scimmy-hono-routers 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Clifton Cunningham
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,200 @@
+# scimmy-hono-routers
+
+[SCIMMY](https://github.com/scimmyjs/scimmy) router middleware for [Hono](https://hono.dev/) — add [SCIM 2.0](https://datatracker.ietf.org/doc/html/rfc7644) server endpoints to any Hono application.
+
+This is the Hono equivalent of [scimmy-routers](https://github.com/scimmyjs/scimmy-routers) (Express). It provides the same SCIM 2.0 endpoint coverage using Hono's native routing and async handling, in a single `scimmyHono()` factory function.
+
+The routers leverage work done in the [SCIMMY](https://github.com/scimmyjs/scimmy) package, which handles all the hard parts of the SCIM 2.0 protocol: filter parsing, PATCH operations, schema validation, and response formatting.
+
+> For details on how to use SCIMMY Resources, [visit the SCIMMY documentation](https://scimmyjs.github.io)!
+
+## Requirements
+
+- [Node.js](https://nodejs.org) v24+
+- [Hono](https://hono.dev/) v4+
+- [SCIMMY](https://github.com/scimmyjs/scimmy) v1.x
+
+## Installation
+
+```bash
+npm install scimmy-hono-routers scimmy hono
+```
+
+## Quick Start
+
+```ts
+import { Hono } from "hono";
+import { scimmyHono, SCIMMY } from "scimmy-hono-routers";
+
+// 1. Declare your SCIM resources with handlers (see SCIMMY docs for full details)
+SCIMMY.Resources.declare(SCIMMY.Resources.User)
+  .ingress(async (resource, data, ctx) => {
+    if (resource.id) {
+      return await db.users.update(resource.id, data);
+    }
+    return await db.users.create(data);
+  })
+  .egress(async (resource, ctx) => {
+    if (resource.id) {
+      return await db.users.findById(resource.id);
+    }
+    return await db.users.list(resource.filter);
+  })
+  .degress(async (resource, ctx) => {
+    await db.users.delete(resource.id);
+  });
+
+SCIMMY.Resources.declare(SCIMMY.Resources.Group, {
+  /* Your handlers for group resource type */
+});
+
+// 2. Create the SCIM router
+const scim = scimmyHono({
+  type: "bearer",
+  handler: async (c) => {
+    const token = c.req.header("Authorization")?.replace("Bearer ", "");
+    if (!token || !isValidToken(token)) throw new Error("Unauthorized");
+    return getUserIdFromToken(token); // Return user ID string for /Me endpoint
+  },
+  context: async (c) => ({
+    tenantId: c.get("tenantId"),
+  }),
+  baseUri: (c) => new URL(c.req.url).origin,
+});
+
+// 3. Mount at your SCIM base path
+const app = new Hono();
+app.route("/scim/v2", scim);
+
+export default app;
+```
+
+## API
+
+`scimmyHono()` returns a standard Hono app instance that can be mounted at any path using `app.route()`. It is recommended to mount at `/scim/v2` or `/scim` to follow SCIM conventions.
+
+### Options
+
+```ts
+interface SCIMMYHonoOptions {
+  type: string;
+  handler: AuthenticationHandler;
+  context?: AuthenticationContext;
+  baseUri?: AuthenticationBaseUri;
+  docUri?: string;
+}
+```
+
+- **`type`** (required) — SCIM service provider authentication scheme type.
+  Supported values: `"bearer"`, `"oauth"`, `"basic"`, `"digest"`, which map to SCIM authentication scheme types `oauthbearertoken`, `oauth2`, `httpbasic`, and `httpdigest` respectively.
+
+- **`handler`** (required) — Function invoked to authenticate each SCIM request. Receives the Hono `Context` object.
+  - Throw an `Error` to reject the request (returns 401 with the error message).
+  - Return a user ID string to identify the authenticated user (used by the `/Me` endpoint).
+
+- **`context`** (optional) — Function invoked to provide additional context to each request. The returned value is passed directly to SCIMMY's `ingress`/`egress`/`degress` handler methods. Useful for multi-tenancy, passing database connections, etc.
+
+- **`baseUri`** (optional) — Function invoked to determine the base URI for `meta.location` properties in SCIM responses. Must return a valid URL string (e.g., `"https://example.com"`). If omitted, locations are derived from the request URL.
+
+- **`docUri`** (optional) — URL string for the documentation URI of the authentication scheme, included in the `ServiceProviderConfig` response.
+
+### Type Signatures
+
+```ts
+type AuthenticationHandler = (c: Context) => string | Promise<string>;
+type AuthenticationContext = (c: Context) => unknown | Promise<unknown>;
+type AuthenticationBaseUri = (c: Context) => string | Promise<string>;
+```
+
+## Endpoints
+
+All standard SCIM 2.0 endpoints ([RFC 7644](https://datatracker.ietf.org/doc/html/rfc7644)) are supported:
+
+| Endpoint | Methods | Description |
+|---|---|---|
+| `/ServiceProviderConfig` | GET | Server capabilities and configuration |
+| `/Schemas` | GET | Schema definitions |
+| `/Schemas/:id` | GET | Single schema by URN |
+| `/ResourceTypes` | GET | Resource type definitions |
+| `/ResourceTypes/:id` | GET | Single resource type |
+| `/Users` | GET, POST | List/create users |
+| `/Users/:id` | GET, PUT, PATCH, DELETE | Read/replace/update/delete a user |
+| `/Groups` | GET, POST | List/create groups |
+| `/Groups/:id` | GET, PUT, PATCH, DELETE | Read/replace/update/delete a group |
+| `/Me` | GET | Currently authenticated user |
+| `/.search` | POST | Cross-resource search ([RFC 7644 §3.4.3](https://datatracker.ietf.org/doc/html/rfc7644#section-3.4.3)) |
+| `/Bulk` | POST | Bulk operations ([RFC 7644 §3.7](https://datatracker.ietf.org/doc/html/rfc7644#section-3.7)) |
+
+Resource-scoped `/.search` endpoints (e.g., `/Users/.search`) are also supported.
+
+All responses use `Content-Type: application/scim+json`.
+
+## How It Works
+
+This package is a thin adapter (~280 lines of TypeScript) that maps Hono routes to SCIMMY's resource operations:
+
+| HTTP Method | SCIMMY Operation |
+|---|---|
+| `GET /Resource` | `new Resource(query).read(context)` |
+| `GET /Resource/:id` | `new Resource(id, query).read(context)` |
+| `POST /Resource` | `new Resource(query).write(body, context)` |
+| `PUT /Resource/:id` | `new Resource(id, query).write(body, context)` |
+| `PATCH /Resource/:id` | `new Resource(id, query).patch(body, context)` |
+| `DELETE /Resource/:id` | `new Resource(id).dispose(context)` |
+
+SCIMMY handles all the protocol complexity: filter parsing, PATCH operation application, schema validation, `ListResponse` pagination, error formatting, and more.
