@authup/server-core 1.0.0-beta.5 → 1.0.0-beta.50

package/dist/app/modules/provisioning/sources/default/module.mjs

@@ -0,0 +1,310 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ClientCredentialsService } from "../../../../../core/authentication/credential/entities/client/module.mjs";
+import { RobotCredentialsService } from "../../../../../core/authentication/credential/entities/robot/module.mjs";
+import { UserCredentialsService } from "../../../../../core/authentication/credential/entities/user/module.mjs";
+import { ProvisioningEntityStrategyType } from "../../../../../core/provisioning/strategy/constants.mjs";
+import "../../../../../core/provisioning/strategy/index.mjs";
+import "../../../../../core/index.mjs";
+import { ConfigInjectionKey } from "../../../config/constants.mjs";
+import "../../../config/index.mjs";
+import { DecisionStrategy } from "@authup/kit";
+import { PermissionName, REALM_MASTER_NAME, ROLE_ADMIN_NAME, ROLE_REALM_ADMIN_NAME, ScopeName, buildUserFakeEmail } from "@authup/core-kit";
+import { BuiltInPolicyType, SystemPolicyName } from "@authup/access";
+//#region src/app/modules/provisioning/sources/default/module.ts
+var DefaultProvisioningSource = class {
+	buildPolicies() {
+		return [
+			{
+				attributes: {
+					name: SystemPolicyName.DEFAULT,
+					type: BuiltInPolicyType.COMPOSITE,
+					built_in: true,
+					realm_id: null
+				},
+				extraAttributes: { decision_strategy: DecisionStrategy.UNANIMOUS },
+				children: [
+					{ attributes: {
+						name: SystemPolicyName.IDENTITY,
+						type: BuiltInPolicyType.IDENTITY,
+						built_in: true,
+						realm_id: null
+					} },
+					{ attributes: {
+						name: SystemPolicyName.PERMISSION_BINDING,
+						type: BuiltInPolicyType.PERMISSION_BINDING,
+						built_in: true,
+						realm_id: null
+					} },
+					{
+						attributes: {
+							name: SystemPolicyName.REALM_MATCH,
+							type: BuiltInPolicyType.REALM_MATCH,
+							built_in: true,
+							realm_id: null
+						},
+						extraAttributes: {
+							attribute_name: ["realm_id"],
+							attribute_name_strict: false,
+							identity_master_match_all: false,
+							attribute_null_match_all: true
+						}
+					}
+				]
+			},
+			{
+				attributes: {
+					name: SystemPolicyName.REALM_BOUND,
+					type: BuiltInPolicyType.REALM_MATCH,
+					built_in: true,
+					realm_id: null
+				},
+				extraAttributes: {
+					attribute_name: ["realm_id"],
+					attribute_name_strict: false,
+					attribute_null_match_all: false,
+					identity_master_match_all: false
+				}
+			},
+			{
+				attributes: {
+					name: SystemPolicyName.REALM_OR_GLOBAL,
+					type: BuiltInPolicyType.REALM_MATCH,
+					built_in: true,
+					realm_id: null
+				},
+				extraAttributes: {
+					attribute_name: ["realm_id"],
+					attribute_name_strict: false,
+					attribute_null_match_all: true,
+					identity_master_match_all: false
+				}
+			},
+			{
+				attributes: {
+					name: SystemPolicyName.CLIENT_NAMES_SELF_MANAGE,
+					type: BuiltInPolicyType.ATTRIBUTE_NAMES,
+					invert: true,
+					built_in: true,
+					realm_id: null
+				},
+				extraAttributes: { names: [
+					"active",
+					"realm_id",
+					"is_confidential",
+					"secret_hashed",
+					"secret_encrypted"
+				] }
+			},
+			{
+				attributes: {
+					name: SystemPolicyName.ROBOT_NAMES_SELF_MANAGE,
+					type: BuiltInPolicyType.ATTRIBUTE_NAMES,
+					invert: true,
+					built_in: true,
+					realm_id: null
+				},
+				extraAttributes: { names: [
+					"active",
+					"realm_id",
+					"user_id"
+				] }
+			},
+			{
+				attributes: {
+					name: SystemPolicyName.USER_NAMES_SELF_MANAGE,
+					type: BuiltInPolicyType.ATTRIBUTE_NAMES,
+					invert: true,
+					built_in: true,
+					realm_id: null
+				},
+				extraAttributes: { names: [
+					"active",
+					"name_locked",
+					"status",
+					"status_message",
+					"realm_id"
+				] }
+			}
+		];
+	}
+	buildPermissions() {
+		const policiesByPermission = {
+			[PermissionName.CLIENT_SELF_MANAGE]: [SystemPolicyName.DEFAULT, SystemPolicyName.CLIENT_NAMES_SELF_MANAGE],
+			[PermissionName.ROBOT_SELF_MANAGE]: [SystemPolicyName.DEFAULT, SystemPolicyName.ROBOT_NAMES_SELF_MANAGE],
+			[PermissionName.USER_SELF_MANAGE]: [SystemPolicyName.DEFAULT, SystemPolicyName.USER_NAMES_SELF_MANAGE]
+		};
+		return Object.values(PermissionName).map((name) => {
+			const entity = {
+				strategy: {
+					type: ProvisioningEntityStrategyType.MERGE,
+					attributes: ["built_in"]
+				},
+				attributes: {
+					name,
+					built_in: true
+				}
+			};
+			const policies = policiesByPermission[name];
+			if (policies) entity.relations = { policies };
+			return entity;
+		});
+	}
+	buildScopes() {
+		return Object.values(ScopeName).map((name) => ({
+			strategy: {
+				type: ProvisioningEntityStrategyType.MERGE,
+				attributes: ["built_in"]
+			},
+			attributes: {
+				name,
+				built_in: true
+			}
+		}));
+	}
+	buildRoles() {
+		return [{
+			strategy: {
+				type: ProvisioningEntityStrategyType.MERGE,
+				attributes: ["built_in"]
+			},
+			attributes: {
+				name: ROLE_ADMIN_NAME,
+				built_in: true
+			},
+			relations: { globalPermissions: ["*"] }
+		}, {
+			strategy: {
+				type: ProvisioningEntityStrategyType.MERGE,
+				attributes: ["built_in"]
+			},
+			attributes: {
+				name: ROLE_REALM_ADMIN_NAME,
+				built_in: true
+			},
+			relations: {
+				globalPermissions: ["*"],
+				globalPermissionsExclude: [
+					PermissionName.REALM_CREATE,
+					PermissionName.REALM_UPDATE,
+					PermissionName.REALM_DELETE
+				],
+				globalPermissionsPolicyName: SystemPolicyName.REALM_OR_GLOBAL,
+				globalPermissionsPolicyOverrides: { [SystemPolicyName.REALM_BOUND]: [
+					PermissionName.CLIENT_CREATE,
+					PermissionName.CLIENT_UPDATE,
+					PermissionName.CLIENT_DELETE,
+					PermissionName.IDENTITY_PROVIDER_CREATE,
+					PermissionName.IDENTITY_PROVIDER_UPDATE,
+					PermissionName.IDENTITY_PROVIDER_DELETE,
+					PermissionName.PERMISSION_CREATE,
+					PermissionName.PERMISSION_UPDATE,
+					PermissionName.PERMISSION_DELETE,
+					PermissionName.ROBOT_CREATE,
+					PermissionName.ROBOT_UPDATE,
+					PermissionName.ROBOT_DELETE,
+					PermissionName.ROLE_CREATE,
+					PermissionName.ROLE_UPDATE,
+					PermissionName.ROLE_DELETE,
+					PermissionName.SCOPE_CREATE,
+					PermissionName.SCOPE_UPDATE,
+					PermissionName.SCOPE_DELETE,
+					PermissionName.USER_CREATE,
+					PermissionName.USER_UPDATE,
+					PermissionName.USER_DELETE
+				] }
+			}
+		}];
+	}
+	async buildRealms(config) {
+		const masterRealm = {
+			strategy: {
+				type: ProvisioningEntityStrategyType.MERGE,
+				attributes: ["built_in"]
+			},
+			attributes: {
+				name: REALM_MASTER_NAME,
+				built_in: true
+			},
+			relations: {}
+		};
+		const userCredentialsService = new UserCredentialsService();
+		let userStrategy;
+		if (config.userAdminPasswordReset) userStrategy = {
+			type: ProvisioningEntityStrategyType.MERGE,
+			attributes: ["password"]
+		};
+		masterRealm.relations = masterRealm.relations || {};
+		masterRealm.relations.users = [{
+			strategy: userStrategy,
+			attributes: {
+				name: "admin",
+				password: await userCredentialsService.protect(config.userAdminPassword),
+				email: buildUserFakeEmail("admin"),
+				active: config.userAdminEnabled
+			},
+			relations: { globalRoles: [ROLE_ADMIN_NAME] }
+		}];
+		const clientCredentialsService = new ClientCredentialsService();
+		let clientStrategy;
+		if (config.clientSystemSecretReset) clientStrategy = {
+			type: ProvisioningEntityStrategyType.MERGE,
+			attributes: [
+				"built_in",
+				"is_confidential",
+				"secret",
+				"secret_hashed",
+				"secret_encrypted"
+			]
+		};
+		else clientStrategy = {
+			type: ProvisioningEntityStrategyType.MERGE,
+			attributes: ["built_in", "is_confidential"]
+		};
+		masterRealm.relations = masterRealm.relations || {};
+		masterRealm.relations.clients = [{
+			strategy: clientStrategy,
+			attributes: {
+				built_in: true,
+				is_confidential: true,
+				name: "system",
+				secret: await clientCredentialsService.protect(config.clientSystemSecret, { secret_hashed: false }),
+				secret_hashed: false,
+				active: config.clientSystemEnabled
+			},
+			relations: { globalRoles: [ROLE_ADMIN_NAME] }
+		}];
+		const robotCredentialsService = new RobotCredentialsService();
+		let robotStrategy;
+		if (config.robotAdminSecretReset) robotStrategy = {
+			type: ProvisioningEntityStrategyType.MERGE,
+			attributes: ["secret"]
+		};
+		masterRealm.relations = masterRealm.relations || {};
+		masterRealm.relations.robots = [{
+			strategy: robotStrategy,
+			attributes: {
+				name: "system",
+				secret: await robotCredentialsService.protect(config.robotAdminSecret),
+				active: config.robotAdminEnabled
+			},
+			relations: { globalRoles: [ROLE_ADMIN_NAME] }
+		}];
+		return [masterRealm];
+	}
+	async load(container) {
+		const config = container.resolve(ConfigInjectionKey);
+		return {
+			policies: this.buildPolicies(),
+			permissions: this.buildPermissions(),
+			scopes: this.buildScopes(),
+			roles: this.buildRoles(),
+			realms: await this.buildRealms(config)
+		};
+	}
+};
+//#endregion
+export { DefaultProvisioningSource };
+
+//# sourceMappingURL=module.mjs.map

