vikunja-mcp-ng 0.7.0-beta.4 → 0.7.0

package/README.md

@@ -40,13 +40,18 @@ Node.js 22 or newer. Node 20 reached end of life in April 2026.
 
 | Vikunja | Status |
 |---|---|
-| 2.4.0 | Supported. This is both the minimum and the version the e2e stacks and live test lanes run against |
-| 2.5.0, 2.6.0 | Released upstream, not supported and not tested here. No code in this server targets them |
+| 2.6.0 | Supported and tested. The version the e2e stacks and live test lanes run against by default |
+| 2.5.0 | Supported and tested |
+| 2.4.0 | Supported and tested. The minimum, and a full test lane on both database backends |
 | below 2.4.0 | Not supported |
 
+This project supports and tests the trailing three released Vikunja versions — currently 2.4.0, 2.5.0 and 2.6.0 — as full `test:matrix` lanes on both database backends. When a new version ships, the window shifts: the oldest version drops out and the new one takes its place, rather than the range simply growing.
+
+2.6.0 tightened several permission checks. Where it now refuses something 2.4.0 accepted, this server surfaces the refusal with an explanation instead of degrading quietly — the cases are listed in [docs/VIKUNJA_API_ISSUES.md](docs/VIKUNJA_API_ISSUES.md) and each one is asserted per-version in the e2e harness. One is worth knowing about if you use a scoped API token: asking a task listing to expand `comments` or `reactions` with a token that lacks those scopes is rejected, and Vikunja's rejection is indistinguishable from an expired token, so the error names both possibilities.
+
 The minimum rose from 2.3.0 to 2.4.0 in the `0.7.0-beta` line. Nine operations this server ships as implemented, the eight `vikunja_admin` operations and `vikunja_tasks get-by-index`, do not exist on a released 2.3.0, so the older claim was not true in practice. On Vikunja 2.3.0, either upgrade Vikunja or pin `vikunja-mcp-ng@0.6.2`.
 
-The server speaks Vikunja's v1 API. v2 adoption is tracked in [issue #184](https://github.com/netadvanced/vikunja-mcp-ng/issues/184) and has not started.
+The server speaks Vikunja's v1 API for every operation. v2 adoption ([issue #184](https://github.com/netadvanced/vikunja-mcp-ng/issues/184)) has landed detection and a capability-gated transport, but nothing routes through it yet — that per-operation adoption ships separately once ready.
 
 ## Docker
 
@@ -82,16 +87,16 @@ For Docker Desktop's MCP Toolkit rather than a bare `docker run`, there is a ste
 
 | npm tag | Version | What you get |
 |---|---|---|
-| `latest` | 0.6.2 | The single-user stdio server, which is what the quick start above installs |
-| `beta` | 0.7.0-beta.4 | The same, plus an opt-in OIDC resource-server mode |
+| `latest` | 0.7.0 | The single-user stdio server (the quick start above), plus an opt-in OIDC resource-server mode |
+| `beta` | — | No active beta line right now |
 
-OIDC resource-server mode makes the server a hosted, multi-user deployment: a Streamable HTTP transport, per-user identity taken from a validated OIDC access token, MCP authorization discovery, and an enrollment flow where each user links their own Vikunja token once. It is off by default. Installing the beta changes nothing until you turn it on, and the stdio transport behaves as it does on stable.
+OIDC resource-server mode makes the server a hosted, multi-user deployment: a Streamable HTTP transport, per-user identity taken from a validated OIDC access token, MCP authorization discovery, and an enrollment flow where each user links their own Vikunja token once. It is off by default and stable as of `0.7.0` after several beta releases; installing the package changes nothing until you turn it on, and the stdio transport behaves as it always has.
 
 ```bash
-npm install -g vikunja-mcp-ng@beta      # or: npx -y vikunja-mcp-ng@beta
+npm install -g vikunja-mcp-ng      # or: npx -y vikunja-mcp-ng
 ```
 
-It is beta. The authentication boundary, the credential vault and per-identity isolation have been exercised against a real gateway, identity provider and Vikunja, but none of it has seen sustained production use yet. Read the [OIDC setup manual](https://github.com/netadvanced/vikunja-mcp-ng/blob/main/docs/OIDC-SETUP.md) before enabling it; the design and threat model are in the [OIDC resource-server reference](https://github.com/netadvanced/vikunja-mcp-ng/blob/main/docs/OIDC-RESOURCE-SERVER.md).
+The authentication boundary, the credential vault and per-identity isolation have been exercised against a real gateway, identity provider and Vikunja through the beta line, but it is newly stable and has not yet seen sustained production use at scale. Read the [OIDC setup manual](https://github.com/netadvanced/vikunja-mcp-ng/blob/main/docs/OIDC-SETUP.md) before enabling it; the design and threat model are in the [OIDC resource-server reference](https://github.com/netadvanced/vikunja-mcp-ng/blob/main/docs/OIDC-RESOURCE-SERVER.md).
 
 ## What it looks like in use
 

package/dist/auth/oidc/jwtValidator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jwtValidator.d.ts","sourceRoot":"","sources":["../../../src/auth/oidc/jwtValidator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAuB,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAU/F,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5E;;;;;OAKG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,EAC9B,IAAI,EAAE,QAAQ,GACb,gBAAgB,CAmElB"}
+{"version":3,"file":"jwtValidator.d.ts","sourceRoot":"","sources":["../../../src/auth/oidc/jwtValidator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAuB,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAe/F,MAAM,WAAW,gBAAgB;IAC/B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5E;;;;;OAKG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,EAC9B,IAAI,EAAE,QAAQ,GACb,gBAAgB,CAmFlB"}

package/dist/auth/oidc/jwtValidator.js

@@ -20,6 +20,11 @@ const errors_1 = require("../../types/errors");
 const logger_1 = require("../../utils/logger");
 const DEFAULT_ALLOWED_ALGS = ['RS256'];
 const DEFAULT_CLOCK_SKEW_SEC = 60;
+// Mirrors OidcConfigSchema's clockSkewSec cap (src/config/types.ts) so the
+// same bound holds for a direct caller of createOidcJwtValidator, not only
+// for config loaded through that Zod schema — a large clockTolerance
+// applies to `exp` itself and can make already-expired tokens verify.
+const MAX_CLOCK_SKEW_SEC = 300;
 const INVALID_TOKEN_MESSAGE = 'Invalid or expired token';
 const INSUFFICIENT_SCOPE_MESSAGE = 'Token lacks required scope';
 const BEARER_PATTERN = /^Bearer\s+(\S+)$/i;
@@ -40,6 +45,9 @@ function createOidcJwtValidator(config, deps) {
     if (!config.jwksUri) {
         throw new Error('createOidcJwtValidator: config.jwksUri is required');
     }
+    if (config.clockSkewSec !== undefined && config.clockSkewSec > MAX_CLOCK_SKEW_SEC) {
+        throw new Error(`createOidcJwtValidator: config.clockSkewSec must not exceed ${MAX_CLOCK_SKEW_SEC}`);
+    }
     const allowedAlgs = config.allowedAlgs && config.allowedAlgs.length > 0 ? config.allowedAlgs : DEFAULT_ALLOWED_ALGS;
     const clockTolerance = config.clockSkewSec ?? DEFAULT_CLOCK_SKEW_SEC;
     const jwks = deps.createRemoteJWKSet(new URL(config.jwksUri), buildJwksCacheOptions(config.jwks));
@@ -50,20 +58,30 @@ function createOidcJwtValidator(config, deps) {
             throw unauthorized();
         }
         let payload;
+        let protectedHeader;
         try {
             const result = await deps.jwtVerify(token, jwks, {
                 issuer: config.issuer,
                 audience: config.audience,
                 algorithms: allowedAlgs,
                 clockTolerance,
-                requiredClaims: ['sub'],
+                // 'exp' must be REQUIRED, not merely checked-if-present: jose only
+                // validates exp/nbf/iat when the claim exists, so a correctly-signed
+                // token that simply omits `exp` would otherwise verify and never
+                // expire.
+                requiredClaims: ['sub', 'exp'],
             });
             payload = result.payload;
+            protectedHeader = result.protectedHeader;
         }
         catch (err) {
             logger_1.logger.warn('OIDC auth rejected: %s', describeVerifyFailure(err));
             throw unauthorized();
         }
+        if (config.requireAtJwtTyp && !isAccessTokenTyp(protectedHeader.typ)) {
+            logger_1.logger.warn('OIDC auth rejected: token typ is not at+jwt');
+            throw unauthorized();
+        }
         const sub = payload.sub;
         if (!sub) {
             logger_1.logger.warn('OIDC auth rejected: token has an empty sub claim');
@@ -108,6 +126,16 @@ function extractBearerToken(header) {
     }
     return BEARER_PATTERN.exec(header.trim())?.[1];
 }
+/**
+ * RFC 9068 §2.1: an access token's JWS header `typ` SHOULD be `at+jwt`.
+ * Case-insensitive, and tolerates the `application/` prefix some IdPs use
+ * (the same convention `typ` allows elsewhere per RFC 7515).
+ */
+function isAccessTokenTyp(typ) {
+    if (typeof typ !== 'string')
+        return false;
+    return typ.toLowerCase().replace(/^application\//, '') === 'at+jwt';
+}
 function hasRequiredScope(payload, requiredScope) {
     const raw = payload['scope'] ?? payload['scp'];
     if (typeof raw === 'string') {