+
+## Comparison with scimmy-routers (Express)
+
+| | scimmy-routers | scimmy-hono-routers |
+|---|---|---|
+| Framework | Express 4+ | Hono 4+ |
+| Language | JavaScript | TypeScript |
+| Pattern | Class extending `Router` | Factory function returning `Hono` |
+| Auth handler receives | `express.Request` | `hono.Context` |
+| Test framework | Mocha + Sinon + Supertest | Vitest + Sinon |
+
+The API surface and SCIM compliance are identical — both packages use the same SCIMMY core for all protocol logic.
+
+## Development
+
+### Prerequisites
+
+```bash
+nvm use   # Uses Node.js 24+ (see .nvmrc)
+npm install
+```
+
+### Commands
+
+```bash
+npm run build        # Build with tsup (ESM + .d.ts)
+npm run dev          # Build in watch mode
+npm test             # Run tests (vitest)
+npm run test:watch   # Run tests in watch mode
+npm run typecheck    # TypeScript type check (tsc --noEmit)
+```
+
+### Project Structure
+
+```
+src/
+  index.ts           # Single-file implementation (~280 lines)
+test/
+  index.test.ts      # Full test suite (48 tests) using sinon stubs
+  helpers.ts          # Test utilities (request helpers, assertion helpers)
+```
+
+### Testing Approach
+
+Tests mirror the [scimmy-routers test suite](https://github.com/scimmyjs/scimmy-routers/tree/main/test) — using sinon stubs on SCIMMY resource prototypes to test routes in isolation. This validates that the Hono adapter correctly maps HTTP requests to SCIMMY operations without requiring a real database backend.
+
+## Related Projects
+
+- [SCIMMY](https://github.com/scimmyjs/scimmy) — SCIM 2.0 protocol implementation for Node.js (the core library)
+- [scimmy-routers](https://github.com/scimmyjs/scimmy-routers) — SCIMMY Express routers (the Express equivalent of this package)
+- [Hono](https://hono.dev/) — Ultrafast web framework for the Edges
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,63 @@
+import { Context, Hono } from 'hono';
+export { default as SCIMMY } from 'scimmy';
+
+/**
+ * Method invoked to authenticate a SCIM request.
+ * Should throw an error if the request is not authenticated.
+ * @returns The ID of the currently authenticated user (consumed by /Me endpoint)
+ */
+type AuthenticationHandler = (c: Context) => string | Promise<string>;
+/**
+ * Method invoked to provide authentication context to a SCIM request.
+ * @returns Any information to pass through to a Resource's handler methods
+ */
+type AuthenticationContext = (c: Context) => unknown | Promise<unknown>;
+/**
+ * Method invoked to determine a base URI for location properties in a SCIM response.
+ * @returns The base URI to use for location properties in SCIM responses
+ */
+type AuthenticationBaseUri = (c: Context) => string | Promise<string>;
+interface SCIMMYHonoOptions {
+    /** SCIM authentication scheme type: "oauth", "bearer", "basic", or "digest" */
+    type: string;
+    /** Method to invoke to authenticate SCIM requests */
+    handler: AuthenticationHandler;
+    /** Method to invoke to evaluate context passed to SCIMMY handlers */
+    context?: AuthenticationContext;
+    /** Method to invoke to determine the base URI for location properties */
+    baseUri?: AuthenticationBaseUri;
+    /** URL to use as documentation URI for the authentication scheme */
+    docUri?: string;
+}
+/**
+ * Create a Hono app with SCIM 2.0 endpoints powered by SCIMMY.
+ *
+ * @example
+ * ```ts
+ * import { Hono } from "hono";
+ * import { scimmyHono, SCIMMY } from "scimmy-hono-routers";
+ *
+ * // Declare resources and handlers
+ * SCIMMY.Resources.declare(SCIMMY.Resources.User)
+ *   .ingress((resource, data, ctx) => { ... })
+ *   .egress((resource, ctx) => { ... })
+ *   .degress((resource, ctx) => { ... });
+ *
+ * const scim = scimmyHono({
+ *   type: "bearer",
+ *   handler: async (c) => {
+ *     const token = c.req.header("Authorization")?.replace("Bearer ", "");
+ *     if (!token) throw new Error("Unauthorized");
+ *     return userId;
+ *   },
+ *   context: async (c) => ({ tenantId: c.get("tenantId") }),
+ *   baseUri: (c) => `${new URL(c.req.url).origin}`,
+ * });
+ *
+ * const app = new Hono();
+ * app.route("/scim/v2", scim);
+ * ```
+ */
+declare function scimmyHono(options: SCIMMYHonoOptions): Hono;
+
+export { type AuthenticationBaseUri, type AuthenticationContext, type AuthenticationHandler, type SCIMMYHonoOptions, scimmyHono as default, scimmyHono };

package/dist/index.js

@@ -0,0 +1,350 @@
+// src/index.ts
+import { Hono } from "hono";
+import SCIMMY from "scimmy";
+var authSchemeTypes = {
+  oauth: {
+    type: "oauth2",
+    name: "OAuth 2.0 Authorization Framework",
+    description: "Authentication scheme using the OAuth 2.0 Authorization Framework Standard",
+    specUri: "https://datatracker.ietf.org/doc/html/rfc6749"
+  },
+  bearer: {
+    type: "oauthbearertoken",
+    name: "OAuth Bearer Token",
+    description: "Authentication scheme using the OAuth Bearer Token Standard",
+    specUri: "https://datatracker.ietf.org/doc/html/rfc6750"
+  },
+  basic: {
+    type: "httpbasic",
+    name: "HTTP Basic",
+    description: "Authentication scheme using the HTTP Basic Standard",
+    specUri: "https://datatracker.ietf.org/doc/html/rfc2617"
+  },
+  digest: {
+    type: "httpdigest",
+    name: "HTTP Digest",
+    description: "Authentication scheme using the HTTP Digest Standard",
+    specUri: "https://datatracker.ietf.org/doc/html/rfc2617"
+  }
+};
