@authup/server-core 1.0.0-beta.46 → 1.0.0-beta.47

package/dist/core/mail/format/types.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Structural building blocks of a mail body. Templates compose blocks;
+ * the html/text formatters turn the same block list into both mail parts,
+ * so the two representations cannot drift apart.
+ */
+export type MailParagraphBlock = {
+    type: 'paragraph';
+    text: string;
+};
+export type MailCodeBlock = {
+    type: 'code';
+    label: string;
+    value: string;
+};
+export type MailActionBlock = {
+    type: 'action';
+    label: string;
+    url: string;
+};
+export type MailNoteBlock = {
+    type: 'note';
+    text: string;
+};
+export type MailBlock = MailParagraphBlock | MailCodeBlock | MailActionBlock | MailNoteBlock;
+export type MailDocument = {
+    lang?: string;
+    preview?: string;
+    blocks: MailBlock[];
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/mail/format/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/mail/format/types.ts"],"names":[],"mappings":"AAOA;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG,kBAAkB,GAC1C,aAAa,GACb,eAAe,GACf,aAAa,CAAC;AAEd,MAAM,MAAM,YAAY,GAAG;IAEvB,IAAI,CAAC,EAAE,MAAM,CAAC;IAEd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,EAAE,CAAC;CACvB,CAAC"}

package/dist/core/mail/format/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/core/mail/index.d.ts

@@ -1,2 +1,5 @@
+export * from './format/types.ts';
+export * from './renderer.ts';
+export * from './template/index.ts';
 export * from './types.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/core/mail/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/mail/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/mail/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,YAAY,CAAC"}

package/dist/core/mail/index.mjs

@@ -1,4 +1,9 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-export {};
+import { defineMailTemplate } from "./template/define.mjs";
+import { MailTemplateName } from "./template/types.mjs";
+import { MAIL_TEMPLATE_REGISTRY } from "./template/registry.mjs";
+import { MailTemplateRenderer } from "./renderer.mjs";
+import "./template/index.mjs";
+export { MAIL_TEMPLATE_REGISTRY, MailTemplateName, MailTemplateRenderer, defineMailTemplate };

package/dist/core/mail/renderer.d.ts

@@ -0,0 +1,10 @@
+import { Ilingo } from 'ilingo';
+import type { MailTemplateName } from './template/types.ts';
+import type { IMailTemplateRenderer, MailContent, MailRenderInput } from './types.ts';
+export declare class MailTemplateRenderer implements IMailTemplateRenderer {
+    protected ilingo: Ilingo;
+    constructor();
+    render<N extends MailTemplateName>(input: MailRenderInput<N>): Promise<MailContent>;
+    protected translate(locale: string, key: string, data?: Record<string, any>): Promise<string>;
+}
+//# sourceMappingURL=renderer.d.ts.map

package/dist/core/mail/renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.d.ts","sourceRoot":"","sources":["../../../src/core/mail/renderer.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,MAAM,EAAe,MAAM,QAAQ,CAAC;AAM7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EACR,qBAAqB,EACrB,WAAW,EACX,eAAe,EAClB,MAAM,YAAY,CAAC;AAEpB,qBAAa,oBAAqB,YAAW,qBAAqB;IAC9D,SAAS,CAAC,MAAM,EAAG,MAAM,CAAC;;IASpB,MAAM,CAAC,CAAC,SAAS,gBAAgB,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;cA6BzE,SAAS,CACrB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC;CAcrB"}

package/dist/core/mail/renderer.mjs

@@ -0,0 +1,49 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { isSafeActionURL } from "./format/blocks.mjs";
+import { renderHtmlDocument } from "./format/html.mjs";
+import { renderTextDocument } from "./format/text.mjs";
+import { MAIL_TEMPLATE_REGISTRY } from "./template/registry.mjs";
+import { InternalError } from "@authup/errors";
+import { CATALOGS, DEFAULT_LOCALE, TranslatorTranslationNamespace, matchLocale } from "@authup/i18n";
+import { Ilingo, MemoryStore } from "ilingo";
+//#region src/core/mail/renderer.ts
+var MailTemplateRenderer = class {
+	ilingo;
+	constructor() {
+		this.ilingo = new Ilingo({
+			store: new MemoryStore({ data: CATALOGS }),
+			locale: DEFAULT_LOCALE
+		});
+	}
+	async render(input) {
+		const template = MAIL_TEMPLATE_REGISTRY[input.template];
+		const locale = matchLocale(input.locale) ?? DEFAULT_LOCALE;
+		const output = await template.build(input.params, (key, data) => this.translate(locale, key, data));
+		const document = {
+			lang: locale,
+			preview: output.preview,
+			blocks: output.blocks.filter((block) => block.type !== "action" || isSafeActionURL(block.url))
+		};
+		return {
+			subject: output.subject,
+			html: renderHtmlDocument(document),
+			text: renderTextDocument(document)
+		};
+	}
+	async translate(locale, key, data) {
+		const value = await this.ilingo.get({
+			namespace: TranslatorTranslationNamespace.MAIL,
+			key,
+			locale,
+			data
+		});
+		if (typeof value === "undefined") throw new InternalError(`The mail translation "${key}" (locale: ${locale}) could not be resolved.`);
+		return value;
+	}
+};
+//#endregion
+export { MailTemplateRenderer };
+
+//# sourceMappingURL=renderer.mjs.map

