@authup/server-core 1.0.0-beta.52 → 1.0.0-beta.53

package/dist/app/modules/database/repositories/user-authenticator/repository.mjs

@@ -0,0 +1,92 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { applyRealmScopeSelect } from "../helpers.mjs";
+import { applyQuery } from "typeorm-extension";
+//#region src/app/modules/database/repositories/user-authenticator/repository.ts
+var UserAuthenticatorRepositoryAdapter = class {
+	repository;
+	constructor(repository) {
+		this.repository = repository;
+	}
+	create(data) {
+		return this.repository.create(data);
+	}
+	async save(entity) {
+		return this.repository.save(entity);
+	}
+	async remove(entity) {
+		await this.repository.remove(entity);
+	}
+	async removeAllByUser(userId, kind) {
+		await this.repository.delete({
+			user_id: userId,
+			kind
+		});
+	}
+	async findOneById(id) {
+		return this.repository.findOneBy({ id });
+	}
+	async findOneWithSecretsById(id) {
+		return this.repository.createQueryBuilder("userAuthenticator").addSelect(["userAuthenticator.secret", "userAuthenticator.codes"]).where("userAuthenticator.id = :id", { id }).getOne();
+	}
+	async findAllByUser(userId) {
+		return this.repository.find({ where: { user_id: userId } });
+	}
+	async findAllWithSecretsByUser(userId, filter = {}) {
+		const qb = this.repository.createQueryBuilder("userAuthenticator").addSelect(["userAuthenticator.secret", "userAuthenticator.codes"]).where("userAuthenticator.user_id = :userId", { userId });
+		if (filter.kind) qb.andWhere("userAuthenticator.kind = :kind", { kind: filter.kind });
+		if (typeof filter.confirmed !== "undefined") qb.andWhere("userAuthenticator.confirmed = :confirmed", { confirmed: filter.confirmed });
+		return qb.getMany();
+	}
+	async hasConfirmedByUser(userId) {
+		return await this.repository.countBy({
+			user_id: userId,
+			confirmed: true
+		}) > 0;
+	}
+	async findMany(query, options = {}) {
+		const qb = this.repository.createQueryBuilder("userAuthenticator");
+		const { pagination } = applyQuery(qb, query, {
+			defaultAlias: "userAuthenticator",
+			fields: { allowed: [
+				"id",
+				"kind",
+				"name",
+				"confirmed",
+				"last_used_at",
+				"created_at",
+				"updated_at",
+				"user_id",
+				"realm_id"
+			] },
+			filters: { allowed: [
+				"id",
+				"kind",
+				"confirmed",
+				"user_id",
+				"realm_id"
+			] },
+			sort: { allowed: [
+				"created_at",
+				"updated_at",
+				"last_used_at"
+			] },
+			pagination: { maxLimit: 50 }
+		});
+		applyRealmScopeSelect(qb, "userAuthenticator", ["user_id"]);
+		if (options.owner) qb.andWhere("userAuthenticator.user_id = :ownerUserId", { ownerUserId: options.owner.userId });
+		const [entities, total] = await qb.getManyAndCount();
+		return {
+			data: entities,
+			meta: {
+				total,
+				...pagination
+			}
+		};
+	}
+};
+//#endregion
+export { UserAuthenticatorRepositoryAdapter };
+
+//# sourceMappingURL=repository.mjs.map

package/dist/app/modules/database/repositories/user-authenticator/repository.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.mjs","names":["applyQuery","applyRealmScopeSelect","UserAuthenticatorRepositoryAdapter","repository","create","data","save","entity","remove","removeAllByUser","userId","kind","delete","user_id","findOneById","id","findOneBy","findOneWithSecretsById","createQueryBuilder","addSelect","where","getOne","findAllByUser","find","findAllWithSecretsByUser","filter","qb","andWhere","confirmed","getMany","hasConfirmedByUser","count","countBy","findMany","query","options","pagination","defaultAlias","fields","allowed","filters","sort","maxLimit","owner","ownerUserId","entities","total","getManyAndCount","meta"],"sources":["../../../../../../src/app/modules/database/repositories/user-authenticator/repository.ts"],"sourcesContent":["/*\n * Copyright (c) 2026.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport type { UserAuthenticator, UserAuthenticatorKind } from '@authup/core-kit';\nimport type { Repository } from 'typeorm';\nimport { applyQuery } from 'typeorm-extension';\nimport type { EntityRepositoryFindManyResult } from '@authup/server-kit';\nimport type {\n    IUserAuthenticatorRepository,\n    UserAuthenticatorFindManyOptions,\n    UserAuthenticatorSecretsFilter,\n} from '../../../../../core/index.ts';\nimport { applyRealmScopeSelect } from '../helpers.ts';\n\nexport class UserAuthenticatorRepositoryAdapter implements IUserAuthenticatorRepository {\n    private readonly repository: Repository<UserAuthenticator>;\n\n    constructor(repository: Repository<UserAuthenticator>) {\n        this.repository = repository;\n    }\n\n    create(data: Partial<UserAuthenticator>): UserAuthenticator {\n        return this.repository.create(data);\n    }\n\n    async save(entity: UserAuthenticator): Promise<UserAuthenticator> {\n        return this.repository.save(entity);\n    }\n\n    async remove(entity: UserAuthenticator): Promise<void> {\n        await this.repository.remove(entity);\n    }\n\n    async removeAllByUser(userId: string, kind: `${UserAuthenticatorKind}`): Promise<void> {\n        