@objectstack/spec 3.0.4 → 3.0.6

package/dist/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/identity/identity.zod.ts","../../src/identity/protocol.ts","../../src/shared/identifiers.zod.ts","../../src/identity/role.zod.ts","../../src/identity/organization.zod.ts","../../src/identity/scim.zod.ts"],"names":["z"],"mappings":";;;;;AAkBO,IAAM,UAAA,GAAaA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAIjC,EAAA,EAAIA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,wBAAwB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKhD,OAAOA,KAAA,CAAE,MAAA,GAAS,KAAA,EAAM,CAAE,SAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKvD,aAAA,EAAeA,MAAE,OAAA,EAAQ,CAAE,QAAQ,KAAK,CAAA,CAAE,SAAS,2BAA2B,CAAA;AAAA;AAAA;AAAA;AAAA,EAK9E,MAAMA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,mBAAmB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxD,KAAA,EAAOA,MAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,mBAAmB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK/D,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,4BAA4B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKtE,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,uBAAuB;AACnE,CAAC;AAQM,IAAM,aAAA,GAAgBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAIpC,EAAA,EAAIA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,2BAA2B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKnD,MAAA,EAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKhD,IAAA,EAAMA,MAAE,IAAA,CAAK;AAAA,IACX,OAAA;AAAA,IACA,MAAA;AAAA,IACA,OAAA;AAAA,IACA,aAAA;AAAA,IACA,MAAA;AAAA,IACA;AAAA,GACD,CAAA,CAAE,QAAA,CAAS,cAAc,CAAA;AAAA;AAAA;AAAA;AAAA,EAK1B,QAAA,EAAUA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA,EAK7C,iBAAA,EAAmBA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,qBAAqB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK5D,cAAcA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qBAAqB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKlE,aAAaA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKhE,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,+BAA+B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKzE,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,kBAAkB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK5D,OAAOA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA,EAKnD,SAASA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,gBAAgB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxD,cAAcA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA,EAK5D,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,4BAA4B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKtE,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,uBAAuB;AACnE,CAAC;AAQM,IAAM,aAAA,GAAgBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAIpC,EAAA,EAAIA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,2BAA2B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKnD,YAAA,EAAcA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA,EAKjD,MAAA,EAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMhD,sBAAsBA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,8CAA8C,CAAA;AAAA;AAAA;AAAA;AAAA,EAKnG,SAASA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,0BAA0B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKlE,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,4BAA4B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKtE,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,uBAAuB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKjE,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,YAAY,CAAA;AAAA;AAAA;AAAA;AAAA,EAKtD,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,mBAAmB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK7D,aAAaA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,oBAAoB;AAClE,CAAC;AAQM,IAAM,uBAAA,GAA0BA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAI9C,UAAA,EAAYA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,mCAAmC,CAAA;AAAA;AAAA;AAAA;AAAA,EAKnE,KAAA,EAAOA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,SAASA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,wBAAwB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKhE,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,0BAA0B;AACtE,CAAC;AAYM,IAAM,YAAA,GAAeA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAInC,EAAA,EAAIA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK5C,IAAA,EAAMA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,sBAAsB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKhD,OAAOA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,+BAA+B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKrE,QAAQA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,mBAAmB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK1D,MAAA,EAAQA,KAAA,CAAE,MAAA,EAAO,CAAE,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3C,gBAAgBA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,wBAAwB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKvE,SAAA,EAAWA,MAAE,MAAA,EAAO,CAAE,UAAS,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,sBAAsB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3E,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK9D,WAAWA,KAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,uBAAuB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKjE,UAAA,EAAYA,MAAE,MAAA,EAAO,CAAE,UAAS,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,qBAAqB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3E,aAAA,EAAeA,MAAE,MAAA,EAAO,CAAE,UAAS,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,wBAAwB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKjF,OAAA,EAASA,MAAE,OAAA,EAAQ,CAAE,QAAQ,IAAI,CAAA,CAAE,SAAS,2BAA2B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKvE,kBAAkBA,KAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,kCAAkC,CAAA;AAAA;AAAA;AAAA;AAAA,EAKpF,mBAAA,EAAqBA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,wBAAwB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKzF,YAAA,EAAcA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,yBAAyB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKnF,SAAA,EAAWA,KAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3E,WAAA,EAAaA,KAAA,CAAE,MAAA,CAAOA,KAAA,CAAE,MAAA,EAAO,EAAGA,KAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA,EAAS,CACrD,SAAS,2BAA2B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,MAAA,EAAQA,KAAA,CAAE,KAAA,CAAMA,KAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA,EAAS,CAClC,QAAA,CAAS,0BAA0B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKtC,QAAA,EAAUA,KAAA,CAAE,MAAA,CAAOA,KAAA,CAAE,MAAA,EAAO,EAAGA,KAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA,EAAS,CAAE,SAAS,iBAAiB;AACnF,CAAC;;;ACjUM,IAAM,cAAA,GAAiB;AAAA;AAAA;AAAA;AAAA,EAI5B,UAAA,EAAY,eAAA;AAAA;AAAA;AAAA;AAAA,EAKZ,YAAA,EAAc,SAAA;AAAA;AAAA;AAAA;AAAA,EAKd,aAAA,EAAe,KAAA;AAAA;AAAA;AAAA;AAAA,EAKf,WAAA,EAAa,iBAAA;AAAA;AAAA;AAAA;AAAA,EAKb,cAAA,EAAgB,kBAAA;AAAA;AAAA;AAAA;AAAA,EAKhB,WAAA,EAAa,eAAA;AAAA;AAAA;AAAA;AAAA,EAKb,oBAAA,EAAsB;AACxB;AA6EO,IAAM,gBAAA,GAAmB;AAAA,EAC9B,mBAAA,EAAqB,qBAAA;AAAA,EACrB,aAAA,EAAe,eAAA;AAAA,EACf,aAAA,EAAe,eAAA;AAAA,EACf,wBAAA,EAA0B,0BAAA;AAAA,EAC1B,cAAA,EAAgB,gBAAA;AAAA,EAChB,oBAAA,EAAsB,sBAAA;AAAA,EACtB,iBAAA,EAAmB,mBAAA;AAAA,EACnB,kBAAA,EAAoB,oBAAA;AAAA,EACpB,eAAA,EAAiB,iBAAA;AAAA,EACjB,WAAA,EAAa,aAAA;AAAA,EACb,cAAA,EAAgB;AAClB;AC1FsCA,KAAAA,CACnC,MAAA,EAAO,CACP,GAAA,CAAI,CAAA,EAAG,EAAE,OAAA,EAAS,iDAAA,EAAmD,CAAA,CACrE,KAAA,CAAM,oBAAA,EAAsB;AAAA,EAC3B,OAAA,EACE;AACJ,CAAC,CAAA,CACA,SAAS,wDAAwD;AAiB7D,IAAM,yBAAA,GAA4BA,KAAAA,CACtC,MAAA,EAAO,CACP,GAAA,CAAI,CAAA,EAAG,EAAE,OAAA,EAAS,0CAAA,EAA4C,CAAA,CAC9D,KAAA,CAAM,mBAAA,EAAqB;AAAA,EAC1B,OAAA,EACE;AACJ,CAAC,CAAA,CACA,SAAS,yDAAyD,CAAA;AAoBtCA,KAAAA,CAC5B,MAAA,EAAO,CACP,GAAA,CAAI,CAAA,EAAG,EAAE,OAAA,EAAS,0CAAA,EAA4C,CAAA,CAC9D,KAAA,CAAM,oBAAA,EAAsB;AAAA,EAC3B,OAAA,EACE;AACJ,CAAC,CAAA,CACA,SAAS,0DAA0D;;;AC1E/D,IAAM,UAAA,GAAaA,MAAE,MAAA,CAAO;AAAA;AAAA,EAEjC,IAAA,EAAM,yBAAA,CAA0B,QAAA,CAAS,yCAAyC,CAAA;AAAA,EAClF,KAAA,EAAOA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,kCAAkC,CAAA;AAAA;AAAA,EAG7D,QAAQA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,6BAA6B,CAAA;AAAA;AAAA,EAGpE,WAAA,EAAaA,KAAAA,CAAE,MAAA,EAAO,CAAE,QAAA;AAC1B,CAAC;ACxBM,IAAM,kBAAA,GAAqBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAIzC,EAAA,EAAIA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,gCAAgC,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxD,IAAA,EAAMA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,2BAA2B,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrD,IAAA,EAAMA,MAAE,MAAA,EAAO,CACZ,MAAM,eAAe,CAAA,CACrB,SAAS,yEAAyE,CAAA;AAAA;AAAA;AAAA;AAAA,EAKrF,IAAA,EAAMA,MAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,uBAAuB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMlE,QAAA,EAAUA,KAAAA,CAAE,MAAA,CAAOA,KAAAA,CAAE,MAAA,EAAO,EAAGA,KAAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA,EAAS,CAAE,SAAS,iBAAiB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKjF,WAAWA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,iCAAiC,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3E,WAAWA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,uBAAuB;AACnE,CAAC;AAQM,IAAM,YAAA,GAAeA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAInC,EAAA,EAAIA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,0BAA0B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKlD,cAAA,EAAgBA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,iBAAiB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKrD,MAAA,EAAQA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,SAAS,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOrC,IAAA,EAAMA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,iDAAiD,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3E,WAAWA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,2BAA2B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKrE,WAAWA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,uBAAuB;AACnE,CAAC;AAOM,IAAM,gBAAA,GAAmBA,MAAE,IAAA,CAAK,CAAC,WAAW,UAAA,EAAY,UAAA,EAAY,SAAS,CAAC;AAQ9E,IAAM,gBAAA,GAAmBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAIvC,EAAA,EAAIA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,8BAA8B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKtD,cAAA,EAAgBA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,iBAAiB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKrD,OAAOA,KAAAA,CAAE,MAAA,GAAS,KAAA,EAAM,CAAE,SAAS,uBAAuB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM1D,IAAA,EAAMA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,gCAAgC,CAAA;AAAA;AAAA;AAAA;AAAA,EAK1D,QAAQ,gBAAA,CAAiB,OAAA,CAAQ,SAAS,CAAA,CAAE,SAAS,mBAAmB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxE,WAAWA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,6BAA6B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKvE,SAAA,EAAWA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,wBAAwB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKvD,WAAWA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,+BAA+B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKzE,WAAWA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,uBAAuB;AACnE,CAAC;AClGM,IAAM,YAAA,GAAe;AAAA,EAC1B,IAAA,EAAM,4CAAA;AAAA,EACN,KAAA,EAAO,6CAAA;AAAA,EACP,eAAA,EAAiB,4DAAA;AAAA,EACjB,aAAA,EAAe,oDAAA;AAAA,EACf,uBAAA,EAAyB,6DAAA;AAAA,EACzB,MAAA,EAAQ,8CAAA;AAAA,EACR,aAAA,EAAe,oDAAA;AAAA,EACf,QAAA,EAAU,+CAAA;AAAA,EACV,YAAA,EAAc,mDAAA;AAAA,EACd,aAAA,EAAe,oDAAA;AAAA,EACf,KAAA,EAAO;AACT;AAMO,IAAM,cAAA,GAAiBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrC,cAAcA,KAAAA,CAAE,MAAA,GACb,QAAA,EAAS,CACT,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,OAAA,EAASA,MAAE,MAAA,EAAO,CACf,UAAS,CACT,QAAA,EAAS,CACT,QAAA,CAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKhC,YAAA,EAAcA,MAAE,MAAA,EAAO,CACpB,UAAS,CACT,QAAA,EAAS,CACT,QAAA,CAAS,6BAA6B,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMzC,QAAA,EAAUA,MAAE,MAAA,EAAO,CAChB,KAAI,CACJ,QAAA,EAAS,CACT,QAAA,CAAS,uBAAuB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMnC,SAASA,KAAAA,CAAE,MAAA,GACR,QAAA,EAAS,CACT,SAAS,2CAA2C;AACzD,CAAC;AAQM,IAAM,cAAA,GAAiBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrC,WAAWA,KAAAA,CAAE,MAAA,GACV,QAAA,EAAS,CACT,SAAS,qBAAqB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMjC,YAAYA,KAAAA,CAAE,MAAA,GACX,QAAA,EAAS,CACT,SAAS,yBAAyB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrC,WAAWA,KAAAA,CAAE,MAAA,GACV,QAAA,EAAS,CACT,SAAS,yBAAyB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMrC,YAAYA,KAAAA,CAAE,MAAA,GACX,QAAA,EAAS,CACT,SAAS,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMzB,iBAAiBA,KAAAA,CAAE,MAAA,GAChB,QAAA,EAAS,CACT,SAAS,kCAAkC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM9C,iBAAiBA,KAAAA,CAAE,MAAA,GAChB,QAAA,EAAS,CACT,SAAS,6BAA6B;AAC3C,CAAC;AAQM,IAAM,eAAA,GAAkBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAItC,OAAOA,KAAAA,CAAE,MAAA,GACN,KAAA,EAAM,CACN,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM3B,IAAA,EAAMA,KAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAC,CAAA,CACnC,QAAA,EAAS,CACT,QAAA,CAAS,YAAY,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxB,SAASA,KAAAA,CAAE,MAAA,GACR,QAAA,EAAS,CACT,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,OAAA,EAASA,KAAAA,CAAE,OAAA,EAAQ,CAChB,QAAA,GACA,OAAA,CAAQ,KAAK,CAAA,CACb,QAAA,CAAS,yBAAyB;AACvC,CAAC;AAQM,IAAM,qBAAA,GAAwBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAK5C,KAAA,EAAOA,KAAAA,CAAE,MAAA,EAAO,CACb,SAAS,cAAc,CAAA;AAAA;AAAA;AAAA;AAAA,EAK1B,IAAA,EAAMA,KAAAA,CAAE,IAAA,CAAK,CAAC,QAAQ,MAAA,EAAQ,QAAA,EAAU,KAAA,EAAO,OAAA,EAAS,OAAO,CAAC,CAAA,CAC7D,QAAA,EAAS,CACT,SAAS,mBAAmB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK/B,SAASA,KAAAA,CAAE,MAAA,GACR,QAAA,EAAS,CACT,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,OAAA,EAASA,KAAAA,CAAE,OAAA,EAAQ,CAChB,QAAA,GACA,OAAA,CAAQ,KAAK,CAAA,CACb,QAAA,CAAS,yBAAyB;AACvC,CAAC;AAQM,IAAM,iBAAA,GAAoBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAIxC,WAAWA,KAAAA,CAAE,MAAA,GACV,QAAA,EAAS,CACT,SAAS,mBAAmB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK/B,eAAeA,KAAAA,CAAE,MAAA,GACd,QAAA,EAAS,CACT,SAAS,gBAAgB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK5B,UAAUA,KAAAA,CAAE,MAAA,GACT,QAAA,EAAS,CACT,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,QAAQA,KAAAA,CAAE,MAAA,GACP,QAAA,EAAS,CACT,SAAS,cAAc,CAAA;AAAA;AAAA;AAAA;AAAA,EAK1B,YAAYA,KAAAA,CAAE,MAAA,GACX,QAAA,EAAS,CACT,SAAS,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA,EAKzB,SAASA,KAAAA,CAAE,MAAA,GACR,QAAA,EAAS,CACT,SAAS,SAAS,CAAA;AAAA;AAAA;AAAA;AAAA,EAKrB,IAAA,EAAMA,KAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAC,CAAA,CACnC,QAAA,EAAS,CACT,QAAA,CAAS,cAAc,CAAA;AAAA;AAAA;AAAA;AAAA,EAK1B,OAAA,EAASA,KAAAA,CAAE,OAAA,EAAQ,CAChB,QAAA,GACA,OAAA,CAAQ,KAAK,CAAA,CACb,QAAA,CAAS,2BAA2B;AACzC,CAAC;AAQM,IAAM,wBAAA,GAA2BA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAI/C,KAAA,EAAOA,KAAAA,CAAE,MAAA,EAAO,CACb,SAAS,UAAU,CAAA;AAAA;AAAA;AAAA;AAAA,EAKtB,IAAA,EAAMA,MAAE,MAAA,EAAO,CACZ,KAAI,CACJ,QAAA,EAAS,CACT,QAAA,CAAS,4BAA4B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxC,SAASA,KAAAA,CAAE,MAAA,GACR,QAAA,EAAS,CACT,SAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKhC,IAAA,EAAMA,KAAAA,CAAE,IAAA,CAAK,CAAC,QAAA,EAAU,UAAU,CAAC,CAAA,CAChC,QAAA,EAAS,CACT,QAAA,CAAS,iBAAiB;AAC/B,CAAC;AAQM,IAAM,wBAAA,GAA2BA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAI/C,gBAAgBA,KAAAA,CAAE,MAAA,GACf,QAAA,EAAS,CACT,SAAS,iBAAiB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK7B,YAAYA,KAAAA,CAAE,MAAA,GACX,QAAA,EAAS,CACT,SAAS,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA,EAKzB,cAAcA,KAAAA,CAAE,MAAA,GACb,QAAA,EAAS,CACT,SAAS,cAAc,CAAA;AAAA;AAAA;AAAA;AAAA,EAK1B,UAAUA,KAAAA,CAAE,MAAA,GACT,QAAA,EAAS,CACT,SAAS,UAAU,CAAA;AAAA;AAAA;AAAA;AAAA,EAKtB,YAAYA,KAAAA,CAAE,MAAA,GACX,QAAA,EAAS,CACT,SAAS,YAAY,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxB,OAAA,EAASA,MAAE,MAAA,CAAO;AAAA,IAChB,KAAA,EAAOA,KAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,YAAY,CAAA;AAAA,IACvC,IAAA,EAAMA,MAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,aAAa,CAAA;AAAA,IACxD,aAAaA,KAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,cAAc;AAAA,GAC3D,CAAA,CACE,QAAA,EAAS,CACT,SAAS,mBAAmB;AACjC,CAAC;AAQM,IAAM,cAAA,GAAiBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrC,OAAA,EAASA,MAAE,KAAA,CAAMA,KAAAA,CAAE,QAAQ,CAAA,CACxB,GAAA,CAAI,CAAC,CAAA,CACL,MAAA;AAAA,IACC,CAAC,OAAA,KAAY,OAAA,CAAQ,QAAA,CAAS,aAAa,IAAI,CAAA;AAAA,IAC/C;AAAA,GACF,CACC,QAAQ,CAAC,YAAA,CAAa,IAAI,CAAC,CAAA,CAC3B,SAAS,6CAA6C,CAAA;AAAA;AAAA;AAAA;AAAA,EAKzD,IAAIA,KAAAA,CAAE,MAAA,GACH,QAAA,EAAS,CACT,SAAS,4BAA4B,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMxC,YAAYA,KAAAA,CAAE,MAAA,GACX,QAAA,EAAS,CACT,SAAS,wCAAwC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpD,QAAA,EAAUA,KAAAA,CAAE,MAAA,EAAO,CAChB,SAAS,4BAA4B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxC,IAAA,EAAM,cAAA,CACH,QAAA,EAAS,CACT,SAAS,4BAA4B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxC,aAAaA,KAAAA,CAAE,MAAA,GACZ,QAAA,EAAS,CACT,SAAS,qBAAqB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKjC,UAAUA,KAAAA,CAAE,MAAA,GACT,QAAA,EAAS,CACT,SAAS,UAAU,CAAA;AAAA;AAAA;AAAA;AAAA,EAKtB,UAAA,EAAYA,MAAE,MAAA,EAAO,CAClB,KAAI,CACJ,QAAA,EAAS,CACT,QAAA,CAAS,kBAAkB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,OAAOA,KAAAA,CAAE,MAAA,GACN,QAAA,EAAS,CACT,SAAS,WAAW,CAAA;AAAA;AAAA;AAAA;AAAA,EAKvB,UAAUA,KAAAA,CAAE,MAAA,GACT,QAAA,EAAS,CACT,SAAS,kCAAkC,CAAA;AAAA;AAAA;AAAA;AAAA,EAK9C,mBAAmBA,KAAAA,CAAE,MAAA,GAClB,QAAA,EAAS,CACT,SAAS,gCAAgC,CAAA;AAAA;AAAA;AAAA;AAAA,EAK5C,QAAQA,KAAAA,CAAE,MAAA,GACP,QAAA,EAAS,CACT,SAAS,sBAAsB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKlC,UAAUA,KAAAA,CAAE,MAAA,GACT,QAAA,EAAS,CACT,SAAS,UAAU,CAAA;AAAA;AAAA;AAAA;AAAA,EAKtB,MAAA,EAAQA,KAAAA,CAAE,OAAA,EAAQ,CACf,QAAA,GACA,OAAA,CAAQ,IAAI,CAAA,CACZ,QAAA,CAAS,uBAAuB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKnC,UAAUA,KAAAA,CAAE,MAAA,GACT,QAAA,EAAS,CACT,SAAS,uBAAuB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKnC,MAAA,EAAQA,MAAE,KAAA,CAAM,eAAe,EAC5B,QAAA,EAAS,CACT,SAAS,iBAAiB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK7B,YAAA,EAAcA,MAAE,KAAA,CAAM,qBAAqB,EACxC,QAAA,EAAS,CACT,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,GAAA,EAAKA,KAAAA,CAAE,KAAA,CAAMA,KAAAA,CAAE,MAAA,CAAO;AAAA,IACpB,KAAA,EAAOA,MAAE,MAAA,EAAO;AAAA,IAChB,IAAA,EAAMA,KAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC1B,OAAA,EAASA,KAAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,GAC/B,CAAC,CAAA,CACC,QAAA,EAAS,CACT,SAAS,cAAc,CAAA;AAAA;AAAA;AAAA;AAAA,EAK1B,MAAA,EAAQA,KAAAA,CAAE,KAAA,CAAMA,KAAAA,CAAE,MAAA,CAAO;AAAA,IACvB,KAAA,EAAOA,KAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI;AAAA,