binoauth 0.0.13 → 0.0.14

package/dist/tenant-sdk/src/apis/OAuth2Api.js

@@ -1,419 +0,0 @@
-/* tslint:disable */
-/* eslint-disable */
-/**
- * BinoAuth Tenant API
- *  A comprehensive multi-tenant authentication and authorization API supporting OAuth2, OpenID Connect, API keys, and multiple authentication methods.  ## Features  - **Multi-Tenant Architecture**: Isolated tenant-specific authentication - **OAuth2 & OpenID Connect**: Full OAuth2/OIDC implementation with PKCE support - **API Keys**: Long-lived keys for programmatic access - **Multiple Auth Methods**: Password, magic links, phone OTP, social login, MFA - **Session Management**: Secure session handling with Redis backing - **Comprehensive Security**: Rate limiting, audit logging, secure token handling  ## Authentication Methods  ### 1. Session-Based (Web Applications) - HTTP-only secure cookies - Automatic session management - CSRF protection  ### 2. API Keys (Programmatic Access) - Long-lived keys with scoped permissions - SHA-256 hashed storage - Usage tracking and analytics - **Header**: `X-API-Key: ak_live_...`  ### 3. OAuth2 Bearer Tokens - Short-lived JWT tokens - Full OAuth2/OIDC support - Refresh token capability - **Header**: `Authorization: Bearer ...`  ## Getting Started  ### For Web Applications 1. Use `/auth/login` for password authentication 2. Session cookies are automatically managed 3. Access protected endpoints directly  ### For Mobile Applications   1. Use OAuth2 authorization code flow with PKCE 2. Handle deep links for OAuth callbacks 3. Store and use refresh tokens for long-lived sessions  ### For Backend Services 1. Create API keys via `/api-keys` endpoint 2. Use API keys for direct authentication 3. Generate short-lived tokens when needed  ## Error Handling  All endpoints return structured error responses:  ```json {   \"detail\": \"Error description\",   \"error\": \"error_code\",    \"error_description\": \"Detailed error message\" } ```  ## Rate Limiting  API endpoints are rate limited to prevent abuse: - Authentication endpoints: 10 requests/minute - API key operations: 100 requests/hour   - General endpoints: 1000 requests/hour  ## Support  - Documentation: [API Documentation](https://docs.binoauth.com) - Support: support@binoauth.com - Status: [Status Page](https://status.binoauth.com)
- *
- * The version of the OpenAPI document: 1.0.0
- * Contact: support@binoauth.com
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-import * as runtime from '../runtime';
-import { ClientConfigResponseFromJSON, ClientConfigResponseToJSON, ClientDiscoveryResponseFromJSON, ClientDiscoveryResponseToJSON, ConsentRequestFromJSON, ConsentRequestToJSON, DeviceAuthResponseFromJSON, DeviceAuthResponseToJSON, DeviceAuthenticationRequestFromJSON, DeviceAuthenticationRequestToJSON, DeviceAuthorizationRequestFromJSON, DeviceAuthorizationRequestToJSON, HTTPValidationErrorFromJSON, HTTPValidationErrorToJSON, IntrospectTokenRequestFromJSON, IntrospectTokenRequestToJSON, IntrospectTokenResponseFromJSON, IntrospectTokenResponseToJSON, LogoutRequestFromJSON, LogoutRequestToJSON, TokenRequestFromJSON, TokenRequestToJSON, TokenResponseFromJSON, TokenResponseToJSON, UserInfoResponseFromJSON, UserInfoResponseToJSON, } from '../models/index';
-/**
- *
- */
-export class OAuth2Api extends runtime.BaseAPI {
-    /**
-     * OAuth2 authorization endpoint to start or resume the authorization flow.      Supports Authorization Code Flow with PKCE, manages flow_state in Redis     to handle user login and consent flows securely.
-     * OAuth2 Authorization Endpoint
-     */
-    async authorizeApiV1OauthAuthorizeGetRaw(requestParameters, initOverrides) {
-        if (requestParameters['responseType'] == null) {
-            throw new runtime.RequiredError('responseType', 'Required parameter "responseType" was null or undefined when calling authorizeApiV1OauthAuthorizeGet().');
-        }
-        if (requestParameters['clientId'] == null) {
-            throw new runtime.RequiredError('clientId', 'Required parameter "clientId" was null or undefined when calling authorizeApiV1OauthAuthorizeGet().');
-        }
-        if (requestParameters['redirectUri'] == null) {
-            throw new runtime.RequiredError('redirectUri', 'Required parameter "redirectUri" was null or undefined when calling authorizeApiV1OauthAuthorizeGet().');
-        }
-        if (requestParameters['scope'] == null) {
-            throw new runtime.RequiredError('scope', 'Required parameter "scope" was null or undefined when calling authorizeApiV1OauthAuthorizeGet().');
-        }
-        const queryParameters = {};
-        if (requestParameters['responseType'] != null) {
-            queryParameters['response_type'] = requestParameters['responseType'];
-        }
-        if (requestParameters['clientId'] != null) {
-            queryParameters['client_id'] = requestParameters['clientId'];
-        }
-        if (requestParameters['redirectUri'] != null) {
-            queryParameters['redirect_uri'] = requestParameters['redirectUri'];
-        }
-        if (requestParameters['scope'] != null) {
-            queryParameters['scope'] = requestParameters['scope'];
-        }
-        if (requestParameters['state'] != null) {
-            queryParameters['state'] = requestParameters['state'];
-        }
-        if (requestParameters['nonce'] != null) {
-            queryParameters['nonce'] = requestParameters['nonce'];
-        }
-        if (requestParameters['codeChallenge'] != null) {
-            queryParameters['code_challenge'] = requestParameters['codeChallenge'];
-        }
-        if (requestParameters['codeChallengeMethod'] != null) {
-            queryParameters['code_challenge_method'] = requestParameters['codeChallengeMethod'];
-        }
-        const headerParameters = {};
-        let urlPath = `/api/v1/oauth/authorize`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'GET',
-            headers: headerParameters,
-            query: queryParameters,
-        }, initOverrides);
-        if (this.isJsonMime(response.headers.get('content-type'))) {
-            return new runtime.JSONApiResponse(response);
-        }
-        else {
-            return new runtime.TextApiResponse(response);
-        }
-    }
-    /**
-     * OAuth2 authorization endpoint to start or resume the authorization flow.      Supports Authorization Code Flow with PKCE, manages flow_state in Redis     to handle user login and consent flows securely.
