@taico/taico 0.0.2

package/dist/authorization-server/dto/token-request.dto.js

@@ -0,0 +1,106 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenRequestDto = void 0;
+const class_validator_1 = require("class-validator");
+const swagger_1 = require("@nestjs/swagger");
+const enums_1 = require("../enums");
+class TokenRequestDto {
+    grant_type;
+    client_id;
+    code;
+    redirect_uri;
+    code_verifier;
+    refresh_token;
+    scope;
+    resource;
+}
+exports.TokenRequestDto = TokenRequestDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Grant type that determines which parameters must be supplied',
+        enum: enums_1.GrantType,
+        example: enums_1.GrantType.AUTHORIZATION_CODE,
+    }),
+    (0, class_validator_1.IsEnum)(enums_1.GrantType),
+    __metadata("design:type", String)
+], TokenRequestDto.prototype, "grant_type", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Client identifier issued during dynamic registration',
+        example: '0bab273987a2e163c3abb40c631ec0a4',
+    }),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], TokenRequestDto.prototype, "client_id", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Authorization code that was issued by the /authorize endpoint',
+        example: 'SplxlOBeZQQYbYS6WxSbIA',
+    }),
+    (0, class_validator_1.ValidateIf)((dto) => dto.grant_type === enums_1.GrantType.AUTHORIZATION_CODE),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], TokenRequestDto.prototype, "code", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Redirect URI used during authorization (required when code is present)',
+        example: 'http://localhost:6274/oauth/callback/debug',
+    }),
+    (0, class_validator_1.ValidateIf)((dto) => dto.grant_type === enums_1.GrantType.AUTHORIZATION_CODE),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.IsUrl)({ require_protocol: true, require_tld: false }),
+    __metadata("design:type", String)
+], TokenRequestDto.prototype, "redirect_uri", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'PKCE code verifier used to validate the authorization code exchange',
+        example: 'dBjftJeZ4CVP-mB92K27uhbUJU1p1r_wW1gFWFOEjXk',
+    }),
+    (0, class_validator_1.ValidateIf)((dto) => dto.grant_type === enums_1.GrantType.AUTHORIZATION_CODE),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    (0, class_validator_1.Length)(43, 128),
+    (0, class_validator_1.Matches)(/^[A-Za-z0-9-._~]+$/),
+    __metadata("design:type", String)
+], TokenRequestDto.prototype, "code_verifier", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Refresh token issued earlier by the authorization server',
+        example: 'def5020091c58c49fbb...',
+    }),
+    (0, class_validator_1.ValidateIf)((dto) => dto.grant_type === enums_1.GrantType.REFRESH_TOKEN),
+    (0, class_validator_1.IsString)(),
+    (0, class_validator_1.IsNotEmpty)(),
+    __metadata("design:type", String)
+], TokenRequestDto.prototype, "refresh_token", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Optional list of scopes to narrow when refreshing a token (space-delimited)',
+        example: 'tasks:read tasks:write',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TokenRequestDto.prototype, "scope", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Optional resource indicator (RFC 8707) - identifies the target resource server',
+        example: 'http://localhost:4001/',
+    }),
+    (0, class_validator_1.IsOptional)(),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], TokenRequestDto.prototype, "resource", void 0);
+//# sourceMappingURL=token-request.dto.js.map

package/dist/authorization-server/dto/token-request.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-request.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/token-request.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qDASyB;AACzB,6CAAmE;AACnE,oCAAqC;AAMrC,MAAa,eAAe;IAO1B,UAAU,CAAa;IAQvB,SAAS,CAAU;IAUnB,IAAI,CAAU;IAWd,YAAY,CAAU;IAYtB,aAAa,CAAU;IASvB,aAAa,CAAU;IASvB,KAAK,CAAU;IASf,QAAQ,CAAU;CACnB;AA5ED,0CA4EC;AArEC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,8DAA8D;QAC3E,IAAI,EAAE,iBAAS;QACf,OAAO,EAAE,iBAAS,CAAC,kBAAkB;KACtC,CAAC;IACD,IAAA,wBAAM,EAAC,iBAAS,CAAC;;mDACK;AAQvB;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,sDAAsD;QACnE,OAAO,EAAE,kCAAkC;KAC5C,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;kDACM;AAUnB;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,+DAA+D;QACjE,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,kBAAkB,CAAC;IACpE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;6CACC;AAWd;IATC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,wEAAwE;QAC1E,OAAO,EAAE,4CAA4C;KACtD,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,kBAAkB,CAAC;IACpE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,uBAAK,EAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;;qDAChC;AAYtB;IAVC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,qEAAqE;QACvE,OAAO,EAAE,6CAA6C;KACvD,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,kBAAkB,CAAC;IACpE,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,EAAE,EAAE,GAAG,CAAC;IACf,IAAA,yBAAO,EAAC,oBAAoB,CAAC;;sDACP;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,0DAA0D;QACvE,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,EAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,iBAAS,CAAC,aAAa,CAAC;IAC/D,IAAA,0BAAQ,GAAE;IACV,IAAA,4BAAU,GAAE;;sDACU;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,6EAA6E;QAC/E,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;8CACI;AASf;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EACT,gFAAgF;QAClF,OAAO,EAAE,wBAAwB;KAClC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;;iDACO"}