IACtB,IAAA,EAAMA,MAAE,IAAA,CAAK,CAAC,SAAS,WAAW,CAAC,EAAE,QAAA,EAAS;AAAA,IAC9C,OAAA,EAASA,KAAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,GAC/B,CAAC,CAAA,CACC,QAAA,EAAS,CACT,SAAS,YAAY,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxB,SAAA,EAAWA,MAAE,KAAA,CAAM,iBAAiB,EACjC,QAAA,EAAS,CACT,SAAS,oBAAoB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKhC,MAAA,EAAQA,MAAE,KAAA,CAAM,wBAAwB,EACrC,QAAA,EAAS,CACT,SAAS,mBAAmB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK/B,YAAA,EAAcA,KAAAA,CAAE,KAAA,CAAMA,KAAAA,CAAE,MAAA,CAAO;AAAA,IAC7B,KAAA,EAAOA,MAAE,MAAA,EAAO;AAAA,IAChB,IAAA,EAAMA,KAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC1B,OAAA,EAASA,KAAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,GAC/B,CAAC,CAAA,CACC,QAAA,EAAS,CACT,SAAS,cAAc,CAAA;AAAA;AAAA;AAAA;AAAA,EAK1B,KAAA,EAAOA,KAAAA,CAAE,KAAA,CAAMA,KAAAA,CAAE,MAAA,CAAO;AAAA,IACtB,KAAA,EAAOA,MAAE,MAAA,EAAO;AAAA,IAChB,IAAA,EAAMA,KAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC1B,OAAA,EAASA,KAAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,GAC/B,CAAC,CAAA,CACC,QAAA,EAAS,CACT,SAAS,OAAO,CAAA;AAAA;AAAA;AAAA;AAAA,EAKnB,gBAAA,EAAkBA,KAAAA,CAAE,KAAA,CAAMA,KAAAA,CAAE,MAAA,CAAO;AAAA,IACjC,KAAA,EAAOA,MAAE,MAAA,EAAO;AAAA,IAChB,IAAA,EAAMA,KAAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC1B,OAAA,EAASA,KAAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,GAC/B,CAAC,CAAA,CACC,QAAA,EAAS,CACT,SAAS,mBAAmB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK/B,IAAA,EAAM,cAAA,CACH,QAAA,EAAS,CACT,SAAS,mBAAmB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAM/B,CAAC,aAAa,eAAe,GAAG,yBAC7B,QAAA,EAAS,CACT,SAAS,4BAA4B;AAC1C,CAAC,CAAA,CAAE,WAAA,CAAY,CAAC,IAAA,EAAM,GAAA,KAAQ;AAE5B,EAAA,MAAM,sBAAA,GAAyB,IAAA,CAAK,YAAA,CAAa,eAAe,CAAA,IAAK,IAAA;AACrE,EAAA,IAAI,CAAC,sBAAA,EAAwB;AAC3B,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,IAAW,EAAC;AACjC,EAAA,IAAI,CAAC,OAAA,CAAQ,QAAA,CAAS,YAAA,CAAa,eAAe,CAAA,EAAG;AACnD,IAAA,GAAA,CAAI,QAAA,CAAS;AAAA,MACX,IAAA,EAAMA,MAAE,YAAA,CAAa,MAAA;AAAA,MACrB,IAAA,EAAM,CAAC,SAAS,CAAA;AAAA,MAChB,OAAA,EAAS,CAAA,sBAAA,EAAyB,YAAA,CAAa,eAAe,CAAA,uDAAA;AAAA,KAC/D,CAAA;AAAA,EACH;AACF,CAAC;AAQM,IAAM,yBAAA,GAA4BA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAIhD,KAAA,EAAOA,KAAAA,CAAE,MAAA,EAAO,CACb,SAAS,WAAW,CAAA;AAAA;AAAA;AAAA;AAAA,EAKvB,IAAA,EAAMA,MAAE,MAAA,EAAO,CACZ,KAAI,CACJ,QAAA,EAAS,CACT,QAAA,CAAS,6BAA6B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKzC,IAAA,EAAMA,KAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,OAAO,CAAC,CAAA,CAC3B,QAAA,EAAS,CACT,QAAA,CAAS,aAAa,CAAA;AAAA;AAAA;AAAA;AAAA,EAKzB,SAASA,KAAAA,CAAE,MAAA,GACR,QAAA,EAAS,CACT,SAAS,qBAAqB;AACnC,CAAC;AAQM,IAAM,eAAA,GAAkBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtC,OAAA,EAASA,MAAE,KAAA,CAAMA,KAAAA,CAAE,QAAQ,CAAA,CACxB,GAAA,CAAI,CAAC,CAAA,CACL,MAAA;AAAA,IACC,CAAC,OAAA,KAAY,OAAA,CAAQ,QAAA,CAAS,aAAa,KAAK,CAAA;AAAA,IAChD;AAAA,GACF,CACC,QAAQ,CAAC,YAAA,CAAa,KAAK,CAAC,CAAA,CAC5B,SAAS,8CAA8C,CAAA;AAAA;AAAA;AAAA;AAAA,EAK1D,IAAIA,KAAAA,CAAE,MAAA,GACH,QAAA,EAAS,CACT,SAAS,4BAA4B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKxC,YAAYA,KAAAA,CAAE,MAAA,GACX,QAAA,EAAS,CACT,SAAS,wCAAwC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMpD,WAAA,EAAaA,KAAAA,CAAE,MAAA,EAAO,CACnB,SAAS,+BAA+B,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3C,OAAA,EAASA,MAAE,KAAA,CAAM,yBAAyB,EACvC,QAAA,EAAS,CACT,SAAS,eAAe,CAAA;AAAA;AAAA;AAAA;AAAA,EAK3B,IAAA,EAAM,cAAA,CACH,QAAA,EAAS,CACT,SAAS,mBAAmB;AACjC,CAAC;AAiBM,IAAM,sBAAA,GAAyBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAI7C,OAAA,EAASA,MAAE,KAAA,CAAMA,KAAAA,CAAE,QAAQ,CAAA,CACxB,GAAA,CAAI,CAAC,CAAA,CACL,MAAA;AAAA,IACC,CAAC,OAAA,KAAY,OAAA,CAAQ,QAAA,CAAS,aAAa,aAAa,CAAA;AAAA,IACxD,EAAE,OAAA,EAAS,CAAA,qBAAA,EAAwB,YAAA,CAAa,aAAa,CAAA,CAAA;AAAG,GAClE,CACC,QAAQ,CAAC,YAAA,CAAa,aAAa,CAAC,CAAA,CACpC,SAAS,kBAAkB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,YAAA,EAAcA,KAAAA,CAAE,MAAA,EAAO,CACpB,GAAA,GACA,GAAA,CAAI,CAAC,CAAA,CACL,QAAA,CAAS,qBAAqB,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMjC,SAAA,EAAWA,MAAE,KAAA,CAAMA,KAAAA,CAAE,MAAM,CAAC,cAAA,EAAgB,iBAAiBA,KAAAA,CAAE,MAAA,CAAOA,MAAE,MAAA,EAAO,EAAGA,MAAE,OAAA,EAAS,CAAC,CAAC,CAAC,CAAA,CAC7F,QAAA,CAAS,sDAAsD,CAAA;AAAA;AAAA;AAAA;AAAA,EAKlE,UAAA,EAAYA,KAAAA,CAAE,MAAA,EAAO,CAClB,GAAA,EAAI,CACJ,GAAA,CAAI,CAAC,CAAA,CACL,QAAA,EAAS,CACT,QAAA,CAAS,uBAAuB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKnC,YAAA,EAAcA,KAAAA,CAAE,MAAA,EAAO,CACpB,GAAA,EAAI,CACJ,GAAA,CAAI,CAAC,CAAA,CACL,QAAA,EAAS,CACT,QAAA,CAAS,gBAAgB;AAC9B,CAAC;AAQM,IAAM,eAAA,GAAkBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAItC,OAAA,EAASA,MAAE,KAAA,CAAMA,KAAAA,CAAE,QAAQ,CAAA,CACxB,GAAA,CAAI,CAAC,CAAA,CACL,MAAA;AAAA,IACC,CAAC,OAAA,KAAY,OAAA,CAAQ,QAAA,CAAS,aAAa,KAAK,CAAA;AAAA,IAChD,EAAE,OAAA,EAAS,CAAA,qBAAA,EAAwB,YAAA,CAAa,KAAK,CAAA,CAAA;AAAG,GAC1D,CACC,QAAQ,CAAC,YAAA,CAAa,KAAK,CAAC,CAAA,CAC5B,SAAS,kBAAkB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,MAAA,EAAQA,KAAAA,CAAE,MAAA,EAAO,CACd,GAAA,EAAI,CACJ,GAAA,CAAI,GAAG,CAAA,CACP,GAAA,CAAI,GAAG,CAAA,CACP,SAAS,kBAAkB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,QAAA,EAAUA,MAAE,IAAA,CAAK;AAAA,IACf,eAAA;AAAA,IACA,SAAA;AAAA,IACA,YAAA;AAAA,IACA,YAAA;AAAA,IACA,eAAA;AAAA,IACA,aAAA;AAAA,IACA,UAAA;AAAA,IACA,cAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACD,CAAA,CACE,QAAA,EAAS,CACT,SAAS,iBAAiB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK7B,QAAQA,KAAAA,CAAE,MAAA,GACP,QAAA,EAAS,CACT,SAAS,sBAAsB;AACpC,CAAC;AAQM,IAAM,wBAAA,GAA2BA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAI/C,EAAA,EAAIA,KAAAA,CAAE,IAAA,CAAK,CAAC,KAAA,EAAO,UAAU,SAAS,CAAC,CAAA,CACpC,QAAA,CAAS,gBAAgB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK5B,MAAMA,KAAAA,CAAE,MAAA,GACL,QAAA,EAAS,CACT,SAAS,mCAAmC,CAAA;AAAA;AAAA;AAAA;AAAA,EAK/C,OAAOA,KAAAA,CAAE,OAAA,GACN,QAAA,EAAS,CACT,SAAS,cAAc;AAC5B,CAAC;AAOM,IAAM,sBAAA,GAAyBA,MAAE,MAAA,CAAO;AAAA;AAAA;AAAA;AAAA,EAI7C,OAAA,EAASA,MAAE,KAAA,CAAMA,KAAAA,CAAE,QAAQ,CAAA,CACxB,GAAA,CAAI,CAAC,CAAA,CACL,MAAA;AAAA,IACC,CAAC,OAAA,KAAY,OAAA,CAAQ,QAAA,CAAS,aAAa,QAAQ,CAAA;AAAA,IACnD,EAAE,SAAS,yDAAA;AAA0D,GACvE,CACC,QAAQ,CAAC,YAAA,CAAa,QAAQ,CAAC,CAAA,CAC/B,SAAS,kBAAkB,CAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,UAAA,EAAYA,MAAE,KAAA,CAAM,wBAAwB,EACzC,GAAA,CAAI,CAAC,CAAA,CACL,QAAA,CAAS,kBAAkB;AAChC,CAAC;AAOM,IAAM,IAAA,GAAO;AAAA;AAAA;AAAA;AAAA,EAIlB,IAAA,EAAM,CAAC,QAAA,EAAkB,KAAA,EAAe,WAAoB,UAAA,MAAmC;AAAA,IAC7F,OAAA,EAAS,CAAC,YAAA,CAAa,IAAI,CAAA;AAAA,IAC3B,QAAA;AAAA,IACA,MAAA,EAAQ,CAAC,EAAE,KAAA,EAAO,OAAO,IAAA,EAAM,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,CAAA;AAAA,IACtD,IAAA,EAAM;AAAA,MACJ,SAAA;AAAA,MACA;AAAA,KACF;AAAA,IACA,MAAA,EAAQ;AAAA,GACV,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,EAAO,CAAC,WAAA,EAAqB,OAAA,MAAgD;AAAA,IAC3E,OAAA,EAAS,CAAC,YAAA,CAAa,KAAK,CAAA;AAAA,IAC5B,WAAA;AAAA,IACA,OAAA,EAAS,WAAW;AAAC,GACvB,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,YAAA,EAAc,CAAI,SAAA,EAAgB,YAAA,MAA6C;AAAA,IAC7E,OAAA,EAAS,CAAC,YAAA,CAAa,aAAa,CAAA;AAAA,IACpC,YAAA,EAAc,gBAAgB,SAAA,CAAU,MAAA;AAAA,IACxC,SAAA,EAAW,SAAA;AAAA,IACX,UAAA,EAAY,CAAA;AAAA,IACZ,cAAc,SAAA,CAAU;AAAA,GAC1B,CAAA;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,EAAO,CACL,MAAA,EACA,MAAA,EACA,QAAA,MAGe;AAAA,IACf,OAAA,EAAS,CAAC,YAAA,CAAa,KAAK,CAAA;AAAA,IAC5B,MAAA;AAAA,IACA,MAAA;AAAA,IACA;AAAA,GACF;AACF;AAQO,IAAM,uBAAA,GAA0BA,MAAE,MAAA,CAAO;AAAA;AAAA,EAE9C,MAAA,EAAQA,KAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,KAAA,EAAO,OAAA,EAAS,QAAQ,CAAC,CAAA,CAC9C,QAAA,CAAS,oCAAoC,CAAA;AAAA;AAAA,EAGhD,IAAA,EAAMA,KAAAA,CAAE,MAAA,EAAO,CACZ,SAAS,oDAAoD,CAAA;AAAA;AAAA,EAGhE,QAAQA,KAAAA,CAAE,MAAA,GACP,QAAA,EAAS,CACT,SAAS,6DAA6D,CAAA;AAAA;AAAA,EAGzE,IAAA,EAAMA,KAAAA,CAAE,MAAA,CAAOA,KAAAA,CAAE,MAAA,EAAO,EAAGA,KAAAA,CAAE,OAAA,EAAS,CAAA,CACnC,QAAA,EAAS,CACT,SAAS,4CAA4C,CAAA;AAAA;AAAA,EAGxD,SAASA,KAAAA,CAAE,MAAA,GACR,QAAA,EAAS,CACT,SAAS,yCAAyC;AACvD,CAAC;AAQM,IAAM,qBAAA,GAAwBA,MAAE,MAAA,CAAO;AAAA;AAAA,EAE5C,SAASA,KAAAA,CAAE,KAAA,CAAMA,KAAAA,CAAE,OAAA,CAAQ,aAAa,YAAY,CAAC,CAAA,CAClD,OAAA,CAAQ,CAAC,YAAA,CAAa,YAAY,CAAC,CAAA,CACnC,SAAS,gCAAgC,CAAA;AAAA;AAAA,EAG5C,UAAA,EAAYA,MAAE,KAAA,CAAM,uBAAuB,EACxC,GAAA,CAAI,CAAC,CAAA,CACL,QAAA,CAAS,wCAAwC,CAAA;AAAA;AAAA,EAGpD,YAAA,EAAcA,MAAE,MAAA,EAAO,CACpB,KAAI,CACJ,QAAA,EAAS,CACT,QAAA,CAAS,wCAAwC;AACtD,CAAC;AAQM,IAAM,+BAAA,GAAkCA,MAAE,MAAA,CAAO;AAAA;AAAA,EAEtD,MAAA,EAAQA,KAAAA,CAAE,IAAA,CAAK,CAAC,MAAA,EAAQ,KAAA,EAAO,OAAA,EAAS,QAAQ,CAAC,CAAA,CAC9C,QAAA,CAAS,+BAA+B,CAAA;AAAA;AAAA,EAG3C,QAAQA,KAAAA,CAAE,MAAA,GACP,QAAA,EAAS,CACT,SAAS,mCAAmC,CAAA;AAAA;AAAA,EAG/C,UAAUA,KAAAA,CAAE,MAAA,GACT,QAAA,EAAS,CACT,SAAS,yCAAyC,CAAA;AAAA;AAAA,EAGrD,MAAA,EAAQA,KAAAA,CAAE,MAAA,EAAO,CACd,SAAS,gDAAgD,CAAA;AAAA;AAAA,EAG5D,UAAUA,KAAAA,CAAE,OAAA,GACT,QAAA,EAAS,CACT,SAAS,8CAA8C;AAC5D,CAAC;AAQM,IAAM,sBAAA,GAAyBA,MAAE,MAAA,CAAO;AAAA;AAAA,EAE7C,SAASA,KAAAA,CAAE,KAAA,CAAMA,KAAAA,CAAE,OAAA,CAAQ,aAAa,aAAa,CAAC,CAAA,CACnD,OAAA,CAAQ,CAAC,YAAA,CAAa,aAAa,CAAC,CAAA,CACpC,SAAS,iCAAiC,CAAA;AAAA;AAAA,EAG7C,YAAYA,KAAAA,CAAE,KAAA,CAAM,+BAA+B,CAAA,CAChD,SAAS,iCAAiC;AAC/C,CAAC","file":"index.js","sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { z } from 'zod';\n\n/**\n * Identity & User Model Specification\n * \n * Defines the standard user, account, and session data models for ObjectStack.\n * These schemas represent \"who is logged in\" and their associated data.