@maroonedsoftware/scim 0.1.0

package/dist/schemas/index.d.ts

@@ -0,0 +1,9 @@
+export * from './schema.types.js';
+export * from './user.schema.js';
+export * from './group.schema.js';
+export * from './enterprise.user.schema.js';
+export * from './resource.type.schema.js';
+export * from './service.provider.config.schema.js';
+/** All SCIM core + extension schemas this package ships. */
+export declare const coreSchemas: import("./schema.types.js").ScimSchema[];
+//# sourceMappingURL=index.d.ts.map

package/dist/schemas/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/schemas/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qCAAqC,CAAC;AAMpD,4DAA4D;AAC5D,eAAO,MAAM,WAAW,0CAAkD,CAAC"}

package/dist/schemas/resource.type.schema.d.ts

@@ -0,0 +1,21 @@
+/** Schema URI for the SCIM ResourceType resource. */
+export declare const ResourceTypeSchemaId = "urn:ietf:params:scim:schemas:core:2.0:ResourceType";
+export interface ScimResourceType {
+    schemas: [typeof ResourceTypeSchemaId];
+    id: string;
+    name: string;
+    endpoint: string;
+    description: string;
+    schema: string;
+    schemaExtensions?: Array<{
+        schema: string;
+        required: boolean;
+    }>;
+    meta: {
+        resourceType: 'ResourceType';
+        location?: string;
+    };
+}
+export declare const userResourceType: ScimResourceType;
+export declare const groupResourceType: ScimResourceType;
+//# sourceMappingURL=resource.type.schema.d.ts.map

package/dist/schemas/resource.type.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource.type.schema.d.ts","sourceRoot":"","sources":["../../src/schemas/resource.type.schema.ts"],"names":[],"mappings":"AAIA,qDAAqD;AACrD,eAAO,MAAM,oBAAoB,uDAAuD,CAAC;AAEzF,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,OAAO,oBAAoB,CAAC,CAAC;IACvC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAChE,IAAI,EAAE;QACJ,YAAY,EAAE,cAAc,CAAC;QAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED,eAAO,MAAM,gBAAgB,EAAE,gBAS9B,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,gBAQ/B,CAAC"}

package/dist/schemas/schema.types.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Shape of a SCIM schema document (RFC 7643 §7).
+ * Used for the `/Schemas` discovery endpoint output and to describe
+ * resource extensions.
+ */
+export interface ScimSchema {
+    id: string;
+    name: string;
+    description: string;
+    attributes: ScimAttributeDefinition[];
+    meta: {
+        resourceType: 'Schema';
+        location?: string;
+    };
+}
+/**
+ * Definition of a single attribute on a SCIM schema.
+ */
+export interface ScimAttributeDefinition {
+    name: string;
+    type: 'string' | 'boolean' | 'decimal' | 'integer' | 'dateTime' | 'reference' | 'binary' | 'complex';
+    subAttributes?: ScimAttributeDefinition[];
+    multiValued: boolean;
+    description: string;
+    required: boolean;
+    caseExact?: boolean;
+    mutability: 'readOnly' | 'readWrite' | 'immutable' | 'writeOnly';
+    returned: 'always' | 'never' | 'default' | 'request';
+    uniqueness: 'none' | 'server' | 'global';
+    canonicalValues?: string[];
+    referenceTypes?: string[];
+}
+//# sourceMappingURL=schema.types.d.ts.map

package/dist/schemas/schema.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.types.d.ts","sourceRoot":"","sources":["../../src/schemas/schema.types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,uBAAuB,EAAE,CAAC;IACtC,IAAI,EAAE;QACJ,YAAY,EAAE,QAAQ,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IACrG,aAAa,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAC1C,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;IACjE,QAAQ,EAAE,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IACrD,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;IACzC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B"}