+function scimJson(c, body, status = 200) {
+  return c.json(body, status, {
+    "Content-Type": "application/scim+json"
+  });
+}
+function scimError(c, ex) {
+  const status = ex.status ?? 500;
+  return scimJson(c, new SCIMMY.Messages.Error(ex), status);
+}
+function castPaginationParams(query) {
+  const result = { ...query };
+  for (const param of ["startIndex", "count"]) {
+    if (result[param] && typeof result[param] === "string" && !Number.isNaN(+result[param])) {
+      result[param] = +result[param];
+    }
+  }
+  return result;
+}
+function scimmyHono(options) {
+  const {
+    type,
+    handler,
+    context = () => {
+    },
+    baseUri = () => "",
+    docUri
+  } = options;
+  if (!type) {
+    throw new TypeError(
+      "Missing required parameter 'type' from authentication scheme in scimmyHono"
+    );
+  }
+  if (!handler) {
+    throw new TypeError(
+      "Missing required parameter 'handler' from authentication scheme in scimmyHono"
+    );
+  }
+  if (typeof handler !== "function") {
+    throw new TypeError(
+      "Parameter 'handler' must be of type 'function' in scimmyHono"
+    );
+  }
+  if (!authSchemeTypes[type]) {
+    throw new TypeError(
+      `Unknown authentication scheme type '${type}' in scimmyHono`
+    );
+  }
+  if (typeof context !== "function") {
+    throw new TypeError(
+      "Parameter 'context' must be of type 'function' in scimmyHono"
+    );
+  }
+  if (typeof baseUri !== "function") {
+    throw new TypeError(
+      "Parameter 'baseUri' must be of type 'function' in scimmyHono"
+    );
+  }
+  SCIMMY.Config.set({
+    patch: true,
+    filter: true,
+    sort: true,
+    bulk: true,
+    authenticationSchemes: [
+      { ...authSchemeTypes[type], documentationUri: docUri }
+    ]
+  });
+  const app = new Hono();
+  app.use("*", async (c, next) => {
+    try {
+      const basepath = await baseUri(c) ?? "";
+      if (!basepath || typeof basepath === "string" && basepath.match(/^https?:\/\//)) {
+        const url = new URL(c.req.url);
+        const routePath = url.pathname.replace(/\/(Schemas|ResourceTypes|ServiceProviderConfig|Users|Groups|Bulk|Me|\.search).*$/, "");
+        const location = basepath ? basepath.replace(/\/$/, "") + routePath : `${url.origin}${routePath}`;
+        SCIMMY.Resources.Schema.basepath(location);
+        SCIMMY.Resources.ResourceType.basepath(location);
+        SCIMMY.Resources.ServiceProviderConfig.basepath(location);
+        for (const Resource of Object.values(SCIMMY.Resources.declared())) {
+          Resource.basepath(location);
+        }
+        await next();
+      } else {
+        throw new TypeError(
+          "Method 'baseUri' must return a URL string in scimmyHono"
+        );
+      }
+    } catch (ex) {
+      return scimError(c, ex);
+    }
+  });
+  app.use("*", async (c, next) => {
+    try {
+      await handler(c);
+      await next();
+    } catch (ex) {
+      return scimJson(
+        c,
+        new SCIMMY.Messages.Error({ status: 401, message: ex.message }),
+        401
+      );
+    }
+  });
+  app.get("/Schemas", async (c) => {
+    try {
+      const query = castPaginationParams(c.req.query());
+      return scimJson(c, await new SCIMMY.Resources.Schema(query).read());
+    } catch (ex) {
+      return scimError(c, ex);
+    }
+  });
+  app.get("/Schemas/:id", async (c) => {
+    try {
+      const query = castPaginationParams(c.req.query());
+      return scimJson(
+        c,
+        await new SCIMMY.Resources.Schema(c.req.param("id"), query).read()
+      );
+    } catch (ex) {
+      return scimError(c, ex);
+    }
+  });
+  app.get("/ResourceTypes", async (c) => {
+    try {
+      const query = castPaginationParams(c.req.query());
+      return scimJson(
+        c,
+        await new SCIMMY.Resources.ResourceType(query).read()
+      );
+    } catch (ex) {
+      return scimError(c, ex);
+    }
+  });
+  app.get("/ResourceTypes/:id", async (c) => {
+    try {
+      const query = castPaginationParams(c.req.query());
+      return scimJson(
+        c,
+        await new SCIMMY.Resources.ResourceType(c.req.param("id"), query).read()
+      );
+    } catch (ex) {
+      return scimError(c, ex);
+    }
+  });
+  app.get("/ServiceProviderConfig", async (c) => {
+    try {
+      const query = castPaginationParams(c.req.query());
+      return scimJson(
+        c,
+        await new SCIMMY.Resources.ServiceProviderConfig(query).read()
+      );
+    } catch (ex) {
+      return scimError(c, ex);
+    }
+  });
+  app.post("/.search", async (c) => {
+    try {
+      const body = await c.req.json();
+      const ctx = await context(c);
+      return scimJson(
+        c,
+        await new SCIMMY.Messages.SearchRequest(body).apply(void 0, ctx)
+      );
+    } catch (ex) {
+      return scimError(c, ex);
+    }
+  });
+  app.post("/Bulk", async (c) => {
+    try {
+      const { supported, maxPayloadSize, maxOperations } = SCIMMY.Config.get()?.bulk ?? {};
+      if (!supported) {
+        return scimJson(
+          c,
+          new SCIMMY.Messages.Error({
+            status: 501,
+            message: "Endpoint Not Implemented"
+          }),
+          501
+        );
+      }
+      const contentLength = Number(c.req.header("content-length") ?? 0);
+      if (contentLength > maxPayloadSize) {
+        return scimJson(
+          c,
+          new SCIMMY.Messages.Error({
+            status: 413,