package/dist/authorization-server/dto/token-response.dto.d.ts

@@ -0,0 +1,8 @@
+import { TokenType } from '../enums';
+export declare class TokenResponseDto {
+    access_token: string;
+    token_type: TokenType;
+    expires_in: number;
+    refresh_token: string;
+    scope?: string;
+}

package/dist/authorization-server/dto/token-response.dto.js

@@ -0,0 +1,60 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenResponseDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+const enums_1 = require("../enums");
+class TokenResponseDto {
+    access_token;
+    token_type = enums_1.TokenType.BEARER;
+    expires_in;
+    refresh_token;
+    scope;
+}
+exports.TokenResponseDto = TokenResponseDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Opaque access token used to access protected resources',
+        example: 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...',
+    }),
+    __metadata("design:type", String)
+], TokenResponseDto.prototype, "access_token", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Type of token issued (MCP clients always receive Bearer tokens)',
+        enum: enums_1.TokenType,
+        example: enums_1.TokenType.BEARER,
+        default: enums_1.TokenType.BEARER,
+    }),
+    __metadata("design:type", String)
+], TokenResponseDto.prototype, "token_type", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Lifetime of the access token in seconds',
+        example: 3600,
+    }),
+    __metadata("design:type", Number)
+], TokenResponseDto.prototype, "expires_in", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Refresh token that can be exchanged for a new access token',
+        example: 'def5020091c58c49fbb...',
+    }),
+    __metadata("design:type", String)
+], TokenResponseDto.prototype, "refresh_token", void 0);
+__decorate([
+    (0, swagger_1.ApiPropertyOptional)({
+        description: 'Space-delimited scopes that were granted for this token',
+        example: 'tasks:read tasks:write',
+    }),
+    __metadata("design:type", String)
+], TokenResponseDto.prototype, "scope", void 0);
+//# sourceMappingURL=token-response.dto.js.map

package/dist/authorization-server/dto/token-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-response.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/token-response.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,oCAAqC;AAMrC,MAAa,gBAAgB;IAK3B,YAAY,CAAU;IAStB,UAAU,GAAc,iBAAS,CAAC,MAAM,CAAC;IAMzC,UAAU,CAAU;IAMpB,aAAa,CAAU;IAMvB,KAAK,CAAU;CAChB;AAjCD,4CAiCC;AA5BC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,wDAAwD;QACrE,OAAO,EAAE,yCAAyC;KACnD,CAAC;;sDACoB;AAStB;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EACT,iEAAiE;QACnE,IAAI,EAAE,iBAAS;QACf,OAAO,EAAE,iBAAS,CAAC,MAAM;QACzB,OAAO,EAAE,iBAAS,CAAC,MAAM;KAC1B,CAAC;;oDACuC;AAMzC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,yCAAyC;QACtD,OAAO,EAAE,IAAI;KACd,CAAC;;oDACkB;AAMpB;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,4DAA4D;QACzE,OAAO,EAAE,wBAAwB;KAClC,CAAC;;uDACqB;AAMvB;IAJC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yDAAyD;QACtE,OAAO,EAAE,wBAAwB;KAClC,CAAC;;+CACa"}

package/dist/authorization-server/dto/user-response.dto.d.ts

@@ -0,0 +1,7 @@
+export declare class UserResponseDto {
+    id: string;
+    email: string;
+    displayName: string;
+    role: 'admin' | 'standard';
+    actorId: string;
+}