\n * \n * This is separate from authentication configuration (auth.zod.ts) which\n * defines \"how to login\".\n */\n\n/**\n * User Schema\n * Core user identity data model\n */\nexport const UserSchema = z.object({\n  /**\n   * Unique user identifier\n   */\n  id: z.string().describe('Unique user identifier'),\n  \n  /**\n   * User's email address (primary identifier)\n   */\n  email: z.string().email().describe('User email address'),\n  \n  /**\n   * Email verification status\n   */\n  emailVerified: z.boolean().default(false).describe('Whether email is verified'),\n  \n  /**\n   * User's display name\n   */\n  name: z.string().optional().describe('User display name'),\n  \n  /**\n   * User's profile image URL\n   */\n  image: z.string().url().optional().describe('Profile image URL'),\n  \n  /**\n   * Account creation timestamp\n   */\n  createdAt: z.string().datetime().describe('Account creation timestamp'),\n  \n  /**\n   * Last update timestamp\n   */\n  updatedAt: z.string().datetime().describe('Last update timestamp'),\n});\n\nexport type User = z.infer<typeof UserSchema>;\n\n/**\n * Account Schema\n * Links external OAuth/OIDC/SAML accounts to a user\n */\nexport const AccountSchema = z.object({\n  /**\n   * Unique account identifier\n   */\n  id: z.string().describe('Unique account identifier'),\n  \n  /**\n   * Associated user ID\n   */\n  userId: z.string().describe('Associated user ID'),\n  \n  /**\n   * Account type/provider\n   */\n  type: z.enum([\n    'oauth',\n    'oidc',\n    'email',\n    'credentials',\n    'saml',\n    'ldap',\n  ]).describe('Account type'),\n  \n  /**\n   * Provider name (e.g., 'google', 'github', 'okta')\n   */\n  provider: z.string().describe('Provider name'),\n  \n  /**\n   * Provider account ID\n   */\n  providerAccountId: z.string().describe('Provider account ID'),\n  \n  /**\n   * OAuth refresh token\n   */\n  refreshToken: z.string().optional().describe('OAuth refresh token'),\n  \n  /**\n   * OAuth access token\n   */\n  accessToken: z.string().optional().describe('OAuth access token'),\n  \n  /**\n   * Token expiry timestamp\n   */\n  expiresAt: z.number().optional().describe('Token expiry timestamp (Unix)'),\n  \n  /**\n   * OAuth token type\n   */\n  tokenType: z.string().optional().describe('OAuth token type'),\n  \n  /**\n   * OAuth scope\n   */\n  scope: z.string().optional().describe('OAuth scope'),\n  \n  /**\n   * OAuth ID token\n   */\n  idToken: z.string().optional().describe('OAuth ID token'),\n  \n  /**\n   * Session state\n   */\n  sessionState: z.string().optional().describe('Session state'),\n  \n  /**\n   * Account creation timestamp\n   */\n  createdAt: z.string().datetime().describe('Account creation timestamp'),\n  \n  /**\n   * Last update timestamp\n   */\n  updatedAt: z.string().datetime().describe('Last update timestamp'),\n});\n\nexport type Account = z.infer<typeof AccountSchema>;\n\n/**\n * Session Schema\n * User session data model\n */\nexport const SessionSchema = z.object({\n  /**\n   * Unique session identifier\n   */\n  id: z.string().describe('Unique session identifier'),\n  \n  /**\n   * Session token\n   */\n  sessionToken: z.string().describe('Session token'),\n  \n  /**\n   * Associated user ID\n   */\n  userId: z.string().describe('Associated user ID'),\n  \n  /**\n   * Active organization ID for this session\n   * Used for context switching in multi-tenant applications\n   */\n  activeOrganizationId: z.string().optional().describe('Active organization ID for context switching'),\n  \n  /**\n   * Session expiry timestamp\n   */\n  expires: z.string().datetime().describe('Session expiry timestamp'),\n  \n  /**\n   * Session creation timestamp\n   */\n  createdAt: z.string().datetime().describe('Session creation timestamp'),\n  \n  /**\n   * Last update timestamp\n   */\n  updatedAt: z.string().datetime().describe('Last update timestamp'),\n  \n  /**\n   * IP address of the session\n   */\n  ipAddress: z.string().optional().describe('IP address'),\n  \n  /**\n   * User agent string\n   */\n  userAgent: z.string().optional().describe('User agent string'),\n  \n  /**\n   * Device fingerprint\n   */\n  fingerprint: z.string().optional().describe('Device fingerprint'),\n});\n\nexport type Session = z.infer<typeof SessionSchema>;\n\n/**\n * Verification Token Schema\n * Email verification and password reset tokens\n */\nexport const VerificationTokenSchema = z.object({\n  /**\n   * Token identifier (email or phone)\n   */\n  identifier: z.string().describe('Token identifier (email or phone)'),\n  \n  /**\n   * Verification token\n   */\n  token: z.string().describe('Verification token'),\n  \n  /**\n   * Token expiry timestamp\n   */\n  expires: z.string().datetime().describe('Token expiry timestamp'),\n  \n  /**\n   * Token creation timestamp\n   */\n  createdAt: z.string().datetime().describe('Token creation timestamp'),\n});\n\nexport type VerificationToken = z.infer<typeof VerificationTokenSchema>;\n\n/**\n * API Key Schema\n *\n * Aligns with better-auth's API key plugin capabilities.\n * Provides programmatic access to ObjectStack APIs (CI/CD, service-to-service, CLI).\n *\n * @see https://www.better-auth.com/docs/plugins/api-key\n */\nexport const ApiKeySchema = z.object({\n  /**\n   * Unique API key identifier\n   */\n  id: z.string().describe('API key identifier'),\n\n  /**\n   * Human-readable name for the key\n   */\n  name: z.string().describe('API key display name'),\n\n  /**\n   * Key prefix (visible portion for identification, e.g., \"os_pk_ab\")\n   */\n  start: z.string().optional().describe('Key prefix for identification'),\n\n  /**\n   * Custom prefix for the key (e.g., \"os_pk_\")\n   */\n  prefix: z.string().optional().describe('Custom key prefix'),\n\n  /**\n   * User ID of the key owner\n   */\n  userId: z.string().describe('Owner user ID'),\n\n  /**\n   * Organization ID the key is scoped to (optional)\n   */\n  organizationId: z.string().optional().describe('Scoped organization ID'),\n\n  /**\n   * Key expiration timestamp (null = never expires)\n   */\n  expiresAt: z.string().datetime().optional().describe('Expiration timestamp'),\n\n  /**\n   * Creation timestamp\n   */\n  createdAt: z.string().datetime().describe('Creation timestamp'),\n\n  /**\n   * Last update timestamp\n   */\n  updatedAt: z.string().datetime().describe('Last update timestamp'),\n\n  /**\n   * Last used timestamp\n   */\n  lastUsedAt: z.string().datetime().optional().describe('Last used timestamp'),\n\n  /**\n   * Last refetch timestamp (for cached permission checks)\n   */\n  lastRefetchAt: z.string().datetime().optional().describe('Last refetch timestamp'),\n\n  /**\n   * Whether this key is enabled\n   */\n  enabled: z.boolean().default(true).describe('Whether the key is active'),\n\n  /**\n   * Rate limiting: enabled flag\n   */\n  rateLimitEnabled: z.boolean().optional().describe('Whether rate limiting is enabled'),\n\n  /**\n   * Rate limiting: time window in milliseconds\n   */\n  rateLimitTimeWindow: z.number().int().min(0).optional().describe('Rate limit window (ms)'),\n\n  /**\n   * Rate limiting: max requests per window\n   */\n  rateLimitMax: z.number().int().min(0).optional().describe('Max requests per window'),\n\n  /**\n   * Rate limiting: remaining requests in current window\n   */\n  remaining: z.number().int().min(0).optional().describe('Remaining requests'),\n\n  /**\n   * Permissions assigned to this key (granular access control)\n   */\n  permissions: z.record(z.string(), z.boolean()).optional()\n    .describe('Granular permission flags'),\n\n  /**\n   * Scopes assigned to this key (high-level access categories)\n   */\n  scopes: z.array(z.string()).optional()\n    .describe('High-level access scopes'),\n\n  /**\n   * Custom metadata\n   */\n  metadata: z.record(z.string(), z.unknown()).optional().describe('Custom metadata'),\n});\n\nexport type ApiKey = z.infer<typeof ApiKeySchema>;\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * Authentication Wire Protocol & Constants\n * \n * Defines the API contract and constants for authentication communication.\n * These constants ensure consistent behavior across all ObjectStack implementations.\n */\n\n/**\n * Authentication Constants\n * Standard headers, prefixes, and identifiers for auth communication\n */\nexport const AUTH_CONSTANTS = {\n  /**\n   * HTTP header key for authentication tokens\n   */\n  HEADER_KEY: 'Authorization',\n  \n  /**\n   * Token prefix for Bearer authentication\n   */\n  TOKEN_PREFIX: 'Bearer ',\n  \n  /**\n   * Cookie prefix for ObjectStack auth cookies\n   */\n  COOKIE_PREFIX: 'os_',\n  \n  /**\n   * CSRF token header name\n   */\n  CSRF_HEADER: 'x-os-csrf-token',\n  \n  /**\n   * Default session cookie name\n   */\n  SESSION_COOKIE: 'os_session_token',\n  \n  /**\n   * Default CSRF cookie name\n   */\n  CSRF_COOKIE: 'os_csrf_token',\n  \n  /**\n   * Refresh token cookie name\n   */\n  REFRESH_TOKEN_COOKIE: 'os_refresh_token',\n} as const;\n\n/**\n * Authentication Headers Interface\n * Standard headers used in authenticated requests\n */\nexport interface AuthHeaders {\n  /**\n   * Authorization header with Bearer token\n   * @example \"Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...