+            message: `The size of the bulk operation exceeds maxPayloadSize limit (${maxPayloadSize})`
+          }),
+          413
+        );
+      }
+      const body = await c.req.json();
+      const ctx = await context(c);
+      return scimJson(
+        c,
+        await new SCIMMY.Messages.BulkRequest(body, maxOperations).apply(
+          void 0,
+          ctx
+        )
+      );
+    } catch (ex) {
+      return scimError(c, ex);
+    }
+  });
+  app.get("/Me", async (c) => {
+    try {
+      const id = await handler(c);
+      const isDeclared = SCIMMY.Resources.declared(SCIMMY.Resources.User);
+      const user = isDeclared && typeof id === "string" ? await new SCIMMY.Resources.User(id).read(await context(c)) : false;
+      if (user && user?.meta?.location) {
+        return scimJson(c, user);
+      }
+      return scimJson(
+        c,
+        new SCIMMY.Messages.Error({
+          status: 501,
+          message: "Endpoint Not Implemented"
+        }),
+        501
+      );
+    } catch (ex) {
+      return scimError(c, ex);
+    }
+  });
+  for (const Resource of Object.values(SCIMMY.Resources.declared())) {
+    const endpoint = Resource.endpoint;
+    app.post(`${endpoint}/.search`, async (c) => {
+      try {
+        const body = await c.req.json();
+        const ctx = await context(c);
+        return scimJson(
+          c,
+          await new SCIMMY.Messages.SearchRequest(body).apply([Resource], ctx)
+        );
+      } catch (ex) {
+        return scimError(c, ex);
+      }
+    });
+    app.get(endpoint, async (c) => {
+      try {
+        const query = castPaginationParams(c.req.query());
+        const ctx = await context(c);
+        return scimJson(c, await new Resource(query).read(ctx));
+      } catch (ex) {
+        return scimError(c, ex);
+      }
+    });
+    app.get(`${endpoint}/:id`, async (c) => {
+      try {
+        const query = castPaginationParams(c.req.query());
+        const ctx = await context(c);
+        return scimJson(
+          c,
+          await new Resource(c.req.param("id"), query).read(ctx)
+        );
+      } catch (ex) {
+        return scimError(c, ex);
+      }
+    });
+    app.post(endpoint, async (c) => {
+      try {
+        const query = castPaginationParams(c.req.query());
+        const body = await c.req.json();
+        const ctx = await context(c);
+        return scimJson(c, await new Resource(query).write(body, ctx), 201);
+      } catch (ex) {
+        return scimError(c, ex);
+      }
+    });
+    app.put(`${endpoint}/:id`, async (c) => {
+      try {
+        const query = castPaginationParams(c.req.query());
+        const body = await c.req.json();
+        const ctx = await context(c);
+        return scimJson(
+          c,
+          await new Resource(c.req.param("id"), query).write(body, ctx)
+        );
+      } catch (ex) {
+        return scimError(c, ex);
+      }
+    });
+    app.patch(`${endpoint}/:id`, async (c) => {
+      try {
+        const query = castPaginationParams(c.req.query());
+        const body = await c.req.json();
+        const ctx = await context(c);
+        const value = await new Resource(c.req.param("id"), query).patch(
+          body,
+          ctx
+        );
+        return value ? scimJson(c, value) : c.body(null, 204);
+      } catch (ex) {
+        return scimError(c, ex);
+      }
+    });
+    app.delete(`${endpoint}/:id`, async (c) => {
+      try {
+        const ctx = await context(c);
+        await new Resource(c.req.param("id")).dispose(ctx);
+        return c.body(null, 204);
+      } catch (ex) {
+        return scimError(c, ex);
+      }
+    });
+  }
+  app.all("*", (c) => {
+    return scimJson(
+      c,
+      new SCIMMY.Messages.Error({ status: 404, message: "Endpoint Not Found" }),
+      404
+    );
+  });
+  return app;
+}
+var index_default = scimmyHono;
+export {
+  SCIMMY,
+  index_default as default,
+  scimmyHono
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import { Hono } from \"hono\";\nimport type { Context } from \"hono\";\nimport SCIMMY from \"scimmy\";\n\n// Re-export SCIMMY for consumption by dependent packages\nexport { SCIMMY };\n\n/**\n * Predefined SCIM Service Provider Config authentication scheme types\n */\nconst authSchemeTypes: Record<\n  string,\n  { type: string; name: string; description: string; specUri: string }\n> = {\n  oauth: {\n    type: \"oauth2\",\n    name: \"OAuth 2.0 Authorization Framework\",\n    description:\n      \"Authentication scheme using the OAuth 2.0 Authorization Framework Standard\",\n    specUri: \"https://datatracker.ietf.org/doc/html/rfc6749\",\n  },\n  bearer: {\n    type: \"oauthbearertoken\",\n    name: \"OAuth Bearer Token\",\n    description:\n      \"Authentication scheme using the OAuth Bearer Token Standard\",\n    specUri: \"https://datatracker.ietf.org/doc/html/rfc6750\",\n  },\n  basic: {\n    type: \"httpbasic\",\n    name: \"HTTP Basic\",\n    description: \"Authentication scheme using the HTTP Basic Standard\",\n    specUri: \"https://datatracker.ietf.org/doc/html/rfc2617\",\n  },\n  digest: {\n    type: \"httpdigest\",\n    name: \"HTTP Digest\",\n    description: \"Authentication scheme using the HTTP Digest Standard\",\n    specUri: \"https://datatracker.ietf.org/doc/html/rfc2617\",\n  },\n};\n\n/**\n * Method invoked to authenticate a SCIM request.\n * Should throw an error if the request is not authenticated.