package/dist/app/modules/provisioning/sources/default/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["BuiltInPolicyType","SystemPolicyName","DecisionStrategy","PermissionName","REALM_MASTER_NAME","ROLE_ADMIN_NAME","ROLE_REALM_ADMIN_NAME","ScopeName","buildUserFakeEmail","ClientCredentialsService","RobotCredentialsService","UserCredentialsService","ConfigInjectionKey","ProvisioningEntityStrategyType","DefaultProvisioningSource","buildPolicies","attributes","name","DEFAULT","type","COMPOSITE","built_in","realm_id","extraAttributes","decision_strategy","UNANIMOUS","children","IDENTITY","PERMISSION_BINDING","REALM_MATCH","attribute_name","attribute_name_strict","identity_master_match_all","attribute_null_match_all","REALM_BOUND","REALM_OR_GLOBAL","CLIENT_NAMES_SELF_MANAGE","ATTRIBUTE_NAMES","invert","names","ROBOT_NAMES_SELF_MANAGE","USER_NAMES_SELF_MANAGE","buildPermissions","policiesByPermission","CLIENT_SELF_MANAGE","ROBOT_SELF_MANAGE","USER_SELF_MANAGE","Object","values","map","entity","strategy","MERGE","policies","relations","buildScopes","buildRoles","globalPermissions","globalPermissionsExclude","REALM_CREATE","REALM_UPDATE","REALM_DELETE","globalPermissionsPolicyName","globalPermissionsPolicyOverrides","CLIENT_CREATE","CLIENT_UPDATE","CLIENT_DELETE","IDENTITY_PROVIDER_CREATE","IDENTITY_PROVIDER_UPDATE","IDENTITY_PROVIDER_DELETE","PERMISSION_CREATE","PERMISSION_UPDATE","PERMISSION_DELETE","ROBOT_CREATE","ROBOT_UPDATE","ROBOT_DELETE","ROLE_CREATE","ROLE_UPDATE","ROLE_DELETE","SCOPE_CREATE","SCOPE_UPDATE","SCOPE_DELETE","USER_CREATE","USER_UPDATE","USER_DELETE","buildRealms","config","masterRealm","userCredentialsService","userStrategy","userAdminPasswordReset","users","password","protect","userAdminPassword","email","active","userAdminEnabled","globalRoles","clientCredentialsService","clientStrategy","clientSystemSecretReset","clients","is_confidential","secret","clientSystemSecret","secret_hashed","clientSystemEnabled","robotCredentialsService","robotStrategy","robotAdminSecretReset","robots","robotAdminSecret","robotAdminEnabled","load","container","resolve","permissions","scopes","roles","realms"],"sources":["../../../../../../src/app/modules/provisioning/sources/default/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { BuiltInPolicyType, SystemPolicyName } from '@authup/access';\nimport { DecisionStrategy } from '@authup/kit';\nimport type {\n    Client, \n    Permission, \n    Robot, \n    Role, \n    Scope, \n    User,\n} from '@authup/core-kit';\nimport {\n    PermissionName, \n    REALM_MASTER_NAME, \n    ROLE_ADMIN_NAME, \n    ROLE_REALM_ADMIN_NAME, \n    ScopeName, \n    buildUserFakeEmail,\n} from '@authup/core-kit';\nimport type { IContainer } from 'eldin';\nimport {\n    ClientCredentialsService,\n    RobotCredentialsService,\n    UserCredentialsService,\n} from '../../../../../core/index.ts';\nimport type { Config } from '../../../config/index.ts';\nimport { ConfigInjectionKey } from '../../../config/index.ts';\nimport type { PermissionProvisioningEntity } from '../../../../../core/provisioning/entities/permission/index.ts';\nimport type { PolicyProvisioningEntity } from '../../../../../core/provisioning/entities/policy/index.ts';\nimport type { RealmProvisioningEntity } from '../../../../../core/provisioning/entities/realm/index.ts';\nimport type { RoleProvisioningEntity } from '../../../../../core/provisioning/entities/role/index.ts';\nimport type { RootProvisioningEntity } from '../../../../../core/provisioning/entities/root/index.ts';\nimport type { ScopeProvisioningEntity } from '../../../../../core/provisioning/entities/scope/index.ts';\nimport type { ProvisioningEntityStrategy } from '../../../../../core/provisioning/strategy/index.ts';\nimport { ProvisioningEntityStrategyType } from '../../../../../core/provisioning/strategy/index.ts';\nimport type { IProvisioningSource } from '../../../../../core/provisioning/types.ts';\n\nexport class DefaultProvisioningSource implements IProvisioningSource {\n    buildPolicies(): PolicyProvisioningEntity[] {\n        return [\n            {\n                attributes: {\n                    name: SystemPolicyName.DEFAULT,\n                    type: BuiltInPolicyType.COMPOSITE,\n                    built_in: true,\n                    realm_id: null,\n                },\n                extraAttributes: { decision_strategy: DecisionStrategy.UNANIMOUS },\n                children: [\n                    {\n                        attributes: {\n                            name: SystemPolicyName.IDENTITY,\n                            type: BuiltInPolicyType.IDENTITY,\n                            built_in: true,\n                            realm_id: null,\n                        },\n                    },\n                    {\n                        attributes: {\n                            name: SystemPolicyName.PERMISSION_BINDING,\n                            type: BuiltInPolicyType.PERMISSION_BINDING,\n                            built_in: true,\n                            realm_id: null,\n                        },\n                    },\n                    {\n                        attributes: {\n                            name: SystemPolicyName.REALM_MATCH,\n                            type: BuiltInPolicyType.REALM_MATCH,\n                            built_in: true,\n                            realm_id: null,\n                        },\n                        extraAttributes: {\n                            attribute_name: ['realm_id'],\n                            