\"\n   */\n  Authorization?: string;\n  \n  /**\n   * CSRF token header\n   * @example \"x-os-csrf-token: abc123def456...\"\n   */\n  'x-os-csrf-token'?: string;\n  \n  /**\n   * Session ID header (alternative to cookie)\n   * @example \"x-os-session-id: session_abc123...\"\n   */\n  'x-os-session-id'?: string;\n  \n  /**\n   * API key header (for service-to-service auth)\n   * @example \"x-os-api-key: sk_live_abc123...\"\n   */\n  'x-os-api-key'?: string;\n}\n\n/**\n * Authentication Response Interface\n * Standard response format for authentication operations\n */\nexport interface AuthResponse {\n  /**\n   * Access token (JWT or opaque token)\n   */\n  accessToken: string;\n  \n  /**\n   * Refresh token (for token renewal)\n   */\n  refreshToken?: string;\n  \n  /**\n   * Token type (usually \"Bearer\")\n   */\n  tokenType: string;\n  \n  /**\n   * Token expiry in seconds\n   */\n  expiresIn: number;\n  \n  /**\n   * User information\n   */\n  user: {\n    id: string;\n    email: string;\n    name?: string;\n    image?: string;\n  };\n  \n  /**\n   * Session ID\n   */\n  sessionId?: string;\n}\n\n/**\n * Authentication Error Codes\n * Standard error codes for authentication failures\n */\nexport const AUTH_ERROR_CODES = {\n  INVALID_CREDENTIALS: 'invalid_credentials',\n  INVALID_TOKEN: 'invalid_token',\n  TOKEN_EXPIRED: 'token_expired',\n  INSUFFICIENT_PERMISSIONS: 'insufficient_permissions',\n  ACCOUNT_LOCKED: 'account_locked',\n  ACCOUNT_NOT_VERIFIED: 'account_not_verified',\n  TOO_MANY_REQUESTS: 'too_many_requests',\n  INVALID_CSRF_TOKEN: 'invalid_csrf_token',\n  SESSION_EXPIRED: 'session_expired',\n  OAUTH_ERROR: 'oauth_error',\n  PROVIDER_ERROR: 'provider_error',\n} as const;\n\n/**\n * Authentication Error Interface\n * Standard error response format\n */\nexport interface AuthError {\n  /**\n   * Error code from AUTH_ERROR_CODES\n   */\n  code: typeof AUTH_ERROR_CODES[keyof typeof AUTH_ERROR_CODES];\n  \n  /**\n   * Human-readable error message\n   */\n  message: string;\n  \n  /**\n   * Additional error details\n   */\n  details?: Record<string, any>;\n}\n\n/**\n * Token Payload Interface\n * Standard JWT payload structure\n */\nexport interface TokenPayload {\n  /**\n   * Subject (user ID)\n   */\n  sub: string;\n  \n  /**\n   * Issued at timestamp\n   */\n  iat: number;\n  \n  /**\n   * Expiration timestamp\n   */\n  exp: number;\n  \n  /**\n   * Session ID\n   */\n  sid?: string;\n  \n  /**\n   * User email\n   */\n  email?: string;\n  \n  /**\n   * User roles\n   */\n  roles?: string[];\n  \n  /**\n   * User permissions\n   */\n  permissions?: string[];\n  \n  /**\n   * Additional custom claims\n   */\n  [key: string]: any;\n}\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { z } from 'zod';\n\n/**\n * System Identifier Schema\n * \n * Universal naming convention for all machine identifiers (API Names) in ObjectStack.\n * Enforces lowercase with underscores or dots to ensure:\n * - Cross-platform compatibility (case-insensitive filesystems)\n * - URL-friendliness (no encoding needed)\n * - Database consistency (no collation issues)\n * - Security (no case-sensitivity bugs in permission checks)\n * \n * **Applies to all metadata that acts as a machine identifier:**\n * - Object names (tables/collections)\n * - Field names\n * - Role names\n * - Permission set names\n * - Action/trigger names\n * - Event keys\n * - App IDs\n * - Menu/page IDs\n * - Select option values\n * - Workflow names\n * - Webhook names\n * \n * **Naming Convention Summary:**\n * | Type | Pattern | Example |\n * |------|---------|---------|\n * | Machine ID | snake_case | `crm_account`, `btn_submit`, `role_admin` |\n * | Event keys | dot.notation | `user.login`, `order.created` |\n * | Labels | Any case | `Client Account`, `Submit Form` |\n * \n * @example Valid identifiers\n * - 'account'\n * - 'crm_account'\n * - 'user_profile'\n * - 'order.created' (for events)\n * - 'api_v2_endpoint'\n * \n * @example Invalid identifiers (will be rejected)\n * - 'Account' (uppercase)\n * - 'CrmAccount' (camelCase)\n * - 'crm-account' (kebab-case - use underscore instead)\n * - 'user profile' (spaces)\n */\nexport const SystemIdentifierSchema = z\n  .string()\n  .min(2, { message: 'System identifier must be at least 2 characters' })\n  .regex(/^[a-z][a-z0-9_.]*$/, {\n    message:\n      'System identifier must be lowercase, starting with a letter, and may contain letters, numbers, underscores, or dots (e.g., \"user_profile\" or \"order.created\")',\n  })\n  .describe('System identifier (lowercase with underscores or dots)');\n\n/**\n * Strict Snake Case Identifier\n * \n * More restrictive than SystemIdentifierSchema - only allows underscores (no dots).\n * Use this for identifiers that should NOT contain dots (e.g., database table/column names).\n * \n * @example Valid\n * - 'account'\n * - 'crm_account'\n * - 'user_profile'\n * \n * @example Invalid\n * - 'user.profile' (dots not allowed)\n * - 'UserProfile' (uppercase)\n */\nexport const SnakeCaseIdentifierSchema = z\n  .string()\n  .min(2, { message: 'Identifier must be at least 2 characters' })\n  .regex(/^[a-z][a-z0-9_]*$/, {\n    message:\n      'Identifier must be lowercase snake_case, starting with a letter, and may contain only letters, numbers, and underscores (e.g., \"user_profile\")',\n  })\n  .describe('Snake case identifier (lowercase with underscores only)');\n\n/**\n * Event Name Identifier\n * \n * Specialized identifier for event names that encourages dot notation.\n * Used in event-driven systems, message queues, and webhooks.\n * \n * Pattern: `namespace.action` or `entity.event_type`\n * \n * @example Valid\n * - 'user.created'\n * - 'order.paid'\n * - 'user.login_success'\n * - 'alarm.high_cpu'\n * \n * @example Invalid\n * - 'UserCreated' (camelCase)\n * - 'user_created' (should use dots for namespacing)\n */\nexport const EventNameSchema = z\n  .string()\n  .min(3, { message: 'Event name must be at least 3 characters' })\n  .regex(/^[a-z][a-z0-9_.]*$/, {\n    message:\n      'Event name must be lowercase with dots for namespacing (e.g., \"user.created\", \"order.paid\")',\n  })\n  .describe('Event name (lowercase with dot notation for namespacing)');\n\n/**\n * Type Exports\n */\nexport type SystemIdentifier = z.infer<typeof SystemIdentifierSchema>;\nexport type SnakeCaseIdentifier = z.infer<typeof SnakeCaseIdentifierSchema>;\nexport type EventName = z.infer<typeof EventNameSchema>;\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { z } from 'zod';\nimport { SnakeCaseIdentifierSchema } from '../shared/identifiers.zod';\n\n/**\n * Role Schema (aka Business Unit / Org Unit)\n * Defines the organizational hierarchy (Reporting Structure).\n * \n * COMPARISON:\n * - Salesforce: \"Role\" (Hierarchy for visibility rollup)\n * - Microsoft: \"Business Unit\" (Structural container for data)\n * - Kubernetes/AWS: \"Role\" usually refers to Permissions (we use PermissionSet for that)\n * \n * ROLES IN OBJECTSTACK:\n * Used primarily for \"Reporting Structure\" - Managers see subordinates' data.\n * \n * **NAMING CONVENTION:**\n * Role names MUST be lowercase snake_case to prevent security issues.\n * \n * @example Good role names\n * - 'sales_manager'\n * - 'ceo'\n * - 'region_east_vp'\n * - 'engineering_lead'\n * \n * @example Bad role names (will be rejected)\n * - 'SalesManager' (camelCase)\n * - 'CEO' (uppercase)\n * - 'Region East VP' (spaces and uppercase)\n */\nexport const RoleSchema = z.object({\n  /** Identity */\n  name: SnakeCaseIdentifierSchema.describe('Unique role name (lowercase snake_case)'),\n  label: z.string().describe('Display label (e.g. VP of Sales)'),\n  \n  /** Hierarchy */\n  parent: z.string().optional().describe('Parent Role ID (Reports To)'),\n  \n  /** Description */\n  description: z.string().optional(),\n});\n\nexport type Role = z.infer<typeof RoleSchema>;\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { z } from 'zod';\n\n/**\n * Organization Schema (Multi-Tenant Architecture)\n * \n * Defines the standard organization/workspace model for ObjectStack.\n * Supports B2B SaaS scenarios where users belong to multiple teams/workspaces.\n * \n * This aligns with better-auth's organization plugin capabilities.