await this.repository.delete({ user_id: userId, kind });\n    }\n\n    async findOneById(id: string): Promise<UserAuthenticator | null> {\n        return this.repository.findOneBy({ id });\n    }\n\n    async findOneWithSecretsById(id: string): Promise<UserAuthenticator | null> {\n        return this.repository.createQueryBuilder('userAuthenticator')\n            .addSelect(['userAuthenticator.secret', 'userAuthenticator.codes'])\n            .where('userAuthenticator.id = :id', { id })\n            .getOne();\n    }\n\n    async findAllByUser(userId: string): Promise<UserAuthenticator[]> {\n        return this.repository.find({ where: { user_id: userId } });\n    }\n\n    async findAllWithSecretsByUser(\n        userId: string,\n        filter: UserAuthenticatorSecretsFilter = {},\n    ): Promise<UserAuthenticator[]> {\n        const qb = this.repository.createQueryBuilder('userAuthenticator')\n            .addSelect(['userAuthenticator.secret', 'userAuthenticator.codes'])\n            .where('userAuthenticator.user_id = :userId', { userId });\n\n        if (filter.kind) {\n            qb.andWhere('userAuthenticator.kind = :kind', { kind: filter.kind });\n        }\n\n        if (typeof filter.confirmed !== 'undefined') {\n            qb.andWhere('userAuthenticator.confirmed = :confirmed', { confirmed: filter.confirmed });\n        }\n\n        return qb.getMany();\n    }\n\n    async hasConfirmedByUser(userId: string): Promise<boolean> {\n        const count = await this.repository.countBy({ user_id: userId, confirmed: true });\n        return count > 0;\n    }\n\n    async findMany(\n        query: Record<string, any>,\n        options: UserAuthenticatorFindManyOptions = {},\n    ): Promise<EntityRepositoryFindManyResult<UserAuthenticator>> {\n        const qb = this.repository.createQueryBuilder('userAuthenticator');\n\n        const { pagination } = applyQuery(qb, query, {\n            defaultAlias: 'userAuthenticator',\n            fields: {\n                allowed: [\n                    'id',\n                    'kind',\n                    'name',\n                    'confirmed',\n                    'last_used_at',\n                    'created_at',\n                    'updated_at',\n                    'user_id',\n                    'realm_id',\n                ],\n            },\n            filters: { allowed: ['id', 'kind', 'confirmed', 'user_id', 'realm_id'] },\n            sort: { allowed: ['created_at', 'updated_at', 'last_used_at'] },\n            pagination: { maxLimit: 50 },\n        });\n\n        applyRealmScopeSelect(qb, 'userAuthenticator', ['user_id']);\n\n        if (options.owner) {\n            // mandatory constraint — not overridable by a rapiq filter\n            qb.andWhere('userAuthenticator.user_id = :ownerUserId', { ownerUserId: options.owner.userId });\n        }\n\n        const [entities, total] = await qb.getManyAndCount();\n\n        return {\n            data: entities,\n            meta: {\n                total,\n                ...pagination,\n            },\n        };\n    }\n}\n"],"mappings":";;;;;;AAkBA,IAAaE,qCAAb,MAAaA;CACQC;CAEjB,YAAYA,YAA2C;EACnD,KAAKA,aAAaA;CACtB;CAEAC,OAAOC,MAAqD;EACxD,OAAO,KAAKF,WAAWC,OAAOC,IAAAA;CAClC;CAEA,MAAMC,KAAKC,QAAuD;EAC9D,OAAO,KAAKJ,WAAWG,KAAKC,MAAAA;CAChC;CAEA,MAAMC,OAAOD,QAA0C;EACnD,MAAM,KAAKJ,WAAWK,OAAOD,MAAAA;CACjC;CAEA,MAAME,gBAAgBC,QAAgBC,MAAiD;EACnF,MAAM,KAAKR,WAAWS,OAAO;GAAEC,SAASH;GAAQC;EAAK,CAAA;CACzD;CAEA,MAAMG,YAAYC,IAA+C;EAC7D,OAAO,KAAKZ,WAAWa,UAAU,EAAED,GAAG,CAAA;CAC1C;CAEA,MAAME,uBAAuBF,IAA+C;EACxE,OAAO,KAAKZ,WAAWe,mBAAmB,mBAAA,CAAA,CACrCC,UAAU,CAAC,4BAA4B,yBAAA,CAA0B,CAAA,CACjEC,MAAM,8BAA8B,EAAEL,GAAG,CAAA,CAAA,CACzCM,OAAM;CACf;CAEA,MAAMC,cAAcZ,QAA8C;EAC9D,OAAO,KAAKP,WAAWoB,KAAK,EAAEH,OAAO,EAAEP,SAASH,OAAO,EAAE,CAAA;CAC7D;CAEA,MAAMc,yBACFd,QACAe,SAAyC,CAAC,GACd;EAC5B,MAAMC,KAAK,KAAKvB,WAAWe,mBAAmB,mBAAA,CAAA,CACzCC,UAAU,CAAC,4BAA4B,yBAAA,CAA0B,CAAA,CACjEC,MAAM,uCAAuC,EAAEV,OAAO,CAAA;EAE3D,IAAIe,OAAOd,MACPe,GAAGC,SAAS,kCAAkC,EAAEhB,MAAMc,OAAOd,KAAK,CAAA;EAGtE,IAAI,OAAOc,OAAOG,cAAc,aAC5BF,GAAGC,SAAS,4CAA4C,EAAEC,WAAWH,OAAOG,UAAU,CAAA;EAG1F,OAAOF,GAAGG,QAAO;CACrB;CAEA,MAAMC,mBAAmBpB,QAAkC;EAEvD,OAAOqB,MADa,KAAK5B,WAAW6B,QAAQ;GAAEnB,SAASH;GAAQkB,WAAW;EAAK,CAAA,IAChE;CACnB;CAEA,MAAMK,SACFC,OACAC,UAA4C,CAAC,GACa;EAC1D,MAAMT,KAAK,KAAKvB,WAAWe,mBAAmB,mBAAA;EAE9C,MAAM,EAAEkB,eAAepC,WAAW0B,IAAIQ,OAAO;GACzCG,cAAc;GACdC,QAAQ,EACJC,SAAS;IACL;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;KAER;GACAC,SAAS,EAAED,SAAS;IAAC;IAAM;IAAQ;IAAa;IAAW;KAAY;GACvEE,MAAM,EAAEF,SAAS;IAAC;IAAc;IAAc;KAAgB;GAC9DH,YAAY,EAAEM,UAAU,GAAG;EAC/B,CAAA;EAEAzC,sBAAsByB,IAAI,qBAAqB,CAAC,SAAA,CAAU;EAE1D,IAAIS,QAAQQ,OAERjB,GAAGC,SAAS,4CAA4C,EAAEiB,aAAaT,QAAQQ,MAAMjC,OAAO,CAAA;EAGhG,MAAM,CAACmC,UAAUC,SAAS,MAAMpB,GAAGqB,gBAAe;EAElD,OAAO;GACH1C,MAAMwC;GACNG,MAAM;IACFF;IACA,GAAGV;GACP;EACJ;CACJ;AACJ"}

package/dist/app/modules/http/module.d.ts

@@ -20,6 +20,14 @@ export declare class HTTPModule implements IModule {
      * hook writes per-user Authorization state onto the client.