attribute_name_strict: false,\n                            identity_master_match_all: false,\n                            attribute_null_match_all: true,\n                        },\n                    },\n                ],\n            },\n            {\n                attributes: {\n                    name: SystemPolicyName.REALM_BOUND,\n                    type: BuiltInPolicyType.REALM_MATCH,\n                    built_in: true,\n                    realm_id: null,\n                },\n                extraAttributes: {\n                    attribute_name: ['realm_id'],\n                    attribute_name_strict: false,\n                    attribute_null_match_all: false,\n                    identity_master_match_all: false,\n                },\n            },\n            {\n                attributes: {\n                    name: SystemPolicyName.REALM_OR_GLOBAL,\n                    type: BuiltInPolicyType.REALM_MATCH,\n                    built_in: true,\n                    realm_id: null,\n                },\n                extraAttributes: {\n                    attribute_name: ['realm_id'],\n                    attribute_name_strict: false,\n                    attribute_null_match_all: true,\n                    identity_master_match_all: false,\n                },\n            },\n            // Self-manage policies use ATTRIBUTE_NAMES + invert: true (denylist).\n            // Each `names` entry is what self-edit must REJECT; everything else\n            // is permitted. New columns added to the entity are self-editable\n            // by default — extend the denylist when adding admin-only state.\n            {\n                attributes: {\n                    name: SystemPolicyName.CLIENT_NAMES_SELF_MANAGE,\n                    type: BuiltInPolicyType.ATTRIBUTE_NAMES,\n                    invert: true,\n                    built_in: true,\n                    realm_id: null,\n                },\n                extraAttributes: {\n                    names: [\n                        // FK + lifecycle\n                        'active',\n                        'realm_id',\n                        // Security-critical: a self-edit must not change the\n                        // client's confidentiality (toggling this clears the\n                        // secret) or downgrade the secret-storage format\n                        // (which would persist the secret in plaintext).\n                        'is_confidential',\n                        'secret_hashed',\n                        'secret_encrypted',\n                    ],\n                },\n            },\n            {\n                attributes: {\n                    name: SystemPolicyName.ROBOT_NAMES_SELF_MANAGE,\n                    type: BuiltInPolicyType.ATTRIBUTE_NAMES,\n                    invert: true,\n                    built_in: true,\n                    realm_id: null,\n                },\n                extraAttributes: {\n                    names: [\n                        'active',\n                        'realm_id',\n                        'user_id',\n                    ],\n                },\n            },\n            {\n                attributes: {\n                    name: SystemPolicyName.USER_NAMES_SELF_MANAGE,\n                    type: BuiltInPolicyType.ATTRIBUTE_NAMES,\n                    invert: true,\n                    built_in: true,\n                    realm_id: null,\n                },\n                extraAttributes: {\n                    names: [\n                        'active',\n                        'name_locked',\n                        'status',\n                        'status_message',\n                        'realm_id',\n                    ],\n                },\n            },\n        ];\n    }\n\n    buildPermissions(): PermissionProvisioningEntity[] {\n        const policiesByPermission: Partial<Record<string, string[]>> = {\n            [PermissionName.CLIENT_SELF_MANAGE]: [SystemPolicyName.DEFAULT, SystemPolicyName.CLIENT_NAMES_SELF_MANAGE],\n            [PermissionName.ROBOT_SELF_MANAGE]: [SystemPolicyName.DEFAULT, SystemPolicyName.ROBOT_NAMES_SELF_MANAGE],\n            [PermissionName.USER_SELF_MANAGE]: [SystemPolicyName.DEFAULT, SystemPolicyName.USER_NAMES_SELF_MANAGE],\n        };\n\n        return Object.values(PermissionName)\n            .map((name) => {\n                const entity: PermissionProvisioningEntity = {\n                    strategy: {\n                        type: ProvisioningEntityStrategyType.MERGE,\n                        attributes: ['built_in'] as (keyof Permission)[],\n                    },\n                    attributes: {\n                        name,\n                        built_in: true,\n                    },\n                };\n\n                const policies = policiesByPermission[name];\n                if (policies) {\n                    entity.relations = { policies };\n                }\n\n                return entity;\n            });\n    }\n\n    buildScopes(): ScopeProvisioningEntity[] {\n        return Object.values(ScopeName)\n            .map((name) => ({\n                strategy: {\n                    type: ProvisioningEntityStrategyType.MERGE,\n                    attributes: ['built_in'] as (keyof Scope)[],\n                },\n                attributes: {\n                    name,\n                    built_in: true,\n                },\n            }));\n    }\n\n    buildRoles(): RoleProvisioningEntity[] {\n        