package/dist/schemas/service.provider.config.schema.d.ts

@@ -0,0 +1,53 @@
+/** Schema URI for the SCIM ServiceProviderConfig resource. */
+export declare const ServiceProviderConfigSchemaId = "urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig";
+/** Authentication scheme advertised by `/ServiceProviderConfig`. */
+export interface ScimAuthenticationScheme {
+    type: 'oauth' | 'oauth2' | 'oauthbearertoken' | 'httpbasic' | 'httpdigest';
+    name: string;
+    description: string;
+    specUri?: string;
+    documentationUri?: string;
+    primary?: boolean;
+}
+/** Optional features the service provider supports (RFC 7643 §5). */
+export interface ScimServiceProviderConfigOptions {
+    documentationUri?: string;
+    patch?: {
+        supported: boolean;
+    };
+    bulk?: {
+        supported: boolean;
+        maxOperations: number;
+        maxPayloadSize: number;
+    };
+    filter?: {
+        supported: boolean;
+        maxResults: number;
+    };
+    changePassword?: {
+        supported: boolean;
+    };
+    sort?: {
+        supported: boolean;
+    };
+    etag?: {
+        supported: boolean;
+    };
+    authenticationSchemes?: ScimAuthenticationScheme[];
+}
+/** Materialised ServiceProviderConfig response. */
+export interface ScimServiceProviderConfig extends Required<Omit<ScimServiceProviderConfigOptions, 'documentationUri' | 'authenticationSchemes'>> {
+    schemas: [typeof ServiceProviderConfigSchemaId];
+    documentationUri?: string;
+    authenticationSchemes: ScimAuthenticationScheme[];
+    meta: {
+        resourceType: 'ServiceProviderConfig';
+        location?: string;
+    };
+}
+/**
+ * Build a SCIM ServiceProviderConfig response object, layering caller options
+ * over the toolkit's defaults (PATCH on, filter on, sort on; bulk/changePassword/etag off).
+ */
+export declare const buildServiceProviderConfig: (options?: ScimServiceProviderConfigOptions) => ScimServiceProviderConfig;
+//# sourceMappingURL=service.provider.config.schema.d.ts.map

package/dist/schemas/service.provider.config.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.provider.config.schema.d.ts","sourceRoot":"","sources":["../../src/schemas/service.provider.config.schema.ts"],"names":[],"mappings":"AAAA,8DAA8D;AAC9D,eAAO,MAAM,6BAA6B,gEAAgE,CAAC;AAE3G,oEAAoE;AACpE,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,kBAAkB,GAAG,WAAW,GAAG,YAAY,CAAC;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qEAAqE;AACrE,MAAM,WAAW,gCAAgC;IAC/C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAC/B,IAAI,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7E,MAAM,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,cAAc,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IACxC,IAAI,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9B,IAAI,CAAC,EAAE;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAC9B,qBAAqB,CAAC,EAAE,wBAAwB,EAAE,CAAC;CACpD;AAED,mDAAmD;AACnD,MAAM,WAAW,yBAA0B,SAAQ,QAAQ,CAAC,IAAI,CAAC,gCAAgC,EAAE,kBAAkB,GAAG,uBAAuB,CAAC,CAAC;IAC/I,OAAO,EAAE,CAAC,OAAO,6BAA6B,CAAC,CAAC;IAChD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,EAAE,wBAAwB,EAAE,CAAC;IAClD,IAAI,EAAE;QACJ,YAAY,EAAE,uBAAuB,CAAC;QACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAUD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,GAAI,UAAS,gCAAqC,KAAG,yBAW1F,CAAC"}

package/dist/schemas/user.schema.d.ts

@@ -0,0 +1,9 @@
+import type { ScimSchema } from './schema.types.js';
+/** Schema URI for the SCIM core User resource. */
+export declare const UserSchemaId = "urn:ietf:params:scim:schemas:core:2.0:User";
+/**
+ * RFC 7643 §4.1: SCIM core User schema definition. A condensed but
+ * spec-compliant subset suitable for `/Schemas` discovery.
+ */
+export declare const userSchema: ScimSchema;
+//# sourceMappingURL=user.schema.d.ts.map

package/dist/schemas/user.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user.schema.d.ts","sourceRoot":"","sources":["../../src/schemas/user.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAA2B,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE7E,kDAAkD;AAClD,eAAO,MAAM,YAAY,+CAA+C,CAAC;AAEzE;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,UAoFxB,CAAC"}