package/dist/core/mail/renderer.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"renderer.mjs","names":["InternalError","CATALOGS","DEFAULT_LOCALE","TranslatorTranslationNamespace","matchLocale","Ilingo","MemoryStore","isSafeActionURL","renderHtmlDocument","renderTextDocument","MAIL_TEMPLATE_REGISTRY","MailTemplateRenderer","ilingo","store","data","locale","render","input","template","output","build","params","key","translate","document","lang","preview","blocks","filter","block","type","url","subject","html","text","value","get","namespace","MAIL"],"sources":["../../../src/core/mail/renderer.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { InternalError } from '@authup/errors';\nimport {\n    CATALOGS,\n    DEFAULT_LOCALE,\n    TranslatorTranslationNamespace,\n    matchLocale,\n} from '@authup/i18n';\nimport { Ilingo, MemoryStore } from 'ilingo';\nimport { isSafeActionURL } from './format/blocks.ts';\nimport { renderHtmlDocument } from './format/html.ts';\nimport { renderTextDocument } from './format/text.ts';\nimport type { MailDocument } from './format/types.ts';\nimport { MAIL_TEMPLATE_REGISTRY } from './template/registry.ts';\nimport type { MailTemplateName } from './template/types.ts';\nimport type {\n    IMailTemplateRenderer,\n    MailContent,\n    MailRenderInput,\n} from './types.ts';\n\nexport class MailTemplateRenderer implements IMailTemplateRenderer {\n    protected ilingo : Ilingo;\n\n    constructor() {\n        this.ilingo = new Ilingo({\n            store: new MemoryStore({ data: CATALOGS }),\n            locale: DEFAULT_LOCALE,\n        });\n    }\n\n    async render<N extends MailTemplateName>(input: MailRenderInput<N>): Promise<MailContent> {\n        const template = MAIL_TEMPLATE_REGISTRY[input.template];\n\n        // Narrow the requested BCP-47 tag onto an authored catalog locale\n        // up front, so the copy and the rendered `<html lang>` agree.\n        const locale = matchLocale(input.locale) ?? DEFAULT_LOCALE;\n\n        const output = await template.build(\n            input.params,\n            (key, data) => this.translate(locale, key, data),\n        );\n\n        const document : MailDocument = {\n            lang: locale,\n            preview: output.preview,\n            // Central guard: a call-to-action never renders with a non-http(s)\n            // URL, regardless of what an individual template composed.\n            blocks: output.blocks.filter(\n                (block) => block.type !== 'action' || isSafeActionURL(block.url),\n            ),\n        };\n\n        return {\n            subject: output.subject,\n            html: renderHtmlDocument(document),\n            text: renderTextDocument(document),\n        };\n    }\n\n    protected async translate(\n        locale: string,\n        key: string,\n        data?: Record<string, any>,\n    ): Promise<string> {\n        const value = await this.ilingo.get({\n            namespace: TranslatorTranslationNamespace.MAIL,\n            key,\n            locale,\n            data,\n        });\n\n        if (typeof value === 'undefined') {\n            throw new InternalError(`The mail translation \"${key}\" (locale: ${locale}) could not be resolved.`);\n        }\n\n        return value;\n    }\n}\n"],"mappings":";;;;;;;;;;;AA2BA,IAAaW,uBAAb,MAAaA;CACCC;CAEV,cAAc;EACV,KAAKA,SAAS,IAAIP,OAAO;GACrBQ,OAAO,IAAIP,YAAY,EAAEQ,MAAMb,SAAS,CAAA;GACxCc,QAAQb;EACZ,CAAA;CACJ;CAEA,MAAMc,OAAmCC,OAAiD;EACtF,MAAMC,WAAWR,uBAAuBO,MAAMC;EAI9C,MAAMH,SAASX,YAAYa,MAAMF,MAAM,KAAKb;EAE5C,MAAMiB,SAAS,MAAMD,SAASE,MAC1BH,MAAMI,SACLC,KAAKR,SAAS,KAAKS,UAAUR,QAAQO,KAAKR,IAAAA,CAAAA;EAG/C,MAAMU,WAA0B;GAC5BC,MAAMV;GACNW,SAASP,OAAOO;GAGhBC,QAAQR,OAAOQ,OAAOC,QACjBC,UAAUA,MAAMC,SAAS,YAAYvB,gBAAgBsB,MAAME,GAAG,CAAA;EAEvE;EAEA,OAAO;GACHC,SAASb,OAAOa;GAChBC,MAAMzB,mBAAmBgB,QAAAA;GACzBU,MAAMzB,mBAAmBe,QAAAA;EAC7B;CACJ;CAEA,MAAgBD,UACZR,QACAO,KACAR,MACe;EACf,MAAMqB,QAAQ,MAAM,KAAKvB,OAAOwB,IAAI;GAChCC,WAAWlC,+BAA+BmC;GAC1ChB;GACAP;GACAD;EACJ,CAAA;EAEA,IAAI,OAAOqB,UAAU,aACjB,MAAM,IAAInC,cAAc,yBAAyBsB,IAAI,aAAaP,OAAO,yBAAyB;EAGtG,OAAOoB;CACX;AACJ"}

package/dist/core/mail/template/define.d.ts

@@ -0,0 +1,7 @@
+import type { MailTemplate, MailTemplateName } from './types.ts';
+/**
+ * Identity helper that pins down the per-template params (via `name`) so
+ * `build` is fully typed at the call site.
+ */
+export declare function defineMailTemplate<N extends MailTemplateName>(template: MailTemplate<N>): MailTemplate<N>;
+//# sourceMappingURL=define.d.ts.map

package/dist/core/mail/template/define.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.d.ts","sourceRoot":"","sources":["../../../../src/core/mail/template/define.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEjE;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,gBAAgB,EACzD,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,GAC1B,YAAY,CAAC,CAAC,CAAC,CAEjB"}

package/dist/core/mail/template/define.mjs

@@ -0,0 +1,14 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/core/mail/template/define.ts
+/**
+* Identity helper that pins down the per-template params (via `name`) so
+* `build` is fully typed at the call site.
+*/ function defineMailTemplate(template) {
+	return template;
+}
+//#endregion
+export { defineMailTemplate };
+
+//# sourceMappingURL=define.mjs.map

package/dist/core/mail/template/define.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"define.mjs","names":["defineMailTemplate","template"],"sources":["../../../../src/core/mail/template/define.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { MailTemplate, MailTemplateName } from './types.ts';\n\n/**\n * Identity helper that pins down the per-template params (via `name`) so\n * `build` is fully typed at the call site.\n */\nexport function defineMailTemplate<N extends MailTemplateName>(\n    template: MailTemplate<N>,\n): MailTemplate<N> {\n    return template;\n}\n"],"mappings":";;;;;;;GAaA,SAAgBA,mBACZC,UAAyB;CAEzB,OAAOA;AACX"}

package/dist/core/mail/template/index.d.ts

@@ -0,0 +1,4 @@
+export * from './define.ts';
+export * from './registry.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/mail/template/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/mail/template/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC"}