-     * OAuth2 Authorization Endpoint
-     */
-    async authorizeApiV1OauthAuthorizeGet(requestParameters, initOverrides) {
-        const response = await this.authorizeApiV1OauthAuthorizeGetRaw(requestParameters, initOverrides);
-        return await response.value();
-    }
-    /**
-     * Handle device authentication.
-     * Device Authenticate
-     */
-    async deviceAuthenticateApiV1OauthDeviceAuthenticatePostRaw(requestParameters, initOverrides) {
-        if (requestParameters['deviceAuthenticationRequest'] == null) {
-            throw new runtime.RequiredError('deviceAuthenticationRequest', 'Required parameter "deviceAuthenticationRequest" was null or undefined when calling deviceAuthenticateApiV1OauthDeviceAuthenticatePost().');
-        }
-        const queryParameters = {};
-        const headerParameters = {};
-        headerParameters['Content-Type'] = 'application/json';
-        let urlPath = `/api/v1/oauth/device/authenticate`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'POST',
-            headers: headerParameters,
-            query: queryParameters,
-            body: DeviceAuthenticationRequestToJSON(requestParameters['deviceAuthenticationRequest']),
-        }, initOverrides);
-        if (this.isJsonMime(response.headers.get('content-type'))) {
-            return new runtime.JSONApiResponse(response);
-        }
-        else {
-            return new runtime.TextApiResponse(response);
-        }
-    }
-    /**
-     * Handle device authentication.
-     * Device Authenticate
-     */
-    async deviceAuthenticateApiV1OauthDeviceAuthenticatePost(requestParameters, initOverrides) {
-        const response = await this.deviceAuthenticateApiV1OauthDeviceAuthenticatePostRaw(requestParameters, initOverrides);
-        return await response.value();
-    }
-    /**
-     * Handle device authorization request.
-     * Device Authorization
-     */
-    async deviceAuthorizationApiV1OauthDeviceCodePostRaw(requestParameters, initOverrides) {
-        if (requestParameters['deviceAuthorizationRequest'] == null) {
-            throw new runtime.RequiredError('deviceAuthorizationRequest', 'Required parameter "deviceAuthorizationRequest" was null or undefined when calling deviceAuthorizationApiV1OauthDeviceCodePost().');
-        }
-        const queryParameters = {};
-        const headerParameters = {};
-        headerParameters['Content-Type'] = 'application/json';
-        let urlPath = `/api/v1/oauth/device/code`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'POST',
-            headers: headerParameters,
-            query: queryParameters,
-            body: DeviceAuthorizationRequestToJSON(requestParameters['deviceAuthorizationRequest']),
-        }, initOverrides);
-        return new runtime.JSONApiResponse(response, (jsonValue) => DeviceAuthResponseFromJSON(jsonValue));
-    }
-    /**
-     * Handle device authorization request.
-     * Device Authorization
-     */
-    async deviceAuthorizationApiV1OauthDeviceCodePost(requestParameters, initOverrides) {
-        const response = await this.deviceAuthorizationApiV1OauthDeviceCodePostRaw(requestParameters, initOverrides);
-        return await response.value();
-    }
-    /**
-     * Get client information for consent page.
-     * Get Client Info
-     */
-    async getClientInfoApiV1ClientsClientIdConfigGetRaw(requestParameters, initOverrides) {
-        if (requestParameters['clientId'] == null) {
-            throw new runtime.RequiredError('clientId', 'Required parameter "clientId" was null or undefined when calling getClientInfoApiV1ClientsClientIdConfigGet().');
-        }
-        const queryParameters = {};
-        const headerParameters = {};
-        let urlPath = `/api/v1/clients/{client_id}/config`;
-        urlPath = urlPath.replace(`{${"client_id"}}`, encodeURIComponent(String(requestParameters['clientId'])));
-        const response = await this.request({
-            path: urlPath,
-            method: 'GET',
-            headers: headerParameters,
-            query: queryParameters,
-        }, initOverrides);
-        return new runtime.JSONApiResponse(response, (jsonValue) => ClientConfigResponseFromJSON(jsonValue));
-    }
-    /**
-     * Get client information for consent page.
-     * Get Client Info
-     */
-    async getClientInfoApiV1ClientsClientIdConfigGet(requestParameters, initOverrides) {
-        const response = await this.getClientInfoApiV1ClientsClientIdConfigGetRaw(requestParameters, initOverrides);
-        return await response.value();
-    }
-    /**
-     * Get client information for consent page.
-     * Get Client Info
-     */
-    async getClientInfoApiV1ClientsDiscoveryGetRaw(initOverrides) {
-        const queryParameters = {};
-        const headerParameters = {};
-        let urlPath = `/api/v1/clients/discovery`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'GET',
-            headers: headerParameters,
-            query: queryParameters,
-        }, initOverrides);
-        return new runtime.JSONApiResponse(response, (jsonValue) => jsonValue.map(ClientDiscoveryResponseFromJSON));
-    }
-    /**
-     * Get client information for consent page.