package/dist/authorization-server/dto/user-response.dto.js

@@ -0,0 +1,58 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserResponseDto = void 0;
+const swagger_1 = require("@nestjs/swagger");
+class UserResponseDto {
+    id;
+    email;
+    displayName;
+    role;
+    actorId;
+}
+exports.UserResponseDto = UserResponseDto;
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'User ID',
+        example: '123e4567-e89b-12d3-a456-426614174000',
+    }),
+    __metadata("design:type", String)
+], UserResponseDto.prototype, "id", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'User email address',
+        example: 'user@example.com',
+    }),
+    __metadata("design:type", String)
+], UserResponseDto.prototype, "email", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'User display name',
+        example: 'John Doe',
+    }),
+    __metadata("design:type", String)
+], UserResponseDto.prototype, "displayName", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'User role',
+        enum: ['admin', 'standard'],
+        example: 'standard',
+    }),
+    __metadata("design:type", String)
+], UserResponseDto.prototype, "role", void 0);
+__decorate([
+    (0, swagger_1.ApiProperty)({
+        description: 'Actor ID associated with this user',
+        example: '123e4567-e89b-12d3-a456-426614174000',
+    }),
+    __metadata("design:type", String)
+], UserResponseDto.prototype, "actorId", void 0);
+//# sourceMappingURL=user-response.dto.js.map

package/dist/authorization-server/dto/user-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-response.dto.js","sourceRoot":"","sources":["../../../src/authorization-server/dto/user-response.dto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAE9C,MAAa,eAAe;IAK1B,EAAE,CAAU;IAMZ,KAAK,CAAU;IAMf,WAAW,CAAU;IAOrB,IAAI,CAAwB;IAM5B,OAAO,CAAU;CAClB;AA/BD,0CA+BC;AA1BC;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,sCAAsC;KAChD,CAAC;;2CACU;AAMZ;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oBAAoB;QACjC,OAAO,EAAE,kBAAkB;KAC5B,CAAC;;8CACa;AAMf;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mBAAmB;QAChC,OAAO,EAAE,UAAU;KACpB,CAAC;;oDACmB;AAOrB;IALC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,WAAW;QACxB,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;QAC3B,OAAO,EAAE,UAAU;KACpB,CAAC;;6CAC0B;AAM5B;IAJC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,oCAAoC;QACjD,OAAO,EAAE,sCAAsC;KAChD,CAAC;;gDACe"}

package/dist/authorization-server/entities/issued-access-token.entity.d.ts

@@ -0,0 +1,16 @@
+import { ActorEntity } from '../../identity-provider/actor.entity';
+export declare class IssuedAccessTokenEntity {
+    id: string;
+    subjectActorId: string;
+    subjectActor: ActorEntity;
+    issuedByActorId: string;
+    issuedByActor: ActorEntity;
+    jti: string;
+    name: string;
+    scopes: string[];
+    expiresAt: Date;
+    revokedAt: Date | null;
+    createdAt: Date;
+    lastUsedAt: Date | null;
+    get isValid(): boolean;
+}