package/dist/core/mail/template/index.mjs

@@ -0,0 +1,7 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { defineMailTemplate } from "./define.mjs";
+import { MailTemplateName } from "./types.mjs";
+import { MAIL_TEMPLATE_REGISTRY } from "./registry.mjs";
+export { MAIL_TEMPLATE_REGISTRY, MailTemplateName, defineMailTemplate };

package/dist/core/mail/template/registry.d.ts

@@ -0,0 +1,6 @@
+import type { MailTemplate } from './types.ts';
+import { MailTemplateName } from './types.ts';
+export declare const MAIL_TEMPLATE_REGISTRY: {
+    [N in MailTemplateName]: MailTemplate<N>;
+};
+//# sourceMappingURL=registry.d.ts.map

package/dist/core/mail/template/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/core/mail/template/registry.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,eAAO,MAAM,sBAAsB,EAAE;KAAG,CAAC,IAAI,gBAAgB,GAAG,YAAY,CAAC,CAAC,CAAC;CAG9E,CAAC"}

package/dist/core/mail/template/registry.mjs

@@ -0,0 +1,15 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { MailTemplateName } from "./types.mjs";
+import { passwordResetMailTemplate } from "./templates/password-reset.mjs";
+import { registrationActivationMailTemplate } from "./templates/registration-activation.mjs";
+//#region src/core/mail/template/registry.ts
+const MAIL_TEMPLATE_REGISTRY = {
+	[MailTemplateName.REGISTRATION_ACTIVATION]: registrationActivationMailTemplate,
+	[MailTemplateName.PASSWORD_RESET]: passwordResetMailTemplate
+};
+//#endregion
+export { MAIL_TEMPLATE_REGISTRY };
+
+//# sourceMappingURL=registry.mjs.map

package/dist/core/mail/template/registry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.mjs","names":["passwordResetMailTemplate","registrationActivationMailTemplate","MailTemplateName","MAIL_TEMPLATE_REGISTRY","REGISTRATION_ACTIVATION","PASSWORD_RESET"],"sources":["../../../../src/core/mail/template/registry.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { passwordResetMailTemplate } from './templates/password-reset.ts';\nimport { registrationActivationMailTemplate } from './templates/registration-activation.ts';\nimport type { MailTemplate } from './types.ts';\nimport { MailTemplateName } from './types.ts';\n\nexport const MAIL_TEMPLATE_REGISTRY: { [N in MailTemplateName]: MailTemplate<N> } = {\n    [MailTemplateName.REGISTRATION_ACTIVATION]: registrationActivationMailTemplate,\n    [MailTemplateName.PASSWORD_RESET]: passwordResetMailTemplate,\n};\n"],"mappings":";;;;;;;AAYA,MAAaG,yBAAuE;EAC/ED,iBAAiBE,0BAA0BH;EAC3CC,iBAAiBG,iBAAiBL;AACvC"}

package/dist/core/mail/template/templates/password-reset.d.ts

@@ -0,0 +1,3 @@
+import { MailTemplateName } from '../types.ts';
+export declare const passwordResetMailTemplate: import("../types.ts").MailTemplate<MailTemplateName.PASSWORD_RESET>;
+//# sourceMappingURL=password-reset.d.ts.map

package/dist/core/mail/template/templates/password-reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.d.ts","sourceRoot":"","sources":["../../../../../src/core/mail/template/templates/password-reset.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,eAAO,MAAM,yBAAyB,qEA2BpC,CAAC"}

package/dist/core/mail/template/templates/password-reset.mjs

@@ -0,0 +1,36 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { action, code, note, paragraph } from "../../format/blocks.mjs";
+import { defineMailTemplate } from "../define.mjs";
+import { MailTemplateName } from "../types.mjs";
+import { TranslatorTranslationMailKey } from "@authup/i18n";
+//#region src/core/mail/template/templates/password-reset.ts
+const passwordResetMailTemplate = defineMailTemplate({
+	name: MailTemplateName.PASSWORD_RESET,
+	build: async (params, t) => {
+		const [subject, intro, codeLabel, actionLabel, hint] = await Promise.all([
+			t(TranslatorTranslationMailKey.PASSWORD_RESET_SUBJECT),
+			t(TranslatorTranslationMailKey.PASSWORD_RESET_INTRO),
+			t(TranslatorTranslationMailKey.CODE),
+			t(TranslatorTranslationMailKey.PASSWORD_RESET_ACTION),
+			t(TranslatorTranslationMailKey.PASSWORD_RESET_HINT)
+		]);
+		const expiry = params.expiresInMinutes ? await t(TranslatorTranslationMailKey.PASSWORD_RESET_EXPIRY, { minutes: params.expiresInMinutes }) : void 0;
+		return {
+			subject,
+			preview: intro,
+			blocks: [
+				paragraph(intro),
+				code(codeLabel, params.code),
+				...params.url ? [action(actionLabel, params.url)] : [],
+				...expiry ? [note(expiry)] : [],
+				note(hint)
+			]
+		};
+	}
+});
+//#endregion
+export { passwordResetMailTemplate };
+
+//# sourceMappingURL=password-reset.mjs.map