\n */\n\n/**\n * Organization Schema\n * Represents a team, workspace, or tenant in a multi-tenant application\n */\nexport const OrganizationSchema = z.object({\n  /**\n   * Unique organization identifier\n   */\n  id: z.string().describe('Unique organization identifier'),\n  \n  /**\n   * Organization name (display name)\n   */\n  name: z.string().describe('Organization display name'),\n  \n  /**\n   * Organization slug (URL-friendly identifier)\n   * Must be unique across all organizations\n   */\n  slug: z.string()\n    .regex(/^[a-z0-9_-]+$/)\n    .describe('Unique URL-friendly slug (lowercase alphanumeric, hyphens, underscores)'),\n  \n  /**\n   * Organization logo URL\n   */\n  logo: z.string().url().optional().describe('Organization logo URL'),\n  \n  /**\n   * Custom metadata for the organization\n   * Can store additional configuration, settings, or custom fields\n   */\n  metadata: z.record(z.string(), z.unknown()).optional().describe('Custom metadata'),\n  \n  /**\n   * Organization creation timestamp\n   */\n  createdAt: z.string().datetime().describe('Organization creation timestamp'),\n  \n  /**\n   * Last update timestamp\n   */\n  updatedAt: z.string().datetime().describe('Last update timestamp'),\n});\n\nexport type Organization = z.infer<typeof OrganizationSchema>;\n\n/**\n * Organization Member Schema\n * Links users to organizations with specific roles\n */\nexport const MemberSchema = z.object({\n  /**\n   * Unique member identifier\n   */\n  id: z.string().describe('Unique member identifier'),\n  \n  /**\n   * Organization ID this membership belongs to\n   */\n  organizationId: z.string().describe('Organization ID'),\n  \n  /**\n   * User ID of the member\n   */\n  userId: z.string().describe('User ID'),\n  \n  /**\n   * Member's role within the organization\n   * Common roles: 'owner', 'admin', 'member', 'guest'\n   * Can be customized per application\n   */\n  role: z.string().describe('Member role (e.g., owner, admin, member, guest)'),\n  \n  /**\n   * Member creation timestamp\n   */\n  createdAt: z.string().datetime().describe('Member creation timestamp'),\n  \n  /**\n   * Last update timestamp\n   */\n  updatedAt: z.string().datetime().describe('Last update timestamp'),\n});\n\nexport type Member = z.infer<typeof MemberSchema>;\n\n/**\n * Invitation Status Enum\n */\nexport const InvitationStatus = z.enum(['pending', 'accepted', 'rejected', 'expired']);\n\nexport type InvitationStatus = z.infer<typeof InvitationStatus>;\n\n/**\n * Organization Invitation Schema\n * Represents an invitation to join an organization\n */\nexport const InvitationSchema = z.object({\n  /**\n   * Unique invitation identifier\n   */\n  id: z.string().describe('Unique invitation identifier'),\n  \n  /**\n   * Organization ID the invitation is for\n   */\n  organizationId: z.string().describe('Organization ID'),\n  \n  /**\n   * Email address of the invitee\n   */\n  email: z.string().email().describe('Invitee email address'),\n  \n  /**\n   * Role the invitee will receive upon accepting\n   * Common roles: 'admin', 'member', 'guest'\n   */\n  role: z.string().describe('Role to assign upon acceptance'),\n  \n  /**\n   * Invitation status\n   */\n  status: InvitationStatus.default('pending').describe('Invitation status'),\n  \n  /**\n   * Invitation expiration timestamp\n   */\n  expiresAt: z.string().datetime().describe('Invitation expiry timestamp'),\n  \n  /**\n   * User ID of the person who sent the invitation\n   */\n  inviterId: z.string().describe('User ID of the inviter'),\n  \n  /**\n   * Invitation creation timestamp\n   */\n  createdAt: z.string().datetime().describe('Invitation creation timestamp'),\n  \n  /**\n   * Last update timestamp\n   */\n  updatedAt: z.string().datetime().describe('Last update timestamp'),\n});\n\nexport type Invitation = z.infer<typeof InvitationSchema>;\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { z } from 'zod';\n\n/**\n * # SCIM 2.0 Protocol Implementation\n * \n * System for Cross-domain Identity Management (SCIM) 2.0 specification\n * implementation for ObjectStack.\n * \n * ## Overview\n * \n * SCIM 2.0 is an HTTP-based protocol for managing user and group identities\n * across domains. It provides a standardized REST API for user provisioning,\n * de-provisioning, and synchronization.\n * \n * ## Use Cases\n * \n * 1. **Enterprise SSO Integration**\n *    - Integrate with Okta, Azure AD, OneLogin\n *    - Automatic user provisioning from corporate directory\n *    - Just-in-Time (JIT) user creation on first login\n * \n * 2. **User Lifecycle Management**\n *    - Automatically create users when they join organization\n *    - Update user attributes when they change roles\n *    - Deactivate users when they leave organization\n * \n * 3. **Group/Department Synchronization**\n *    - Sync organizational structure from AD/LDAP\n *    - Maintain group memberships automatically\n *    - Map corporate roles to application permissions\n * \n * 4. **Compliance & Audit**\n *    - Maintain accurate user directory\n *    - Track all identity changes\n *    - Meet SOX/HIPAA requirements for user management\n * \n * ## Specification References\n * \n * - **RFC 7643**: SCIM Core Schema\n * - **RFC 7644**: SCIM Protocol\n * - **RFC 7642**: SCIM Requirements\n * \n * ## Industry Implementations\n * \n * - **Okta**: Leading SCIM provider\n * - **Azure AD**: Microsoft's identity platform\n * - **OneLogin**: Enterprise SSO provider\n * - **Google Workspace**: Google's identity management\n * \n * @see https://datatracker.ietf.org/doc/html/rfc7643\n * @see https://datatracker.ietf.org/doc/html/rfc7644\n */\n\n/**\n * SCIM Schema URIs\n * Standard schema identifiers defined in RFC 7643\n */\nexport const SCIM_SCHEMAS = {\n  USER: 'urn:ietf:params:scim:schemas:core:2.0:User',\n  GROUP: 'urn:ietf:params:scim:schemas:core:2.0:Group',\n  ENTERPRISE_USER: 'urn:ietf:params:scim:schemas:extension:enterprise:2.0:User',\n  RESOURCE_TYPE: 'urn:ietf:params:scim:schemas:core:2.0:ResourceType',\n  SERVICE_PROVIDER_CONFIG: 'urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig',\n  SCHEMA: 'urn:ietf:params:scim:schemas:core:2.0:Schema',\n  LIST_RESPONSE: 'urn:ietf:params:scim:api:messages:2.0:ListResponse',\n  PATCH_OP: 'urn:ietf:params:scim:api:messages:2.0:PatchOp',\n  BULK_REQUEST: 'urn:ietf:params:scim:api:messages:2.0:BulkRequest',\n  BULK_RESPONSE: 'urn:ietf:params:scim:api:messages:2.0:BulkResponse',\n  ERROR: 'urn:ietf:params:scim:api:messages:2.0:Error',\n} as const;\n\n/**\n * SCIM Meta Schema\n * Common metadata for all SCIM resources\n */\nexport const SCIMMetaSchema = z.object({\n  /**\n   * Resource type name\n   * @example \"User\", \"Group\"\n   */\n  resourceType: z.string()\n    .optional()\n    .describe('Resource type'),\n\n  /**\n   * Resource creation timestamp (ISO 8601)\n   */\n  created: z.string()\n    .datetime()\n    .optional()\n    .describe('Creation timestamp'),\n\n  /**\n   * Last modification timestamp (ISO 8601)\n   */\n  lastModified: z.string()\n    .datetime()\n    .optional()\n    .describe('Last modification timestamp'),\n\n  /**\n   * Resource location URI\n   * Absolute URL to the resource\n   */\n  location: z.string()\n    .url()\n    .optional()\n    .describe('Resource location URI'),\n\n  /**\n   * Entity tag for optimistic concurrency control\n   * Used with If-Match header for conditional updates\n   */\n  version: z.string()\n    .optional()\n    .describe('Entity tag (ETag) for concurrency control'),\n});\n\nexport type SCIMMeta = z.infer<typeof SCIMMetaSchema>;\n\n/**\n * SCIM Name Schema\n * Structured name components\n */\nexport const SCIMNameSchema = z.object({\n  /**\n   * Full name formatted for display\n   * @example \"Ms. Barbara Jane Jensen III\"\n   */\n  formatted: z.string()\n    .optional()\n    .describe('Formatted full name'),\n\n  /**\n   * Family name (surname)\n   * @example \"Jensen\"\n   */\n  familyName: z.string()\n    .optional()\n    .describe('Family name (last name)'),\n\n  /**\n   * Given name (first name)\n   * @example \"Barbara\"\n   */\n  givenName: z.string()\n    .optional()\n    .describe('Given name (first name)'),\n\n  /**\n   * Middle name\n   * @example \"Jane\"\n   */\n  middleName: z.string()\n    .optional()\n    .describe('Middle name'),\n\n  /**\n   * Honorific prefix\n   * @example \"Ms.\", \"Dr.\", \"Prof.\"\n   */\n  honorificPrefix: z.string()\n    .optional()\n    .describe('Honorific prefix (Mr., Ms., Dr.)'),\n\n  /**\n   * Honorific suffix\n   * @example \"III\", \"Jr.\", \"Sr.\"\n   */\n  honorificSuffix: z.string()\n    .optional()\n    .describe('Honorific suffix (Jr., Sr.)'),\n});\n\nexport type SCIMName = z.infer<typeof SCIMNameSchema>;\n\n/**\n * SCIM Email Schema\n * Multi-valued email address\n */\nexport const SCIMEmailSchema = z.object({\n  /**\n   * Email address value\n   */\n  value: z.string()\n    .email()\n    .describe('Email address'),\n\n  /**\n   * Email type\n   * @example \"work\", \"home\", \"other\"\n   */\n  type: z.enum(['work', 'home', 'other'])\n    .optional()\n    .describe('Email type'),\n\n  /**\n   * Display label for the email\n   */\n  display: z.string()\n    .optional()\n    .describe('Display label'),\n\n  /**\n   * Whether this is the primary email\n   */\n  primary: z.boolean()\n    .optional()\n    .default(false)\n    .describe('Primary email indicator'),\n});\n\nexport type SCIMEmail = z.infer<typeof SCIMEmailSchema>;\n\n/**\n * SCIM Phone Number Schema\n * Multi-valued phone number\n */\nexport const SCIMPhoneNumberSchema = z.object({\n  /**\n   * Phone number value\n   * Format is not enforced to support international numbers\n   */\n  value: z.string()\n    .describe('Phone number'),\n\n  /**\n   * Phone type\n   */\n  type: z.enum(['work', 'home', 'mobile', 'fax', 'pager', 'other'])\n    .optional()\n    .describe('Phone number type'),\n\n  /**\n   * Display label for the phone number\n   */\n  display: z.string()\n    .optional()\n    .describe('Display label'),\n\n  /**\n   * Whether this is the primary phone\n   */\n  primary: z.boolean()\n    .optional()\n    .default(false)\n    .describe('Primary phone indicator'),\n});\n\nexport type SCIMPhoneNumber = z.infer<typeof SCIMPhoneNumberSchema>;\n\n/**\n * SCIM Address Schema\n * Multi-valued physical mailing address\n */\nexport