\n * @returns The ID of the currently authenticated user (consumed by /Me endpoint)\n */\nexport type AuthenticationHandler = (c: Context) => string | Promise<string>;\n\n/**\n * Method invoked to provide authentication context to a SCIM request.\n * @returns Any information to pass through to a Resource's handler methods\n */\nexport type AuthenticationContext = (c: Context) => unknown | Promise<unknown>;\n\n/**\n * Method invoked to determine a base URI for location properties in a SCIM response.\n * @returns The base URI to use for location properties in SCIM responses\n */\nexport type AuthenticationBaseUri = (c: Context) => string | Promise<string>;\n\nexport interface SCIMMYHonoOptions {\n  /** SCIM authentication scheme type: \"oauth\", \"bearer\", \"basic\", or \"digest\" */\n  type: string;\n  /** Method to invoke to authenticate SCIM requests */\n  handler: AuthenticationHandler;\n  /** Method to invoke to evaluate context passed to SCIMMY handlers */\n  context?: AuthenticationContext;\n  /** Method to invoke to determine the base URI for location properties */\n  baseUri?: AuthenticationBaseUri;\n  /** URL to use as documentation URI for the authentication scheme */\n  docUri?: string;\n}\n\n/**\n * Helper to send a SCIM JSON response\n */\nfunction scimJson(c: Context, body: unknown, status: number = 200): Response {\n  return c.json(body as object, status as any, {\n    \"Content-Type\": \"application/scim+json\",\n  });\n}\n\n/**\n * Helper to send a SCIM error response\n */\nfunction scimError(\n  c: Context,\n  ex: any\n): Response {\n  const status = ex.status ?? 500;\n  return scimJson(c, new SCIMMY.Messages.Error(ex), status);\n}\n\n/**\n * Cast pagination query parameters from strings to numbers\n */\nfunction castPaginationParams(query: Record<string, string>): Record<string, any> {\n  const result: Record<string, any> = { ...query };\n  for (const param of [\"startIndex\", \"count\"]) {\n    if (result[param] && typeof result[param] === \"string\" && !Number.isNaN(+result[param])) {\n      result[param] = +result[param];\n    }\n  }\n  return result;\n}\n\n/**\n * Create a Hono app with SCIM 2.0 endpoints powered by SCIMMY.\n *\n * @example\n * ```ts\n * import { Hono } from \"hono\";\n * import { scimmyHono, SCIMMY } from \"scimmy-hono-routers\";\n *\n * // Declare resources and handlers\n * SCIMMY.Resources.declare(SCIMMY.Resources.User)\n *   .ingress((resource, data, ctx) => { ... })\n *   .egress((resource, ctx) => { ... })\n *   .degress((resource, ctx) => { ... });\n *\n * const scim = scimmyHono({\n *   type: \"bearer\",\n *   handler: async (c) => {\n *     const token = c.req.header(\"Authorization\")?.replace(\"Bearer \", \"\");\n *     if (!token) throw new Error(\"Unauthorized\");\n *     return userId;\n *   },\n *   context: async (c) => ({ tenantId: c.get(\"tenantId\") }),\n *   baseUri: (c) => `${new URL(c.req.url).origin}`,\n * });\n *\n * const app = new Hono();\n * app.route(\"/scim/v2\", scim);\n * ```\n */\nexport function scimmyHono(options: SCIMMYHonoOptions): Hono {\n  const {\n    type,\n    handler,\n    context = () => {},\n    baseUri = () => \"\",\n    docUri,\n  } = options;\n\n  // Validate options\n  if (!type) {\n    throw new TypeError(\n      \"Missing required parameter 'type' from authentication scheme in scimmyHono\"\n    );\n  }\n  if (!handler) {\n    throw new TypeError(\n      \"Missing required parameter 'handler' from authentication scheme in scimmyHono\"\n    );\n  }\n  if (typeof handler !== \"function\") {\n    throw new TypeError(\n      \"Parameter 'handler' must be of type 'function' in scimmyHono\"\n    );\n  }\n  if (!authSchemeTypes[type]) {\n    throw new TypeError(\n      `Unknown authentication scheme type '${type}' in scimmyHono`\n    );\n  }\n  if (typeof context !== \"function\") {\n    throw new TypeError(\n      \"Parameter 'context' must be of type 'function' in scimmyHono\"\n    );\n  }\n  if (typeof baseUri !== \"function\") {\n    throw new TypeError(\n      \"Parameter 'baseUri' must be of type 'function' in scimmyHono\"\n    );\n  }\n\n  // Register the authentication scheme and SCIM config\n  SCIMMY.Config.set({\n    patch: true,\n    filter: true,\n    sort: true,\n    bulk: true,\n    authenticationSchemes: [\n      { ...authSchemeTypes[type], documentationUri: docUri },\n    ],\n  });\n\n  const app = new Hono();\n\n  // Middleware: set basepath for all resource types\n  app.use(\"*\", async (c, next) => {\n    try {\n      const basepath = (await baseUri(c)) ?? \"\";\n\n      if (\n        !basepath ||\n        (typeof basepath === \"string\" && basepath.match(/^https?:\\/\\//))\n      ) {\n        // Construct location from basepath + mount path\n        const url = new URL(c.req.url);\n        const routePath = url.pathname.replace(/\\/(Schemas|ResourceTypes|ServiceProviderConfig|Users|Groups|Bulk|Me|\\.search).