package/dist/core/mail/template/templates/password-reset.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.mjs","names":["TranslatorTranslationMailKey","action","code","note","paragraph","defineMailTemplate","MailTemplateName","passwordResetMailTemplate","name","PASSWORD_RESET","build","params","t","subject","intro","codeLabel","actionLabel","hint","Promise","all","PASSWORD_RESET_SUBJECT","PASSWORD_RESET_INTRO","CODE","PASSWORD_RESET_ACTION","PASSWORD_RESET_HINT","expiry","expiresInMinutes","PASSWORD_RESET_EXPIRY","minutes","undefined","preview","blocks","url"],"sources":["../../../../../src/core/mail/template/templates/password-reset.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TranslatorTranslationMailKey } from '@authup/i18n';\nimport { \n    action, \n    code, \n    note, \n    paragraph, \n} from '../../format/blocks.ts';\nimport { defineMailTemplate } from '../define.ts';\nimport { MailTemplateName } from '../types.ts';\n\nexport const passwordResetMailTemplate = defineMailTemplate({\n    name: MailTemplateName.PASSWORD_RESET,\n    build: async (params, t) => {\n        const [subject, intro, codeLabel, actionLabel, hint] = await Promise.all([\n            t(TranslatorTranslationMailKey.PASSWORD_RESET_SUBJECT),\n            t(TranslatorTranslationMailKey.PASSWORD_RESET_INTRO),\n            t(TranslatorTranslationMailKey.CODE),\n            t(TranslatorTranslationMailKey.PASSWORD_RESET_ACTION),\n            t(TranslatorTranslationMailKey.PASSWORD_RESET_HINT),\n        ]);\n\n        const expiry = params.expiresInMinutes ?\n            await t(TranslatorTranslationMailKey.PASSWORD_RESET_EXPIRY, { minutes: params.expiresInMinutes }) :\n            undefined;\n\n        return {\n            subject,\n            preview: intro,\n            blocks: [\n                paragraph(intro),\n                code(codeLabel, params.code),\n                ...(params.url ? [action(actionLabel, params.url)] : []),\n                ...(expiry ? [note(expiry)] : []),\n                note(hint),\n            ],\n        };\n    },\n});\n"],"mappings":";;;;;;;;AAiBA,MAAaO,4BAA4BF,mBAAmB;CACxDG,MAAMF,iBAAiBG;CACvBC,OAAO,OAAOC,QAAQC,MAAAA;EAClB,MAAM,CAACC,SAASC,OAAOC,WAAWC,aAAaC,QAAQ,MAAMC,QAAQC,IAAI;GACrEP,EAAEZ,6BAA6BoB,sBAAsB;GACrDR,EAAEZ,6BAA6BqB,oBAAoB;GACnDT,EAAEZ,6BAA6BsB,IAAI;GACnCV,EAAEZ,6BAA6BuB,qBAAqB;GACpDX,EAAEZ,6BAA6BwB,mBAAmB;GACrD;EAED,MAAMC,SAASd,OAAOe,mBAClB,MAAMd,EAAEZ,6BAA6B2B,uBAAuB,EAAEC,SAASjB,OAAOe,iBAAiB,CAAA,IAC/FG,KAAAA;EAEJ,OAAO;GACHhB;GACAiB,SAAShB;GACTiB,QAAQ;IACJ3B,UAAUU,KAAAA;IACVZ,KAAKa,WAAWJ,OAAOT,IAAI;OACvBS,OAAOqB,MAAM,CAAC/B,OAAOe,aAAaL,OAAOqB,GAAG,CAAA,IAAK,CAAA;OACjDP,SAAS,CAACtB,KAAKsB,MAAAA,CAAAA,IAAW,CAAA;IAC9BtB,KAAKc,IAAAA;;EAEb;CACJ;AACJ,CAAA"}

package/dist/core/mail/template/templates/registration-activation.d.ts

@@ -0,0 +1,3 @@
+import { MailTemplateName } from '../types.ts';
+export declare const registrationActivationMailTemplate: import("../types.ts").MailTemplate<MailTemplateName.REGISTRATION_ACTIVATION>;
+//# sourceMappingURL=registration-activation.d.ts.map

package/dist/core/mail/template/templates/registration-activation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration-activation.d.ts","sourceRoot":"","sources":["../../../../../src/core/mail/template/templates/registration-activation.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,eAAO,MAAM,kCAAkC,8EAsB7C,CAAC"}

package/dist/core/mail/template/templates/registration-activation.mjs

@@ -0,0 +1,34 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { action, code, note, paragraph } from "../../format/blocks.mjs";
+import { defineMailTemplate } from "../define.mjs";
+import { MailTemplateName } from "../types.mjs";
+import { TranslatorTranslationMailKey } from "@authup/i18n";
+//#region src/core/mail/template/templates/registration-activation.ts
+const registrationActivationMailTemplate = defineMailTemplate({
+	name: MailTemplateName.REGISTRATION_ACTIVATION,
+	build: async (params, t) => {
+		const [subject, intro, codeLabel, actionLabel, hint] = await Promise.all([
+			t(TranslatorTranslationMailKey.REGISTRATION_ACTIVATION_SUBJECT),
+			t(TranslatorTranslationMailKey.REGISTRATION_ACTIVATION_INTRO),
+			t(TranslatorTranslationMailKey.CODE),
+			t(TranslatorTranslationMailKey.REGISTRATION_ACTIVATION_ACTION),
+			t(TranslatorTranslationMailKey.REGISTRATION_ACTIVATION_HINT)
+		]);
+		return {
+			subject,
+			preview: intro,
+			blocks: [
+				paragraph(intro),
+				code(codeLabel, params.code),
+				...params.url ? [action(actionLabel, params.url)] : [],
+				note(hint)
+			]
+		};
+	}
+});
+//#endregion
+export { registrationActivationMailTemplate };
+
+//# sourceMappingURL=registration-activation.mjs.map