const SCIMAddressSchema = z.object({\n  /**\n   * Full mailing address formatted for display\n   */\n  formatted: z.string()\n    .optional()\n    .describe('Formatted address'),\n\n  /**\n   * Full street address\n   */\n  streetAddress: z.string()\n    .optional()\n    .describe('Street address'),\n\n  /**\n   * City or locality\n   */\n  locality: z.string()\n    .optional()\n    .describe('City/Locality'),\n\n  /**\n   * State or region\n   */\n  region: z.string()\n    .optional()\n    .describe('State/Region'),\n\n  /**\n   * Zip code or postal code\n   */\n  postalCode: z.string()\n    .optional()\n    .describe('Postal code'),\n\n  /**\n   * Country\n   */\n  country: z.string()\n    .optional()\n    .describe('Country'),\n\n  /**\n   * Address type\n   */\n  type: z.enum(['work', 'home', 'other'])\n    .optional()\n    .describe('Address type'),\n\n  /**\n   * Whether this is the primary address\n   */\n  primary: z.boolean()\n    .optional()\n    .default(false)\n    .describe('Primary address indicator'),\n});\n\nexport type SCIMAddress = z.infer<typeof SCIMAddressSchema>;\n\n/**\n * SCIM Group Reference\n * Reference to a group the user belongs to\n */\nexport const SCIMGroupReferenceSchema = z.object({\n  /**\n   * Group identifier\n   */\n  value: z.string()\n    .describe('Group ID'),\n\n  /**\n   * Direct reference to the group resource\n   */\n  $ref: z.string()\n    .url()\n    .optional()\n    .describe('URI reference to the group'),\n\n  /**\n   * Human-readable group name\n   */\n  display: z.string()\n    .optional()\n    .describe('Group display name'),\n\n  /**\n   * Type of group\n   */\n  type: z.enum(['direct', 'indirect'])\n    .optional()\n    .describe('Membership type'),\n});\n\nexport type SCIMGroupReference = z.infer<typeof SCIMGroupReferenceSchema>;\n\n/**\n * SCIM Enterprise User Extension\n * Enterprise-specific user attributes\n */\nexport const SCIMEnterpriseUserSchema = z.object({\n  /**\n   * Employee number\n   */\n  employeeNumber: z.string()\n    .optional()\n    .describe('Employee number'),\n\n  /**\n   * Cost center\n   */\n  costCenter: z.string()\n    .optional()\n    .describe('Cost center'),\n\n  /**\n   * Organization unit\n   */\n  organization: z.string()\n    .optional()\n    .describe('Organization'),\n\n  /**\n   * Division\n   */\n  division: z.string()\n    .optional()\n    .describe('Division'),\n\n  /**\n   * Department\n   */\n  department: z.string()\n    .optional()\n    .describe('Department'),\n\n  /**\n   * Manager reference\n   */\n  manager: z.object({\n    value: z.string().describe('Manager ID'),\n    $ref: z.string().url().optional().describe('Manager URI'),\n    displayName: z.string().optional().describe('Manager name'),\n  })\n    .optional()\n    .describe('Manager reference'),\n});\n\nexport type SCIMEnterpriseUser = z.infer<typeof SCIMEnterpriseUserSchema>;\n\n/**\n * SCIM User Schema (Core)\n * Complete SCIM 2.0 User resource\n */\nexport const SCIMUserSchema = z.object({\n  /**\n   * SCIM schema URIs\n   * Must include at minimum the core User schema URI\n   */\n  schemas: z.array(z.string())\n    .min(1)\n    .refine(\n      (schemas) => schemas.includes(SCIM_SCHEMAS.USER),\n      'Must include core User schema URI'\n    )\n    .default([SCIM_SCHEMAS.USER])\n    .describe('SCIM schema URIs (must include User schema)'),\n\n  /**\n   * Unique identifier\n   */\n  id: z.string()\n    .optional()\n    .describe('Unique resource identifier'),\n\n  /**\n   * External identifier\n   * Identifier from the provisioning client\n   */\n  externalId: z.string()\n    .optional()\n    .describe('External identifier from client system'),\n\n  /**\n   * Unique username\n   * REQUIRED for user creation\n   */\n  userName: z.string()\n    .describe('Unique username (REQUIRED)'),\n\n  /**\n   * Structured name\n   */\n  name: SCIMNameSchema\n    .optional()\n    .describe('Structured name components'),\n\n  /**\n   * Display name\n   */\n  displayName: z.string()\n    .optional()\n    .describe('Display name for UI'),\n\n  /**\n   * Nickname or casual name\n   */\n  nickName: z.string()\n    .optional()\n    .describe('Nickname'),\n\n  /**\n   * Profile URL\n   */\n  profileUrl: z.string()\n    .url()\n    .optional()\n    .describe('Profile page URL'),\n\n  /**\n   * Job title\n   */\n  title: z.string()\n    .optional()\n    .describe('Job title'),\n\n  /**\n   * User type (employee, contractor, etc.)\n   */\n  userType: z.string()\n    .optional()\n    .describe('User type (employee, contractor)'),\n\n  /**\n   * Preferred language (ISO 639-1)\n   */\n  preferredLanguage: z.string()\n    .optional()\n    .describe('Preferred language (ISO 639-1)'),\n\n  /**\n   * Locale (e.g., en-US)\n   */\n  locale: z.string()\n    .optional()\n    .describe('Locale (e.g., en-US)'),\n\n  /**\n   * Timezone (e.g., America/Los_Angeles)\n   */\n  timezone: z.string()\n    .optional()\n    .describe('Timezone'),\n\n  /**\n   * Account active status\n   */\n  active: z.boolean()\n    .optional()\n    .default(true)\n    .describe('Account active status'),\n\n  /**\n   * Password (write-only, never returned)\n   */\n  password: z.string()\n    .optional()\n    .describe('Password (write-only)'),\n\n  /**\n   * Email addresses (multi-valued)\n   */\n  emails: z.array(SCIMEmailSchema)\n    .optional()\n    .describe('Email addresses'),\n\n  /**\n   * Phone numbers (multi-valued)\n   */\n  phoneNumbers: z.array(SCIMPhoneNumberSchema)\n    .optional()\n    .describe('Phone numbers'),\n\n  /**\n   * Instant messaging addresses\n   */\n  ims: z.array(z.object({\n    value: z.string(),\n    type: z.string().optional(),\n    primary: z.boolean().optional(),\n  }))\n    .optional()\n    .describe('IM addresses'),\n\n  /**\n   * Photos (profile pictures)\n   */\n  photos: z.array(z.object({\n    value: z.string().url(),\n    type: z.enum(['photo', 'thumbnail']).optional(),\n    primary: z.boolean().optional(),\n  }))\n    .optional()\n    .describe('Photo URLs'),\n\n  /**\n   * Physical addresses\n   */\n  addresses: z.array(SCIMAddressSchema)\n    .optional()\n    .describe('Physical addresses'),\n\n  /**\n   * Group memberships\n   */\n  groups: z.array(SCIMGroupReferenceSchema)\n    .optional()\n    .describe('Group memberships'),\n\n  /**\n   * User entitlements\n   */\n  entitlements: z.array(z.object({\n    value: z.string(),\n    type: z.string().optional(),\n    primary: z.boolean().optional(),\n  }))\n    .optional()\n    .describe('Entitlements'),\n\n  /**\n   * User roles\n   */\n  roles: z.array(z.object({\n    value: z.string(),\n    type: z.string().optional(),\n    primary: z.boolean().optional(),\n  }))\n    .optional()\n    .describe('Roles'),\n\n  /**\n   * X509 certificates\n   */\n  x509Certificates: z.array(z.object({\n    value: z.string(),\n    type: z.string().optional(),\n    primary: z.boolean().optional(),\n  }))\n    .optional()\n    .describe('X509 certificates'),\n\n  /**\n   * Resource metadata\n   */\n  meta: SCIMMetaSchema\n    .optional()\n    .describe('Resource metadata'),\n\n  /**\n   * Enterprise user extension\n   * Only present when enterprise extension is used\n   */\n  [SCIM_SCHEMAS.ENTERPRISE_USER]: SCIMEnterpriseUserSchema\n    .optional()\n    .describe('Enterprise user attributes'),\n}).superRefine((data, ctx) => {\n  // Validate that enterprise extension schema URI is present when extension data is provided\n  const hasEnterpriseExtension = data[SCIM_SCHEMAS.ENTERPRISE_USER] != null;\n  if (!hasEnterpriseExtension) {\n    return;\n  }\n\n  const schemas = data.schemas || [];\n  if (!schemas.includes(SCIM_SCHEMAS.ENTERPRISE_USER)) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      path: ['schemas'],\n      message: `schemas must include \"${SCIM_SCHEMAS.ENTERPRISE_USER}\" when enterprise user extension attributes are present`,\n    });\n  }\n});\n\nexport type SCIMUser = z.infer<typeof SCIMUserSchema>;\n\n/**\n * SCIM Member Reference\n * Reference to a member in a group\n */\nexport const SCIMMemberReferenceSchema = z.object({\n  /**\n   * Member identifier\n   */\n  value: z.string()\n    .describe('Member ID'),\n\n  /**\n   * Direct reference to the member resource\n   */\n  $ref: z.string()\n    .url()\n    .optional()\n    .describe('URI reference to the member'),\n\n  /**\n   * Member type (User or Group for nested groups)\n   */\n  type: z.enum(['User', 'Group'])\n    .optional()\n    .describe('Member type'),\n\n  /**\n   * Human-readable member name\n   */\n  display: z.string()\n    .optional()\n    .describe('Member display name'),\n});\n\nexport type SCIMMemberReference = z.infer<typeof SCIMMemberReferenceSchema>;\n\n/**\n * SCIM Group Schema\n * Complete SCIM 2.0 Group resource\n */\nexport const SCIMGroupSchema = z.object({\n  /**\n   * SCIM schema URIs\n   * Must include at minimum the core Group schema URI\n   */\n  schemas: z.array(z.string())\n    .min(1)\n    .refine(\n      (schemas) => schemas.includes(SCIM_SCHEMAS.GROUP),\n      'Must include core Group schema URI'\n    )\n    .default([SCIM_SCHEMAS.GROUP])\n    .describe('SCIM schema URIs (must include Group schema)'),\n\n  /**\n   * Unique identifier\n   */\n  id: z.string()\n    .optional()\n    .describe('Unique resource identifier'),\n\n  /**\n   * External identifier\n   */\n  externalId: z.string()\n    .optional()\n    .describe('External identifier from client system'),\n\n  /**\n   * Group display name\n   * REQUIRED for group creation\n   */\n  displayName: z.string()\n    .describe('Group display name (REQUIRED)'),\n\n  /**\n   * Group members\n   */\n  members: z.array(SCIMMemberReferenceSchema)\n    .optional()\n    .describe('Group members'),\n\n  /**\n   * Resource metadata\n   */\n  meta: SCIMMetaSchema\n    .optional()\n    .describe('Resource metadata'),\n});\n\nexport type SCIMGroup = z.infer<typeof SCIMGroupSchema>;\n\n/**\n * SCIM Resource Union Type\n * Known SCIM resource types for type-safe list responses\n */\nexport type SCIMResource = SCIMUser | SCIMGroup;\n\n/**\n * SCIM List Response\n * Paginated list of resources\n * \n * Generic type T allows for type-safe responses when the resource type is known.