@opsregistry/contracts 0.0.5 → 0.0.7

package/dist/it/iam-common.d.ts

@@ -0,0 +1,127 @@
+import { z } from "zod";
+export declare const accessModeSchema: z.ZodEnum<{
+    authorized: "authorized";
+    public: "public";
+}>;
+export declare const requestedAccessModeSchema: z.ZodEnum<{
+    authorized: "authorized";
+    auto: "auto";
+    public: "public";
+}>;
+export declare const subjectKindSchema: z.ZodEnum<{
+    anonymous: "anonymous";
+    application: "application";
+    integration: "integration";
+    providerAccount: "providerAccount";
+    serviceAccount: "serviceAccount";
+    user: "user";
+}>;
+export declare const authMethodSchema: z.ZodEnum<{
+    apiKey: "apiKey";
+    basic: "basic";
+    bearerToken: "bearerToken";
+    custom: "custom";
+    none: "none";
+    oauth2ClientCredentials: "oauth2ClientCredentials";
+    password: "password";
+    refreshToken: "refreshToken";
+    sessionCredential: "sessionCredential";
+}>;
+export declare const credentialKindSchema: z.ZodEnum<{
+    accessToken: "accessToken";
+    apiKey: "apiKey";
+    basic: "basic";
+    custom: "custom";
+    none: "none";
+    refreshToken: "refreshToken";
+    session: "session";
+}>;
+export declare const credentialTransportSchema: z.ZodEnum<{
+    body: "body";
+    cookie: "cookie";
+    header: "header";
+    none: "none";
+    query: "query";
+}>;
+export declare const authStatusSchema: z.ZodEnum<{
+    anonymous: "anonymous";
+    authenticated: "authenticated";
+    challengeRequired: "challengeRequired";
+    failed: "failed";
+}>;
+export declare const authDecisionSchema: z.ZodEnum<{
+    allow: "allow";
+    deny: "deny";
+    indeterminate: "indeterminate";
+}>;
+export declare const identitySubjectSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        anonymous: "anonymous";
+        application: "application";
+        integration: "integration";
+        providerAccount: "providerAccount";
+        serviceAccount: "serviceAccount";
+        user: "user";
+    }>;
+    id: z.ZodOptional<z.ZodString>;
+    externalId: z.ZodOptional<z.ZodString>;
+    displayName: z.ZodOptional<z.ZodString>;
+    tenantId: z.ZodOptional<z.ZodString>;
+    providerCode: z.ZodOptional<z.ZodString>;
+    roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    claims: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const credentialMaterialSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        accessToken: "accessToken";
+        apiKey: "apiKey";
+        basic: "basic";
+        custom: "custom";
+        none: "none";
+        refreshToken: "refreshToken";
+        session: "session";
+    }>;
+    transport: z.ZodDefault<z.ZodEnum<{
+        body: "body";
+        cookie: "cookie";
+        header: "header";
+        none: "none";
+        query: "query";
+    }>>;
+    scheme: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    value: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodString>;
+    refreshExpiresAt: z.ZodOptional<z.ZodString>;
+    scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const resourceRefSchema: z.ZodObject<{
+    type: z.ZodString;
+    id: z.ZodOptional<z.ZodString>;
+    operationCode: z.ZodOptional<z.ZodString>;
+    attributes: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export declare const authContextSchema: z.ZodObject<{
+    requestId: z.ZodOptional<z.ZodString>;
+    tenantId: z.ZodOptional<z.ZodString>;
+    audience: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    ipAddress: z.ZodOptional<z.ZodString>;
+    userAgent: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type AccessMode = z.infer<typeof accessModeSchema>;
+export type RequestedAccessMode = z.infer<typeof requestedAccessModeSchema>;
+export type SubjectKind = z.infer<typeof subjectKindSchema>;
+export type AuthMethod = z.infer<typeof authMethodSchema>;
+export type CredentialKind = z.infer<typeof credentialKindSchema>;
+export type CredentialTransport = z.infer<typeof credentialTransportSchema>;
+export type AuthStatus = z.infer<typeof authStatusSchema>;
+export type AuthDecision = z.infer<typeof authDecisionSchema>;
+export type IdentitySubject = z.infer<typeof identitySubjectSchema>;
+export type CredentialMaterial = z.infer<typeof credentialMaterialSchema>;
+export type ResourceRef = z.infer<typeof resourceRefSchema>;
+export type AuthContext = z.infer<typeof authContextSchema>;
+//# sourceMappingURL=iam-common.d.ts.map

package/dist/it/iam-common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-common.d.ts","sourceRoot":"","sources":["../../src/it/iam-common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,gBAAgB;;;EAAmC,CAAC;AACjE,eAAO,MAAM,yBAAyB;;;;EAIpC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;EAO5B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;EAU3B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;EAQ/B,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;;;;EAMpC,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;EAK3B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;EAA6C,CAAC;AAE7E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;iBAWhC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;iBAUnC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;iBAK5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;iBAO5B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/it/iam-common.js