package/dist/auth/oidc/jwtValidator.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwtValidator.js","sourceRoot":"","sources":["../../../src/auth/oidc/jwtValidator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AA4CH,wDAsEC;AA/GD,+CAAyD;AACzD,+CAA4C;AAG5C,MAAM,oBAAoB,GAAG,CAAC,OAAO,CAAC,CAAC;AACvC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AACzD,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAEhE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAwB3C;;;;;;GAMG;AACH,SAAgB,sBAAsB,CACpC,MAA8B,EAC9B,IAAc;IAEd,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,WAAW,GACf,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAClG,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC;IAErE,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAElG,KAAK,UAAU,QAAQ,CAAC,mBAA8C;QACpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,eAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAC7E,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QAED,IAAI,OAA8D,CAAC;QACnE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC/C,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,WAAW;gBACvB,cAAc;gBACd,cAAc,EAAE,CAAC,KAAK,CAAC;aACxB,CAAC,CAAC;YACH,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,eAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAChE,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7E,eAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAChE,MAAM,SAAS,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,QAAQ,GAAa,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;QAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACxD,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1E,QAAQ,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,UAAU;QACvB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA2C;IACxE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,UAAU,EAAE,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,CAAC,gBAAgB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC3D,CAAC;IACD,IAAI,UAAU,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC;IACjD,CAAC;IACD,IAAI,UAAU,EAAE,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,CAAC,eAAe,GAAG,UAAU,CAAC,iBAAiB,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAiC;IAC3D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgC,EAAE,aAAqB;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAY;IACzC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,2BAA2B,CAAC;AACrC,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,iBAAQ,CAAC,kBAAS,CAAC,WAAW,EAAE,qBAAqB,EAAE;QAChE,UAAU,EAAE,GAAG;QACf,oBAAoB,EAAE,eAAe;KACtC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,iBAAQ,CAAC,kBAAS,CAAC,iBAAiB,EAAE,0BAA0B,EAAE;QAC3E,UAAU,EAAE,GAAG;QACf,oBAAoB,EAAE,oBAAoB;KAC3C,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"jwtValidator.js","sourceRoot":"","sources":["../../../src/auth/oidc/jwtValidator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AAiDH,wDAsFC;AApID,+CAAyD;AACzD,+CAA4C;AAG5C,MAAM,oBAAoB,GAAG,CAAC,OAAO,CAAC,CAAC;AACvC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAClC,2EAA2E;AAC3E,2EAA2E;AAC3E,qEAAqE;AACrE,sEAAsE;AACtE,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AACzD,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AAEhE,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAwB3C;;;;;;GAMG;AACH,SAAgB,sBAAsB,CACpC,MAA8B,EAC9B,IAAc;IAEd,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,GAAG,kBAAkB,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CACb,+DAA+D,kBAAkB,EAAE,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GACf,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAClG,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,IAAI,sBAAsB,CAAC;IAErE,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAElG,KAAK,UAAU,QAAQ,CAAC,mBAA8C;QACpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,eAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;YAC7E,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QAED,IAAI,OAA8D,CAAC;QACnE,IAAI,eAA8E,CAAC;QACnF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC/C,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,UAAU,EAAE,WAAW;gBACvB,cAAc;gBACd,mEAAmE;gBACnE,qEAAqE;gBACrE,iEAAiE;gBACjE,UAAU;gBACV,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC;aAC/B,CAAC,CAAC;YACH,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YACzB,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,eAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,CAAC,eAAe,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,eAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;YAC3D,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,eAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAChE,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7E,eAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAChE,MAAM,SAAS,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,QAAQ,GAAa,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;QAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACxD,IAAI,OAAO,iBAAiB,KAAK,QAAQ,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1E,QAAQ,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QACjD,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClD,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,UAAU,UAAU;QACvB,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,qBAAqB,CAAC,UAA2C;IACxE,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,UAAU,EAAE,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,CAAC,gBAAgB,GAAG,UAAU,CAAC,kBAAkB,CAAC;IAC3D,CAAC;IACD,IAAI,UAAU,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QAC5C,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,aAAa,CAAC;IACjD,CAAC;IACD,IAAI,UAAU,EAAE,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,CAAC,eAAe,GAAG,UAAU,CAAC,iBAAiB,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAiC;IAC3D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,KAAK,QAAQ,CAAC;AACtE,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgC,EAAE,aAAqB;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAY;IACzC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IACvC,CAAC;IACD,OAAO,2BAA2B,CAAC;AACrC,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,iBAAQ,CAAC,kBAAS,CAAC,WAAW,EAAE,qBAAqB,EAAE;QAChE,UAAU,EAAE,GAAG;QACf,oBAAoB,EAAE,eAAe;KACtC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,IAAI,iBAAQ,CAAC,kBAAS,CAAC,iBAAiB,EAAE,0BAA0B,EAAE;QAC3E,UAAU,EAAE,GAAG;QACf,oBAAoB,EAAE,oBAAoB;KAC3C,CAAC,CAAC;AACL,CAAC"}

package/dist/auth/oidc/types.d.ts

@@ -58,10 +58,23 @@ export interface OidcJwtValidatorConfig {
      * reason to accept HMAC-signed tokens against key material published as public keys.
      */
     allowedAlgs?: string[];
-    /** Bounded clock skew tolerance, in seconds, applied to `exp`/`nbf`/`iat` (`oidc.clockSkewSec`). Defaults to 60. */
+    /** Bounded clock skew tolerance, in seconds, applied to `exp`/`nbf`/`iat` (`oidc.clockSkewSec`). Defaults to 60, capped at 300 (enforced synchronously by `createOidcJwtValidator`). */
     clockSkewSec?: number;
     /** Optional coarse scope gate (`oidc.requiredScope`). When set, a validly-authenticated token missing this scope is a 403, not a 401. */
     requiredScope?: string;
+    /**
+     * When true, reject a token whose JWS header `typ` is missing OR is not
+     * `at+jwt` (RFC 9068 §2.1 and §4, case-insensitive, tolerating an
+     * `application/` prefix). Defaults to false/unset: most IdPs mint access
+     * tokens with a generic `typ: 'JWT'` (or omit it), the same value an ID token or a
+     * logout token from the same issuer would carry, so enforcing this by
+     * default would reject legitimate tokens from IdPs that predate or don't
+     * implement RFC 9068. Turn this on only against an IdP known to set
+     * `at+jwt` on its access tokens — it then closes the gap where any
+     * same-issuer, same-audience JWT (not only an access token) would
+     * otherwise be accepted (`oidc.requireAtJwtTyp`).
+     */
+    requireAtJwtTyp?: boolean;
     /** Optional tuning for the underlying JWKS cache. */
     jwks?: OidcJwksCacheConfig;
 }

package/dist/auth/oidc/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/auth/oidc/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,qFAAqF;IACrF,MAAM,EAAE,MAAM,CAAC;IACf,yFAAyF;IACzF,GAAG,EAAE,MAAM,CAAC;IACZ,sGAAsG;IACtG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uGAAuG;IACvG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,8GAA8G;IAC9G,MAAM,EAAE,MAAM,CAAC;IACf,iHAAiH;IACjH,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,oHAAoH;IACpH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yIAAyI;IACzI,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,SAAS,CAAC;AAC7C,MAAM,MAAM,sBAAsB,GAAG,OAAO,kBAAkB,CAAC;AAE/D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,aAAa,CAAC;IACzB,kBAAkB,EAAE,sBAAsB,CAAC;CAC5C"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/auth/oidc/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1D;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,qFAAqF;IACrF,MAAM,EAAE,MAAM,CAAC;IACf,yFAAyF;IACzF,GAAG,EAAE,MAAM,CAAC;IACZ,sGAAsG;IACtG,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uGAAuG;IACvG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,8GAA8G;IAC9G,MAAM,EAAE,MAAM,CAAC;IACf,iHAAiH;IACjH,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,wLAAwL;IACxL,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yIAAyI;IACzI,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;OAWG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,qDAAqD;IACrD,IAAI,CAAC,EAAE,mBAAmB,CAAC;CAC5B;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,SAAS,CAAC;AAC7C,MAAM,MAAM,sBAAsB,GAAG,OAAO,kBAAkB,CAAC;AAE/D;;;;;;;;;;GAUG;AACH,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,aAAa,CAAC;IACzB,kBAAkB,EAAE,sBAAsB,CAAC;CAC5C"}