package/dist/services/index.d.ts

@@ -0,0 +1,4 @@
+export * from './scim.user.service.js';
+export * from './scim.group.service.js';
+export * from './scim.service.provider.service.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,oCAAoC,CAAC"}

package/dist/services/scim.group.service.d.ts

@@ -0,0 +1,59 @@
+import { Logger } from '@maroonedsoftware/logger';
+import { ScimGroupRepository } from '../repositories/scim.group.repository.js';
+import type { ScimListQuery, ScimListResult } from '../repositories/repository.types.js';
+import type { ScimGroup } from '../types/scim.group.js';
+import type { ScimPatchOp } from '../types/patch.op.js';
+/**
+ * Application service wrapping a {@link ScimGroupRepository}. Mirrors
+ * {@link ScimUserService}: id/meta assignment, uniqueness on `displayName`,
+ * and PATCH application.
+ */
+export declare class ScimGroupService {
+    private readonly repository;
+    private readonly logger;
+    constructor(repository: ScimGroupRepository, logger: Logger);
+    /**
+     * Fetch a single group by id.
+     *
+     * @throws {ScimError} 404 when no group exists with the given id.
+     */
+    get(id: string): Promise<ScimGroup>;
+    /**
+     * List groups matching a parsed SCIM query, returning the page plus the
+     * total number of matches.
+     */
+    list(query: ScimListQuery): Promise<ScimListResult<ScimGroup>>;
+    /**
+     * Create a new group. Assigns a server-generated `id` and fills `meta`
+     * timestamps.
+     *
+     * @throws {ScimError} 400 `invalidValue` when `displayName` is missing.
+     * @throws {ScimError} 409 `uniqueness` when `displayName` already exists.
+     */
+    create(payload: Partial<ScimGroup>): Promise<ScimGroup>;
+    /**
+     * Replace an existing group wholesale (PUT semantics). Preserves `id` and
+     * `meta.created`; updates `meta.lastModified`.
+     *
+     * @throws {ScimError} 404 when no group exists with the given id.
+     * @throws {ScimError} 400 `invalidValue` when `displayName` is missing.
+     * @throws {ScimError} 409 `uniqueness` when changing `displayName` would collide.
+     */
+    replace(id: string, payload: Partial<ScimGroup>): Promise<ScimGroup>;
+    /**
+     * Apply a sequence of SCIM PATCH ops and persist the result. Updates
+     * `meta.lastModified`.
+     *
+     * @throws {ScimError} 404 when no group exists with the given id.
+     * @throws {ScimError} 400 propagated from {@link applyScimPatch}.
+     */
+    patch(id: string, ops: ScimPatchOp[]): Promise<ScimGroup>;
+    /**
+     * Delete a group by id.
+     *
+     * @throws {ScimError} 404 when no group exists with the given id.
+     */
+    delete(id: string): Promise<void>;
+    private normaliseSchemas;
+}
+//# sourceMappingURL=scim.group.service.d.ts.map

package/dist/services/scim.group.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scim.group.service.d.ts","sourceRoot":"","sources":["../../src/services/scim.group.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0CAA0C,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACzF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAKxD;;;;GAIG;AACH,qBACa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,UAAU,EAAE,mBAAmB,EAC/B,MAAM,EAAE,MAAM;IAGjC;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAMzC;;;OAGG;IACG,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAIpE;;;;;;OAMG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IA0B7D;;;;;;;OAOG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IA2B1E;;;;;;OAMG;IACG,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC;IAY/D;;;;OAIG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvC,OAAO,CAAC,gBAAgB;CAKzB"}