*$/, \"\");\n        const location = basepath\n          ? basepath.replace(/\\/$/, \"\") + routePath\n          : `${url.origin}${routePath}`;\n\n        SCIMMY.Resources.Schema.basepath(location);\n        SCIMMY.Resources.ResourceType.basepath(location);\n        SCIMMY.Resources.ServiceProviderConfig.basepath(location);\n        for (const Resource of Object.values(SCIMMY.Resources.declared()) as any[]) {\n          Resource.basepath(location);\n        }\n\n        await next();\n      } else {\n        throw new TypeError(\n          \"Method 'baseUri' must return a URL string in scimmyHono\"\n        );\n      }\n    } catch (ex) {\n      return scimError(c, ex);\n    }\n  });\n\n  // Middleware: authenticate requests\n  app.use(\"*\", async (c, next) => {\n    try {\n      await handler(c);\n      await next();\n    } catch (ex: any) {\n      return scimJson(\n        c,\n        new SCIMMY.Messages.Error({ status: 401, message: ex.message }),\n        401\n      );\n    }\n  });\n\n  // --- Discovery endpoints ---\n\n  // Schemas\n  app.get(\"/Schemas\", async (c) => {\n    try {\n      const query = castPaginationParams(c.req.query());\n      return scimJson(c, await new (SCIMMY.Resources.Schema as any)(query).read());\n    } catch (ex) {\n      return scimError(c, ex);\n    }\n  });\n\n  app.get(\"/Schemas/:id\", async (c) => {\n    try {\n      const query = castPaginationParams(c.req.query());\n      return scimJson(\n        c,\n        await new (SCIMMY.Resources.Schema as any)(c.req.param(\"id\"), query).read()\n      );\n    } catch (ex) {\n      return scimError(c, ex);\n    }\n  });\n\n  // ResourceTypes\n  app.get(\"/ResourceTypes\", async (c) => {\n    try {\n      const query = castPaginationParams(c.req.query());\n      return scimJson(\n        c,\n        await new (SCIMMY.Resources.ResourceType as any)(query).read()\n      );\n    } catch (ex) {\n      return scimError(c, ex);\n    }\n  });\n\n  app.get(\"/ResourceTypes/:id\", async (c) => {\n    try {\n      const query = castPaginationParams(c.req.query());\n      return scimJson(\n        c,\n        await new (SCIMMY.Resources.ResourceType as any)(c.req.param(\"id\"), query).read()\n      );\n    } catch (ex) {\n      return scimError(c, ex);\n    }\n  });\n\n  // ServiceProviderConfig\n  app.get(\"/ServiceProviderConfig\", async (c) => {\n    try {\n      const query = castPaginationParams(c.req.query());\n      return scimJson(\n        c,\n        await new (SCIMMY.Resources.ServiceProviderConfig as any)(query).read()\n      );\n    } catch (ex) {\n      return scimError(c, ex);\n    }\n  });\n\n  // --- Search endpoint (global) ---\n  app.post(\"/.search\", async (c) => {\n    try {\n      const body = await c.req.json();\n      const ctx = await context(c);\n      return scimJson(\n        c,\n        await new SCIMMY.Messages.SearchRequest(body).apply(undefined, ctx)\n      );\n    } catch (ex) {\n      return scimError(c, ex);\n    }\n  });\n\n  // --- Bulk endpoint ---\n  app.post(\"/Bulk\", async (c) => {\n    try {\n      const { supported, maxPayloadSize, maxOperations } =\n        SCIMMY.Config.get()?.bulk ?? {};\n\n      if (!supported) {\n        return scimJson(\n          c,\n          new SCIMMY.Messages.Error({\n            status: 501,\n            message: \"Endpoint Not Implemented\",\n          }),\n          501\n        );\n      }\n\n      const contentLength = Number(c.req.header(\"content-length\") ?? 0);\n      if (contentLength > maxPayloadSize) {\n        return scimJson(\n          c,\n          new SCIMMY.Messages.Error({\n            status: 413,\n            message: `The size of the bulk operation exceeds maxPayloadSize limit (${maxPayloadSize})`,\n          }),\n          413\n        );\n      }\n\n      const body = await c.req.json();\n      const ctx = await context(c);\n      return scimJson(\n        c,\n        await new SCIMMY.Messages.BulkRequest(body, maxOperations).apply(\n          undefined,\n          ctx\n        )\n      );\n    } catch (ex) {\n      return scimError(c, ex);\n    }\n  });\n\n  // --- Me endpoint ---\n  app.get(\"/Me\", async (c) => {\n    try {\n      const id = await handler(c);\n      const isDeclared = SCIMMY.Resources.declared(SCIMMY.Resources.User);\n      const user: any =\n        isDeclared && typeof id === \"string\"\n          ? await new SCIMMY.Resources.User(id).read(await context(c))\n          : false;\n\n      if (user && user?.meta?.location) {\n        return scimJson(c, user);\n      }\n      return scimJson(\n        c,\n        new SCIMMY.Messages.Error({\n          status: 501,\n          message: \"Endpoint Not Implemented\",\n        }),\n        501\n      );\n    } catch (ex) {\n      return scimError(c, ex);\n    }\n  });\n\n  // --- Resource endpoints (Users, Groups, and any declared resource types) ---\n  for (const Resource of Object.values(SCIMMY.Resources.declared()) as any[]) {\n    const endpoint = Resource.endpoint; // e.g. \"/Users\", \"/Groups\"\n\n    // Resource-scoped /.search\n    app.post(`${endpoint}/.search`, async (c) => {\n      try {\n        const body = await c.req.json();\n        const ctx = await context(c);\n        return scimJson(\n          c,\n          await new SCIMMY.Messages.SearchRequest(body).apply([Resource], ctx)\n        );\n      } catch (ex) {\n        return scimError(c, ex);\n      }\n    });\n\n    // List resources\n    app.get(endpoint, async (c) => {\n      try {\n        const query = castPaginationParams(c.req.query());\n        const ctx = await context(c);\n        return scimJson(c, await new Resource(query).read(ctx));\n      } catch (ex) {\n        return scimError(c, ex);\n      }\n    });\n\n    // Get single resource\n    app.get(`${endpoint}/:id`, async (c) => {\n      try {\n        const query = castPaginationParams(c.req.query());\n        const ctx = await context(c);\n        return scimJson(\n          c,\n          await new