-     * Get Client Info
-     */
-    async getClientInfoApiV1ClientsDiscoveryGet(initOverrides) {
-        const response = await this.getClientInfoApiV1ClientsDiscoveryGetRaw(initOverrides);
-        return await response.value();
-    }
-    /**
-     * Get Current User
-     */
-    async getCurrentUserApiV1OauthUserinfoGetRaw(initOverrides) {
-        const queryParameters = {};
-        const headerParameters = {};
-        let urlPath = `/api/v1/oauth/userinfo`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'GET',
-            headers: headerParameters,
-            query: queryParameters,
-        }, initOverrides);
-        return new runtime.JSONApiResponse(response, (jsonValue) => UserInfoResponseFromJSON(jsonValue));
-    }
-    /**
-     * Get Current User
-     */
-    async getCurrentUserApiV1OauthUserinfoGet(initOverrides) {
-        const response = await this.getCurrentUserApiV1OauthUserinfoGetRaw(initOverrides);
-        return await response.value();
-    }
-    /**
-     * OAuth2 token endpoint supporting multiple grant types.          This endpoint exchanges various credentials for access tokens according to OAuth2 specification.     Supports both JSON and form-encoded requests.          **Supported Grant Types:**          ### 1. Authorization Code (Recommended)     Exchange authorization code for tokens (with PKCE support):     ```json     {       \"grant_type\": \"authorization_code\",       \"code\": \"authorization_code_from_authorize_endpoint\",       \"redirect_uri\": \"https://myapp.com/callback\",       \"client_id\": \"your_client_id\",       \"code_verifier\": \"original_code_verifier_string\"     }     ```          ### 2. Client Credentials (Server-to-Server)     Machine-to-machine authentication:     ```json     {       \"grant_type\": \"client_credentials\",       \"client_id\": \"your_client_id\",       \"client_secret\": \"your_client_secret\",       \"scope\": \"api:read api:write\"     }     ```          ### 3. Refresh Token     Refresh an expired access token:     ```json     {       \"grant_type\": \"refresh_token\",       \"refresh_token\": \"your_refresh_token\",       \"client_id\": \"your_client_id\"     }     ```          ### 4. Device Code     Complete device authorization flow:     ```json     {       \"grant_type\": \"urn:ietf:params:oauth:grant-type:device_code\",       \"device_code\": \"device_code_from_device_auth\",       \"client_id\": \"your_client_id\"     }     ```          ### 5. Password Grant (Not Recommended)     Direct username/password authentication:     ```json     {       \"grant_type\": \"password\",       \"username\": \"user@example.com\",       \"password\": \"user_password\",       \"client_id\": \"your_client_id\",       \"scope\": \"openid profile\"     }     ```          **Content Types:**     - `application/json` (recommended)     - `application/x-www-form-urlencoded` (standard OAuth2)          **Security Notes:**     - Use PKCE for public clients (mobile/SPA apps)     - Store refresh tokens securely     - Use appropriate scopes for least privilege     - Client credentials should be transmitted securely
-     * OAuth2 Token Endpoint
-     */
-    async getTokensApiV1OauthTokenPostRaw(requestParameters, initOverrides) {
-        if (requestParameters['tokenRequest'] == null) {
-            throw new runtime.RequiredError('tokenRequest', 'Required parameter "tokenRequest" was null or undefined when calling getTokensApiV1OauthTokenPost().');
-        }
-        const queryParameters = {};
-        const headerParameters = {};
-        headerParameters['Content-Type'] = 'application/json';
-        let urlPath = `/api/v1/oauth/token`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'POST',
-            headers: headerParameters,
-            query: queryParameters,
-            body: TokenRequestToJSON(requestParameters['tokenRequest']),
-        }, initOverrides);
-        return new runtime.JSONApiResponse(response, (jsonValue) => TokenResponseFromJSON(jsonValue));
-    }
-    /**
-     * OAuth2 token endpoint supporting multiple grant types.          This endpoint exchanges various credentials for access tokens according to OAuth2 specification.     Supports both JSON and form-encoded requests.          **Supported Grant Types:**          ### 1. Authorization Code (Recommended)     Exchange authorization code for tokens (with PKCE support):     ```json     {       \"grant_type\": \"authorization_code\",       \"code\": \"authorization_code_from_authorize_endpoint\",       \"redirect_uri\": \"https://myapp.com/callback\",       \"client_id\": \"your_client_id\",       \"code_verifier\": \"original_code_verifier_string\"     }     ```          ### 2. Client Credentials (Server-to-Server)     Machine-to-machine authentication:     ```json     {       \"grant_type\": \"client_credentials\",       \"client_id\": \"your_client_id\",       \"client_secret\": \"your_client_secret\",       \"scope\": \"api:read api:write\"     }     ```          ### 3. Refresh Token     Refresh an expired access token:     ```json     {       \"grant_type\": \"refresh_token\",       \"refresh_token\": \"your_refresh_token\",       \"client_id\": \"your_client_id\"     }     ```          ### 4. Device Code     Complete device authorization flow:     ```json     {       \"grant_type\": \"urn:ietf:params:oauth:grant-type:device_code\",       \"device_code\": \"device_code_from_device_auth\",       \"client_id\": \"your_client_id\"     }     ```          ### 5. Password Grant (Not Recommended)     Direct username/password authentication:     ```json     {       \"grant_type\": \"password\",       \"username\": \"user@example.com\",       \"password\": \"user_password\",       \"client_id\": \"your_client_id\",       \"scope\": \"openid profile\"     }     ```          **Content Types:**     - `application/json` (recommended)     - `application/x-www-form-urlencoded` (standard OAuth2)          **Security Notes:**     - Use PKCE for public clients (mobile/SPA apps)     - Store refresh tokens securely     - Use appropriate scopes for least privilege     - Client credentials should be transmitted securely
-     * OAuth2 Token Endpoint
-     */
-    async getTokensApiV1OauthTokenPost(requestParameters, initOverrides) {
-        const response = await this.getTokensApiV1OauthTokenPostRaw(requestParameters, initOverrides);
-        return await response.value();
-    }
-    /**
-     * Handle user\'s consent decision.
-     * Handle Consent
-     */
-    async handleConsentApiV1OauthConsentPostRaw(requestParameters, initOverrides) {
-        if (requestParameters['consentRequest'] == null) {
-            throw new runtime.RequiredError('consentRequest', 'Required parameter "consentRequest" was null or undefined when calling handleConsentApiV1OauthConsentPost().');
-        }
-        const queryParameters = {};
-        const headerParameters = {};
-        headerParameters['Content-Type'] = 'application/json';
-        let urlPath = `/api/v1/oauth/consent`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'POST',
-            headers: headerParameters,
-            query: queryParameters,
-            body: ConsentRequestToJSON(requestParameters['consentRequest']),
-        }, initOverrides);
-        if (this.isJsonMime(response.headers.get('content-type'))) {
-            return new runtime.JSONApiResponse(response);
-        }
-        else {
-            return new runtime.TextApiResponse(response);
-        }
-    }
-    /**
-     * Handle user\'s consent decision.