package/dist/core/mail/template/templates/registration-activation.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration-activation.mjs","names":["TranslatorTranslationMailKey","action","code","note","paragraph","defineMailTemplate","MailTemplateName","registrationActivationMailTemplate","name","REGISTRATION_ACTIVATION","build","params","t","subject","intro","codeLabel","actionLabel","hint","Promise","all","REGISTRATION_ACTIVATION_SUBJECT","REGISTRATION_ACTIVATION_INTRO","CODE","REGISTRATION_ACTIVATION_ACTION","REGISTRATION_ACTIVATION_HINT","preview","blocks","url"],"sources":["../../../../../src/core/mail/template/templates/registration-activation.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { TranslatorTranslationMailKey } from '@authup/i18n';\nimport { \n    action, \n    code, \n    note, \n    paragraph, \n} from '../../format/blocks.ts';\nimport { defineMailTemplate } from '../define.ts';\nimport { MailTemplateName } from '../types.ts';\n\nexport const registrationActivationMailTemplate = defineMailTemplate({\n    name: MailTemplateName.REGISTRATION_ACTIVATION,\n    build: async (params, t) => {\n        const [subject, intro, codeLabel, actionLabel, hint] = await Promise.all([\n            t(TranslatorTranslationMailKey.REGISTRATION_ACTIVATION_SUBJECT),\n            t(TranslatorTranslationMailKey.REGISTRATION_ACTIVATION_INTRO),\n            t(TranslatorTranslationMailKey.CODE),\n            t(TranslatorTranslationMailKey.REGISTRATION_ACTIVATION_ACTION),\n            t(TranslatorTranslationMailKey.REGISTRATION_ACTIVATION_HINT),\n        ]);\n\n        return {\n            subject,\n            preview: intro,\n            blocks: [\n                paragraph(intro),\n                code(codeLabel, params.code),\n                ...(params.url ? [action(actionLabel, params.url)] : []),\n                note(hint),\n            ],\n        };\n    },\n});\n"],"mappings":";;;;;;;;AAiBA,MAAaO,qCAAqCF,mBAAmB;CACjEG,MAAMF,iBAAiBG;CACvBC,OAAO,OAAOC,QAAQC,MAAAA;EAClB,MAAM,CAACC,SAASC,OAAOC,WAAWC,aAAaC,QAAQ,MAAMC,QAAQC,IAAI;GACrEP,EAAEZ,6BAA6BoB,+BAA+B;GAC9DR,EAAEZ,6BAA6BqB,6BAA6B;GAC5DT,EAAEZ,6BAA6BsB,IAAI;GACnCV,EAAEZ,6BAA6BuB,8BAA8B;GAC7DX,EAAEZ,6BAA6BwB,4BAA4B;GAC9D;EAED,OAAO;GACHX;GACAY,SAASX;GACTY,QAAQ;IACJtB,UAAUU,KAAAA;IACVZ,KAAKa,WAAWJ,OAAOT,IAAI;OACvBS,OAAOgB,MAAM,CAAC1B,OAAOe,aAAaL,OAAOgB,GAAG,CAAA,IAAK,CAAA;IACrDxB,KAAKc,IAAAA;;EAEb;CACJ;AACJ,CAAA"}

package/dist/core/mail/template/types.d.ts

@@ -0,0 +1,39 @@
+import type { TranslatorTranslationMailKey } from '@authup/i18n';
+import type { MailBlock } from '../format/types.ts';
+export declare enum MailTemplateName {
+    REGISTRATION_ACTIVATION = "registration-activation",
+    PASSWORD_RESET = "password-reset"
+}
+export type MailTemplateParamsMap = {
+    [MailTemplateName.REGISTRATION_ACTIVATION]: {
+        code: string;
+        url?: string;
+    };
+    [MailTemplateName.PASSWORD_RESET]: {
+        code: string;
+        url?: string;
+        expiresInMinutes?: number;
+    };
+};
+/**
+ * Locale-bound translator handed to a template's `build`. Resolves a key
+ * of the `authupMail` namespace (`@authup/i18n`) through ilingo — `data`
+ * feeds `{{var}}` interpolation. Async so file- or remote-backed override
+ * stores can slot in behind the same contract.
+ */
+export type MailTemplateTranslator = (key: `${TranslatorTranslationMailKey}`, data?: Record<string, any>) => Promise<string>;
+export type MailTemplateBuildOutput = {
+    subject: string;
+    preview?: string;
+    blocks: MailBlock[];
+};
+/**
+ * A mail template composes its body from blocks; subject, html and text
+ * all derive from the same build output. Copy is not embedded — it is
+ * resolved per locale through the supplied translator.
+ */
+export type MailTemplate<N extends MailTemplateName = MailTemplateName> = {
+    name: N;
+    build(params: MailTemplateParamsMap[N], t: MailTemplateTranslator): Promise<MailTemplateBuildOutput>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/core/mail/template/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/mail/template/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAEpD,oBAAY,gBAAgB;IACxB,uBAAuB,4BAA4B;IACnD,cAAc,mBAAmB;CACpC;AAED,MAAM,MAAM,qBAAqB,GAAG;IAChC,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,EAAE;QACxC,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,CAAC,gBAAgB,CAAC,cAAc,CAAC,EAAE;QAC/B,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC7B,CAAC;CACL,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,CACjC,GAAG,EAAE,GAAG,4BAA4B,EAAE,EACtC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,KACzB,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,MAAM,MAAM,uBAAuB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAEhB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,SAAS,EAAE,CAAC;CACvB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,YAAY,CAAC,CAAC,SAAS,gBAAgB,GAAG,gBAAgB,IAAI;IACtE,IAAI,EAAE,CAAC,CAAC;IACR,KAAK,CACD,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,EAChC,CAAC,EAAE,sBAAsB,GAC1B,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACvC,CAAC"}

package/dist/core/mail/template/types.mjs

@@ -0,0 +1,13 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+//#region src/core/mail/template/types.ts
+var MailTemplateName = /*#__PURE__*/ function(MailTemplateName) {
+	MailTemplateName["REGISTRATION_ACTIVATION"] = "registration-activation";
+	MailTemplateName["PASSWORD_RESET"] = "password-reset";
+	return MailTemplateName;
+}({});
+//#endregion
+export { MailTemplateName };
+
+//# sourceMappingURL=types.mjs.map

package/dist/core/mail/template/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.mjs","names":["MailTemplateName"],"sources":["../../../../src/core/mail/template/types.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { TranslatorTranslationMailKey } from '@authup/i18n';\nimport type { MailBlock } from '../format/types.ts';\n\nexport enum MailTemplateName {\n    REGISTRATION_ACTIVATION = 'registration-activation',\n    PASSWORD_RESET = 'password-reset',\n}\n\nexport type MailTemplateParamsMap = {\n    [MailTemplateName.REGISTRATION_ACTIVATION]: {\n        code: string,\n        url?: string,\n    },\n    [MailTemplateName.PASSWORD_RESET]: {\n        code: string,\n        url?: string,\n        expiresInMinutes?: number,\n    },\n};\n\n/**\n * Locale-bound translator handed to a template's `build`. Resolves a key\n * of the `authupMail` namespace (`@authup/i18n`) through ilingo — `data`\n * feeds `{{var}}` interpolation. Async so file- or remote-backed override\n * stores can slot in behind the same contract.\n */\nexport type MailTemplateTranslator = (\n    key: `${TranslatorTranslationMailKey}`,\n    data?: Record<string, any>,\n) => Promise<string>;\n\nexport type MailTemplateBuildOutput = {\n    subject: string,\n    // Hidden preheader shown by mail clients as the preview line.\n    preview?: string,\n    blocks: MailBlock[],\n};\n\n/**\n * A mail template composes its body from blocks; subject, html and text\n * all derive from the same build output. Copy is not embedded — it is\n * resolved per locale through the supplied translator.\n */\nexport type MailTemplate<N extends MailTemplateName = MailTemplateName> = {\n    name: N,\n    build(\n        params: MailTemplateParamsMap[N],\n        t: MailTemplateTranslator,\n    ): Promise<MailTemplateBuildOutput>,\n};\n"],"mappings":";;;;AAUA,IAAO,mBAAKA,uBAAAA,kBAAAA;;;QAAAA"}