return [\n            {\n                strategy: {\n                    type: ProvisioningEntityStrategyType.MERGE,\n                    attributes: ['built_in'] as (keyof Role)[],\n                },\n                attributes: {\n                    name: ROLE_ADMIN_NAME,\n                    built_in: true,\n                },\n                relations: { globalPermissions: ['*'] },\n            },\n            {\n                strategy: {\n                    type: ProvisioningEntityStrategyType.MERGE,\n                    attributes: ['built_in'] as (keyof Role)[],\n                },\n                attributes: {\n                    name: ROLE_REALM_ADMIN_NAME,\n                    built_in: true,\n                },\n                relations: {\n                    globalPermissions: ['*'],\n                    globalPermissionsExclude: [\n                        PermissionName.REALM_CREATE,\n                        PermissionName.REALM_UPDATE,\n                        PermissionName.REALM_DELETE,\n                    ],\n                    globalPermissionsPolicyName: SystemPolicyName.REALM_OR_GLOBAL,\n                    globalPermissionsPolicyOverrides: {\n                        [SystemPolicyName.REALM_BOUND]: [\n                            PermissionName.CLIENT_CREATE,\n                            PermissionName.CLIENT_UPDATE,\n                            PermissionName.CLIENT_DELETE,\n                            PermissionName.IDENTITY_PROVIDER_CREATE,\n                            PermissionName.IDENTITY_PROVIDER_UPDATE,\n                            PermissionName.IDENTITY_PROVIDER_DELETE,\n                            PermissionName.PERMISSION_CREATE,\n                            PermissionName.PERMISSION_UPDATE,\n                            PermissionName.PERMISSION_DELETE,\n                            PermissionName.ROBOT_CREATE,\n                            PermissionName.ROBOT_UPDATE,\n                            PermissionName.ROBOT_DELETE,\n                            PermissionName.ROLE_CREATE,\n                            PermissionName.ROLE_UPDATE,\n                            PermissionName.ROLE_DELETE,\n                            PermissionName.SCOPE_CREATE,\n                            PermissionName.SCOPE_UPDATE,\n                            PermissionName.SCOPE_DELETE,\n                            PermissionName.USER_CREATE,\n                            PermissionName.USER_UPDATE,\n                            PermissionName.USER_DELETE,\n                        ],\n                    },\n                },\n            },\n        ];\n    }\n\n    async buildRealms(config: Config): Promise<RealmProvisioningEntity[]> {\n        const masterRealm : RealmProvisioningEntity = {\n            strategy: {\n                type: ProvisioningEntityStrategyType.MERGE,\n                attributes: ['built_in'],\n            },\n            attributes: {\n                name: REALM_MASTER_NAME,\n                built_in: true,\n            },\n            relations: {},\n        };\n\n        const userCredentialsService = new UserCredentialsService();\n\n        let userStrategy : ProvisioningEntityStrategy<User> | undefined;\n        if (config.userAdminPasswordReset) {\n            userStrategy = {\n                type: ProvisioningEntityStrategyType.MERGE,\n                attributes: ['password'],\n            };\n        }\n\n        masterRealm.relations = masterRealm.relations || {};\n        masterRealm.relations.users = [\n            {\n                strategy: userStrategy,\n                attributes: {\n                    name: 'admin',\n                    password: await userCredentialsService.protect(config.userAdminPassword),\n                    email: buildUserFakeEmail('admin'),\n                    active: config.userAdminEnabled,\n                },\n                relations: { globalRoles: [ROLE_ADMIN_NAME] },\n            },\n        ];\n\n        const clientCredentialsService = new ClientCredentialsService();\n\n        let clientStrategy : ProvisioningEntityStrategy<Client> | undefined;\n        if (config.clientSystemSecretReset) {\n            clientStrategy = {\n                type: ProvisioningEntityStrategyType.MERGE,\n                attributes: ['built_in', 'is_confidential', 'secret', 'secret_hashed', 'secret_encrypted'],\n            };\n        } else {\n            clientStrategy = {\n                type: ProvisioningEntityStrategyType.MERGE,\n                attributes: ['built_in', 'is_confidential'],\n            };\n        }\n\n        masterRealm.relations = masterRealm.relations || {};\n        masterRealm.relations.clients = [\n            {\n                strategy: clientStrategy,\n                attributes: {\n                    built_in: true,\n                    is_confidential: true,\n                    name: 'system',\n                    secret: await clientCredentialsService.protect(config.clientSystemSecret, { secret_hashed: false }),\n                    secret_hashed: false,\n                    active: config.clientSystemEnabled,\n                },\n                relations: { globalRoles: [ROLE_ADMIN_NAME] },\n            },\n        ];\n\n        const robotCredentialsService = new RobotCredentialsService();\n\n        let robotStrategy : ProvisioningEntityStrategy<Robot> | undefined;\n        if (config.robotAdminSecretReset) {\n            robotStrategy = {\n                type: ProvisioningEntityStrategyType.MERGE,\n                attributes: ['secret'],\n            };\n        }\n\n        masterRealm.relations = masterRealm.relations || {};\n        masterRealm.relations.robots = [\n            {\n                strategy: robotStrategy,\n                attributes: {\n                    name: 'system',\n                    secret: await robotCredentialsService.protect(config.robotAdminSecret),\n                    active: config.robotAdminEnabled,\n                },\n                relations: { globalRoles: [ROLE_ADMIN_NAME] },\n            },\n        ];\n\n        return [masterRealm];\n    }\n\n    async load(container: IContainer): Promise<RootProvisioningEntity> {\n        const config = container.resolve(ConfigInjectionKey);\n\n        return {\n            policies: this.buildPolicies(),\n            permissions: this.buildPermissions(),\n            scopes: this.buildScopes(),\n            roles: this.buildRoles(),\n            realms: await this.buildRealms(config),\n        };\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;AA2CA,IAAac,4BAAb,MAAaA;CACTC,gBAA4C;EACxC,OAAO;GACH;IACIC,YAAY;KACRC,MAAMhB,iBAAiBiB;KACvBC,MAAMnB,kBAAkBoB;KACxBC,UAAU;KACVC,UAAU;IACd;IACAC,iBAAiB,EAAEC,mBAAmBtB,iBAAiBuB,UAAU;IACjEC,UAAU;KACN,EACIV,YAAY;MACRC,MAAMhB,iBAAiB0B;MACvBR,MAAMnB,kBAAkB2B;MACxBN,UAAU;MACVC,UAAU;KACd,EACJ;KACA,EACIN,YAAY;MACRC,MAAMhB,iBAAiB2B;MACvBT,MAAMnB,kBAAkB4B;MACxBP,UAAU;MACVC,UAAU;KACd,EACJ;KACA;MACIN,YAAY;OACRC,MAAMhB,iBAAiB4B;OACvBV,MAAMnB,kBAAkB6B;OACxBR,UAAU;OACVC,UAAU;MACd;MACAC,iBAAiB;OACbO,gBAAgB,CAAC,UAAA;OACjBC,uBAAuB;OACvBC,2BAA2B;OAC3BC,0BAA0B;MAC9B;KACJ;;GAER;GACA;IACIjB,YAAY;KACRC,MAAMhB,iBAAiBiC;KACvBf,MAAMnB,kBAAkB6B;KACxBR,UAAU;KACVC,UAAU;IACd;IACAC,iBAAiB;KACbO,gBAAgB,CAAC,UAAA;KACjBC,uBAAuB;KACvBE,0BAA0B;KAC1BD,2BAA2B;IAC/B;GACJ;GACA;IACIhB,YAAY;KACRC,MAAMhB,iBAAiBkC;KACvBhB,MAAMnB,kBAAkB6B;KACxBR,UAAU;KACVC,UAAU;IACd;IACAC,iBAAiB;KACbO,gBAAgB,CAAC,UAAA;KACjBC,uBAAuB;KACvBE,0BAA0B;KAC1BD,2BAA2B;IAC/B;GACJ;GAKA;IACIhB,YAAY;KACRC,MAAMhB,iBAAiBmC;KACvBjB,MAAMnB,kBAAkBqC;KACxBC,QAAQ;KACRjB,UAAU;KACVC,UAAU;IACd;IACAC,iBAAiB,EACbgB,OAAO;KAEH;KACA;KAKA;KACA;KACA;MAER;GACJ;GACA;IACIvB,YAAY;KACRC,MAAMhB,iBAAiBuC;KACvBrB,MAAMnB,kBAAkBqC;KACxBC,QAAQ;KACRjB,UAAU;KACVC,UAAU;IACd;IACAC,iBAAiB,EACbgB,OAAO;KACH;KACA;KACA;MAER;GACJ;GACA;IACIvB,YAAY;KACRC,MAAMhB,iBAAiBwC;KACvBtB,MAAMnB,kBAAkBqC;KACxBC,QAAQ;KACRjB,UAAU;KACVC,UAAU;IACd;IACAC,iBAAiB,EACbgB,OAAO;KACH;KACA;KACA;KACA;KACA;MAER;GACJ;;CAER;CAEAG,mBAAmD;EAC/C,MAAMC,uBAA0D;IAC3DxC,eAAeyC,qBAAqB,CAAC3C,iBAAiBiB,SAASjB,iBAAiBmC,wBAAAA;IAChFjC,eAAe0C,oBAAoB,CAAC5C,iBAAiBiB,SAASjB,iBAAiBuC,uBAAAA;IAC/ErC,eAAe2C,mBAAmB,CAAC7C,iBAAiBiB,SAASjB,iBAAiBwC,sBAAAA;EACnF;EAEA,OAAOM,OAAOC,OAAO7C,cAAAA,CAAAA,CAChB8C,KAAKhC,SAAAA;GACF,MAAMiC,SAAuC;IACzCC,UAAU;KACNhC,MAAMN,+BAA+BuC;KACrCpC,YAAY,CAAC,UAAA;IACjB;IACAA,YAAY;KACRC;KACAI,UAAU;IACd;GACJ;GAEA,MAAMgC,WAAWV,qBAAqB1B;GACtC,IAAIoC,UACAH,OAAOI,YAAY,EAAED,SAAS;GAGlC,OAAOH;EACX,CAAA;CACR;CAEAK,cAAyC;EACrC,OAAOR,OAAOC,OAAOzC,SAAAA,CAAAA,CAChB0C,KAAKhC,UAAU;GACZkC,UAAU;IACNhC,MAAMN,+BAA+BuC;IACrCpC,YAAY,CAAC,UAAA;GACjB;GACAA,YAAY;IACRC;IACAI,UAAU;GACd;EACJ,EAAA;CACR;CAEAmC,aAAuC;EACnC,OAAO,CACH;GACIL,UAAU;IACNhC,MAAMN,+BAA+BuC;IACrCpC,YAAY,CAAC,UAAA;GACjB;GACAA,YAAY;IACRC,MAAMZ;IACNgB,UAAU;GACd;GACAiC,WAAW,EAAEG,mBAAmB,CAAC,GAAA,EAAK;EAC1C,GACA;GACIN,UAAU;IACNhC,MAAMN,+BAA+BuC;IACrCpC,YAAY,CAAC,UAAA;GACjB;GACAA,YAAY;IACRC,MAAMX;IACNe,UAAU;GACd;GACAiC,WAAW;IACPG,mBAAmB,CAAC,GAAA;IACpBC,0BAA0B;KACtBvD,eAAewD;KACfxD,eAAeyD;KACfzD,eAAe0D;;IAEnBC,6BAA6B7D,iBAAiBkC;IAC9C4B,kCAAkC,GAC7B9D,iBAAiBiC,cAAc;KAC5B/B,eAAe6D;KACf7D,eAAe8D;KACf9D,eAAe+D;KACf/D,eAAegE;KACfhE,eAAeiE;KACfjE,eAAekE;KACflE,eAAemE;KACfnE,eAAeoE;KACfpE,eAAeqE;KACfrE,eAAesE;KACftE,eAAeuE;KACfvE,eAAewE;KACfxE,eAAeyE;KACfzE,eAAe0E;KACf1E,eAAe2E;KACf3E,eAAe4E;KACf5E,eAAe6E;KACf7E,eAAe8E;KACf9E,eAAe+E;KACf/E,eAAegF;KACfhF,eAAeiF;MAEvB;GACJ;EACJ,CAAA;CAER;CAEA,MAAMC,YAAYC,QAAoD;EAClE,MAAMC,cAAwC;GAC1CpC,UAAU;IACNhC,MAAMN,+BAA+BuC;IACrCpC,YAAY,CAAC,UAAA;GACjB;GACAA,YAAY;IACRC,MAAMb;IACNiB,UAAU;GACd;GACAiC,WAAW,CAAC;EAChB;EAEA,MAAMkC,yBAAyB,IAAI7E,uBAAAA;EAEnC,IAAI8E;EACJ,IAAIH,OAAOI,wBACPD,eAAe;GACXtE,MAAMN,+BAA+BuC;GACrCpC,YAAY,CAAC,UAAA;EACjB;EAGJuE,YAAYjC,YAAYiC,YAAYjC,aAAa,CAAC;EAClDiC,YAAYjC,UAAUqC,QAAQ,CAC1B;GACIxC,UAAUsC;GACVzE,YAAY;IACRC,MAAM;IACN2E,UAAU,MAAMJ,uBAAuBK,QAAQP,OAAOQ,iBAAiB;IACvEC,OAAOvF,mBAAmB,OAAA;IAC1BwF,QAAQV,OAAOW;GACnB;GACA3C,WAAW,EAAE4C,aAAa,CAAC7F,eAAAA,EAAiB;EAChD,CAAA;EAGJ,MAAM8F,2BAA2B,IAAI1F,yBAAAA;EAErC,IAAI2F;EACJ,IAAId,OAAOe,yBACPD,iBAAiB;GACbjF,MAAMN,+BAA+BuC;GACrCpC,YAAY;IAAC;IAAY;IAAmB;IAAU;IAAiB;;EAC3E;OAEAoF,iBAAiB;GACbjF,MAAMN,+BAA+BuC;GACrCpC,YAAY,CAAC,YAAY,iBAAA;EAC7B;EAGJuE,YAAYjC,YAAYiC,YAAYjC,aAAa,CAAC;EAClDiC,YAAYjC,UAAUgD,UAAU,CAC5B;GACInD,UAAUiD;GACVpF,YAAY;IACRK,UAAU;IACVkF,iBAAiB;IACjBtF,MAAM;IACNuF,QAAQ,MAAML,yBAAyBN,QAAQP,OAAOmB,oBAAoB,EAAEC,eAAe,MAAM,CAAA;IACjGA,eAAe;IACfV,QAAQV,OAAOqB;GACnB;GACArD,WAAW,EAAE4C,aAAa,CAAC7F,eAAAA,EAAiB;EAChD,CAAA;EAGJ,MAAMuG,0BAA0B,IAAIlG,wBAAAA;EAEpC,IAAImG;EACJ,IAAIvB,OAAOwB,uBACPD,gBAAgB;GACZ1F,MAAMN,+BAA+BuC;GACrCpC,YAAY,CAAC,QAAA;EACjB;EAGJuE,YAAYjC,YAAYiC,YAAYjC,aAAa,CAAC;EAClDiC,YAAYjC,UAAUyD,SAAS,CAC3B;GACI5D,UAAU0D;GACV7F,YAAY;IACRC,MAAM;IACNuF,QAAQ,MAAMI,wBAAwBf,QAAQP,OAAO0B,gBAAgB;IACrEhB,QAAQV,OAAO2B;GACnB;GACA3D,WAAW,EAAE4C,aAAa,CAAC7F,eAAAA,EAAiB;EAChD,CAAA;EAGJ,OAAO,CAACkF,WAAAA;CACZ;CAEA,MAAM2B,KAAKC,WAAwD;EAC/D,MAAM7B,SAAS6B,UAAUC,QAAQxG,kBAAAA;EAEjC,OAAO;GACHyC,UAAU,KAAKtC,cAAa;GAC5BsG,aAAa,KAAK3E,iBAAgB;GAClC4E,QAAQ,KAAK/D,YAAW;GACxBgE,OAAO,KAAK/D,WAAU;GACtBgE,QAAQ,MAAM,KAAKnC,YAAYC,MAAAA;EACnC;CACJ;AACJ"}