-     * Handle Consent
-     */
-    async handleConsentApiV1OauthConsentPost(requestParameters, initOverrides) {
-        const response = await this.handleConsentApiV1OauthConsentPostRaw(requestParameters, initOverrides);
-        return await response.value();
-    }
-    /**
-     * Introspect a token.
-     * Introspect Token
-     */
-    async introspectTokenApiV1OauthIntrospectPostRaw(requestParameters, initOverrides) {
-        if (requestParameters['introspectTokenRequest'] == null) {
-            throw new runtime.RequiredError('introspectTokenRequest', 'Required parameter "introspectTokenRequest" was null or undefined when calling introspectTokenApiV1OauthIntrospectPost().');
-        }
-        const queryParameters = {};
-        const headerParameters = {};
-        headerParameters['Content-Type'] = 'application/json';
-        let urlPath = `/api/v1/oauth/introspect`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'POST',
-            headers: headerParameters,
-            query: queryParameters,
-            body: IntrospectTokenRequestToJSON(requestParameters['introspectTokenRequest']),
-        }, initOverrides);
-        return new runtime.JSONApiResponse(response, (jsonValue) => IntrospectTokenResponseFromJSON(jsonValue));
-    }
-    /**
-     * Introspect a token.
-     * Introspect Token
-     */
-    async introspectTokenApiV1OauthIntrospectPost(requestParameters, initOverrides) {
-        const response = await this.introspectTokenApiV1OauthIntrospectPostRaw(requestParameters, initOverrides);
-        return await response.value();
-    }
-    /**
-     * Handle Oauth2 logout. Revokes the token and redirects to the logout endpoint with the return_to URL.
-     * Logout
-     */
-    async logoutApiV1OauthLogoutGetRaw(requestParameters, initOverrides) {
-        if (requestParameters['clientId'] == null) {
-            throw new runtime.RequiredError('clientId', 'Required parameter "clientId" was null or undefined when calling logoutApiV1OauthLogoutGet().');
-        }
-        if (requestParameters['returnTo'] == null) {
-            throw new runtime.RequiredError('returnTo', 'Required parameter "returnTo" was null or undefined when calling logoutApiV1OauthLogoutGet().');
-        }
-        const queryParameters = {};
-        if (requestParameters['clientId'] != null) {
-            queryParameters['client_id'] = requestParameters['clientId'];
-        }
-        if (requestParameters['returnTo'] != null) {
-            queryParameters['return_to'] = requestParameters['returnTo'];
-        }
-        const headerParameters = {};
-        let urlPath = `/api/v1/oauth/logout`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'GET',
-            headers: headerParameters,
-            query: queryParameters,
-        }, initOverrides);
-        if (this.isJsonMime(response.headers.get('content-type'))) {
-            return new runtime.JSONApiResponse(response);
-        }
-        else {
-            return new runtime.TextApiResponse(response);
-        }
-    }
-    /**
-     * Handle Oauth2 logout. Revokes the token and redirects to the logout endpoint with the return_to URL.
-     * Logout
-     */
-    async logoutApiV1OauthLogoutGet(requestParameters, initOverrides) {
-        const response = await this.logoutApiV1OauthLogoutGetRaw(requestParameters, initOverrides);
-        return await response.value();
-    }
-    /**
-     * OpenID Connect discovery endpoint.
-     * Openid Configuration
-     */
-    async openidConfigurationApiV1OauthWellKnownOpenidConfigurationGetRaw(initOverrides) {
-        const queryParameters = {};
-        const headerParameters = {};
-        let urlPath = `/api/v1/oauth/.well-known/openid-configuration`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'GET',
-            headers: headerParameters,
-            query: queryParameters,
-        }, initOverrides);
-        if (this.isJsonMime(response.headers.get('content-type'))) {
-            return new runtime.JSONApiResponse(response);
-        }
-        else {
-            return new runtime.TextApiResponse(response);
-        }
-    }
-    /**
-     * OpenID Connect discovery endpoint.
-     * Openid Configuration
-     */
-    async openidConfigurationApiV1OauthWellKnownOpenidConfigurationGet(initOverrides) {
-        const response = await this.openidConfigurationApiV1OauthWellKnownOpenidConfigurationGetRaw(initOverrides);
-        return await response.value();
-    }
-    /**
-     * Handle user logout.
-     * Revoke
-     */
-    async revokeApiV1OauthRevokePostRaw(requestParameters, initOverrides) {
-        if (requestParameters['logoutRequest'] == null) {
-            throw new runtime.RequiredError('logoutRequest', 'Required parameter "logoutRequest" was null or undefined when calling revokeApiV1OauthRevokePost().');
-        }
-        const queryParameters = {};
-        const headerParameters = {};
-        headerParameters['Content-Type'] = 'application/json';
-        let urlPath = `/api/v1/oauth/revoke`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'POST',
-            headers: headerParameters,
-            query: queryParameters,
-            body: LogoutRequestToJSON(requestParameters['logoutRequest']),
-        }, initOverrides);
-        if (this.isJsonMime(response.headers.get('content-type'))) {
-            return new runtime.JSONApiResponse(response);
-        }
-        else {
-            return new runtime.TextApiResponse(response);
-        }
-    }
-    /**
-     * Handle user logout.