package/dist/config/ConfigurationManager.d.ts

@@ -51,6 +51,13 @@ export declare class ConfigurationManager {
      * itself is synchronous and cached after the first call.
      */
     isReadOnly(): boolean;
+    /**
+     * Whether the v2 API fast path is force-disabled. Synchronous for the same
+     * reason as `isReadOnly()` above: `loadConfiguration()` is synchronous and
+     * cached after the first call, and `resolveApiVersion` sits on a
+     * per-request path where an async config read would be a needless await.
+     */
+    isV1Forced(): boolean;
     /**
      * Check if a feature is enabled
      */

package/dist/config/ConfigurationManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigurationManager.d.ts","sourceRoot":"","sources":["../../src/config/ConfigurationManager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACd,MAAM,SAAS,CAAC;AAmEjB;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAqC;IAC5D,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAEhD,OAAO;IAQP;;OAEG;WACW,WAAW,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,oBAAoB;IAO5E;;OAEG;WACW,KAAK,IAAI,IAAI;IAI3B;;OAEG;IACI,iBAAiB,IAAI,iBAAiB;IAoD7C;;OAEG;IACU,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAO3D;;OAEG;IACU,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAKpC,gBAAgB,IAAI,OAAO,CAAC,aAAa,CAAC;IAK1C,kBAAkB,IAAI,OAAO,CAAC,eAAe,CAAC;IAK9C,qBAAqB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAKpD,gBAAgB,IAAI,OAAO,CAAC,aAAa,CAAC;IAK1C,kBAAkB,IAAI,OAAO,CAAC,eAAe,CAAC;IAK9C,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAKjD;;;;;OAKG;IACI,gBAAgB,IAAI,aAAa;IAIxC;;;;;OAKG;IACI,UAAU,IAAI,OAAO;IAI5B;;OAEG;IACU,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKpE;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAmBzB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,kBAAkB;IAwC1B;;;OAGG;IACH,OAAO,CAAC,4BAA4B;IAuSpC;;;OAGG;IACH,OAAO,CAAC,cAAc;IAYtB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAgB7B;;OAEG;IACH,OAAO,CAAC,SAAS;IA6BjB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;OAEG;IACH,OAAO,CAAC,uBAAuB;CA4ChC;AAGD,eAAO,MAAM,gBAAgB,QAAO,OAAO,CAAC,iBAAiB,CACN,CAAC;AACxD,eAAO,MAAM,aAAa,QAAO,OAAO,CAAC,UAAU,CACC,CAAC;AACrD,eAAO,MAAM,gBAAgB,QAAO,OAAO,CAAC,aAAa,CACF,CAAC;AACxD,eAAO,MAAM,kBAAkB,QAAO,OAAO,CAAC,eAAe,CACJ,CAAC;AAC1D,eAAO,MAAM,qBAAqB,QAAO,OAAO,CAAC,kBAAkB,CACP,CAAC;AAC7D,eAAO,MAAM,gBAAgB,GAAI,aAAa,MAAM,KAAG,OAAO,CAAC,OAAO,CACJ,CAAC;AACnE,eAAO,MAAM,gBAAgB,QAAO,OAAO,CAAC,aAAa,CACF,CAAC;AACxD,eAAO,MAAM,UAAU,QAAO,OAA0D,CAAC;AACzF,eAAO,MAAM,kBAAkB,QAAO,OAAO,CAAC,eAAe,CACJ,CAAC;AAC1D,eAAO,MAAM,aAAa,QAAO,OAAO,CAAC,UAAU,CACC,CAAC;AACrD,eAAO,MAAM,gBAAgB,QAAO,aACmB,CAAC"}
+{"version":3,"file":"ConfigurationManager.d.ts","sourceRoot":"","sources":["../../src/config/ConfigurationManager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,UAAU,EACV,aAAa,EACd,MAAM,SAAS,CAAC;AAmEjB;;GAEG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAqC;IAC5D,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAEhD,OAAO;IAQP;;OAEG;WACW,WAAW,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,oBAAoB;IAO5E;;OAEG;WACW,KAAK,IAAI,IAAI;IAI3B;;OAEG;IACI,iBAAiB,IAAI,iBAAiB;IAoD7C;;OAEG;IACU,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAO3D;;OAEG;IACU,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAKpC,gBAAgB,IAAI,OAAO,CAAC,aAAa,CAAC;IAK1C,kBAAkB,IAAI,OAAO,CAAC,eAAe,CAAC;IAK9C,qBAAqB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAKpD,gBAAgB,IAAI,OAAO,CAAC,aAAa,CAAC;IAK1C,kBAAkB,IAAI,OAAO,CAAC,eAAe,CAAC;IAK9C,aAAa,IAAI,OAAO,CAAC,UAAU,CAAC;IAKjD;;;;;OAKG;IACI,gBAAgB,IAAI,aAAa;IAIxC;;;;;OAKG;IACI,UAAU,IAAI,OAAO;IAI5B;;;;;OAKG;IACI,UAAU,IAAI,OAAO;IAI5B;;OAEG;IACU,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKpE;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAmBzB;;;;;;;;;;;;;;OAcG;IACH,OAAO,CAAC,kBAAkB;IAwC1B;;;OAGG;IACH,OAAO,CAAC,4BAA4B;IAmTpC;;;OAGG;IACH,OAAO,CAAC,cAAc;IAYtB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAgB7B;;OAEG;IACH,OAAO,CAAC,SAAS;IA6BjB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAuB7B;;OAEG;IACH,OAAO,CAAC,uBAAuB;CA4ChC;AAGD,eAAO,MAAM,gBAAgB,QAAO,OAAO,CAAC,iBAAiB,CACN,CAAC;AACxD,eAAO,MAAM,aAAa,QAAO,OAAO,CAAC,UAAU,CACC,CAAC;AACrD,eAAO,MAAM,gBAAgB,QAAO,OAAO,CAAC,aAAa,CACF,CAAC;AACxD,eAAO,MAAM,kBAAkB,QAAO,OAAO,CAAC,eAAe,CACJ,CAAC;AAC1D,eAAO,MAAM,qBAAqB,QAAO,OAAO,CAAC,kBAAkB,CACP,CAAC;AAC7D,eAAO,MAAM,gBAAgB,GAAI,aAAa,MAAM,KAAG,OAAO,CAAC,OAAO,CACJ,CAAC;AACnE,eAAO,MAAM,gBAAgB,QAAO,OAAO,CAAC,aAAa,CACF,CAAC;AACxD,eAAO,MAAM,UAAU,QAAO,OAA0D,CAAC;AACzF,eAAO,MAAM,kBAAkB,QAAO,OAAO,CAAC,eAAe,CACJ,CAAC;AAC1D,eAAO,MAAM,aAAa,QAAO,OAAO,CAAC,UAAU,CACC,CAAC;AACrD,eAAO,MAAM,gBAAgB,QAAO,aACmB,CAAC"}

package/dist/config/ConfigurationManager.js

@@ -216,6 +216,15 @@ class ConfigurationManager {
     isReadOnly() {
         return this.loadConfiguration().readOnly;
     }
+    /**
+     * Whether the v2 API fast path is force-disabled. Synchronous for the same
+     * reason as `isReadOnly()` above: `loadConfiguration()` is synchronous and
+     * cached after the first call, and `resolveApiVersion` sits on a
+     * per-request path where an async config read would be a needless await.
+     */
+    isV1Forced() {
+        return this.loadConfiguration().featureFlags.forceV1Api;
+    }
     /**
      * Check if a feature is enabled
      */
@@ -350,6 +359,7 @@ class ConfigurationManager {
         // Feature flag variables
         const featureFlags = {};
         this.assignEnvValue(featureFlags, 'enableServerSideFiltering', process.env.VIKUNJA_ENABLE_SERVER_SIDE_FILTERING, true);
+        this.assignEnvValue(featureFlags, 'forceV1Api', process.env.VIKUNJA_MCP_FORCE_V1_API, true);
         if (Object.keys(featureFlags).length > 0) {
             result.featureFlags = featureFlags;
         }
@@ -437,6 +447,7 @@ class ConfigurationManager {
         }
         this.assignEnvValue(oidc, 'clockSkewSec', process.env.VIKUNJA_MCP_OIDC_CLOCK_SKEW_SEC, true);
         this.assignEnvValue(oidc, 'requiredScope', process.env.VIKUNJA_MCP_OIDC_REQUIRED_SCOPE, false);
+        this.assignEnvValue(oidc, 'requireAtJwtTyp', process.env.VIKUNJA_MCP_OIDC_REQUIRE_AT_JWT_TYP, true);
         if (Object.keys(oidc).length > 0) {
             result.oidc = oidc;
         }

