyJ7C,CAAA"}

package/dist/modules/oauth_backend/routes.js

@@ -0,0 +1,231 @@
+import { randomUUID } from 'node:crypto';
+import { text } from '@ketvietlab/ketjs';
+import { readForm, seeOther } from '../backend/forms.js';
+import { viewerOf } from '../backend/routes.js';
+import { backendPage } from '../../ui/index.js';
+import { identitiesScreen, identityFormScreen, linkProviderScreen, providerFormScreen, providersScreen, } from './screens.js';
+const localeSuffix = (url) => {
+    const lang = url.searchParams.get('lang');
+    return lang ? `?lang=${encodeURIComponent(lang)}` : '';
+};
+const inLocale = (url, path) => {
+    const target = new URL(path, 'http://ket.local');
+    const lang = url.searchParams.get('lang');
+    if (lang)
+        target.searchParams.set('lang', lang);
+    return `${target.pathname}${target.search}`;
+};
+const crossSite = (req) => {
+    const origin = req.headers.origin;
+    if (!origin)
+        return false;
+    try {
+        return new URL(origin).host !== String(req.headers.host ?? '');
+    }
+    catch {
+        return true;
+    }
+};
+const frameFor = async (ctx, url, req) => ({
+    navigation: req.headers['x-ket-navigation'] === 'fragment-v1',
+    viewer: await viewerOf(ctx, url, req),
+    menu: await ctx.menu(url, req),
+    menuFilter: url.searchParams.get('menu')?.trim() || null,
+    extras: {
+        'nav.items': await ctx.joint(url, req, 'backend:nav.items', { active: url.pathname }),
+        'topbar.end': await ctx.joint(url, req, 'backend:topbar.end'),
+    },
+});
+const document = async (ctx, url, req, title, body) => backendPage(ctx, req, { lang: ctx.localeOf(url, req), title, body });
+const translatedErrors = (ctx, url, req, result) => {
+    const _ = ctx.translate(ctx.localeOf(url, req));
+    return (result?.errors ?? []).map((error) => `${error.field ? `${error.field}: ` : ''}${_(error.code ?? 'oauth.error.required')}`);
+};
+const providersOf = (ctx, url, req, includeArchived = false) => ctx.call('oauth.listProviders', { includeArchived }, url, req);
+const providerOf = (ctx, url, req, id) => ctx.call('oauth.getProvider', { id }, url, req);
+const formOptions = async (ctx, url, req) => {
+    const { companies, roles } = (await ctx.call('oauth.manageOptions', {}, url, req));
+    return {
+        companies: companies.map((row) => ({ value: String(row.id), label: String(row.name ?? row.code) })),
+        roles: roles.map((row) => ({ value: String(row.id), label: String(row.name) })),
+    };
+};
+const identityOptions = async (ctx, url, req) => {
+    const [providers, { users }] = await Promise.all([
+        providersOf(ctx, url, req),
+        ctx.call('oauth.manageOptions', {}, url, req),
+    ]);
+    return {
+        providers: providers.map((row) => ({ value: row.id, label: row.name })),
+        users: users.map((row) => ({
+            value: String(row.id),
+            label: `${String(row.name)} · ${String(row.login)}`,
+        })),
+    };
+};
+const renderProvider = async (ctx, url, req, row, errors = []) => {
+    const _ = ctx.translate(ctx.localeOf(url, req));
+    return document(ctx, url, req, row.id ? String(row.name) : _('oauth_backend.providers.create'), providerFormScreen(_, row, { ...(await formOptions(ctx, url, req)), errors }, await frameFor(ctx, url, req), localeSuffix(url)));
+};
+const providerInput = (form, id, url) => {
+    const code = form.code.trim().toLowerCase();
+    return {
+        id,
+        code,
+        name: form.name,
+        protocol: form.protocol || 'oidc',
+        issuer: form.issuer,
+        clientId: form.clientId,
+        clientAuthMethod: form.clientAuthMethod || 'none',
+        clientSecretEnv: form.clientSecretEnv || undefined,
+        scopes: form.scopes || 'openid profile email',
+        redirectUri: form.redirectUri || `${url.origin}/auth/oauth/${encodeURIComponent(code)}/callback`,
+        allowedAlgorithms: form.allowedAlgorithms || 'RS256',
+        allowLinking: form.allowLinking === '1',
+        autoProvision: form.autoProvision === '1',
+        requireVerifiedEmail: form.requireVerifiedEmail === '1',
+        defaultCompanyId: form.defaultCompanyId || undefined,
+        defaultRoleId: form.defaultRoleId || undefined,
+        sequence: Number(form.sequence || 10),
+        active: form.active === '1',