-     * Revoke
-     */
-    async revokeApiV1OauthRevokePost(requestParameters, initOverrides) {
-        const response = await this.revokeApiV1OauthRevokePostRaw(requestParameters, initOverrides);
-        return await response.value();
-    }
-}
-//# sourceMappingURL=OAuth2Api.js.map

package/dist/tenant-sdk/src/apis/OAuth2Api.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"OAuth2Api.js","sourceRoot":"","sources":["../../../../../tenant-sdk/src/apis/OAuth2Api.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,oBAAoB;AACpB;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,OAAO,MAAM,YAAY,CAAC;AAgBtC,OAAO,EACH,4BAA4B,EAC5B,0BAA0B,EAC1B,+BAA+B,EAC/B,6BAA6B,EAC7B,sBAAsB,EACtB,oBAAoB,EACpB,0BAA0B,EAC1B,wBAAwB,EACxB,mCAAmC,EACnC,iCAAiC,EACjC,kCAAkC,EAClC,gCAAgC,EAChC,2BAA2B,EAC3B,yBAAyB,EACzB,8BAA8B,EAC9B,4BAA4B,EAC5B,+BAA+B,EAC/B,6BAA6B,EAC7B,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,sBAAsB,GACzB,MAAM,iBAAiB,CAAC;AA2PzB;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,OAAO;IAE1C;;;OAGG;IACH,KAAK,CAAC,kCAAkC,CAAC,iBAAyD,EAAE,aAA0D;QAC1J,IAAI,iBAAiB,CAAC,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,cAAc,EACd,yGAAyG,CAC5G,CAAC;QACN,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,UAAU,EACV,qGAAqG,CACxG,CAAC;QACN,CAAC;QAED,IAAI,iBAAiB,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3C,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,aAAa,EACb,wGAAwG,CAC3G,CAAC;QACN,CAAC;QAED,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,OAAO,EACP,kGAAkG,CACrG,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,IAAI,iBAAiB,CAAC,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5C,eAAe,CAAC,eAAe,CAAC,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,eAAe,CAAC,WAAW,CAAC,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,iBAAiB,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3C,eAAe,CAAC,cAAc,CAAC,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,eAAe,CAAC,OAAO,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,eAAe,CAAC,OAAO,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,iBAAiB,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;YACrC,eAAe,CAAC,OAAO,CAAC,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,iBAAiB,CAAC,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC;YAC7C,eAAe,CAAC,gBAAgB,CAAC,GAAG,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,iBAAiB,CAAC,qBAAqB,CAAC,IAAI,IAAI,EAAE,CAAC;YACnD,eAAe,CAAC,uBAAuB,CAAC,GAAG,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAGjD,IAAI,OAAO,GAAG,yBAAyB,CAAC;QAExC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;SACzB,EAAE,aAAa,CAAC,CAAC;QAElB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,OAAO,CAAC,eAAe,CAAM,QAAQ,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACJ,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAQ,CAAC;QACxD,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,+BAA+B,CAAC,iBAAyD,EAAE,aAA0D;QACvJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACjG,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qDAAqD,CAAC,iBAA4E,EAAE,aAA0D;QAChM,IAAI,iBAAiB,CAAC,6BAA6B,CAAC,IAAI,IAAI,EAAE,CAAC;YAC3D,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,6BAA6B,EAC7B,2IAA2I,CAC9I,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAGtD,IAAI,OAAO,GAAG,mCAAmC,CAAC;QAElD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,iCAAiC,CAAC,iBAAiB,CAAC,6BAA6B,CAAC,CAAC;SAC5F,EAAE,aAAa,CAAC,CAAC;QAElB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,OAAO,CAAC,eAAe,CAAM,QAAQ,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACJ,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAQ,CAAC;QACxD,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kDAAkD,CAAC,iBAA4E,EAAE,aAA0D;QAC7L,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qDAAqD,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACpH,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,8CAA8C,CAAC,iBAAqE,EAAE,aAA0D;QAClL,IAAI,iBAAiB,CAAC,4BAA4B,CAAC,IAAI,IAAI,EAAE,CAAC;YAC1D,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,4BAA4B,EAC5B,mIAAmI,CACtI,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAGtD,IAAI,OAAO,GAAG,2BAA2B,CAAC;QAE1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,gCAAgC,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;SAC1F,EAAE,aAAa,CAAC,CAAC;QAElB,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,0BAA0B,CAAC,SAAS,CAAC,CAAC,CAAC;IACvG,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,2CAA2C,CAAC,iBAAqE,EAAE,aAA0D;QAC/K,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,8CAA8C,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAC7G,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,6CAA6C,CAAC,iBAAoE,EAAE,aAA0D;QAChL,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,UAAU,EACV,gHAAgH,CACnH,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAGjD,IAAI,OAAO,GAAG,oCAAoC,CAAC;QACnD,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,WAAW,GAAG,EAAE,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;SACzB,EAAE,aAAa,CAAC,CAAC;QAElB,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,4BAA4B,CAAC,SAAS,CAAC,CAAC,CAAC;IACzG,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,0CAA0C,CAAC,iBAAoE,EAAE,aAA0D;QAC7K,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,6CAA6C,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAC5G,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,wCAAwC,CAAC,aAA0D;QACrG,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAGjD,IAAI,OAAO,GAAG,2BAA2B,CAAC;QAE1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;SACzB,EAAE,aAAa,CAAC,CAAC;QAElB,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC;IAChH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qCAAqC,CAAC,aAA0D;QAClG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,wCAAwC,CAAC,aAAa,CAAC,CAAC;QACpF,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,sCAAsC,CAAC,aAA0D;QACnG,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAGjD,IAAI,OAAO,GAAG,wBAAwB,CAAC;QAEvC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;SACzB,EAAE,aAAa,CAAC,CAAC;QAElB,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC,CAAC,CAAC;IACrG,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mCAAmC,CAAC,aAA0D;QAChG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,sCAAsC,CAAC,aAAa,CAAC,CAAC;QAClF,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,+BAA+B,CAAC,iBAAsD,EAAE,aAA0D;QACpJ,IAAI,iBAAiB,CAAC,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,cAAc,EACd,sGAAsG,CACzG,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAGtD,IAAI,OAAO,GAAG,qBAAqB,CAAC;QAEpC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,kBAAkB,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;SAC9D,EAAE,aAAa,CAAC,CAAC;QAElB,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;IAClG,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,4BAA4B,CAAC,iBAAsD,EAAE,aAA0D;QACjJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAC9F,