package/dist/app/modules/provisioning/sources/default/types.d.ts

@@ -0,0 +1,5 @@
+import type { Config } from '../../../config/index.ts';
+export type ConfigProvisioningSourceContext = {
+    config: Config;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/app/modules/provisioning/sources/default/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/sources/default/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAEvD,MAAM,MAAM,+BAA+B,GAAG;IAC1C,MAAM,EAAE,MAAM,CAAA;CACjB,CAAC"}

package/dist/app/modules/provisioning/sources/default/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/app/modules/provisioning/sources/file/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/provisioning/sources/file/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/sources/file/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/app/modules/provisioning/sources/file/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { FileProvisioningSource } from "./module.mjs";
+export { FileProvisioningSource };

package/dist/app/modules/provisioning/sources/file/module.d.ts

@@ -0,0 +1,11 @@
+import type { RootProvisioningEntity } from '../../../../../core/provisioning/entities/index.ts';
+import { RootProvisioningValidator } from '../../../../../core/provisioning/entities/index.ts';
+import type { IProvisioningSource } from '../../../../../core/provisioning/types.ts';
+import type { FileEntitySchemaImporterOptions } from './types.ts';
+export declare class FileProvisioningSource implements IProvisioningSource {
+    protected options: FileEntitySchemaImporterOptions;
+    protected rootValidator: RootProvisioningValidator;
+    constructor(options: FileEntitySchemaImporterOptions);
+    load(): Promise<RootProvisioningEntity>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/app/modules/provisioning/sources/file/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/sources/file/module.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oDAAoD,CAAC;AACjG,OAAO,EAAE,yBAAyB,EAAE,MAAM,oDAAoD,CAAC;AAC/F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAErF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,YAAY,CAAC;AAElE,qBAAa,sBAAuB,YAAW,mBAAmB;IAC9D,SAAS,CAAC,OAAO,EAAE,+BAA+B,CAAC;IAEnD,SAAS,CAAC,aAAa,EAAE,yBAAyB,CAAC;gBAEvC,OAAO,EAAE,+BAA+B;IAM9C,IAAI,IAAI,OAAO,CAAC,sBAAsB,CAAC;CAmBhD"}

package/dist/app/modules/provisioning/sources/file/module.mjs

@@ -0,0 +1,32 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { RootProvisioningValidator } from "../../../../../core/provisioning/entities/root/validator.mjs";
+import "../../../../../core/provisioning/entities/index.mjs";
+import { CompositeProvisioningSource } from "../composite/module.mjs";
+import path from "node:path";
+import { load, locateMany } from "locter";
+//#region src/app/modules/provisioning/sources/file/module.ts
+var FileProvisioningSource = class {
+	options;
+	rootValidator;
+	constructor(options) {
+		this.options = options;
+		this.rootValidator = new RootProvisioningValidator();
+	}
+	async load() {
+		const locations = await locateMany("*.{json,yaml,yml,ts,mts,mjs,js}", { path: path.isAbsolute(this.options.cwd) ? this.options.cwd : path.join(process.cwd(), this.options.cwd) });
+		const compositeSource = new CompositeProvisioningSource([]);
+		const output = {};
+		for (const location of locations) {
+			const raw = await load(location);
+			const data = await this.rootValidator.run(raw.default);
+			compositeSource.merge(output, data);
+		}
+		return output;
+	}
+};
+//#endregion
+export { FileProvisioningSource };
+
+//# sourceMappingURL=module.mjs.map