Resource(c.req.param(\"id\"), query).read(ctx)\n        );\n      } catch (ex) {\n        return scimError(c, ex);\n      }\n    });\n\n    // Create resource\n    app.post(endpoint, async (c) => {\n      try {\n        const query = castPaginationParams(c.req.query());\n        const body = await c.req.json();\n        const ctx = await context(c);\n        return scimJson(c, await new Resource(query).write(body, ctx), 201);\n      } catch (ex) {\n        return scimError(c, ex);\n      }\n    });\n\n    // Replace resource\n    app.put(`${endpoint}/:id`, async (c) => {\n      try {\n        const query = castPaginationParams(c.req.query());\n        const body = await c.req.json();\n        const ctx = await context(c);\n        return scimJson(\n          c,\n          await new Resource(c.req.param(\"id\"), query).write(body, ctx)\n        );\n      } catch (ex) {\n        return scimError(c, ex);\n      }\n    });\n\n    // Patch resource\n    app.patch(`${endpoint}/:id`, async (c) => {\n      try {\n        const query = castPaginationParams(c.req.query());\n        const body = await c.req.json();\n        const ctx = await context(c);\n        const value = await new Resource(c.req.param(\"id\"), query).patch(\n          body,\n          ctx\n        );\n        return value ? scimJson(c, value) : c.body(null, 204);\n      } catch (ex) {\n        return scimError(c, ex);\n      }\n    });\n\n    // Delete resource\n    app.delete(`${endpoint}/:id`, async (c) => {\n      try {\n        const ctx = await context(c);\n        await new Resource(c.req.param(\"id\")).dispose(ctx);\n        return c.body(null, 204);\n      } catch (ex) {\n        return scimError(c, ex);\n      }\n    });\n  }\n\n  // 404 for unmatched routes\n  app.all(\"*\", (c) => {\n    return scimJson(\n      c,\n      new SCIMMY.Messages.Error({ status: 404, message: \"Endpoint Not Found\" }),\n      404\n    );\n  });\n\n  return app;\n}\n\nexport default scimmyHono;\n"],"mappings":";AAAA,SAAS,YAAY;AAErB,OAAO,YAAY;AAQnB,IAAM,kBAGF;AAAA,EACF,OAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,OAAO;AAAA,IACL,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,QAAQ;AAAA,IACN,MAAM;AAAA,IACN,MAAM;AAAA,IACN,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AACF;AAqCA,SAAS,SAAS,GAAY,MAAe,SAAiB,KAAe;AAC3E,SAAO,EAAE,KAAK,MAAgB,QAAe;AAAA,IAC3C,gBAAgB;AAAA,EAClB,CAAC;AACH;AAKA,SAAS,UACP,GACA,IACU;AACV,QAAM,SAAS,GAAG,UAAU;AAC5B,SAAO,SAAS,GAAG,IAAI,OAAO,SAAS,MAAM,EAAE,GAAG,MAAM;AAC1D;AAKA,SAAS,qBAAqB,OAAoD;AAChF,QAAM,SAA8B,EAAE,GAAG,MAAM;AAC/C,aAAW,SAAS,CAAC,cAAc,OAAO,GAAG;AAC3C,QAAI,OAAO,KAAK,KAAK,OAAO,OAAO,KAAK,MAAM,YAAY,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,CAAC,GAAG;AACvF,aAAO,KAAK,IAAI,CAAC,OAAO,KAAK;AAAA,IAC/B;AAAA,EACF;AACA,SAAO;AACT;AA+BO,SAAS,WAAW,SAAkC;AAC3D,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA,UAAU,MAAM;AAAA,IAAC;AAAA,IACjB,UAAU,MAAM;AAAA,IAChB;AAAA,EACF,IAAI;AAGJ,MAAI,CAAC,MAAM;AACT,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,YAAY,YAAY;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,CAAC,gBAAgB,IAAI,GAAG;AAC1B,UAAM,IAAI;AAAA,MACR,uCAAuC,IAAI;AAAA,IAC7C;AAAA,EACF;AACA,MAAI,OAAO,YAAY,YAAY;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,MAAI,OAAO,YAAY,YAAY;AACjC,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAGA,SAAO,OAAO,IAAI;AAAA,IAChB,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,MAAM;AAAA,IACN,MAAM;AAAA,IACN,uBAAuB;AAAA,MACrB,EAAE,GAAG,gBAAgB,IAAI,GAAG,kBAAkB,OAAO;AAAA,IACvD;AAAA,EACF,CAAC;AAED,QAAM,MAAM,IAAI,KAAK;AAGrB,MAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAC9B,QAAI;AACF,YAAM,WAAY,MAAM,QAAQ,CAAC,KAAM;AAEvC,UACE,CAAC,YACA,OAAO,aAAa,YAAY,SAAS,MAAM,cAAc,GAC9D;AAEA,cAAM,MAAM,IAAI,IAAI,EAAE,IAAI,GAAG;AAC7B,cAAM,YAAY,IAAI,SAAS,QAAQ,oFAAoF,EAAE;AAC7H,cAAM,WAAW,WACb,SAAS,QAAQ,OAAO,EAAE,IAAI,YAC9B,GAAG,IAAI,MAAM,GAAG,SAAS;AAE7B,eAAO,UAAU,OAAO,SAAS,QAAQ;AACzC,eAAO,UAAU,aAAa,SAAS,QAAQ;AAC/C,eAAO,UAAU,sBAAsB,SAAS,QAAQ;AACxD,mBAAW,YAAY,OAAO,OAAO,OAAO,UAAU,SAAS,CAAC,GAAY;AAC1E,mBAAS,SAAS,QAAQ;AAAA,QAC5B;AAEA,cAAM,KAAK;AAAA,MACb,OAAO;AACL,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,IAAI;AACX,aAAO,UAAU,GAAG,EAAE;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,MAAI,IAAI,KAAK,OAAO,GAAG,SAAS;AAC9B,QAAI;AACF,YAAM,QAAQ,CAAC;AACf,YAAM,KAAK;AAAA,IACb,SAAS,IAAS;AAChB,aAAO;AAAA,QACL;AAAA,QACA,IAAI,OAAO,SAAS,MAAM,EAAE,QAAQ,KAAK,SAAS,GAAG,QAAQ,CAAC;AAAA,QAC9D;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAKD,MAAI,IAAI,YAAY,OAAO,MAAM;AAC/B,QAAI;AACF,YAAM,QAAQ,qBAAqB,EAAE,IAAI,MAAM,CAAC;AAChD,aAAO,SAAS,GAAG,MAAM,IAAK,OAAO,UAAU,OAAe,KAAK,EAAE,KAAK,CAAC;AAAA,IAC7E,SAAS,IAAI;AACX,aAAO,UAAU,GAAG,EAAE;AAAA,IACxB;AAAA,EACF,CAAC;AAED,MAAI,IAAI,gBAAgB,OAAO,MAAM;AACnC,QAAI;AACF,YAAM,QAAQ,qBAAqB,EAAE,IAAI,MAAM,CAAC;AAChD,aAAO;AAAA,QACL;AAAA,QACA,MAAM,IAAK,OAAO,UAAU,OAAe,EAAE,IAAI,MAAM,IAAI,GAAG,KAAK,EAAE,KAAK;AAAA,MAC5E;AAAA,IACF,SAAS,IAAI;AACX,aAAO,UAAU,GAAG,EAAE;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,MAAI,IAAI,kBAAkB,OAAO,MAAM;AACrC,QAAI;AACF,YAAM,QAAQ,qBAAqB,EAAE,IAAI,MAAM,CAAC;AAChD,aAAO;AAAA,QACL;AAAA,QACA,MAAM,IAAK,OAAO,UAAU,aAAqB,KAAK,EAAE,KAAK;AAAA,MAC/D;AAAA,IACF,SAAS,IAAI;AACX,aAAO,UAAU,GAAG,EAAE;AAAA,IACxB;AAAA,EACF,CAAC;AAED,MAAI,IAAI,sBAAsB,OAAO,MAAM;AACzC,QAAI;AACF,YAAM,QAAQ,qBAAqB,EAAE,IAAI,MAAM,CAAC;AAChD,aAAO;AAAA,QACL;AAAA,QACA,MAAM,IAAK,OAAO,UAAU,aAAqB,EAAE,IAAI,MAAM,IAAI,GAAG,KAAK,EAAE,KAAK;AAAA,MAClF;AAAA,IACF,SAAS,IAAI;AACX,aAAO,UAAU,GAAG,EAAE;