package/dist/services/scim.service.provider.service.d.ts

@@ -0,0 +1,33 @@
+import { type ScimServiceProviderConfig, type ScimServiceProviderConfigOptions } from '../schemas/service.provider.config.schema.js';
+import { type ScimResourceType } from '../schemas/resource.type.schema.js';
+import type { ScimSchema } from '../schemas/schema.types.js';
+/**
+ * Serves the SCIM discovery endpoints: `/ServiceProviderConfig`, `/Schemas`,
+ * and `/ResourceTypes`. The config is fixed at construction time — what the
+ * server advertises must match what the router actually implements.
+ */
+export declare class ScimServiceProviderService {
+    private readonly config;
+    private readonly schemas;
+    private readonly resourceTypes;
+    constructor(options?: ScimServiceProviderConfigOptions);
+    /** The materialised `/ServiceProviderConfig` response. */
+    getServiceProviderConfig(): ScimServiceProviderConfig;
+    /** Every schema known to this server, served from `/Schemas`. */
+    listSchemas(): ScimSchema[];
+    /**
+     * Look up a single schema by its URN.
+     *
+     * @throws {ScimError} 404 if the URN is not registered.
+     */
+    getSchema(id: string): ScimSchema;
+    /** Every resource type known to this server, served from `/ResourceTypes`. */
+    listResourceTypes(): ScimResourceType[];
+    /**
+     * Look up a single resource type by id (e.g. `User`, `Group`).
+     *
+     * @throws {ScimError} 404 if the id is not registered.
+     */
+    getResourceType(id: string): ScimResourceType;
+}
+//# sourceMappingURL=scim.service.provider.service.d.ts.map

package/dist/services/scim.service.provider.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scim.service.provider.service.d.ts","sourceRoot":"","sources":["../../src/services/scim.service.provider.service.ts"],"names":[],"mappings":"AACA,OAAO,EAA8B,KAAK,yBAAyB,EAAE,KAAK,gCAAgC,EAAE,MAAM,8CAA8C,CAAC;AAEjK,OAAO,EAAuC,KAAK,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAChH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAG7D;;;;GAIG;AACH,qBACa,0BAA0B;IACrC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;gBAEvC,OAAO,GAAE,gCAAqC;IAM1D,0DAA0D;IAC1D,wBAAwB,IAAI,yBAAyB;IAIrD,iEAAiE;IACjE,WAAW,IAAI,UAAU,EAAE;IAI3B;;;;OAIG;IACH,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU;IAMjC,8EAA8E;IAC9E,iBAAiB,IAAI,gBAAgB,EAAE;IAIvC;;;;OAIG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB;CAK9C"}

package/dist/services/scim.user.service.d.ts

@@ -0,0 +1,62 @@
+import { Logger } from '@maroonedsoftware/logger';
+import { ScimUserRepository } from '../repositories/scim.user.repository.js';
+import type { ScimListQuery, ScimListResult } from '../repositories/repository.types.js';
+import type { ScimUser } from '../types/scim.user.js';
+import type { ScimPatchOp } from '../types/patch.op.js';
+/**
+ * Application service wrapping a {@link ScimUserRepository}. Owns id and meta
+ * assignment, uniqueness enforcement, and PATCH application — keeping the
+ * repository focused on storage concerns.
+ */
+export declare class ScimUserService {
+    private readonly repository;
+    private readonly logger;
+    constructor(repository: ScimUserRepository, logger: Logger);
+    /**
+     * Fetch a single user by id.
+     *
+     * @throws {ScimError} 404 if no user exists with the given id.
+     */
+    get(id: string): Promise<ScimUser>;
+    /**
+     * List users matching a parsed SCIM query, returning the page plus the
+     * total number of matches (for the `totalResults` envelope field).
+     */
+    list(query: ScimListQuery): Promise<ScimListResult<ScimUser>>;
+    /**
+     * Create a new user. Assigns a server-generated `id`, fills `meta.created`
+     * and `meta.lastModified`, and ensures the resource's `schemas` includes the
+     * core User URN (and the EnterpriseUser URN when the extension is present).
+     *
+     * @throws {ScimError} 400 `invalidValue` when `userName` is missing.
+     * @throws {ScimError} 409 `uniqueness` when `userName` already exists.
+     */
+    create(payload: Partial<ScimUser>): Promise<ScimUser>;
+    /**
+     * Replace an existing user wholesale (PUT semantics). Preserves the original
+     * `id` and `meta.created`; updates `meta.lastModified`.
+     *
+     * @throws {ScimError} 404 when no user exists with the given id.
+     * @throws {ScimError} 400 `invalidValue` when `userName` is missing.
+     * @throws {ScimError} 409 `uniqueness` when changing `userName` would collide
+     *   with another existing user.
+     */
+    replace(id: string, payload: Partial<ScimUser>): Promise<ScimUser>;
+    /**
+     * Apply a sequence of SCIM PATCH ops (RFC 7644 §3.5.2) and persist the
+     * result via `replace`. Updates `meta.lastModified`.
+     *
+     * @throws {ScimError} 404 when no user exists with the given id.
+     * @throws {ScimError} 400 propagated from {@link applyScimPatch} for invalid
+     *   paths, unknown ops, or no-target failures.
+     */
+    patch(id: string, ops: ScimPatchOp[]): Promise<ScimUser>;
+    /**
+     * Delete a user by id.
+     *
+     * @throws {ScimError} 404 when no user exists with the given id.
+     */
+    delete(id: string): Promise<void>;
+    private normaliseSchemas;
+}
+//# sourceMappingURL=scim.user.service.d.ts.map