package/dist/config/ConfigurationManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigurationManager.js","sourceRoot":"","sources":["../../src/config/ConfigurationManager.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,6BAAwB;AAaxB,mCAAmF;AACnF,uCAA0C;AAC1C,4CAAyC;AAEzC,0EAA0E;AAC1E,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAY3D,MAAM,oBAAoB,GAA4C;IACpE,CAAC,mBAAW,CAAC,WAAW,CAAC,EAAE;QACzB,OAAO,EAAE;YACP,KAAK,EAAE,OAAgB;YACvB,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,mBAAW,CAAC,WAAW;SACrC;QACD,iEAAiE;QACjE,YAAY,EAAE;YACZ,OAAO,EAAE,KAAK;SACf;QACD,YAAY,EAAE;YACZ,yBAAyB,EAAE,IAAI;YAC/B,0BAA0B,EAAE,IAAI;SACjC;KACF;IAED,CAAC,mBAAW,CAAC,IAAI,CAAC,EAAE;QAClB,OAAO,EAAE;YACP,KAAK,EAAE,OAAgB;YACvB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,mBAAW,CAAC,IAAI;SAC9B;QACD,4DAA4D;QAC5D,YAAY,EAAE;YACZ,OAAO,EAAE,KAAK;SACf;QACD,YAAY,EAAE;YACZ,yBAAyB,EAAE,KAAK;SACjC;KACF;IAED,CAAC,mBAAW,CAAC,UAAU,CAAC,EAAE;QACxB,OAAO,EAAE;YACP,KAAK,EAAE,MAAe;YACtB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,mBAAW,CAAC,UAAU;SACpC;QACD,sDAAsD;QACtD,YAAY,EAAE;YACZ,OAAO,EAAE,IAAI;SACd;QACD,YAAY,EAAE;YACZ,yBAAyB,EAAE,IAAI;YAC/B,qBAAqB,EAAE,IAAI;SAC5B;KACF;CACF,CAAC;AAEF;;GAEG;AACH,MAAa,oBAAoB;IACvB,MAAM,CAAC,QAAQ,GAAgC,IAAI,CAAC;IACpD,MAAM,GAA6B,IAAI,CAAC;IAC/B,WAAW,CAAoB;IAEhD,YAAoB,UAA6B,EAAE;QACjD,IAAI,CAAC,WAAW,GAAG;YACjB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,aAAa;YACrB,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,WAAW,CAAC,OAA2B;QACnD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YACnC,oBAAoB,CAAC,QAAQ,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,oBAAoB,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,KAAK;QACjB,oBAAoB,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvC,CAAC;IAED;;OAEG;IACI,iBAAiB;QACtB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,CAAC;YACH,wBAAwB;YACxB,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAE7C,sDAAsD;YACtD,MAAM,aAAa,GAAG,oBAAoB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAE9D,uEAAuE;YACvE,sEAAsE;YACtE,yCAAyC;YACzC,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE7C,qEAAqE;YACrE,kDAAkD;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,4BAA4B,EAAE,CAAC;YAEtD,8EAA8E;YAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;YAEpD,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAC9B,EAAE,WAAW,EAAE,EACf,aAAa,EACb,UAAU,EACV,SAAS,EACT,YAAY,CACb,CAAC;YAEF,0CAA0C;YAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;YAEpD,0DAA0D;YAC1D,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAE/B,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,0BAAkB,CAC1B,YAAY,EACZ,oCAAoC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9G,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,gBAAgB;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa;QACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAEM,KAAK,CAAC,gBAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAEM,KAAK,CAAC,kBAAkB;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,qBAAqB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,gBAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAEM,KAAK,CAAC,kBAAkB;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,SAAS,CAAC;IAC1B,CAAC;IAEM,KAAK,CAAC,aAAa;QACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACI,gBAAgB;QACrB,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC,SAAS,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACI,UAAU;QACf,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC;IAC3C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QAC/C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACxD,OAAO,YAAY,CAAC,WAAuC,CAAC,KAAK,IAAI,CAAC;IACxE,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;QACtC,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAE9C,IAAI,UAAU,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACrC,OAAO,mBAAW,CAAC,IAAI,CAAC;QAC1B,CAAC;QAED,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;YAC7B,OAAO,mBAAW,CAAC,UAAU,CAAC;QAChC,CAAC;QAED,OAAO,mBAAW,CAAC,WAAW,CAAC;IACjC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,kBAAkB;QACxB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACpD,MAAM,UAAU,GAAG,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAEzF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,0BAAkB,CAC1B,YAAY,EACZ,iCAAiC,UAAU,8BAA8B;oBACvE,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;YACJ,CAAC;YACD,6DAA6D;YAC7D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,0BAAkB,CAC1B,YAAY,EACZ,kBAAkB,UAAU,sBAAsB;gBAChD,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,0BAAkB,CAC1B,YAAY,EACZ,kBAAkB,UAAU,+CAA+C,CAC5E,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,4BAA4B;QAClC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAE3C,2BAA2B;QAC3B,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACxE,4EAA4E;QAC5E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,IAAA,uBAAa,EAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,CAAC;QACrF,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,oBAAoB;QACpB,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QAC3B,CAAC;QAED,0BAA0B;QAC1B,MAAM,YAAY,GAA4B,EAAE,CAAC;QACjD,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAEnF,MAAM,eAAe,GAA4B,EAAE,CAAC;QACpD,IAAI,CAAC,cAAc,CACjB,eAAe,EACf,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,EACjC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC3F,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC7F,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACzF,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,YAAY,CAAC,OAAO,GAAG,eAAe,CAAC;QACzC,CAAC;QAED,MAAM,iBAAiB,GAA4B,EAAE,CAAC;QACtD,IAAI,CAAC,cAAc,CACjB,iBAAiB,EACjB,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAC3C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,iBAAiB,EACjB,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,6BAA6B,EACzC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,iBAAiB,EACjB,gBAAgB,EAChB,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,iBAAiB,EACjB,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,2BAA2B,EACvC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,iBAAiB,EACjB,kBAAkB,EAClB,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAClC,IAAI,CACL,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,YAAY,CAAC,SAAS,GAAG,iBAAiB,CAAC;QAC7C,CAAC;QAED,MAAM,YAAY,GAA4B,EAAE,CAAC;QACjD,IAAI,CAAC,cAAc,CACjB,YAAY,EACZ,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,YAAY,EACZ,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,wBAAwB,EACpC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QAC7F,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,YAAY,CAAC,IAAI,GAAG,YAAY,CAAC;QACnC,CAAC;QAED,MAAM,cAAc,GAA4B,EAAE,CAAC;QACnD,IAAI,CAAC,cAAc,CACjB,cAAc,EACd,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,4BAA4B,EACxC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,cAAc,EACd,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,cAAc,EACd,gBAAgB,EAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,EACnC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,cAAc,EACd,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,wBAAwB,EACpC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,YAAY,CAAC,MAAM,GAAG,cAAc,CAAC;QACvC,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACrC,CAAC;QAED,yBAAyB;QACzB,MAAM,YAAY,GAA4B,EAAE,CAAC;QACjD,IAAI,CAAC,cAAc,CACjB,YAAY,EACZ,2BAA2B,EAC3B,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAChD,IAAI,CACL,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACrC,CAAC;QAED,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QACtF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,eAAe,EACf,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,eAAe,EACf,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,cAAc,EACd,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAC/C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,cAAc,EACd,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QAC3B,CAAC;QAED,uEAAuE;QACvE,sEAAsE;QACtE,wDAAwD;QACxD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QAEjF,sEAAsE;QACtE,sEAAsE;QACtE,6DAA6D;QAC7D,wCAAwC;QACxC,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QAC7F,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC/B,CAAC;QAED,wEAAwE;QACxE,2DAA2D;QAC3D,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAEnF,kEAAkE;QAClE,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC5E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC5E,uEAAuE;QACvE,sEAAsE;QACtE,4DAA4D;QAC5D,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACvF,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC;QACnE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,YAAY,GAAG,eAAe;iBAChC,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,yEAAyE;QACzE,yDAAyD;QACzD,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC1D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,WAAW;iBAC1B,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;QACnF,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;QACjE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,WAAW,GAAG,cAAc;iBAC9B,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;QAC7F,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QAC/F,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,sEAAsE;QACtE,yDAAyD;QACzD,yEAAyE;QACzE,sEAAsE;QACtE,6BAA6B;QAC7B,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QACvB,CAAC;QAED,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QACrF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACxF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QAC7F,IAAI,CAAC,cAAc,CACjB,MAAM,EACN,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAChD,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,MAAM,EACN,cAAc,EACd,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAC7C,IAAI,CACL,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACzB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,cAAc,CACpB,MAA+B,EAC/B,GAAW,EACX,QAA4B,EAC5B,KAAc;QAEd,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxE,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,KAAa;QACzC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,GAAG,OAAkC;QACrD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAE3C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,SAAS;YAE9C,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;gBACtB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;oBACnD,IACE,MAAM,CAAC,GAAG,CAAC;wBACX,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ;wBAC/B,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ;wBAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EACxB,CAAC;wBACD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAC1B,MAAM,CAAC,GAAG,CAA4B,EACtC,GAAG,CAAC,GAAG,CAA4B,CACpC,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,SAAkB;QAC9C,IAAI,CAAC;YACH,OAAO,+BAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;gBAChC,qCAAqC;gBACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;oBACxB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,QAAQ,EAAE,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;oBACtD,QAAQ,EAAE,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;iBACvD,CAAC,CAAC,CAAC;gBAEJ,MAAM,IAAI,0BAAkB,CAC1B,YAAY,EACZ,qCAAqC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAClG,EAAE,MAAM,EAAE,SAAS,EAAE,CACtB,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,uBAAuB;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEzB,MAAM,OAAO,GAAG;YACd,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,IAAI,EAAE;gBACJ,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU;gBACrC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;gBACzC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO;aAClC;YACD,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,YAAY,EAAE;gBACZ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO;gBACzC,QAAQ,EAAE;oBACR,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,iBAAiB;oBAC3D,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,iBAAiB;oBAC/D,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB;oBACrD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,iBAAiB;iBAC1D;aACF;YACD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,SAAS,EAAE;gBACT,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW;aACxD;YACD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,IAAI,EACF,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM;gBAC9B,CAAC,CAAC;oBACE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;oBAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;oBAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;oBAC3B,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;oBACvD,wDAAwD;oBACxD,6DAA6D;oBAC7D,2DAA2D;oBAC3D,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnC;gBACH,CAAC,CAAC,SAAS;SAChB,CAAC;QAEF,eAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;;AApqBH,oDAqqBC;AAED,mCAAmC;AAC5B,MAAM,gBAAgB,GAAG,GAA+B,EAAE,CAC/D,oBAAoB,CAAC,WAAW,EAAE,CAAC,gBAAgB,EAAE,CAAC;AAD3C,QAAA,gBAAgB,oBAC2B;AACjD,MAAM,aAAa,GAAG,GAAwB,EAAE,CACrD,oBAAoB,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC;AADxC,QAAA,aAAa,iBAC2B;AAC9C,MAAM,gBAAgB,GAAG,GAA2B,EAAE,CAC3D,oBAAoB,CAAC,WAAW,EAAE,CAAC,gBAAgB,EAAE,CAAC;AAD3C,QAAA,gBAAgB,oBAC2B;AACjD,MAAM,kBAAkB,GAAG,GAA6B,EAAE,CAC/D,oBAAoB,CAAC,WAAW,EAAE,CAAC,kBAAkB,EAAE,CAAC;AAD7C,QAAA,kBAAkB,sBAC2B;AACnD,MAAM,qBAAqB,GAAG,GAAgC,EAAE,CACrE,oBAAoB,CAAC,WAAW,EAAE,CAAC,qBAAqB,EAAE,CAAC;AADhD,QAAA,qBAAqB,yBAC2B;AACtD,MAAM,gBAAgB,GAAG,CAAC,WAAmB,EAAoB,EAAE,CACxE,oBAAoB,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;AADtD,QAAA,gBAAgB,oBACsC;AAC5D,MAAM,gBAAgB,GAAG,GAA2B,EAAE,CAC3D,oBAAoB,CAAC,WAAW,EAAE,CAAC,gBAAgB,EAAE,CAAC;AAD3C,QAAA,gBAAgB,oBAC2B;AACjD,MAAM,UAAU,GAAG,GAAY,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,CAAC;AAA5E,QAAA,UAAU,cAAkE;AAClF,MAAM,kBAAkB,GAAG,GAA6B,EAAE,CAC/D,oBAAoB,CAAC,WAAW,EAAE,CAAC,kBAAkB,EAAE,CAAC;AAD7C,QAAA,kBAAkB,sBAC2B;AACnD,MAAM,aAAa,GAAG,GAAwB,EAAE,CACrD,oBAAoB,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC;AADxC,QAAA,aAAa,iBAC2B;AAC9C,MAAM,gBAAgB,GAAG,GAAkB,EAAE,CAClD,oBAAoB,CAAC,WAAW,EAAE,CAAC,gBAAgB,EAAE,CAAC;AAD3C,QAAA,gBAAgB,oBAC2B"}
+{"version":3,"file":"ConfigurationManager.js","sourceRoot":"","sources":["../../src/config/ConfigurationManager.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,6BAAwB;AAaxB,mCAAmF;AACnF,uCAA0C;AAC1C,4CAAyC;AAEzC,0EAA0E;AAC1E,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAY3D,MAAM,oBAAoB,GAA4C;IACpE,CAAC,mBAAW,CAAC,WAAW,CAAC,EAAE;QACzB,OAAO,EAAE;YACP,KAAK,EAAE,OAAgB;YACvB,KAAK,EAAE,IAAI;YACX,WAAW,EAAE,mBAAW,CAAC,WAAW;SACrC;QACD,iEAAiE;QACjE,YAAY,EAAE;YACZ,OAAO,EAAE,KAAK;SACf;QACD,YAAY,EAAE;YACZ,yBAAyB,EAAE,IAAI;YAC/B,0BAA0B,EAAE,IAAI;SACjC;KACF;IAED,CAAC,mBAAW,CAAC,IAAI,CAAC,EAAE;QAClB,OAAO,EAAE;YACP,KAAK,EAAE,OAAgB;YACvB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,mBAAW,CAAC,IAAI;SAC9B;QACD,4DAA4D;QAC5D,YAAY,EAAE;YACZ,OAAO,EAAE,KAAK;SACf;QACD,YAAY,EAAE;YACZ,yBAAyB,EAAE,KAAK;SACjC;KACF;IAED,CAAC,mBAAW,CAAC,UAAU,CAAC,EAAE;QACxB,OAAO,EAAE;YACP,KAAK,EAAE,MAAe;YACtB,KAAK,EAAE,KAAK;YACZ,WAAW,EAAE,mBAAW,CAAC,UAAU;SACpC;QACD,sDAAsD;QACtD,YAAY,EAAE;YACZ,OAAO,EAAE,IAAI;SACd;QACD,YAAY,EAAE;YACZ,yBAAyB,EAAE,IAAI;YAC/B,qBAAqB,EAAE,IAAI;SAC5B;KACF;CACF,CAAC;AAEF;;GAEG;AACH,MAAa,oBAAoB;IACvB,MAAM,CAAC,QAAQ,GAAgC,IAAI,CAAC;IACpD,MAAM,GAA6B,IAAI,CAAC;IAC/B,WAAW,CAAoB;IAEhD,YAAoB,UAA6B,EAAE;QACjD,IAAI,CAAC,WAAW,GAAG;YACjB,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,aAAa;YACrB,GAAG,OAAO;SACX,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,WAAW,CAAC,OAA2B;QACnD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YACnC,oBAAoB,CAAC,QAAQ,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,oBAAoB,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,KAAK;QACjB,oBAAoB,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvC,CAAC;IAED;;OAEG;IACI,iBAAiB;QACtB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,IAAI,CAAC;YACH,wBAAwB;YACxB,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAE7C,sDAAsD;YACtD,MAAM,aAAa,GAAG,oBAAoB,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAE9D,uEAAuE;YACvE,sEAAsE;YACtE,yCAAyC;YACzC,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE7C,qEAAqE;YACrE,kDAAkD;YAClD,MAAM,SAAS,GAAG,IAAI,CAAC,4BAA4B,EAAE,CAAC;YAEtD,8EAA8E;YAC9E,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;YAEpD,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAC9B,EAAE,WAAW,EAAE,EACf,aAAa,EACb,UAAU,EACV,SAAS,EACT,YAAY,CACb,CAAC;YAEF,0CAA0C;YAC1C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC;YAEpD,0DAA0D;YAC1D,IAAI,CAAC,uBAAuB,EAAE,CAAC;YAE/B,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,0BAAkB,CAC1B,YAAY,EACZ,oCAAoC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9G,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,gBAAgB;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa;QACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAEM,KAAK,CAAC,gBAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAEM,KAAK,CAAC,kBAAkB;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,qBAAqB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAEM,KAAK,CAAC,gBAAgB;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAEM,KAAK,CAAC,kBAAkB;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,SAAS,CAAC;IAC1B,CAAC;IAEM,KAAK,CAAC,aAAa;QACxB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACI,gBAAgB;QACrB,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC,SAAS,CAAC;IAC5C,CAAC;IAED;;;;;OAKG;IACI,UAAU;QACf,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC,QAAQ,CAAC;IAC3C,CAAC;IAED;;;;;OAKG;IACI,UAAU;QACf,OAAO,IAAI,CAAC,iBAAiB,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC;IAC1D,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QAC/C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACxD,OAAO,YAAY,CAAC,WAAuC,CAAC,KAAK,IAAI,CAAC;IACxE,CAAC;IAED;;OAEG;IACK,iBAAiB;QACvB,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;QACtC,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;QAE9C,IAAI,UAAU,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACrC,OAAO,mBAAW,CAAC,IAAI,CAAC;QAC1B,CAAC;QAED,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;YAC7B,OAAO,mBAAW,CAAC,UAAU,CAAC;QAChC,CAAC;QAED,OAAO,mBAAW,CAAC,WAAW,CAAC;IACjC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACK,kBAAkB;QACxB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QACpD,MAAM,UAAU,GAAG,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,wBAAwB,CAAC,CAAC;QAEzF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,0BAAkB,CAC1B,YAAY,EACZ,iCAAiC,UAAU,8BAA8B;oBACvE,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;YACJ,CAAC;YACD,6DAA6D;YAC7D,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,0BAAkB,CAC1B,YAAY,EACZ,kBAAkB,UAAU,sBAAsB;gBAChD,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,0BAAkB,CAC1B,YAAY,EACZ,kBAAkB,UAAU,+CAA+C,CAC5E,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,4BAA4B;QAClC,MAAM,MAAM,GAA4B,EAAE,CAAC;QAE3C,2BAA2B;QAC3B,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACxE,4EAA4E;QAC5E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,IAAA,uBAAa,EAAC,mBAAmB,CAAC,EAAE,KAAK,CAAC,CAAC;QACrF,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,oBAAoB;QACpB,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QAC3B,CAAC;QAED,0BAA0B;QAC1B,MAAM,YAAY,GAA4B,EAAE,CAAC;QACjD,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;QAEnF,MAAM,eAAe,GAA4B,EAAE,CAAC;QACpD,IAAI,CAAC,cAAc,CACjB,eAAe,EACf,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,qBAAqB,EACjC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC3F,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC7F,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACzF,IAAI,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,YAAY,CAAC,OAAO,GAAG,eAAe,CAAC;QACzC,CAAC;QAED,MAAM,iBAAiB,GAA4B,EAAE,CAAC;QACtD,IAAI,CAAC,cAAc,CACjB,iBAAiB,EACjB,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAC3C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,iBAAiB,EACjB,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,6BAA6B,EACzC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,iBAAiB,EACjB,gBAAgB,EAChB,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,iBAAiB,EACjB,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,2BAA2B,EACvC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,iBAAiB,EACjB,kBAAkB,EAClB,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAClC,IAAI,CACL,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,YAAY,CAAC,SAAS,GAAG,iBAAiB,CAAC;QAC7C,CAAC;QAED,MAAM,YAAY,GAA4B,EAAE,CAAC;QACjD,IAAI,CAAC,cAAc,CACjB,YAAY,EACZ,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,YAAY,EACZ,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,wBAAwB,EACpC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QAC7F,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC3F,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,YAAY,CAAC,IAAI,GAAG,YAAY,CAAC;QACnC,CAAC;QAED,MAAM,cAAc,GAA4B,EAAE,CAAC;QACnD,IAAI,CAAC,cAAc,CACjB,cAAc,EACd,mBAAmB,EACnB,OAAO,CAAC,GAAG,CAAC,4BAA4B,EACxC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,cAAc,EACd,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,0BAA0B,EACtC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,cAAc,EACd,gBAAgB,EAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,EACnC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,cAAc,EACd,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,wBAAwB,EACpC,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,YAAY,CAAC,MAAM,GAAG,cAAc,CAAC;QACvC,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACrC,CAAC;QAED,yBAAyB;QACzB,MAAM,YAAY,GAA4B,EAAE,CAAC;QACjD,IAAI,CAAC,cAAc,CACjB,YAAY,EACZ,2BAA2B,EAC3B,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAChD,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,YAAY,EACZ,YAAY,EACZ,OAAO,CAAC,GAAG,CAAC,wBAAwB,EACpC,IAAI,CACL,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;QACrC,CAAC;QAED,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,OAAO,GAA4B,EAAE,CAAC;QAC5C,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QACtF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;QACpF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,eAAe,EACf,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,eAAe,EACf,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,CAAC,CAAC;QAClF,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,cAAc,EACd,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAC/C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,OAAO,EACP,cAAc,EACd,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAC5C,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QAC3B,CAAC;QAED,uEAAuE;QACvE,sEAAsE;QACtE,wDAAwD;QACxD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QAEjF,sEAAsE;QACtE,sEAAsE;QACtE,6DAA6D;QAC7D,wCAAwC;QACxC,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;QAC7F,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;QAC/B,CAAC;QAED,wEAAwE;QACxE,2DAA2D;QAC3D,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAEnF,kEAAkE;QAClE,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC5E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAC5E,uEAAuE;QACvE,sEAAsE;QACtE,4DAA4D;QAC5D,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACvF,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC;QACnE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,YAAY,GAAG,eAAe;iBAChC,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,yEAAyE;QACzE,yDAAyD;QACzD,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAChF,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;QAC1D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,WAAW;iBAC1B,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;QACnF,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC;QACjE,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,WAAW,GAAG,cAAc;iBAC9B,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;QAC7F,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;QAC/F,IAAI,CAAC,cAAc,CACjB,IAAI,EACJ,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAC/C,IAAI,CACL,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,sEAAsE;QACtE,yDAAyD;QACzD,yEAAyE;QACzE,sEAAsE;QACtE,6BAA6B;QAC7B,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QACvB,CAAC;QAED,uEAAuE;QACvE,iEAAiE;QACjE,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;QACrF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACxF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;QAC7F,IAAI,CAAC,cAAc,CACjB,MAAM,EACN,iBAAiB,EACjB,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAChD,IAAI,CACL,CAAC;QACF,IAAI,CAAC,cAAc,CACjB,MAAM,EACN,cAAc,EACd,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAC7C,IAAI,CACL,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;QACzB,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACK,cAAc,CACpB,MAA+B,EAC/B,GAAW,EACX,QAA4B,EAC5B,KAAc;QAEd,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxE,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,KAAa;QACzC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACK,SAAS,CAAC,GAAG,OAAkC;QACrD,MAAM,MAAM,GAA4B,EAAE,CAAC;QAE3C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;gBAAE,SAAS;YAE9C,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;gBACtB,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;oBACnD,IACE,MAAM,CAAC,GAAG,CAAC;wBACX,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ;wBAC/B,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ;wBAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;wBAC3B,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EACxB,CAAC;wBACD,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,CAC1B,MAAM,CAAC,GAAG,CAA4B,EACtC,GAAG,CAAC,GAAG,CAA4B,CACpC,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,SAAkB;QAC9C,IAAI,CAAC;YACH,OAAO,+BAAuB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,OAAC,CAAC,QAAQ,EAAE,CAAC;gBAChC,qCAAqC;gBACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACxC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;oBACxB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,QAAQ,EAAE,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;oBACtD,QAAQ,EAAE,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;iBACvD,CAAC,CAAC,CAAC;gBAEJ,MAAM,IAAI,0BAAkB,CAC1B,YAAY,EACZ,qCAAqC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAClG,EAAE,MAAM,EAAE,SAAS,EAAE,CACtB,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACK,uBAAuB;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEzB,MAAM,OAAO,GAAG;YACd,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACpC,IAAI,EAAE;gBACJ,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU;gBACrC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;gBACzC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO;aAClC;YACD,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,YAAY,EAAE;gBACZ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO;gBACzC,QAAQ,EAAE;oBACR,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,iBAAiB;oBAC3D,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,iBAAiB;oBAC/D,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,iBAAiB;oBACrD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,iBAAiB;iBAC1D;aACF;YACD,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;YACtC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,SAAS,EAAE;gBACT,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW;aACxD;YACD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,IAAI,EACF,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,MAAM;gBAC9B,CAAC,CAAC;oBACE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;oBAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;oBAC3B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI;oBAC3B,sBAAsB,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY;oBACvD,wDAAwD;oBACxD,6DAA6D;oBAC7D,2DAA2D;oBAC3D,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI;iBACnC;gBACH,CAAC,CAAC,SAAS;SAChB,CAAC;QAEF,eAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;;AA1rBH,oDA2rBC;AAED,mCAAmC;AAC5B,MAAM,gBAAgB,GAAG,GAA+B,EAAE,CAC/D,oBAAoB,CAAC,WAAW,EAAE,CAAC,gBAAgB,EAAE,CAAC;AAD3C,QAAA,gBAAgB,oBAC2B;AACjD,MAAM,aAAa,GAAG,GAAwB,EAAE,CACrD,oBAAoB,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC;AADxC,QAAA,aAAa,iBAC2B;AAC9C,MAAM,gBAAgB,GAAG,GAA2B,EAAE,CAC3D,oBAAoB,CAAC,WAAW,EAAE,CAAC,gBAAgB,EAAE,CAAC;AAD3C,QAAA,gBAAgB,oBAC2B;AACjD,MAAM,kBAAkB,GAAG,GAA6B,EAAE,CAC/D,oBAAoB,CAAC,WAAW,EAAE,CAAC,kBAAkB,EAAE,CAAC;AAD7C,QAAA,kBAAkB,sBAC2B;AACnD,MAAM,qBAAqB,GAAG,GAAgC,EAAE,CACrE,oBAAoB,CAAC,WAAW,EAAE,CAAC,qBAAqB,EAAE,CAAC;AADhD,QAAA,qBAAqB,yBAC2B;AACtD,MAAM,gBAAgB,GAAG,CAAC,WAAmB,EAAoB,EAAE,CACxE,oBAAoB,CAAC,WAAW,EAAE,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;AADtD,QAAA,gBAAgB,oBACsC;AAC5D,MAAM,gBAAgB,GAAG,GAA2B,EAAE,CAC3D,oBAAoB,CAAC,WAAW,EAAE,CAAC,gBAAgB,EAAE,CAAC;AAD3C,QAAA,gBAAgB,oBAC2B;AACjD,MAAM,UAAU,GAAG,GAAY,EAAE,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,CAAC;AAA5E,QAAA,UAAU,cAAkE;AAClF,MAAM,kBAAkB,GAAG,GAA6B,EAAE,CAC/D,oBAAoB,CAAC,WAAW,EAAE,CAAC,kBAAkB,EAAE,CAAC;AAD7C,QAAA,kBAAkB,sBAC2B;AACnD,MAAM,aAAa,GAAG,GAAwB,EAAE,CACrD,oBAAoB,CAAC,WAAW,EAAE,CAAC,aAAa,EAAE,CAAC;AADxC,QAAA,aAAa,iBAC2B;AAC9C,MAAM,gBAAgB,GAAG,GAAkB,EAAE,CAClD,oBAAoB,CAAC,WAAW,EAAE,CAAC,gBAAgB,EAAE,CAAC;AAD3C,QAAA,gBAAgB,oBAC2B"}