package/dist/authorization-server/entities/issued-access-token.entity.js

@@ -0,0 +1,90 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IssuedAccessTokenEntity = void 0;
+const typeorm_1 = require("typeorm");
+const actor_entity_1 = require("../../identity-provider/actor.entity");
+let IssuedAccessTokenEntity = class IssuedAccessTokenEntity {
+    id;
+    subjectActorId;
+    subjectActor;
+    issuedByActorId;
+    issuedByActor;
+    jti;
+    name;
+    scopes;
+    expiresAt;
+    revokedAt;
+    createdAt;
+    lastUsedAt;
+    get isValid() {
+        if (this.revokedAt)
+            return false;
+        if (new Date() > this.expiresAt)
+            return false;
+        return true;
+    }
+};
+exports.IssuedAccessTokenEntity = IssuedAccessTokenEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], IssuedAccessTokenEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'uuid', name: 'subject_actor_id' }),
+    __metadata("design:type", String)
+], IssuedAccessTokenEntity.prototype, "subjectActorId", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => actor_entity_1.ActorEntity, { onDelete: 'CASCADE' }),
+    (0, typeorm_1.JoinColumn)({ name: 'subject_actor_id' }),
+    __metadata("design:type", actor_entity_1.ActorEntity)
+], IssuedAccessTokenEntity.prototype, "subjectActor", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'uuid', name: 'issued_by_actor_id' }),
+    __metadata("design:type", String)
+], IssuedAccessTokenEntity.prototype, "issuedByActorId", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => actor_entity_1.ActorEntity, { onDelete: 'CASCADE' }),
+    (0, typeorm_1.JoinColumn)({ name: 'issued_by_actor_id' }),
+    __metadata("design:type", actor_entity_1.ActorEntity)
+], IssuedAccessTokenEntity.prototype, "issuedByActor", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', name: 'jti', unique: true }),
+    __metadata("design:type", String)
+], IssuedAccessTokenEntity.prototype, "jti", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', name: 'name' }),
+    __metadata("design:type", String)
+], IssuedAccessTokenEntity.prototype, "name", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'simple-array', name: 'scopes' }),
+    __metadata("design:type", Array)
+], IssuedAccessTokenEntity.prototype, "scopes", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'datetime', name: 'expires_at' }),
+    __metadata("design:type", Date)
+], IssuedAccessTokenEntity.prototype, "expiresAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'datetime', name: 'revoked_at', nullable: true }),
+    __metadata("design:type", Object)
+], IssuedAccessTokenEntity.prototype, "revokedAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ type: 'datetime', name: 'created_at' }),
+    __metadata("design:type", Date)
+], IssuedAccessTokenEntity.prototype, "createdAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'datetime', name: 'last_used_at', nullable: true }),
+    __metadata("design:type", Object)
+], IssuedAccessTokenEntity.prototype, "lastUsedAt", void 0);
+exports.IssuedAccessTokenEntity = IssuedAccessTokenEntity = __decorate([
+    (0, typeorm_1.Entity)({ name: 'issued_access_tokens' })
+], IssuedAccessTokenEntity);
+//# sourceMappingURL=issued-access-token.entity.js.map

package/dist/authorization-server/entities/issued-access-token.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issued-access-token.entity.js","sourceRoot":"","sources":["../../../src/authorization-server/entities/issued-access-token.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAOiB;AACjB,uEAAmE;AAY5D,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IAElC,EAAE,CAAU;IAMZ,cAAc,CAAU;IAIxB,YAAY,CAAe;IAM3B,eAAe,CAAU;IAIzB,aAAa,CAAe;IAO5B,GAAG,CAAU;IAMb,IAAI,CAAU;IAMd,MAAM,CAAY;IAMlB,SAAS,CAAQ;IAMjB,SAAS,CAAe;IAMxB,SAAS,CAAQ;IAMjB,UAAU,CAAe;IAKzB,IAAI,OAAO;QACT,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,IAAI,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA3EY,0DAAuB;AAElC;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;mDACnB;AAMZ;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;;+DAC3B;AAIxB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,0BAAW,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACrD,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;8BAC1B,0BAAW;6DAAC;AAM3B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;;gEAC5B;AAIzB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,0BAAW,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACrD,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;8BAC3B,0BAAW;8DAAC;AAO5B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;;oDACvC;AAMb;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;;qDACzB;AAMd;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;;uDAC/B;AAMlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BACrC,IAAI;0DAAC;AAMjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;0DACzC;AAMxB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAC/C,IAAI;0DAAC;AAMjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;2DAC1C;kCAjEd,uBAAuB;IADnC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;GAC5B,uBAAuB,CA2EnC"}

package/dist/authorization-server/entities/mcp-refresh-token.entity.d.ts

@@ -0,0 +1,11 @@
+import { McpAuthorizationFlowEntity } from '../../auth-journeys/entities/mcp-authorization-flow.entity';
+export declare class McpRefreshTokenEntity {
+    id: string;
+    mcpAuthorizationFlowId: string;
+    tokenHash: string;
+    clientId: string;
+    expiresAt: Date;
+    revokedAt: Date | null;
+    createdAt: Date;
+    mcpAuthorizationFlow: McpAuthorizationFlowEntity;
+}