+    };
+};
+const renderIdentities = async (ctx, url, req, errors = []) => {
+    const _ = ctx.translate(ctx.localeOf(url, req));
+    const providerId = url.searchParams.get('provider') ?? undefined;
+    const userId = url.searchParams.get('user') ?? undefined;
+    const rows = (await ctx.call('oauth.listIdentities', { providerId, userId }, url, req));
+    return document(ctx, url, req, _('oauth_backend.identities.title'), identitiesScreen(_, rows, await frameFor(ctx, url, req), localeSuffix(url), errors));
+};
+export const routes = {
+    '/admin/oauth/providers': {
+        handler: (ctx) => async (url, req) => {
+            if (req.method !== 'GET')
+                return text('GET', { status: 405 });
+            const _ = ctx.translate(ctx.localeOf(url, req));
+            const includeArchived = url.searchParams.get('archived') === '1';
+            return document(ctx, url, req, _('oauth_backend.providers.title'), providersScreen(_, await providersOf(ctx, url, req, includeArchived), await frameFor(ctx, url, req), localeSuffix(url), includeArchived));
+        },
+    },
+    '/admin/oauth/providers/new': {
+        handler: (ctx) => async (url, req) => {
+            if (req.method === 'GET')
+                return renderProvider(ctx, url, req, {
+                    protocol: 'oidc',
+                    clientAuthMethod: 'none',
+                    scopes: 'openid profile email',
+                    allowedAlgorithms: 'RS256',
+                    allowLinking: true,
+                    autoProvision: false,
+                    requireVerifiedEmail: true,
+                    sequence: 10,
+                    active: true,
+                });
+            if (req.method !== 'POST')
+                return text('GET or POST', { status: 405 });
+            if (crossSite(req))
+                return text('Forbidden', { status: 403 });
+            const form = await readForm(req);
+            const id = randomUUID();
+            const input = providerInput(form, id, url);
+            const result = await ctx.call('oauth.saveProvider', input, url, req);
+            const errors = translatedErrors(ctx, url, req, result);
+            return errors.length
+                ? renderProvider(ctx, url, req, input, errors)
+                : seeOther(inLocale(url, `/admin/oauth/providers/${id}`));
+        },
+    },
+    '/admin/oauth/providers/{id}': {
+        handler: (ctx) => async (url, req, params) => {
+            const held = await providerOf(ctx, url, req, params.id);
+            if (!held)
+                return text(ctx.translate(ctx.localeOf(url, req))('oauth_backend.error.notFound'), { status: 404 });
+            if (req.method === 'GET')
+                return renderProvider(ctx, url, req, held);
+            if (req.method !== 'POST')
+                return text('GET or POST', { status: 405 });
+            if (crossSite(req))
+                return text('Forbidden', { status: 403 });
+            const form = await readForm(req);
+            const input = providerInput(form, params.id, url);
+            const result = await ctx.call('oauth.saveProvider', input, url, req);
+            const errors = translatedErrors(ctx, url, req, result);
+            return errors.length
+                ? renderProvider(ctx, url, req, { ...held, ...input }, errors)
+                : seeOther(inLocale(url, `/admin/oauth/providers/${params.id}`));
+        },
+    },
+    '/admin/oauth/providers/{id}/archive': {
+        handler: (ctx) => async (url, req, params) => {
+            if (req.method !== 'POST')
+                return text('POST', { status: 405 });
+            if (crossSite(req))
+                return text('Forbidden', { status: 403 });
+            const form = await readForm(req);
+            await ctx.call('oauth.archiveProvider', { id: params.id, active: form.action === 'restore' }, url, req);
+            return seeOther(inLocale(url, `/admin/oauth/providers/${params.id}`));
+        },
+    },
+    '/admin/oauth/identities': {
+        handler: (ctx) => async (url, req) => {
+            if (req.method !== 'GET')
+                return text('GET', { status: 405 });
+            return renderIdentities(ctx, url, req);
+        },
+    },
+    '/admin/oauth/identities/new': {
+        handler: (ctx) => async (url, req) => {