package/dist/core/mail/types.d.ts

@@ -1,3 +1,4 @@
+import type { MailTemplateName, MailTemplateParamsMap } from './template/types.ts';
 export type MailAddress = {
     name: string;
     address: string;
@@ -12,4 +13,24 @@ export type MailSendOptions = {
 export interface IMailClient {
     send(options: MailSendOptions): Promise<void>;
 }
+export type MailRenderInput<N extends MailTemplateName = MailTemplateName> = {
+    template: N;
+    params: MailTemplateParamsMap[N];
+    locale?: string;
+};
+export type MailContent = {
+    subject: string;
+    html: string;
+    text: string;
+};
+/**
+ * Renders a localized, branded mail (subject + html + text) from a template
+ * name and typed params. Decouples mail copy/markup from the workflow
+ * services, which pass `{ template, params, locale }` instead of building
+ * HTML. Async because copy resolution runs through ilingo's store contract
+ * (memory today; file- or remote-backed overrides tomorrow).
+ */
+export interface IMailTemplateRenderer {
+    render<N extends MailTemplateName>(input: MailRenderInput<N>): Promise<MailContent>;
+}
 //# sourceMappingURL=types.d.ts.map

package/dist/core/mail/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/mail/types.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,WAAW,GAAG;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC1B,EAAE,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,WAAW,WAAW;IACxB,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/mail/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEnF,MAAM,MAAM,WAAW,GAAG;IACtB,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;CAClB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC1B,EAAE,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,WAAW,WAAW;IACxB,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAMD,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,gBAAgB,GAAG,gBAAgB,IAAI;IACzE,QAAQ,EAAE,CAAC,CAAC;IACZ,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAGjC,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IAClC,MAAM,CAAC,CAAC,SAAS,gBAAgB,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACvF"}