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,qCAAqC,CAAC,iBAA4D,EAAE,aAA0D;QAChK,IAAI,iBAAiB,CAAC,gBAAgB,CAAC,IAAI,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,gBAAgB,EAChB,8GAA8G,CACjH,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAGtD,IAAI,OAAO,GAAG,uBAAuB,CAAC;QAEtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,oBAAoB,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;SAClE,EAAE,aAAa,CAAC,CAAC;QAElB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,OAAO,CAAC,eAAe,CAAM,QAAQ,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACJ,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAQ,CAAC;QACxD,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kCAAkC,CAAC,iBAA4D,EAAE,aAA0D;QAC7J,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACpG,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,0CAA0C,CAAC,iBAAiE,EAAE,aAA0D;QAC1K,IAAI,iBAAiB,CAAC,wBAAwB,CAAC,IAAI,IAAI,EAAE,CAAC;YACtD,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,wBAAwB,EACxB,2HAA2H,CAC9H,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAGtD,IAAI,OAAO,GAAG,0BAA0B,CAAC;QAEzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,4BAA4B,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,CAAC;SAClF,EAAE,aAAa,CAAC,CAAC;QAElB,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,+BAA+B,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,uCAAuC,CAAC,iBAAiE,EAAE,aAA0D;QACvK,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,0CAA0C,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QACzG,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,4BAA4B,CAAC,iBAAmD,EAAE,aAA0D;QAC9I,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,UAAU,EACV,+FAA+F,CAClG,CAAC;QACN,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,UAAU,EACV,+FAA+F,CAClG,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,eAAe,CAAC,WAAW,CAAC,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,eAAe,CAAC,WAAW,CAAC,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAGjD,IAAI,OAAO,GAAG,sBAAsB,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;SACzB,EAAE,aAAa,CAAC,CAAC;QAElB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,OAAO,CAAC,eAAe,CAAM,QAAQ,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACJ,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAQ,CAAC;QACxD,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,yBAAyB,CAAC,iBAAmD,EAAE,aAA0D;QAC3I,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,4BAA4B,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAC3F,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,+DAA+D,CAAC,aAA0D;QAC5H,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAGjD,IAAI,OAAO,GAAG,gDAAgD,CAAC;QAE/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;SACzB,EAAE,aAAa,CAAC,CAAC;QAElB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,OAAO,CAAC,eAAe,CAAM,QAAQ,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACJ,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAQ,CAAC;QACxD,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,4DAA4D,CAAC,aAA0D;QACzH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,+DAA+D,CAAC,aAAa,CAAC,CAAC;QAC3G,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,6BAA6B,CAAC,iBAAoD,EAAE,aAA0D;QAChJ,IAAI,iBAAiB,CAAC,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,OAAO,CAAC,aAAa,CAC3B,eAAe,EACf,qGAAqG,CACxG,CAAC;QACN,CAAC;QAED,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAEjD,gBAAgB,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAGtD,IAAI,OAAO,GAAG,sBAAsB,CAAC;QAErC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;YACtB,IAAI,EAAE,mBAAmB,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;SAChE,EAAE,aAAa,CAAC,CAAC;QAElB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,OAAO,CAAC,eAAe,CAAM,QAAQ,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACJ,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAQ,CAAC;QACxD,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,0BAA0B,CAAC,iBAAoD,EAAE,aAA0D;QAC7I,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAC5F,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;CAEJ"}

package/dist/tenant-sdk/src/apis/OpenidApi.d.ts

@@ -1,49 +0,0 @@
-/**
- * BinoAuth Tenant API
- *  A comprehensive multi-tenant authentication and authorization API supporting OAuth2, OpenID Connect, API keys, and multiple authentication methods.  ## Features  - **Multi-Tenant Architecture**: Isolated tenant-specific authentication - **OAuth2 & OpenID Connect**: Full OAuth2/OIDC implementation with PKCE support - **API Keys**: Long-lived keys for programmatic access - **Multiple Auth Methods**: Password, magic links, phone OTP, social login, MFA - **Session Management**: Secure session handling with Redis backing - **Comprehensive Security**: Rate limiting, audit logging, secure token handling  ## Authentication Methods  ### 1. Session-Based (Web Applications) - HTTP-only secure cookies - Automatic session management - CSRF protection  ### 2. API Keys (Programmatic Access) - Long-lived keys with scoped permissions - SHA-256 hashed storage - Usage tracking and analytics - **Header**: `X-API-Key: ak_live_...`  ### 3. OAuth2 Bearer Tokens - Short-lived JWT tokens - Full OAuth2/OIDC support - Refresh token capability - **Header**: `Authorization: Bearer ...`  ## Getting Started  ### For Web Applications 1. Use `/auth/login` for password authentication 2. Session cookies are automatically managed 3. Access protected endpoints directly  ### For Mobile Applications   1. Use OAuth2 authorization code flow with PKCE 2. Handle deep links for OAuth callbacks 3. Store and use refresh tokens for long-lived sessions  ### For Backend Services 1. Create API keys via `/api-keys` endpoint 2. Use API keys for direct authentication 3. Generate short-lived tokens when needed  ## Error Handling  All endpoints return structured error responses:  ```json {   \"detail\": \"Error description\",   \"error\": \"error_code\",    \"error_description\": \"Detailed error message\" } ```  ## Rate Limiting  API endpoints are rate limited to prevent abuse: - Authentication endpoints: 10 requests/minute - API key operations: 100 requests/hour   - General endpoints: 1000 requests/hour  ## Support  - Documentation: [API Documentation](https://docs.binoauth.com) - Support: support@binoauth.com - Status: [Status Page](https://status.binoauth.com)
- *
- * The version of the OpenAPI document: 1.0.0
- * Contact: support@binoauth.com
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-import * as runtime from '../runtime';
-/**
- * OpenidApi - interface
- *
- * @export
- * @interface OpenidApiInterface
- */
-export interface OpenidApiInterface {
-    /**
-     * OpenID Connect discovery endpoint.
-     * @summary Openid Configuration
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof OpenidApiInterface
-     */
-    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * OpenID Connect discovery endpoint.