      */
     protected registerUIHttpClient(container: IContainer): void;
+    /**
+     * Auth-flow metric counters for the emit points (plan 058 Part 2).
+     * Registered before the controllers are built — the factories resolve the
+     * token. Prometheus-backed iff the prometheus middleware is enabled
+     * (mirrors HTTPMiddlewareModule.isEnabled: boolean|object, false = off),
+     * otherwise a noop so emit sites never need a guard beyond `?.`.
+     */
+    protected registerMetrics(container: IContainer): void;
     teardown(container: IContainer): Promise<void>;
 }
 //# sourceMappingURL=module.d.ts.map

package/dist/app/modules/http/module.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/http/module.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAGrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAGhF,qBAAa,UAAW,YAAW,OAAO;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAEhC,SAAS,CAAC,QAAQ,EAAG,UAAU,GAAG,SAAS,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,sBAAsB,EAAG,OAAO,CAAC;;IAYrC,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAsCjD;;;;;;;OAOG;IACH,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IAiCrD,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAavD"}
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/app/modules/http/module.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAIrC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAExC,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAGhF,qBAAa,UAAW,YAAW,OAAO;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IAEhC,SAAS,CAAC,QAAQ,EAAG,UAAU,GAAG,SAAS,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAG,oBAAoB,CAAC;IAE5C,SAAS,CAAC,sBAAsB,EAAG,OAAO,CAAC;;IAYrC,KAAK,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAuCjD;;;;;;;OAOG;IACH,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IA+B3D;;;;;;OAMG;IACH,SAAS,CAAC,eAAe,CAAC,SAAS,EAAE,UAAU,GAAG,IAAI;IAehD,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAevD"}

package/dist/app/modules/http/module.mjs

@@ -1,6 +1,8 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { NoopAuthFlowMetrics } from "../../../core/metrics/noop.mjs";
+import "../../../core/index.mjs";
 import { ModuleName } from "../constants.mjs";
 import { ConfigInjectionKey } from "../config/constants.mjs";
 import "../config/index.mjs";
@@ -9,11 +11,14 @@ import "../logger/index.mjs";
 import { HTTPInjectionKey } from "./constants.mjs";
 import { createInternalUIHttpClient } from "../../../adapters/http/ui/internal-http-client.mjs";
 import "../../../adapters/http/ui/index.mjs";
+import { MetricsInjectionKey } from "../metrics/constants.mjs";
+import { PromAuthFlowMetrics } from "../metrics/prom.mjs";
+import "../metrics/index.mjs";
 import { HTTPControllerModule } from "./modules/controller.mjs";
 import { HTTPMiddlewareModule } from "./modules/middleware.mjs";
 import "./modules/index.mjs";
-import { Client } from "@authup/core-http-kit";
 import { App } from "routup";
+import { Client } from "@authup/core-http-kit";
 import { serve } from "routup/node";
 //#region src/app/modules/http/module.ts
 var HTTPModule = class {
@@ -42,6 +47,7 @@ var HTTPModule = class {
 		logger.debug("Starting http server...");
 		const router = new App();
 		this.registerUIHttpClient(container);
+		this.registerMetrics(container);
 		await this.middleware.mountBefore(router, container);
 		await this.controller.mount(router, container);
 		await this.middleware.mountAfter(router, container);
@@ -77,11 +83,23 @@ var HTTPModule = class {
 		} }, { lifetime: "transient" });
 		this.uiHttpClientRegistered = true;
 	}
+	/**
+	* Auth-flow metric counters for the emit points (plan 058 Part 2).
+	* Registered before the controllers are built — the factories resolve the
+	* token. Prometheus-backed iff the prometheus middleware is enabled
+	* (mirrors HTTPMiddlewareModule.isEnabled: boolean|object, false = off),
+	* otherwise a noop so emit sites never need a guard beyond `?.`.