package/dist/authorization-server/entities/mcp-refresh-token.entity.js

@@ -0,0 +1,62 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpRefreshTokenEntity = void 0;
+const typeorm_1 = require("typeorm");
+const mcp_authorization_flow_entity_1 = require("../../auth-journeys/entities/mcp-authorization-flow.entity");
+let McpRefreshTokenEntity = class McpRefreshTokenEntity {
+    id;
+    mcpAuthorizationFlowId;
+    tokenHash;
+    clientId;
+    expiresAt;
+    revokedAt;
+    createdAt;
+    mcpAuthorizationFlow;
+};
+exports.McpRefreshTokenEntity = McpRefreshTokenEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], McpRefreshTokenEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'uuid', name: 'mcp_authorization_flow_id' }),
+    __metadata("design:type", String)
+], McpRefreshTokenEntity.prototype, "mcpAuthorizationFlowId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', name: 'token_hash' }),
+    __metadata("design:type", String)
+], McpRefreshTokenEntity.prototype, "tokenHash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', name: 'client_id' }),
+    __metadata("design:type", String)
+], McpRefreshTokenEntity.prototype, "clientId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'datetime', name: 'expires_at' }),
+    __metadata("design:type", Date)
+], McpRefreshTokenEntity.prototype, "expiresAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'datetime', name: 'revoked_at', nullable: true }),
+    __metadata("design:type", Object)
+], McpRefreshTokenEntity.prototype, "revokedAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ type: 'datetime', name: 'created_at' }),
+    __metadata("design:type", Date)
+], McpRefreshTokenEntity.prototype, "createdAt", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => mcp_authorization_flow_entity_1.McpAuthorizationFlowEntity, { onDelete: 'CASCADE' }),
+    (0, typeorm_1.JoinColumn)({ name: 'mcp_authorization_flow_id' }),
+    __metadata("design:type", mcp_authorization_flow_entity_1.McpAuthorizationFlowEntity)
+], McpRefreshTokenEntity.prototype, "mcpAuthorizationFlow", void 0);
+exports.McpRefreshTokenEntity = McpRefreshTokenEntity = __decorate([
+    (0, typeorm_1.Entity)({ name: 'mcp_refresh_tokens' })
+], McpRefreshTokenEntity);
+//# sourceMappingURL=mcp-refresh-token.entity.js.map

package/dist/authorization-server/entities/mcp-refresh-token.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-refresh-token.entity.js","sourceRoot":"","sources":["../../../src/authorization-server/entities/mcp-refresh-token.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAOiB;AACjB,8GAAwG;AAajG,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAEhC,EAAE,CAAU;IAGZ,sBAAsB,CAAU;IAGhC,SAAS,CAAU;IAGnB,QAAQ,CAAU;IAGlB,SAAS,CAAQ;IAGjB,SAAS,CAAe;IAGxB,SAAS,CAAQ;IAIjB,oBAAoB,CAA8B;CACnD,CAAA;AAzBY,sDAAqB;AAEhC;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;iDACnB;AAGZ;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;;qEAC5B;AAGhC;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;;wDAC1B;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;;uDAC1B;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BACrC,IAAI;wDAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDACzC;AAGxB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAC/C,IAAI;wDAAC;AAIjB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,0DAA0B,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACpE,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;8BAC3B,0DAA0B;mEAAC;gCAxBvC,qBAAqB;IADjC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;GAC1B,qBAAqB,CAyBjC"}

package/dist/authorization-server/entities/refresh-token.entity.d.ts

@@ -0,0 +1,10 @@
+import { User } from '../../identity-provider/user.entity';
+export declare class RefreshTokenEntity {
+    id: string;
+    userId: string;
+    tokenHash: string;
+    expiresAt: Date;
+    revokedAt: Date | null;
+    createdAt: Date;
+    user: User;
+}

package/dist/authorization-server/entities/refresh-token.entity.js

@@ -0,0 +1,57 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RefreshTokenEntity = void 0;
+const typeorm_1 = require("typeorm");
+const user_entity_1 = require("../../identity-provider/user.entity");
+let RefreshTokenEntity = class RefreshTokenEntity {
+    id;
+    userId;
+    tokenHash;
+    expiresAt;
+    revokedAt;
+    createdAt;
+    user;
+};
+exports.RefreshTokenEntity = RefreshTokenEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], RefreshTokenEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ name: 'user_id' }),
+    __metadata("design:type", String)
+], RefreshTokenEntity.prototype, "userId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', name: 'token_hash' }),
+    __metadata("design:type", String)
+], RefreshTokenEntity.prototype, "tokenHash", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'datetime', name: 'expires_at' }),
+    __metadata("design:type", Date)
+], RefreshTokenEntity.prototype, "expiresAt", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'datetime', name: 'revoked_at', nullable: true }),
+    __metadata("design:type", Object)
+], RefreshTokenEntity.prototype, "revokedAt", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ type: 'datetime', name: 'created_at' }),
+    __metadata("design:type", Date)
+], RefreshTokenEntity.prototype, "createdAt", void 0);
+__decorate([
+    (0, typeorm_1.ManyToOne)(() => user_entity_1.User),
+    (0, typeorm_1.JoinColumn)({ name: 'user_id' }),
+    __metadata("design:type", user_entity_1.User)
+], RefreshTokenEntity.prototype, "user", void 0);
+exports.RefreshTokenEntity = RefreshTokenEntity = __decorate([
+    (0, typeorm_1.Entity)({ name: 'refresh_tokens' })
+], RefreshTokenEntity);
+//# sourceMappingURL=refresh-token.entity.js.map

package/dist/authorization-server/entities/refresh-token.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-token.entity.js","sourceRoot":"","sources":["../../../src/authorization-server/entities/refresh-token.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAOiB;AACjB,qEAA2D;AAGpD,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAE7B,EAAE,CAAU;IAGZ,MAAM,CAAU;IAGhB,SAAS,CAAU;IAGnB,SAAS,CAAQ;IAGjB,SAAS,CAAe;IAGxB,SAAS,CAAQ;IAIjB,IAAI,CAAQ;CACb,CAAA;AAtBY,gDAAkB;AAE7B;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;8CACnB;AAGZ;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;;kDACZ;AAGhB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;;qDAC1B;AAGnB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BACrC,IAAI;qDAAC;AAGjB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;qDACzC;AAGxB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAC/C,IAAI;qDAAC;AAIjB;IAFC,IAAA,mBAAS,EAAC,GAAG,EAAE,CAAC,kBAAI,CAAC;IACrB,IAAA,oBAAU,EAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;8BACzB,kBAAI;gDAAC;6BArBD,kBAAkB;IAD9B,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;GACtB,kBAAkB,CAsB9B"}

package/dist/authorization-server/entities/registered-client.entity.d.ts

@@ -0,0 +1,16 @@
+import { GrantType, TokenEndpointAuthMethod } from '../enums';
+export declare class RegisteredClientEntity {
+    id: string;
+    clientId: string;
+    clientSecret: string | null;
+    clientName: string;
+    redirectUris: string[];
+    grantTypes: GrantType[];
+    tokenEndpointAuthMethod: TokenEndpointAuthMethod;
+    scopes: string[] | null;
+    contacts: string[] | null;
+    rowVersion: number;
+    createdAt: Date;
+    updatedAt: Date;
+    deletedAt?: Date | null;
+}