-     * Openid Configuration
-     */
-    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-}
-/**
- *
- */
-export declare class OpenidApi extends runtime.BaseAPI implements OpenidApiInterface {
-    /**
-     * OpenID Connect discovery endpoint.
-     * Openid Configuration
-     */
-    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * OpenID Connect discovery endpoint.
-     * Openid Configuration
-     */
-    openidConfigurationApiV1OauthWellKnownOpenidConfigurationGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-}
-//# sourceMappingURL=OpenidApi.d.ts.map

package/dist/tenant-sdk/src/apis/OpenidApi.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"OpenidApi.d.ts","sourceRoot":"","sources":["../../../../../tenant-sdk/src/apis/OpenidApi.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,OAAO,MAAM,YAAY,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAC/B;;;;;;OAMG;IACH,+DAA+D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/J;;;OAGG;IACH,4DAA4D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAE1I;AAED;;GAEG;AACH,qBAAa,SAAU,SAAQ,OAAO,CAAC,OAAQ,YAAW,kBAAkB;IAExE;;;OAGG;IACG,+DAA+D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAsBpK;;;OAGG;IACG,4DAA4D,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;CAK/I"}

package/dist/tenant-sdk/src/apis/OpenidApi.js

@@ -1,49 +0,0 @@
-/* tslint:disable */
-/* eslint-disable */
-/**
- * BinoAuth Tenant API
- *  A comprehensive multi-tenant authentication and authorization API supporting OAuth2, OpenID Connect, API keys, and multiple authentication methods.  ## Features  - **Multi-Tenant Architecture**: Isolated tenant-specific authentication - **OAuth2 & OpenID Connect**: Full OAuth2/OIDC implementation with PKCE support - **API Keys**: Long-lived keys for programmatic access - **Multiple Auth Methods**: Password, magic links, phone OTP, social login, MFA - **Session Management**: Secure session handling with Redis backing - **Comprehensive Security**: Rate limiting, audit logging, secure token handling  ## Authentication Methods  ### 1. Session-Based (Web Applications) - HTTP-only secure cookies - Automatic session management - CSRF protection  ### 2. API Keys (Programmatic Access) - Long-lived keys with scoped permissions - SHA-256 hashed storage - Usage tracking and analytics - **Header**: `X-API-Key: ak_live_...`  ### 3. OAuth2 Bearer Tokens - Short-lived JWT tokens - Full OAuth2/OIDC support - Refresh token capability - **Header**: `Authorization: Bearer ...`  ## Getting Started  ### For Web Applications 1. Use `/auth/login` for password authentication 2. Session cookies are automatically managed 3. Access protected endpoints directly  ### For Mobile Applications   1. Use OAuth2 authorization code flow with PKCE 2. Handle deep links for OAuth callbacks 3. Store and use refresh tokens for long-lived sessions  ### For Backend Services 1. Create API keys via `/api-keys` endpoint 2. Use API keys for direct authentication 3. Generate short-lived tokens when needed  ## Error Handling  All endpoints return structured error responses:  ```json {   \"detail\": \"Error description\",   \"error\": \"error_code\",    \"error_description\": \"Detailed error message\" } ```  ## Rate Limiting  API endpoints are rate limited to prevent abuse: - Authentication endpoints: 10 requests/minute - API key operations: 100 requests/hour   - General endpoints: 1000 requests/hour  ## Support  - Documentation: [API Documentation](https://docs.binoauth.com) - Support: support@binoauth.com - Status: [Status Page](https://status.binoauth.com)
- *
- * The version of the OpenAPI document: 1.0.0
- * Contact: support@binoauth.com
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-import * as runtime from '../runtime';
-/**
- *
- */
-export class OpenidApi extends runtime.BaseAPI {
-    /**
-     * OpenID Connect discovery endpoint.
-     * Openid Configuration
-     */
-    async openidConfigurationApiV1OauthWellKnownOpenidConfigurationGetRaw(initOverrides) {
-        const queryParameters = {};
-        const headerParameters = {};
-        let urlPath = `/api/v1/oauth/.well-known/openid-configuration`;
-        const response = await this.request({
-            path: urlPath,
-            method: 'GET',
-            headers: headerParameters,
-            query: queryParameters,
-        }, initOverrides);
-        if (this.isJsonMime(response.headers.get('content-type'))) {
-            return new runtime.JSONApiResponse(response);
-        }
-        else {
-            return new runtime.TextApiResponse(response);
-        }
-    }
-    /**
-     * OpenID Connect discovery endpoint.