@@ -0,0 +1,87 @@
+import { z } from "zod";
+export const accessModeSchema = z.enum(["public", "authorized"]);
+export const requestedAccessModeSchema = z.enum([
+    "auto",
+    "public",
+    "authorized",
+]);
+export const subjectKindSchema = z.enum([
+    "user",
+    "serviceAccount",
+    "application",
+    "integration",
+    "providerAccount",
+    "anonymous",
+]);
+export const authMethodSchema = z.enum([
+    "none",
+    "password",
+    "apiKey",
+    "basic",
+    "bearerToken",
+    "oauth2ClientCredentials",
+    "refreshToken",
+    "sessionCredential",
+    "custom",
+]);
+export const credentialKindSchema = z.enum([
+    "none",
+    "accessToken",
+    "refreshToken",
+    "apiKey",
+    "session",
+    "basic",
+    "custom",
+]);
+export const credentialTransportSchema = z.enum([
+    "header",
+    "query",
+    "cookie",
+    "body",
+    "none",
+]);
+export const authStatusSchema = z.enum([
+    "authenticated",
+    "anonymous",
+    "challengeRequired",
+    "failed",
+]);
+export const authDecisionSchema = z.enum(["allow", "deny", "indeterminate"]);
+export const identitySubjectSchema = z.object({
+    kind: subjectKindSchema,
+    id: z.string().min(1).optional(),
+    externalId: z.string().min(1).optional(),
+    displayName: z.string().min(1).optional(),
+    tenantId: z.string().min(1).optional(),
+    providerCode: z.string().min(1).optional(),
+    roles: z.array(z.string().min(1)).default([]),
+    permissions: z.array(z.string().min(1)).default([]),
+    scopes: z.array(z.string().min(1)).default([]),
+    claims: z.record(z.string(), z.unknown()).default({}),
+});
+export const credentialMaterialSchema = z.object({
+    kind: credentialKindSchema,
+    transport: credentialTransportSchema.default("header"),
+    scheme: z.string().min(1).optional(),
+    name: z.string().min(1).optional(),
+    value: z.string().min(1).optional(),
+    expiresAt: z.string().min(1).optional(),
+    refreshExpiresAt: z.string().min(1).optional(),
+    scopes: z.array(z.string().min(1)).default([]),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+});
+export const resourceRefSchema = z.object({
+    type: z.string().min(1),
+    id: z.string().min(1).optional(),
+    operationCode: z.string().min(1).optional(),
+    attributes: z.record(z.string(), z.unknown()).default({}),
+});
+export const authContextSchema = z.object({
+    requestId: z.string().min(1).optional(),
+    tenantId: z.string().min(1).optional(),
+    audience: z.array(z.string().min(1)).default([]),
+    ipAddress: z.string().min(1).optional(),
+    userAgent: z.string().min(1).optional(),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+});
+//# sourceMappingURL=iam-common.js.map

package/dist/it/iam-common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"iam-common.js","sourceRoot":"","sources":["../../src/it/iam-common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,MAAM;IACN,QAAQ;IACR,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,MAAM;IACN,gBAAgB;IAChB,aAAa;IACb,aAAa;IACb,iBAAiB;IACjB,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,MAAM;IACN,UAAU;IACV,QAAQ;IACR,OAAO;IACP,aAAa;IACb,yBAAyB;IACzB,cAAc;IACd,mBAAmB;IACnB,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,MAAM;IACN,aAAa;IACb,cAAc;IACd,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,eAAe;IACf,WAAW;IACX,mBAAmB;IACnB,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;AAE7E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,iBAAiB;IACvB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,oBAAoB;IAC1B,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC"}