package/dist/app/modules/provisioning/sources/file/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["load","locateMany","path","RootProvisioningValidator","CompositeProvisioningSource","FileProvisioningSource","options","rootValidator","cwd","isAbsolute","join","process","locations","compositeSource","output","location","raw","data","run","default","merge"],"sources":["../../../../../../src/app/modules/provisioning/sources/file/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n *  Author Peter Placzek (tada5hi)\n *  For the full copyright and license information,\n *  view the LICENSE file that was distributed with this source code.\n */\n\nimport { load, locateMany } from 'locter';\nimport path from 'node:path';\nimport type { RootProvisioningEntity } from '../../../../../core/provisioning/entities/index.ts';\nimport { RootProvisioningValidator } from '../../../../../core/provisioning/entities/index.ts';\nimport type { IProvisioningSource } from '../../../../../core/provisioning/types.ts';\nimport { CompositeProvisioningSource } from '../composite/index.ts';\nimport type { FileEntitySchemaImporterOptions } from './types.ts';\n\nexport class FileProvisioningSource implements IProvisioningSource {\n    protected options: FileEntitySchemaImporterOptions;\n\n    protected rootValidator: RootProvisioningValidator;\n\n    constructor(options: FileEntitySchemaImporterOptions) {\n        this.options = options;\n\n        this.rootValidator = new RootProvisioningValidator();\n    }\n\n    async load(): Promise<RootProvisioningEntity> {\n        const cwd = path.isAbsolute(this.options.cwd) ?\n            this.options.cwd :\n            path.join(process.cwd(), this.options.cwd);\n\n        const locations = await locateMany('*.{json,yaml,yml,ts,mts,mjs,js}', { path: cwd });\n\n        const compositeSource = new CompositeProvisioningSource([]);\n\n        const output : RootProvisioningEntity = {};\n        for (const location of locations) {\n            const raw = await load(location);\n            const data = await this.rootValidator.run(raw.default);\n\n            compositeSource.merge(output, data);\n        }\n\n        return output;\n    }\n}\n"],"mappings":";;;;;;;;;AAeA,IAAaK,yBAAb,MAAaA;CACCC;CAEAC;CAEV,YAAYD,SAA0C;EAClD,KAAKA,UAAUA;EAEf,KAAKC,gBAAgB,IAAIJ,0BAAAA;CAC7B;CAEA,MAAMH,OAAwC;EAK1C,MAAMY,YAAY,MAAMX,WAAW,mCAAmC,EAAEC,MAJ5DA,KAAKO,WAAW,KAAKH,QAAQE,GAAG,IACxC,KAAKF,QAAQE,MACbN,KAAKQ,KAAKC,QAAQH,IAAG,GAAI,KAAKF,QAAQE,GAAG,EAEqC,CAAA;EAElF,MAAMK,kBAAkB,IAAIT,4BAA4B,CAAA,CAAE;EAE1D,MAAMU,SAAkC,CAAC;EACzC,KAAK,MAAMC,YAAYH,WAAW;GAC9B,MAAMI,MAAM,MAAMhB,KAAKe,QAAAA;GACvB,MAAME,OAAO,MAAM,KAAKV,cAAcW,IAAIF,IAAIG,OAAO;GAErDN,gBAAgBO,MAAMN,QAAQG,IAAAA;EAClC;EAEA,OAAOH;CACX;AACJ"}

package/dist/app/modules/provisioning/sources/file/types.d.ts

@@ -0,0 +1,4 @@
+export type FileEntitySchemaImporterOptions = {
+    cwd: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/app/modules/provisioning/sources/file/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/app/modules/provisioning/sources/file/types.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,+BAA+B,GAAG;IAC1C,GAAG,EAAE,MAAM,CAAA;CACd,CAAC"}

package/dist/app/modules/provisioning/sources/file/types.mjs

@@ -0,0 +1,4 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+export {};

package/dist/app/modules/provisioning/sources/index.d.ts

@@ -0,0 +1,4 @@
+export * from './default/index.ts';
+export * from './composite/index.ts';
+export * from './file/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/provisioning/sources/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/provisioning/sources/index.ts"],"names":[],"mappings":"AAOA,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC"}

package/dist/app/modules/provisioning/sources/index.mjs

@@ -0,0 +1,9 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { DefaultProvisioningSource } from "./default/module.mjs";
+import "./default/index.mjs";
+import { CompositeProvisioningSource } from "./composite/module.mjs";
+import { FileProvisioningSource } from "./file/module.mjs";
+import "./file/index.mjs";
+export { CompositeProvisioningSource, DefaultProvisioningSource, FileProvisioningSource };

package/dist/app/modules/runtime/index.d.ts

@@ -0,0 +1,2 @@
+export * from './module.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/app/modules/runtime/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/runtime/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC"}

package/dist/app/modules/runtime/index.mjs

@@ -0,0 +1,5 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { RuntimeModule } from "./module.mjs";
+export { RuntimeModule };

package/dist/app/modules/runtime/module.d.ts

@@ -0,0 +1,9 @@
+import type { IModule } from 'orkos';
+import type { IContainer } from 'eldin';
+export declare class RuntimeModule implements IModule {
+    readonly name: string;
+    readonly dependencies: string[];
+    constructor();
+    setup(container: IContainer): Promise<void>;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/app/modules/runtime/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/runtime/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAErC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAKxC,qBAAa,aAAc,YAAW,OAAO;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;;IAO1B,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAapD"}

package/dist/app/modules/runtime/module.mjs

@@ -0,0 +1,33 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ModuleName } from "../constants.mjs";
+import { ConfigInjectionKey } from "../config/constants.mjs";
+import "../config/index.mjs";
+import { LoggerInjectionKey } from "../logger/constants.mjs";
+import "../logger/index.mjs";
+import { resolveURL } from "../../../utils/url.mjs";
+import "../../../utils/index.mjs";
+//#region src/app/modules/runtime/module.ts
+var RuntimeModule = class {
+	name;
+	dependencies;
+	constructor() {
+		this.name = ModuleName.RUNTIME;
+		this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER];
+	}
+	async setup(container) {
+		const config = container.resolve(ConfigInjectionKey);
+		const logger = container.resolve(LoggerInjectionKey);
+		logger.debug(`Environment: ${config.env}`);
+		logger.debug(`WritableDirectoryPath: ${config.writableDirectoryPath}`);
+		logger.debug(`Port: ${config.port}`);
+		logger.debug(`Host: ${config.host}`);
+		logger.debug(`Base-URL: ${config.publicUrl}`);
+		logger.debug(`Docs-URL: ${resolveURL(config.publicUrl, "docs")}`);
+	}
+};
+//#endregion
+export { RuntimeModule };
+
+//# sourceMappingURL=module.mjs.map