package/dist/services/scim.user.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scim.user.service.d.ts","sourceRoot":"","sources":["../../src/services/scim.user.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yCAAyC,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AACzF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAMxD;;;;GAIG;AACH,qBACa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,UAAU,EAAE,kBAAkB,EAC9B,MAAM,EAAE,MAAM;IAGjC;;;;OAIG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAMxC;;;OAGG;IACG,IAAI,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAInE;;;;;;;OAOG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IA0B3D;;;;;;;;OAQG;IACG,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IA2BxE;;;;;;;OAOG;IACG,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAY9D;;;;OAIG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvC,OAAO,CAAC,gBAAgB;CAQzB"}

package/dist/types/list.response.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Schema URI for the SCIM ListResponse message (RFC 7644 §3.4.2).
+ */
+export declare const ListResponseSchema = "urn:ietf:params:scim:api:messages:2.0:ListResponse";
+/**
+ * SCIM ListResponse envelope returned from list/search endpoints.
+ */
+export interface ScimListResponse<TResource> {
+    schemas: [typeof ListResponseSchema];
+    totalResults: number;
+    startIndex?: number;
+    itemsPerPage?: number;
+    Resources?: TResource[];
+}
+//# sourceMappingURL=list.response.d.ts.map

package/dist/types/list.response.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.response.d.ts","sourceRoot":"","sources":["../../src/types/list.response.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,kBAAkB,uDAAuD,CAAC;AAEvF;;GAEG;AACH,MAAM,WAAW,gBAAgB,CAAC,SAAS;IACzC,OAAO,EAAE,CAAC,OAAO,kBAAkB,CAAC,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;CACzB"}

package/dist/types/patch.op.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Schema URI for the SCIM PatchOp message (RFC 7644 §3.5.2).
+ */
+export declare const PatchOpSchema = "urn:ietf:params:scim:api:messages:2.0:PatchOp";
+/**
+ * Operation kinds permitted in a SCIM PATCH request.
+ * Case-insensitive on the wire; normalised internally.
+ */
+export type ScimPatchOpKind = 'add' | 'replace' | 'remove';
+/**
+ * A single PATCH operation as it appears in a PatchOp request body.
+ */
+export interface ScimPatchOp {
+    op: ScimPatchOpKind | Uppercase<ScimPatchOpKind> | Capitalize<ScimPatchOpKind>;
+    path?: string;
+    value?: unknown;
+}
+/**
+ * The full PatchOp request envelope.
+ */
+export interface ScimPatchRequest {
+    schemas: [typeof PatchOpSchema];
+    Operations: ScimPatchOp[];
+}
+//# sourceMappingURL=patch.op.d.ts.map

package/dist/types/patch.op.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patch.op.d.ts","sourceRoot":"","sources":["../../src/types/patch.op.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,aAAa,kDAAkD,CAAC;AAE7E;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE3D;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,eAAe,GAAG,SAAS,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,CAAC,OAAO,aAAa,CAAC,CAAC;IAChC,UAAU,EAAE,WAAW,EAAE,CAAC;CAC3B"}