package/dist/it/identity-authenticate.d.ts

@@ -0,0 +1,115 @@
+import { z } from "zod";
+export declare const operationCode: "it.identity.authenticate";
+export declare const identityAuthenticateInputSchema: z.ZodObject<{
+    subject: z.ZodObject<{
+        id: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        externalId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        tenantId: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        providerCode: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+        roles: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        permissions: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        scopes: z.ZodOptional<z.ZodDefault<z.ZodArray<z.ZodString>>>;
+        claims: z.ZodOptional<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
+        kind: z.ZodEnum<{
+            anonymous: "anonymous";
+            application: "application";
+            integration: "integration";
+            providerAccount: "providerAccount";
+            serviceAccount: "serviceAccount";
+            user: "user";
+        }>;
+    }, z.core.$strip>;
+    method: z.ZodEnum<{
+        apiKey: "apiKey";
+        basic: "basic";
+        bearerToken: "bearerToken";
+        custom: "custom";
+        none: "none";
+        oauth2ClientCredentials: "oauth2ClientCredentials";
+        password: "password";
+        refreshToken: "refreshToken";
+        sessionCredential: "sessionCredential";
+    }>;
+    credentials: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    requestedAccessMode: z.ZodDefault<z.ZodEnum<{
+        authorized: "authorized";
+        auto: "auto";
+        public: "public";
+    }>>;
+    requestedScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    context: z.ZodOptional<z.ZodObject<{
+        requestId: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        audience: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        ipAddress: z.ZodOptional<z.ZodString>;
+        userAgent: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const identityAuthenticateResultSchema: z.ZodObject<{
+    operationCode: z.ZodLiteral<"it.identity.authenticate">;
+    status: z.ZodEnum<{
+        anonymous: "anonymous";
+        authenticated: "authenticated";
+        challengeRequired: "challengeRequired";
+        failed: "failed";
+    }>;
+    subject: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            anonymous: "anonymous";
+            application: "application";
+            integration: "integration";
+            providerAccount: "providerAccount";
+            serviceAccount: "serviceAccount";
+            user: "user";
+        }>;
+        id: z.ZodOptional<z.ZodString>;
+        externalId: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        claims: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    accessModeUsed: z.ZodEnum<{
+        authorized: "authorized";
+        public: "public";
+    }>;
+    credential: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            accessToken: "accessToken";
+            apiKey: "apiKey";
+            basic: "basic";
+            custom: "custom";
+            none: "none";
+            refreshToken: "refreshToken";
+            session: "session";
+        }>;
+        transport: z.ZodDefault<z.ZodEnum<{
+            body: "body";
+            cookie: "cookie";
+            header: "header";
+            none: "none";
+            query: "query";
+        }>>;
+        scheme: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        value: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodString>;
+        refreshExpiresAt: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    challenge: z.ZodOptional<z.ZodObject<{
+        type: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        parameters: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type IdentityAuthenticateInput = z.infer<typeof identityAuthenticateInputSchema>;
+export type IdentityAuthenticateResult = z.infer<typeof identityAuthenticateResultSchema>;
+//# sourceMappingURL=identity-authenticate.d.ts.map

package/dist/it/identity-authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-authenticate.d.ts","sourceRoot":"","sources":["../../src/it/identity-authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,aAAa,EAAG,0BAAmC,CAAC;AAEjE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAS1C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAc3C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC"}

package/dist/it/identity-authenticate.js

@@ -0,0 +1,29 @@
+import { z } from "zod";
+import { accessModeSchema, authContextSchema, authMethodSchema, authStatusSchema, credentialMaterialSchema, identitySubjectSchema, requestedAccessModeSchema, } from "./iam-common.js";
+export const operationCode = "it.identity.authenticate";
+export const identityAuthenticateInputSchema = z.object({
+    subject: identitySubjectSchema.partial().extend({
+        kind: identitySubjectSchema.shape.kind,
+    }),
+    method: authMethodSchema,
+    credentials: z.record(z.string(), z.unknown()).default({}),
+    requestedAccessMode: requestedAccessModeSchema.default("auto"),
+    requestedScopes: z.array(z.string().min(1)).default([]),
+    context: authContextSchema.optional(),
+});
+export const identityAuthenticateResultSchema = z.object({
+    operationCode: z.literal(operationCode),
+    status: authStatusSchema,
+    subject: identitySubjectSchema.optional(),
+    accessModeUsed: accessModeSchema,
+    credential: credentialMaterialSchema.optional(),
+    challenge: z
+        .object({
+        type: z.string().min(1),
+        description: z.string().min(1).optional(),
+        parameters: z.record(z.string(), z.unknown()).default({}),
+    })
+        .optional(),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+});
+//# sourceMappingURL=identity-authenticate.js.map