\n * For mixed resource types, use SCIMResource union.\n */\nexport const SCIMListResponseSchema = z.object({\n  /**\n   * SCIM schema URI\n   */\n  schemas: z.array(z.string())\n    .min(1)\n    .refine(\n      (schemas) => schemas.includes(SCIM_SCHEMAS.LIST_RESPONSE),\n      { message: `schemas must include ${SCIM_SCHEMAS.LIST_RESPONSE}` }\n    )\n    .default([SCIM_SCHEMAS.LIST_RESPONSE])\n    .describe('SCIM schema URIs'),\n\n  /**\n   * Total number of results matching the query\n   */\n  totalResults: z.number()\n    .int()\n    .min(0)\n    .describe('Total results count'),\n\n  /**\n   * Resources returned in this response\n   * Use SCIMListResponseOf<T> for type-safe responses\n   */\n  Resources: z.array(z.union([SCIMUserSchema, SCIMGroupSchema, z.record(z.string(), z.unknown())]))\n    .describe('Resources array (Users, Groups, or custom resources)'),\n\n  /**\n   * 1-based index of the first result\n   */\n  startIndex: z.number()\n    .int()\n    .min(1)\n    .optional()\n    .describe('Start index (1-based)'),\n\n  /**\n   * Number of resources per page\n   */\n  itemsPerPage: z.number()\n    .int()\n    .min(0)\n    .optional()\n    .describe('Items per page'),\n});\n\nexport type SCIMListResponse = z.infer<typeof SCIMListResponseSchema>;\n\n/**\n * SCIM Error Response\n * Error response format\n */\nexport const SCIMErrorSchema = z.object({\n  /**\n   * SCIM schema URI\n   */\n  schemas: z.array(z.string())\n    .min(1)\n    .refine(\n      (schemas) => schemas.includes(SCIM_SCHEMAS.ERROR),\n      { message: `schemas must include ${SCIM_SCHEMAS.ERROR}` }\n    )\n    .default([SCIM_SCHEMAS.ERROR])\n    .describe('SCIM schema URIs'),\n\n  /**\n   * HTTP status code\n   */\n  status: z.number()\n    .int()\n    .min(400)\n    .max(599)\n    .describe('HTTP status code'),\n\n  /**\n   * SCIM error type\n   */\n  scimType: z.enum([\n    'invalidFilter',\n    'tooMany',\n    'uniqueness',\n    'mutability',\n    'invalidSyntax',\n    'invalidPath',\n    'noTarget',\n    'invalidValue',\n    'invalidVers',\n    'sensitive',\n  ])\n    .optional()\n    .describe('SCIM error type'),\n\n  /**\n   * Human-readable error description\n   */\n  detail: z.string()\n    .optional()\n    .describe('Error detail message'),\n});\n\nexport type SCIMError = z.infer<typeof SCIMErrorSchema>;\n\n/**\n * SCIM Patch Operation\n * For PATCH requests\n */\nexport const SCIMPatchOperationSchema = z.object({\n  /**\n   * Operation type\n   */\n  op: z.enum(['add', 'remove', 'replace'])\n    .describe('Operation type'),\n\n  /**\n   * Attribute path to modify\n   */\n  path: z.string()\n    .optional()\n    .describe('Attribute path (optional for add)'),\n\n  /**\n   * Value to set\n   */\n  value: z.unknown()\n    .optional()\n    .describe('Value to set'),\n});\n\nexport type SCIMPatchOperation = z.infer<typeof SCIMPatchOperationSchema>;\n\n/**\n * SCIM Patch Request\n */\nexport const SCIMPatchRequestSchema = z.object({\n  /**\n   * SCIM schema URI\n   */\n  schemas: z.array(z.string())\n    .min(1)\n    .refine(\n      (schemas) => schemas.includes(SCIM_SCHEMAS.PATCH_OP),\n      { message: 'SCIM PATCH requests must include the PatchOp schema URI' }\n    )\n    .default([SCIM_SCHEMAS.PATCH_OP])\n    .describe('SCIM schema URIs'),\n\n  /**\n   * Array of patch operations\n   */\n  Operations: z.array(SCIMPatchOperationSchema)\n    .min(1)\n    .describe('Patch operations'),\n});\n\nexport type SCIMPatchRequest = z.infer<typeof SCIMPatchRequestSchema>;\n\n/**\n * Helper factory for creating SCIM resources\n */\nexport const SCIM = {\n  /**\n   * Create a basic SCIM user\n   */\n  user: (userName: string, email: string, givenName?: string, familyName?: string): SCIMUser => ({\n    schemas: [SCIM_SCHEMAS.USER],\n    userName,\n    emails: [{ value: email, type: 'work', primary: true }],\n    name: {\n      givenName,\n      familyName,\n    },\n    active: true,\n  }),\n\n  /**\n   * Create a SCIM group\n   */\n  group: (displayName: string, members?: SCIMMemberReference[]): SCIMGroup => ({\n    schemas: [SCIM_SCHEMAS.GROUP],\n    displayName,\n    members: members || [],\n  }),\n\n  /**\n   * Create a list response\n   */\n  listResponse: <T>(resources: T[], totalResults?: number): SCIMListResponse => ({\n    schemas: [SCIM_SCHEMAS.LIST_RESPONSE],\n    totalResults: totalResults ?? resources.length,\n    Resources: resources as Array<SCIMResource | Record<string, any>>,\n    startIndex: 1,\n    itemsPerPage: resources.length,\n  }),\n\n  /**\n   * Create an error response\n   */\n  error: (\n    status: number,\n    detail: string,\n    scimType?: 'invalidFilter' | 'tooMany' | 'uniqueness' | 'mutability' | \n                'invalidSyntax' | 'invalidPath' | 'noTarget' | 'invalidValue' | \n                'invalidVers' | 'sensitive'\n  ): SCIMError => ({\n    schemas: [SCIM_SCHEMAS.ERROR],\n    status,\n    detail,\n    scimType,\n  }),\n} as const;\n\n// ─── SCIM 2.0 Bulk Operations (RFC 7644 §3.7) ──────────────────────────────\n\n/**\n * SCIM Bulk Operation Schema\n * A single operation within a bulk request\n */\nexport const SCIMBulkOperationSchema = z.object({\n  /** HTTP method for this operation */\n  method: z.enum(['POST', 'PUT', 'PATCH', 'DELETE'])\n    .describe('HTTP method for the bulk operation'),\n\n  /** Resource path (e.g. /Users, /Groups/{id}) */\n  path: z.string()\n    .describe('Resource endpoint path (e.g. /Users, /Groups/{id})'),\n\n  /** Client-assigned identifier for cross-referencing operations */\n  bulkId: z.string()\n    .optional()\n    .describe('Client-assigned ID for cross-referencing between operations'),\n\n  /** Request body for POST/PUT/PATCH operations */\n  data: z.record(z.string(), z.unknown())\n    .optional()\n    .describe('Request body for POST/PUT/PATCH operations'),\n\n  /** ETag value for optimistic concurrency control */\n  version: z.string()\n    .optional()\n    .describe('ETag for optimistic concurrency control'),\n});\n\nexport type SCIMBulkOperation = z.infer<typeof SCIMBulkOperationSchema>;\n\n/**\n * SCIM Bulk Request Schema\n * Batch multiple SCIM operations into a single HTTP request\n */\nexport const SCIMBulkRequestSchema = z.object({\n  /** SCIM schema URI for bulk request */\n  schemas: z.array(z.literal(SCIM_SCHEMAS.BULK_REQUEST))\n    .default([SCIM_SCHEMAS.BULK_REQUEST])\n    .describe('SCIM schema URIs (BulkRequest)'),\n\n  /** Array of operations to execute */\n  operations: z.array(SCIMBulkOperationSchema)\n    .min(1)\n    .describe('Bulk operations to execute (minimum 1)'),\n\n  /** Stop processing after N errors */\n  failOnErrors: z.number()\n    .int()\n    .optional()\n    .describe('Stop processing after this many errors'),\n});\n\nexport type SCIMBulkRequest = z.infer<typeof SCIMBulkRequestSchema>;\n\n/**\n * SCIM Bulk Response Operation Schema\n * Result of a single operation within a bulk response\n */\nexport const SCIMBulkResponseOperationSchema = z.object({\n  /** HTTP method that was executed */\n  method: z.enum(['POST', 'PUT', 'PATCH', 'DELETE'])\n    .describe('HTTP method that was executed'),\n\n  /** Client-assigned bulk operation ID */\n  bulkId: z.string()\n    .optional()\n    .describe('Client-assigned bulk operation ID'),\n\n  /** URL of the created/modified resource */\n  location: z.string()\n    .optional()\n    .describe('URL of the created or modified resource'),\n\n  /** HTTP status code as string */\n  status: z.string()\n    .describe('HTTP status code as string (e.g. \"201\", \"400\")'),\n\n  /** Response body, typically present for errors */\n  response: z.unknown()\n    .optional()\n    .describe('Response body (typically present for errors)'),\n});\n\nexport type SCIMBulkResponseOperation = z.infer<typeof SCIMBulkResponseOperationSchema>;\n\n/**\n * SCIM Bulk Response Schema\n * Response to a bulk request containing results for each operation\n */\nexport const SCIMBulkResponseSchema = z.object({\n  /** SCIM schema URI for bulk response */\n  schemas: z.array(z.literal(SCIM_SCHEMAS.BULK_RESPONSE))\n    .default([SCIM_SCHEMAS.BULK_RESPONSE])\n    .describe('SCIM schema URIs (BulkResponse)'),\n\n  /** Array of operation results */\n  operations: z.array(SCIMBulkResponseOperationSchema)\n    .describe('Results for each bulk operation'),\n});\n\nexport type SCIMBulkResponse = z.infer<typeof SCIMBulkResponseSchema>;\n"]}