-     * Openid Configuration
-     */
-    async openidConfigurationApiV1OauthWellKnownOpenidConfigurationGet(initOverrides) {
-        const response = await this.openidConfigurationApiV1OauthWellKnownOpenidConfigurationGetRaw(initOverrides);
-        return await response.value();
-    }
-}
-//# sourceMappingURL=OpenidApi.js.map

package/dist/tenant-sdk/src/apis/OpenidApi.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"OpenidApi.js","sourceRoot":"","sources":["../../../../../tenant-sdk/src/apis/OpenidApi.ts"],"names":[],"mappings":"AAAA,oBAAoB;AACpB,oBAAoB;AACpB;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,OAAO,MAAM,YAAY,CAAC;AA0BtC;;GAEG;AACH,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,OAAO;IAE1C;;;OAGG;IACH,KAAK,CAAC,+DAA+D,CAAC,aAA0D;QAC5H,MAAM,eAAe,GAAQ,EAAE,CAAC;QAEhC,MAAM,gBAAgB,GAAwB,EAAE,CAAC;QAGjD,IAAI,OAAO,GAAG,gDAAgD,CAAC;QAE/D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAChC,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,eAAe;SACzB,EAAE,aAAa,CAAC,CAAC;QAElB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,OAAO,CAAC,eAAe,CAAM,QAAQ,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACJ,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAQ,CAAC;QACxD,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,4DAA4D,CAAC,aAA0D;QACzH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,+DAA+D,CAAC,aAAa,CAAC,CAAC;QAC3G,OAAO,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;CAEJ"}

package/dist/tenant-sdk/src/apis/SystemApi.d.ts

@@ -1,72 +0,0 @@
-/**
- * BinoAuth Tenant API
- *  A comprehensive multi-tenant authentication and authorization API supporting OAuth2, OpenID Connect, API keys, and multiple authentication methods.  ## Features  - **Multi-Tenant Architecture**: Isolated tenant-specific authentication - **OAuth2 & OpenID Connect**: Full OAuth2/OIDC implementation with PKCE support - **API Keys**: Long-lived keys for programmatic access - **Multiple Auth Methods**: Password, magic links, phone OTP, social login, MFA - **Session Management**: Secure session handling with Redis backing - **Comprehensive Security**: Rate limiting, audit logging, secure token handling  ## Authentication Methods  ### 1. Session-Based (Web Applications) - HTTP-only secure cookies - Automatic session management - CSRF protection  ### 2. API Keys (Programmatic Access) - Long-lived keys with scoped permissions - SHA-256 hashed storage - Usage tracking and analytics - **Header**: `X-API-Key: ak_live_...`  ### 3. OAuth2 Bearer Tokens - Short-lived JWT tokens - Full OAuth2/OIDC support - Refresh token capability - **Header**: `Authorization: Bearer ...`  ## Getting Started  ### For Web Applications 1. Use `/auth/login` for password authentication 2. Session cookies are automatically managed 3. Access protected endpoints directly  ### For Mobile Applications   1. Use OAuth2 authorization code flow with PKCE 2. Handle deep links for OAuth callbacks 3. Store and use refresh tokens for long-lived sessions  ### For Backend Services 1. Create API keys via `/api-keys` endpoint 2. Use API keys for direct authentication 3. Generate short-lived tokens when needed  ## Error Handling  All endpoints return structured error responses:  ```json {   \"detail\": \"Error description\",   \"error\": \"error_code\",    \"error_description\": \"Detailed error message\" } ```  ## Rate Limiting  API endpoints are rate limited to prevent abuse: - Authentication endpoints: 10 requests/minute - API key operations: 100 requests/hour   - General endpoints: 1000 requests/hour  ## Support  - Documentation: [API Documentation](https://docs.binoauth.com) - Support: support@binoauth.com - Status: [Status Page](https://status.binoauth.com)
- *
- * The version of the OpenAPI document: 1.0.0
- * Contact: support@binoauth.com
- *
- * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
- * https://openapi-generator.tech
- * Do not edit the class manually.
- */
-import * as runtime from '../runtime';
-/**
- * SystemApi - interface
- *
- * @export
- * @interface SystemApiInterface
- */
-export interface SystemApiInterface {
-    /**
-     * Basic health check endpoint to verify API availability.          Returns the current API status and version information.     This endpoint can be used for monitoring and load balancer health checks.          **No authentication required.**
-     * @summary Health Check
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof SystemApiInterface
-     */
-    healthCheckHealthGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Basic health check endpoint to verify API availability.          Returns the current API status and version information.     This endpoint can be used for monitoring and load balancer health checks.          **No authentication required.**
-     * Health Check
-     */
-    healthCheckHealthGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * Get the current tenant\'s profile information.          Returns basic information about the tenant context for the current request.     This endpoint helps identify which tenant is being accessed.          **Authentication required.**
-     * @summary Get Tenant Profile
-     * @param {*} [options] Override http request option.
-     * @throws {RequiredError}
-     * @memberof SystemApiInterface
-     */
-    tenantProfileApiV1ProfileGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Get the current tenant\'s profile information.          Returns basic information about the tenant context for the current request.     This endpoint helps identify which tenant is being accessed.          **Authentication required.**
-     * Get Tenant Profile
-     */
-    tenantProfileApiV1ProfileGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-}
-/**
- *
- */
-export declare class SystemApi extends runtime.BaseAPI implements SystemApiInterface {
-    /**
-     * Basic health check endpoint to verify API availability.          Returns the current API status and version information.     This endpoint can be used for monitoring and load balancer health checks.          **No authentication required.**
-     * Health Check
-     */
-    healthCheckHealthGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Basic health check endpoint to verify API availability.          Returns the current API status and version information.     This endpoint can be used for monitoring and load balancer health checks.          **No authentication required.**
-     * Health Check
-     */
-    healthCheckHealthGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-    /**
-     * Get the current tenant\'s profile information.          Returns basic information about the tenant context for the current request.     This endpoint helps identify which tenant is being accessed.          **Authentication required.**
-     * Get Tenant Profile
-     */
-    tenantProfileApiV1ProfileGetRaw(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<runtime.ApiResponse<any>>;
-    /**
-     * Get the current tenant\'s profile information.          Returns basic information about the tenant context for the current request.     This endpoint helps identify which tenant is being accessed.          **Authentication required.**
-     * Get Tenant Profile
-     */
-    tenantProfileApiV1ProfileGet(initOverrides?: RequestInit | runtime.InitOverrideFunction): Promise<any>;
-}
-//# sourceMappingURL=SystemApi.d.ts.map

package/dist/tenant-sdk/src/apis/SystemApi.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"SystemApi.d.ts","sourceRoot":"","sources":["../../../../../tenant-sdk/src/apis/SystemApi.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,OAAO,MAAM,YAAY,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAC/B;;;;;;OAMG;IACH,uBAAuB,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAEvH;;;OAGG;IACH,oBAAoB,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAE/F;;;;;;OAMG;IACH,+BAA+B,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/H;;;OAGG;IACH,4BAA4B,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CAE1G;AAED;;GAEG;AACH,qBAAa,SAAU,SAAQ,OAAO,CAAC,OAAQ,YAAW,kBAAkB;IAExE;;;OAGG;IACG,uBAAuB,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAsB5H;;;OAGG;IACG,oBAAoB,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;IAKpG;;;OAGG;IACG,+BAA+B,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAsBpI;;;OAGG;IACG,4BAA4B,CAAC,aAAa,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,GAAG,OAAO,CAAC,GAAG,CAAC;CAK/G"}