+            const _ = ctx.translate(ctx.localeOf(url, req));
+            const render = async (row, errors = []) => document(ctx, url, req, _('oauth_backend.identities.link'), identityFormScreen(_, row, { ...(await identityOptions(ctx, url, req)), errors }, await frameFor(ctx, url, req), localeSuffix(url)));
+            if (req.method === 'GET')
+                return render({ providerId: url.searchParams.get('provider') ?? undefined });
+            if (req.method !== 'POST')
+                return text('GET or POST', { status: 405 });
+            if (crossSite(req))
+                return text('Forbidden', { status: 403 });
+            const form = await readForm(req);
+            const result = await ctx.call('oauth.linkIdentity', {
+                id: randomUUID(),
+                providerId: form.providerId,
+                userId: form.userId,
+                subject: form.subject,
+                email: form.email || undefined,
+                displayName: form.displayName || undefined,
+                preferredUsername: form.preferredUsername || undefined,
+            }, url, req);
+            const errors = translatedErrors(ctx, url, req, result);
+            return errors.length ? render(form, errors) : seeOther(inLocale(url, '/admin/oauth/identities'));
+        },
+    },
+    '/admin/oauth/identities/{id}/unlink': {
+        handler: (ctx) => async (url, req, params) => {
+            if (req.method !== 'POST')
+                return text('POST', { status: 405 });
+            if (crossSite(req))
+                return text('Forbidden', { status: 403 });
+            const result = await ctx.call('oauth.unlinkIdentity', { id: params.id }, url, req);
+            const errors = translatedErrors(ctx, url, req, result);
+            return errors.length
+                ? renderIdentities(ctx, url, req, errors)
+                : seeOther(inLocale(url, '/admin/oauth/identities'));
+        },
+    },
+    '/admin/oauth/link': {
+        handler: (ctx) => async (url, req) => {
+            if (req.method !== 'GET')
+                return text('GET', { status: 405 });
+            const sessions = await ctx.sessionsOf(url, req);
+            if (!(await sessions?.of(req)))
+                return text(ctx.translate(ctx.localeOf(url, req))('oauth_backend.error.unauthorized'), {
+                    status: 401,
+                });
+            const _ = ctx.translate(ctx.localeOf(url, req));
+            const [providers, identities] = await Promise.all([
+                ctx.call('oauth.publicProviders', {}, url, req),
+                ctx.call('oauth.myIdentities', {}, url, req),
+            ]);
+            return document(ctx, url, req, _('oauth_backend.link.title'), linkProviderScreen(_, providers, identities, await frameFor(ctx, url, req), localeSuffix(url)));
+        },
+    },
+};
+//# sourceMappingURL=routes.js.map

package/dist/modules/oauth_backend/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../../../../../packages/ketsuite/src/modules/oauth_backend/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAA;AAExC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,GAChB,MAAM,cAAe,CAAA;AAMtB,MAAM,YAAY,GAAG,CAAC,GAAQ,EAAU,EAAE;IACxC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACzC,OAAO,IAAI,CAAC,CAAC,CAAC,SAAS,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;AACxD,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,CAAC,GAAQ,EAAE,IAAY,EAAU,EAAE;IAClD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAA;IAChD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,IAAI;QAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC/C,OAAO,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,CAAA;AAC7C,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAAC,GAAQ,EAAW,EAAE;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAA4B,CAAA;IACvD,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACzB,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAA;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC,CAAA;AAED,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAiB,EAAE,GAAQ,EAAE,GAAQ,EAAE,EAAE,CAAC,CAAC;IACjE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,aAAa;IAC7D,MAAM,EAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;IACrC,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC;IAC9B,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI;IACxD,MAAM,EAAE;QACN,WAAW,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,mBAAmB,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrF,YAAY,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,oBAAoB,CAAC;KAC9D;CACF,CAAC,CAAA;AAEF,MAAM,QAAQ,GAAG,KAAK,EACpB,GAAiB,EACjB,GAAQ,EACR,GAAQ,EACR,KAAa,EACb,IAAqD,EACrD,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AAEzE,MAAM,gBAAgB,GAAG,CAAC,GAAiB,EAAE,GAAQ,EAAE,GAAQ,EAAE,MAAe,EAAY,EAAE;IAC5F,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC/C,OAAO,CAAE,MAAuE,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CACjG,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,sBAAsB,CAAC,EAAE,CAChG,CAAA;AACH,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,GAAiB,EAAE,GAAQ,EAAE,GAAQ,EAAE,eAAe,GAAG,KAAK,EAAE,EAAE,CACrF,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,CAA2B,CAAA;AAE1F,MAAM,UAAU,GAAG,CAAC,GAAiB,EAAE,GAAQ,EAAE,GAAQ,EAAE,EAAU,EAAE,EAAE,CACvE,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAgC,CAAA;AAEhF,MAAM,WAAW,GAAG,KAAK,EAAE,GAAiB,EAAE,GAAQ,EAAE,GAAQ,EAAE,EAAE;IAClE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAGhF,CAAA;IACD,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnG,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KAChF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,eAAe,GAAG,KAAK,EAAE,GAAiB,EAAE,GAAQ,EAAE,GAAQ,EAAE,EAAE;IACtE,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC/C,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAiC;KAC9E,CAAC,CAAA;IACF,OAAO;QACL,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QACvE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;SACpD,CAAC,CAAC;KACJ,CAAA;AACH,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,KAAK,EAC1B,GAAiB,EACjB,GAAQ,EACR,GAAQ,EACR,GAAyB,EACzB,MAAM,GAAa,EAAE,EACrB,EAAE;IACF,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC/C,OAAO,QAAQ,CACb,GAAG,EACH,GAAG,EACH,GAAG,EACH,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gCAAgC,CAAC,EAC/D,kBAAkB,CAChB,CAAC,EACD,GAAG,EACH,EAAE,GAAG,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EACjD,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC7B,YAAY,CAAC,GAAG,CAAC,CAClB,CACF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,IAA4B,EAAE,EAAU,EAAE,GAAQ,EAAE,EAAE;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3C,OAAO;QACL,EAAE;QACF,IAAI;QACJ,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,MAAM;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,MAAM;QACjD,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,SAAS;QAClD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,sBAAsB;QAC7C,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,GAAG,GAAG,CAAC,MAAM,eAAe,kBAAkB,CAAC,IAAI,CAAC,WAAW;QAChG,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,OAAO;QACpD,YAAY,EAAE,IAAI,CAAC,YAAY,KAAK,GAAG;QACvC,aAAa,EAAE,IAAI,CAAC,aAAa,KAAK,GAAG;QACzC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB,KAAK,GAAG;QACvD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,SAAS;QACpD,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,SAAS;QAC9C,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QACrC,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,GAAG;KAC5B,CAAA;AACH,CAAC,CAAA;AAED,MAAM,gBAAgB,GAAG,KAAK,EAAE,GAAiB,EAAE,GAAQ,EAAE,GAAQ,EAAE,MAAM,GAAa,EAAE,EAAE,EAAE;IAC9F,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAA;IAChE,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,SAAS,CAAA;IACxD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAkB,CAAA;IACxG,OAAO,QAAQ,CACb,GAAG,EACH,GAAG,EACH,GAAG,EACH,CAAC,CAAC,gCAAgC,CAAC,EACnC,gBAAgB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CACpF,CAAA;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,MAAM,GAA+B;IAChD,wBAAwB,EAAE;QACxB,OAAO,EAAE,CAAC,GAAiB,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;YAC/C,MAAM,eAAe,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAA;YAChE,OAAO,QAAQ,CACb,GAAG,EACH,GAAG,EACH,GAAG,EACH,CAAC,CAAC,+BAA+B,CAAC,EAClC,eAAe,CACb,CAAC,EACD,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC,EACjD,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC7B,YAAY,CAAC,GAAG,CAAC,EACjB,eAAe,CAChB,CACF,CAAA;QACH,CAAC;KACF;IACD,4BAA4B,EAAE;QAC5B,OAAO,EAAE,CAAC,GAAiB,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBACtB,OAAO,