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,MAAI,IAAI,0BAA0B,OAAO,MAAM;AAC7C,QAAI;AACF,YAAM,QAAQ,qBAAqB,EAAE,IAAI,MAAM,CAAC;AAChD,aAAO;AAAA,QACL;AAAA,QACA,MAAM,IAAK,OAAO,UAAU,sBAA8B,KAAK,EAAE,KAAK;AAAA,MACxE;AAAA,IACF,SAAS,IAAI;AACX,aAAO,UAAU,GAAG,EAAE;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,MAAI,KAAK,YAAY,OAAO,MAAM;AAChC,QAAI;AACF,YAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,YAAM,MAAM,MAAM,QAAQ,CAAC;AAC3B,aAAO;AAAA,QACL;AAAA,QACA,MAAM,IAAI,OAAO,SAAS,cAAc,IAAI,EAAE,MAAM,QAAW,GAAG;AAAA,MACpE;AAAA,IACF,SAAS,IAAI;AACX,aAAO,UAAU,GAAG,EAAE;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,MAAI,KAAK,SAAS,OAAO,MAAM;AAC7B,QAAI;AACF,YAAM,EAAE,WAAW,gBAAgB,cAAc,IAC/C,OAAO,OAAO,IAAI,GAAG,QAAQ,CAAC;AAEhC,UAAI,CAAC,WAAW;AACd,eAAO;AAAA,UACL;AAAA,UACA,IAAI,OAAO,SAAS,MAAM;AAAA,YACxB,QAAQ;AAAA,YACR,SAAS;AAAA,UACX,CAAC;AAAA,UACD;AAAA,QACF;AAAA,MACF;AAEA,YAAM,gBAAgB,OAAO,EAAE,IAAI,OAAO,gBAAgB,KAAK,CAAC;AAChE,UAAI,gBAAgB,gBAAgB;AAClC,eAAO;AAAA,UACL;AAAA,UACA,IAAI,OAAO,SAAS,MAAM;AAAA,YACxB,QAAQ;AAAA,YACR,SAAS,gEAAgE,cAAc;AAAA,UACzF,CAAC;AAAA,UACD;AAAA,QACF;AAAA,MACF;AAEA,YAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,YAAM,MAAM,MAAM,QAAQ,CAAC;AAC3B,aAAO;AAAA,QACL;AAAA,QACA,MAAM,IAAI,OAAO,SAAS,YAAY,MAAM,aAAa,EAAE;AAAA,UACzD;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,IAAI;AACX,aAAO,UAAU,GAAG,EAAE;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,MAAI,IAAI,OAAO,OAAO,MAAM;AAC1B,QAAI;AACF,YAAM,KAAK,MAAM,QAAQ,CAAC;AAC1B,YAAM,aAAa,OAAO,UAAU,SAAS,OAAO,UAAU,IAAI;AAClE,YAAM,OACJ,cAAc,OAAO,OAAO,WACxB,MAAM,IAAI,OAAO,UAAU,KAAK,EAAE,EAAE,KAAK,MAAM,QAAQ,CAAC,CAAC,IACzD;AAEN,UAAI,QAAQ,MAAM,MAAM,UAAU;AAChC,eAAO,SAAS,GAAG,IAAI;AAAA,MACzB;AACA,aAAO;AAAA,QACL;AAAA,QACA,IAAI,OAAO,SAAS,MAAM;AAAA,UACxB,QAAQ;AAAA,UACR,SAAS;AAAA,QACX,CAAC;AAAA,QACD;AAAA,MACF;AAAA,IACF,SAAS,IAAI;AACX,aAAO,UAAU,GAAG,EAAE;AAAA,IACxB;AAAA,EACF,CAAC;AAGD,aAAW,YAAY,OAAO,OAAO,OAAO,UAAU,SAAS,CAAC,GAAY;AAC1E,UAAM,WAAW,SAAS;AAG1B,QAAI,KAAK,GAAG,QAAQ,YAAY,OAAO,MAAM;AAC3C,UAAI;AACF,cAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,cAAM,MAAM,MAAM,QAAQ,CAAC;AAC3B,eAAO;AAAA,UACL;AAAA,UACA,MAAM,IAAI,OAAO,SAAS,cAAc,IAAI,EAAE,MAAM,CAAC,QAAQ,GAAG,GAAG;AAAA,QACrE;AAAA,MACF,SAAS,IAAI;AACX,eAAO,UAAU,GAAG,EAAE;AAAA,MACxB;AAAA,IACF,CAAC;AAGD,QAAI,IAAI,UAAU,OAAO,MAAM;AAC7B,UAAI;AACF,cAAM,QAAQ,qBAAqB,EAAE,IAAI,MAAM,CAAC;AAChD,cAAM,MAAM,MAAM,QAAQ,CAAC;AAC3B,eAAO,SAAS,GAAG,MAAM,IAAI,SAAS,KAAK,EAAE,KAAK,GAAG,CAAC;AAAA,MACxD,SAAS,IAAI;AACX,eAAO,UAAU,GAAG,EAAE;AAAA,MACxB;AAAA,IACF,CAAC;AAGD,QAAI,IAAI,GAAG,QAAQ,QAAQ,OAAO,MAAM;AACtC,UAAI;AACF,cAAM,QAAQ,qBAAqB,EAAE,IAAI,MAAM,CAAC;AAChD,cAAM,MAAM,MAAM,QAAQ,CAAC;AAC3B,eAAO;AAAA,UACL;AAAA,UACA,MAAM,IAAI,SAAS,EAAE,IAAI,MAAM,IAAI,GAAG,KAAK,EAAE,KAAK,GAAG;AAAA,QACvD;AAAA,MACF,SAAS,IAAI;AACX,eAAO,UAAU,GAAG,EAAE;AAAA,MACxB;AAAA,IACF,CAAC;AAGD,QAAI,KAAK,UAAU,OAAO,MAAM;AAC9B,UAAI;AACF,cAAM,QAAQ,qBAAqB,EAAE,IAAI,MAAM,CAAC;AAChD,cAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,cAAM,MAAM,MAAM,QAAQ,CAAC;AAC3B,eAAO,SAAS,GAAG,MAAM,IAAI,SAAS,KAAK,EAAE,MAAM,MAAM,GAAG,GAAG,GAAG;AAAA,MACpE,SAAS,IAAI;AACX,eAAO,UAAU,GAAG,EAAE;AAAA,MACxB;AAAA,IACF,CAAC;AAGD,QAAI,IAAI,GAAG,QAAQ,QAAQ,OAAO,MAAM;AACtC,UAAI;AACF,cAAM,QAAQ,qBAAqB,EAAE,IAAI,MAAM,CAAC;AAChD,cAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,cAAM,MAAM,MAAM,QAAQ,CAAC;AAC3B,eAAO;AAAA,UACL;AAAA,UACA,MAAM,IAAI,SAAS,EAAE,IAAI,MAAM,IAAI,GAAG,KAAK,EAAE,MAAM,MAAM,GAAG;AAAA,QAC9D;AAAA,MACF,SAAS,IAAI;AACX,eAAO,UAAU,GAAG,EAAE;AAAA,MACxB;AAAA,IACF,CAAC;AAGD,QAAI,MAAM,GAAG,QAAQ,QAAQ,OAAO,MAAM;AACxC,UAAI;AACF,cAAM,QAAQ,qBAAqB,EAAE,IAAI,MAAM,CAAC;AAChD,cAAM,OAAO,MAAM,EAAE,IAAI,KAAK;AAC9B,cAAM,MAAM,MAAM,QAAQ,CAAC;AAC3B,cAAM,QAAQ,MAAM,IAAI,SAAS,EAAE,IAAI,MAAM,IAAI,GAAG,KAAK,EAAE;AAAA,UACzD;AAAA,UACA;AAAA,QACF;AACA,eAAO,QAAQ,SAAS,GAAG,KAAK,IAAI,EAAE,KAAK,MAAM,GAAG;AAAA,MACtD,SAAS,IAAI;AACX,eAAO,UAAU,GAAG,EAAE;AAAA,MACxB;AAAA,IACF,CAAC;AAGD,QAAI,OAAO,GAAG,QAAQ,QAAQ,OAAO,MAAM;AACzC,UAAI;AACF,cAAM,MAAM,MAAM,QAAQ,CAAC;AAC3B,cAAM,IAAI,SAAS,EAAE,IAAI,MAAM,IAAI,CAAC,EAAE,QAAQ,GAAG;AACjD,eAAO,EAAE,KAAK,MAAM,GAAG;AAAA,MACzB,SAAS,IAAI;AACX,eAAO,UAAU,GAAG,EAAE;AAAA,MACxB;AAAA,IACF,CAAC;AAAA,EACH;AAGA,MAAI,IAAI,KAAK,CAAC,MAAM;AAClB,WAAO;AAAA,MACL;AAAA,MACA,IAAI,OAAO,SAAS,MAAM,EAAE,QAAQ,KAAK,SAAS,qBAAqB,CAAC;AAAA,MACxE;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAEA,IAAO,gBAAQ;","names":[]}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "scimmy-hono-routers",
+  "description": "SCIMMY Hono Routers — SCIM 2.0 server middleware for Hono",
+  "version": "0.1.0",
+  "author": "cliftonc",
+  "license": "MIT",
+  "type": "module",
+  "engines": {
+    "node": ">=24"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    "import": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build"
+  },
+  "files": [
+    "dist/**"
+  ],
+  "keywords": [
+    "SCIM",
+    "SCIM2",
+    "hono",
+    "provisioning",
+    "identity",
+    "rfc7643",
+    "rfc7644",
+    "scimmy"
+  ],
+  "homepage": "https://github.com/cliftonc/scimmy-hono-routers#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cliftonc/scimmy-hono-routers.git"
+  },
+  "bugs": {
+    "url": "https://github.com/cliftonc/scimmy-hono-routers/issues"
+  },
+  "peerDependencies": {
+    "hono": ">=4.0.0",
+    "scimmy": "1.x"
+  },
+  "devDependencies": {
+    "@types/sinon": "^21.0.0",
+    "hono": "^4.7.0",
+    "scimmy": "^1.3.5",
+    "sinon": "^21.0.3",
+    "tsup": "^8.0.0",
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
+  }
+}