package/dist/app/modules/runtime/module.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.mjs","names":["ModuleName","LoggerInjectionKey","ConfigInjectionKey","resolveURL","RuntimeModule","name","dependencies","RUNTIME","CONFIG","LOGGER","setup","container","config","resolve","logger","debug","env","writableDirectoryPath","port","host","publicUrl"],"sources":["../../../../src/app/modules/runtime/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { IModule } from 'orkos';\nimport { ModuleName } from '../constants.ts';\nimport type { IContainer } from 'eldin';\nimport { LoggerInjectionKey } from '../logger/index.ts';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport { resolveURL } from '../../../utils/index.ts';\n\nexport class RuntimeModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    constructor() {\n        this.name = ModuleName.RUNTIME;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER];\n    }\n\n    async setup(container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug(`Environment: ${config.env}`);\n        logger.debug(`WritableDirectoryPath: ${config.writableDirectoryPath}`);\n        logger.debug(`Port: ${config.port}`);\n        logger.debug(`Host: ${config.host}`);\n        logger.debug(`Base-URL: ${config.publicUrl}`);\n        logger.debug(`Docs-URL: ${resolveURL(config.publicUrl, 'docs')}`);\n    }\n\n    // ----------------------------------------------------\n}\n"],"mappings":";;;;;;;;;;;AAcA,IAAaI,gBAAb,MAAaA;CACAC;CAEAC;CAET,cAAc;EACV,KAAKD,OAAOL,WAAWO;EACvB,KAAKD,eAAe,CAACN,WAAWQ,QAAQR,WAAWS,MAAAA;CACvD;CAEA,MAAMC,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQX,kBAAAA;EACjC,MAAMY,SAASH,UAAUE,QAAQZ,kBAAAA;EAEjCa,OAAOC,MAAM,gBAAgBH,OAAOI,KAAK;EACzCF,OAAOC,MAAM,0BAA0BH,OAAOK,uBAAuB;EACrEH,OAAOC,MAAM,SAASH,OAAOM,MAAM;EACnCJ,OAAOC,MAAM,SAASH,OAAOO,MAAM;EACnCL,OAAOC,MAAM,aAAaH,OAAOQ,WAAW;EAC5CN,OAAOC,MAAM,aAAaZ,WAAWS,OAAOQ,WAAW,MAAA,GAAS;CACpE;AAGJ"}

package/dist/cli/commands/healthcheck.d.ts

@@ -1,14 +1,2 @@
-import type { Arguments, Argv, CommandModule } from 'yargs';
-interface HealthCheckArguments extends Arguments {
-    config: string | undefined;
-}
-export declare class HealthCheckCommand implements CommandModule {
-    command: string;
-    describe: string;
-    builder(args: Argv): Argv<{
-        config: unknown;
-    }>;
-    handler(args: HealthCheckArguments): Promise<void>;
-}
-export {};
+export declare function defineCLIHealthCheckCommand(): import("citty").CommandDef<import("citty").ArgsDef>;
 //# sourceMappingURL=healthcheck.d.ts.map

package/dist/cli/commands/healthcheck.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"healthcheck.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/healthcheck.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAG5D,UAAU,oBAAqB,SAAQ,SAAS;IAC5C,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9B;AAED,qBAAa,kBAAmB,YAAW,aAAa;IACpD,OAAO,SAAiB;IAExB,QAAQ,SAA4C;IAEpD,OAAO,CAAC,IAAI,EAAE,IAAI;;;IAQZ,OAAO,CAAC,IAAI,EAAE,oBAAoB;CA2B3C"}
+{"version":3,"file":"healthcheck.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/healthcheck.ts"],"names":[],"mappings":"AAYA,wBAAgB,2BAA2B,wDAmC1C"}

package/dist/cli/commands/healthcheck.mjs

@@ -0,0 +1,37 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { ConfigInjectionKey } from "../../app/modules/config/constants.mjs";
+import { ApplicationBuilder } from "../../app/builder.mjs";
+import "../../app/index.mjs";
+import process from "node:process";
+import { defineCommand } from "citty";
+import http from "node:http";
+//#region src/cli/commands/healthcheck.ts
+function defineCLIHealthCheckCommand() {
+	return defineCommand({
+		meta: { name: "healthcheck" },
+		async setup() {
+			const app = new ApplicationBuilder().withConfig().build();
+			await app.setup();
+			const config = app.container.resolve(ConfigInjectionKey);
+			const healthCheck = http.request({
+				path: "/metrics",
+				host: "0.0.0.0",
+				port: config.port,
+				timeout: 2e3
+			}, (res) => {
+				if (res.statusCode === 200) process.exit(0);
+				else process.exit(1);
+			});
+			healthCheck.on("error", () => {
+				process.exit(1);
+			});
+			healthCheck.end();
+		}
+	});
+}
+//#endregion
+export { defineCLIHealthCheckCommand };
+
+//# sourceMappingURL=healthcheck.mjs.map

package/dist/cli/commands/healthcheck.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"healthcheck.mjs","names":["defineCommand","http","process","ApplicationBuilder","ConfigInjectionKey","defineCLIHealthCheckCommand","meta","name","setup","app","withConfig","build","config","container","resolve","healthCheck","request","path","host","port","timeout","res","statusCode","exit","on","end"],"sources":["../../../src/cli/commands/healthcheck.ts"],"sourcesContent":["/*\n * Copyright (c) 2021-2023.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { defineCommand } from 'citty';\nimport http from 'node:http';\nimport process from 'node:process';\nimport { ApplicationBuilder, ConfigInjectionKey } from '../../app/index.ts';\n\nexport function defineCLIHealthCheckCommand() {\n    return defineCommand({\n        meta: { name: 'healthcheck' },\n        async setup() {\n            const app = new ApplicationBuilder()\n                .withConfig()\n                .build();\n\n            await app.setup();\n\n            const config = app.container.resolve(ConfigInjectionKey);\n\n            const healthCheck = http.request(\n                {\n                    path: '/metrics',\n                    host: '0.0.0.0',\n                    port: config.port,\n                    timeout: 2000,\n                },\n                (res) => {\n                    if (res.statusCode === 200) {\n                        process.exit(0);\n                    } else {\n                        process.exit(1);\n                    }\n                },\n            );\n\n            healthCheck.on('error', () => {\n                process.exit(1);\n            });\n\n            healthCheck.end();\n        },\n    });\n}\n"],"mappings":";;;;;;;;;;AAYA,SAAgBK,8BAAAA;CACZ,OAAOL,cAAc;EACjBM,MAAM,EAAEC,MAAM,cAAc;EAC5B,MAAMC,QAAAA;GACF,MAAMC,MAAM,IAAIN,mBAAAA,CAAAA,CACXO,WAAU,CAAA,CACVC,MAAK;GAEV,MAAMF,IAAID,MAAK;GAEf,MAAMI,SAASH,IAAII,UAAUC,QAAQV,kBAAAA;GAErC,MAAMW,cAAcd,KAAKe,QACrB;IACIC,MAAM;IACNC,MAAM;IACNC,MAAMP,OAAOO;IACbC,SAAS;GACb,IACCC,QAAAA;IACG,IAAIA,IAAIC,eAAe,KACnBpB,QAAQqB,KAAK,CAAA;SAEbrB,QAAQqB,KAAK,CAAA;GAErB,CAAA;GAGJR,YAAYS,GAAG,eAAS;IACpBtB,QAAQqB,KAAK,CAAA;GACjB,CAAA;GAEAR,YAAYU,IAAG;EACnB;CACJ,CAAA;AACJ"}

package/dist/cli/commands/index.d.ts

@@ -1,8 +1,5 @@
-export * from './healthcheck';
-export * from './migration-generate';
-export * from './migration-revert';
-export * from './migration-status';
-export * from './reset';
-export * from './setup';
-export * from './start';
+export * from './healthcheck.ts';
+export * from './migration.ts';
+export * from './reset.ts';
+export * from './start.ts';
 //# sourceMappingURL=index.d.ts.map