package/dist/config/types.d.ts

@@ -180,14 +180,17 @@ export declare const FeatureFlagsConfigSchema: z.ZodObject<{
     enableServerSideFiltering: z.ZodDefault<z.ZodBoolean>;
     enableAdvancedMetrics: z.ZodDefault<z.ZodBoolean>;
     enableExperimentalFeatures: z.ZodDefault<z.ZodBoolean>;
+    forceV1Api: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     enableServerSideFiltering: boolean;
     enableAdvancedMetrics: boolean;
     enableExperimentalFeatures: boolean;
+    forceV1Api: boolean;
 }, {
     enableServerSideFiltering?: boolean | undefined;
     enableAdvancedMetrics?: boolean | undefined;
     enableExperimentalFeatures?: boolean | undefined;
+    forceV1Api?: boolean | undefined;
 }>;
 export type FeatureFlagsConfig = z.infer<typeof FeatureFlagsConfigSchema>;
 export declare const ModuleToggleSchema: z.ZodUnion<[z.ZodBoolean, z.ZodObject<{
@@ -476,10 +479,11 @@ export type HttpConfig = z.infer<typeof HttpConfigSchema>;
 export declare const OidcConfigSchema: z.ZodObject<{
     issuer: z.ZodString;
     audience: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
-    jwksUri: z.ZodString;
-    allowedAlgs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    jwksUri: z.ZodEffects<z.ZodString, string, string>;
+    allowedAlgs: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
     clockSkewSec: z.ZodOptional<z.ZodNumber>;
     requiredScope: z.ZodOptional<z.ZodString>;
+    requireAtJwtTyp: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     issuer: string;
     audience: string | string[];
@@ -487,6 +491,7 @@ export declare const OidcConfigSchema: z.ZodObject<{
     allowedAlgs?: string[] | undefined;
     clockSkewSec?: number | undefined;
     requiredScope?: string | undefined;
+    requireAtJwtTyp?: boolean | undefined;
 }, {
     issuer: string;
     audience: string | string[];
@@ -494,6 +499,7 @@ export declare const OidcConfigSchema: z.ZodObject<{
     allowedAlgs?: string[] | undefined;
     clockSkewSec?: number | undefined;
     requiredScope?: string | undefined;
+    requireAtJwtTyp?: boolean | undefined;
 }>;
 export type OidcConfig = z.infer<typeof OidcConfigSchema>;
 export declare const VaultConfigSchema: z.ZodObject<{
@@ -695,14 +701,17 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         enableServerSideFiltering: z.ZodDefault<z.ZodBoolean>;
         enableAdvancedMetrics: z.ZodDefault<z.ZodBoolean>;
         enableExperimentalFeatures: z.ZodDefault<z.ZodBoolean>;
+        forceV1Api: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         enableServerSideFiltering: boolean;
         enableAdvancedMetrics: boolean;
         enableExperimentalFeatures: boolean;
+        forceV1Api: boolean;
     }, {
         enableServerSideFiltering?: boolean | undefined;
         enableAdvancedMetrics?: boolean | undefined;
         enableExperimentalFeatures?: boolean | undefined;
+        forceV1Api?: boolean | undefined;
     }>>;
     modules: z.ZodDefault<z.ZodObject<{
         tasks: z.ZodDefault<z.ZodUnion<[z.ZodBoolean, z.ZodObject<{
@@ -973,10 +982,11 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
     oidc: z.ZodOptional<z.ZodObject<{
         issuer: z.ZodString;
         audience: z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodString, "many">]>;
-        jwksUri: z.ZodString;
-        allowedAlgs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        jwksUri: z.ZodEffects<z.ZodString, string, string>;
+        allowedAlgs: z.ZodOptional<z.ZodEffects<z.ZodArray<z.ZodString, "many">, string[], string[]>>;
         clockSkewSec: z.ZodOptional<z.ZodNumber>;
         requiredScope: z.ZodOptional<z.ZodString>;
+        requireAtJwtTyp: z.ZodOptional<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         issuer: string;
         audience: string | string[];
@@ -984,6 +994,7 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         allowedAlgs?: string[] | undefined;
         clockSkewSec?: number | undefined;
         requiredScope?: string | undefined;
+        requireAtJwtTyp?: boolean | undefined;
     }, {
         issuer: string;
         audience: string | string[];
@@ -991,6 +1002,7 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         allowedAlgs?: string[] | undefined;
         clockSkewSec?: number | undefined;
         requiredScope?: string | undefined;
+        requireAtJwtTyp?: boolean | undefined;
     }>>;
     vault: z.ZodDefault<z.ZodObject<{
         path: z.ZodOptional<z.ZodString>;
@@ -1075,6 +1087,7 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         enableServerSideFiltering: boolean;
         enableAdvancedMetrics: boolean;
         enableExperimentalFeatures: boolean;
+        forceV1Api: boolean;
     };
     modules: {
         tasks: boolean | z.objectOutputType<{
@@ -1151,6 +1164,7 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         allowedAlgs?: string[] | undefined;
         clockSkewSec?: number | undefined;
         requiredScope?: string | undefined;
+        requireAtJwtTyp?: boolean | undefined;
     } | undefined;
 }, {
     environment?: Environment | undefined;
@@ -1209,6 +1223,7 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         enableServerSideFiltering?: boolean | undefined;
         enableAdvancedMetrics?: boolean | undefined;
         enableExperimentalFeatures?: boolean | undefined;
+        forceV1Api?: boolean | undefined;
     } | undefined;
     modules?: {
         tasks?: boolean | z.objectInputType<{
@@ -1275,6 +1290,7 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         allowedAlgs?: string[] | undefined;
         clockSkewSec?: number | undefined;
         requiredScope?: string | undefined;
+        requireAtJwtTyp?: boolean | undefined;
     } | undefined;
     vault?: {
         path?: string | undefined;
@@ -1343,6 +1359,7 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         enableServerSideFiltering: boolean;
         enableAdvancedMetrics: boolean;
         enableExperimentalFeatures: boolean;
+        forceV1Api: boolean;
     };
     modules: {
         tasks: boolean | z.objectOutputType<{
@@ -1419,6 +1436,7 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         allowedAlgs?: string[] | undefined;
         clockSkewSec?: number | undefined;
         requiredScope?: string | undefined;
+        requireAtJwtTyp?: boolean | undefined;
     } | undefined;
 }, {
     environment?: Environment | undefined;
@@ -1477,6 +1495,7 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         enableServerSideFiltering?: boolean | undefined;
         enableAdvancedMetrics?: boolean | undefined;
         enableExperimentalFeatures?: boolean | undefined;
+        forceV1Api?: boolean | undefined;
     } | undefined;
     modules?: {
         tasks?: boolean | z.objectInputType<{
@@ -1543,6 +1562,7 @@ export declare const ApplicationConfigSchema: z.ZodEffects<z.ZodObject<{
         allowedAlgs?: string[] | undefined;
         clockSkewSec?: number | undefined;
         requiredScope?: string | undefined;
+        requireAtJwtTyp?: boolean | undefined;
     } | undefined;
     vault?: {
         path?: string | undefined;