package/dist/types/scim.group.d.ts

@@ -0,0 +1,14 @@
+import type { ScimCommonAttributes } from './scim.meta.js';
+/** Member reference embedded in a Group. */
+export interface ScimGroupMember {
+    value: string;
+    $ref?: string;
+    display?: string;
+    type?: 'User' | 'Group';
+}
+/** RFC 7643 §4.2: Group resource. */
+export interface ScimGroup extends ScimCommonAttributes {
+    displayName: string;
+    members?: ScimGroupMember[];
+}
+//# sourceMappingURL=scim.group.d.ts.map

package/dist/types/scim.group.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scim.group.d.ts","sourceRoot":"","sources":["../../src/types/scim.group.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,4CAA4C;AAC5C,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACzB;AAED,qCAAqC;AACrC,MAAM,WAAW,SAAU,SAAQ,oBAAoB;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;CAC7B"}

package/dist/types/scim.meta.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The `meta` complex attribute attached to every SCIM resource.
+ * See RFC 7643 §3.1.
+ */
+export interface ScimMeta {
+    /** The name of the resource type (e.g. `User`, `Group`). */
+    resourceType: string;
+    /** ISO 8601 timestamp when the resource was first created. */
+    created?: string;
+    /** ISO 8601 timestamp when the resource was last modified. */
+    lastModified?: string;
+    /** Absolute URI for the resource. */
+    location?: string;
+    /** Opaque entity tag for optimistic concurrency. */
+    version?: string;
+}
+/**
+ * Common properties shared by every SCIM resource (RFC 7643 §3).
+ */
+export interface ScimCommonAttributes {
+    /** Server-assigned unique identifier. */
+    id: string;
+    /** Identifier supplied by the provisioning client. */
+    externalId?: string;
+    /** Schema URIs declared by this resource. */
+    schemas: string[];
+    /** Resource metadata (`resourceType`, `created`, `lastModified`, etc.). */
+    meta: ScimMeta;
+}
+//# sourceMappingURL=scim.meta.d.ts.map

package/dist/types/scim.meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scim.meta.d.ts","sourceRoot":"","sources":["../../src/types/scim.meta.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,2EAA2E;IAC3E,IAAI,EAAE,QAAQ,CAAC;CAChB"}

package/dist/types/scim.user.d.ts

@@ -0,0 +1,75 @@
+import type { ScimCommonAttributes } from './scim.meta.js';
+/** RFC 7643 §4.1.2: complex `name` attribute. */
+export interface ScimUserName {
+    formatted?: string;
+    familyName?: string;
+    givenName?: string;
+    middleName?: string;
+    honorificPrefix?: string;
+    honorificSuffix?: string;
+}
+/** Generic multi-valued attribute shape (email, phone, IM, photo, address, etc.). */
+export interface ScimMultiValuedAttribute<TValue = string> {
+    value: TValue;
+    display?: string;
+    type?: string;
+    primary?: boolean;
+}
+/** RFC 7643 §4.1.2: postal address. */
+export interface ScimAddress {
+    formatted?: string;
+    streetAddress?: string;
+    locality?: string;
+    region?: string;
+    postalCode?: string;
+    country?: string;
+    type?: string;
+    primary?: boolean;
+}
+/** Group membership reference embedded in a User. */
+export interface ScimUserGroupRef {
+    value: string;
+    $ref?: string;
+    display?: string;
+    type?: 'direct' | 'indirect';
+}
+/** RFC 7643 §4.3: Enterprise User extension. */
+export interface ScimEnterpriseUser {
+    employeeNumber?: string;
+    costCenter?: string;
+    organization?: string;
+    division?: string;
+    department?: string;
+    manager?: {
+        value?: string;
+        $ref?: string;
+        displayName?: string;
+    };
+}
+/** RFC 7643 §4.1: User resource. */
+export interface ScimUser extends ScimCommonAttributes {
+    userName: string;
+    name?: ScimUserName;
+    displayName?: string;
+    nickName?: string;
+    profileUrl?: string;
+    title?: string;
+    userType?: string;
+    preferredLanguage?: string;
+    locale?: string;
+    timezone?: string;
+    active?: boolean;
+    password?: string;
+    emails?: ScimMultiValuedAttribute[];
+    phoneNumbers?: ScimMultiValuedAttribute[];
+    ims?: ScimMultiValuedAttribute[];
+    photos?: ScimMultiValuedAttribute[];
+    addresses?: ScimAddress[];
+    groups?: ScimUserGroupRef[];
+    entitlements?: ScimMultiValuedAttribute[];
+    roles?: ScimMultiValuedAttribute[];
+    x509Certificates?: ScimMultiValuedAttribute[];
+    /** EnterpriseUser extension keyed by its schema URI. */
+    'urn:ietf:params:scim:schemas:extension:enterprise:2.0:User'?: ScimEnterpriseUser;
+}
+//# sourceMappingURL=scim.user.d.ts.map