+	*/ registerMetrics(container) {
+		const config = container.resolve(ConfigInjectionKey);
+		const enabled = typeof config.middlewarePrometheus !== "boolean" || config.middlewarePrometheus === true;
+		container.register(MetricsInjectionKey, { useValue: enabled ? new PromAuthFlowMetrics() : new NoopAuthFlowMetrics() });
+	}
 	async teardown(container) {
 		if (this.uiHttpClientRegistered) {
 			container.unregister(HTTPInjectionKey.UIHttpClient);
 			this.uiHttpClientRegistered = false;
 		}
+		container.unregister(MetricsInjectionKey);
 		if (!this.instance) return;
 		container.unregister(HTTPInjectionKey.Server);
 		await this.instance.close();

package/dist/app/modules/http/module.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"module.mjs","names":["Client","App","serve","ConfigInjectionKey","createInternalUIHttpClient","ModuleName","HTTPInjectionKey","HTTPControllerModule","HTTPMiddlewareModule","LoggerInjectionKey","HTTPModule","name","dependencies","instance","middleware","controller","uiHttpClientRegistered","HTTP","CONFIG","LOGGER","AUTHENTICATION","IDENTITY","OAUTH2","setup","container","config","resolve","logger","debug","router","registerUIHttpClient","mountBefore","mount","mountAfter","server","port","hostname","host","silent","gracefulShutdown","ready","url","register","Server","useValue","has","UIHttpClient","useFactory","c","undefined","publicURL","publicUrl","internalURL","baseURL","lifetime","teardown","unregister","close"],"sources":["../../../../src/app/modules/http/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Client } from '@authup/core-http-kit';\nimport { App } from 'routup';\nimport { serve } from 'routup/node';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IModule } from 'orkos';\nimport { createInternalUIHttpClient } from '../../../adapters/http/ui/index.ts';\nimport { ModuleName } from '../constants.ts';\nimport type { HTTPServer } from './constants.ts';\nimport { HTTPInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\nimport { HTTPControllerModule, HTTPMiddlewareModule } from './modules/index.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport class HTTPModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    protected instance : HTTPServer | undefined;\n\n    protected middleware : HTTPMiddlewareModule;\n\n    protected controller : HTTPControllerModule;\n\n    protected uiHttpClientRegistered : boolean;\n\n    constructor() {\n        this.name = ModuleName.HTTP;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER, ModuleName.AUTHENTICATION, ModuleName.IDENTITY, ModuleName.OAUTH2];\n        this.controller = new HTTPControllerModule();\n        this.middleware = new HTTPMiddlewareModule();\n        this.uiHttpClientRegistered = false;\n    }\n\n    // ----------------------------------------------------\n\n    async setup(container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug('Starting http server...');\n\n        const router = new App();\n\n        this.registerUIHttpClient(container);\n\n        await this.middleware.mountBefore(router, container);\n        await this.controller.mount(router, container);\n        await this.middleware.mountAfter(router, container);\n\n        const server = serve(router, {\n            port: config.port,\n            hostname: config.host,\n            silent: true,\n            // Shutdown is driven by the orkos teardown chain (see cli/commands/start.ts);\n            // srvx's plugin would only close the HTTP server, leaving DB / cache / etc. open.\n            gracefulShutdown: false,\n        });\n\n        await server.ready();\n\n        this.instance = server;\n\n        if (server.url) {\n            logger.debug(`Listening on ${server.url}`);\n        }\n\n        container.register(HTTPInjectionKey.Server, { useValue: server });\n\n        logger.debug('Started http server.');\n    }\n\n    // ----------------------------------------------------\n\n    /**\n     * Default HTTP client for the SSR'd UI pages: dispatches against the\n     * server's own listen address instead of round-tripping through the\n     * reverse proxy at `publicUrl` (see `createInternalUIHttpClient`).\n     * Skipped when the token is already bound (test injection wins).\n     * Transient lifetime is mandatory — client-web-kit's authentication\n     * hook writes per-user Authorization state onto the client.\n     */\n    protected registerUIHttpClient(container: IContainer): void {\n        if (container.has(HTTPInjectionKey.UIHttpClient)) {\n            return;\n        }\n\n        container.register(HTTPInjectionKey.UIHttpClient, {\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                // The server token is registered after listen; a resolve can\n                // only happen on a request, so it is present by then. The\n                // guards keep an edge case on the previous (public URL)\n                // dispatch behavior instead of failing the render.