package/dist/authorization-server/entities/registered-client.entity.js

@@ -0,0 +1,90 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RegisteredClientEntity = void 0;
+const typeorm_1 = require("typeorm");
+const enums_1 = require("../enums");
+let RegisteredClientEntity = class RegisteredClientEntity {
+    id;
+    clientId;
+    clientSecret;
+    clientName;
+    redirectUris;
+    grantTypes;
+    tokenEndpointAuthMethod;
+    scopes;
+    contacts;
+    rowVersion;
+    createdAt;
+    updatedAt;
+    deletedAt;
+};
+exports.RegisteredClientEntity = RegisteredClientEntity;
+__decorate([
+    (0, typeorm_1.PrimaryGeneratedColumn)('uuid'),
+    __metadata("design:type", String)
+], RegisteredClientEntity.prototype, "id", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', unique: true, name: 'client_id' }),
+    __metadata("design:type", String)
+], RegisteredClientEntity.prototype, "clientId", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', name: 'client_secret', nullable: true }),
+    __metadata("design:type", Object)
+], RegisteredClientEntity.prototype, "clientSecret", void 0);
+__decorate([
+    (0, typeorm_1.Column)({ type: 'text', name: 'client_name' }),
+    __metadata("design:type", String)
+], RegisteredClientEntity.prototype, "clientName", void 0);
+__decorate([
+    (0, typeorm_1.Column)('simple-array', { name: 'redirect_uris' }),
+    __metadata("design:type", Array)
+], RegisteredClientEntity.prototype, "redirectUris", void 0);
+__decorate([
+    (0, typeorm_1.Column)('simple-array', { name: 'grant_types' }),
+    __metadata("design:type", Array)
+], RegisteredClientEntity.prototype, "grantTypes", void 0);
+__decorate([
+    (0, typeorm_1.Column)({
+        type: 'text',
+        name: 'token_endpoint_auth_method',
+        enum: enums_1.TokenEndpointAuthMethod,
+    }),
+    __metadata("design:type", String)
+], RegisteredClientEntity.prototype, "tokenEndpointAuthMethod", void 0);
+__decorate([
+    (0, typeorm_1.Column)('simple-array', { nullable: true }),
+    __metadata("design:type", Object)
+], RegisteredClientEntity.prototype, "scopes", void 0);
+__decorate([
+    (0, typeorm_1.Column)('simple-array', { nullable: true }),
+    __metadata("design:type", Object)
+], RegisteredClientEntity.prototype, "contacts", void 0);
+__decorate([
+    (0, typeorm_1.VersionColumn)({ name: 'row_version' }),
+    __metadata("design:type", Number)
+], RegisteredClientEntity.prototype, "rowVersion", void 0);
+__decorate([
+    (0, typeorm_1.CreateDateColumn)({ type: 'datetime', name: 'created_at' }),
+    __metadata("design:type", Date)
+], RegisteredClientEntity.prototype, "createdAt", void 0);
+__decorate([
+    (0, typeorm_1.UpdateDateColumn)({ type: 'datetime', name: 'updated_at' }),
+    __metadata("design:type", Date)
+], RegisteredClientEntity.prototype, "updatedAt", void 0);
+__decorate([
+    (0, typeorm_1.DeleteDateColumn)({ type: 'datetime', name: 'deleted_at', nullable: true }),
+    __metadata("design:type", Object)
+], RegisteredClientEntity.prototype, "deletedAt", void 0);
+exports.RegisteredClientEntity = RegisteredClientEntity = __decorate([
+    (0, typeorm_1.Entity)({ name: 'registered_clients' })
+], RegisteredClientEntity);
+//# sourceMappingURL=registered-client.entity.js.map

package/dist/authorization-server/entities/registered-client.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registered-client.entity.js","sourceRoot":"","sources":["../../../src/authorization-server/entities/registered-client.entity.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,qCAQiB;AACjB,oCAA8D;AAGvD,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAEjC,EAAE,CAAU;IAGZ,QAAQ,CAAU;IAGlB,YAAY,CAAiB;IAG7B,UAAU,CAAU;IAGpB,YAAY,CAAY;IAGxB,UAAU,CAAe;IAOzB,uBAAuB,CAA2B;IAGlD,MAAM,CAAmB;IAGzB,QAAQ,CAAmB;IAG3B,UAAU,CAAU;IAGpB,SAAS,CAAQ;IAGjB,SAAS,CAAQ;IAGjB,SAAS,CAAe;CACzB,CAAA;AA3CY,wDAAsB;AAEjC;IADC,IAAA,gCAAsB,EAAC,MAAM,CAAC;;kDACnB;AAGZ;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;;wDACxC;AAGlB;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;4DACnC;AAG7B;IADC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;0DAC1B;AAGpB;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;;4DAC1B;AAGxB;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;0DACvB;AAOzB;IALC,IAAA,gBAAM,EAAC;QACN,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,4BAA4B;QAClC,IAAI,EAAE,+BAAuB;KAC9B,CAAC;;uEACgD;AAGlD;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;sDAClB;AAGzB;IADC,IAAA,gBAAM,EAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;wDAChB;AAG3B;IADC,IAAA,uBAAa,EAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;;0DACnB;AAGpB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAC/C,IAAI;yDAAC;AAGjB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;8BAC/C,IAAI;yDAAC;AAGjB;IADC,IAAA,0BAAgB,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;yDACnD;iCA1Cb,sBAAsB;IADlC,IAAA,gBAAM,EAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;GAC1B,sBAAsB,CA2ClC"}

package/dist/authorization-server/enums/grant-type.enum.d.ts

@@ -0,0 +1,4 @@
+export declare enum GrantType {
+    AUTHORIZATION_CODE = "authorization_code",
+    REFRESH_TOKEN = "refresh_token"
+}