package/dist/it/identity-authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-authenticate.js","sourceRoot":"","sources":["../../src/it/identity-authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,aAAa,GAAG,0BAAmC,CAAC;AAEjE,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,OAAO,EAAE,qBAAqB,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC;QAC9C,IAAI,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI;KACvC,CAAC;IACF,MAAM,EAAE,gBAAgB;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,mBAAmB,EAAE,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC;IAC9D,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,gBAAgB;IAChC,UAAU,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;QACzC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC1D,CAAC;SACD,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC"}

package/dist/it/identity-token-refresh.d.ts

@@ -0,0 +1,143 @@
+import { z } from "zod";
+export declare const operationCode: "it.identity.token.refresh";
+export declare const identityTokenRefreshInputSchema: z.ZodObject<{
+    subject: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            anonymous: "anonymous";
+            application: "application";
+            integration: "integration";
+            providerAccount: "providerAccount";
+            serviceAccount: "serviceAccount";
+            user: "user";
+        }>;
+        id: z.ZodOptional<z.ZodString>;
+        externalId: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        claims: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    refreshCredential: z.ZodObject<{
+        kind: z.ZodEnum<{
+            accessToken: "accessToken";
+            apiKey: "apiKey";
+            basic: "basic";
+            custom: "custom";
+            none: "none";
+            refreshToken: "refreshToken";
+            session: "session";
+        }>;
+        transport: z.ZodDefault<z.ZodEnum<{
+            body: "body";
+            cookie: "cookie";
+            header: "header";
+            none: "none";
+            query: "query";
+        }>>;
+        scheme: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        value: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodString>;
+        refreshExpiresAt: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    requestedScopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    context: z.ZodOptional<z.ZodObject<{
+        requestId: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        audience: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        ipAddress: z.ZodOptional<z.ZodString>;
+        userAgent: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const identityTokenRefreshResultSchema: z.ZodObject<{
+    operationCode: z.ZodLiteral<"it.identity.token.refresh">;
+    status: z.ZodEnum<{
+        anonymous: "anonymous";
+        authenticated: "authenticated";
+        challengeRequired: "challengeRequired";
+        failed: "failed";
+    }>;
+    subject: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            anonymous: "anonymous";
+            application: "application";
+            integration: "integration";
+            providerAccount: "providerAccount";
+            serviceAccount: "serviceAccount";
+            user: "user";
+        }>;
+        id: z.ZodOptional<z.ZodString>;
+        externalId: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        claims: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    accessModeUsed: z.ZodEnum<{
+        authorized: "authorized";
+        public: "public";
+    }>;
+    credential: z.ZodObject<{
+        kind: z.ZodEnum<{
+            accessToken: "accessToken";
+            apiKey: "apiKey";
+            basic: "basic";
+            custom: "custom";
+            none: "none";
+            refreshToken: "refreshToken";
+            session: "session";
+        }>;
+        transport: z.ZodDefault<z.ZodEnum<{
+            body: "body";
+            cookie: "cookie";
+            header: "header";
+            none: "none";
+            query: "query";
+        }>>;
+        scheme: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        value: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodString>;
+        refreshExpiresAt: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    refreshCredential: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            accessToken: "accessToken";
+            apiKey: "apiKey";
+            basic: "basic";
+            custom: "custom";
+            none: "none";
+            refreshToken: "refreshToken";
+            session: "session";
+        }>;
+        transport: z.ZodDefault<z.ZodEnum<{
+            body: "body";
+            cookie: "cookie";
+            header: "header";
+            none: "none";
+            query: "query";
+        }>>;
+        scheme: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        value: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodString>;
+        refreshExpiresAt: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type IdentityTokenRefreshInput = z.infer<typeof identityTokenRefreshInputSchema>;
+export type IdentityTokenRefreshResult = z.infer<typeof identityTokenRefreshResultSchema>;
+//# sourceMappingURL=identity-token-refresh.d.ts.map

package/dist/it/identity-token-refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-token-refresh.d.ts","sourceRoot":"","sources":["../../src/it/identity-token-refresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,eAAO,MAAM,aAAa,EAAG,2BAAoC,CAAC;AAElE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAK1C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ3C,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC"}