\n                const server = c.has(HTTPInjectionKey.Server) ?\n                    c.resolve(HTTPInjectionKey.Server) :\n                    undefined;\n\n                if (server && server.url) {\n                    return createInternalUIHttpClient({\n                        publicURL: config.publicUrl,\n                        internalURL: server.url,\n                    });\n                }\n\n                return new Client({ baseURL: config.publicUrl });\n            },\n        }, { lifetime: 'transient' });\n\n        this.uiHttpClientRegistered = true;\n    }\n\n    // ----------------------------------------------------\n\n    async teardown(container: IContainer): Promise<void> {\n        if (this.uiHttpClientRegistered) {\n            container.unregister(HTTPInjectionKey.UIHttpClient);\n            this.uiHttpClientRegistered = false;\n        }\n\n        if (!this.instance) return;\n\n        container.unregister(HTTPInjectionKey.Server);\n\n        await this.instance.close();\n        this.instance = undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAoBA,IAAaU,aAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKL,OAAON,WAAWY;EACvB,KAAKL,eAAe;GAACP,WAAWa;GAAQb,WAAWc;GAAQd,WAAWe;GAAgBf,WAAWgB;GAAUhB,WAAWiB;;EACtH,KAAKP,aAAa,IAAIR,qBAAAA;EACtB,KAAKO,aAAa,IAAIN,qBAAAA;EACtB,KAAKQ,yBAAyB;CAClC;CAIA,MAAMO,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQvB,kBAAAA;EACjC,MAAMwB,SAASH,UAAUE,QAAQjB,kBAAAA;EAEjCkB,OAAOC,MAAM,yBAAA;EAEb,MAAMC,SAAS,IAAI5B,IAAAA;EAEnB,KAAK6B,qBAAqBN,SAAAA;EAE1B,MAAM,KAAKV,WAAWiB,YAAYF,QAAQL,SAAAA;EAC1C,MAAM,KAAKT,WAAWiB,MAAMH,QAAQL,SAAAA;EACpC,MAAM,KAAKV,WAAWmB,WAAWJ,QAAQL,SAAAA;EAEzC,MAAMU,SAAShC,MAAM2B,QAAQ;GACzBM,MAAMV,OAAOU;GACbC,UAAUX,OAAOY;GACjBC,QAAQ;GAGRC,kBAAkB;EACtB,CAAA;EAEA,MAAML,OAAOM,MAAK;EAElB,KAAK3B,WAAWqB;EAEhB,IAAIA,OAAOO,KACPd,OAAOC,MAAM,gBAAgBM,OAAOO,KAAK;EAG7CjB,UAAUkB,SAASpC,iBAAiBqC,QAAQ,EAAEC,UAAUV,OAAO,CAAA;EAE/DP,OAAOC,MAAM,sBAAA;CACjB;;;;;;;;IAYA,qBAA+BJ,WAA6B;EACxD,IAAIA,UAAUqB,IAAIvC,iBAAiBwC,YAAY,GAC3C;EAGJtB,UAAUkB,SAASpC,iBAAiBwC,cAAc,EAC9CC,aAAaC,MAAAA;GACT,MAAMvB,SAASuB,EAAEtB,QAAQvB,kBAAAA;GAMzB,MAAM+B,SAASc,EAAEH,IAAIvC,iBAAiBqC,MAAM,IACxCK,EAAEtB,QAAQpB,iBAAiBqC,MAAM,IACjCM,KAAAA;GAEJ,IAAIf,UAAUA,OAAOO,KACjB,OAAOrC,2BAA2B;IAC9B8C,WAAWzB,OAAO0B;IAClBC,aAAalB,OAAOO;GACxB,CAAA;GAGJ,OAAO,IAAIzC,OAAO,EAAEqD,SAAS5B,OAAO0B,UAAU,CAAA;EAClD,EACJ,GAAG,EAAEG,UAAU,YAAY,CAAA;EAE3B,KAAKtC,yBAAyB;CAClC;CAIA,MAAMuC,SAAS/B,WAAsC;EACjD,IAAI,KAAKR,wBAAwB;GAC7BQ,UAAUgC,WAAWlD,iBAAiBwC,YAAY;GAClD,KAAK9B,yBAAyB;EAClC;EAEA,IAAI,CAAC,KAAKH,UAAU;EAEpBW,UAAUgC,WAAWlD,iBAAiBqC,MAAM;EAE5C,MAAM,KAAK9B,SAAS4C,MAAK;EACzB,KAAK5C,WAAWoC,KAAAA;CACpB;AACJ"}
+{"version":3,"file":"module.mjs","names":["Client","App","serve","ConfigInjectionKey","createInternalUIHttpClient","NoopAuthFlowMetrics","ModuleName","HTTPInjectionKey","MetricsInjectionKey","PromAuthFlowMetrics","HTTPControllerModule","HTTPMiddlewareModule","LoggerInjectionKey","HTTPModule","name","dependencies","instance","middleware","controller","uiHttpClientRegistered","HTTP","CONFIG","LOGGER","AUTHENTICATION","IDENTITY","OAUTH2","setup","container","config","resolve","logger","debug","router","registerUIHttpClient","registerMetrics","mountBefore","mount","mountAfter","server","port","hostname","host","silent","gracefulShutdown","ready","url","register","Server","useValue","has","UIHttpClient","useFactory","c","undefined","publicURL","publicUrl","internalURL","baseURL","lifetime","enabled","middlewarePrometheus","teardown","unregister","close"],"sources":["../../../../src/app/modules/http/module.ts"],"sourcesContent":["/*\n * Copyright (c) 2025.\n * Author Peter Placzek (tada5hi)\n * For the full copyright and license information,\n * view the LICENSE file that was distributed with this source code.\n */\n\nimport { Client } from '@authup/core-http-kit';\nimport { App } from 'routup';\nimport { serve } from 'routup/node';\nimport { ConfigInjectionKey } from '../config/index.ts';\nimport type { IModule } from 'orkos';\nimport { createInternalUIHttpClient } from '../../../adapters/http/ui/index.ts';\nimport { NoopAuthFlowMetrics } from '../../../core/index.ts';\nimport { ModuleName } from '../constants.ts';\nimport type { HTTPServer } from './constants.ts';\nimport { HTTPInjectionKey } from './constants.ts';\nimport type { IContainer } from 'eldin';\nimport { MetricsInjectionKey, PromAuthFlowMetrics } from '../metrics/index.ts';\nimport { HTTPControllerModule, HTTPMiddlewareModule } from './modules/index.ts';\nimport { LoggerInjectionKey } from '../logger/index.ts';\n\nexport class HTTPModule implements IModule {\n    readonly name: string;\n\n    readonly dependencies: string[];\n\n    protected instance : HTTPServer | undefined;\n\n    protected middleware : HTTPMiddlewareModule;\n\n    protected controller : HTTPControllerModule;\n\n    protected uiHttpClientRegistered : boolean;\n\n    constructor() {\n        this.name = ModuleName.HTTP;\n        this.dependencies = [ModuleName.CONFIG, ModuleName.LOGGER, ModuleName.AUTHENTICATION, ModuleName.IDENTITY, ModuleName.OAUTH2];\n        this.controller = new HTTPControllerModule();\n        this.middleware = new HTTPMiddlewareModule();\n        this.uiHttpClientRegistered = false;\n    }\n\n    // ----------------------------------------------------\n\n    async setup(container: IContainer): Promise<void> {\n        const config = container.resolve(ConfigInjectionKey);\n        const logger = container.resolve(LoggerInjectionKey);\n\n        logger.debug('Starting http server...');\n\n        const router = new App();\n\n        this.registerUIHttpClient(container);\n        this.registerMetrics(container);\n\n        await this.middleware.mountBefore(router, container);\n        await this.controller.mount(router, container);\n        await this.middleware.mountAfter(router, container);\n\n        const server = serve(router, {\n            port: config.port,\n            hostname: config.host,\n            silent: true,\n            // Shutdown is driven by the orkos teardown chain (see cli/commands/start.ts);\n            // srvx's plugin would only close the HTTP server, leaving DB / cache / etc. open.\n            gracefulShutdown: false,\n        });\n\n        await server.ready();\n\n        this.instance = server;\n\n        if (server.url) {\n            logger.debug(`Listening on ${server.url}`);\n        }\n\n        container.register(HTTPInjectionKey.Server, { useValue: server });\n\n        logger.debug('Started http server.');\n    }\n\n    // ----------------------------------------------------\n\n    /**\n     * Default HTTP client for the SSR'd UI pages: dispatches against the\n     * server's own listen address instead of round-tripping through the\n     * reverse proxy at `publicUrl` (see `createInternalUIHttpClient`).\n     * Skipped when the token is already bound (test injection wins).\n     * Transient lifetime is mandatory — client-web-kit's authentication\n     * hook writes per-user Authorization state onto the client.\n     */\n    protected registerUIHttpClient(container: IContainer): void {\n        if (container.has(HTTPInjectionKey.UIHttpClient)) {\n            return;\n        }\n\n        container.register(HTTPInjectionKey.UIHttpClient, {\n            useFactory: (c) => {\n                const config = c.resolve(ConfigInjectionKey);\n\n                // The server token is registered after listen; a resolve can\n                // only happen on a request, so it is present by then. The\n                // guards keep an edge case on the previous (public URL)\n                // dispatch behavior instead of failing the render.\n                const server = c.has(HTTPInjectionKey.Server) ?\n                    c.resolve(HTTPInjectionKey.Server) :\n                    undefined;\n\n                if (server && server.url) {\n                    return createInternalUIHttpClient({\n                        publicURL: config.publicUrl,\n                        internalURL: server.url,\n                    });\n                }\n\n                return new Client({ baseURL: config.publicUrl });\n            },\n        }, { lifetime: 'transient' });\n\n        this.uiHttpClientRegistered = true;\n    }\n\n    /**\n     * Auth-flow metric counters for the emit points (plan 058 Part 2).\n     * Registered before the controllers are built — the factories resolve the\n     * token. Prometheus-backed iff the prometheus middleware is enabled\n     * (mirrors HTTPMiddlewareModule.isEnabled: boolean|object, false = off),\n     * otherwise a noop so emit sites never need a guard beyond `?.`.\n     */\n    protected registerMetrics(container: IContainer): void {\n        const config = container.resolve(ConfigInjectionKey);\n\n        const enabled = typeof config.middlewarePrometheus !== 'boolean' ||\n            config.middlewarePrometheus === true;\n\n        container.register(MetricsInjectionKey, {\n            useValue: enabled ?\n                new PromAuthFlowMetrics() :\n                new NoopAuthFlowMetrics(),\n        });\n    }\n\n    // ----------------------------------------------------\n\n    async teardown(container: IContainer): Promise<void> {\n        if (this.uiHttpClientRegistered) {\n            container.unregister(HTTPInjectionKey.UIHttpClient);\n            this.uiHttpClientRegistered = false;\n        }\n\n        container.unregister(MetricsInjectionKey);\n\n        if (!this.instance) return;\n\n        container.unregister(HTTPInjectionKey.Server);\n\n        await this.instance.close();\n        this.instance = undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAsBA,IAAaa,aAAb,MAAaA;CACAC;CAEAC;CAECC;CAEAC;CAEAC;CAEAC;CAEV,cAAc;EACV,KAAKL,OAAOR,WAAWc;EACvB,KAAKL,eAAe;GAACT,WAAWe;GAAQf,WAAWgB;GAAQhB,WAAWiB;GAAgBjB,WAAWkB;GAAUlB,WAAWmB;;EACtH,KAAKP,aAAa,IAAIR,qBAAAA;EACtB,KAAKO,aAAa,IAAIN,qBAAAA;EACtB,KAAKQ,yBAAyB;CAClC;CAIA,MAAMO,MAAMC,WAAsC;EAC9C,MAAMC,SAASD,UAAUE,QAAQ1B,kBAAAA;EACjC,MAAM2B,SAASH,UAAUE,QAAQjB,kBAAAA;EAEjCkB,OAAOC,MAAM,yBAAA;EAEb,MAAMC,SAAS,IAAI/B,IAAAA;EAEnB,KAAKgC,qBAAqBN,SAAAA;EAC1B,KAAKO,gBAAgBP,SAAAA;EAErB,MAAM,KAAKV,WAAWkB,YAAYH,QAAQL,SAAAA;EAC1C,MAAM,KAAKT,WAAWkB,MAAMJ,QAAQL,SAAAA;EACpC,MAAM,KAAKV,WAAWoB,WAAWL,QAAQL,SAAAA;EAEzC,MAAMW,SAASpC,MAAM8B,QAAQ;GACzBO,MAAMX,OAAOW;GACbC,UAAUZ,OAAOa;GACjBC,QAAQ;GAGRC,kBAAkB;EACtB,CAAA;EAEA,MAAML,OAAOM,MAAK;EAElB,KAAK5B,WAAWsB;EAEhB,IAAIA,OAAOO,KACPf,OAAOC,MAAM,gBAAgBO,OAAOO,KAAK;EAG7ClB,UAAUmB,SAASvC,iBAAiBwC,QAAQ,EAAEC,UAAUV,OAAO,CAAA;EAE/DR,OAAOC,MAAM,sBAAA;CACjB;;;;;;;;IAYA,qBAA+BJ,WAA6B;EACxD,IAAIA,UAAUsB,IAAI1C,iBAAiB2C,YAAY,GAC3C;EAGJvB,UAAUmB,SAASvC,iBAAiB2C,cAAc,EAC9CC,aAAaC,MAAAA;GACT,MAAMxB,SAASwB,EAAEvB,QAAQ1B,kBAAAA;GAMzB,MAAMmC,SAASc,EAAEH,IAAI1C,iBAAiBwC,MAAM,IACxCK,EAAEvB,QAAQtB,iBAAiBwC,MAAM,IACjCM,KAAAA;GAEJ,IAAIf,UAAUA,OAAOO,KACjB,OAAOzC,2BAA2B;IAC9BkD,WAAW1B,OAAO2B;IAClBC,aAAalB,OAAOO;GACxB,CAAA;GAGJ,OAAO,IAAI7C,OAAO,EAAEyD,SAAS7B,OAAO2B,UAAU,CAAA;EAClD,EACJ,GAAG,EAAEG,UAAU,YAAY,CAAA;EAE3B,KAAKvC,yBAAyB;CAClC;;;;;;;IASA,gBAA0BQ,WAA6B;EACnD,MAAMC,SAASD,UAAUE,QAAQ1B,kBAAAA;EAEjC,MAAMwD,UAAU,OAAO/B,OAAOgC,yBAAyB,aACnDhC,OAAOgC,yBAAyB;EAEpCjC,UAAUmB,SAAStC,qBAAqB,EACpCwC,UAAUW,UACN,IAAIlD,oBAAAA,IACJ,IAAIJ,oBAAAA,EACZ,CAAA;CACJ;CAIA,MAAMwD,SAASlC,WAAsC;EACjD,IAAI,KAAKR,wBAAwB;GAC7BQ,UAAUmC,WAAWvD,iBAAiB2C,YAAY;GAClD,KAAK/B,yBAAyB;EAClC;EAEAQ,UAAUmC,WAAWtD,mBAAAA;EAErB,IAAI,CAAC,KAAKQ,UAAU;EAEpBW,UAAUmC,WAAWvD,iBAAiBwC,MAAM;EAE5C,MAAM,KAAK/B,SAAS+C,MAAK;EACzB,KAAK/C,WAAWqC,KAAAA;CACpB;AACJ"}

package/dist/app/modules/http/modules/controller.d.ts

@@ -1,8 +1,8 @@
 import type { App } from 'routup';
-import { ClientController, ClientPermissionController, ClientRoleController, ClientScopeController, IdentityProviderController, IdentityProviderRoleMappingController, PermissionController, PermissionPolicyController, PolicyController, RealmController, RobotController, RobotPermissionController, RobotRoleController, RoleAttributeController, RoleController, RolePermissionController, ScopeController, SessionController, UserAttributeController, UserController, UserPermissionController, UserRoleController } from '../../../../adapters/http/index.ts';
-import { ActivateController, AuthorizeController, JwkController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController } from '../../../../adapters/http/controllers/index.ts';
+import { ClientController, ClientPermissionController, ClientRoleController, ClientScopeController, ConsentController, EventController, IdentityProviderController, IdentityProviderRoleMappingController, KeyController, PermissionController, PermissionPolicyController, PolicyController, RealmController, RobotController, RobotPermissionController, RobotRoleController, RoleAttributeController, RoleController, RolePermissionController, ScopeController, SessionController, TrustAnchorController, UserAttributeController, UserAuthenticatorController, UserController, UserPermissionController, UserRoleController } from '../../../../adapters/http/index.ts';
+import { ActivateController, AuthenticatorChallengeController, AuthorizeController, JwkController, LogoutController, OpenIDController, PasswordForgotController, PasswordResetController, RegisterController, StatusController, TokenController } from '../../../../adapters/http/controllers/index.ts';
 import type { IContainer } from 'eldin';
-import { PasswordRecoveryService, RegistrationService } from '../../../../core/index.ts';
+import { ConsentService, OAuth2AccessPolicyEvaluator, OAuth2MfaLoginService, PasswordRecoveryService, RegistrationService, UserAuthenticatorService } from '../../../../core/index.ts';
 import type { StatusResponseFeatures } from '@authup/core-http-kit';
 import type { Config } from '../../config/index.ts';
 export declare class HTTPControllerModule {
@@ -35,7 +35,20 @@ export declare class HTTPControllerModule {
     createRolePermissionController(container: IContainer): RolePermissionController;
     createPermissionPolicyController(container: IContainer): PermissionPolicyController;
     createScopeController(container: IContainer): ScopeController;
+    createKeyController(container: IContainer): KeyController;
+    createTrustAnchorController(container: IContainer): TrustAnchorController;
     createSessionController(container: IContainer): SessionController;
+    protected createConsentService(container: IContainer): ConsentService;
+    createConsentController(container: IContainer): ConsentController;
+    private accessPolicyEvaluator?;
+    protected resolveAccessPolicyEvaluator(container: IContainer): OAuth2AccessPolicyEvaluator;
+    private userAuthenticatorService?;
+    protected resolveUserAuthenticatorService(container: IContainer): UserAuthenticatorService;
+    createUserAuthenticatorController(container: IContainer): UserAuthenticatorController;
+    private mfaLoginService?;