package/dist/index.mjs

@@ -4,6 +4,7 @@ import.meta.url;
 import { AuthenticationInjectionKey } from "./app/modules/authentication/constants.mjs";
 import { RealmEntity } from "./adapters/database/domains/realm/entity.mjs";
 import { RealmRepository } from "./adapters/database/domains/realm/repository.mjs";
+import { EntitySubscriber, buildEntityDestinations } from "./adapters/database/subscriber/module.mjs";
 import { CachePrefix } from "./adapters/database/domains/constants.mjs";
 import { RealmSubscriber } from "./adapters/database/domains/realm/subscriber.mjs";
 import { KeyEntity } from "./adapters/database/domains/key/entity.mjs";
@@ -63,13 +64,13 @@ import { CacheInjectionKey } from "./app/modules/cache/constants.mjs";
 import { ModuleName } from "./app/modules/constants.mjs";
 import { ConfigEnvironmentVariableName, ConfigInjectionKey } from "./app/modules/config/constants.mjs";
 import { ConfigModule } from "./app/modules/config/module.mjs";
+import { getAppOrigins } from "./app/modules/config/origins.mjs";
 import { CacheModule } from "./app/modules/cache/module.mjs";
 import { SessionRepository } from "./app/modules/authentication/repositories/session.mjs";
 import { AuthenticationModule } from "./app/modules/authentication/module.mjs";
 import { DatabaseInjectionKey } from "./app/modules/database/constants.mjs";
 import { DatabaseQueryResultCache } from "./adapters/database/cache/module.mjs";
 import { DataSourceOptionsBuilder } from "./adapters/database/data-source/options/module.mjs";
-import { setDataSourceSync, unsetDataSourceSync, useDataSourceSync } from "./adapters/database/data-source/singleton.mjs";
 import { DatabaseConflictError } from "./adapters/database/errors/conflict.mjs";
 import { isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment } from "./adapters/database/helpers/is-supported.mjs";
 import "./adapters/database/index.mjs";
@@ -105,9 +106,11 @@ import { setRequestPermissionEvaluator, useRequestPermissionEvaluator } from "./
 import { RequestIdentity, isRequestIdentityMasterRealmMember, setRequestIdentity, useRequestIdentity, useRequestIdentityOrFail } from "./adapters/http/request/helpers/identity.mjs";
 import { buildActorContext } from "./adapters/http/request/helpers/actor.mjs";
 import { getBodyRealmID } from "./adapters/http/request/helpers/body-realm-id.mjs";
+import { LOCALE_COOKIE, useRequestLocale } from "./adapters/http/request/helpers/locale.mjs";
 import { readFromLocations } from "./adapters/http/request/helpers/locations.mjs";
 import { getRequestParamID, getRequestStringParam, getRequestStringParamOrFail, useRequestParamID } from "./adapters/http/request/helpers/param-id.mjs";
 import { applyRouteRealmIDToBody, getRequestRealmID, setRequestRealmID } from "./adapters/http/request/helpers/realm-id.mjs";
+import { sanitizeRelativeRedirect } from "./adapters/http/request/helpers/redirect.mjs";
 import { setRequestScopes, useRequestScopes } from "./adapters/http/request/helpers/scopes.mjs";
 import { setRequestToken, useRequestToken } from "./adapters/http/request/helpers/token.mjs";
 import { RequestPermissionEvaluator } from "./adapters/http/request/permission/module.mjs";
@@ -134,6 +137,7 @@ import { createLoggerMiddleware } from "./adapters/http/middleware/built-in/logg
 import { registerPrometheusMiddleware } from "./adapters/http/middleware/built-in/prometheus.mjs";
 import { registerRateLimitMiddleware } from "./adapters/http/middleware/built-in/rate-limit.mjs";
 import { createSwaggerMiddleware } from "./adapters/http/middleware/built-in/swagger.mjs";
+import { UI_HTTP_CLIENT_FACTORY_STORE_KEY, registerUIHttpClientMiddleware } from "./adapters/http/middleware/built-in/ui-http-client.mjs";
 import { ClientController } from "./adapters/http/controllers/entities/client/module.mjs";
 import { ClientPermissionController } from "./adapters/http/controllers/entities/client-permission/module.mjs";
 import { ClientPermissionRequestValidator } from "./adapters/http/controllers/entities/client-permission/utils/validation.mjs";
@@ -191,7 +195,7 @@ import { LDAPInjectionKey } from "./app/modules/ldap/constants.mjs";
 import { LdapModule } from "./app/modules/ldap/module.mjs";
 import { IdentityModule } from "./app/modules/identity/module.mjs";
 import { OAuth2Module } from "./app/modules/oauth2/module.mjs";
-import { MailInjectionKey } from "./app/modules/mail/constants.mjs";
+import { MailInjectionKey, MailTemplateRendererInjectionKey } from "./app/modules/mail/constants.mjs";
 import { MailModule } from "./app/modules/mail/module.mjs";
 import { HTTPModule } from "./app/modules/http/module.mjs";
 import { DefaultProvisioningSource } from "./app/modules/provisioning/sources/default/module.mjs";
@@ -208,4 +212,4 @@ import { defineCLIResetCommand } from "./cli/commands/reset.mjs";
 import { defineCLIStartCommand } from "./cli/commands/start.mjs";
 import "./cli/commands/index.mjs";
 import "reflect-metadata";
-export { ActivateController, ApplicationBuilder, AuthenticationInjectionKey, AuthenticationModule, AuthorizationMiddleware, AuthorizeController, CacheInjectionKey, CacheModule, CachePrefix, ClientController, ClientEntity, ClientIdentityRepository, ClientPermissionController, ClientPermissionEntity, ClientPermissionRepositoryAdapter, ClientPermissionRequestValidator, ClientPermissionSubscriber, ClientRepositoryAdapter, ClientRoleController, ClientRoleEntity, ClientRoleRepositoryAdapter, ClientRoleRequestValidator, ClientRoleSubscriber, ClientScopeController, ClientScopeEntity, ClientScopeRepositoryAdapter, ClientScopeRequestValidator, ClientScopeSubscriber, ClientSubscriber, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DataSourceOptionsBuilder, DatabaseConflictError, DatabaseInjectionKey, DatabaseModule, DatabaseQueryResultCache, DefaultProvisioningSource, FileProvisioningSource, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, HTTPClientCredentialsGrant, HTTPInjectionKey, HTTPModule, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, IdentityInjectionKey, IdentityModule, IdentityProviderAccountEntity, IdentityProviderAccountRepository, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeMappingRepository, IdentityProviderAttributeSubscriber, IdentityProviderController, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderPermissionMappingRepository, IdentityProviderRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingController, IdentityProviderRoleMappingEntity, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, JwkController, KeyEntity, LDAPInjectionKey, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, ModuleName, OAuth2InjectionToken, OAuth2Module, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionDatabaseProvider, PermissionEntity, PermissionPolicyController, PermissionPolicyEntity, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyAttributesValidator, PolicyController, PolicyEntity, PolicyRepository, PolicyRepositoryAdapter, PolicySubscriber, PolicyValidator, ProvisionerModule, RealmController, RealmEntity, RealmRepository, RealmRepositoryAdapter, RealmResolverMiddleware, RealmSubscriber, RegisterController, RequestHandlerOperation, RequestIdentity, RequestPermissionEvaluator, RobotController, RobotEntity, RobotIdentityRepository, RobotPermissionController, RobotPermissionEntity, RobotPermissionRepositoryAdapter, RobotPermissionRequestValidator, RobotPermissionSubscriber, RobotRepositoryAdapter, RobotRoleController, RobotRoleEntity, RobotRoleRepositoryAdapter, RobotRoleRequestValidator, RobotRoleSubscriber, RobotSubscriber, RoleAttributeController, RoleAttributeEntity, RoleAttributeRepositoryAdapter, RoleAttributeRequestValidator, RoleAttributeSubscriber, RoleController, RoleEntity, RolePermissionController, RolePermissionEntity, RolePermissionRepositoryAdapter, RolePermissionRequestValidator, RolePermissionSubscriber, RoleRepository, RoleRepositoryAdapter, RoleSubscriber, RuntimeModule, ScopeController, ScopeEntity, ScopeRepositoryAdapter, ScopeSubscriber, SessionEntity, SessionRepository, StatusController, TokenController, UserAttributeController, UserAttributeEntity, UserAttributeRepositoryAdapter, UserAttributeRequestValidator, UserAttributeSubscriber, UserController, UserEntity, UserIdentityRepository, UserPermissionController, UserPermissionEntity, UserPermissionRepositoryAdapter, UserPermissionRequestValidator, UserPermissionSubscriber, UserRepository, UserRepositoryAdapter, UserRoleController, UserRoleEntity, UserRoleRepositoryAdapter, UserRoleRequestValidator, UserRoleSubscriber, UserSubscriber, VITE_SERVER_STORE_KEY, applyRouteRealmIDToBody, buildActorContext, createApplication, createAuthorizationMiddleware, createLoggerMiddleware, createRealmResolverMiddleware, createSwaggerMiddleware, defineCLIHealthCheckCommand, defineCLIMigrationCommand, defineCLIResetCommand, defineCLIStartCommand, extractClientCredentialsFromRequest, getBodyRealmID, getJwkRouteHandler, getJwksRouteHandler, getRequestParamID, getRequestRealmID, getRequestStringParam, getRequestStringParamOrFail, guessOauth2GrantTypeByRequest, isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment, isRequestIdentityMasterRealmMember, readFromLocations, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware, setDataSourceSync, setRequestIdentity, setRequestPermissionEvaluator, setRequestRealmID, setRequestScopes, setRequestToken, unsetDataSourceSync, useDataSourceSync, useRequestIdentity, useRequestIdentityOrFail, useRequestParamID, useRequestPermissionEvaluator, useRequestScopes, useRequestToken };
+export { ActivateController, ApplicationBuilder, AuthenticationInjectionKey, AuthenticationModule, AuthorizationMiddleware, AuthorizeController, CacheInjectionKey, CacheModule, CachePrefix, ClientController, ClientEntity, ClientIdentityRepository, ClientPermissionController, ClientPermissionEntity, ClientPermissionRepositoryAdapter, ClientPermissionRequestValidator, ClientPermissionSubscriber, ClientRepositoryAdapter, ClientRoleController, ClientRoleEntity, ClientRoleRepositoryAdapter, ClientRoleRequestValidator, ClientRoleSubscriber, ClientScopeController, ClientScopeEntity, ClientScopeRepositoryAdapter, ClientScopeRequestValidator, ClientScopeSubscriber, ClientSubscriber, ComponentsModule, CompositeProvisioningSource, ConfigEnvironmentVariableName, ConfigInjectionKey, ConfigModule, DataSourceOptionsBuilder, DatabaseConflictError, DatabaseInjectionKey, DatabaseModule, DatabaseQueryResultCache, DefaultProvisioningSource, EntitySubscriber, FileProvisioningSource, ForceLoggedInMiddleware, ForceUserLoggedInMiddleware, HTTPClientCredentialsGrant, HTTPInjectionKey, HTTPModule, HTTPOAuth2AuthorizeGrant, HTTPOAuth2Authorizer, HTTPOAuth2IdentityGrantType, HTTPOAuth2RefreshTokenGrant, HTTPPasswordGrant, HTTPRobotCredentialsGrant, IdentityInjectionKey, IdentityModule, IdentityProviderAccountEntity, IdentityProviderAccountRepository, IdentityProviderAccountSubscriber, IdentityProviderAttributeEntity, IdentityProviderAttributeMappingEntity, IdentityProviderAttributeMappingRepository, IdentityProviderAttributeSubscriber, IdentityProviderController, IdentityProviderEntity, IdentityProviderPermissionMappingEntity, IdentityProviderPermissionMappingRepository, IdentityProviderRepository, IdentityProviderRepositoryAdapter, IdentityProviderRoleMappingController, IdentityProviderRoleMappingEntity, IdentityProviderRoleMappingRepository, IdentityProviderRoleMappingRepositoryAdapter, IdentityProviderRoleSubscriber, IdentityProviderSubscriber, JwkController, KeyEntity, LDAPInjectionKey, LOCALE_COOKIE, LdapModule, LoggerInjectionKey, LoggerModule, MailInjectionKey, MailModule, MailTemplateRendererInjectionKey, ModuleName, OAuth2InjectionToken, OAuth2Module, OpenIDController, PasswordForgotController, PasswordResetController, PermissionController, PermissionDatabaseProvider, PermissionEntity, PermissionPolicyController, PermissionPolicyEntity, PermissionPolicyRepositoryAdapter, PermissionRepositoryAdapter, PermissionSubscriber, PolicyAttributeEntity, PolicyAttributeSubscriber, PolicyAttributesValidator, PolicyController, PolicyEntity, PolicyRepository, PolicyRepositoryAdapter, PolicySubscriber, PolicyValidator, ProvisionerModule, RealmController, RealmEntity, RealmRepository, RealmRepositoryAdapter, RealmResolverMiddleware, RealmSubscriber, RegisterController, RequestHandlerOperation, RequestIdentity, RequestPermissionEvaluator, RobotController, RobotEntity, RobotIdentityRepository, RobotPermissionController, RobotPermissionEntity, RobotPermissionRepositoryAdapter, RobotPermissionRequestValidator, RobotPermissionSubscriber, RobotRepositoryAdapter, RobotRoleController, RobotRoleEntity, RobotRoleRepositoryAdapter, RobotRoleRequestValidator, RobotRoleSubscriber, RobotSubscriber, RoleAttributeController, RoleAttributeEntity, RoleAttributeRepositoryAdapter, RoleAttributeRequestValidator, RoleAttributeSubscriber, RoleController, RoleEntity, RolePermissionController, RolePermissionEntity, RolePermissionRepositoryAdapter, RolePermissionRequestValidator, RolePermissionSubscriber, RoleRepository, RoleRepositoryAdapter, RoleSubscriber, RuntimeModule, ScopeController, ScopeEntity, ScopeRepositoryAdapter, ScopeSubscriber, SessionEntity, SessionRepository, StatusController, TokenController, UI_HTTP_CLIENT_FACTORY_STORE_KEY, UserAttributeController, UserAttributeEntity, UserAttributeRepositoryAdapter, UserAttributeRequestValidator, UserAttributeSubscriber, UserController, UserEntity, UserIdentityRepository, UserPermissionController, UserPermissionEntity, UserPermissionRepositoryAdapter, UserPermissionRequestValidator, UserPermissionSubscriber, UserRepository, UserRepositoryAdapter, UserRoleController, UserRoleEntity, UserRoleRepositoryAdapter, UserRoleRequestValidator, UserRoleSubscriber, UserSubscriber, VITE_SERVER_STORE_KEY, applyRouteRealmIDToBody, buildActorContext, buildEntityDestinations, createApplication, createAuthorizationMiddleware, createLoggerMiddleware, createRealmResolverMiddleware, createSwaggerMiddleware, defineCLIHealthCheckCommand, defineCLIMigrationCommand, defineCLIResetCommand, defineCLIStartCommand, extractClientCredentialsFromRequest, getAppOrigins, getBodyRealmID, getJwkRouteHandler, getJwksRouteHandler, getRequestParamID, getRequestRealmID, getRequestStringParam, getRequestStringParamOrFail, guessOauth2GrantTypeByRequest, isDatabaseTypeSupported, isDatabaseTypeSupportedForEnvironment, isRequestIdentityMasterRealmMember, readFromLocations, registerAssetsMiddleware, registerBasicMiddleware, registerCorsMiddleware, registerErrorMiddleware, registerPrometheusMiddleware, registerRateLimitMiddleware, registerUIHttpClientMiddleware, sanitizeRelativeRedirect, setRequestIdentity, setRequestPermissionEvaluator, setRequestRealmID, setRequestScopes, setRequestToken, useRequestIdentity, useRequestIdentityOrFail, useRequestLocale, useRequestParamID, useRequestPermissionEvaluator, useRequestScopes, useRequestToken };