package/dist/types/scim.user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scim.user.d.ts","sourceRoot":"","sources":["../../src/types/scim.user.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,iDAAiD;AACjD,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,qFAAqF;AACrF,MAAM,WAAW,wBAAwB,CAAC,MAAM,GAAG,MAAM;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,uCAAuC;AACvC,MAAM,WAAW,WAAW;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,qDAAqD;AACrD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAC;CAC9B;AAED,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,oCAAoC;AACpC,MAAM,WAAW,QAAS,SAAQ,oBAAoB;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACpC,YAAY,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC1C,GAAG,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACjC,MAAM,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC5B,YAAY,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC1C,KAAK,CAAC,EAAE,wBAAwB,EAAE,CAAC;IACnC,gBAAgB,CAAC,EAAE,wBAAwB,EAAE,CAAC;IAC9C,wDAAwD;IACxD,4DAA4D,CAAC,EAAE,kBAAkB,CAAC;CACnF"}

package/package.json

@@ -0,0 +1,64 @@
+{
+  "name": "@maroonedsoftware/scim",
+  "version": "0.1.0",
+  "description": "SCIM 2.0 (RFC 7643/7644) server toolkit for ServerKit — schemas, filter parser, PATCH applier, error envelope, and a Koa router with abstract repositories.",
+  "author": {
+    "name": "Marooned Software",
+    "url": "https://github.com/MaroonedSoftware/serverkit"
+  },
+  "bugs": {
+    "url": "https://github.com/MaroonedSoftware/serverkit/issues"
+  },
+  "homepage": "https://github.com/MaroonedSoftware/serverkit/packages/scim#readme",
+  "keywords": [
+    "backend",
+    "scim",
+    "scim2",
+    "provisioning",
+    "identity",
+    "serverkit",
+    "typescript"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/MaroonedSoftware/serverkit.git"
+  },
+  "private": false,
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "license": "MIT",
+  "files": [
+    "dist/**"
+  ],
+  "dependencies": {
+    "injectkit": "^1.2.0",
+    "@maroonedsoftware/authentication": "4.11.0",
+    "@maroonedsoftware/logger": "1.1.0",
+    "@maroonedsoftware/koa": "2.1.13",
+    "@maroonedsoftware/utilities": "1.7.0",
+    "@maroonedsoftware/errors": "1.6.0"
+  },
+  "peerDependencies": {
+    "@koa/router": "^15.2.0",
+    "koa": "^3.1.1"
+  },
+  "devDependencies": {
+    "@koa/router": "^15.5.0",
+    "@types/koa": "^3.0.2",
+    "@types/supertest": "^6.0.3",
+    "koa": "^3.2.0",
+    "supertest": "^7.1.4",
+    "@repo/config-eslint": "0.2.1",
+    "@repo/config-typescript": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts --format esm --sourcemap --dts && tsc --emitDeclarationOnly --declaration",
+    "build:ci": "eslint --max-warnings=0 && pnpm run build",
+    "lint": "eslint --fix",
+    "format": "prettier --write .",
+    "test": "vitest run",
+    "test:ci": "vitest run --coverage"
+  }
+}