+    protected resolveMfaLoginService(container: IContainer): OAuth2MfaLoginService;
+    createAuthenticatorChallengeController(container: IContainer): AuthenticatorChallengeController;
+    createEventController(container: IContainer): EventController;
     createUserController(container: IContainer): UserController;
     createUserAttributeController(container: IContainer): UserAttributeController;
     createUserPermissionController(container: IContainer): UserPermissionController;

package/dist/app/modules/http/modules/controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAwElC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,qCAAqC,EACrC,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EACrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EAClB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAUH,uBAAuB,EAOvB,mBAAmB,EAgBtB,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAKpD,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAiE9D,eAAe,CAAC,SAAS,EAAE,UAAU;IAsBrC,WAAW,CAAC,SAAS,EAAE,UAAU;IAgEjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAyBnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAqB5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAI,sBAAsB;IAQxD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAyB/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAoB3C,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,oBAAoB;IAOtB,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAkDtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IActD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,+BAA+B,CAAC,SAAS,EAAE,UAAU;IAcrD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAS/C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAM7C,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAiB1C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAyB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAc1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CA8B9C"}
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../../../src/app/modules/http/modules/controller.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AA4ElC,OAAO,EACH,gBAAgB,EAChB,0BAA0B,EAC1B,oBAAoB,EACpB,qBAAqB,EACrB,iBAAiB,EACjB,eAAe,EACf,0BAA0B,EAC1B,qCAAqC,EACrC,aAAa,EACb,oBAAoB,EACpB,0BAA0B,EAC1B,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,yBAAyB,EACzB,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,EACd,wBAAwB,EACxB,kBAAkB,EAErB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EACH,kBAAkB,EAClB,gCAAgC,EAChC,mBAAmB,EACnB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EAClB,MAAM,gDAAgD,CAAC;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AACxC,OAAO,EAMH,cAAc,EAMd,2BAA2B,EAG3B,qBAAqB,EACrB,uBAAuB,EAQvB,mBAAmB,EAanB,wBAAwB,EAK3B,MAAM,2BAA2B,CAAC;AAInC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAOpD,qBAAa,oBAAoB;IACvB,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA4E9D,eAAe,CAAC,SAAS,EAAE,UAAU;IAmCrC,WAAW,CAAC,SAAS,EAAE,UAAU;IAsFjC,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAYpD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,6BAA6B,CAAC,SAAS,EAAE,UAAU;IA0BnD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAY9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAsB5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAM5C,eAAe,CAAC,MAAM,EAAE,MAAM,GAAI,sBAAsB;IAQxD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IA0B/C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAoC5C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAiB5C,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAoB3C,OAAO,CAAC,0BAA0B;IAOlC,OAAO,CAAC,oBAAoB;IAOtB,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAkDtD,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAe1C,gCAAgC,CAAC,SAAS,EAAE,UAAU;IActD,0BAA0B,CAAC,SAAS,EAAE,UAAU;IAShD,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAQjD,+BAA+B,CAAC,SAAS,EAAE,UAAU;IAcrD,yBAAyB,CAAC,SAAS,EAAE,UAAU;IAS/C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,gCAAgC,CAAC,SAAS,EAAE,UAAU;IAQtD,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAe3C,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAWzC,2BAA2B,CAAC,SAAS,EAAE,UAAU;IAYjD,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAM7C,SAAS,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAI,cAAc;IAKtE,uBAAuB,CAAC,SAAS,EAAE,UAAU;IAI7C,OAAO,CAAC,qBAAqB,CAAC,CAA+B;IAE7D,SAAS,CAAC,4BAA4B,CAAC,SAAS,EAAE,UAAU,GAAI,2BAA2B;IAgB3F,OAAO,CAAC,wBAAwB,CAAC,CAA4B;IAE7D,SAAS,CAAC,+BAA+B,CAAC,SAAS,EAAE,UAAU,GAAI,wBAAwB;IAsD3F,iCAAiC,CAAC,SAAS,EAAE,UAAU;IAIvD,OAAO,CAAC,eAAe,CAAC,CAAyB;IAEjD,SAAS,CAAC,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAI,qBAAqB;IAkB/E,sCAAsC,CAAC,SAAS,EAAE,UAAU;IAQ5D,qBAAqB,CAAC,SAAS,EAAE,UAAU;IAK3C,oBAAoB,CAAC,SAAS,EAAE,UAAU;IAiB1C,6BAA6B,CAAC,SAAS,EAAE,UAAU;IAYnD,8BAA8B,CAAC,SAAS,EAAE,UAAU;IAcpD,wBAAwB,CAAC,SAAS,EAAE,UAAU;IAS9C,sBAAsB,CAAC,SAAS,EAAE,UAAU;IAyB5C,oCAAoC,CAAC,SAAS,EAAE,UAAU;IAc1D,mBAAmB,CAAC,SAAS,EAAE,UAAU;IAMzC,qBAAqB,CAAC,SAAS,EAAE,UAAU;CAuC9C"}