package/dist/it/identity-token-refresh.js

@@ -0,0 +1,19 @@
+import { z } from "zod";
+import { accessModeSchema, authContextSchema, authStatusSchema, credentialMaterialSchema, identitySubjectSchema, } from "./iam-common.js";
+export const operationCode = "it.identity.token.refresh";
+export const identityTokenRefreshInputSchema = z.object({
+    subject: identitySubjectSchema.optional(),
+    refreshCredential: credentialMaterialSchema,
+    requestedScopes: z.array(z.string().min(1)).default([]),
+    context: authContextSchema.optional(),
+});
+export const identityTokenRefreshResultSchema = z.object({
+    operationCode: z.literal(operationCode),
+    status: authStatusSchema,
+    subject: identitySubjectSchema.optional(),
+    accessModeUsed: accessModeSchema,
+    credential: credentialMaterialSchema,
+    refreshCredential: credentialMaterialSchema.optional(),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+});
+//# sourceMappingURL=identity-token-refresh.js.map

package/dist/it/identity-token-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-token-refresh.js","sourceRoot":"","sources":["../../src/it/identity-token-refresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,aAAa,GAAG,2BAAoC,CAAC;AAElE,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,OAAO,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACzC,iBAAiB,EAAE,wBAAwB;IAC3C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACvC,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,gBAAgB;IAChC,UAAU,EAAE,wBAAwB;IACpC,iBAAiB,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACtD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC"}

package/dist/it/identity-token-revoke.d.ts

@@ -0,0 +1,93 @@
+import { z } from "zod";
+export declare const operationCode: "it.identity.token.revoke";
+export declare const tokenRevokeReasonSchema: z.ZodEnum<{
+    adminAction: "adminAction";
+    compromised: "compromised";
+    disabled: "disabled";
+    expired: "expired";
+    logout: "logout";
+    other: "other";
+    rotation: "rotation";
+}>;
+export declare const identityTokenRevokeInputSchema: z.ZodObject<{
+    subject: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            anonymous: "anonymous";
+            application: "application";
+            integration: "integration";
+            providerAccount: "providerAccount";
+            serviceAccount: "serviceAccount";
+            user: "user";
+        }>;
+        id: z.ZodOptional<z.ZodString>;
+        externalId: z.ZodOptional<z.ZodString>;
+        displayName: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        providerCode: z.ZodOptional<z.ZodString>;
+        roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        claims: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+    credential: z.ZodObject<{
+        kind: z.ZodEnum<{
+            accessToken: "accessToken";
+            apiKey: "apiKey";
+            basic: "basic";
+            custom: "custom";
+            none: "none";
+            refreshToken: "refreshToken";
+            session: "session";
+        }>;
+        transport: z.ZodDefault<z.ZodEnum<{
+            body: "body";
+            cookie: "cookie";
+            header: "header";
+            none: "none";
+            query: "query";
+        }>>;
+        scheme: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        value: z.ZodOptional<z.ZodString>;
+        expiresAt: z.ZodOptional<z.ZodString>;
+        refreshExpiresAt: z.ZodOptional<z.ZodString>;
+        scopes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>;
+    reason: z.ZodDefault<z.ZodEnum<{
+        adminAction: "adminAction";
+        compromised: "compromised";
+        disabled: "disabled";
+        expired: "expired";
+        logout: "logout";
+        other: "other";
+        rotation: "rotation";
+    }>>;
+    context: z.ZodOptional<z.ZodObject<{
+        requestId: z.ZodOptional<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        audience: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        ipAddress: z.ZodOptional<z.ZodString>;
+        userAgent: z.ZodOptional<z.ZodString>;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const identityTokenRevokeResultSchema: z.ZodObject<{
+    operationCode: z.ZodLiteral<"it.identity.token.revoke">;
+    revoked: z.ZodBoolean;
+    reason: z.ZodEnum<{
+        adminAction: "adminAction";
+        compromised: "compromised";
+        disabled: "disabled";
+        expired: "expired";
+        logout: "logout";
+        other: "other";
+        rotation: "rotation";
+    }>;
+    revokedAt: z.ZodOptional<z.ZodString>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export type TokenRevokeReason = z.infer<typeof tokenRevokeReasonSchema>;
+export type IdentityTokenRevokeInput = z.infer<typeof identityTokenRevokeInputSchema>;
+export type IdentityTokenRevokeResult = z.infer<typeof identityTokenRevokeResultSchema>;
+//# sourceMappingURL=identity-token-revoke.d.ts.map

package/dist/it/identity-token-revoke.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-token-revoke.d.ts","sourceRoot":"","sources":["../../src/it/identity-token-revoke.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,aAAa,EAAG,0BAAmC,CAAC;AAEjE,eAAO,MAAM,uBAAuB;;;;;;;;EAQlC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAKzC,CAAC;AAEH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;iBAM1C,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC"}