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;oBACnC,QAAQ,EAAE,MAAM;oBAChB,gBAAgB,EAAE,MAAM;oBACxB,MAAM,EAAE,sBAAsB;oBAC9B,iBAAiB,EAAE,OAAO;oBAC1B,YAAY,EAAE,IAAI;oBAClB,aAAa,EAAE,KAAK;oBACpB,oBAAoB,EAAE,IAAI;oBAC1B,QAAQ,EAAE,EAAE;oBACZ,MAAM,EAAE,IAAI;iBACb,CAAC,CAAA;YACJ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;YACvB,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAA;YAC1C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YACpE,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YACtD,OAAO,MAAM,CAAC,MAAM;gBAClB,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC;gBAC9C,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,0BAA0B,EAAE,EAAE,CAAC,CAAC,CAAA;QAC7D,CAAC;KACF;IACD,6BAA6B,EAAE;QAC7B,OAAO,EAAE,CAAC,GAAiB,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YACzD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;YACvD,IAAI,CAAC,IAAI;gBACP,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,8BAA8B,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YACrG,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;YACpE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,CAAA;YACjD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YACpE,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YACtD,OAAO,MAAM,CAAC,MAAM;gBAClB,CAAC,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE,EAAE,MAAM,CAAC;gBAC9D,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,0BAA0B,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACpE,CAAC;KACF;IACD,qCAAqC,EAAE;QACrC,OAAO,EAAE,CAAC,GAAiB,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YACzD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/D,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YACvG,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,0BAA0B,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACvE,CAAC;KACF;IACD,yBAAyB,EAAE;QACzB,OAAO,EAAE,CAAC,GAAiB,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,OAAO,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QACxC,CAAC;KACF;IACD,6BAA6B,EAAE;QAC7B,OAAO,EAAE,CAAC,GAAiB,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjD,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;YAC/C,MAAM,MAAM,GAAG,KAAK,EAAE,GAAyB,EAAE,MAAM,GAAa,EAAE,EAAE,EAAE,CACxE,QAAQ,CACN,GAAG,EACH,GAAG,EACH,GAAG,EACH,CAAC,CAAC,+BAA+B,CAAC,EAClC,kBAAkB,CAChB,CAAC,EACD,GAAG,EACH,EAAE,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EACrD,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAC7B,YAAY,CAAC,GAAG,CAAC,CAClB,CACF,CAAA;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,EAAE,CAAC,CAAA;YACtG,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;YAChC,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAC3B,oBAAoB,EACpB;gBACE,EAAE,EAAE,UAAU,EAAE;gBAChB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS;gBAC9B,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,SAAS;gBAC1C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,SAAS;aACvD,EACD,GAAG,EACH,GAAG,CACJ,CAAA;YACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YACtD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAA;QAClG,CAAC;KACF;IACD,qCAAqC,EAAE;QACrC,OAAO,EAAE,CAAC,GAAiB,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;YACzD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC/D,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;YAClF,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAA;YACtD,OAAO,MAAM,CAAC,MAAM;gBAClB,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC;gBACzC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,CAAA;QACxD,CAAC;KACF;IACD,mBAAmB,EAAE;QACnB,OAAO,EAAE,CAAC,GAAiB,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;YACjD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;gBAAE,OAAO,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;YAC/C,IAAI,CAAC,CAAC,MAAM,QAAQ,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,kCAAkC,CAAC,EAAE;oBACrF,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAA;YACJ,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;YAC/C,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAChD,GAAG,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAE7C;gBACD,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAA2B;aACvE,CAAC,CAAA;YACF,OAAO,QAAQ,CACb,GAAG,EACH,GAAG,EACH,GAAG,EACH,CAAC,CAAC,0BAA0B,CAAC,EAC7B,kBAAkB,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAC/F,CAAA;QACH,CAAC;KACF;CACF,CAAA"}