package/dist/config/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,oBAAY,WAAW;IACrB,WAAW,gBAAgB;IAC3B,IAAI,SAAS;IACb,UAAU,eAAe;CAC1B;AAGD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAI3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAI9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAYhE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuChC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;EAInC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAS1E,eAAO,MAAM,kBAAkB;;;;;;4BAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAE7D;AAMD,eAAO,MAAM,qBAAqB,uEAKxB,CAAC;AAEX,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8C9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAQhE,eAAO,MAAM,qBAAqB;;;;;;EAEhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAOpE,eAAO,MAAM,mBAAmB,8BAA4B,CAAC;AAE7D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAUhE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;EAgB3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAW1D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;EAkB3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAY1D,eAAO,MAAM,iBAAiB;;;;;;EAE5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAa5D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAqB7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAG9D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsEhC,CAAC;AAEL,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAGxE,qBAAa,kBAAmB,SAAQ,KAAK;aAEzB,KAAK,EAAE,MAAM;aAEb,KAAK,CAAC,EAAE,OAAO;gBAFf,KAAK,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,OAAO,YAAA;CAKlC;AAGD,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,uCAAuC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,oBAAY,WAAW;IACrB,WAAW,gBAAgB;IAC3B,IAAI,SAAS;IACb,UAAU,eAAe;CAC1B;AAGD,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAI3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,mBAAmB;;;;;;;;;;;;EAI9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAYhE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuChC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;EAWnC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAS1E,eAAO,MAAM,kBAAkB;;;;;;4BAG7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAE7D;AAMD,eAAO,MAAM,qBAAqB,uEAKxB,CAAC;AAEX,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8C9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAQhE,eAAO,MAAM,qBAAqB;;;;;;EAEhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAOpE,eAAO,MAAM,mBAAmB,8BAA4B,CAAC;AAE7D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAUhE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;EAgB3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAW1D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;EAuD3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAY1D,eAAO,MAAM,iBAAiB;;;;;;EAE5B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAa5D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EA8B7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAG9D,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsEhC,CAAC;AAEL,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAGxE,qBAAa,kBAAmB,SAAQ,KAAK;aAEzB,KAAK,EAAE,MAAM;aAEb,KAAK,CAAC,EAAE,OAAO;gBAFf,KAAK,EAAE,MAAM,EAC7B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,OAAO,YAAA;CAKlC;AAGD,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,uCAAuC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC"}

package/dist/config/types.js

@@ -76,6 +76,13 @@ exports.FeatureFlagsConfigSchema = zod_1.z.object({
     enableServerSideFiltering: zod_1.z.boolean().default(true),
     enableAdvancedMetrics: zod_1.z.boolean().default(false),
     enableExperimentalFeatures: zod_1.z.boolean().default(false),
+    // Kill switch for the v2 API fast path: when true, every operation uses
+    // the v1 API even if this session's capability probe reported v2 support.
+    // Config file key: `featureFlags.forceV1Api`. Env override:
+    // `VIKUNJA_MCP_FORCE_V1_API` (env always wins, per standard layering).
+    // Deliberately absent from ENVIRONMENT_PROFILES so it stays false in every
+    // environment unless explicitly set. See src/utils/api-version.ts.
+    forceV1Api: zod_1.z.boolean().default(false),
 });
 // Module Enable/Disable Configuration Schema
 //
@@ -205,17 +212,52 @@ exports.OidcConfigSchema = zod_1.z.object({
     // Required audience value(s) (`oidc.audience`). Env form is a
     // comma-separated list; a single value stays a string.
     audience: zod_1.z.union([zod_1.z.string().min(1), zod_1.z.array(zod_1.z.string().min(1)).min(1)]),
-    // JWKS endpoint URL to fetch signing keys from (`oidc.jwksUri`).
-    jwksUri: zod_1.z.string().url(),
+    // JWKS endpoint URL to fetch signing keys from (`oidc.jwksUri`). Must be
+    // `https:` — docs/OIDC-RESOURCE-SERVER.md documents signing keys as fetched
+    // "over HTTPS" as a security invariant; a plain `http://` endpoint lets an
+    // on-path attacker substitute keys and mint tokens for any identity.
+    jwksUri: zod_1.z
+        .string()
+        .url()
+        .refine((value) => {
+        try {
+            return new URL(value).protocol === 'https:';
+        }
+        catch {
+            // Already-invalid URLs are rejected by .url() above with its own
+            // message; this refinement only adds the scheme check.
+            return false;
+        }
+    }, {
+        message: 'oidc.jwksUri must use https:// — signing keys must not be fetched over plaintext',
+    }),
     // Allowed JWS `alg` values (`oidc.allowedAlgs`). Defaults (in the validator)
-    // to `['RS256']`; `none` is never accepted.
-    allowedAlgs: zod_1.z.array(zod_1.z.string().min(1)).min(1).optional(),
+    // to `['RS256']`. `none` is never accepted by `jose` itself, but is also
+    // rejected here at config load — a misconfiguration should fail loud at
+    // startup rather than rely solely on the verifier's own backstop. `HS*`
+    // algorithms are still permitted: unlike `none`, there is a legitimate
+    // (if discouraged) reason to configure one, see
+    // `OidcJwtValidatorConfig.allowedAlgs`'s doc comment.
+    allowedAlgs: zod_1.z
+        .array(zod_1.z.string().min(1))
+        .min(1)
+        .refine((algs) => !algs.some((alg) => alg.toLowerCase() === 'none'), {
+        message: "oidc.allowedAlgs must not include 'none'",
+    })
+        .optional(),
     // Bounded clock-skew tolerance in seconds (`oidc.clockSkewSec`), applied to
-    // `exp`/`nbf`/`iat`. Validator default: 60.
-    clockSkewSec: zod_1.z.number().int().nonnegative().optional(),
+    // `exp`/`nbf`/`iat`. Validator default: 60. Capped at 300 (5 minutes): jose
+    // applies this value as `clockTolerance` on `exp` itself, so an
+    // unbounded value would let an operator (deliberately or via a fat-fingered
+    // env var) make already-expired tokens still verify.
+    clockSkewSec: zod_1.z.number().int().nonnegative().max(300).optional(),
     // Optional coarse scope gate (`oidc.requiredScope`) — a validly
     // authenticated token missing it is a 403, not a 401.
     requiredScope: zod_1.z.string().min(1).optional(),
+    // Optional RFC 9068 `typ` enforcement (`oidc.requireAtJwtTyp`) — off by
+    // default. See `OidcJwtValidatorConfig.requireAtJwtTyp`'s doc comment for
+    // what this closes and why it isn't the default.
+    requireAtJwtTyp: zod_1.z.boolean().optional(),
 });
 // Credential vault configuration (docs/OIDC-RESOURCE-SERVER.md §3c, D1/D4).
 //
@@ -257,11 +299,20 @@ exports.EnrollConfigSchema = zod_1.z.object({
     // Expiry, in days, of the auto-minted per-user Vikunja API token
     // (`VIKUNJA_MCP_ENROLL_TOKEN_EXPIRY_DAYS`). Default: 365. When a token
     // expires the user simply re-runs `vikunja_auth provision` and clicks the
-    // link again — re-enrollment mints and vaults a fresh token.
-    tokenExpiryDays: zod_1.z.number().int().positive().default(365),
+    // link again — re-enrollment mints and vaults a fresh token. Capped at 3650
+    // (10 years): unbounded, this feeds `Date` arithmetic in
+    // `src/transport/enrollment.ts` directly (`Date.now() + tokenExpiryDays *
+    // 24 * 3600 * 1000`), and an extreme value overflows `Date`'s valid range,
+    // throwing on every enrollment callback rather than minting a long-lived
+    // token.
+    tokenExpiryDays: zod_1.z.number().int().positive().max(3650).default(365),
     // Enrollment ticket lifetime in seconds (`VIKUNJA_MCP_ENROLL_TICKET_TTL_SEC`)
     // — how long the returned enrollment URL stays clickable. Default: 600.
-    ticketTtlSec: zod_1.z.number().int().positive().default(600),
+    // Capped at 3600 (1 hour): this is a short-lived, leak-sensitive credential
+    // (it travels in a URL and as an OAuth `state` value), so an unbounded
+    // value is the same "operator tolerance with no ceiling" class of bug as
+    // `clockSkewSec` above, not a legitimate long-lived-knob use case.
+    ticketTtlSec: zod_1.z.number().int().positive().max(3600).default(600),
 });
 // Complete Application Configuration Schema
 exports.ApplicationConfigSchema = zod_1.z.object({